last executing test programs: 4.602316678s ago: executing program 0 (id=61): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/self/fail-nth\x00', 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') write(r0, &(0x7f0000000100)='1\x00', 0x2) write(r0, &(0x7f0000000100)='2\x00', 0x2) write(r0, &(0x7f0000000100)='3\x00', 0x2) write(r0, &(0x7f0000000100)='4\x00', 0x2) write(r0, &(0x7f0000000100)='5\x00', 0x2) read(r1, &(0x7f0000000180)=""/512, 0x200) write(r0, &(0x7f0000000100)='6\x00', 0x2) read(r1, &(0x7f0000000180)=""/512, 0x200) 4.273596706s ago: executing program 3 (id=63): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x202}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x501, 0x70bd00, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{}, {0x0, 0x2, {{0x0, [], 0x1, [0x1]}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x501, 0x70bd28, 0x70bd0000ff, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x4, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x0, 0xfffffffd, 0x0, 0x5, 0x5, 0x1, 0x3, 0x3}}}}]}, 0x58}}, 0x0) 3.781876098s ago: executing program 2 (id=64): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='rpc_pipefs\x00', &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) r0 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5i\x00', 0x0) r1 = fsopen(&(0x7f0000000e00)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5i\x00', 0x0) r2 = fsopen(&(0x7f0000001000)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5i\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 3.656696331s ago: executing program 3 (id=66): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) listen(r0, 0x5) r1 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000250)}], 0x1, &(0x7f0000000300)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x18, 0x110, 0x2, "01000000"}], 0x30}, 0x0) shutdown(r0, 0x2) close(r0) 3.622127552s ago: executing program 0 (id=67): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3400000010000106000000000000000000000000000000000c0003006272696467653000180012000b00010062726964676500000800020000000000"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800000010000106000000000000000000000000000000000a000300766574683000080013000100000014001200090001007665746800000700020000000000"], 0x38}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a3000000000080002400000000330000000160a01030000e6ff00000000020000000900010073797a30000000000900020073797a300000000014000380080001000000000008000200000000000c0003800800010062726964676530002c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0xf8}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000108004500002800004000400600000a0101010a0101021234567800000001000000005002200000000000"], 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000108004500002800004000400600000a0101010a0101021234567800000002000000015010200000000000"], 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000108004500002800004000400600000a0101010a0101021234567800000002000000015018200000000000"], 0x0) 3.451681126s ago: executing program 2 (id=68): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000280)={0xffffffffffffffff, 0x1, 0x100000000, 0x100000000}) r1 = mq_open(&(0x7f0000000080)='GPL\x00', 0x980, 0x80, &(0x7f0000000140)={0x4, 0x2, 0x6, 0xd581}) mq_notify(r1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$mtd(0x0, 0x260c, 0xa02) ioprio_set$pid(0x2, 0x0, 0x2000) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000480)={0x7f, 0xffff, 0x1, 'queue1\x00', 0x4}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_enter(0xffffffffffffffff, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r5) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x1, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16=r6, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a2c0000000b0a01010000000000000000070000000900020073797a31000000000900010073647a3000000000140000001000010008000000000000000084400afccffe30561b302ac842e12b76d335ff8aeb05d99e21b723644746e09465351201bef9bdb91ce72a90f57a7c3e8241049672a206f520a8e0546cfff94c7c42a203acf447b5679db4e22706d2ee407a9c8dedf2c0558a1cd0fda5921c9b576b739c55a2d9e01c3bd22e422ecbb5e6622f6011819ca4edf0728e13583dd4989c7ea7b9e2b44abd2311ac44606fc8b1fab4c126049fb8bc76ca52e29a3e4853"], 0x54}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000160080ff0000000000000000850000002c00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.451349686s ago: executing program 0 (id=69): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f0000000020)={0x2, 0x0, @loopback}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) accept(r0, 0x0, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000600)={0x1}, 0x8) close(r1) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) listen(r2, 0x5) r3 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r3, &(0x7f0000000120)={0x2, 0x0, @loopback}, 0x10) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) sendmsg$inet_sctp(r3, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000300)='hello', 0x5}], 0x1, &(0x7f0000000380)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) 3.437023717s ago: executing program 3 (id=70): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)={0xe4, 0x10, 0x1, 0x0, 0x0, "", [@generic="0a010100000000000000000000000000a010100000000000000000000000000000000000000000020020200000000000000000000000000a01010000000000000000000000000012340000320000000a000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000"]}, 0xe4}], 0x1}, 0x0) sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)={0x94, 0x29, 0x1, 0x0, 