last executing test programs: 33.407186447s ago: executing program 3 (id=77): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/net/bridge0/bridge/multicast_snooping\x00', 0x1, 0x0) write(r0, &(0x7f0000000440)='1\n', 0x2) 33.099027094s ago: executing program 3 (id=81): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x40) 32.793746302s ago: executing program 3 (id=87): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, 0x0, 0x88302, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x800, 0x4) read$char_usb(r2, &(0x7f0000000040)=""/236, 0xec) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r5, {}, {0x4, 0xa}, {0x1, 0x5}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x1}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x5}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80c4}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'}) 31.642114179s ago: executing program 3 (id=89): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000440)='1\n', 0x2) 31.527104202s ago: executing program 3 (id=91): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000340)='proto\x00', &(0x7f0000000380)='proto\x00', 0x0) 31.267347639s ago: executing program 3 (id=96): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./export_dir\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd_mnt/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='-2 -3 +4\n', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/client_tracking_method\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='none\n', 0x5) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd_mnt/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='tcp 2049\n', 0x9) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc_mnt/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r4, &(0x7f0000000440)='localhost / 2147483647 0 0 0 0\n', 0x1f) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./proc_mnt/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0) write(r5, &(0x7f00000004c0)='localhost 1 \\x00 2147483647 /\n', 0x1e) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd_mnt/threads\x00', 0x1, 0x0) write(r6, &(0x7f0000000540)='1\n', 0x2) close(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./nfs_mnt\x00', 0x1ff) mount(&(0x7f00000005c0)=@filename='127.0.0.1:/\x00', &(0x7f0000000600)='./nfs_mnt\x00', &(0x7f0000000640)='nfs4\x00', 0x0, &(0x7f0000000680)='addr=127.0.0.1,clientaddr=127.0.0.1\x00') setxattr(&(0x7f00000006c0)='./nfs_mnt\x00', &(0x7f0000000700)=@known='system.posix_acl_access\x00', &(0x7f0000000740)='\x02\x00\x00\x00\x01\x00\a\x00\xff\xff\xff\xff\x04\x00\x05\x00\xff\xff\xff\xff \x00\x05\x00\xff\xff\xff\xff', 0x1c, 0x0) 29.732872776s ago: executing program 0 (id=106): sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(0x0, r0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x3c, r1, 0x5, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x3c}}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r2, &(0x7f0000000300)={0x2, 0x4e21, @private=0xa010101}, 0x10) listen(r2, 0x5) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, &(0x7f0000000400)={0x2, 0x4e21, @private=0xa010101}, 0x10) 29.127420021s ago: executing program 0 (id=108): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x1234}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x4}]}, 0x34}}, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f0000000100)=0x1, 0x4) r3 = socket$inet(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x1235, @loopback}, 0x10) sendto$inet(r3, &(0x7f0000000300)="4500002000010000401100007f0000017f00000112351234000c00004500001400000000400400007f0000017f000001", 0x2c, 0x0, &(0x7f0000000400)={0x2, 0x1234, @loopback}, 0x10) recvfrom$inet(r3, &(0x7f0000000500), 0x100, 0x0, 0x0, 0x0) 28.230530343s ago: executing program 0 (id=112): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000080)={&(0x7f0000000000), 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x18, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x4}]}, 0x18}}, 0x0) 28.122617385s ago: executing program 0 (id=113): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000340)='proto\x00', &(0x7f0000000380)='proto\x00', 0x0) 27.990599039s ago: executing program 0 (id=115): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/net/sctp/addip_enable\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/addip_noauth_enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='1', 0x1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @local={0x7f, 0x0, 0x0, 0x1}}, 0x10) listen(r2, 0x5) r3 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r3, &(0x7f0000000300)={0x2, 0x4e20, @local={0x7f, 0x0, 0x0, 0x1}}, 0x10) r4 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e20, @local={0x7f, 0x0, 0x0, 0x1}}}}, 0x84) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e20, @local={0x7f, 0x0, 0x0, 0x1}}}}, 0x84) 27.875181601s ago: executing program 2 (id=117): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) 27.863886242s ago: executing program 2 (id=118): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="000008004500003c000000004084ca2502020202ac14000104d2321000000000"], 0x40) 27.721477065s ago: executing program 2 (id=119): mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000b00)='./sys\x00', &(0x7f0000000c00)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='10 2\n\x00', 0x5) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/netdevsim/devices/netdevsim10/sriov_numvfs\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='4\n\x00', 0x2) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newlinkprop={0x48, 0x6c, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_ALT_IFNAME={0x14, 0x35, 'netdevsim0\x00'}]}, 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)=@getlink={0x3c, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_EXT_MASK={0x8, 0x1d, 0x1}]}, 0x34}}, 0x0) 27.555412109s ago: executing program 2 (id=120): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, 0x0, 0x88302, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x800, 0x4) read$char_usb(r2, &(0x7f0000000040)=""/236, 0xec) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r5, {}, {0x4, 0xa}, {0x1, 0x5}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x1}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x5}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80c4}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'}) 27.09564937s ago: executing program 0 (id=123): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='nfsd\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='2049\x00', 0x5) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f00000002c0)='1\x00', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='\\x01\\x00\\x00\\x00 2000000000 0 0 0 krb5 \\x01\\x00\\x00\\x00\\xff\\xff\\xff\\x7f\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x11\\x00\\x00\\x00\\x00\\x01\\x02\\x03\\x04\\x05\\x06\\x07\\x08\\x09\\x0a\\x0b\\x0c\\x0d\\x0e\\x0f\\n', 0x7d) close(r2) r3 = socket(0x2, 0x1, 0x6) connect(r3, &(0x7f0000000500)=@in={0x2, 0x7f08, @loopback}, 0x10) write(r3, &(0x7f0000000600)="80000070123456780000000000000002000186a300000003000000000000000600000024000000010000000100000001000000020000000401000000000000060000000800000001000000000000000100000020040405ff00000000000000000000000100"/116, 0x74) read(r3, &(0x7f0000000800)=""/256, 0x100) close(r3) 26.640185572s ago: executing program 2 (id=128): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x1001}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r2, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x1, 0x1000001}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x34, r2, 0x1, 0x0, 0x0, {{}, {0x0, 0x8041}, {0x1c, 0x1, {0x1, 0x0, @l2={'eth', 0x3a, 'syz_tun\x00'}}}}}, 0x34}}, 0x0) socket$packet(0x11, 0x3, 0xca88) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000300)=@nameseq={0x1e, 0x2, 0x0, {0x3e8, 0x1, 0x1}}, 0x10) sendmsg$tipc(r3, &(0x7f0000000400)={&(0x7f0000000300)=@name={0x1e, 0x3, 0x0, {{0x3e8, 0x1}, 0x1000001}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000480)='hello world', 0xb}], 0x1}, 0x0) write(r0, &(0x7f0000000500)="ffffffffffff00000000000188ca2000002800000001010000010100000200"/50, 0x32) write(r0, &(0x7f0000000600)="ffffffffffff00000000000188ca2000002800000002010000010100000200"/50, 0x32) sendmsg$tipc(r3, &(0x7f0000000400)={&(0x7f0000000300)=@name={0x1e, 0x3, 0x0, {{0x3e8, 0x1}, 0x1000001}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000480)='hello world', 0xb}], 0x1}, 0x0) nanosleep(&(0x7f0000000700)={0x0, 0x989680}, 0x0) write(r0, &(0x7f0000000800)="ffffffffffff00000000000188ca200000280000000001000001010000020000000000000000000000000000000100010000", 0x32) 26.444288866s ago: executing program 2 (id=131): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='0\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='2049\n', 0x5) write(r0, &(0x7f0000000100)='1\n', 0x2) 26.31220108s ago: executing program 1 (id=133): r0 = fsopen(&(0x7f0000000040)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f0000000380)='proto\x00', 0x0) 26.230419411s ago: executing program 1 (id=134): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000280)={0xffffffffffffffff, 0x1, 0x100000000, 0x100000000}) r1 = mq_open(&(0x7f0000000080)='GPL\x00', 0x980, 0x80, &(0x7f0000000140)={0x4, 0x2, 0x6, 0xd581}) mq_notify(r1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioprio_set$pid(0x2, 0x0, 0x2000) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000480)={0x7f, 0xffff, 0x1, 'queue1\x00', 0x4}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_enter(0xffffffffffffffff, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r5) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x1, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16=r6, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a2c0000000b0a01010000000000000000070000000900020073797a31000000000900010073647a3000000000140000001000010008000000000000000084400afccffe30561b302ac842e12b76d335ff8aeb05d99e21b723644746e09465351201bef9bdb91ce72a90f57a7c3e8241049672a206f520a8e0546cfff94c7c42a203acf447b5679db4e22706d2ee407a9c8dedf2c0558a1cd0fda5921c9b576b739c55a2d9e01c3bd22e422ecbb5e6622f6011819ca4edf0728e13583dd4989c7ea7b9e2b44abd2311ac44606fc8b1fab4c126049fb8bc76ca52e29a3e4853"], 0x54}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000160080ff0000000000000000850000002c00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 25.627103686s ago: executing program 1 (id=135): r0 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1f90, @loopback}, 0x10) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000100)='espintcp\x00', 0x9) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newsa={0x10c, 0x10, 0x5, 0x0, 0x0, {{@in=@loopback, @in=@loopback, 0x1f90, 0xffff, 0x1f90, 0xffff, 0x2, 0x20, 0x20, 0x6}, {@in=@loopback, 0x1234, 0x32}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0x2}, [@encap={0x1c, 0x4, {0x7, 0x1f90, 0x1f90, @in=@loopback}}]}, 0x10c}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x6) connect$inet(r2, &(0x7f0000000600)={0x2, 0x1f90, @loopback}, 0x10) sendto(r2, &(0x7f0000000700)='test', 0x4, 0x0, 0x0, 0x0) 24.728639408s ago: executing program 1 (id=136): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, 0x0, 0x88302, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x800, 0x4) read$char_usb(r2, &(0x7f0000000040)=""/236, 0xec) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r5, {}, {0x4, 0xa}, {0x1, 0x5}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x1}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x5}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80c4}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'}) 23.82903568s ago: executing program 1 (id=137): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="000008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400008000"], 0x40) 23.660040154s ago: executing program 1 (id=138): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/100, 0x64) 15.700940498s ago: executing program 32 (id=96): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./export_dir\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd_mnt/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='-2 -3 +4\n', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/client_tracking_method\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='none\n', 