last executing test programs: 1m17.458225598s ago: executing program 4 (id=599): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x5, 0x1, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x1c, 0x1, {0x3e8}}, @TCA_RED_STAB={0x104}]}}]}, 0x134}}, 0x0) 1m17.17403012s ago: executing program 4 (id=604): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000003f000500000000000000000001000000000000000f0001006f76732d73797374656d00000800020000000000"], 0x34}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000004100050000000000000000000100000000000000200001001000040000112233445566778899aabb0800000008000600080000001800030008000100010000000800010001000000"], 0x50}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000450)=ANY=[@ANYBLOB="180000004100010300000000000000000300000000000000"], 0x18}}, 0x0) 1m15.435354567s ago: executing program 4 (id=611): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) bind(0xffffffffffffffff, &(0x7f0000000000)=@un=@file={0x1, 'test_unix_sock1\x00'}, 0x12) socket(0x1, 0x1, 0x0) socket(0x1, 0x1, 0x0) socket(0x1, 0x1, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x2c}}, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000014000100000000000000000001000000000000000200000000000000ff"], 0x2c}}, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000014000100000000000000000001000000000000000300000000000000ffffffffffffffffffffffff"], 0x2c}}, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000014000100000000000000000001000000000000000400000000000000"], 0x2c}}, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000014000100000000000000000001000000000000000600000000000000ffffffffffffffffffffffff"], 0x2c}}, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000014000100000000000000000001000000000000000700000000000000ffffffffffffffffffffffff"], 0x2c}}, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000014000100000000000000000001000000000000000800000000000000ffffffffffffffffffffffff"], 0x2c}}, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000014000100000000000000000001000000000000000900000000000000ffffffffffffffffffffffff"], 0x2c}}, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000014000100000000000000000001000000000000000a00000000000000ffffffffffffffffffffffff"], 0x2c}}, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000014000100000000000000000001000000000000000b00000000000000ffffffffffffffffffffffff"], 0x2c}}, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000014000100000000000000000001000000000000000c00000000000000ffffffffffffffffffffffff"], 0x2c}}, 0x0) 1m15.250429178s ago: executing program 4 (id=613): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)={0x68, 0x30, 0x5, 0x0, 0x0, "", [@generic="0000000000000000000000000000000000000000540001005000010008000100676174650000380002801800010000000000000000000000000000000000000000001c0003801800018008000200000000000800030064000000"]}, 0x68}], 0x1}, 0x0) sendmsg$netlink(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)={0x68, 0x30, 0x5, 0x0, 0x0, "", [@generic="0000000000000000000000000000000000000000540001005000010008000100676174650000380002801800010000000000000000000000000000000000000000001c0003801800018008000200000000000800030064000000"]}, 0x68}], 0x1}, 0x0) 1m14.822749382s ago: executing program 4 (id=615): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1ff) mount(&(0x7f0000000e40)=@filename='proc\x00', &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000350)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000450)='-2 -3 +4\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000370)='./nfsd/nfsv4gracetime\x00', 0x1, 0x0) write(r1, &(0x7f0000000470)='10\n', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='tcp 2049\n', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000600)='1\n', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r4, &(0x7f0000000200)='\\x01020304 2000000000 0 0 0 krb5 \\x00000000ffffff7f0000000000000000120000000102030405060708090a0b0c0d0e0f100102030405060708090a0b0c0d0e0f10\n', 0x8c) nanosleep(&(0x7f0000000700)={0xa, 0x1dcd6500}, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000800)={0x2, 0x801, @loopback}, 0x10) write(r5, &(0x7f0000000900)="8000005c000000010000000000000002000186a300000004000000000000000600000018000000010000000000000001000000010000000401020304000000060000001c040400ffffffffff00"/96, 0x60) 1m11.867589115s ago: executing program 4 (id=629): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x14, 0x2, [@TCA_HTB_INIT={0x10, 0x1, {0x3, 0x1, 0x1}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x1}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_vlan={0x58, 0x1, 0x0, 0x0, {{0x9}, {0x2c, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x1, {{0x1, 0x80000001, 0x3, 0x6, 0x3fe}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x2, 0x64}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x4, 0x3}]}, {}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc0}, 0x20044004) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000800)="00112233445566778899aabb8100000108004500001c0000000040113cce01010101010101020001000200080000", 0x2e, 0x0, &(0x7f0000000900)={0x11, 0x0, r2, 0x0, 0x0, 0x6, @random="001122334455"}, 0x14) 56.775916855s ago: executing program 32 (id=629): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x14, 0x2, [@TCA_HTB_INIT={0x10, 0x1, {0x3, 0x1, 0x1}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x1}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_vlan={0x58, 0x1, 0x0, 0x0, {{0x9}, {0x2c, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x1, {{0x1, 0x80000001, 0x3, 0x6, 0x3fe}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x2, 0x64}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x4, 0x3}]}, {}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc0}, 0x20044004) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000800)="00112233445566778899aabb8100000108004500001c0000000040113cce01010101010101020001000200080000", 0x2e, 0x0, &(0x7f0000000900)={0x11, 0x0, r2, 0x0, 0x0, 0x6, @random="001122334455"}, 0x14) 44.596822454s ago: executing program 2 (id=733): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), r0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000000000000000000020100000900010073797a3000000000070002006c6f0000070003006c6f0000"], 0x30}}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) bind(r2, &(0x7f0000000200)=@in={0x2, 0x4e20, @loopback}, 0x10) listen(r2, 0x5) connect(r3, &(0x7f0000000200)=@in={0x2, 0x4e20, @loopback}, 0x10) accept(r2, 0x0, 0x0) 44.066342544s ago: executing program 2 (id=735): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000007000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 43.82440452s ago: executing program 2 (id=736): unshare(0x40000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='nfsd 127.0.0.1 2147483647 test\n\x00', 0x1f) close(r0) umount2(&(0x7f0000000080)='./proc_mnt\x00', 0x2) unshare(0x40000000) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 38.578882849s ago: executing program 2 (id=758): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1 1\x00', 0x4) close(r0) r1 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'netdevsim0\x00', 0x1}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r2) sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x58, r3, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x58}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000500), r4) sendmsg$NET_DM_CMD_START(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x0, r5, 0x1, 0x0, 0x0, {0x2}}}}, 0x0) sendmsg$NET_DM_CMD_START(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x0, r5, 0x1}}}, 0x0) nanosleep(&(0x7f0000000800)={0x0, 0x1dcd6500}, 0x0) 36.732264495s ago: executing program 2 (id=762): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x302, 0x0, 0x0, 0x0, 0x12}, 0x10) listen(r0, 0xa) 36.41254647s ago: executing program 2 (id=766): unshare(0x40000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x0, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x1}]}}}]}, 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x0, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x2}]}}}]}, 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x0, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'dummy0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x3}]}}}]}, 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x0, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x4}]}}}]}, 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x0, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x5}]}}}]}, 0x50}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)='10 1\x00', 0x5) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@dellink={0x0, 0x11, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x34}}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1dcd6500}, 0x0) 34.743366009s ago: executing program 3 (id=776): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'\x00', 0x2}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syz_tun\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000300)={'syz_tun\x00', 0x1}) write$tun(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="0009600d032f"], 0x6) write$tun(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="0009600d03ff"], 0x6) 34.120598205s ago: executing program 3 (id=782): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x20, 0x0, 0x7, 0x1, 0x0, 0x0, {0x2}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x4, 0x2a8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000400), {[{{@ip={@empty, @empty}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty}, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz0\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) r2 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r2, &(0x7f0000000500)="12345678", 0x8, 0x0, &(0x7f0000000600)={0x2, 0x1234, @loopback}, 0x10) 33.962249997s ago: executing program 3 (id=784): r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/threads\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='1\n', 0x2) 33.734153393s ago: executing program 3 (id=787): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="44000000100005060000000000000000000000000000000001000000010000000e00030076736f636b6d6f6e30000000140012000d00010076736f636b6d6f6e00000000"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000110005000000000000000000000000000000000000000000000000000e00030076736f636b6d6f6e30000000"], 0x30}}, 0x0) 33.066285136s ago: executing program 3 (id=792): r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='secret\x00', &(0x7f0000000200)='AQB1234567890123456789012345678901234567890=\x00', 0x0) 32.845529326s ago: executing program 3 (id=794): socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0xc9000001}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4001, @loopback}, 0x10) nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0) 20.733672009s ago: executing program 33 (id=766): unshare(0x40000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x0, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x1}]}}}]}, 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x0, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x2}]}}}]}, 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x0, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'dummy0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x3}]}}}]}, 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x0, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x4}]}}}]}, 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x0, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x5}]}}}]}, 0x50}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)='10 1\x00', 0x5) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@dellink={0x0, 0x11, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x34}}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1dcd6500}, 0x0) 17.722538004s ago: executing program 34 (id=794): socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0xc9000001}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4001, @loopback}, 0x10) nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0) 7.246317523s ago: executing program 0 (id=877): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/1/root/var\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/1/root/var/run\x00', 0x1ff) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './proc/1/root/var/run/gssproxy.sock\x00'}, 0x30) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./nfsd\x00', &(0x7f0000000340)='nfsd\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./nfsd/versions\x00', 0x1, 0x0) write(r2, &(0x7f00000003c0)='-2 -3 +4\n\x00', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000440)='1\n\x00', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./nfsd/portlist\x00', 0x1, 0x0) write(r4, &(0x7f00000004c0)='tcp 2049\n\x00', 0x9) r5 = socket$inet(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000500)={0x2, 0x801, @loopback}, 0x10) sendto$inet(r5, &(0x7f0000000540)="80000040123456780000000000000002000186a3000000030000000000000006000000140000000100000001000000000000000100"/64, 0x44, 0x0, 0x0, 0x0) r6 = accept$unix(r0, 0x0, 