0x0, "", [@generic="0a01010000000000000000000000000012340000020032000a0101010000000000000000000000000a01010100000000000000000000000000000000000000000a010100000000000000000000000000a0101000000000000000000000000000000000000000000002002020000000000000000000000000000000000200000002000000"]}, 0x94}], 0x1}, 0x0) 2.8851922s ago: executing program 3 (id=71): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000010)=0x1, 0x4) 2.584980267s ago: executing program 0 (id=73): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\x00', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000120)='./proc/sys/net/sctp/reconf_enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='1\x00', 0x1) close(r1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180)=0x2, 0x4) setsockopt(r2, 0x84, 0x7d, &(0x7f0000000200)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={0x0, 0x80}, 0x8) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x80}, 0x8) bind(r2, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x10) listen(r2, 0x5) connect(r3, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) r4 = accept(r2, 0x0, 0x0) sendmsg$inet_sctp(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000700)="123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890", 0x90}], 0x1, 0x0, 0x0, 0x8000}, 0x8000) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000900), 0x4) 2.545094518s ago: executing program 2 (id=74): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/sctp/addip_noauth_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/net/sctp/addip_enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='1', 0x1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r2, &(0x7f0000000000)={0x2, 0x2345, @loopback}, 0x10) listen(r2, 0x5) r3 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r3, &(0x7f0000000100)={0x2, 0x1234, @loopback}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x2345, @loopback}, 0x10) accept4$inet(r2, 0x0, 0x0, 0x0) 2.387642392s ago: executing program 3 (id=76): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='-2 -3 +4\n\x00', 0x9) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r1, &(0x7f0000000200)={0x2, 0x800, @empty}, 0x10) listen(r1, 0x80) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='3\x00', 0x1) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='8\n\x00', 0x2) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x6) connect$inet(r4, &(0x7f0000000200)={0x2, 0x800, @loopback}, 0x10) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) close(r3) 2.273558805s ago: executing program 2 (id=77): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r0, &(0x7f0000000000)=@in={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r1, &(0x7f0000000040)=@in={0x2, 0x4e21, @loopback}, 0x10) connect(r1, &(0x7f0000000080)=@in={0x2, 0x4e20, @loopback}, 0x10) accept(r0, 0x0, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000100)={&(0x7f0000000080)=@in={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000200)='hello', 0x5}], 0x1, &(0x7f0000000280)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}, 0x0) 2.211422466s ago: executing program 0 (id=78): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./export_dir\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd_mnt/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='-2 -3 +4\n', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc_mnt/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='localhost / 2147483647 0 0 0 0\n', 0x1f) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc_mnt/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0) write(r4, &(0x7f0000000440)='localhost 1 \\x00 2147483647 /\n', 0x1e) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./nfsd_mnt/threads\x00', 0x1, 0x0) write(r5, &(0x7f00000004c0)='1\n', 0x2) (async) close(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./nfs_mnt\x00', 0x1ff) mount(&(0x7f0000000540)=@filename='127.0.0.1:/\x00', &(0x7f0000000580)='./nfs_mnt\x00', &(0x7f00000005c0)='nfs4\x00', 0x0, &(0x7f0000000600)='addr=127.0.0.1,clientaddr=127.0.0.1\x00') setxattr(&(0x7f0000000640)='./nfs_mnt\x00', &(0x7f0000000680)=@known='system.posix_acl_access\x00', &(0x7f00000006c0)='\x02\x00\x00\x00\x01\x00\a\x00\xff\xff\xff\xff\x04\x00\x05\x00\xff\xff\xff\xff \x00\x05\x00\xff\xff\xff\xff', 0x1c, 0x0) 1.587197531s ago: executing program 2 (id=79): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6f00, @loopback}, 0x10) r1 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='vers\x00', &(0x7f0000000280)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000002c0)='proto\x00', &(0x7f0000000300)='udp\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000340)='mountproto\x00', &(0x7f0000000380)='udp\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) recvfrom(r0, &(0x7f0000000400)=""/100, 0x64, 0x40, &(0x7f0000000500)=@in={0x2, 0x6f00, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000700)="00000000000000010000000000000000000000000000000000000801", 0x1c, 0x0, &(0x7f0000000500)={0x2, 0x4e20, @loopback}, 0x10) 1.107900683s ago: executing program 1 (id=82): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/module/sctp/parameters/no_checksums\x00', 0x1, 0x0) write(r0, &(0x7f0000000040)='1\n', 0x2) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x5) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @loopback}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) syz_emit_ethernet(0x0, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x40, 0x84, 0x0, @loopback, @loopback}, "4e214e20123456780000000006000400"}}}}, 0x0) 1.069711434s ago: executing program 1 (id=83): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000280)={0xffffffffffffffff, 0x1, 