last executing test programs: 4.206354441s ago: executing program 2 (id=183): syz_usb_connect(0x0, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040b90661400000010203010902290002010080fa0904000001ff000000070581031000010904010001ff00000007058202000201"], 0x0) nanosleep(&(0x7f0000000100)={0x1}, 0x0) r0 = socket(0x8, 0x2, 0x0) setsockopt(r0, 0x108, 0x1, &(0x7f0000000200)="010000000000000000000000000000000002000000000000000000000000000001000000000000000000000000000000000200000000000000000000000000000500000000000000", 0x48) bind(r0, &(0x7f0000000300)=@generic={0x8, '\x00\x00\x00\x00d\x00'}, 0x10) r1 = socket(0x8, 0x2, 0x0) ioctl(r1, 0x400861f2, &(0x7f0000000400)="0000000000000000dc0500006e61733000000000") ioctl(r0, 0x400461f1, &(0x7f0000000500)="020000006e61733000000000000000000100"/32) 2.098141716s ago: executing program 0 (id=201): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x401, 0x0, 0x0, {0x1, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x3, "00010202020202020202020202020202"}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f00000002c0)=@newtfilter={0x98, 0x2c, 0x401, 0x0, 0x0, {0x1, 0x0, 0x0, 0x1, {}, {0x0, 0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x64, 0x2, [@TCA_MATCHALL_ACT={0x60, 0x2, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xa}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}]}}}]}]}}]}, 0x98}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r1, &(0x7f0000000700)="0000000000010000000000028100000a08004500002000000000401100007f0000017f00000112341234000c000000000000", 0x32, 0x0, &(0x7f0000000800)={0x11, 0x3, 0x1, 0x1, 0x0, 0x6, @random="000000000001"}, 0x14) 2.060626476s ago: executing program 3 (id=202): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="28000000130001000200"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000e0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000780)=ANY=[@ANYBLOB="20000000130001000300"/20, @ANYRES32=r3, @ANYBLOB="0100000001000000"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000120)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3c0000001400010604000000000000000a400000", @ANYRES32=r3, @ANYBLOB="1400020020010db800000000000000"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000160)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=ANY=[@ANYBLOB="2c0000001800010605000000000000000a000000030001000000000008000f00e803000008000400", @ANYRES32=r3], 0x2c}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000880)='veth0\x00', 0x6) sendto$inet6(r1, &(0x7f0000000900)="001122334455", 0x6, 0x0, &(0x7f0000000a00)={0xa, 0x5000, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) sendto$inet6(r1, &(0x7f0000000900)="001122334455", 0x6, 0x0, &(0x7f0000000b00)={0xa, 0x5000, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) sendto$inet6(r1, &(0x7f0000000900)="001122334455", 0x6, 0x0, &(0x7f0000000c00)={0xa, 0x5000, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r4 = socket$inet6(0xa, 0x3, 0x3b) sendto$inet6(r4, &(0x7f0000000900)="001122334455", 0x6, 0x0, &(0x7f0000000d00)={0xa, 0x5000, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) 1.807084883s ago: executing program 0 (id=204): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000000), 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600000000008ff40fe800000000000000000000000000001fe8000000000000000000000000000aa0000000000000000"], 0x0) recvfrom$inet6(r0, &(0x7f0000000000), 0x1, 0x20, 0x0, 0x0) 1.806933253s ago: executing program 2 (id=205): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x115c, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000300)={0x2, 0x115c, @loopback}, 0x10) r2 = accept(r0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000500)="0011223344556677", 0x8, 0x0, 0x0, 0x0) 1.761643584s ago: executing program 3 (id=206): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a85, @loopback}, 0x10) listen(r0, 0x5) r1 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = accept$inet(r0, &(0x7f0000000200), &(0x7f0000000210)=0x10) nanosleep(&(0x7f0000000400)={0x0, 0x989680}, 0x0) write(r2, &(0x7f0000000300)='ceph v027\x00'/278, 0x119) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) write(r2, &(0x7f0000000800)="01ffffffffffffffff00"/29, 0x1e) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) write(r2, &(0x7f0000000c00)="070100000000000000000000000000000030000000000000000000000000000000000000000100000000000000000000000000000028d7b3ad00"/74, 0x48) nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0) 1.643871817s ago: executing program 1 (id=207): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x2327, @empty}}, 0x24) listen(r0, 0x5) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "01"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r1, &(0x7f0000000700)={&(0x7f0000000300)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x2327, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000800)=[{0x18, 0x110, 0x1, "05000000"}], 0x18}, 0x0) nanosleep(&(0x7f0000000e00)={0x0, 0x5f5e100}, 0x0) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b00), 0x100}], 0x1}, 0x40) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)='world', 0x5}], 0x1, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) 1.495884421s ago: executing program 1 (id=208): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x34, 0x2c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0x0, 0xffff}, {0x0, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@deltfilter={0x34, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0x0, 0xffff}, {0x0, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) 1.445825892s ago: executing program 1 (id=209): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r1, 0x0, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x4e20, @loopback}}}}, &(0x7f0000000200)=0xb0) sendto$inet(r1, &(0x7f0000000300)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x20, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r2, &(0x7f0000000300)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x20, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r3, &(0x7f0000000300)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x20, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) accept$inet(r0, 0x0, 0x0) 1.13444307s ago: executing program 1 (id=210): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e24, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5df}}, 0xc1d, 0x0, 0x3fc, 0x0, 0x36, 0x0, 0x4}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x10001, 0x20}, 0xc) r4 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) fspick(r4, &(0x7f00000000c0)='.