0x5) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd_mnt/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='tcp 2049\n', 0x9) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc_mnt/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r4, &(0x7f0000000440)='localhost / 2147483647 0 0 0 0\n', 0x1f) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./proc_mnt/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0) write(r5, &(0x7f00000004c0)='localhost 1 \\x00 2147483647 /\n', 0x1e) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd_mnt/threads\x00', 0x1, 0x0) write(r6, &(0x7f0000000540)='1\n', 0x2) close(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./nfs_mnt\x00', 0x1ff) mount(&(0x7f00000005c0)=@filename='127.0.0.1:/\x00', &(0x7f0000000600)='./nfs_mnt\x00', &(0x7f0000000640)='nfs4\x00', 0x0, &(0x7f0000000680)='addr=127.0.0.1,clientaddr=127.0.0.1\x00') setxattr(&(0x7f00000006c0)='./nfs_mnt\x00', &(0x7f0000000700)=@known='system.posix_acl_access\x00', &(0x7f0000000740)='\x02\x00\x00\x00\x01\x00\a\x00\xff\xff\xff\xff\x04\x00\x05\x00\xff\xff\xff\xff \x00\x05\x00\xff\xff\xff\xff', 0x1c, 0x0) 11.945116159s ago: executing program 33 (id=123): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='nfsd\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='2049\x00', 0x5) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f00000002c0)='1\x00', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='\\x01\\x00\\x00\\x00 2000000000 0 0 0 krb5 \\x01\\x00\\x00\\x00\\xff\\xff\\xff\\x7f\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x11\\x00\\x00\\x00\\x00\\x01\\x02\\x03\\x04\\x05\\x06\\x07\\x08\\x09\\x0a\\x0b\\x0c\\x0d\\x0e\\x0f\\n', 0x7d) close(r2) r3 = socket(0x2, 0x1, 0x6) connect(r3, &(0x7f0000000500)=@in={0x2, 0x7f08, @loopback}, 0x10) write(r3, &(0x7f0000000600)="80000070123456780000000000000002000186a300000003000000000000000600000024000000010000000100000001000000020000000401000000000000060000000800000001000000000000000100000020040405ff00000000000000000000000100"/116, 0x74) read(r3, &(0x7f0000000800)=""/256, 0x100) close(r3) 11.92096775s ago: executing program 4 (id=146): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="000008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400008000"], 0x40) 10.892035764s ago: executing program 34 (id=131): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='0\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='2049\n', 0x5) write(r0, &(0x7f0000000100)='1\n', 0x2) 8.711649198s ago: executing program 4 (id=148): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a0a, @loopback}, 0x10) listen(r0, 0x5) r1 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='source\x00', &(0x7f0000000300)='127.0.0.1:6666:/\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = accept4$inet(r0, 0x0, 0x0, 0x800) write(r2, &(0x7f0000000400)='cephv2\n\x00'/21, 0x15) 7.628306814s ago: executing program 35 (id=138): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/100, 0x64) 7.575766156s ago: executing program 4 (id=150): r0 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1b59, @loopback}}, 0x24, &(0x7f0000000000)=[{&(0x7f0000000080)='A', 0x1}], 0x1, &(0x7f0000000140)=[{0x18, 0x110, 0x1, "123456789abcdef0"}], 0x18}, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1b59, @loopback}}, 0x24, 0x0, 0x0, &(0x7f0000000300)=[{0x18, 0x110, 0x1, "123456789abcdef0"}, {0x14, 0x110, 0x2, "01000000"}], 0x2c}, 0x0) nanosleep(&(0x7f0000000500)={0x2}, 0x0) 6.54991772s ago: executing program 4 (id=151): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(&(0x7f0000000440)=@filename='none\x00', &(0x7f0000000480)='./proc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/sctp/parameters/no_checksums\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\n', 0x2) write(0xffffffffffffffff, &(0x7f00000001c0)='1\n', 0x2) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x5) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @loopback}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0800450000240000000040847c547f0000017f0000014e214e20123456780000000006000400"], 0x0) 6.239254918s ago: executing program 4 (id=153): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x2, @local}, 0x10) connect$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x2, @remote}, 0x10) 5.207754213s ago: executing program 4 (id=155): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='tcp 2049\x00', 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='127.0.0.1:/\x00', &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)='nfs\x00', 0x0, &(0x7f00000002c0)='addr=127.0.0.1\x00') r2 = fsopen(&(0x7f0000000300)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000340)='source\x00', &(0x7f0000000380)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000003c0)='addr\x00', &(0x7f0000000400)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 5.082551846s ago: executing program 5 (id=156): r0 = socket$nl_route(0xa, 0x3, 0x0) write(r0, &(0x7f0000000000)="580000001800050400000000000000000a8000000000000000000000000000001400010020010db800010000000000000000000106001500030000002000160010000100010203040506070805000800010000000500070000000000", 0x58) write(r0, &(0x7f0000000100)="240000001a00010000000000000000000a00"/36, 0x24) 4.643164596s ago: executing program 5 (id=157): r0 = fsopen(&(0x7f0000000040)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000340)='proto\x00', 0x0, 0x0) 4.49686704s ago: executing program 5 (id=159): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(&(0x7f0000000440)=@filename='none\x00', &(0x7f0000000480)='./proc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/sctp/parameters/no_checksums\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\n', 0x2) write(0xffffffffffffffff, &(0x7f00000001c0)='1\n', 0x2) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x5) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @loopback}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0800450000240000000040847c547f0000017f0000014e214e20123456780000000006000400"], 0x0) 3.480802395s ago: executing program 5 (id=160): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x0, 0x0, 0x0, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}}}]}, 0x48}}, 0x0) 3.375855318s ago: executing program 6 (id=161): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0x0, 0xc8, 0x198, 0x0, 0x0, 0x0, 0xc8, 0x198, 0x0, 0x0, 0x4, 0x0, {[{{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan0\x00', 'ip6gre0\x00', {}, {}, 0x73}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'ip6_vti0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x2f8) 3.246974901s ago: executing program 5 (id=162): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1001}) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', 0x1}) 3.128083244s ago: executing program 6 (id=163): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) listen(r0, 0x5) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000100)="00000001000000010000000100000001000000010101000000010001", 0x1c, 0x0, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) recvfrom$rxrpc(r0, &(0x7f0000000300), 0x100, 0x40, 0x0, 0x0) 2.979758997s ago: executing program 6 (id=164): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind(r0, &(0x7f0000000000)=@in={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x1) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) write$sysctl(r1, &(0x7f0000000200)='2\x00', 0x1) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000300)={0x2, 0x4e20, @loopback}, 0x10) 2.86699323s ago: executing program 5 (id=165): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='none\x00', &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, &(0x7f0000000180)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='-2 -3\n', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='3\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000340)='1\n', 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000380)={0x2, 0x801, @loopback}, 0x10) write(r4, &(0x7f00000003c0)="80000040000000010000000000000002000186a30000000400000001000000010000001400000001000000000000000000000000000000000000000000000000000000000000000100000018", 0x44) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./proc\x00', 0x1ff) mount(&(0x7f0000000480)=@filename='none\x00', &(0x7f00000004c0)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, &(0x7f0000000540)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r5, &(0x7f00000005c0)='nfsd 127.0.0.1 999999999 anonymous\n', 0x23) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r6, &(0x7f0000000640)='127.0.0.1 / 999999999 0 0 0 0\n', 0x1e) 1.902676994s ago: executing program 6 (id=166): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffff, 0x2}}]}, 0x28}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0x7, 0x4, 0x258, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @remote, 0x0, 0x0, 'lo\x00', '\x00', {}, {0xff}, 0x32}, 0x0, 0xa0, 0x108}, @common=@unspec=@NFQUEUE0={0x20}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'lo\x00', 'lo\x00', {0xff}, {0xff}}, 0x0, 0x70, 0xb8}, @common=@unspec=@NFQUEUE0={0x20}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'lo\x00', 'lo\x00', {0xff}, {0xff}}, 0x0, 0x70, 0xb8}, @common=@unspec=@NFQUEUE0={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x20, '\x00', 0x0, 0xfffffffd}}}}, 0x2b8) sendto$inet(r1, &(0x7f0000000000)="12345678", 0x8, 0x0, &(0x7f0000000020)={0x2, 0x1234, @loopback}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) 1.707186268s ago: executing program 6 (id=167): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(&(0x7f0000000440)=@filename='none\x00', &(0x7f0000000480)='./proc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/sctp/parameters/no_checksums\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\n', 0x2) write(0xffffffffffffffff, &(0x7f00000001c0)='1\n', 0x2) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x5) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @loopback}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0800450000240000000040847c547f0000017f0000014e214e20123456780000000006000400"], 0x0) 1.661650179s ago: executing program 7 (id=149): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'syz_tun\x00', {0x2, 0x1234, @private=0x1010101}}) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000100)=0x2, 0x4) bind$rds(r1, &(0x7f0000000200)={0x2, 0x1234, @private=0x1010101}, 0x10) sendmsg$rds(r1, &(0x7f0000000300)={&(0x7f0000000400)={0x2, 0x1234, @private=0x2010101}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000600)=""/4, 0x8}], 0x1}, 0x0) nanosleep(&(0x7f0000000700)={0x0, 0x1dcd6500}, 0x0) 776.814371ms ago: executing program 6 (id=168): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, 0x0, 0x88302, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x800, 0x4) read$char_usb(r2, &(0x7f0000000040)=""/236, 0xec) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r5, {}, {0x4, 0xa}, {0x1, 0x5}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x1}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x5}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80c4}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'}) 715.155703ms ago: executing program 7 (id=169): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='rpc_pipefs\x00', &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) r0 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x0) r1 = fsopen(&(0x7f0000000e00)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x0) r2 = fsopen(&(0x7f0000001000)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x0) r3 = fsopen(&(0x7f0000001200)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 218.507044ms ago: executing program 7 (id=170): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000080)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x12345678}]}]}, 0x24}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={&(0x7f0000000200), 0xc, &(0x7f0000000240)={&(0x7f0000000280)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "0102030405060708090a0b0c0d0e0f1011121314"}}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={&(0x7f0000000340), 0xc, &(0x7f0000000380)={&(0x7f00000003c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 47.174488ms ago: executing program 