0x0) write(r6, &(0x7f0000000580)="8000005412345678000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000", 0x58) 5.760492214s ago: executing program 0 (id=883): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x5) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x38, &(0x7f0000000300)=@raw=[@generic={0x7b, 0xa, 0x1, 0xfff8}, @generic={0xb7, 0x2, 0x0, 0x0, 0xa}, @generic={0x85, 0x0, 0x0, 0x0, 0x3e}, @generic={0x79, 0x1, 0xa, 0xfff8}, @map_fd={0x18, 0x2, 0x1, 0x0, r2}, @generic={0x62, 0xa, 0x0, 0xfff4}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfff4}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x3c}, @generic={0xb7, 0x0, 0x0, 0x0, 0x2}, @generic={0x95}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=r2, r3, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r2, &(0x7f0000000640)='\x00\x00\x00\x00', &(0x7f0000000680)=@tcp=r0}, 0x20) sendto(r0, &(0x7f0000000700)="01020304", 0x4, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000800)="0102030405060708090a0b0c", 0xc, 0x0, 0x0, 0x0) 4.689462555s ago: executing program 1 (id=888): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='nv', 0x2) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10) r2 = accept(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='nv', 0x2) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000300)=0x64, 0x4) 3.613178213s ago: executing program 1 (id=889): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000004)=0x1, 0x4) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000010)={0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1}, 0xe) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000020)={0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1}, 0xe) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000008)=@assoc_value={0x0, 0x1f4}, 0x8) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) r2 = accept$inet(r0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f000000000c)=0x1, 0x4) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000030)={0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1}, 0xe) sendto$inet(r1, &(0x7f0000000200)='\x00'/10000, 0x2710, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) recvfrom$inet(r2, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 3.026236036s ago: executing program 1 (id=892): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x2b8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x318) 2.940296404s ago: executing program 0 (id=893): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3012, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000020)={0x2, 0x3013, @loopback}, 0x10) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000080)={0x2, 0x3012, @loopback}, 0x10) r2 = accept(r0, 0x0, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="0000301200"/16, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x1e, &(0x7f0000000200)={0x1}, &(0x7f0000000240)=0x8) close(r0) close(r1) close(r2) 2.793945972s ago: executing program 1 (id=894): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1 1 1\x00', 0x6) close(r0) r1 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'netdevsim0\x00', 0x1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r2) sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x58, r3, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x58}}, 0x0) 2.532330058s ago: executing program 1 (id=897): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x80}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d2, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) sendmsg$nl_xfrm(r0, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x3}, @in6=@private1={0xfc, 0x1, '\x00', 0x3}, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x80}, {@in6=@private1={0xfc, 0x1, '\x00', 0x3}, 0x4d2, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x3}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x4}, @in6=@private1={0xfc, 0x1, '\x00', 0x4}, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x80}, {@in6=@private1={0xfc, 0x1, '\x00', 0x4}, 0x4d2, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x4}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x5}, @in6=@private1={0xfc, 0x1, '\x00', 0x5}, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x80}, {@in6=@private1={0xfc, 0x1, '\x00', 0x5}, 0x4d2, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x5}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x6}, @in6=@private1={0xfc, 0x1, '\x00', 0x6}, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x80}, {@in6=@private1={0xfc, 0x1, '\x00', 0x6}, 0x4d2, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x6}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x8}, @in6=@private1={0xfc, 0x1, '\x00', 0x8}, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x80}, {@in6=@private1={0xfc, 0x1, '\x00', 0x8}, 0x4d2, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x8}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) 2.40625854s ago: executing program 1 (id=898): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1ff) mount(&(0x7f0000000e40)=@filename='proc\x00', &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000350)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000450)='-2 -3 +4\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='tcp 2049\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000600)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000370)='./nfsd/v4_end_grace\x00', 0x1, 0x0) write(r3, &(0x7f0000000470)='1\n', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r4, &(0x7f0000000200)='\\x01020304 2000000000 0 0 0 krb5 \\x00000000ffffff7f0000000000000000120000000102030405060708090a0b0c0d0e0f100102030405060708090a0b0c0d0e0f10\n', 0x8c) nanosleep(&(0x7f0000000700)={0x0, 0x2faf080}, 0x0) socket$inet(0x2, 0x1, 0x0) 2.18211865s ago: executing program 6 (id=899): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 2.181875015s ago: executing program 5 (id=900): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x9, 0x3, 0x2e0, 0x0, 0xffffffff, 0xffffffff, 0xf8, 0xffffffff, 0x210, 0xffffffff, 0xffffffff, 0x210, 0xffffffff, 0x3, &(0x7f0000000200), {[{{@ipv6={@remote, @remote, [0xff, 0xff000000, 0x0, 0xffffff00], [0xff000000, 0xff, 0xff], 'wg2\x00', 'geneve1\x00', {}, {}, 0x29, 0x10, 0x0, 0x1c}, 0x0, 0xd0, 0xf8, 0x60030000, {0x0, 0xff000000}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffff, 0x6, 0x2}, {0xffff, 0x6}}}}, {{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@unspec=@mark={{0x30}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0x1, {0xd457}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) nanosleep(&(0x7f0000000300)={0x0, 0x11e1a300}, 0x0) 1.985756109s ago: executing program 6 (id=901): r0 = socket$inet(0x2, 0x2, 0x11) bind$inet(r0, &(0x7f0000000000)={0x2, 0x115c, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000400)={0x2, 0x115c, @loopback}, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x115c, @loopback}, 0x1, 0x1, 0x1, 0x1}}, 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/net/pppol2tp\x00', 0x0, 0x0) read(r2, &(0x7f0000000200), 0x10) lseek(r2, 0x1, 0x0) read(r2, &(0x7f0000000300), 0x1000) 1.741216889s ago: executing program 0 (id=902): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x0, 0x0}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWOBJ={0x44, 0x12, 0xa, 0x401, 0x0, 0x0, {0x5}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_DATA={0x30, 0x4, 0x0, 0x1, [@NFTA_TUNNEL_KEY_ID={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_KEY_IP={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY_IP_SRC={0x8, 0x1, 0x1, 0x0, @loopback}, @NFTA_TUNNEL_KEY_IP_DST={0x8, 0x2, 0x1, 0x0, @loopback}]}, @NFTA_TUNNEL_KEY_OPTS={0x10, 0x9, 0x0, 0x1, @NFTA_TUNNEL_KEY_OPTS_VXLAN={0xc, 0x1, 0x0, 0x1, [@NFTA_TUNNEL_KEY_VXLAN_GBP={0x8, 0x1, 0x1, 0x0, 0x1234}]}}]}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5, 0x0, 0x0}}}, 0x8c}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)={0x34, 0x13, 0xa, 0x1, 0x0, 0x0, {0x5}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0x34}}, 0x0) 1.634211481s ago: executing program 6 (id=903): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x3, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x170, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{}, {0x140, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "abcc61b4e508c02286f1bafc7a22c407a52b0e13291c865d493f15736245f220cd4e40006df455836aa3bd3aaa2c9b95578719c46f89e0179832927deecf7465ea95bd97b018b7afaccdcb28bb42d677b73c44e790f0875fb4b795ca95b7dd712d2c5d69945535f92f74a71236749b077cc85e96554beb53c986a216051bd5979a8cfcfe9f98be58ff7944f6cfda8579dbaedceee578bfd1fb554b6e185e9315425ef0a3fc69d17ede93fc7c46357990604b9f12033688caa0b04adecfc926b3f6ca25bcb5432905e3f30ccbf10cf0f2d00858ba2bbd2702b8d4a7a7c744fbaa2fa35b1c586020d600"}, @TCA_GRED_PARMS={0x38, 0x1, {0x4, 0x4, 0x5, 0xc, 0xf3, 0x81, 0xda, 0x8001, 0xe080, 0x4, 0x1c, 0xf, 0x5, 0x0, 0x5, 0xffff}}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 1.544361953s ago: executing program 5 (id=904): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f0000000100)='\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/netfilter/nf_conntrack_helper\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='1\n', 0x2) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000300)={0x2, 0x6b8, @loopback}, 0x10) listen(r1, 0x5) r2 = socket$inet(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000300)={0x2, 0x6b8, @loopback}, 0x10) accept(r1, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000400)="0300002008010105007e00140500"/32, 0x20, 0x0, 0x0, 0x0) 1.045557188s ago: executing program 0 (id=905): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1 1 1\x00', 0x6) close(r0) r1 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'netdevsim0\x00', 0x1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r2) sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x58, r3, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x58}}, 0x0) 840.673553ms ago: executing program 5 (id=906): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000300)=@newpolicy={0x0, 0x0, 0x5, 0x0, 0x0, {{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}}, 0x48}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={&(0x7f0000000500), 0xc, &(0x7f0000000600)={&(0x7f0000000700)={{0x0, 0x0, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0}}, [@NFT_MSG_NEWTABLE={0x0, 0x0, 0x0, 0x601, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x0, 0x0, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x0, 0x0, 0x0, 0x601, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x0, 0x0, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x0, 0x0, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x0, 0x0, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x0, 0x0, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x0, 0x0}]}, @NFTA_CHAIN_TYPE={0x0, 0x0, 'filter\x00'}]}], {0x0, 0x0, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0}}}, 0x100}}, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r2, &(0x7f0000000800)='\x00', 0x1, 0x0, &(0x7f0000000900)={0x2, 0x1234, @loopback}, 0x10) 840.253179ms ago: executing program 6 (id=907): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x80}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d2, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x3}, @in6=@private1={0xfc, 0x1, '\x00', 0x3}, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x80}, {@in6=@private1={0xfc, 0x1, '\x00', 0x3}, 0x4d2, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x3}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x4}, @in6=@private1={0xfc, 0x1, '\x00', 0x4}, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x80}, {@in6=@private1={0xfc, 0x1, '\x00', 0x4}, 0x4d2, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x4}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x5}, @in6=@private1={0xfc, 0x1, '\x00', 0x5}, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x80}, {@in6=@private1={0xfc, 0x1, '\x00', 0x5}, 0x4d2, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x5}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x6}, @in6=@private1={0xfc, 0x1, '\x00', 0x6}, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x80}, {@in6=@private1={0xfc, 0x1, '\x00', 0x6}, 0x4d2, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x6}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x8}, @in6=@private1={0xfc, 0x1, '\x00', 0x8}, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x80}, {@in6=@private1={0xfc, 0x1, '\x00', 0x8}, 0x4d2, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x8}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) 517.802343ms ago: executing program 5 (id=908): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @private}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x73, 0x0, @remote, @local}, "00000000c0000000"}}}}, 0x0) 374.02938ms ago: executing program 6 (id=909): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0}}, [@NFT_MSG_NEWTABLE={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}]}], {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0}}}}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000300)="1234", 0x4, 0x0, &(0x7f0000000400)={0x2, 0x3039, @loopback}, 0x10) 254.176996ms ago: executing program 5 (id=910): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 211.146683ms ago: executing program 6 (id=911): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x34, 0x24, 0x601, 0xffff0000, 0xfffffff1, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xd}]}, 0x34}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0x601, 0xffff2000, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x0, 0x2, 0x3}}}, @TCA_IFE_METALST={0x10, 0x5, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x1}]}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x84}}, 0x0) write(r0, &(0x7f0000000300)="00112233445566778899aabb88b7000400010000", 0x14) 197.789213ms ago: executing program 0 (id=912): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a85, @loopback}, 0x10) listen(r0, 0x5) r1 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = accept$inet(r0, &(0x7f0000000200), &(0x7f0000000210)=0x10) nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0) write(r2, &(0x7f0000000300)='ceph v027\x00'/278, 0x119) nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0) write(r2, &(0x7f0000000800)="01ffffffffffffffff00"/29, 0x1e) nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0) write(r2, &(0x7f0000000c00)="070100000000000000000000000000000030000000000000000000000000000000000000000100000000000000000000000000000028d7b3ad00"/74, 0x48) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) 0s ago: executing program 5 (id=913): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000100)={0x44, 0x2, 0x6, 0x1, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000200)={0x48, 0x9, 0x6, 0x1, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x22b8}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x11}]}]}, 0x48}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x6, 0x1, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xf1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r2 = socket$inet(0x2, 0x2, 0x11) sendto$inet(r2, &(0x7f0000000500)="001122334455", 0x6, 0x0, &(0x7f0000000600)={0x2, 0x22b8, @loopback}, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.5' (ED25519) to the list of known hosts. [ 91.911603][ T9] cfg80211: failed to load regulatory.db [ 92.673073][ T5584] cgroup: Unknown subsys name 'net' [ 92.894562][ T5584] cgroup: Unknown subsys name 'cpuset' [ 92.958492][ T5584] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 94.867143][ T5584] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.659951][ T5606] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.680385][ T5607] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.689102][ T5606] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.700387][ T5606] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.701857][ T5606] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.704045][ T5606] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.713624][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.725207][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.735232][ T5607] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.745805][ T5606] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.747177][ T5606] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.772268][ T5604] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.774997][ T5604] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.842742][ T5606] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.845933][ T5606] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.852677][ T5606] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.893399][ T5606] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.899296][ T4913] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.969729][ T4913] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 97.983155][ T4913] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.994270][ T4913] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 98.019744][ T5608] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 98.050126][ T60] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 98.061644][ T60] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 98.067303][ T60] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 99.799097][ T5606] Bluetooth: hci1: command tx timeout [ 99.877824][ T5606] Bluetooth: hci0: command tx timeout [ 100.120207][ T5606] Bluetooth: hci2: command tx timeout [ 100.120225][ T60] Bluetooth: hci4: command tx timeout [ 100.198167][ T60] Bluetooth: hci3: command tx timeout [ 100.774709][ T5602] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.775965][ T5602] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.776114][ T5602] bridge_slave_0: entered allmulticast mode [ 100.782611][ T5602] bridge_slave_0: entered promiscuous mode [ 100.807600][ T5598] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.810418][ T5598] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.811770][ T5598] bridge_slave_0: entered allmulticast mode [ 100.819989][ T5598] bridge_slave_0: entered promiscuous mode [ 100.853371][ T5600] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.853510][ T5600] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.853677][ T5600] bridge_slave_0: entered allmulticast mode [ 100.855547][ T5600] bridge_slave_0: entered promiscuous mode [ 100.895746][ T5602] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.895861][ T5602] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.896028][ T5602] bridge_slave_1: entered allmulticast mode [ 100.905397][ T5602] bridge_slave_1: entered promiscuous mode [ 100.917116][ T5598] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.917376][ T5598] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.933673][ T5598] bridge_slave_1: entered allmulticast mode [ 100.944755][ T5598] bridge_slave_1: entered promiscuous mode [ 100.964394][ T5600] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.964591][ T5600] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.964758][ T5600] bridge_slave_1: entered allmulticast mode [ 100.966915][ T5600] bridge_slave_1: entered promiscuous mode [ 101.034022][ T5601] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.034151][ T5601] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.034565][ T5601] bridge_slave_0: entered allmulticast mode [ 101.036504][ T5601] bridge_slave_0: entered promiscuous mode [ 101.076658][ T5599] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.076790][ T5599] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.077194][ T5599] bridge_slave_0: entered allmulticast mode [ 101.086107][ T5599] bridge_slave_0: entered promiscuous mode [ 101.139677][ T5601] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.139803][ T5601] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.139965][ T5601] bridge_slave_1: entered allmulticast mode [ 101.142022][ T5601] bridge_slave_1: entered promiscuous mode [ 101.184181][ T5599] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.184309][ T5599] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.184485][ T5599] bridge_slave_1: entered allmulticast mode [ 101.186456][ T5599] bridge_slave_1: entered promiscuous mode [ 101.204836][ T5602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.226384][ T5598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.250970][ T5600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.278722][ T5602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.281396][ T5598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.315883][ T5600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.374739][ T5601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.401899][ T5599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.444533][ T5601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.474229][ T5599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.476575][ T5602] team0: Port device team_slave_0 added [ 101.494775][ T5598] team0: Port device team_slave_0 added [ 101.518946][ T5600] team0: Port device team_slave_0 added [ 101.542299][ T5602] team0: Port device team_slave_1 added [ 101.544231][ T5598] team0: Port device team_slave_1 added [ 101.573445][ T5600] team0: Port device team_slave_1 added [ 101.631650][ T5601] team0: Port device team_slave_0 added [ 101.654671][ T5599] team0: Port device team_slave_0 added [ 101.693928][ T5601] team0: Port device team_slave_1 added [ 101.715636][ T5599] team0: Port device team_slave_1 added [ 101.717027][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.717039][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.717058][ T5602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.742317][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.742366][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.742441][ T5598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.813823][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.813835][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.813854][ T5600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.863885][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.863900][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.863920][ T5602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.865022][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.865033][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.865053][ T5598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.878142][ T60] Bluetooth: hci1: command tx timeout [ 101.917490][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.917532][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.917604][ T5600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.957777][ T60] Bluetooth: hci0: command tx timeout [ 102.037592][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.037606][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.043004][ T5601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.091958][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.091971][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.091991][ T5599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.096412][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.096423][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.096442][ T5601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.102879][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.102920][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.102993][ T5599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.197790][ T5606] Bluetooth: hci4: command tx timeout [ 102.197894][ T60] Bluetooth: hci2: command tx timeout [ 102.278015][ T60] Bluetooth: hci3: command tx timeout [ 102.721953][ T5602] hsr_slave_0: entered promiscuous mode [ 102.723076][ T5602] hsr_slave_1: entered promiscuous mode [ 102.740796][ T5598] hsr_slave_0: entered promiscuous mode [ 102.741749][ T5598] hsr_slave_1: entered promiscuous mode [ 102.742611][ T5598] debugfs: 'hsr0' already exists in 'hsr' [ 102.742704][ T5598] Cannot create hsr debugfs directory [ 102.796517][ T5600] hsr_slave_0: entered promiscuous mode [ 102.799050][ T5600] hsr_slave_1: entered promiscuous mode [ 102.801444][ T5600] debugfs: 'hsr0' already exists in 'hsr' [ 102.801514][ T5600] Cannot create hsr debugfs directory [ 102.858374][ T5601] hsr_slave_0: entered promiscuous mode [ 102.859385][ T5601] hsr_slave_1: entered promiscuous mode [ 102.860054][ T5601] debugfs: 'hsr0' already exists in 'hsr' [ 102.860073][ T5601] Cannot create hsr debugfs directory [ 102.901139][ T5599] hsr_slave_0: entered promiscuous mode [ 102.902429][ T5599] hsr_slave_1: entered promiscuous mode [ 102.903201][ T5599] debugfs: 'hsr0' already exists in 'hsr' [ 102.903228][ T5599] Cannot create hsr debugfs directory [ 103.944507][ T5602] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 103.957828][ T60] Bluetooth: hci1: command tx timeout [ 103.988288][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.992975][ T5602] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 104.016840][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.033143][ T5602] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 104.037810][ T60] Bluetooth: hci0: command tx timeout [ 104.067811][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.096919][ T5602] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 104.123442][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.272030][ T5601] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 104.286184][ T60] Bluetooth: hci2: command tx timeout [ 104.286212][ T60] Bluetooth: hci4: command tx timeout [ 104.323246][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.327119][ T5601] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 104.357893][ T5606] Bluetooth: hci3: command tx timeout [ 104.377496][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.405499][ T5601] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 104.431314][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.457615][ T5601] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 104.494190][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.635647][ T5599] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 104.672781][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.694245][ T5599] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 