0x100000000, 0x100000000}) r1 = mq_open(&(0x7f0000000080)='GPL\x00', 0x980, 0x80, &(0x7f0000000140)={0x4, 0x2, 0x6, 0xd581}) mq_notify(r1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$mtd(0x0, 0x260c, 0xa02) ioprio_set$pid(0x2, 0x0, 0x2000) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000480)={0x7f, 0xffff, 0x1, 'queue1\x00', 0x4}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_enter(0xffffffffffffffff, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(0x0, r5) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x1, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16=r6, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a2c0000000b0a01010000000000000000070000000900020073797a31000000000900010073647a3000000000140000001000010008000000000000000084400afccffe30561b302ac842e12b76d335ff8aeb05d99e21b723644746e09465351201bef9bdb91ce72a90f57a7c3e8241049672a206f520a8e0546cfff94c7c42a203acf447b5679db4e22706d2ee407a9c8dedf2c0558a1cd0fda5921c9b576b739c55a2d9e01c3bd22e422ecbb5e6622f6011819ca4edf0728e13583dd4989c7ea7b9e2b44abd2311ac44606fc8b1fab4c126049fb8bc76ca52e29a3e4853"], 0x54}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000160080ff0000000000000000850000002c00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 414.9676ms ago: executing program 2 (id=84): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/ports\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='2049\n', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='1\n', 0x2) 381.0711ms ago: executing program 1 (id=85): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x64, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}}}]}, 0x64}}, 0x0) 239.990914ms ago: executing program 1 (id=86): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0x0, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2}}]}}]}, 0x44}}, 0x0) 211.818185ms ago: executing program 1 (id=87): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x2, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f00000001c0)='\x00\x00\x00\x00', &(0x7f0000000200)=@udp=r1}, 0x20) 115.912907ms ago: executing program 3 (id=88): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/self/fail-nth\x00', 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') write(r0, &(0x7f0000000100)='1\x00', 0x2) write(r0, &(0x7f0000000100)='2\x00', 0x2) write(r0, &(0x7f0000000100)='3\x00', 0x2) write(r0, &(0x7f0000000100)='4\x00', 0x2) write(r0, &(0x7f0000000100)='5\x00', 0x2) read(r1, &(0x7f0000000180)=""/512, 0x200) write(r0, &(0x7f0000000100)='6\x00', 0x2) read(r1, &(0x7f0000000180)=""/512, 0x200) 53.269859ms ago: executing program 0 (id=89): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x48}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/class/net/bridge0/bridge/multicast_igmp_version\x00', 0x1, 0x0) write(r2, &(0x7f0000000500)='3\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/class/net/syz_tun/brport/multicast_fast_leave\x00', 0x1, 0x0) write(r3, &(0x7f00000005c0)='1\n', 0x2) syz_emit_ethernet(0x3a, &(0x7f0000000700)={@multicast, @local, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x1, 0x2, 0x0, @rand_addr=0x1010164, @multicast1, {[@ra={0x94, 0x4}]}}, "2200354f0000000104000001e1010203c0a80101"}}}}, 0x0) 0s ago: executing program 1 (id=90): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/sctp/auth_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1', 0x1) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x1, 0x4, "1234"}, 0xc) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x1d, &(0x7f0000000100)={0x1, [0x1]}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e21, @local}], 0x10) listen(r1, 0x5) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x18, &(0x7f0000000300)={0x0, 0x1, 0x4, "1234"}, 0xc) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x1d, &(0x7f0000000400)={0x1, [0x1]}, 0x8) connect$inet(r2, &(0x7f0000000500)={0x2, 0x4e21, @local}, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.7' (ED25519) to the list of known hosts. [ 82.107632][ T5764] cgroup: Unknown subsys name 'net' [ 82.274124][ T5764] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.041661][ T5764] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.204781][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.217293][ T5786] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.225625][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.238270][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.248884][ T5789] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.250207][ T5785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.264291][ T5785] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.272369][ T5785] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.281024][ T5785] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.282909][ T5789] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.296289][ T5789] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.304971][ T5789] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.310947][ T5086] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.314216][ T5789] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.322463][ T5086] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.330688][ T5789] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.335658][ T5086] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.343178][ T5789] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.351173][ T5086] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.365629][ T5782] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.373720][ T5789] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.431384][ T5086] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.455014][ T5086] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.462600][ T5086] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.899050][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 86.979349][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 87.061102][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 87.193983][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.214662][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.222084][ T5775] bridge_slave_0: entered allmulticast mode [ 87.230386][ T5775] bridge_slave_0: entered promiscuous mode [ 87.242393][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 87.302472][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.314244][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.321775][ T5775] bridge_slave_1: entered allmulticast mode [ 87.333302][ T5775] bridge_slave_1: entered promiscuous mode [ 87.384277][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.405339][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.412614][ T5778] bridge_slave_0: entered allmulticast mode [ 87.420611][ T5778] bridge_slave_0: entered promiscuous mode [ 87.468698][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.476052][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.483635][ T5776] bridge_slave_0: entered allmulticast mode [ 87.491808][ T5776] bridge_slave_0: entered promiscuous mode [ 87.500286][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.507978][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.516642][ T5778] bridge_slave_1: entered allmulticast mode [ 87.524187][ T5778] bridge_slave_1: entered promiscuous mode [ 87.537827][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.570042][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.577488][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.585139][ T5776] bridge_slave_1: entered allmulticast mode [ 87.592649][ T5776] bridge_slave_1: entered promiscuous mode [ 87.629334][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.676044][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.725872][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.737528][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.758456][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.791562][ T5775] team0: Port device team_slave_0 added [ 87.841232][ T5775] team0: Port device team_slave_1 added [ 87.879751][ T5778] team0: Port device team_slave_0 added [ 87.901705][ T5778] team0: Port device team_slave_1 added [ 87.921578][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.928928][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.936941][ T5777] bridge_slave_0: entered allmulticast mode [ 87.944375][ T5777] bridge_slave_0: entered promiscuous mode [ 87.955408][ T5776] team0: Port device team_slave_0 added [ 87.961963][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.969366][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.976810][ T5777] bridge_slave_1: entered allmulticast mode [ 87.983946][ T5777] bridge_slave_1: entered promiscuous mode [ 88.029816][ T5776] team0: Port device team_slave_1 added [ 88.049246][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.056332][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.082834][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.101139][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.108297][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.134628][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.147040][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.154028][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.181033][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.224714][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.234884][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.241894][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.268168][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.300278][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.307543][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.334255][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.348655][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.358186][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.384781][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.396164][ T52] Bluetooth: hci0: command tx timeout [ 88.404162][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.440199][ T5777] team0: Port device team_slave_0 added [ 88.479930][ T5777] team0: Port device team_slave_1 added [ 88.485654][ T52] Bluetooth: hci1: command tx timeout [ 88.554295][ T5778] hsr_slave_0: entered promiscuous mode [ 88.560405][ T52] Bluetooth: hci2: command tx timeout [ 88.565568][ T52] Bluetooth: hci3: command tx timeout [ 88.573126][ T5778] hsr_slave_1: entered promiscuous mode [ 88.597120][ T5775] hsr_slave_0: entered promiscuous mode [ 88.603931][ T5775] hsr_slave_1: entered promiscuous mode [ 88.610508][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.618483][ T5775] Cannot create hsr debugfs directory [ 88.625740][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.632741][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.659147][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.672995][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.680108][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.706532][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.722637][ T5776] hsr_slave_0: entered promiscuous mode [ 88.732946][ T5776] hsr_slave_1: entered promiscuous mode [ 