7 (id=171): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) listen(r0, 0x5) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x10, 0x110, 0x1}], 0x28}, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x10, 0x110, 0x2}], 0x28}, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x10, 0x110, 0x3}], 0x28}, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x10, 0x110, 0x4}], 0x28}, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x10, 0x110, 0x5}], 0x28}, 0x0) 0s ago: executing program 7 (id=172): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a85, @loopback}, 0x10) listen(r0, 0x5) r1 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='source\x00', &(0x7f0000000300)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='ms_mode\x00', &(0x7f0000000500)='crc\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000600)='mount_timeout\x00', &(0x7f0000000700)='5\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = accept$inet(r0, 0x0, 0x0) read(r2, &(0x7f0000000800)=""/100, 0x64) write(r2, &(0x7f0000000900)='ceph v2\n\x00'/28, 0x1c) shutdown(r2, 0x2) close(r2) close(r0) nanosleep(&(0x7f0000000a00)={0x2}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.157' (ED25519) to the list of known hosts. [ 76.944533][ T5762] cgroup: Unknown subsys name 'net' [ 77.084595][ T5762] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.817171][ T5762] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.562239][ T5787] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.565331][ T5788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.577407][ T5788] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.585839][ T5788] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.587213][ T5787] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.600673][ T5787] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.608178][ T5788] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.626199][ T5788] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.635366][ T5788] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.642614][ T5792] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.650887][ T5792] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 80.659004][ T5792] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 80.660947][ T5790] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.667034][ T5792] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.680504][ T5788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.696431][ T5790] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.706680][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.715433][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.723273][ T52] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 80.731172][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.751151][ T5791] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.759449][ T5791] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.771041][ T5791] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 80.778657][ T5791] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.208866][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 81.294849][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 81.420285][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 81.431298][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 81.449887][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.457844][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.465135][ T5777] bridge_slave_0: entered allmulticast mode [ 81.472722][ T5777] bridge_slave_0: entered promiscuous mode [ 81.524710][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.532233][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.539984][ T5777] bridge_slave_1: entered allmulticast mode [ 81.547602][ T5777] bridge_slave_1: entered promiscuous mode [ 81.573715][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.580948][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.591208][ T5779] bridge_slave_0: entered allmulticast mode [ 81.598365][ T5779] bridge_slave_0: entered promiscuous mode [ 81.634910][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.642264][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.649538][ T5779] bridge_slave_1: entered allmulticast mode [ 81.657285][ T5779] bridge_slave_1: entered promiscuous mode [ 81.712337][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.725117][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.793698][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.807572][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.839656][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.847159][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.854317][ T5776] bridge_slave_0: entered allmulticast mode [ 81.861722][ T5776] bridge_slave_0: entered promiscuous mode [ 81.871196][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.878534][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.885703][ T5776] bridge_slave_1: entered allmulticast mode [ 81.893372][ T5776] bridge_slave_1: entered promiscuous mode [ 81.913629][ T5777] team0: Port device team_slave_0 added [ 81.923918][ T5777] team0: Port device team_slave_1 added [ 81.930298][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.937524][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.944699][ T5775] bridge_slave_0: entered allmulticast mode [ 81.952144][ T5775] bridge_slave_0: entered promiscuous mode [ 81.960889][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.968166][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.975319][ T5775] bridge_slave_1: entered allmulticast mode [ 81.982457][ T5775] bridge_slave_1: entered promiscuous mode [ 82.054296][ T5779] team0: Port device team_slave_0 added [ 82.063306][ T5779] team0: Port device team_slave_1 added [ 82.070974][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.078119][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.104321][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.135024][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.155310][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.162895][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.190132][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.204406][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.217571][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.228765][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.292184][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.299601][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.333693][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.347585][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.354586][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.382361][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.397084][ T5775] team0: Port device team_slave_0 added [ 82.414925][ T5775] team0: Port device team_slave_1 added [ 82.453757][ T5776] team0: Port device team_slave_0 added [ 82.491902][ T5776] team0: Port device team_slave_1 added [ 82.514826][ T5777] hsr_slave_0: entered promiscuous mode [ 82.521771][ T5777] hsr_slave_1: entered promiscuous mode [ 82.540503][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.547613][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.574066][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.597090][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.604077][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.630106][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.648308][ T5779] hsr_slave_0: entered promiscuous mode [ 82.655086][ T5779] hsr_slave_1: entered promiscuous mode [ 82.662086][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.670058][ T5779] Cannot create hsr debugfs directory [ 82.678409][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.685378][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.711646][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.723062][ T5791] Bluetooth: hci3: command tx timeout [ 82.731994][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.739445][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.765620][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.796086][ T5791] Bluetooth: hci2: command tx timeout [ 82.876188][ T5791] Bluetooth: hci1: command tx timeout [ 82.876210][ T52] Bluetooth: hci0: command tx timeout [ 82.941533][ T5776] hsr_slave_0: entered promiscuous mode [ 82.948317][ T5776] hsr_slave_1: entered promiscuous mode [ 82.954547][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.963241][ T5776] Cannot create hsr debugfs directory [ 83.035910][ T5775] hsr_slave_0: entered promiscuous mode [ 83.043241][ T5775] hsr_slave_1: entered promiscuous mode [ 83.049804][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.057462][ T5775] Cannot create hsr debugfs directory [ 83.393462][ T5779] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.405200][ T5779] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.423873][ T5779] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.453184][ T5779] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.506232][ T5777] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.520123][ T5777] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.531664][ T5777] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.542345][ T5777] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.641667][ T5776] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.663316][ T5776] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.700243][ T5776] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.720612][ T5776] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.790261][ T5775] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.800851][ T5775] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.825721][ T5775] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.838049][ T5775] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.901642][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.982894][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.002753][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.045276][ T2933] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.052622][ T2933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.069551][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.088558][ T3510] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.095692][ T3510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.139894][ T3510] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.147120][ T3510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.172474][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.186662][ T3510] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.193811][ T3510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.234508][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.251062][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.299401][ T3510] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.306630][ T3510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.321649][ T3510] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.328890][ T3510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.344601][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.367098][ T3510] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.374266][ T3510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.391782][ T3510] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.399018][ T3510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.796330][ T5791] Bluetooth: hci3: command tx timeout [ 84.850466][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.877419][ T5791] Bluetooth: hci2: command tx timeout [ 84.957988][ T5791] Bluetooth: hci1: command tx timeout [ 84.963493][ T5791] Bluetooth: hci0: command tx timeout [ 85.009459][ T5779] veth0_vlan: entered promiscuous mode [ 85.024311][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.054692][ T5779] veth1_vlan: entered promiscuous mode [ 85.164297][ T5777] veth0_vlan: entered promiscuous mode [ 85.173847][ T5779] veth0_macvtap: entered promiscuous mode [ 85.191095][ T5779] veth1_macvtap: entered promiscuous mode [ 85.213878][ T5777] veth1_vlan: entered promiscuous mode [ 