104.731146][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.735782][ T5599] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 104.775391][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.813488][ T5599] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 104.854044][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.030208][ T5598] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.072329][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.089970][ T5598] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.132044][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.137431][ T5598] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.171272][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.219343][ T5598] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.251646][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.297427][ T5602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.463783][ T5600] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.494247][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.510566][ T5602] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.511079][ T5600] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.564502][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.593482][ T5600] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.622472][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.635410][ T5600] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 105.662198][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.690992][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.691295][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.746847][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.747198][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.783522][ T5601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.937297][ T5601] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.969195][ T5599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.977174][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.977319][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.038152][ T5606] Bluetooth: hci1: command tx timeout [ 106.071415][ T1447] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.071562][ T1447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.128142][ T5606] Bluetooth: hci0: command tx timeout [ 106.145839][ T5599] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.207433][ T5598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.221737][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.221956][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.284751][ T1199] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.284942][ T1199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.358686][ T5606] Bluetooth: hci4: command tx timeout [ 106.358687][ T60] Bluetooth: hci2: command tx timeout [ 106.408221][ T5598] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.437820][ T60] Bluetooth: hci3: command tx timeout [ 106.478930][ T1447] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.479129][ T1447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.516339][ T5600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.554154][ T1447] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.554291][ T1447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.703082][ T5600] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.805176][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.814142][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.923254][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.923446][ T3314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.421457][ T5602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.897068][ T5601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.915997][ T5602] veth0_vlan: entered promiscuous mode [ 108.020499][ T5602] veth1_vlan: entered promiscuous mode [ 108.311310][ T5602] veth0_macvtap: entered promiscuous mode [ 108.349950][ T5602] veth1_macvtap: entered promiscuous mode [ 108.401816][ T5599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.501494][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.549533][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.711610][ T5598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.923306][ T5600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.020274][ T5599] veth0_vlan: entered promiscuous mode [ 109.213010][ T5599] veth1_vlan: entered promiscuous mode [ 109.308769][ T1179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.308797][ T1179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.376927][ T5601] veth0_vlan: entered promiscuous mode [ 109.392151][ T5598] veth0_vlan: entered promiscuous mode [ 109.469309][ T1199] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.469332][ T1199] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.499453][ T5601] veth1_vlan: entered promiscuous mode [ 109.513865][ T5598] veth1_vlan: entered promiscuous mode [ 109.542000][ T5600] veth0_vlan: entered promiscuous mode [ 109.595520][ T5599] veth0_macvtap: entered promiscuous mode [ 109.641912][ T5600] veth1_vlan: entered promiscuous mode [ 109.646225][ T5599] veth1_macvtap: entered promiscuous mode [ 109.751858][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.753093][ T5601] veth0_macvtap: entered promiscuous mode [ 109.767896][ T5598] veth0_macvtap: entered promiscuous mode [ 109.801906][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.804499][ T5601] veth1_macvtap: entered promiscuous mode [ 109.836972][ T5598] veth1_macvtap: entered promiscuous mode [ 109.911811][ T5600] veth0_macvtap: entered promiscuous mode [ 109.955163][ T5600] veth1_macvtap: entered promiscuous mode [ 110.003596][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.020351][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.144556][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.173823][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.613296][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.825399][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.849510][ T1179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.849529][ T1179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.307458][ T9] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 111.356332][ T5787] ceph: No mds server is up or the cluster is laggy [ 111.459278][ T1447] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.459297][ T1447] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.055353][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.055374][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.378129][ T1199] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.378153][ T1199] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.378543][ T1199] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.725513][ T1199] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.725535][ T1199] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.744893][ T68] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.782107][ T1199] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.040500][ T94] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.046775][ T1431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.046796][ T1431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.303796][ T1431] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.303819][ T1431] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.709534][ T9] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 113.742616][ T5804] ceph: No mds server is up or the cluster is laggy [ 113.850694][ T5809] lo speed is unknown, defaulting to 1000 [ 113.983734][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.983756][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.032211][ T5809] lo speed is unknown, defaulting to 1000 [ 114.229770][ T5809] lo speed is unknown, defaulting to 1000 [ 114.254456][ T3314] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.254733][ T3314] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.254935][ T3314] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.255360][ T3314] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.420436][ T3314] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.423812][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.424433][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.710148][ T5824] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1'. [ 114.784448][ T68] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.803228][ T1443] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.803838][ T1443] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.059307][ T1443] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.059673][ T1443] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.573984][ T5828] syz.1.10 (5828) used greatest stack depth: 19104 bytes left [ 115.905749][ T5836] Zero length message leads to an empty skb [ 115.999000][ T1431] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.999506][ T1431] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.000041][ T1431] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.000439][ T1431] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.110761][ T5809] infiniband syz0: set active [ 116.110783][ T5809] infiniband syz0: added lo [ 116.164936][ T5613] lo speed is unknown, defaulting to 1000 [ 116.572424][ T5809] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 116.572475][ T5809] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 116.572527][ T5809] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 117.502111][ T5855] syz.1.18 (5855) used greatest stack depth: 18992 bytes left [ 117.644899][ T5809] RDS/IB: syz0: added [ 117.682702][ T5809] smc: adding ib device syz0 with port count 1 [ 117.682910][ T5809] smc: ib device syz0 port 1 has no pnetid [ 117.812199][ T5731] lo speed is unknown, defaulting to 1000 [ 118.064695][ T5809] lo speed is unknown, defaulting to 1000 [ 119.591890][ T5809] lo speed is unknown, defaulting to 1000 [ 120.906073][ T5915] netlink: 40 bytes leftover after parsing attributes in process `syz.3.42'. [ 121.187813][ T5809] lo speed is unknown, defaulting to 1000 [ 122.342048][ T5926] lo speed is unknown, defaulting to 1000 [ 123.634934][ T9] IPVS: starting estimator thread 0... [ 123.727914][ T5970] IPVS: using max 8 ests per chain, 19200 per kthread [ 123.938410][ T5809] lo speed is unknown, defaulting to 1000 [ 125.350425][ T5809] lo speed is unknown, defaulting to 1000 [ 126.014913][ T6004] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.611729][ T6004] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.278018][ T6004] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.705812][ T6004] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.008136][ T6049] tipc: Enabling of bearer rejected, failed to enable media [ 130.153056][ T1431] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.327271][ T6137] syz.3.127 (6137) used greatest stack depth: 18336 bytes left [ 132.856313][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.856426][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.039928][ T6200] netlink: 48 bytes leftover after parsing attributes in process `syz.2.152'. [ 134.306839][ T6199] netlink: 44 bytes leftover after parsing attributes in process `syz.2.152'. [ 134.706577][ T6215] sctp: [Deprecated]: syz.1.159 (pid 6215) Use of int in max_burst socket option deprecated. [ 134.706577][ T6215] Use struct sctp_assoc_value instead [ 137.307840][ T44] netdevsim netdevsim10 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.470127][ T5731] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 137.878066][ T5731] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x7 has invalid maxpacket 64 [ 137.878103][ T5731] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x87 has invalid maxpacket 64 [ 137.880941][ T5731] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 0.00 [ 137.880971][ T5731] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 137.880992][ T5731] usb 3-1: Product: syz [ 137.881008][ T5731] usb 3-1: Manufacturer: syz [ 139.293297][ T5731] speedtch 3-1:1.0: speedtch_bind: setting interface to 1 failed (-71)! [ 139.293489][ T5731] speedtch 3-1:1.0: usbatm_usb_probe: bind failed: -71! [ 139.295831][ T5731] speedtch 3-1:1.0: probe with driver speedtch failed with error -71 [ 139.386358][ T5731] speedtch 3-1:1.1: speedtch_bind: setting interface to 1 failed (-71)! [ 139.415372][ T5731] speedtch 3-1:1.1: usbatm_usb_probe: bind failed: -71! [ 139.415447][ T5731] speedtch 3-1:1.1: probe with driver speedtch failed with error -71 [ 139.471654][ T5731] usb 3-1: USB disconnect, device number 2 [ 140.081793][ T6318] netlink: 32 bytes leftover after parsing attributes in process `syz.4.197'. [ 141.293474][ T6324] svc: failed to register lockdv1 RPC service (errno 512). [ 141.293966][ T6324] lockd_up: makesock failed, error=-512 [ 142.248973][ T6324] svc: failed to register nfsdv3 RPC service (errno 512). [ 142.249217][ T6324] svc: failed to register nfsaclv3 RPC service (errno 512). [ 142.249234][ T6324] failed to unregister tcp with rpcbind [ 142.347413][ T6324] svc: failed to register nfsdv3 RPC service (errno 