88.739390][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.747296][ T5776] Cannot create hsr debugfs directory [ 88.924215][ T5777] hsr_slave_0: entered promiscuous mode [ 88.931298][ T5777] hsr_slave_1: entered promiscuous mode [ 88.938320][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.946933][ T5777] Cannot create hsr debugfs directory [ 89.311323][ T5778] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.333156][ T5778] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.359794][ T5778] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.370031][ T5778] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.428585][ T5775] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.462845][ T5775] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.487243][ T5775] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.499131][ T5775] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.531868][ T5776] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.543309][ T5776] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.559453][ T5776] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.573186][ T5776] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.743833][ T5777] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.768330][ T5777] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.779973][ T5777] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.790991][ T5777] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.847978][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.891007][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.932507][ T994] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.940003][ T994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.978521][ T994] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.985864][ T994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.032537][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.078874][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.105941][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.140664][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.169088][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.176391][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.197425][ T994] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.204755][ T994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.232586][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.253398][ T4756] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.260622][ T4756] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.276778][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.310803][ T4756] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.318017][ T4756] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.401273][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.408630][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.471268][ T994] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.478535][ T994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.488710][ T52] Bluetooth: hci0: command tx timeout [ 90.544481][ T5775] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 90.558462][ T52] Bluetooth: hci1: command tx timeout [ 90.564196][ T5775] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.634676][ T52] Bluetooth: hci3: command tx timeout [ 90.640748][ T52] Bluetooth: hci2: command tx timeout [ 90.758800][ T5777] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 90.775254][ T5777] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.830458][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.011547][ T5778] veth0_vlan: entered promiscuous mode [ 91.067747][ T5778] veth1_vlan: entered promiscuous mode [ 91.147022][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.164003][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.204314][ T5778] veth0_macvtap: entered promiscuous mode [ 91.237304][ T5778] veth1_macvtap: entered promiscuous mode [ 91.305817][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.329354][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.362830][ T5778] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.373049][ T5778] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.381882][ T5778] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.391144][ T5778] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.409161][ T5775] veth0_vlan: entered promiscuous mode [ 91.417682][ T5776] veth0_vlan: entered promiscuous mode [ 91.451240][ T5776] veth1_vlan: entered promiscuous mode [ 91.463421][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.484867][ T5775] veth1_vlan: entered promiscuous mode [ 91.640793][ T5776] veth0_macvtap: entered promiscuous mode [ 91.647585][ T3544] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.661389][ T3544] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.673758][ T5775] veth0_macvtap: entered promiscuous mode [ 91.711651][ T5775] veth1_macvtap: entered promiscuous mode [ 91.729843][ T5776] veth1_macvtap: entered promiscuous mode [ 91.764087][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.775128][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.787291][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.811428][ T5777] veth0_vlan: entered promiscuous mode [ 91.830793][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.848939][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.861352][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.872858][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.889736][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.938415][ T5777] veth1_vlan: entered promiscuous mode [ 91.961454][ T5775] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.971536][ T5775] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.981963][ T5775] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.991586][ T5775] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.007992][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.029224][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.039691][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.050576][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.071523][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.103261][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.116361][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.128993][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.139638][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.151782][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.181429][ T5776] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.196148][ T5776] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.208934][ T5776] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.219141][ T5776] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.244794][ T9] cfg80211: failed to load regulatory.db [ 92.364148][ T5777] veth0_macvtap: entered promiscuous mode [ 92.416672][ T5777] veth1_macvtap: entered promiscuous mode [ 92.462937][ T4732] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.483292][ T4732] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.514407][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.527347][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.539024][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.550047][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.562350][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.567135][ T52] Bluetooth: hci0: command tx timeout [ 92.579621][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.592269][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.635938][ T52] Bluetooth: hci1: command tx timeout [ 92.688349][ T4756] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.696654][ T1321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.713444][ T1321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.722452][ T4756] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.730106][ T5086] Bluetooth: hci3: command tx timeout [ 92.730199][ T52] Bluetooth: hci2: command tx timeout [ 92.752519][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.763536][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.773887][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.785809][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.797584][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.808181][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.820400][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.888392][ T5777] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.911883][ T5777] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.922495][ T5777] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.932046][ T5777] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.976197][ T4732] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.984195][ T4732] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.206018][ T1321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.221152][ T1321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.313789][ T3544] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.356098][ T3544] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.730980][ T5781] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 93.958378][ T5781] usb 3-1: not running at top speed; connect to a high speed hub [ 93.981030][ T5781] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 94.002130][ T5781] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 94.017726][ T5781] usb 3-1: New USB device found, idVendor=0b95, idProduct=1790, bcdDevice= 1.00 [ 94.027061][ T5781] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.038885][ T5781] usb 3-1: Product: syz [ 94.045527][ T5781] usb 3-1: Manufacturer: syz [ 94.050399][ T5781] usb 3-1: SerialNumber: syz [ 94.068156][ T5855] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 94.077746][ T5855] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 94.507380][ T5881] tipc: Started in network mode [ 94.512602][ T5881] tipc: Node identity efcdab90785634122143658709badcfe, cluster identity 4568 [ 94.526427][ T5881] tipc: New replicast peer: 127.0.0.1 [ 94.533923][ T5881] tipc: Enabled bearer , priority 10 [ 94.635049][ T52] Bluetooth: hci0: command tx timeout [ 94.715230][ T52] Bluetooth: hci1: command tx timeout [ 94.752661][ T9] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 94.764334][ T5868] ceph: No mds server is up or the cluster is laggy [ 94.795552][ T52] Bluetooth: hci2: command tx timeout [ 94.795995][ T5086] Bluetooth: hci3: command tx timeout [ 94.829937][ T5781] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 94.912300][ T5781] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 95.242398][ T5897] tipc: Enabling of bearer rejected, already enabled [ 95.253013][ T5897] tipc: Disabling bearer [ 95.475973][ T5781] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 95.582173][ T5905] netlink: 68 bytes leftover after parsing attributes in process `syz.0.18'. [ 95.637222][ T5905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18'. [ 95.727278][ T5781] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 95.745475][ T5781] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -71 [ 95.794637][ T5781] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 