\x00', 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r2, &(0x7f0000000280)={r4, r1, 0x9}) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000100)=0x7f, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000640)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, 0x0, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x4, @loopback}}, 0x100, 0x0, 0xffffff01, 0x0, 0x54, 0x6, 0x73}, 0x9c) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0x0, &(0x7f0000000180)='net/ipv6_route\x00') rmdir(&(0x7f00000000c0)='./cgroup/../file0\x00') mlock(&(0x7f000097c000/0x2000)=nil, 0x2000) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="110725bd7000f9dbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x1c) mmap(&(0x7f000097a000/0x4000)=nil, 0x4000, 0x0, 0x4031, 0xffffffffffffffff, 0xee2be000) 1.052792132s ago: executing program 1 (id=211): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newtfilter={0x3c, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x1}}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newtfilter={0x3c, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x2}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x2}}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x2}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) nanosleep(&(0x7f0000000900)={0x1}, 0x0) 843.992358ms ago: executing program 0 (id=212): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x44, 0x2, 0x6, 0x601, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x44}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newtfilter={0x40, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x40}}, 0x0) 842.626698ms ago: executing program 2 (id=213): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x0, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x80}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d2, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_comp={0x0, 0x3, {{'deflate\x00'}}}]}}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x0, 0x10, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x1, '\x00', 0x2}, @in6=@private2={0xfc, 0x1, '\x00', 0x2}, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x80}, {@in6=@private2={0xfc, 0x1, '\x00', 0x2}, 0x4d2, 0x6c}, @in6=@private2={0xfc, 0x1, '\x00', 0x2}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_comp={0x0, 0x3, {{'deflate\x00'}}}]}}}, 0x0) 728.64291ms ago: executing program 3 (id=214): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="28000000130001000200"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000e0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000780)=ANY=[@ANYBLOB="20000000130001000300"/20, @ANYRES32=r3, @ANYBLOB="0100000001000000"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000120)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3c0000001400010604000000000000000a400000", @ANYRES32=r3, @ANYBLOB="1400020020010db800000000000000"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000160)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=ANY=[@ANYBLOB="2c0000001800010605000000000000000a000000030001000000000008000f00e803000008000400", @ANYRES32=r3], 0x2c}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000880)='veth0\x00', 0x6) sendto$inet6(r1, &(0x7f0000000900)="001122334455", 0x6, 0x0, &(0x7f0000000a00)={0xa, 0x5000, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) sendto$inet6(r1, &(0x7f0000000900)="001122334455", 0x6, 0x0, &(0x7f0000000b00)={0xa, 0x5000, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) sendto$inet6(r1, &(0x7f0000000900)="001122334455", 0x6, 0x0, &(0x7f0000000c00)={0xa, 0x5000, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r4 = socket$inet6(0xa, 0x3, 0x3b) sendto$inet6(r4, &(0x7f0000000900)="001122334455", 0x6, 0x0, &(0x7f0000000d00)={0xa, 0x5000, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) 706.005502ms ago: executing program 0 (id=215): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x0, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) listen(0xffffffffffffffff, 0x5) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000300)={0x2, 0x4e20, @loopback}, 0x10) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000380)='hello\x00', 0x5) read(r3, &(0x7f00000003c0), 0x5) 643.902553ms ago: executing program 2 (id=216): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x2327, @empty}}, 0x24) listen(r0, 0x5) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "01"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r1, &(0x7f0000000700)={&(0x7f0000000300)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x2327, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000800)=[{0x18, 0x110, 0x1, "0500"}], 0x18}, 0x0) nanosleep(&(0x7f0000000e00)={0x0, 0x5f5e100}, 0x0) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b00), 0x100}], 0x1}, 0x40) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)='world', 0x5}], 0x1, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) 564.601975ms ago: executing program 0 (id=217): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1032}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', 0x1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), r2) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x34, r3, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x1388}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x4}]}, 0x34}}, 0x0) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0000000000010000000000020800450000560000000040117c957f0000017f0000011234138800420000140400"/106], 0x64) 466.536957ms ago: executing program 3 (id=218): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="28000000130001000200"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000700)=ANY=[@ANYBLOB="20000000130001000300"/20, @ANYRES32=r2, @ANYBLOB="0100000001000000"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000120)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3c000000140001060400", @ANYRES32=r3, @ANYBLOB="1400020020010db8000000000000000000000001"], 0x3c}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000880)='veth0\x00', 0x6) sendto$inet6(r1, &(0x7f0000000900)="001122334455", 0x6, 0x0, &(0x7f0000000a00)={0xa, 0x5000, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) 407.646189ms ago: executing program 2 (id=219): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e24, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5df}}, 0xc1d, 0x0, 0x3fc, 0x0, 0x36, 0x0, 0x4}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x10001, 0x20}, 0xc) r4 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) fspick(r4, &(0x7f00000000c0)='.