97). [ 142.347440][ T6324] svc: failed to register nfsaclv3 RPC service (errno 97). [ 142.347454][ T6324] failed to unregister tcp with rpcbind [ 143.887826][ T5613] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 144.117908][ T6425] rdma_rxe: rxe_newlink: failed to add veth0 [ 144.122052][ T6428] netlink: 52 bytes leftover after parsing attributes in process `syz.0.235'. [ 144.145962][ T5613] usb 5-1: config 1 descriptor has 1 excess byte, ignoring [ 144.146290][ T5613] usb 5-1: config 1 interface 2 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 144.181747][ T5613] usb 5-1: New USB device found, idVendor=1110, idProduct=9000, bcdDevice= 1.00 [ 144.181779][ T5613] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 144.181800][ T5613] usb 5-1: Product: syz [ 144.181816][ T5613] usb 5-1: Manufacturer: syz [ 145.198827][ T5613] usb 5-1: reset high-speed USB device number 2 using dummy_hcd [ 145.762744][ T6457] netlink: 40 bytes leftover after parsing attributes in process `syz.3.247'. [ 146.122486][ T6471] netlink: 'syz.2.252': attribute type 11 has an invalid length. [ 146.163416][ T6471] netlink: 11 bytes leftover after parsing attributes in process `syz.2.252'. [ 146.165091][ T6471] netlink: 'syz.2.252': attribute type 1 has an invalid length. [ 146.218311][ T6471] netlink: 'syz.2.252': attribute type 1 has an invalid length. [ 146.220839][ T6471] netlink: 'syz.2.252': attribute type 1 has an invalid length. [ 146.455639][ T6470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.861588][ T5613] usb 5-1: Direct firmware load for ueagle-atm/930-fpga.bin failed with error -2 [ 146.861620][ T5613] usb 5-1: Falling back to sysfs fallback for: ueagle-atm/930-fpga.bin [ 147.274949][ T6500] netlink: 24 bytes leftover after parsing attributes in process `syz.4.261'. [ 147.276430][ T6500] netlink: 28 bytes leftover after parsing attributes in process `syz.4.261'. [ 147.276936][ T6500] netlink: 28 bytes leftover after parsing attributes in process `syz.4.261'. [ 147.277475][ T6500] netlink: 28 bytes leftover after parsing attributes in process `syz.4.261'. [ 148.320880][ T6516] NFSD: Failed to start, no listeners configured. [ 150.672315][ T6588] IPVS: sync thread started: state = BACKUP, mcast_ifn = syz_tun, syncid = 0, id = 0 [ 150.966875][ T6594] netlink: 4 bytes leftover after parsing attributes in process `syz.3.293'. [ 151.773237][ T6610] netlink: 'syz.0.297': attribute type 1 has an invalid length. [ 151.965731][ T6604] lo speed is unknown, defaulting to 1000 [ 153.993077][ T6654] netlink: 48 bytes leftover after parsing attributes in process `syz.3.313'. [ 158.859933][ T6726] netlink: 28 bytes leftover after parsing attributes in process `syz.1.337'. [ 158.883605][ T6722] netlink: 12 bytes leftover after parsing attributes in process `syz.1.337'. [ 158.883629][ T6722] tc_dump_action: action bad kind [ 159.348218][ T6740] netlink: 108 bytes leftover after parsing attributes in process `syz.3.341'. [ 159.354314][ T6738] netlink: 12 bytes leftover after parsing attributes in process `syz.3.341'. [ 159.640869][ T6745] rdma_rxe: rxe_newlink: failed to add veth0 [ 159.925560][ T6730] lo speed is unknown, defaulting to 1000 [ 160.609901][ T6766] netlink: 'syz.1.353': attribute type 1 has an invalid length. [ 160.609925][ T6766] netlink: 12 bytes leftover after parsing attributes in process `syz.1.353'. [ 161.620174][ T5731] libceph: mon0 (1)127.0.0.1:6666 socket closed (con state V1_BANNER) [ 161.621669][ T6773] ceph: No mds server is up or the cluster is laggy [ 161.970061][ T6799] netlink: 'syz.2.366': attribute type 11 has an invalid length. [ 161.991911][ T6799] netlink: 11 bytes leftover after parsing attributes in process `syz.2.366'. [ 161.992245][ T6799] netlink: 'syz.2.366': attribute type 1 has an invalid length. [ 161.997093][ T6799] netlink: 'syz.2.366': attribute type 1 has an invalid length. [ 162.013754][ T6799] netlink: 'syz.2.366': attribute type 1 has an invalid length. [ 162.056089][ T6798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.245701][ T6815] svc: failed to register lockdv1 RPC service (errno 111). [ 163.621588][ T6841] netlink: 'syz.3.378': attribute type 11 has an invalid length. [ 163.646298][ T6841] netlink: 11 bytes leftover after parsing attributes in process `syz.3.378'. [ 163.646660][ T6841] netlink: 'syz.3.378': attribute type 1 has an invalid length. [ 163.665265][ T6841] netlink: 'syz.3.378': attribute type 1 has an invalid length. [ 163.665769][ T6841] netlink: 'syz.3.378': attribute type 1 has an invalid length. [ 163.689757][ T6839] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 164.019802][ T6815] svc: failed to register nfsdv3 RPC service (errno 512). [ 164.020037][ T6815] svc: failed to register nfsaclv3 RPC service (errno 512). [ 164.020054][ T6815] failed to unregister tcp with rpcbind [ 164.020303][ T6815] svc: failed to register nfsdv3 RPC service (errno 97). [ 164.020320][ T6815] svc: failed to register nfsaclv3 RPC service (errno 97). [ 164.020334][ T6815] failed to unregister tcp with rpcbind [ 164.404295][ T6844] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.716316][ T6847] netdevsim netdevsim10 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.507991][ T6844] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.543422][ T6883] netlink: 'syz.2.389': attribute type 11 has an invalid length. [ 166.555648][ T6883] netlink: 11 bytes leftover after parsing attributes in process `syz.2.389'. [ 166.558033][ T6883] netlink: 'syz.2.389': attribute type 1 has an invalid length. [ 166.562633][ T6883] netlink: 'syz.2.389': attribute type 1 has an invalid length. [ 166.567234][ T6883] netlink: 'syz.2.389': attribute type 1 has an invalid length. [ 166.616318][ T6882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.149109][ T6844] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.956713][ T6844] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.092870][ T12] netdevsim netdevsim100 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.782902][ T68] netdevsim netdevsim3 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.783078][ T68] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.787999][ T1443] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.789657][ T68] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.104282][ T6933] syz.2.404 (6933) used greatest stack depth: 18296 bytes left [ 169.315988][ T822] libceph: mon0 (2)127.0.0.1:6667 socket closed (con state V2_BANNER_PREFIX) [ 169.317311][ T6925] ceph: No mds server is up or the cluster is laggy [ 171.663389][ T7000] netlink: 16 bytes leftover after parsing attributes in process `syz.0.427'. [ 174.426900][ T7027] lo speed is unknown, defaulting to 1000 [ 175.060774][ T7077] bridge0: port 3(gretap0) entered blocking state [ 175.078368][ T7077] bridge0: port 3(gretap0) entered disabled state [ 175.079029][ T7077] gretap0: entered allmulticast mode [ 175.175813][ T7077] gretap0: entered promiscuous mode [ 175.237453][ T7083] netlink: 'syz.4.451': attribute type 11 has an invalid length. [ 175.286641][ T7077] bridge0: port 3(gretap0) entered blocking state [ 175.286800][ T7077] bridge0: port 3(gretap0) entered forwarding state [ 175.334699][ T7086] netlink: 'syz.4.451': attribute type 1 has an invalid length. [ 175.358488][ T7083] netlink: 11 bytes leftover after parsing attributes in process `syz.4.451'. [ 175.364748][ T7083] netlink: 'syz.4.451': attribute type 1 has an invalid length. [ 175.367098][ T7083] netlink: 'syz.4.451': attribute type 1 has an invalid length. [ 175.411059][ T7082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 175.490609][ T7029] lo speed is unknown, defaulting to 1000 [ 176.671949][ T5727] libceph: connect (1)127.0.0.1:6789 error -101 [ 176.672144][ T5727] libceph: mon0 (1)127.0.0.1:6789 connect error [ 176.685810][ T5727] libceph: connect (1)127.0.0.1:6789 error -101 [ 176.686051][ T5727] libceph: mon0 (1)127.0.0.1:6789 connect error [ 176.754877][ T7032] lo speed is unknown, defaulting to 1000 [ 176.939274][ T821] libceph: connect (1)127.0.0.1:6789 error -101 [ 176.939480][ T821] libceph: mon0 (1)127.0.0.1:6789 connect error [ 176.945713][ T7131] netlink: 'syz.2.463': attribute type 11 has an invalid length. [ 176.947425][ T7131] netlink: 11 bytes leftover after parsing attributes in process `syz.2.463'. [ 176.956217][ T7131] netlink: 'syz.2.463': attribute type 1 has an invalid length. [ 176.987578][ T7131] netlink: 'syz.2.463': attribute type 1 has an invalid length. [ 176.988132][ T7131] netlink: 'syz.2.463': attribute type 1 has an invalid length. [ 177.024059][ T7130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 177.432676][ T7121] ceph: No mds server is up or the cluster is laggy [ 177.450479][ T821] libceph: connect (1)127.0.0.1:6789 error -101 [ 177.450698][ T821] libceph: mon0 (1)127.0.0.1:6789 connect error [ 178.145519][ T7035] lo speed is unknown, defaulting to 1000 [ 180.680042][ T7154] rdma_rxe: rxe_newlink: failed to add veth0 [ 181.495553][ T7205] svc: failed to register lockdv1 RPC service (errno 111). [ 182.110693][ T7224] key id 00000001 not found [ 182.111226][ T7224] key id 00000001 not found [ 182.486312][ T7205] svc: failed to register nfsdv3 RPC service (errno 512). [ 182.486617][ T7205] svc: failed to register nfsaclv3 RPC service (errno 512). [ 182.486634][ T7205] failed to unregister tcp with rpcbind [ 182.486888][ T7205] svc: failed to register nfsdv3 RPC service (errno 97). [ 182.486906][ T7205] svc: failed to register nfsaclv3 RPC service (errno 97). [ 182.486919][ T7205] failed to unregister tcp with rpcbind [ 184.020136][ T7259] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.193281][ T7272] netlink: 'syz.2.509': attribute type 11 has an invalid length. [ 184.195622][ T7272] netlink: 11 bytes leftover after parsing attributes in process `syz.2.509'. [ 184.196099][ T7272] netlink: 'syz.2.509': attribute type 1 has an invalid length. [ 184.197411][ T7272] netlink: 'syz.2.509': attribute type 1 has an invalid length. [ 184.207080][ T7271] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.403987][ T7276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.511'. [ 184.861582][ T7280] rdma_rxe: rxe_newlink: failed to add veth0 [ 185.577785][ T1179] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.724378][ T7299] netlink: 'syz.0.520': attribute type 11 has an invalid length. [ 185.726068][ T7299] netlink: 11 bytes leftover after parsing attributes in process `syz.0.520'. [ 185.726547][ T7299] netlink: 'syz.0.520': attribute type 1 has an invalid length. [ 185.758400][ T7298] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.016745][ T7308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.523'. [ 186.963175][ T7334] netlink: 'syz.1.532': attribute type 11 has an invalid length. [ 186.977306][ T7334] netlink: 11 bytes leftover after parsing attributes in process `syz.1.532'. [ 187.024722][ T7334] netlink: 'syz.1.532': attribute type 1 has an invalid length. [ 187.041057][ T7332] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.574938][ T7354] tipc: Started in network mode [ 187.574968][ T7354] tipc: Node identity 7f000001, cluster identity 4711 [ 187.575010][ T7354] tipc: Enabling of bearer rejected, failed to enable media [ 188.601533][ T1179] netdevsim netdevsim10 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.226462][ T7398] lo speed is unknown, defaulting to 1000 [ 190.424145][ T7423] tipc: Started in network mode [ 190.424178][ T7423] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 190.425174][ T7423] tipc: Enabled bearer , priority 0 [ 190.680108][ T7437] 8021q: VLANs not supported on syzkaller0 [ 191.552452][ T822] tipc: Node number set to 43690 [ 191.816672][ T7446] lo speed is unknown, defaulting to 1000 [ 192.777794][ T7456] NFSD: Unable to initialize client recovery tracking! (-110) [ 192.777812][ T7456] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 192.777824][ T7456] NFSD: starting 90-second grace period (net f00003fa) [ 193.123380][ T7444] lo speed is unknown, defaulting to 1000 [ 194.289799][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.289874][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.072485][ T7530] netlink: 68 bytes leftover after parsing attributes in process `syz.3.600'. [ 196.445087][ T7542] netlink: 4 bytes leftover after parsing attributes in process `syz.4.604'. [ 196.513823][ T7543] openvswitch: netlink: Flow actions attr not present in new flow. [ 197.895153][ T7542] ovs-system: entered promiscuous mode [ 197.945637][ T7561] netlink: 12 bytes leftover after parsing attributes in process `syz.0.610'. [ 198.379823][ T7562] hsr_slave_0: left promiscuous mode [ 198.419808][ T7562] hsr_slave_1: left promiscuous mode [ 198.539905][ T7569] netlink: 84 bytes leftover after parsing attributes in process `syz.4.613'. [ 198.540000][ T7570] netlink: 84 bytes leftover after parsing attributes in process `syz.4.613'. [ 200.328282][ T7579] NFSD: Unable to initialize client recovery tracking! (-110) [ 200.328334][ T7579] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 200.328376][ T7579] NFSD: starting 10-second grace period (net f00003bf) [ 201.140110][ T7619] netlink: 'syz.0.625': attribute