85.254603][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.273692][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.294245][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.311588][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.332245][ T5779] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.346188][ T5779] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.354928][ T5779] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.365370][ T5779] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.392392][ T5777] veth0_macvtap: entered promiscuous mode [ 85.417916][ T5777] veth1_macvtap: entered promiscuous mode [ 85.514419][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.535371][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.550378][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.562964][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.574934][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.588221][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.619450][ T5776] veth0_vlan: entered promiscuous mode [ 85.655611][ T5777] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.665881][ T5777] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.675861][ T5777] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.686433][ T5777] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.722457][ T5776] veth1_vlan: entered promiscuous mode [ 85.729848][ T128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.739419][ T128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.752319][ T5775] veth0_vlan: entered promiscuous mode [ 85.781907][ T5775] veth1_vlan: entered promiscuous mode [ 85.859101][ T128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.880616][ T128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.899120][ T5776] veth0_macvtap: entered promiscuous mode [ 85.910719][ T5776] veth1_macvtap: entered promiscuous mode [ 85.955421][ T3510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.971110][ T3510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.011564][ T5775] veth0_macvtap: entered promiscuous mode [ 86.041772][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.053240][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.064226][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.074844][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.088559][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.121102][ T3510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.129310][ T3510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.153882][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.176023][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.207470][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.218568][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.241371][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.265284][ T5775] veth1_macvtap: entered promiscuous mode [ 86.305075][ T5776] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.336027][ T5776] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.344804][ T5776] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.380650][ T5776] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.444866][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.465453][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.476711][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.497090][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.515095][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.527574][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.550028][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.575099][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.586266][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.604709][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.631870][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.643657][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.661564][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.675037][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.703300][ T5775] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.718250][ T5775] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.729795][ T5775] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.743368][ T5775] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.866789][ T2198] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.874680][ T2198] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.886163][ T5791] Bluetooth: hci3: command tx timeout [ 86.957351][ T5791] Bluetooth: hci2: command tx timeout [ 87.023813][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.036580][ T5791] Bluetooth: hci0: command tx timeout [ 87.042039][ T5791] Bluetooth: hci1: command tx timeout [ 87.064691][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.124302][ T3510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.146037][ T3510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.243029][ T128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.278947][ T128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.961560][ T5791] Bluetooth: hci3: command tx timeout [ 89.037260][ T5791] Bluetooth: hci2: command tx timeout [ 89.118245][ T5791] Bluetooth: hci1: command tx timeout [ 89.123824][ T52] Bluetooth: hci0: command tx timeout [ 89.256823][ T5884] (null): rxe_set_mtu: Set mtu to 4096 [ 89.264463][ T5884] lo speed is unknown, defaulting to 1000 [ 89.281867][ T5884] lo speed is unknown, defaulting to 1000 [ 89.292704][ T5884] lo speed is unknown, defaulting to 1000 [ 89.309102][ T5885] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 89.329121][ T5886] (null): rxe_set_mtu: Set mtu to 4096 [ 89.347130][ T5886] lo speed is unknown, defaulting to 1000 [ 89.387251][ T5886] lo speed is unknown, defaulting to 1000 [ 89.396833][ T5886] lo speed is unknown, defaulting to 1000 [ 89.553230][ T2133] lo speed is unknown, defaulting to 1000 [ 89.559905][ T5884] infiniband syz0: set active [ 89.565861][ T5884] infiniband syz0: added lo [ 89.684320][ T5884] RDS/IB: syz0: added [ 89.699807][ T5884] smc: adding ib device syz0 with port count 1 [ 89.734324][ T5884] smc: ib device syz0 port 1 has pnetid [ 89.742435][ T23] lo speed is unknown, defaulting to 1000 [ 89.753374][ T5884] lo speed is unknown, defaulting to 1000 [ 90.518264][ T5884] lo speed is unknown, defaulting to 1000 [ 91.432168][ T5917] FAULT_INJECTION: forcing a failure. [ 91.432168][ T5917] name fail_futex, interval 1, probability 0, space 0, times 1 [ 91.456268][ T5917] CPU: 1 PID: 5917 Comm: syz.0.26 Not tainted syzkaller #0 [ 91.463537][ T5917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 91.473652][ T5917] Call Trace: [ 91.476976][ T5917] [ 91.479945][ T5917] dump_stack_lvl+0x18c/0x250 [ 91.484708][ T5917] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 91.490397][ T5917] ? show_regs_print_info+0x20/0x20 [ 91.495661][ T5917] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 91.501349][ T5917] should_fail_ex+0x394/0x4c0 [ 91.506081][ T5917] get_futex_key+0x136/0x1030 [ 91.510816][ T5917] ? futex_wait+0x4a0/0x5c0 [ 91.515369][ T5917] ? futex_setup_timer+0xc0/0xc0 [ 91.520366][ T5917] futex_wake+0x127/0x4f0 [ 91.524760][ T5917] ? futex_wake_mark+0x150/0x150 [ 91.529735][ T5917] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 91.536013][ T5917] ? lockdep_hardirqs_on+0x98/0x150 [ 91.541242][ T5917] do_futex+0x35d/0x3e0 [ 91.545420][ T5917] ? _copy_from_user+0xa5/0xe0 [ 91.550212][ T5917] ? __ia32_sys_get_robust_list+0x110/0x110 [ 91.556138][ T5917] __se_sys_futex+0x3a9/0x440 [ 91.560843][ T5917] ? __x64_sys_futex+0xf0/0xf0 [ 91.565644][ T5917] ? __x64_sys_futex+0x21/0xf0 [ 91.570436][ T5917] do_syscall_64+0x55/0xb0 [ 91.574880][ T5917] ? clear_bhb_loop+0x40/0x90 [ 91.579590][ T5917] ? clear_bhb_loop+0x40/0x90 [ 91.584298][ T5917] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 91.590216][ T5917] RIP: 0033:0x7f9e64b9de99 [ 91.594670][ T5917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.614305][ T5917] RSP: 002b:00007ffe4dc9b198 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 91.622755][ T5917] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9e64b9de99 [ 91.630744][ T5917] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9e64e25fa8 [ 91.638738][ T5917] RBP: 0000000000001530 R08: 0000000000000008 R09: 0000000000000000 [ 91.646732][ T5917] R10: 00007f9e64e25fa0 R11: 0000000000000246 R12: 0000000000000000 [ 91.654723][ T5917] R13: 00007f9e64e25fac R14: 00007f9e64e25fa8 R15: 00007f9e64e25fa0 [ 91.662732][ T5917] [ 91.762397][ T5917] FAULT_INJECTION: forcing a failure. [ 91.762397][ T5917] name fail_futex, interval 1, probability 0, space 0, times 0 [ 91.787221][ T5884] lo speed is unknown, defaulting to 1000 [ 91.793301][ T5917] CPU: 1 PID: 5917 Comm: syz.0.26 Not tainted syzkaller #0 [ 91.800564][ T5917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 91.810658][ T5917] Call Trace: [ 91.813990][ T5917] [ 91.816959][ T5917] dump_stack_lvl+0x18c/0x250 [ 91.821690][ T5917] ? show_regs_print_info+0x20/0x20 [ 91.826941][ T5917] ? load_image+0x420/0x420 [ 91.831502][ T5917] ? do_futex+0x35d/0x3e0 [ 91.835882][ T5917] ? _copy_from_user+0xa5/0xe0 [ 91.840691][ T5917] ? __ia32_sys_get_robust_list+0x110/0x110 [ 91.846629][ T5917] should_fail_ex+0x394/0x4c0 [ 91.851456][ T5917] __se_sys_futex+0x181/0x440 [ 91.856181][ T5917] ? __x64_sys_futex+0xf0/0xf0 [ 91.860994][ T5917] ? __x64_sys_futex+0x21/0xf0 [ 91.865802][ T5917] do_syscall_64+0x55/0xb0 [ 91.870262][ T5917] ? clear_bhb_loop+0x40/0x90 [ 91.874983][ T5917] ? clear_bhb_loop+0x40/0x90 [ 91.879707][ T5917] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 91.885645][ T5917] RIP: 0033:0x7f9e64b9de99 [ 91.890106][ T5917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.909756][ T5917] RSP: 002b:00007ffe4dc9b198 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 91.918226][ T5917] RAX: ffffffffffffffda RBX: 000000000001664e RCX: 00007f9e64b9de99 [ 91.926246][ T5917] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9e64e2609c [ 91.934255][ T5917] RBP: 0000000000000032 R08: 0000000000745d1e R09: 0000000000000000 [ 91.942267][ T5917] R10: 00007ffe4dc9b2a0 R11: 0000000000000246 R12: 00007ffe4dc9b2c0 [ 91.950286][ T5917] R13: 00007f9e64e2609c R14: 0000000000016680 R15: 00007ffe4dc9b2a0 [ 91.958319][ T5917] [ 91.973371][ T5917] FAULT_INJECTION: forcing a failure. [ 91.973371][ T5917] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 91.989568][ T5917] CPU: 1 PID: 5917 Comm: syz.0.26 Not tainted syzkaller #0 [ 91.996815][ T5917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 92.006915][ T5917] Call Trace: [ 92.010237][ T5917] [ 92.013213][ T5917] dump_stack_lvl+0x18c/0x250 [ 92.017942][ T5917] ? show_regs_print_info+0x20/0x20 [ 92.023193][ T5917] ? load_image+0x420/0x420 [ 92.027753][ T5917] ? __might_fault+0xaa/0x120 [ 92.032479][ T5917] ? __lock_acquire+0x7d80/0x7d80 [ 92.037562][ T5917] should_fail_ex+0x394/0x4c0 [ 92.042295][ T5917] _copy_from_user+0x2f/0xe0 [ 92.046954][ T5917] get_timespec64+0x97/0x1b0 [ 92.051613][ T5917] ? timespec64_add_safe+0x1f0/0x1f0 [ 92.056982][ T5917] __se_sys_futex+0x19b/0x440 [ 92.061726][ T5917] ? __x64_sys_futex+0xf0/0xf0 [ 92.066563][ T5917] ? __x64_sys_futex+0x21/0xf0 [ 92.071402][ T5917] do_syscall_64+0x55/0xb0 [ 92.075883][ T5917] ? clear_bhb_loop+0x40/0x90 [ 92.080610][ T5917] ? clear_bhb_loop+0x40/0x90 [ 92.085352][ T5917] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 92.091296][ T5917] RIP: 0033:0x7f9e64b9de99 [ 92.095754][ T5917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.115395][ T5917] RSP: 002b:00007ffe4dc9b198 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 92.123836][ T5917] RAX: ffffffffffffffda RBX: 0000000000016721 RCX: 00007f9e64b9de99 [ 92.131849][ T5917] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9e64e2609c [ 92.139850][ T5917] RBP: 0000000000000032 R08: 0000000000745d1e R09: 0000000000000000 [ 92.147870][ T5917] R10: 00007ffe4dc9b2a0 R11: 0000000000000246 R12: 00007ffe4dc9b2c0 [ 92.155900][ T5917] R13: 00007f9e64e2609c R14: 0000000000016753 R15: 00007ffe4dc9b2a0 [ 92.163914][ T5917] [ 92.169443][ T174] cfg80211: failed to load regulatory.db [ 92.232846][ T5917] FAULT_INJECTION: forcing a failure. [ 92.232846][ T5917] name fail_futex, interval 