\x00', 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r2, &(0x7f0000000280)={r4, r1, 0x9}) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000100)=0x7f, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000640)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, 0x0, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x4, @loopback}}, 0x100, 0x0, 0xffffff01, 0x0, 0x54, 0x6, 0x73}, 0x9c) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0x0, &(0x7f0000000180)='net/ipv6_route\x00') rmdir(&(0x7f00000000c0)='./cgroup/../file0\x00') mlock(&(0x7f000097c000/0x2000)=nil, 0x2000) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400", @ANYRES16=r5, @ANYBLOB="110725bd7000f9dbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x1c) mmap(&(0x7f000097a000/0x4000)=nil, 0x4000, 0x0, 0x4031, 0xffffffffffffffff, 0xee2be000) 287.853332ms ago: executing program 0 (id=220): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710, @local}, 0x10) r2 = accept4$vsock_stream(r0, 0x0, 0x0, 0x80000) sendto(r2, &(0x7f0000000200)='A', 0x1, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x8, &(0x7f00000000c0), &(0x7f0000000400)=0x0, &(0x7f0000000500)=0x0, &(0x7f0000000600)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x10, 0x0, @fd=r1, 0x0, &(0x7f0000000800)=""/10, 0xa, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000240)=@IORING_OP_READ=@pass_buffer={0x16, 0x10, 0x0, @fd=r1, 0x0, &(0x7f0000000a00)=""/10, 0xa, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r3, 0x2, 0x0, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f0000000b00)=""/10, 0xa, 0x0, 0x0, 0x0) 223.855474ms ago: executing program 2 (id=221): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x115c, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000300)={0x2, 0x115c, @loopback}, 0x10) r2 = accept(r0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000500)="0011223344556677", 0x8, 0x0, 0x0, 0x0) 154.418395ms ago: executing program 1 (id=222): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a85, @loopback}, 0x10) listen(r0, 0x5) r1 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = accept$inet(r0, &(0x7f0000000200), &(0x7f0000000210)=0x10) nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0) write(r2, &(0x7f0000000300)='ceph v027\x00'/278, 0x119) nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0) write(r2, &(0x7f0000000800)="01ffffffffffffffffffffffffffffffff00"/30, 0x1e) nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0) write(r2, &(0x7f0000000c00)="070100000000000000000000000000000030000000000000000000000000000000000000000100000000000000000000000000000028d7b3ad00"/74, 0x48) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) 132.781366ms ago: executing program 3 (id=223): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='2\x00', 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000100", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x1000}}}}}}}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000140)={0x0, 0x0}, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000400)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000100", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, r3, r2, 0x0, 0x0, 0x5, 0x10, 0x1000}}}}}}}, 0x0) 0s ago: executing program 3 (id=224): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r0) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000040), 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000080), 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000600)={'netdevsim0\x00', 0x1}) nanosleep(&(0x7f0000000700)={0x0, 0x1dcd6500}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.236' (ED25519) to the list of known hosts. [ 76.525958][ T5767] cgroup: Unknown subsys name 'net' [ 76.659643][ T5767] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.320454][ T5767] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.069110][ T5793] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.077300][ T5793] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.111656][ T5791] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.113302][ T5793] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.125293][ T5792] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.128912][ T5793] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.137001][ T5792] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.146695][ T5793] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.147691][ T5791] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.157629][ T5793] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.165263][ T5791] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.169625][ T5793] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 80.181068][ T5791] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.184323][ T5793] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.193693][ T5791] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.202641][ T5793] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.211077][ T5791] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.218993][ T5793] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 80.226924][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 80.234439][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.244382][ T5791] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.246477][ T5793] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.259372][ T5793] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 80.268283][ T5793] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.690757][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 80.777184][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 80.885988][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 80.941120][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.948892][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.956653][ T5780] bridge_slave_0: entered allmulticast mode [ 80.964359][ T5780] bridge_slave_0: entered promiscuous mode [ 80.978261][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.985541][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.993273][ T5780] bridge_slave_1: entered allmulticast mode [ 81.000650][ T5780] bridge_slave_1: entered promiscuous mode [ 81.039973][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 81.099626][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.113157][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.142201][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.149566][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.157678][ T5781] bridge_slave_0: entered allmulticast mode [ 81.164868][ T5781] bridge_slave_0: entered promiscuous mode [ 81.208158][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.216059][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.223698][ T5781] bridge_slave_1: entered allmulticast mode [ 81.231169][ T5781] bridge_slave_1: entered promiscuous mode [ 81.295987][ T5780] team0: Port device team_slave_0 added [ 81.305838][ T5780] team0: Port device team_slave_1 added [ 81.321023][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.342519][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.349798][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.357470][ T5783] bridge_slave_0: entered allmulticast mode [ 81.364562][ T5783] bridge_slave_0: entered promiscuous mode [ 81.398521][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.408159][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.416917][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.424363][ T5783] bridge_slave_1: entered allmulticast mode [ 81.432063][ T5783] bridge_slave_1: entered promiscuous mode [ 81.461473][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.468605][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.495826][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.526704][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.535531][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.544319][ T5779] bridge_slave_0: entered allmulticast mode [ 81.553070][ T5779] bridge_slave_0: entered promiscuous mode [ 81.563000][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.569970][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.596091][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.627466][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.634848][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.642179][ T5779] bridge_slave_1: entered allmulticast mode [ 81.649373][ T5779] bridge_slave_1: entered promiscuous mode [ 81.670191][ T5781] team0: Port device team_slave_0 added [ 81.679329][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.692248][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.730839][ T5781] team0: Port device team_slave_1 added [ 81.781549][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.794439][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.831404][ T5783] team0: Port device team_slave_0 added [ 81.848196][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.855599][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.882351][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.895495][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.902888][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.929066][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.942255][ T5783] team0: Port device team_slave_1 added [ 81.954394][ T5780] hsr_slave_0: entered promiscuous mode [ 81.964408][ T5780] hsr_slave_1: entered promiscuous mode [ 81.998869][ T5779] team0: Port device team_slave_0 added [ 82.044493][ T5779] team0: Port device team_slave_1 added [ 82.089156][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.096304][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.122727][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.162323][ T5781] hsr_slave_0: entered promiscuous mode [ 82.168731][ T5781] hsr_slave_1: entered promiscuous mode [ 82.175153][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.183269][ T5781] Cannot create hsr debugfs directory [ 82.189544][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.197420][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.223632][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.235497][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.242776][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.268929][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.283106][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.290107][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.317249][ T5791] Bluetooth: hci3: command tx timeout [ 82.323343][ T5793] Bluetooth: hci0: command tx timeout [ 82.323366][ T5787] Bluetooth: hci1: command tx timeout [ 82.335439][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.370567][ T5793] Bluetooth: hci2: command tx timeout [ 82.508406][ T5779] hsr_slave_0: entered promiscuous mode [ 82.514998][ T5779] hsr_slave_1: entered promiscuous mode [ 82.522266][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.529862][ T5779] Cannot create hsr debugfs directory [ 82.581123][ T5783] hsr_slave_0: entered promiscuous mode [ 82.587996][ T5783] hsr_slave_1: entered promiscuous mode [ 82.594619][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.602306][ T5783] Cannot create hsr debugfs directory [ 82.945939][ T5780] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.958604][ T5780] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.970564][ T5780] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.981571][ T5780] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.062275][ T5781] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.073961][ T5781] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.085043][ T5781] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.096586][ T5781] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.209565][ T5779] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.249253][ T5779] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.259751][ T5779] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.291065][ T5779] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.353948][ T5783] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.381503][ T5783] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.393923][ T5783] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.406258][ T5783] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.423809][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.462787][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.506695][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.536265][ T2933] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.543702][ T2933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.586288][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.607248][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.614577][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.646392][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.653584][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.686223][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.693470][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.819129][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.894131][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.923738][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.973229][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.980490][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.013356][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.020583][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.088431][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.142278][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.149859][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.182769][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.190019][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.337493][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.372007][ T5791] Bluetooth: hci0: command tx timeout [ 84.372400][ T5787] Bluetooth: hci3: command tx timeout [ 84.377686][ T5793] Bluetooth: hci1: command tx timeout [ 84.443359][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.454551][ T5793] Bluetooth: hci2: command tx timeout [ 84.563599][ T5780] veth0_vlan: entered promiscuous mode [ 84.599519][ T5781] veth0_vlan: entered promiscuous mode [ 84.630002][ T5780] veth1_vlan: entered promiscuous mode [ 84.686751][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.702978][ T5781] veth1_vlan: entered promiscuous mode [ 84.763346][ T5780] veth0_macvtap: entered promiscuous mode [ 84.809349][ T5780] veth1_macvtap: entered promiscuous mode [ 84.848743][ T5781] veth0_macvtap: entered promiscuous mode [ 84.885194][ T5781] veth1_macvtap: entered promiscuous mode [ 84.901797][ T5779] veth0_vlan: entered promiscuous mode [ 84.917810][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.945165][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.959762][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.972644][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.988520][ T5779] veth1_vlan: entered promiscuous mode [ 84.998645][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.026057][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.036694][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.049011][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.075225][ T5781] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.087581][ T5781] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.097555][ T5781] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.107492][ T5781] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.120277][ T5780] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.135042][ T5780] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.144962][ T5780] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.154576][ T5780] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.184390][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.264442][ T5779] veth0_macvtap: entered promiscuous mode [ 85.295488][ T5779] veth1_macvtap: entered promiscuous mode [ 85.396963][ T5783] veth0_vlan: entered promiscuous mode [ 85.402793][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.429805][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.432119][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.458944][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.464478][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.478186][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.488412][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.499720][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.512828][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.526249][ T5783] veth1_vlan: entered promiscuous mode [ 85.557995][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.570178][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.580989][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.591669][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.601692][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.612279][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.624456][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.698923][ T5779] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.709995][ T5779] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.722259][ T5779] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.731808][ T5779] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.761544][ T2933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.781813][ T2933] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.807381][ T5783] veth0_macvtap: entered promiscuous mode [ 85.846693][ T5783] veth1_macvtap: entered promiscuous mode [ 85.967703][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.979417][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.027852][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.041958][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.058821][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.069907][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.082657][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.189920][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.202527][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.214516][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.226432][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.237608][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.251398][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.263454][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.278006][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.302092][ T5848] Zero length message leads to an empty skb [ 86.308109][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.327997][ T5783] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.344520][ T5783] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.353949][ T5783] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.362861][ T5783] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.452231][ T5793] Bluetooth: hci3: command tx timeout [ 86.452251][ T5787] Bluetooth: hci1: command tx timeout [ 86.457741][ T5793] Bluetooth: hci0: command tx timeout [ 86.529294][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.532349][ T5793] Bluetooth: hci2: command tx timeout [ 86.552226][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.759834][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.820780][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.952018][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.960015][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.469852][ T5873] (null): rxe_set_mtu: Set mtu to 4096 [ 87.545999][ T5873] lo speed is unknown, defaulting to 1000 [ 87.568554][ T5873] lo speed is unknown, defaulting to 1000 [ 87.619149][ T5873] lo speed is unknown, defaulting to 1000 [ 87.729662][ T5871] svc: failed to register nfsdv3 RPC service (errno 111). [ 87.750282][ T5871] svc: failed to register nfsaclv3 RPC service (errno 111). [ 87.765860][ T5858] ceph: No mds server is up or the cluster is laggy [ 87.778333][ T5843] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 88.402555][ T5892] netlink: 'syz.2.16': attribute type 2 has an invalid length. [ 88.479947][ T5843] lo speed is unknown, defaulting to 1000 [ 88.497407][ T5873] infiniband syz1: set active [ 88.513802][ T5873] infiniband syz1: added lo [ 88.530826][ T5793] Bluetooth: hci0: command tx timeout [ 88.536466][ T5791] Bluetooth: hci1: command tx timeout [ 88.541878][ T5787] Bluetooth: hci3: command tx timeout [ 88.564378][ T5873] syz1: rxe_create_cq: returned err = -12 [ 88.581937][ T5873] infiniband syz1: Couldn't create ib_mad CQ [ 88.610779][ T5793] Bluetooth: hci2: command tx timeout [ 88.632254][ T5873] infiniband syz1: Couldn't open port 1 [ 88.740005][ T5873] RDS/IB: syz1: added [ 88.777439][ T5873] smc: adding ib device syz1 with port count 1 [ 88.805385][ T5873] smc: ib device syz1 port 1 has pnetid [ 88.892809][ T5843] lo speed is unknown, defaulting to 1000 [ 88.924530][ T5873] lo speed is unknown, defaulting to 1000 [ 89.434081][ T5873] lo speed is unknown, defaulting to 1000 [ 89.525444][ T5921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.26'. [ 89.752482][ T5912] lo speed is unknown, defaulting to 1000 [ 89.968372][ T5873] lo speed is unknown, defaulting to 1000 [ 89.980878][ T27] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 90.201438][ T27] usb 2-1: config 1 descriptor has 1 excess byte, ignoring [ 90.219260][ T27] usb 2-1: config 1 interface 2 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 90.250809][ T27] usb 2-1: New USB device found, idVendor=1110, idProduct=9000, bcdDevice= 1.00 [ 90.265188][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 90.273786][ T27] usb 2-1: Product: syz [ 90.279500][ T27] usb 2-1: Manufacturer: syz [ 90.344745][ T5873] lo speed is unknown, defaulting to 1000 [ 90.355580][ T27] usb 2-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9000) Rev (0X100): ADI930 [ 90.524104][ T27] usb 2-1: reset high-speed USB device number 2 using dummy_hcd [ 90.677496][ T5873] lo speed is unknown, defaulting to 1000 [ 90.865181][ T5873] lo speed is unknown, defaulting to 1000 [ 91.939441][ T5960] netlink: 60 bytes leftover after parsing attributes in process `syz.2.40'. [ 91.995448][ T3067] cfg80211: failed to load regulatory.db [ 92.007803][ T5960] netlink: 60 bytes leftover after parsing attributes in process `syz.2.40'. [ 92.028040][ T27] usb 2-1: Direct firmware load for ueagle-atm/930-fpga.bin failed with error -2 [ 92.039682][ T5960] netlink: 60 bytes leftover after parsing attributes in process `syz.2.40'. [ 92.049440][ T27] usb 2-1: Falling back to sysfs fallback for: ueagle-atm/930-fpga.bin [ 92.059377][ T5960] netlink: 60 bytes leftover after parsing attributes in process `syz.2.40'. [ 92.162028][ T5964] tipc: Started in network mode [ 92.167225][ T5964] tipc: Node identity 1, cluster identity 4711 [ 92.182460][ T5964] tipc: Node number set to 1 [ 92.189696][ T5964] tipc: New replicast peer: 127.0.0.1 [ 92.197794][ T5964] tipc: Enabled bearer , priority 10 [ 92.284402][ T5966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.43'. [ 92.493982][ T5971] tipc: Disabling bearer [ 92.587215][ T5979] lo speed is unknown, defaulting to 1000 [ 92.900153][ T5992] netlink: 16 bytes leftover after parsing attributes in process `syz.0.51'. [ 92.919616][ T5990] netlink: 48 bytes leftover after parsing attributes in process `syz.0.51'. [ 93.102906][ T5988] lo speed is unknown, defaulting to 1000 [ 94.034926][ T5986] lo speed is unknown, defaulting to 1000 [ 94.325063][ T6033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.61'. [ 94.374104][ T6037] netlink: 124 bytes leftover after parsing attributes in process `syz.1.61'. [ 94.420126][ T6032] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.539131][ T5980] lo speed is unknown, defaulting to 1000 [ 94.701005][ T6041] netlink: 12 bytes leftover after parsing attributes in process `syz.1.64'. [ 94.721294][ T6041] netlink: 108 bytes leftover after parsing attributes in process `syz.1.64'. [ 94.794415][ T6019] lo speed is unknown, defaulting to 1000 [ 94.822968][ T3067] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 95.043876][ T3067] usb 4-1: config 1 descriptor has 1 excess byte, ignoring [ 95.060704][ T3067] usb 4-1: config 1 interface 2 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 95.082843][ T3067] usb 4-1: New USB device found, idVendor=1110, idProduct=9000, bcdDevice= 1.00 [ 95.096326][ T3067] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 95.115890][ T3067] usb 4-1: Product: syz [ 95.120149][ T3067] usb 4-1: Manufacturer: syz [ 95.191313][ T3067] usb 4-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9000) Rev (0X100): ADI930 [ 95.372685][ T3067] usb 4-1: reset high-speed USB device number 2 using dummy_hcd [ 96.057703][ T6060] tipc: Started in network mode [ 96.062907][ T6060] tipc: Node identity aaaaaaaaaa18, cluster identity 4711 [ 96.077500][ T6060] tipc: Enabled bearer , priority 10 [ 96.085811][ T6060] tipc: Disabling bearer [ 96.262758][ T6064] netlink: 16 bytes leftover after parsing attributes in process `syz.2.72'. [ 96.704681][ T6076] netlink: 60 bytes leftover after parsing attributes in process `syz.0.77'. [ 96.720139][ T6076] netlink: 60 bytes leftover after parsing attributes in process `syz.0.77'. [ 96.742258][ T6069] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.753449][ T6076] netlink: 60 bytes leftover after parsing attributes in process `syz.0.77'. [ 96.765775][ T6076] netlink: 60 bytes leftover after parsing attributes in process `syz.0.77'. [ 96.806943][ T6073] netdevsim netdevsim10 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.837465][ T6079] svc: failed to register nfsdv3 RPC service (errno 101). [ 96.847486][ T6079] svc: failed to register nfsaclv3 RPC service (errno 101). [ 96.910126][ T6069] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.089182][ T6069] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.160831][ T6089] netlink: 36 bytes leftover after parsing attributes in process `syz.0.79'. [ 97.223043][ T6069] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.392057][ T6069] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.412167][ T6069] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.486730][ T6069] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.502686][ T6100] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 97.553483][ T6069] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.677528][ T6110] netlink: 16 bytes leftover after parsing attributes in process `syz.0.84'. [ 98.610019][ T6132] netlink: 36 bytes leftover after parsing attributes in process `syz.3.90'. [ 99.817125][ T6169] __nla_validate_parse: 1 callbacks suppressed [ 99.817144][ T6169] netlink: 36 bytes leftover after parsing attributes in process `syz.3.101'. [ 100.333224][ T6185] netlink: 16 bytes leftover after parsing attributes in process `syz.0.104'. [ 100.606249][ T6195] veth1_macvtap: left promiscuous mode [ 100.883272][ T6205] netlink: 36 bytes leftover after parsing attributes in process `syz.1.110'. [ 101.249639][ T6216] netlink: 36 bytes leftover after parsing attributes in process `syz.3.114'. [ 101.860281][ T6236] netlink: 36 bytes leftover after parsing attributes in process `syz.3.120'. [ 102.321019][ T6252] netlink: 36 bytes leftover after parsing attributes in process `syz.1.125'. [ 102.648630][ T6271] nvme_fabrics: unknown parameter or missing value 'tls_key=1' in ctrl creation request [ 102.756227][ T6275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.132'. [ 103.306461][ T6289] netlink: 36 bytes leftover after parsing attributes in process `syz.3.137'. [ 104.081917][ T6277] NFSD: attempt to initialize umh client tracking in a container ignored. [ 104.094824][ T6277] NFSD: attempt to initialize legacy client tracking in a container ignored. [ 104.103787][ T6277] NFSD: Unable to initialize client recovery tracking! (-22) [ 104.112891][ T6277] NFSD: starting 90-second grace period (net f0000477) [ 105.254431][ T6355] netlink: 32 bytes leftover after parsing attributes in process `syz.2.160'. [ 106.152387][ T6389] netlink: 36 bytes leftover after parsing attributes in process `syz.3.173'. [ 106.167223][ T6389] netlink: 36 bytes leftover after parsing attributes in process `syz.3.173'. [ 106.179278][ T6389] netlink: 'syz.3.173': attribute type 1 has an invalid length. [ 106.190583][ T6389] netlink: 'syz.3.173': attribute type 2 has an invalid length. [ 106.624401][ T6414] sctp: [Deprecated]: syz.2.180 (pid 6414) Use of int in maxseg socket option. [ 106.624401][ T6414] Use struct sctp_assoc_value instead [ 107.040545][ T5769] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 107.245794][ T5769] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 0.00 [ 107.270411][ T5769] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.278489][ T5769] usb 3-1: Product: syz [ 107.290451][ T5769] usb 3-1: Manufacturer: syz [ 107.295134][ T5769] usb 3-1: SerialNumber: syz [ 107.387372][ T6426] tipc: Started in network mode [ 107.394916][ T6426] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 107.406270][ T6426] tipc: Enabled bearer , priority 0 [ 108.532625][ T9] tipc: Node number set to 43690 [ 108.543380][ T5769] usb 3-1: selecting invalid altsetting 1 [ 108.564257][ T5769] speedtch 3-1:1.0: speedtch_bind: setting interface to 1 failed (-22)! [ 108.586589][ T5769] speedtch 3-1:1.0: usbatm_usb_probe: bind failed: -22! [ 108.606762][ T5769] speedtch: probe of 3-1:1.0 failed with error -22 [ 108.631366][ T5769] usb 3-1: selecting invalid altsetting 1 [ 108.637182][ T5769] speedtch 3-1:1.1: speedtch_bind: setting interface to 1 failed (-22)! [ 108.652380][ T5769] speedtch 3-1:1.1: usbatm_usb_probe: bind failed: -22! [ 108.666754][ T5769] speedtch: probe of 3-1:1.1 failed with error -22 [ 108.698367][ T5769] usb 3-1: USB disconnect, device number 2 [ 108.988370][ T6469] netlink: 28 bytes leftover after parsing attributes in process `syz.0.201'. [ 109.002963][ T6469] netlink: 28 bytes leftover after parsing attributes in process `syz.0.201'. [ 109.041406][ T6472] netlink: 16 bytes leftover after parsing attributes in process `syz.3.202'. [ 109.265253][ T177] libceph: connect (1)127.0.0.1:6789 error -101 [ 109.272287][ T177] libceph: mon0 (1)127.0.0.1:6789 connect error [ 109.559313][ T177] libceph: connect (1)127.0.0.1:6789 error -101 [ 109.565930][ T177] libceph: mon0 (1)127.0.0.1:6789 connect error [ 110.081312][ T6481] ceph: No mds server is up or the cluster is laggy [ 110.120713][ T9] libceph: connect (1)127.0.0.1:6789 error -101 [ 110.127501][ T9] libceph: mon0 (1)127.0.0.1:6789 connect error [ 110.348885][ T6513] netlink: 16 bytes leftover after parsing attributes in process `syz.3.214'. [ 110.621167][ T6524] netlink: 36 bytes leftover after parsing attributes in process `syz.3.218'. [ 110.858754][ T6534] syz.3.223 (6534) used greatest stack depth: 20400 bytes left [ 110.984413][ T9] ------------[ cut here ]------------ [ 110.990013][ T9] WARNING: CPU: 0 PID: 9 at net/ceph/messenger_v1.c:906 ceph_con_v1_try_read+0x3136/0x6400 [ 111.000660][ T9] Modules linked in: [ 111.004702][ T9] CPU: 0 PID: 9 Comm: kworker/0:1 Not tainted syzkaller #0 [ 111.012288][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 111.022898][ T9] Workqueue: ceph-msgr ceph_con_workfn [ 111.028664][ T9] RIP: 0010:ceph_con_v1_try_read+0x3136/0x6400 [ 111.035134][ T9] Code: e8 bf 22 3b f7 45 31 ff e9 19 d3 ff ff e8 b2 22 3b f7 0f 0b e9 dd d5 ff ff e8 a6 22 3b f7 0f 0b e9 0f e8 ff ff e8 9a 22 3b f7 <0f> 0b e9 2e e9 ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 10 d3 ff [ 111.055297][ T9] RSP: 0018:ffffc900000e71c0 EFLAGS: 00010293 [ 111.061515][ T9] RAX: ffffffff8a4c4ee6 RBX: 0000000000000001 RCX: ffff88801b658000 [ 111.069546][ T9] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000001 [ 111.077769][ T9] RBP: ffffc900000e7b38 R08: ffff88801b658000 R09: 0000000000000009 [ 111.085911][ T9] R10: 000000000000000d R11: 0000000000000000 R12: ffff888025bd08c0 [ 111.094011][ T9] R13: dffffc0000000000 R14: fffff5200001ce74 R15: 00000000ffffffff [ 111.102337][ T9] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 111.111418][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 111.118478][ T9] CR2: 00007f1c58d88e80 CR3: 00000000256fa000 CR4: 00000000003506f0 [ 111.126670][ T9] Call Trace: [ 111.130026][ T9] [ 111.133209][ T9] ? ceph_strings_empty+0x20/0x20 [ 111.138295][ T9] ? lockdep_hardirqs_on+0x98/0x150 [ 111.143644][ T9] ? __release_sock+0x3d0/0x460 [ 111.148634][ T9] ? mark_lock+0x94/0x320 [ 111.153093][ T9] ? __lock_acquire+0x1262/0x7d80 [ 111.158182][ T9] ? mark_lock+0x94/0x320 [ 111.162617][ T9] ? __lock_acquire+0x1336/0x7d80 [ 111.167672][ T9] ? mark_lock+0x94/0x320 [ 111.172614][ T9] ? __lock_acquire+0x1336/0x7d80 [ 111.177850][ T9] ? register_lock_class+0xc4/0x8a0 [ 111.183286][ T9] ? verify_lock_unused+0x140/0x140 [ 111.188552][ T9] ? is_dynamic_key+0x260/0x260 [ 111.193524][ T9] ? mark_lock+0x94/0x320 [ 111.197971][ T9] ? __mutex_trylock_common+0x160/0x270 [ 111.203772][ T9] ? trace_raw_output_contention_end+0xd0/0xd0 [ 111.210008][ T9] ? rcu_is_watching+0x15/0xb0 [ 111.214911][ T9] ? trace_contention_end+0x39/0xe0 [ 111.220572][ T9] ? __mutex_lock+0x30d/0xc80 [ 111.225320][ T9] ? ceph_con_workfn+0x39/0x1250 [ 111.230483][ T9] ? mutex_lock_nested+0x20/0x20 [ 111.235493][ T9] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 111.241653][ T9] ? __lock_acquire+0x7d80/0x7d80 [ 111.246882][ T9] ceph_con_workfn+0x205/0x1250 [ 111.251931][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 111.257215][ T9] ? process_scheduled_works+0x975/0x1600 [ 111.263056][ T9] ? process_scheduled_works+0x975/0x1600 [ 111.268841][ T9] process_scheduled_works+0xa60/0x1600 [ 111.274551][ T9] ? worker_attach_to_pool+0x370/0x370 [ 111.280121][ T9] ? assign_work+0x3cc/0x5d0 [ 111.284820][ T9] worker_thread+0xa5e/0xfe0 [ 111.289487][ T9] ? _raw_spin_unlock+0x40/0x40 [ 111.294459][ T9] ? __kthread_parkme+0x71/0x1c0 [ 111.299466][ T9] kthread+0x2fa/0x390 [ 111.303710][ T9] ? pr_cont_work+0x550/0x550 [ 111.308454][ T9] ? kthread_blkcg+0xd0/0xd0 [ 111.313169][ T9] ret_from_fork+0x48/0x80 [ 111.317640][ T9] ? kthread_blkcg+0xd0/0xd0 [ 111.322707][ T9] ret_from_fork_asm+0x11/0x20 [ 111.328055][ T9] [ 111.331238][ T9] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 111.338567][ T9] CPU: 0 PID: 9 Comm: kworker/0:1 Not tainted syzkaller #0 [ 111.345809][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 111.355917][ T9] Workqueue: ceph-msgr ceph_con_workfn [ 111.361573][ T9] Call Trace: [ 111.364896][ T9] [ 111.367864][ T9] dump_stack_lvl+0x18c/0x250 [ 111.372602][ T9] ? show_regs_print_info+0x20/0x20 [ 111.377847][ T9] ? load_image+0x420/0x420 [ 111.382414][ T9] panic+0x2ca/0x720 [ 111.386371][ T9] ? bpf_jit_dump+0xd0/0xd0 [ 111.390941][ T9] ? ret_from_fork_asm+0x11/0x20 [ 111.395944][ T9] __warn+0x2e0/0x470 [ 111.399982][ T9] ? ceph_con_v1_try_read+0x3136/0x6400 [ 111.405589][ T9] ? ceph_con_v1_try_read+0x3136/0x6400 [ 111.411182][ T9] report_bug+0x2be/0x4f0 [ 111.415572][ T9] ? ceph_con_v1_try_read+0x3136/0x6400 [ 111.421172][ T9] ? ceph_con_v1_try_read+0x3136/0x6400 [ 111.426774][ T9] ? ceph_con_v1_try_read+0x3138/0x6400 [ 111.432385][ T9] handle_bug+0xcf/0x120 [ 111.436726][ T9] exc_invalid_op+0x1a/0x50 [ 111.441277][ T9] asm_exc_invalid_op+0x1a/0x20 [ 111.446166][ T9] RIP: 0010:ceph_con_v1_try_read+0x3136/0x6400 [ 111.452355][ T9] Code: e8 bf 22 3b f7 45 31 ff e9 19 d3 ff ff e8 b2 22 3b f7 0f 0b e9 dd d5 ff ff e8 a6 22 3b f7 0f 0b e9 0f e8 ff ff e8 9a 22 3b f7 <0f> 0b e9 2e e9 ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 10 d3 ff [ 111.472072][ T9] RSP: 0018:ffffc900000e71c0 EFLAGS: 00010293 [ 111.478163][ T9] RAX: ffffffff8a4c4ee6 RBX: 0000000000000001 RCX: ffff88801b658000 [ 111.486162][ T9] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000001 [ 111.494178][ T9] RBP: ffffc900000e7b38 R08: ffff88801b658000 R09: 0000000000000009 [ 111.502236][ T9] R10: 000000000000000d R11: 0000000000000000 R12: ffff888025bd08c0 [ 111.510783][ T9] R13: dffffc0000000000 R14: fffff5200001ce74 R15: 00000000ffffffff [ 111.518791][ T9] ? ceph_con_v1_try_read+0x3136/0x6400 [ 111.524435][ T9] ? ceph_strings_empty+0x20/0x20 [ 111.529499][ T9] ? lockdep_hardirqs_on+0x98/0x150 [ 111.534740][ T9] ? __release_sock+0x3d0/0x460 [ 111.539719][ T9] ? mark_lock+0x94/0x320 [ 111.544110][ T9] ? __lock_acquire+0x1262/0x7d80 [ 111.549206][ T9] ? mark_lock+0x94/0x320 [ 111.553679][ T9] ? __lock_acquire+0x1336/0x7d80 [ 111.558743][ T9] ? mark_lock+0x94/0x320 [ 111.563112][ T9] ? __lock_acquire+0x1336/0x7d80 [ 111.568191][ T9] ? register_lock_class+0xc4/0x8a0 [ 111.573829][ T9] ? verify_lock_unused+0x140/0x140 [ 111.579680][ T9] ? is_dynamic_key+0x260/0x260 [ 111.584690][ T9] ? mark_lock+0x94/0x320 [ 111.589120][ T9] ? __mutex_trylock_common+0x160/0x270 [ 111.594715][ T9] ? trace_raw_output_contention_end+0xd0/0xd0 [ 111.600930][ T9] ? rcu_is_watching+0x15/0xb0 [ 111.605740][ T9] ? trace_contention_end+0x39/0xe0 [ 111.610979][ T9] ? __mutex_lock+0x30d/0xc80 [ 111.615708][ T9] ? ceph_con_workfn+0x39/0x1250 [ 111.620687][ T9] ? mutex_lock_nested+0x20/0x20 [ 111.625671][ T9] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 111.631692][ T9] ? __lock_acquire+0x7d80/0x7d80 [ 111.636763][ T9] ceph_con_workfn+0x205/0x1250 [ 111.641655][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 111.646900][ T9] ? process_scheduled_works+0x975/0x1600 [ 111.652663][ T9] ? process_scheduled_works+0x975/0x1600 [ 111.658424][ T9] process_scheduled_works+0xa60/0x1600 [ 111.664034][ T9] ? worker_attach_to_pool+0x370/0x370 [ 111.669537][ T9] ? assign_work+0x3cc/0x5d0 [ 111.674179][ T9] worker_thread+0xa5e/0xfe0 [ 111.678816][ T9] ? _raw_spin_unlock+0x40/0x40 [ 111.683709][ T9] ? __kthread_parkme+0x71/0x1c0 [ 111.688831][ T9] kthread+0x2fa/0x390 [ 111.692953][ T9] ? pr_cont_work+0x550/0x550 [ 111.697674][ T9] ? kthread_blkcg+0xd0/0xd0 [ 111.702860][ T9] ret_from_fork+0x48/0x80 [ 111.707336][ T9] ? kthread_blkcg+0xd0/0xd0 [ 111.711975][ T9] ret_from_fork_asm+0x11/0x20 [ 111.716900][ T9] [ 111.720527][ T9] Kernel Offset: disabled [ 111.724946][ T9] Rebooting in 86400 seconds..