type 2 has an invalid length. [ 201.724329][ T822] libceph: mon0 (1)127.0.0.1:6789 protocol error, garbage tag during connect [ 202.904036][ T5728] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 203.012307][ T7636] ceph: No mds server is up or the cluster is laggy [ 203.510342][ T821] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 203.898061][ T7602] NFSD: Unable to initialize client recovery tracking! (-110) [ 203.898082][ T7602] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 203.898095][ T7602] NFSD: starting 90-second grace period (net f00003fa) [ 204.088349][ T7672] netlink: 268 bytes leftover after parsing attributes in process `syz.0.638'. [ 205.638724][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.768753][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.048262][ T5854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.056950][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.077391][ T5854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.121570][ T5854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.122062][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.678403][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.785768][ T7701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.786117][ T821] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 206.797381][ T7702] ceph: No mds server is up or the cluster is laggy [ 207.083226][ T3314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.310104][ T7722] NFSD: Unable to initialize client recovery tracking! (-110) [ 208.310120][ T7722] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 208.310129][ T7722] NFSD: starting 90-second grace period (net f00003d6) [ 209.672797][ T5613] usb 5-1: [UEAGLE-ATM] firmware ueagle-atm/930-fpga.bin is not available [ 209.672887][ T5613] usb 5-1: [UEAGLE-ATM] urb submission failed with error -19 [ 209.672990][ T5613] ueagle-atm 5-1:1.0: usbatm_usb_probe: bind failed: -19! [ 209.743725][ T5613] ueagle-atm 5-1:1.2: usbatm_usb_probe: bind failed: -19! [ 209.776819][ T5613] usb 5-1: USB disconnect, device number 2 [ 210.487995][ T7731] NFSD: Unable to initialize client recovery tracking! (-110) [ 210.488016][ T7731] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 210.488029][ T7731] NFSD: starting 90-second grace period (net f00003d6) [ 210.838288][ T5611] net_ratelimit: 52 callbacks suppressed [ 210.838304][ T5611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.879337][ T5611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.919272][ T5613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.175629][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.964696][ T5611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.004623][ T821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.420129][ T822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.040188][ T5611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.198553][ T822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.822690][ T5606] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 216.881048][ T5606] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 216.882181][ T5606] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 216.883450][ T5606] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 216.887438][ T5606] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 217.078236][ T5611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.035250][ T7697] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.120760][ T5613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.999712][ T5606] Bluetooth: hci5: command tx timeout [ 219.090027][ T7740] lo speed is unknown, defaulting to 1000 [ 219.158689][ T821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.248328][ T5854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.375920][ T7775] netlink: 76 bytes leftover after parsing attributes in process `syz.0.663'. [ 219.375950][ T7775] netlink: 76 bytes leftover after parsing attributes in process `syz.0.663'. [ 220.084670][ T7789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.086597][ T7789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.135883][ T7789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.199911][ T5611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.347928][ T7792] hsr_slave_0: left promiscuous mode [ 220.389530][ T7792] hsr_slave_1: left promiscuous mode [ 220.894392][ T7806] bond0: entered promiscuous mode [ 220.894417][ T7806] bond_slave_0: entered promiscuous mode [ 220.894662][ T7806] bond_slave_1: entered promiscuous mode [ 220.962686][ T7806] gretap0: entered promiscuous mode [ 220.978864][ T7806] dummy0: entered promiscuous mode [ 221.084511][ T5618] Bluetooth: hci5: command tx timeout [ 221.223579][ T7824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.224030][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.255122][ T5611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.479521][ T94] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.632701][ T7819] svc: failed to register nfsdv3 RPC service (errno 111). [ 221.671341][ T7819] svc: failed to register nfsaclv3 RPC service (errno 111). [ 221.672304][ T7834] IPVS: rr: UDP 172.20.20.1:80 - no destination available [ 221.983463][ T5618] Bluetooth: hci0: command 0x0406 tx timeout [ 221.983502][ T5618] Bluetooth: hci4: command 0x0406 tx timeout [ 221.984236][ T5618] Bluetooth: hci2: command 0x0406 tx timeout [ 221.984263][ T5618] Bluetooth: hci3: command 0x0406 tx timeout [ 222.234759][ T7822] NFSD: Failed to start, no listeners configured. [ 222.279716][ T5611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.288116][ T5332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.070013][ T7870] smc: net device dummy0 applied user defined pnetid SYZ0 [ 223.157886][ T7740] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.158088][ T7740] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.158244][ T7740] bridge_slave_0: entered allmulticast mode [ 223.158757][ T5606] Bluetooth: hci5: command tx timeout [ 223.160613][ T7870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.161019][ T7740] bridge_slave_0: entered promiscuous mode [ 223.161172][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.161561][ T7870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.165186][ T7740] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.165374][ T7740] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.165548][ T7740] bridge_slave_1: entered allmulticast mode [ 223.169952][ T7740] bridge_slave_1: entered promiscuous mode [ 223.348491][ T821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.487105][ T7740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.502939][ T7878] netlink: 8 bytes leftover after parsing attributes in process `syz.3.687'. [ 223.502961][ T7878] netlink: 4 bytes leftover after parsing attributes in process `syz.3.687'. [ 223.551785][ T7740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.637155][ T7882] tipc: Started in network mode [ 223.637188][ T7882] tipc: Node identity 7f000001, cluster identity 4711 [ 223.669933][ T7882] tipc: New replicast peer: 127.0.0.1 [ 223.670996][ T7882] tipc: Enabled bearer , priority 10 [ 223.800433][ T7888] tipc: Disabling bearer [ 223.823657][ T7740] team0: Port device team_slave_0 added [ 223.845622][ T7740] team0: Port device team_slave_1 added [ 224.086545][ T7895] IPVS: sync thread started: state = BACKUP, mcast_ifn = syz_tun, syncid = 1, id = 0 [ 224.097395][ T5613] IPVS: starting estimator thread 0... [ 224.105342][ T7740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.105359][ T7740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 224.105387][ T7740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.163660][ T7740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.163679][ T7740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 224.163708][ T7740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.199756][ T7896] IPVS: using max 8 ests per chain, 19200 per kthread [ 224.354361][ T7740] hsr_slave_0: entered promiscuous mode [ 224.355644][ T7740] hsr_slave_1: entered promiscuous mode [ 224.356555][ T7740] debugfs: 'hsr0' already exists in 'hsr' [ 224.356588][ T7740] Cannot create hsr debugfs directory [ 224.371551][ T7901] netlink: 16 bytes leftover after parsing attributes in process `syz.3.693'. [ 224.921351][ T7917] netlink: 28 bytes leftover after parsing attributes in process `syz.1.700'. [ 224.921379][ T7917] netlink: 28 bytes leftover after parsing attributes in process `syz.1.700'. [ 225.237787][ T5606] Bluetooth: hci5: command tx timeout [ 225.354490][ T7922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.701'. [ 226.004540][ T7953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.709'. [ 226.438309][ T5613] net_ratelimit: 19 callbacks suppressed [ 226.438332][ T5613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.829761][ T7959] lo speed is unknown, defaulting to 1000 [ 226.837260][ T7740] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 226.916787][ T7740] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 226.926492][ T7740] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 226.983846][ T7740] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 226.986373][ T7740] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 227.155531][ T7740] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 227.167868][ T7740] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 227.212589][ T7740] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 227.453641][ T7988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.481330][ T5611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.708437][ T7740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.793799][ T7740] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.823974][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.824196][ T3314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.886485][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.886702][ T3314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.438808][ T5854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.519426][ T821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.593405][ T68] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.595861][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.642761][ T1179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.643609][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.668277][ T1179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.899865][ T8016] smc: net device lo applied user defined pnetid SYZ0 [ 228.901217][ T8016] smc: smcd device lo applied user defined pnetid SYZ0 [ 229.917806][ T8007] NFSD: Unable to initialize client recovery tracking! (-110) [ 229.917827][ T8007] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 229.917840][ T8007] NFSD: starting 10-second grace period (net f00003d6) [ 230.126983][ T8032] lo speed is unknown, defaulting to 1000 [ 230.146407][ T7740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.876859][ T8054] netlink: 20 bytes leftover after parsing attributes in process `syz.3.741'. [ 230.882082][ T8054] netlink: 40 bytes leftover after parsing attributes in process `syz.3.741'. [ 231.148843][ T8034] lo speed is unknown, defaulting to 1000 [ 231.481693][ T822] net_ratelimit: 19 callbacks suppressed [ 231.481715][ T822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.639106][ T5613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.673334][ T8059] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.836910][ T8061] lo speed is unknown, defaulting to 1000 [ 232.441950][ T7740] veth0_vlan: entered promiscuous mode [ 232.493705][ T7740] veth1_vlan: entered promiscuous mode [ 232.679899][ T5611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.213709][ T8084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.708308][ T7740] veth0_macvtap: entered promiscuous mode [ 233.756857][ T7740] veth1_macvtap: entered promiscuous mode [ 234.129544][ T999] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.217419][ T7740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.242593][ T7740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.288514][ T1179] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.307855][ T94] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.308059][ T999] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.308102][ T999] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.255240][ T8095] NFSD: Unable to initialize client recovery tracking! (-110) [ 235.255260][ T8095] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 235.255273][ T8095] NFSD: starting 10-second grace period (net f00003d5) [ 235.309477][ T94] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.309501][ T94] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.415059][ T999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.415083][ T999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.119391][ T4964] FAULT_INJECTION: forcing a failure. [ 237.119391][ T4964] name failslab, interval 1, probability 100, space 0, times 1 [ 237.119442][ T8135] FAULT_INJECTION: forcing a failure. [ 237.119442][ T8135] name failslab, interval 1, probability 100, space 0, times 1 [ 237.119453][ T4964] CPU: 0 UID: 0 PID: 4964 Comm: udevd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 237.119483][ T4964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 237.119501][ T4964] Call Trace: [ 237.119509][ T4964] [ 237.119516][ T4964] dump_stack_lvl+0xe8/0x150 [ 237.119569][ T4964] should_fail_ex+0x467/0x600 [ 237.119604][ T4964] should_failslab+0xa8/0x100 [ 237.119628][ T4964] __kmalloc_noprof+0xfe/0x780 [ 237.119647][ T4964] ? rcu_is_watching+0x15/0xb0 [ 237.119671][ T4964] ? tomoyo_realpath_from_path+0xef/0x640 [ 237.119696][ T4964] ? tomoyo_realpath_from_path+0xef/0x640 [ 237.119732][ T4964] tomoyo_realpath_from_path+0xef/0x640 [ 237.119769][ T4964] tomoyo_check_open_permission+0x229/0x470 [ 237.119791][ T4964] ? tomoyo_check_open_permission+0x1d3/0x470 [ 237.119812][ T4964] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 237.119836][ T4964] ? __asan_memset+0x22/0x50 [ 237.119868][ T4964] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 237.119913][ T4964] ? rt_spin_unlock+0x157/0x200 [ 237.119938][ T4964] security_file_open+0xa9/0x240 [ 237.119962][ T4964] do_dentry_open+0x4be/0x1420 [ 237.119990][ T4964] vfs_open+0x3b/0x350 [ 237.120006][ T4964] ? path_openat+0x2e49/0x3850 [ 237.120033][ T4964] path_openat+0x2e60/0x3850 [ 237.120065][ T4964] ? kmem_cache_alloc_noprof+0x355/0x650 [ 237.120084][ T4964] ? __x64_sys_openat+0x138/0x170 [ 237.120101][ T4964] ? do_syscall_64+0x174/0x580 [ 237.120126][ T4964] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.120162][ T4964] do_file_open+0x23e/0x4a0 [ 237.120185][ T4964] ? lockdep_hardirqs_on+0x7a/0x110 [ 237.120214][ T4964] ? __pfx_do_file_open+0x10/0x10 [ 237.120258][ T4964] ? alloc_fd+0x654/0x6d0 [ 237.120285][ T4964] do_sys_openat2+0x115/0x200 [ 237.120307][ T4964] ? __pfx_do_sys_openat2+0x10/0x10 [ 237.120331][ T4964] ? rcu_is_watching+0x15/0xb0 [ 237.120385][ T4964] __x64_sys_openat+0x138/0x170 [ 237.120407][ T4964] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.120426][ T4964] do_syscall_64+0x174/0x580 [ 237.120453][ T4964] ? clear_bhb_loop+0x40/0x90 [ 237.120497][ T4964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.120516][ T4964] RIP: 0033:0x7fd74c742407 [ 237.120538][ T4964] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 237.120559][ T4964] RSP: 002b:00007ffea05e0090 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 237.120600][ T4964] RAX: ffffffffffffffda RBX: 00007fd74c654880 RCX: 00007fd74c742407 [ 237.120614][ T4964] RDX: 0000000000080000 RSI: 00007ffea05e0210 RDI: ffffffffffffff9c [ 237.120627][ T4964] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 237.120638][ T4964] R10: 0000000000000000 R11: 0000000000000202 R12: 000055be1ac647f5 [ 237.120649][ T4964] R13: 000055be1ac647f5 R14: 0000000000000001 R15: 00007ffea05e4870 [ 237.120676][ T4964] [ 237.120689][ T8135] CPU: 1 UID: 0 PID: 8135 Comm: syz.0.764 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 237.120715][ T8135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 237.120717][ T4964] ERROR: Out of memory at tomoyo_realpath_from_path. [ 237.120730][ T8135] Call Trace: [ 237.120742][ T8135] [ 237.120751][ T8135] dump_stack_lvl+0xe8/0x150 [ 237.120787][ T8135] should_fail_ex+0x467/0x600 [ 237.120826][ T8135] should_failslab+0xa8/0x100 [ 237.120856][ T8135] kmem_cache_alloc_noprof+0xa4/0x650 [ 237.120880][ T8135] ? do_getname+0x2e/0x250 [ 237.120912][ T8135] ? do_getname+0x2e/0x250 [ 237.120951][ T8135] do_getname+0x2e/0x250 [ 237.120984][ T8135] ? getname_flags+0x11/0x20 [ 237.121019][ T8135] do_sys_openat2+0xcc/0x200 [ 237.121042][ T8135] ? __se_sys_futex+0x3a8/0x450 [ 237.121082][ T8135] ? __pfx_do_sys_openat2+0x10/0x10 [ 237.121110][ T8135] ? rcu_is_watching+0x15/0xb0 [ 237.121143][ T8135] __x64_sys_openat+0x138/0x170 [ 237.121170][ T8135] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.121194][ T8135] do_syscall_64+0x174/0x580 [ 237.121222][ T8135] ? trace_irq_disable+0x3b/0x140 [ 237.121243][ T8135] ? clear_bhb_loop+0x40/0x90 [ 237.121271][ T8135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.121292][ T8135] RIP: 0033:0x7fa8a47ee019 [ 237.121313][ T8135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.121331][ T8135] RSP: 002b:00007fa8a2a46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 237.121354][ T8135] RAX: ffffffffffffffda RBX: 00007fa8a4a75fa0 RCX: 00007fa8a47ee019 [ 237.121370][ T8135] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 237.121384][ T8135] RBP: 00007fa8a488500c R08: 0000000000000000 R09: 0000000000000000 [ 237.121397][ T8135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 237.121410][ T8135] R13: 00007fa8a4a76038 R14: 00007fa8a4a75fa0 R15: 00007fff1bb4ef88 [ 237.121442][ T8135] [ 237.861532][ T8133] lo speed is unknown, defaulting to 1000 [ 237.919850][ T8147] netlink: 36 bytes leftover after parsing attributes in process `syz.3.769'. [ 237.920661][ T8147] netlink: 16 bytes leftover after parsing attributes in process `syz.3.769'. [ 237.925948][ T5611] IPVS: starting estimator thread 0... [ 238.009190][ T8148] IPVS: using max 11 ests per chain, 26400 per kthread [ 238.182371][ T8157] netlink: 4 bytes leftover after parsing attributes in process `syz.3.769'. [ 239.026476][ T8180] netlink: 'syz.1.780': attribute type 2 has an invalid length. [ 239.736701][ T8196] netlink: 4 bytes leftover after parsing attributes in process `syz.1.785'. [ 239.749828][ T8196] netlink: 4 bytes leftover after parsing attributes in process `syz.1.785'. [ 239.751647][ T8196] netlink: 4 bytes leftover after parsing attributes in process `syz.1.785'. [ 239.752289][ T8196] netlink: 44 bytes leftover after parsing attributes in process `syz.1.785'. [ 239.753127][ T8196] netlink: 44 bytes leftover after parsing attributes in process `syz.1.785'. [ 239.754222][ T8196] netlink: 44 bytes leftover after parsing attributes in process `syz.1.785'. [ 239.755220][ T8196] netlink: 44 bytes leftover after parsing attributes in process `syz.1.785'. [ 240.719524][ T8217] svc: failed to register lockdv1 RPC service (errno 111). [ 240.835135][ T8219] lo speed is unknown, defaulting to 1000 [ 241.239608][ T8217] svc: failed to register nfsdv3 RPC service (errno 512). [ 241.240922][ T8217] svc: failed to register nfsaclv3 RPC service (errno 512). [ 241.240943][ T8217] failed to unregister tcp with rpcbind [ 241.241156][ T8217] svc: failed to register nfsdv3 RPC service (errno 97). [ 241.241173][ T8217] svc: failed to register nfsaclv3 RPC service (errno 97). [ 241.241187][ T8217] failed to unregister tcp with rpcbind [ 252.822039][ T4913] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 252.825063][ T4913] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 252.885041][ T4913] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 252.886201][ T4913] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 252.886897][ T4913] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 253.617753][ T8226] lo speed is unknown, defaulting to 1000 [ 254.577895][ T8254] svc: failed to register nfsdv3 RPC service (errno 111). [ 254.636190][ T8254] svc: failed to register nfsaclv3 RPC service (errno 111). [ 255.077903][ T5606] Bluetooth: hci1: command tx timeout [ 255.183457][ T8273] netlink: 'syz.0.806': attribute type 2 has an invalid length. [ 255.746445][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.746512][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.975255][ T4913] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 256.013709][ T4913] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 256.015686][ T4913] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 256.046839][ T4913] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 256.064104][ T8237] lo speed is unknown, defaulting to 1000 [ 256.064528][ T4913] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 256.538287][ T8292] __nla_validate_parse: 2 callbacks suppressed [ 256.538309][ T8292] netlink: 4 bytes leftover after parsing attributes in process `syz.5.812'. [ 256.843725][ T8305] nvme_fabrics: unknown parameter or missing value 'tls_key=1' in ctrl creation request [ 257.157787][ T5606] Bluetooth: hci1: command tx timeout [ 257.610230][ T5731] IPVS: starting estimator thread 0... [ 257.651680][ T8323] IPVS: sync thread started: state = BACKUP, mcast_ifn = syz_tun, syncid = 0, id = 0 [ 257.697841][ T8322] IPVS: using max 8 ests per chain, 19200 per kthread [ 257.789479][ T8285] lo speed is unknown, defaulting to 1000 [ 257.872464][ T8325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.821'. [ 258.107915][ T8303] NFSD: Unable to initialize client recovery tracking! (-110) [ 258.107935][ T8303] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 258.107947][ T8303] NFSD: starting 10-second grace period (net f00003d6) [ 258.198100][ T5606] Bluetooth: hci0: command tx timeout [ 258.829550][ T8347] netlink: 36 bytes leftover after parsing attributes in process `syz.1.826'. [ 259.035887][ T8351] netlink: 4 bytes leftover after parsing attributes in process `syz.1.826'. [ 259.238117][ T5606] Bluetooth: hci1: command tx timeout [ 259.509992][ T8361] tipc: Started in network mode [ 259.510025][ T8361] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 259.510196][ T8361] tipc: Enabled bearer , priority 0 [ 260.278096][ T5606] Bluetooth: hci0: command tx timeout [ 260.656404][ T5854] tipc: Node number set to 43690 [ 260.809929][ T8237] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.810142][ T8237] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.810427][ T8237] bridge_slave_0: entered allmulticast mode [ 260.861824][ T8237] bridge_slave_0: entered promiscuous mode [ 260.922824][ T8237] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.922929][ T8237] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.923162][ T8237] bridge_slave_1: entered allmulticast mode [ 260.925465][ T8237] bridge_slave_1: entered promiscuous mode [ 261.102973][ T8237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.120009][ T8237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.328404][ T5606] Bluetooth: hci1: command tx timeout [ 261.993698][ T8237] team0: Port device team_slave_0 added [ 262.027554][ T8237] team0: Port device team_slave_1 added [ 262.237456][ T8237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.237473][ T8237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 262.257783][ T8237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.292116][ T8237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.292148][ T8237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 262.292180][ T8237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.357740][ T5606] Bluetooth: hci0: command tx timeout [ 262.748523][ T8449] netlink: 116 bytes leftover after parsing attributes in process `syz.5.862'. [ 262.969777][ T8237] hsr_slave_0: entered promiscuous mode [ 262.971392][ T8237] hsr_slave_1: entered promiscuous mode [ 262.972386][ T8237] debugfs: 'hsr0' already exists in 'hsr' [ 262.972411][ T8237] Cannot create hsr debugfs directory [ 263.447412][ T8285] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.449322][ T8285] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.449874][ T8285] bridge_slave_0: entered allmulticast mode [ 263.484903][ T8285] bridge_slave_0: entered promiscuous mode [ 263.505080][ T8285] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.505214][ T8285] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.505486][ T8285] bridge_slave_1: entered allmulticast mode [ 263.510764][ T8285] bridge_slave_1: entered promiscuous mode [ 263.792999][ T8285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.896788][ T8285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.977866][ T8450] NFSD: Unable to initialize client recovery tracking! (-110) [ 263.977885][ T8450] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 263.977897][ T8450] NFSD: starting 90-second grace period (net f00003fa) [ 264.084954][ T8285] team0: Port device team_slave_0 added [ 264.260263][ T8285] team0: Port device team_slave_1 added [ 264.440212][ T5606] Bluetooth: hci0: command tx timeout [ 264.663867][ T8285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.663897][ T8285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 264.663926][ T8285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.720224][ T8285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.720247][ T8285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 264.720277][ T8285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.966583][ T8473] NFSD: Failed to start, no listeners configured. [ 265.025998][ T8285] hsr_slave_0: entered promiscuous mode [ 265.027226][ T8285] hsr_slave_1: entered promiscuous mode [ 265.040213][ T8285] debugfs: 'hsr0' already exists in 'hsr' [ 265.040233][ T8285] Cannot create hsr debugfs directory [ 265.096257][ T8237] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 265.123774][ T8237] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 265.145232][ T8237] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 265.183432][ T8237] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 265.223983][ T8237] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 265.262181][ T8237] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 265.276457][ T8237] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 265.311327][ T8237] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 266.119244][ T8285] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 266.256229][ T8285] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 266.278714][ T8285] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 266.362262][ T8285] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 266.365035][ T8285] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 266.413739][ T8285] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 266.459727][ T8501] NFSD: Failed to start, no listeners configured. [ 266.461558][ T8285] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 266.502276][ T8285] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 266.538097][ T8237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.687616][ T8237] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.690293][ T8514] netlink: 72 bytes leftover after parsing attributes in process `syz.5.879'. [ 266.690320][ T8514] netlink: 72 bytes leftover after parsing attributes in process `syz.5.879'. [ 266.757111][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.757546][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.906215][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.906352][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.153085][ T8285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.307445][ T8285] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.441025][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.441238][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.503371][ T999] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.503540][ T999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.126663][ T8237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.817833][ T8522] NFSD: Unable to initialize client recovery tracking! (-110) [ 268.817853][ T8522] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 268.817865][ T8522] NFSD: starting 90-second grace period (net f00003af) [ 268.872847][ T8285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.900377][ T8237] veth0_vlan: entered promiscuous mode [ 268.949663][ T8237] veth1_vlan: entered promiscuous mode [ 269.019246][ T8237] veth0_macvtap: entered promiscuous mode [ 269.043417][ T8237] veth1_macvtap: entered promiscuous mode [ 269.135924][ T8237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.180461][ T8237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.229332][ T3337] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.230673][ T3337] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.230720][ T3337] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.230760][ T3337] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.075095][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.075119][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.157282][ T8285] veth0_vlan: entered promiscuous mode [ 270.376866][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.376889][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.433029][ T8285] veth1_vlan: entered promiscuous mode [ 270.766798][ T8285] veth0_macvtap: entered promiscuous mode [ 270.794673][ T8285] veth1_macvtap: entered promiscuous mode [ 270.960697][ T8285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.082424][ T8285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.098586][ T8613] netlink: 32 bytes leftover after parsing attributes in process `syz.6.903'. [ 272.451219][ T8613] netlink: 332 bytes leftover after parsing attributes in process `syz.6.903'. [ 272.539662][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.539681][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.700897][ T999] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.737744][ T3314] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.737796][ T3314] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.737820][ T8598] NFSD: Unable to initialize client recovery tracking! (-110) [ 272.737835][ T8598] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 272.737836][ T3314] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.737848][ T8598] NFSD: starting 90-second grace period (net f00003fa) [ 273.218207][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.218231][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.506589][ T5728] ------------[ cut here ]------------ [ 273.506603][ T5728] con->v1.connect_seq != le32_to_cpu(con->v1.in_reply.connect_seq) [ 273.506621][ T5728] WARNING: net/ceph/messenger_v1.c:902 at ceph_con_v1_try_read+0x3335/0x6eb0, CPU#1: kworker/1:7/5728 [ 273.506669][ T5728] Modules linked in: [ 273.506691][ T5728] CPU: 1 UID: 0 PID: 5728 Comm: kworker/1:7 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 273.506716][ T5728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 273.506728][ T5728] Workqueue: ceph-msgr ceph_con_workfn [ 273.506753][ T5728] RIP: 0010:ceph_con_v1_try_read+0x3335/0x6eb0 [ 273.506781][ T5728] Code: 45 31 e4 e9 3f d1 ff ff e8 68 a6 be f6 90 0f 0b 90 e9 cd d3 ff ff e8 5a a6 be f6 90 0f 0b 90 e9 dd e6 ff ff e8 4c a6 be f6 90 <0f> 0b 90 e9 f4 e7 ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 30 d1 [ 273.506797][ T5728] RSP: 0018:ffffc9000538f180 EFLAGS: 00010293 [ 273.506822][ T5728] RAX: ffffffff8b073574 RBX: 0000000000000001 RCX: ffff888061c8dd00 [ 273.506835][ T5728] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 273.506844][ T5728] RBP: ffffc9000538fa78 R08: 0000000000000000 R09: 0000000000000000 [ 273.506854][ T5728] R10: 0000000000000100 R11: 000000000000000d R12: ffff888020ad0488 [ 273.506865][ T5728] R13: fffff52000a71e70 R14: dffffc0000000000 R15: 0000000000000000 [ 273.506876][ T5728] FS: 0000000000000000(0000) GS:ffff888125d3e000(0000) knlGS:0000000000000000 [ 273.506890][ T5728] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 273.506901][ T5728] CR2: 00007f1618b25ff8 CR3: 000000005ca8e000 CR4: 00000000003526f0 [ 273.506916][ T5728] Call Trace: [ 273.506923][ T5728] [ 273.506948][ T5728] ? __lock_acquire+0x683/0x2ce0 [ 273.506992][ T5728] ? __pfx_ceph_con_v1_try_read+0x10/0x10 [ 273.507049][ T5728] ? __lock_acquire+0x683/0x2ce0 [ 273.507080][ T5728] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 273.507104][ T5728] ? lockdep_hardirqs_on+0x7a/0x110 [ 273.507126][ T5728] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 273.507149][ T5728] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 273.507176][ T5728] ? __local_bh_enable+0x1e1/0x2f0 [ 273.507202][ T5728] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 273.507225][ T5728] ? lockdep_hardirqs_on+0x7a/0x110 [ 273.507251][ T5728] ? wg_packet_decrypt_worker+0xd58/0xd90 [ 273.507284][ T5728] ? wg_packet_decrypt_worker+0xe1/0xd90 [ 273.507308][ T5728] ? __pfx_wg_packet_decrypt_worker+0x10/0x10 [ 273.507346][ T5728] ? __lock_acquire+0x683/0x2ce0 [ 273.507378][ T5728] ? __lock_acquire+0x683/0x2ce0 [ 273.507403][ T5728] ? __lock_acquire+0x683/0x2ce0 [ 273.507421][ T5728] ? look_up_lock_class+0x57/0x110 [ 273.507446][ T5728] ? register_lock_class+0x31/0x2e0 [ 273.507468][ T5728] ? __lock_acquire+0x683/0x2ce0 [ 273.507501][ T5728] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 273.507526][ T5728] ? lockdep_hardirqs_on+0x7a/0x110 [ 273.507620][ T5728] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 273.507644][ T5728] ? mutex_lock_nested+0x152/0x1d0 [ 273.507661][ T5728] ? ceph_con_workfn+0x3b/0x14a0 [ 273.507688][ T5728] ceph_con_workfn+0x208/0x14a0 [ 273.507714][ T5728] ? rcu_is_watching+0x15/0xb0 [ 273.507740][ T5728] ? process_scheduled_works+0xa20/0x14e0 [ 273.507762][ T5728] process_scheduled_works+0xa8e/0x14e0 [ 273.507809][ T5728] ? __pfx_process_scheduled_works+0x10/0x10 [ 273.507846][ T5728] ? assign_work+0x3cf/0x5d0 [ 273.507871][ T5728] worker_thread+0xa47/0xfb0 [ 273.507905][ T5728] ? __kthread_parkme+0x71/0x1f0 [ 273.507938][ T5728] kthread+0x388/0x470 [ 273.507964][ T5728] ? __pfx_worker_thread+0x10/0x10 [ 273.507985][ T5728] ? __pfx_kthread+0x10/0x10 [ 273.508012][ T5728] ret_from_fork+0x514/0xb70 [ 273.508044][ T5728] ? __pfx_ret_from_fork+0x10/0x10 [ 273.508072][ T5728] ? __switch_to+0xc89/0x1420 [ 273.508100][ T5728] ? __pfx_kthread+0x10/0x10 [ 273.508126][ T5728] ret_from_fork_asm+0x1a/0x30 [ 273.508156][ T5728] [ 273.508165][ T5728] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 273.508179][ T5728] CPU: 1 UID: 0 PID: 5728 Comm: kworker/1:7 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 273.508198][ T5728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 273.508209][ T5728] Workqueue: ceph-msgr ceph_con_workfn [ 273.508235][ T5728] Call Trace: [ 273.508242][ T5728] [ 273.508249][ T5728] vpanic+0x56c/0xa60 [ 273.508268][ T5728] ? __pfx__printk+0x10/0x10 [ 273.508289][ T5728] ? __pfx_vpanic+0x10/0x10 [ 273.508304][ T5728] ? is_bpf_text_address+0x292/0x2b0 [ 273.508329][ T5728] ? is_bpf_text_address+0x26/0x2b0 [ 273.508364][ T5728] panic+0xc5/0xd0 [ 273.508384][ T5728] ? __pfx_panic+0x10/0x10 [ 273.508410][ T5728] ? ret_from_fork_asm+0x1a/0x30 [ 273.508430][ T5728] __warn+0x315/0x4c0 [ 273.508445][ T5728] ? ceph_con_v1_try_read+0x3335/0x6eb0 [ 273.508474][ T5728] ? ceph_con_v1_try_read+0x3335/0x6eb0 [ 273.508505][ T5728] __report_bug+0x276/0x570 [ 273.508533][ T5728] ? ceph_con_v1_try_read+0x3335/0x6eb0 [ 273.508562][ T5728] ? __pfx___report_bug+0x10/0x10 [ 273.508585][ T5728] ? __local_bh_enable+0x1e1/0x2f0 [ 273.508612][ T5728] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 273.508636][ T5728] ? lockdep_hardirqs_on+0x7a/0x110 [ 273.508666][ T5728] ? ceph_con_v1_try_read+0x3335/0x6eb0 [ 273.508691][ T5728] report_bug+0x16a/0x220 [ 273.508715][ T5728] ? ceph_con_v1_try_read+0x3335/0x6eb0 [ 273.508739][ T5728] ? ceph_con_v1_try_read+0x3337/0x6eb0 [ 273.508764][ T5728] handle_bug+0x9c/0x200 [ 273.508792][ T5728] exc_invalid_op+0x1a/0x50 [ 273.508828][ T5728] asm_exc_invalid_op+0x1a/0x20 [ 273.508846][ T5728] RIP: 0010:ceph_con_v1_try_read+0x3335/0x6eb0 [ 273.508874][ T5728] Code: 45 31 e4 e9 3f d1 ff ff e8 68 a6 be f6 90 0f 0b 90 e9 cd d3 ff ff e8 5a a6 be f6 90 0f 0b 90 e9 dd e6 ff ff e8 4c a6 be f6 90 <0f> 0b 90 e9 f4 e7 ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 30 d1 [ 273.508888][ T5728] RSP: 0018:ffffc9000538f180 EFLAGS: 00010293 [ 273.508904][ T5728] RAX: ffffffff8b073574 RBX: 0000000000000001 RCX: ffff888061c8dd00 [ 273.508916][ T5728] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 273.508926][ T5728] RBP: ffffc9000538fa78 R08: 0000000000000000 R09: 0000000000000000 [ 273.508938][ T5728] R10: 0000000000000100 R11: 000000000000000d R12: ffff888020ad0488 [ 273.508949][ T5728] R13: fffff52000a71e70 R14: dffffc0000000000 R15: 0000000000000000 [ 273.508969][ T5728] ? ceph_con_v1_try_read+0x3334/0x6eb0 [ 273.509032][ T5728] ? __lock_acquire+0x683/0x2ce0 [ 273.509073][ T5728] ? __pfx_ceph_con_v1_try_read+0x10/0x10 [ 273.509105][ T5728] ? __lock_acquire+0x683/0x2ce0 [ 273.509139][ T5728] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 273.509168][ T5728] ? lockdep_hardirqs_on+0x7a/0x110 [ 273.509196][ T5728] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 273.509224][ T5728] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 273.509259][ T5728] ? __local_bh_enable+0x1e1/0x2f0 [ 273.509293][ T5728] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 273.509320][ T5728] ? lockdep_hardirqs_on+0x7a/0x110 [ 273.509353][ T5728] ? wg_packet_decrypt_worker+0xd58/0xd90 [ 273.509392][ T5728] ? wg_packet_decrypt_worker+0xe1/0xd90 [ 273.509422][ T5728] ? __pfx_wg_packet_decrypt_worker+0x10/0x10 [ 273.509465][ T5728] ? __lock_acquire+0x683/0x2ce0 [ 273.509503][ T5728] ? __lock_acquire+0x683/0x2ce0 [ 273.509533][ T5728] ? __lock_acquire+0x683/0x2ce0 [ 273.509557][ T5728] ? look_up_lock_class+0x57/0x110 [ 273.509587][ T5728] ? register_lock_class+0x31/0x2e0 [ 273.509614][ T5728] ? __lock_acquire+0x683/0x2ce0 [ 273.509655][ T5728] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 273.509685][ T5728] ? lockdep_hardirqs_on+0x7a/0x110 [ 273.509714][ T5728] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 273.509742][ T5728] ? mutex_lock_nested+0x152/0x1d0 [ 273.509764][ T5728] ? ceph_con_workfn+0x3b/0x14a0 [ 273.509797][ T5728] ceph_con_workfn+0x208/0x14a0 [ 273.509835][ T5728] ? rcu_is_watching+0x15/0xb0 [ 273.509868][ T5728] ? process_scheduled_works+0xa20/0x14e0 [ 273.509896][ T5728] process_scheduled_works+0xa8e/0x14e0 [ 273.509955][ T5728] ? __pfx_process_scheduled_works+0x10/0x10 [ 273.509991][ T5728] ? assign_work+0x3cf/0x5d0 [ 273.510024][ T5728] worker_thread+0xa47/0xfb0 [ 273.510067][ T5728] ? __kthread_parkme+0x71/0x1f0 [ 273.510109][ T5728] kthread+0x388/0x470 [ 273.510144][ T5728] ? __pfx_worker_thread+0x10/0x10 [ 273.510170][ T5728] ? __pfx_kthread+0x10/0x10 [ 273.510207][ T5728] ret_from_fork+0x514/0xb70 [ 273.510245][ T5728] ? __pfx_ret_from_fork+0x10/0x10 [ 273.510279][ T5728] ? __switch_to+0xc89/0x1420 [ 273.510312][ T5728] ? __pfx_kthread+0x10/0x10 [ 273.510349][ T5728] ret_from_fork_asm+0x1a/0x30 [ 273.510389][ T5728] [ 273.510565][ T5728] Kernel Offset: disabled