1, probability 0, space 0, times 0 [ 92.260232][ T5917] CPU: 0 PID: 5917 Comm: syz.0.26 Not tainted syzkaller #0 [ 92.267513][ T5917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 92.277608][ T5917] Call Trace: [ 92.280921][ T5917] [ 92.283881][ T5917] dump_stack_lvl+0x18c/0x250 [ 92.288609][ T5917] ? show_regs_print_info+0x20/0x20 [ 92.293867][ T5917] ? load_image+0x420/0x420 [ 92.298446][ T5917] should_fail_ex+0x394/0x4c0 [ 92.303182][ T5917] get_futex_key+0x136/0x1030 [ 92.307902][ T5917] ? __lock_acquire+0x7d80/0x7d80 [ 92.312997][ T5917] ? futex_setup_timer+0xc0/0xc0 [ 92.317979][ T5917] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 92.323940][ T5917] ? lockdep_hardirqs_on+0x98/0x150 [ 92.329200][ T5917] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 92.335148][ T5917] futex_wait_setup+0xbc/0x270 [ 92.339961][ T5917] ? futex_wait_multiple+0x920/0x920 [ 92.345317][ T5917] ? ktime_add_safe+0x38/0x60 [ 92.350035][ T5917] futex_wait+0x1bc/0x5c0 [ 92.354449][ T5917] ? futex_wait_setup+0x270/0x270 [ 92.359535][ T5917] ? __remove_hrtimer+0x470/0x470 [ 92.364617][ T5917] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 92.370933][ T5917] ? lockdep_hardirqs_on+0x98/0x150 [ 92.376223][ T5917] do_futex+0x2ff/0x3e0 [ 92.380444][ T5917] ? _copy_from_user+0xa5/0xe0 [ 92.385261][ T5917] ? __ia32_sys_get_robust_list+0x110/0x110 [ 92.391210][ T5917] ? read_tsc+0x9/0x20 [ 92.395344][ T5917] ? ktime_get+0x24b/0x280 [ 92.399841][ T5917] __se_sys_futex+0x3a9/0x440 [ 92.404569][ T5917] ? __x64_sys_futex+0xf0/0xf0 [ 92.409386][ T5917] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 92.415420][ T5917] ? __x64_sys_futex+0x21/0xf0 [ 92.420233][ T5917] do_syscall_64+0x55/0xb0 [ 92.424697][ T5917] ? clear_bhb_loop+0x40/0x90 [ 92.429421][ T5917] ? clear_bhb_loop+0x40/0x90 [ 92.434148][ T5917] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 92.440097][ T5917] RIP: 0033:0x7f9e64b9de99 [ 92.444558][ T5917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.464207][ T5917] RSP: 002b:00007ffe4dc9b198 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 92.472664][ T5917] RAX: ffffffffffffffda RBX: 0000000000016824 RCX: 00007f9e64b9de99 [ 92.480696][ T5917] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9e64e2609c [ 92.488702][ T5917] RBP: 0000000000000032 R08: 0000000000745d1e R09: 0000000000000000 [ 92.496712][ T5917] R10: 00007ffe4dc9b2a0 R11: 0000000000000246 R12: 00007ffe4dc9b2c0 [ 92.504728][ T5917] R13: 00007f9e64e2609c R14: 0000000000016856 R15: 00007ffe4dc9b2a0 [ 92.512763][ T5917] [ 92.558064][ T5917] FAULT_INJECTION: forcing a failure. [ 92.558064][ T5917] name fail_futex, interval 1, probability 0, space 0, times 0 [ 92.571529][ T5917] CPU: 0 PID: 5917 Comm: syz.0.26 Not tainted syzkaller #0 [ 92.578781][ T5917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 92.588880][ T5917] Call Trace: [ 92.592200][ T5917] [ 92.595173][ T5917] dump_stack_lvl+0x18c/0x250 [ 92.599899][ T5917] ? lock_chain_count+0x20/0x20 [ 92.604805][ T5917] ? show_regs_print_info+0x20/0x20 [ 92.610056][ T5917] ? load_image+0x420/0x420 [ 92.614632][ T5917] ? futex_q_unlock+0x23/0x30 [ 92.619364][ T5917] should_fail_ex+0x394/0x4c0 [ 92.624095][ T5917] get_futex_key+0x136/0x1030 [ 92.628865][ T5917] ? futex_wait+0x4a0/0x5c0 [ 92.633427][ T5917] ? futex_setup_timer+0xc0/0xc0 [ 92.638411][ T5917] futex_wake+0x127/0x4f0 [ 92.642797][ T5917] ? futex_wake_mark+0x150/0x150 [ 92.647785][ T5917] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 92.654069][ T5917] ? lockdep_hardirqs_on+0x98/0x150 [ 92.659300][ T5917] do_futex+0x35d/0x3e0 [ 92.663479][ T5917] ? _copy_from_user+0xa5/0xe0 [ 92.668274][ T5917] ? __ia32_sys_get_robust_list+0x110/0x110 [ 92.674189][ T5917] ? blkcg_maybe_throttle_current+0x19f/0xa90 [ 92.680308][ T5917] __se_sys_futex+0x3a9/0x440 [ 92.685009][ T5917] ? __x64_sys_futex+0xf0/0xf0 [ 92.689814][ T5917] ? __x64_sys_futex+0x21/0xf0 [ 92.694603][ T5917] do_syscall_64+0x55/0xb0 [ 92.699065][ T5917] ? clear_bhb_loop+0x40/0x90 [ 92.703793][ T5917] ? clear_bhb_loop+0x40/0x90 [ 92.708502][ T5917] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 92.714409][ T5917] RIP: 0033:0x7f9e64b9de99 [ 92.718847][ T5917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.738493][ T5917] RSP: 002b:00007ffe4dc9b198 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 92.746932][ T5917] RAX: ffffffffffffffda RBX: 00000000000000f0 RCX: 00007f9e64b9de99 [ 92.754931][ T5917] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9e64e26098 [ 92.762929][ T5917] RBP: 0000000000001ec6 R08: 0000000000000004 R09: 0000000000000000 [ 92.770927][ T5917] R10: 00007f9e64e25fa0 R11: 0000000000000246 R12: 0000000000000001 [ 92.778915][ T5917] R13: 00007f9e64e2609c R14: 00007f9e64e26098 R15: 00007f9e64e26090 [ 92.786919][ T5917] [ 92.845298][ T5884] lo speed is unknown, defaulting to 1000 [ 92.862164][ T5917] FAULT_INJECTION: forcing a failure. [ 92.862164][ T5917] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.886498][ T5917] CPU: 1 PID: 5917 Comm: syz.0.26 Not tainted syzkaller #0 [ 92.893770][ T5917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 92.903859][ T5917] Call Trace: [ 92.907170][ T5917] [ 92.910133][ T5917] dump_stack_lvl+0x18c/0x250 [ 92.914861][ T5917] ? show_regs_print_info+0x20/0x20 [ 92.920117][ T5917] ? load_image+0x420/0x420 [ 92.924675][ T5917] ? __might_fault+0xaa/0x120 [ 92.929415][ T5917] ? __lock_acquire+0x7d80/0x7d80 [ 92.934494][ T5917] should_fail_ex+0x394/0x4c0 [ 92.939228][ T5917] _copy_from_user+0x2f/0xe0 [ 92.940432][ T5929] syz.1.29[5929]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 92.943856][ T5917] get_timespec64+0x97/0x1b0 [ 92.943891][ T5917] ? timespec64_add_safe+0x1f0/0x1f0 [ 92.943931][ T5917] __se_sys_futex+0x19b/0x440 [ 92.943965][ T5917] ? __x64_sys_futex+0xf0/0xf0 [ 92.943995][ T5917] ? __x64_sys_futex+0x21/0xf0 [ 92.944020][ T5917] do_syscall_64+0x55/0xb0 [ 92.944043][ T5917] ? clear_bhb_loop+0x40/0x90 [ 92.944066][ T5917] ? clear_bhb_loop+0x40/0x90 [ 92.944091][ T5917] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 92.944114][ T5917] RIP: 0033:0x7f9e64b9de99 [ 92.944134][ T5917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.944152][ T5917] RSP: 002b:00007ffe4dc9b198 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 92.944176][ T5917] RAX: ffffffffffffffda RBX: 0000000000016a9a RCX: 00007f9e64b9de99 [ 92.944192][ T5917] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9e64e2618c [ 92.944206][ T5917] RBP: 0000000000000032 R08: 0000000000745d1e R09: 0000000000000000 [ 92.944219][ T5917] R10: 00007ffe4dc9b2a0 R11: 0000000000000246 R12: 00007ffe4dc9b2c0 [ 92.944234][ T5917] R13: 00007f9e64e2618c R14: 0000000000016acc R15: 00007ffe4dc9b2a0 [ 92.944265][ T5917] [ 93.032615][ T5917] FAULT_INJECTION: forcing a failure. [ 93.032615][ T5917] name failslab, interval 1, probability 0, space 0, times 1 [ 93.096294][ T5917] CPU: 0 PID: 5917 Comm: syz.0.26 Not tainted syzkaller #0 [ 93.103567][ T5917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 93.113660][ T5917] Call Trace: [ 93.116976][ T5917] [ 93.119950][ T5917] dump_stack_lvl+0x18c/0x250 [ 93.124685][ T5917] ? show_regs_print_info+0x20/0x20 [ 93.129965][ T5917] ? load_image+0x420/0x420 [ 93.134528][ T5917] ? __might_sleep+0xe0/0xe0 [ 93.139167][ T5917] ? __lock_acquire+0x7d80/0x7d80 [ 93.144245][ T5917] should_fail_ex+0x394/0x4c0 [ 93.148992][ T5917] should_failslab+0x9/0x20 [ 93.153551][ T5917] slab_pre_alloc_hook+0x59/0x300 [ 93.158644][ T5917] kmem_cache_alloc+0x5a/0x2c0 [ 93.163458][ T5917] ? vm_area_dup+0x27/0x270 [ 93.168009][ T5917] vm_area_dup+0x27/0x270 [ 93.172384][ T5917] __split_vma+0x1a8/0xc20 [ 93.176872][ T5917] ? mmap_write_unlock+0x160/0x160 [ 93.182061][ T5917] do_vmi_align_munmap+0x310/0x16a0 [ 93.187315][ T5917] ? __lock_acquire+0x1262/0x7d80 [ 93.192385][ T5917] ? do_vmi_munmap+0x2d0/0x2d0 [ 93.197233][ T5917] ? mtree_range_walk+0x68c/0x7b0 [ 93.202332][ T5917] ? mas_find_setup+0x47f/0x590 [ 93.207249][ T5917] do_vmi_munmap+0x252/0x2d0 [ 93.211907][ T5917] mmap_region+0x8d9/0x2090 [ 93.216490][ T5917] ? file_mmap_ok+0x170/0x170 [ 93.221223][ T5917] ? cap_mmap_addr+0x157/0x2b0 [ 93.226055][ T5917] ? file_mmap_ok+0x11c/0x170 [ 93.230792][ T5917] do_mmap+0x98f/0x10a0 [ 93.235013][ T5917] ? mlock_future_ok+0xf0/0xf0 [ 93.239833][ T5917] ? down_write+0x200/0x200 [ 93.244397][ T5917] vm_mmap_pgoff+0x1c4/0x3f0 [ 93.249064][ T5917] ? account_locked_vm+0x200/0x200 [ 93.254240][ T5917] ksys_mmap_pgoff+0x4c9/0x720 [ 93.259073][ T5917] ? __x64_sys_mmap+0x7a/0x130 [ 93.263888][ T5917] do_syscall_64+0x55/0xb0 [ 93.268351][ T5917] ? clear_bhb_loop+0x40/0x90 [ 93.273107][ T5917] ? clear_bhb_loop+0x40/0x90 [ 93.277840][ T5917] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 93.283779][ T5917] RIP: 0033:0x7f9e64b9dc02 [ 93.288233][ T5917] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 93.307881][ T5917] RSP: 002b:00007ffe4dc9b0e8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 93.316362][ T5917] RAX: ffffffffffffffda RBX: 00007f9e629f6000 RCX: 00007f9e64b9dc02 [ 93.324399][ T5917] RDX: 0000000000000003 RSI: 0000000000400000 RDI: 00007f9e629f6000 [ 93.332410][ T5917] RBP: 0000000000000011 R08: 00000000000000db R09: 0000000000000000 [ 93.340423][ T5917] R10: 0000000000000011 R11: 0000000000000206 R12: 0000000000000003 [ 93.348430][ T5917] R13: 0000000000000003 R14: 0000000000000000 R15: 00007f9e64e25fa0 [ 93.356462][ T5917] [ 94.067098][ T5886] infiniband syz1: set active [ 94.072725][ T8] lo speed is unknown, defaulting to 1000 [ 94.096141][ T5886] infiniband syz1: added lo [ 94.102014][ T5886] syz1: rxe_create_cq: returned err = -12 [ 94.126978][ T5886] infiniband syz1: Couldn't create ib_mad CQ [ 94.136476][ T5886] infiniband syz1: Couldn't open port 1 [ 94.199028][ T5886] RDS/IB: syz1: added [ 94.220315][ T5886] smc: adding ib device syz1 with port count 1 [ 94.236676][ T5886] smc: ib device syz1 port 1 has pnetid [ 94.246872][ T8] lo speed is unknown, defaulting to 1000 [ 94.254035][ T5886] lo speed is unknown, defaulting to 1000 [ 95.623224][ T5886] lo speed is unknown, defaulting to 1000 [ 96.153298][ T5886] lo speed is unknown, defaulting to 1000 [ 96.880422][ T5972] loop3: detected capacity change from 0 to 1024 [ 97.150475][ T5886] lo speed is unknown, defaulting to 1000 [ 98.138350][ T5980] (null): rxe_set_mtu: Set mtu to 1024 [ 98.204622][ T5983] (null): rxe_set_mtu: Set mtu to 1024 [ 98.756813][ T5968] NFSD: attempt to initialize umh client tracking in a container ignored. [ 98.808222][ T5968] NFSD: attempt to initialize legacy client tracking in a container ignored. [ 98.821931][ T5980] rdma_rxe: rxe_newlink: failed to add veth0 [ 98.828231][ T5983] rdma_rxe: rxe_newlink: failed to add veth1 [ 98.855015][ T5968] NFSD: Unable to initialize client recovery tracking! (-22) [ 98.865092][ T5968] NFSD: starting 90-second grace period (net f00004f6) [ 100.447629][ T6016] loop0: detected capacity change from 0 to 1024 [ 101.003288][ T6033] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 103.542219][ T2981] rpcbind: server 127.0.0.1 not responding, timed out [ 104.367883][ T6084] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 104.722327][ T6089] netlink: 120 bytes leftover after parsing attributes in process `syz.3.73'. [ 105.265325][ T6097] netlink: 'syz.1.76': attribute type 25 has an invalid length. [ 105.699568][ T2133] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 105.886205][ T6120] loop0: detected capacity change from 0 to 1024 [ 105.977008][ T2133] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 106.135364][ T6126] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 106.866246][ T6112] ceph: No mds server is up or the cluster is laggy [ 107.271832][ T6136] netlink: 28 bytes leftover after parsing attributes in process `syz.0.93'. [ 107.595880][ T6150] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 107.918805][ T6157] tipc: Started in network mode [ 107.931460][ T6157] tipc: Node identity ac14140f, cluster identity 4711 [ 107.968369][ T6157] tipc: New replicast peer: 172.30.0.1 [ 107.975819][ T6157] tipc: Enabled bearer , priority 10 [ 108.434440][ T6162] Zero length message leads to an empty skb [ 108.574412][ T6165] FAULT_INJECTION: forcing a failure. [ 108.574412][ T6165] name fail_futex, interval 1, probability 0, space 0, times 0 [ 108.587790][ T6165] CPU: 0 PID: 6165 Comm: syz.2.103 Not tainted syzkaller #0 [ 108.595131][ T6165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 108.605224][ T6165] Call Trace: [ 108.608528][ T6165] [ 108.611494][ T6165] dump_stack_lvl+0x18c/0x250 [ 108.616215][ T6165] ? verify_lock_unused+0x140/0x140 [ 108.621477][ T6165] ? show_regs_print_info+0x20/0x20 [ 108.626729][ T6165] ? load_image+0x420/0x420 [ 108.631334][ T6165] ? save_fpregs_to_fpstate+0x9e/0x200 [ 108.636880][ T6165] should_fail_ex+0x394/0x4c0 [ 108.641595][ T6165] get_futex_key+0x136/0x1030 [ 108.646300][ T6165] ? futex_setup_timer+0xc0/0xc0 [ 108.651281][ T6165] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 108.657311][ T6165] ? read_lock_is_recursive+0x20/0x20 [ 108.662731][ T6165] futex_wake+0x127/0x4f0 [ 108.667084][ T6165] ? lockdep_hardirqs_on+0x98/0x150 [ 108.672323][ T6165] ? futex_wake_mark+0x150/0x150 [ 108.677463][ T6165] ? __schedule+0x15b6/0x4660 [ 108.682184][ T6165] do_futex+0x35d/0x3e0 [ 108.686369][ T6165] ? __ia32_sys_get_robust_list+0x110/0x110 [ 108.692290][ T6165] __se_sys_futex+0x3a9/0x440 [ 108.697009][ T6165] ? __x64_sys_futex+0xf0/0xf0 [ 108.701787][ T6165] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 108.707802][ T6165] ? __x64_sys_futex+0x21/0xf0 [ 108.712590][ T6165] do_syscall_64+0x55/0xb0 [ 108.717087][ T6165] ? clear_bhb_loop+0x40/0x90 [ 108.721798][ T6165] ? clear_bhb_loop+0x40/0x90 [ 108.726500][ T6165] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 108.732414][ T6165] RIP: 0033:0x7f6ec7f9de99 [ 108.736852][ T6165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.756483][ T6165] RSP: 002b:00007ffd71f05f18 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 108.764950][ T6165] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6ec7f9de99 [ 108.772940][ T6165] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6ec8225fa8 [ 108.780931][ T6165] RBP: 0000000000001ec6 R08: 0000000000000004 R09: 0000000000000000 [ 108.788919][ T6165] R10: 00007f6ec8225fa0 R11: 0000000000000246 R12: 0000000000000000 [ 108.796912][ T6165] R13: 00007f6ec8225fac R14: 00007f6ec8225fa8 R15: 00007f6ec8225fa0 [ 108.804939][ T6165] [ 108.879582][ T6165] FAULT_INJECTION: forcing a failure. [ 108.879582][ T6165] name fail_futex, interval 1, probability 0, space 0, times 0 [ 108.893741][ T6165] CPU: 1 PID: 6165 Comm: syz.2.103 Not tainted syzkaller #0 [ 108.901090][ T6165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 108.911183][ T6165] Call Trace: [ 108.914479][ T6165] [ 108.917426][ T6165] dump_stack_lvl+0x18c/0x250 [ 108.922165][ T6165] ? show_regs_print_info+0x20/0x20 [ 108.927421][ T6165] ? load_image+0x420/0x420 [ 108.931987][ T6165] should_fail_ex+0x394/0x4c0 [ 108.936689][ T6165] get_futex_key+0x136/0x1030 [ 108.941418][ T6165] ? __lock_acquire+0x7d80/0x7d80 [ 108.946512][ T6165] ? futex_setup_timer+0xc0/0xc0 [ 108.951489][ T6165] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 108.957434][ T6165] ? lockdep_hardirqs_on+0x98/0x150 [ 108.962669][ T6165] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 108.968594][ T6165] futex_wait_setup+0xbc/0x270 [ 108.973388][ T6165] ? futex_wait_multiple+0x920/0x920 [ 108.978692][ T6165] ? ktime_add_safe+0x38/0x60 [ 108.983398][ T6165] futex_wait+0x1bc/0x5c0 [ 108.987756][ T6165] ? futex_wait_setup+0x270/0x270 [ 108.992813][ T6165] ? __remove_hrtimer+0x470/0x470 [ 108.997890][ T6165] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 109.004168][ T6165] ? lockdep_hardirqs_on+0x98/0x150 [ 109.009402][ T6165] do_futex+0x2ff/0x3e0 [ 109.013580][ T6165] ? _copy_from_user+0xa5/0xe0 [ 109.018358][ T6165] ? __ia32_sys_get_robust_list+0x110/0x110 [ 109.024301][ T6165] ? read_tsc+0x9/0x20 [ 109.028429][ T6165] ? ktime_get+0x24b/0x280 [ 109.032873][ T6165] __se_sys_futex+0x3a9/0x440 [ 109.037587][ T6165] ? __x64_sys_futex+0xf0/0xf0 [ 109.042399][ T6165] ? __x64_sys_futex+0x21/0xf0 [ 109.047186][ T6165] do_syscall_64+0x55/0xb0 [ 109.051632][ T6165] ? clear_bhb_loop+0x40/0x90 [ 109.056331][ T6165] ? clear_bhb_loop+0x40/0x90 [ 109.061046][ T6165] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 109.066972][ T6165] RIP: 0033:0x7f6ec7f9de99 [ 109.071425][ T6165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.091154][ T6165] RSP: 002b:00007ffd71f05f18 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 109.095645][ T5765] tipc: Node number set to 2886997007 [ 109.099593][ T6165] RAX: ffffffffffffffda RBX: 000000000001a92b RCX: 00007f6ec7f9de99 [ 109.099611][ T6165] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6ec822609c [ 109.099624][ T6165] RBP: 0000000000000032 R08: 0000000000745d1e R09: 0000000000000000 [ 109.099637][ T6165] R10: 00007ffd71f06020 R11: 0000000000000246 R12: 00007ffd71f06040 [ 109.099652][ T6165] R13: 00007f6ec822609c R14: 000000000001a95d R15: 00007ffd71f06020 [ 109.099681][ T6165] [ 109.217665][ T6165] FAULT_INJECTION: forcing a failure. [ 109.217665][ T6165] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.267560][ T6165] CPU: 1 PID: 6165 Comm: syz.2.103 Not tainted syzkaller #0 [ 109.274918][ T6165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 109.284999][ T6165] Call Trace: [ 109.288333][ T6165] [ 109.291315][ T6165] dump_stack_lvl+0x18c/0x250 [ 109.296039][ T6165] ? show_regs_print_info+0x20/0x20 [ 109.301269][ T6165] ? load_image+0x420/0x420 [ 109.305819][ T6165] ? __might_fault+0xaa/0x120 [ 109.310521][ T6165] ? __lock_acquire+0x7d80/0x7d80 [ 109.315582][ T6165] should_fail_ex+0x394/0x4c0 [ 109.320332][ T6165] _copy_from_user+0x2f/0xe0 [ 109.324946][ T6165] get_timespec64+0x97/0x1b0 [ 109.329563][ T6165] ? timespec64_add_safe+0x1f0/0x1f0 [ 109.334888][ T6165] __se_sys_clock_nanosleep+0x1c7/0x3a0 [ 109.340459][ T6165] ? __x64_sys_clock_nanosleep+0xb0/0xb0 [ 109.346120][ T6165] ? lockdep_hardirqs_on+0x98/0x150 [ 109.351392][ T6165] do_syscall_64+0x55/0xb0 [ 109.355835][ T6165] ? clear_bhb_loop+0x40/0x90 [ 109.360534][ T6165] ? clear_bhb_loop+0x40/0x90 [ 109.365259][ T6165] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 109.371174][ T6165] RIP: 0033:0x7f6ec7f5e6ce [ 109.375616][ T6165] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 109.395252][ T6165] RSP: 002b:00007ffd71f05e98 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 109.403693][ T6165] RAX: ffffffffffffffda RBX: 000055558efaa500 RCX: 00007f6ec7f5e6ce [ 109.411685][ T6165] RDX: 00007ffd71f05ef0 RSI: 0000000000000000 RDI: 0000000000000000 [ 109.419674][ T6165] RBP: 00007f6ec8227da0 R08: 0000000000000000 R09: 0000000000000000 [ 109.427667][ T6165] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000001ab2a [ 109.435658][ T6165] R13: 00007f6ec822609c R14: 000000000001aa99 R15: 00007f6ec8226090 [ 109.443665][ T6165] [ 109.864687][ T6182] tipc: Started in network mode [ 109.871224][ T6182] tipc: Node identity ac14140f, cluster identity 4711 [ 109.883998][ T6182] tipc: New replicast peer: 172.30.0.2 [ 109.890002][ T6182] tipc: Enabled bearer , priority 10 [ 110.986865][ T6205] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.005528][ T6205] netdevsim netdevsim10 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.021913][ T5765] tipc: Node number set to 2886997007 [ 111.298790][ T6210] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 111.465657][ T6212] tipc: New replicast peer: 172.20.20.187 [ 111.473142][ T6212] tipc: Enabled bearer , priority 10 [ 112.642546][ T6246] tipc: Enabling of bearer rejected, already enabled [ 114.113146][ T6253] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 123.163257][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 123.171750][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 123.181943][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 123.190811][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 123.198674][ T52] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 123.207191][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 123.252602][ T6265] lo speed is unknown, defaulting to 1000 [ 123.373362][ T6265] lo speed is unknown, defaulting to 1000 [ 123.606426][ T6265] chnl_net:caif_netlink_parms(): no params data found [ 123.679656][ T6265] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.686944][ T6265] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.694345][ T6265] bridge_slave_0: entered allmulticast mode [ 123.702225][ T6265] bridge_slave_0: entered promiscuous mode [ 123.711719][ T6265] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.719469][ T6265] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.726740][ T6265] bridge_slave_1: entered allmulticast mode [ 123.734164][ T6265] bridge_slave_1: entered promiscuous mode [ 123.765414][ T6265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.785006][ T6265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.818298][ T6265] team0: Port device team_slave_0 added [ 123.826382][ T6265] team0: Port device team_slave_1 added [ 123.860907][ T6265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.867920][ T6265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.894543][ T6265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.907640][ T6265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.914648][ T6265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.941262][ T6265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.987028][ T6265] hsr_slave_0: entered promiscuous mode [ 123.993634][ T6265] hsr_slave_1: entered promiscuous mode [ 124.000429][ T6265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 124.009824][ T6265] Cannot create hsr debugfs directory [ 124.165744][ T6265] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 124.177369][ T6265] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 124.188620][ T6265] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 124.199112][ T6265] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 124.226227][ T6265] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.234024][ T6265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.242189][ T6265] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.249399][ T6265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.313821][ T6265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.331874][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.340922][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.361463][ T6265] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.376574][ T2198] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.383764][ T2198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.399043][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.406230][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.619542][ T6265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.862334][ T6265] veth0_vlan: entered promiscuous mode [ 124.876871][ T6265] veth1_vlan: entered promiscuous mode [ 124.916506][ T6265] veth0_macvtap: entered promiscuous mode [ 124.926076][ T6265] veth1_macvtap: entered promiscuous mode [ 124.945533][ T6265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.957139][ T6265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.967054][ T6265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.978464][ T6265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.988745][ T6265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.001763][ T6265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.012043][ T6265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.022591][ T6265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.035070][ T6265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.053933][ T6265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.064676][ T6265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.075057][ T6265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.085816][ T6265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.095928][ T6265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.109181][ T6265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.119644][ T6265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.132546][ T6265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.144864][ T6265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.157293][ T6265] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.166298][ T6265] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.175023][ T6265] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.184402][ T6265] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.264235][ T2198] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.280743][ T5791] Bluetooth: hci4: command tx timeout [ 125.288755][ T2198] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.318316][ T3533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.327893][ T3533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.831274][ T6298] loop4: detected capacity change from 0 to 1024 [ 126.984070][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 126.993618][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 127.002681][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 127.012447][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 127.022796][ T52] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 127.030746][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 127.088768][ T6303] lo speed is unknown, defaulting to 1000 [ 127.232609][ T6303] lo speed is unknown, defaulting to 1000 [ 127.356665][ T5791] Bluetooth: hci4: command tx timeout [ 127.511502][ T6303] chnl_net:caif_netlink_parms(): no params data found [ 127.593271][ T6303] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.600706][ T6303] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.608135][ T6303] bridge_slave_0: entered allmulticast mode [ 127.615197][ T6303] bridge_slave_0: entered promiscuous mode [ 127.624776][ T6303] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.632177][ T6303] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.639902][ T6303] bridge_slave_1: entered allmulticast mode [ 127.647560][ T6303] bridge_slave_1: entered promiscuous mode [ 127.684323][ T6303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.696852][ T6303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.740003][ T6303] team0: Port device team_slave_0 added [ 127.749854][ T6303] team0: Port device team_slave_1 added [ 127.808748][ T6303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.815762][ T6303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.850678][ T6303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.877060][ T6303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.884087][ T6303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.919479][ T6303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.005270][ T6303] hsr_slave_0: entered promiscuous mode [ 128.019417][ T6303] hsr_slave_1: entered promiscuous mode [ 128.030847][ T6303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 128.040826][ T6303] Cannot create hsr debugfs directory [ 128.197864][ T52] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 128.207163][ T52] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 128.215045][ T52] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 128.224002][ T52] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 128.232161][ T52] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 128.240126][ T52] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 128.325623][ T6312] lo speed is unknown, defaulting to 1000 [ 128.430880][ T6303] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 128.450868][ T6303] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 128.470364][ T6303] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 128.493764][ T6303] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 128.511049][ T6312] lo speed is unknown, defaulting to 1000 [ 128.654579][ T6303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.706098][ T6303] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.735855][ T3533] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.743068][ T3533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.762631][ T128] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.769877][ T128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.022916][ T6312] chnl_net:caif_netlink_parms(): no params data found [ 129.117119][ T5791] Bluetooth: hci5: command tx timeout [ 129.146733][ T6312] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.154074][ T6312] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.161752][ T6312] bridge_slave_0: entered allmulticast mode [ 129.174569][ T6312] bridge_slave_0: entered promiscuous mode [ 129.183878][ T6312] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.191861][ T6312] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.201682][ T6312] bridge_slave_1: entered allmulticast mode [ 129.209839][ T6312] bridge_slave_1: entered promiscuous mode [ 129.250569][ T6312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.263630][ T6312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.324275][ T6312] team0: Port device team_slave_0 added [ 129.335587][ T6312] team0: Port device team_slave_1 added [ 129.370292][ T6312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.377567][ T6312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.405881][ T6312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.419210][ T6312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.426666][ T6312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.456190][ T5791] Bluetooth: hci4: command tx timeout [ 129.461990][ T6312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.487207][ T6303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.552254][ T6312] hsr_slave_0: entered promiscuous mode [ 129.559709][ T6312] hsr_slave_1: entered promiscuous mode [ 129.568758][ T6312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 129.586302][ T6312] Cannot create hsr debugfs directory [ 129.853787][ T6312] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 129.877620][ T6312] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 129.898316][ T6312] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 129.920781][ T6312] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 130.074770][ T6303] veth0_vlan: entered promiscuous mode [ 130.114037][ T6303] veth1_vlan: entered promiscuous mode [ 130.152435][ T6312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.180914][ T6303] veth0_macvtap: entered promiscuous mode [ 130.201318][ T6303] veth1_macvtap: entered promiscuous mode [ 130.215059][ T6312] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.252735][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.259968][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.274135][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.281387][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.298106][ T6303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.310026][ T6303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.324036][ T5791] Bluetooth: hci6: command tx timeout [ 130.334505][ T6303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.345020][ T6303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.355193][ T6303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.365728][ T6303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.375627][ T6303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.387608][ T6303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.398387][ T6303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.409945][ T6303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.423172][ T6303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.450797][ T6303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.462711][ T6303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.473350][ T6303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.485973][ T6303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.495911][ T6303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.511826][ T6303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.522002][ T6303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.534944][ T6303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.545146][ T6303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.557349][ T6303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.569724][ T6303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.598119][ T6303] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.607072][ T6303] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.615863][ T6303] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.625242][ T6303] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.774431][ T128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.797223][ T128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.841853][ T3533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.854423][ T3533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.899511][ T5838] libceph: mon0 (1)127.0.0.1:6666 socket closed (con state V1_BANNER) [ 130.917647][ T6331] ceph: No mds server is up or the cluster is laggy [ 131.146838][ T6312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.196400][ T5791] Bluetooth: hci5: command tx timeout [ 131.516942][ T5791] Bluetooth: hci4: command tx timeout [ 131.532868][ T6347] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 131.746414][ T52] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 131.764447][ T52] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 131.781978][ T52] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 131.791313][ T52] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 131.804451][ T52] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 131.812274][ T52] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 131.908545][ T6351] lo speed is unknown, defaulting to 1000 [ 132.313652][ T6351] lo speed is unknown, defaulting to 1000 [ 132.333053][ T6361] netlink: 4 bytes leftover after parsing attributes in process `syz.5.152'. [ 132.355725][ T6312] veth0_vlan: entered promiscuous mode [ 132.396791][ T52] Bluetooth: hci6: command tx timeout [ 132.449864][ T6312] veth1_vlan: entered promiscuous mode [ 132.525864][ T6312] veth0_macvtap: entered promiscuous mode [ 132.537784][ T6312] veth1_macvtap: entered promiscuous mode [ 132.572272][ T6312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.585065][ T6312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.595518][ T6312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.621126][ T6312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.645192][ T6312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.668657][ T6312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.686577][ T6312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.704449][ T6312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.714651][ T6312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.745931][ T6312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.765165][ T6312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.776029][ T6312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.790325][ T6312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.821524][ T6312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.832824][ T6312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.843994][ T6312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.854947][ T6312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.865454][ T6312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.877669][ T6312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.890570][ T6312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.901541][ T6312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.911954][ T6312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.923021][ T6312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.933476][ T6312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.944113][ T6312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.960130][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.969829][ T6312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.977943][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.044796][ T6312] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.053710][ T6312] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.062655][ T6312] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.073927][ T6312] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.247639][ T2933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.255530][ T2933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.276440][ T52] Bluetooth: hci5: command tx timeout [ 133.323729][ T6351] chnl_net:caif_netlink_parms(): no params data found [ 133.372897][ T128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.382319][ T128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.551400][ T6351] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.579720][ T6351] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.589215][ T6351] bridge_slave_0: entered allmulticast mode [ 133.598908][ T6351] bridge_slave_0: entered promiscuous mode [ 133.619160][ T6351] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.636785][ T6351] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.654175][ T6351] bridge_slave_1: entered allmulticast mode [ 133.678283][ T6351] bridge_slave_1: entered promiscuous mode [ 133.767498][ T6351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.803382][ T6351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.836292][ T52] Bluetooth: hci7: command tx timeout [ 133.953147][ T6351] team0: Port device team_slave_0 added [ 133.992150][ T6351] team0: Port device team_slave_1 added [ 134.087737][ T6351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.099107][ T6351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.186180][ T6351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.209609][ T6351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.249786][ T6351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.283516][ T6351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.477539][ T52] Bluetooth: hci6: command tx timeout [ 134.601734][ T6396] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 134.691107][ T6351] hsr_slave_0: entered promiscuous mode [ 134.698439][ T6351] hsr_slave_1: entered promiscuous mode [ 134.708926][ T6351] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.718983][ T6351] Cannot create hsr debugfs directory [ 134.938452][ T6351] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 134.950460][ T6351] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 134.963082][ T6351] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 134.974529][ T6351] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 135.089980][ T6351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.232615][ T6351] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.292220][ T128] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.299461][ T128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.340687][ T2933] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.347933][ T2933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.357171][ T52] Bluetooth: hci5: command tx timeout [ 135.805100][ T6351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.916793][ T52] Bluetooth: hci7: command tx timeout [ 136.103681][ T6351] veth0_vlan: entered promiscuous mode [ 136.134011][ T6351] veth1_vlan: entered promiscuous mode [ 136.179425][ T6351] veth0_macvtap: entered promiscuous mode [ 136.191372][ T6351] veth1_macvtap: entered promiscuous mode [ 136.213810][ T6351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.224631][ T6351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.235415][ T6351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.249117][ T6351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.265845][ T6351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.276980][ T6351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.287309][ T6351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.298171][ T6351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.308765][ T6351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.324247][ T6351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.334646][ T6351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.345818][ T6351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.356028][ T6351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.370252][ T6351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.382423][ T6351] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.402433][ T6351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.420099][ T6351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.434175][ T6351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.445333][ T6351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.460888][ T6351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.474018][ T6351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.485225][ T6351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.496339][ T6351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.506466][ T6351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.517207][ T6351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.527226][ T6351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.538354][ T6351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.548558][ T6351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.559334][ T52] Bluetooth: hci6: command tx timeout [ 136.565137][ T6351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.585581][ T6351] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.601082][ T6351] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.610294][ T6351] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.619120][ T6351] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.629092][ T6351] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.784215][ T2981] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.810246][ T2981] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.843636][ T3533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.853222][ T3533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.996994][ T52] Bluetooth: hci7: command tx timeout [ 138.088558][ T6440] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 138.494714][ T6445] tipc: Enabling of bearer rejected, failed to enable media [ 138.692685][ T174] ------------[ cut here ]------------ [ 138.698358][ T174] WARNING: CPU: 0 PID: 174 at net/ceph/messenger_v2.c:3168 ceph_con_v2_try_read+0x7d1d/0x7ea0 [ 138.708756][ T174] Modules linked in: [ 138.712720][ T174] CPU: 0 PID: 174 Comm: kworker/0:2 Not tainted syzkaller #0 [ 138.722931][ T174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 138.734837][ T174] Workqueue: ceph-msgr ceph_con_workfn [ 138.740495][ T174] RIP: 0010:ceph_con_v2_try_read+0x7d1d/0x7ea0 [ 138.746749][ T174] Code: 41 5c 41 5d 41 5e 41 5f 5d c3 e8 ce 12 3a f7 48 c7 c7 40 23 e6 8b 44 89 f6 e8 0f dd 03 f7 0f 0b e9 57 ff ff ff e8 b3 12 3a f7 <0f> 0b 41 bd c3 ff ff ff e9 4b ff ff ff e8 a1 12 3a f7 0f 0b 41 bd [ 138.766687][ T174] RSP: 0018:ffffc90002637560 EFLAGS: 00010293 [ 138.772792][ T174] RAX: ffffffff8a4d621d RBX: ffff88802ef786c8 RCX: ffff88801bb19e00 [ 138.780920][ T174] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 138.789155][ T174] RBP: ffffc90002637b38 R08: 0000000000000004 R09: 0000000000000004 [ 138.797591][ T174] R10: ffff88802ef786b4 R11: ffffed1005def0d8 R12: fffff520004c6efc [ 138.806022][ T174] R13: 0000000000000000 R14: 0000000000000000 R15: dffffc0000000000 [ 138.814043][ T174] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 138.824766][ T174] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 138.831827][ T174] CR2: 000000110c35a799 CR3: 000000005d28d000 CR4: 00000000003506f0 [ 138.839892][ T174] Call Trace: [ 138.843191][ T174] [ 138.846309][ T174] ? prepare_write_message_footer+0x4b0/0x4b0 [ 138.852444][ T174] ? __lock_acquire+0x1336/0x7d80 [ 138.857697][ T174] ? __mutex_trylock_common+0x160/0x270 [ 138.863286][ T174] ? trace_raw_output_contention_end+0xd0/0xd0 [ 138.869554][ T174] ? rcu_is_watching+0x15/0xb0 [ 138.874362][ T174] ? trace_contention_end+0x39/0xe0 [ 138.879683][ T174] ? __mutex_lock+0x30d/0xc80 [ 138.884396][ T174] ? ceph_con_workfn+0x39/0x1250 [ 138.889532][ T174] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 138.895536][ T174] ? __lock_acquire+0x7d80/0x7d80 [ 138.900676][ T174] ceph_con_workfn+0x1f1/0x1250 [ 138.905617][ T174] ? _raw_spin_unlock_irq+0x23/0x50 [ 138.910944][ T174] ? process_scheduled_works+0x975/0x1600 [ 138.916913][ T174] ? process_scheduled_works+0x975/0x1600 [ 138.924514][ T174] process_scheduled_works+0xa60/0x1600 [ 138.930538][ T174] ? worker_attach_to_pool+0x370/0x370 [ 138.936150][ T174] ? assign_work+0x3cc/0x5d0 [ 138.940820][ T174] worker_thread+0xa5e/0xfe0 [ 138.945573][ T174] ? _raw_spin_unlock+0x40/0x40 [ 138.950540][ T174] ? __kthread_parkme+0x71/0x1c0 [ 138.955550][ T174] kthread+0x2fa/0x390 [ 138.960220][ T174] ? pr_cont_work+0x550/0x550 [ 138.966675][ T174] ? kthread_blkcg+0xd0/0xd0 [ 138.971391][ T174] ret_from_fork+0x48/0x80 [ 138.975856][ T174] ? kthread_blkcg+0xd0/0xd0 [ 138.980566][ T174] ret_from_fork_asm+0x11/0x20 [ 138.985387][ T174] [ 138.988490][ T174] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 138.995788][ T174] CPU: 0 PID: 174 Comm: kworker/0:2 Not tainted syzkaller #0 [ 139.003183][ T174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 139.013261][ T174] Workqueue: ceph-msgr ceph_con_workfn [ 139.018751][ T174] Call Trace: [ 139.022043][ T174] [ 139.025001][ T174] dump_stack_lvl+0x18c/0x250 [ 139.029721][ T174] ? show_regs_print_info+0x20/0x20 [ 139.034957][ T174] ? load_image+0x420/0x420 [ 139.039501][ T174] panic+0x2ca/0x720 [ 139.043437][ T174] ? bpf_jit_dump+0xd0/0xd0 [ 139.047989][ T174] ? ret_from_fork_asm+0x11/0x20 [ 139.052971][ T174] __warn+0x2e0/0x470 [ 139.056987][ T174] ? ceph_con_v2_try_read+0x7d1d/0x7ea0 [ 139.062565][ T174] ? ceph_con_v2_try_read+0x7d1d/0x7ea0 [ 139.068136][ T174] report_bug+0x2be/0x4f0 [ 139.072505][ T174] ? ceph_con_v2_try_read+0x7d1d/0x7ea0 [ 139.078068][ T174] ? ceph_con_v2_try_read+0x7d1d/0x7ea0 [ 139.083627][ T174] ? ceph_con_v2_try_read+0x7d1f/0x7ea0 [ 139.089192][ T174] handle_bug+0xcf/0x120 [ 139.093461][ T174] exc_invalid_op+0x1a/0x50 [ 139.097995][ T174] asm_exc_invalid_op+0x1a/0x20 [ 139.102869][ T174] RIP: 0010:ceph_con_v2_try_read+0x7d1d/0x7ea0 [ 139.109074][ T174] Code: 41 5c 41 5d 41 5e 41 5f 5d c3 e8 ce 12 3a f7 48 c7 c7 40 23 e6 8b 44 89 f6 e8 0f dd 03 f7 0f 0b e9 57 ff ff ff e8 b3 12 3a f7 <0f> 0b 41 bd c3 ff ff ff e9 4b ff ff ff e8 a1 12 3a f7 0f 0b 41 bd [ 139.128747][ T174] RSP: 0018:ffffc90002637560 EFLAGS: 00010293 [ 139.134854][ T174] RAX: ffffffff8a4d621d RBX: ffff88802ef786c8 RCX: ffff88801bb19e00 [ 139.142838][ T174] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 139.150827][ T174] RBP: ffffc90002637b38 R08: 0000000000000004 R09: 0000000000000004 [ 139.158835][ T174] R10: ffff88802ef786b4 R11: ffffed1005def0d8 R12: fffff520004c6efc [ 139.166823][ T174] R13: 0000000000000000 R14: 0000000000000000 R15: dffffc0000000000 [ 139.174845][ T174] ? ceph_con_v2_try_read+0x7d1d/0x7ea0 [ 139.180476][ T174] ? prepare_write_message_footer+0x4b0/0x4b0 [ 139.186572][ T174] ? __lock_acquire+0x1336/0x7d80 [ 139.191648][ T174] ? __mutex_trylock_common+0x160/0x270 [ 139.197257][ T174] ? trace_raw_output_contention_end+0xd0/0xd0 [ 139.203448][ T174] ? rcu_is_watching+0x15/0xb0 [ 139.208247][ T174] ? trace_contention_end+0x39/0xe0 [ 139.213520][ T174] ? __mutex_lock+0x30d/0xc80 [ 139.218247][ T174] ? ceph_con_workfn+0x39/0x1250 [ 139.223226][ T174] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 139.229256][ T174] ? __lock_acquire+0x7d80/0x7d80 [ 139.234325][ T174] ceph_con_workfn+0x1f1/0x1250 [ 139.239260][ T174] ? _raw_spin_unlock_irq+0x23/0x50 [ 139.244495][ T174] ? process_scheduled_works+0x975/0x1600 [ 139.250256][ T174] ? process_scheduled_works+0x975/0x1600 [ 139.256015][ T174] process_scheduled_works+0xa60/0x1600 [ 139.261611][ T174] ? worker_attach_to_pool+0x370/0x370 [ 139.267101][ T174] ? assign_work+0x3cc/0x5d0 [ 139.271721][ T174] worker_thread+0xa5e/0xfe0 [ 139.276363][ T174] ? _raw_spin_unlock+0x40/0x40 [ 139.281257][ T174] ? __kthread_parkme+0x71/0x1c0 [ 139.286249][ T174] kthread+0x2fa/0x390 [ 139.290347][ T174] ? pr_cont_work+0x550/0x550 [ 139.295054][ T174] ? kthread_blkcg+0xd0/0xd0 [ 139.299690][ T174] ret_from_fork+0x48/0x80 [ 139.304130][ T174] ? kthread_blkcg+0xd0/0xd0 [ 139.308824][ T174] ret_from_fork_asm+0x11/0x20 [ 139.313624][ T174] [ 139.316798][ T174] Kernel Offset: disabled [ 139.321184][ T174] Rebooting in 86400 seconds..