95.823377][ T5781] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71 [ 95.847382][ T969] IPVS: starting estimator thread 0... [ 95.852303][ T5781] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 95.878352][ T5781] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 95.945647][ T5781] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 95.967225][ T5781] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 95.978818][ T5911] IPVS: using max 17 ests per chain, 40800 per kthread [ 95.991578][ T5781] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 96.003443][ T5781] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 96.041022][ T5781] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 96.070557][ T5781] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 96.105778][ T5781] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 96.119848][ T5781] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 96.141939][ T5781] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 96.161432][ T5781] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 96.174317][ T5781] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 96.191593][ T5781] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 96.216796][ T5781] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 96.245222][ T5781] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 96.268106][ T5781] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 96.299124][ T5781] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 96.326248][ T5781] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 96.349106][ T5781] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 96.365812][ T5781] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 96.410857][ T5781] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 96.446622][ T5781] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 96.512464][ T5781] ax88179_178a 3-1:1.0 eth1: register 'ax88179_178a' at usb-dummy_hcd.2-1, ASIX AX88179 USB 3.0 Gigabit Ethernet, de:e8:cb:45:b9:bd [ 96.557502][ T5781] usb 3-1: USB disconnect, device number 2 [ 96.578756][ T5781] ax88179_178a 3-1:1.0 eth1: unregister 'ax88179_178a' usb-dummy_hcd.2-1, ASIX AX88179 USB 3.0 Gigabit Ethernet [ 97.089737][ T5933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.28'. [ 97.199097][ T5936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.29'. [ 97.209321][ T5936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.29'. [ 97.221295][ T5936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.29'. [ 97.232186][ T5936] (null): rxe_set_mtu: Set mtu to 1024 [ 97.292935][ T5937] (null): rxe_set_mtu: Set mtu to 1024 [ 97.405270][ T5940] smc: net device veth0 applied user defined pnetid SYZ0 [ 97.664754][ T5943] tipc: Started in network mode [ 97.684833][ T5943] tipc: Node identity ac14140f, cluster identity 4711 [ 97.748828][ T5943] tipc: New replicast peer: 172.30.0.3 [ 97.816576][ T5943] tipc: Enabled bearer , priority 10 [ 98.337191][ T5947] smc: net device dummy0 applied user defined pnetid SYZ0 [ 98.351234][ T5948] netlink: 'syz.3.32': attribute type 1 has an invalid length. [ 98.511721][ T5950] netlink: 32 bytes leftover after parsing attributes in process `syz.3.34'. [ 98.540670][ T5950] tipc: Cannot configure node identity twice [ 98.552382][ T5936] infiniband syz0: set active [ 98.559847][ T5950] tipc: Enabled bearer , priority 10 [ 98.573761][ T5936] infiniband syz0: added veth0 [ 98.586349][ T5936] syz0: rxe_create_cq: returned err = -12 [ 98.592706][ T5936] infiniband syz0: Couldn't create ib_mad CQ [ 98.599502][ T5936] infiniband syz0: Couldn't open port 1 [ 98.688973][ T5936] RDS/IB: syz0: added [ 98.693778][ T5936] smc: adding ib device syz0 with port count 1 [ 98.707675][ T5936] smc: ib device syz0 port 1 has pnetid SYZ0 (user defined) [ 98.887064][ T8] tipc: Node number set to 2886997007 [ 99.574708][ T5819] tipc: Node number set to 3210880763 [ 99.712787][ T5936] syz.0.29 (5936) used greatest stack depth: 19984 bytes left [ 99.721635][ T5937] infiniband syz1: set active [ 99.727419][ T5937] infiniband syz1: added veth1 [ 99.732839][ T5937] syz1: rxe_create_cq: returned err = -12 [ 99.739231][ T5937] infiniband syz1: Couldn't create ib_mad CQ [ 99.746027][ T5937] infiniband syz1: Couldn't open port 1 [ 99.825350][ T5937] RDS/IB: syz1: added [ 99.829750][ T5937] smc: adding ib device syz1 with port count 1 [ 99.855575][ T5937] smc: ib device syz1 port 1 has pnetid [ 100.062557][ T5973] tipc: Enabling of bearer rejected, already enabled [ 100.680355][ T5975] bridge0: port 3(syz_tun) entered blocking state [ 100.687487][ T5975] bridge0: port 3(syz_tun) entered disabled state [ 100.694399][ T5975] syz_tun: entered allmulticast mode [ 100.703610][ T5975] syz_tun: entered promiscuous mode [ 100.714558][ T5975] bridge0: port 3(syz_tun) entered blocking state [ 100.721534][ T5975] bridge0: port 3(syz_tun) entered forwarding state [ 100.832893][ T5978] Zero length message leads to an empty skb [ 100.850776][ T5890] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.901045][ T5975] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 102.451983][ T6003] netlink: 8 bytes leftover after parsing attributes in process `syz.3.51'. [ 102.468403][ T6003] netlink: 8 bytes leftover after parsing attributes in process `syz.3.51'. [ 102.565287][ T8] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 102.780921][ T8] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 102.793148][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 102.808177][ T8] usb 3-1: Product: syz [ 102.812520][ T8] usb 3-1: Manufacturer: syz [ 103.010598][ T6012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.55'. [ 103.395891][ T8] speedtch 3-1:1.0: speedtch_bind: wrong device class 0 [ 103.402952][ T8] speedtch 3-1:1.0: usbatm_usb_probe: bind failed: -19! [ 103.434936][ T8] usb 3-1: USB disconnect, device number 3 [ 103.535614][ T6025] FAULT_INJECTION: forcing a failure. [ 103.535614][ T6025] name fail_futex, interval 1, probability 0, space 0, times 1 [ 103.569743][ T6025] CPU: 1 PID: 6025 Comm: syz.0.61 Not tainted syzkaller #0 [ 103.577033][ T6025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 103.587170][ T6025] Call Trace: [ 103.590505][ T6025] [ 103.593492][ T6025] dump_stack_lvl+0x18c/0x250 [ 103.598254][ T6025] ? lock_chain_count+0x20/0x20 [ 103.603170][ T6025] ? show_regs_print_info+0x20/0x20 [ 103.608430][ T6025] ? load_image+0x420/0x420 [ 103.613009][ T6025] should_fail_ex+0x394/0x4c0 [ 103.617752][ T6025] get_futex_key+0x136/0x1030 [ 103.622487][ T6025] ? futex_wait+0x4a0/0x5c0 [ 103.627047][ T6025] ? futex_setup_timer+0xc0/0xc0 [ 103.632083][ T6025] futex_wake+0x127/0x4f0 [ 103.636473][ T6025] ? futex_wake_mark+0x150/0x150 [ 103.641467][ T6025] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 103.647772][ T6025] ? lockdep_hardirqs_on+0x98/0x150 [ 103.653052][ T6025] do_futex+0x35d/0x3e0 [ 103.657266][ T6025] ? _copy_from_user+0xa5/0xe0 [ 103.662088][ T6025] ? __ia32_sys_get_robust_list+0x110/0x110 [ 103.668054][ T6025] __se_sys_futex+0x3a9/0x440 [ 103.673143][ T6025] ? __x64_sys_futex+0xf0/0xf0 [ 103.677986][ T6025] ? __x64_sys_futex+0x21/0xf0 [ 103.682786][ T6025] do_syscall_64+0x55/0xb0 [ 103.687368][ T6025] ? clear_bhb_loop+0x40/0x90 [ 103.692092][ T6025] ? clear_bhb_loop+0x40/0x90 [ 103.696815][ T6025] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 103.702752][ T6025] RIP: 0033:0x7f540f59de99 [ 103.707223][ T6025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.726888][ T6025] RSP: 002b:00007ffc08ad8ec8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 103.735342][ T6025] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f540f59de99 [ 103.743343][ T6025] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f540f825fa8 [ 103.751339][ T6025] RBP: 0000000000001ec6 R08: 0000000000000004 R09: 0000000000000000 [ 103.759345][ T6025] R10: 00007f540f825fa0 R11: 0000000000000246 R12: 0000000000000000 [ 103.767399][ T6025] R13: 00007f540f825fac R14: 00007f540f825fa8 R15: 00007f540f825fa0 [ 103.775425][ T6025] [ 103.850538][ T6025] FAULT_INJECTION: forcing a failure. [ 103.850538][ T6025] name fail_futex, interval 1, probability 0, space 0, times 0 [ 103.864203][ T6025] CPU: 1 PID: 6025 Comm: syz.0.61 Not tainted syzkaller #0 [ 103.871470][ T6025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 103.881603][ T6025] Call Trace: [ 103.884939][ T6025] [ 103.887920][ T6025] dump_stack_lvl+0x18c/0x250 [ 103.892660][ T6025] ? lock_chain_count+0x20/0x20 [ 103.894131][ T6030] netlink: 36 bytes leftover after parsing attributes in process `syz.3.63'. [ 103.897549][ T6025] ? show_regs_print_info+0x20/0x20 [ 103.897580][ T6025] ? load_image+0x420/0x420 [ 103.897618][ T6025] ? futex_q_unlock+0x23/0x30 [ 103.897643][ T6025] should_fail_ex+0x394/0x4c0 [ 103.897675][ T6025] get_futex_key+0x136/0x1030 [ 103.897700][ T6025] ? futex_wait+0x4a0/0x5c0 [ 103.897727][ T6025] ? futex_setup_timer+0xc0/0xc0 [ 103.897758][ T6025] futex_wake+0x127/0x4f0 [ 103.897785][ T6025] ? futex_wake_mark+0x150/0x150 [ 103.897816][ T6025] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 103.897843][ T6025] ? lockdep_hardirqs_on+0x98/0x150 [ 103.897877][ T6025] do_futex+0x35d/0x3e0 [ 103.897911][ T6025] ? _copy_from_user+0xa5/0xe0 [ 103.897939][ T6025] ? __ia32_sys_get_robust_list+0x110/0x110 [ 103.897972][ T6025] __se_sys_futex+0x3a9/0x440 [ 103.898001][ T6025] ? __x64_sys_futex+0xf0/0xf0 [ 103.898031][ T6025] ? __x64_sys_futex+0x21/0xf0 [ 103.898057][ T6025] do_syscall_64+0x55/0xb0 [ 103.898079][ T6025] ? clear_bhb_loop+0x40/0x90 [ 103.898103][ T6025] ? clear_bhb_loop+0x40/0x90 [ 103.898129][ T6025] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 103.898153][ T6025] RIP: 0033:0x7f540f59de99 [ 103.898173][ T6025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.898202][ T6025] RSP: 002b:00007ffc08ad8ec8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 103.898228][ T6025] RAX: ffffffffffffffda RBX: 00000000000000f0 RCX: 00007f540f59de99 [ 103.898244][ T6025] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f540f826098 [ 103.898259][ T6025] RBP: 0000000000001ec6 R08: 0000000000000004 R09: 0000000000000000 [ 103.898272][ T6025] R10: 00007f540f825fa0 R11: 0000000000000246 R12: 0000000000000001 [ 103.898287][ T6025] R13: 00007f540f82609c R14: 00007f540f826098 R15: 00007f540f826090 [ 103.898318][ T6025] [ 104.006090][ T6025] FAULT_INJECTION: forcing a failure. [ 104.006090][ T6025] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 104.073682][ T6025] CPU: 1 PID: 6025 Comm: syz.0.61 Not tainted syzkaller #0 [ 104.088175][ T6025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 104.088191][ T6025] Call Trace: [ 104.088199][ T6025] [ 104.088207][ T6025] dump_stack_lvl+0x18c/0x250 [ 104.088239][ T6025] ? show_regs_print_info+0x20/0x20 [ 104.088264][ T6025] ? load_image+0x420/0x420 [ 104.104542][ T6025] ? __might_fault+0xaa/0x120 [ 104.104575][ T6025] ? __lock_acquire+0x7d80/0x7d80 [ 104.104605][ T6025] should_fail_ex+0x394/0x4c0 [ 104.104639][ T6025] _copy_from_user+0x2f/0xe0 [ 104.104665][ T6025] get_timespec64+0x97/0x1b0 [ 104.104695][ T6025] ? timespec64_add_safe+0x1f0/0x1f0 [ 104.104738][ T6025] __se_sys_clock_nanosleep+0x1c7/0x3a0 [ 104.104763][ T6025] ? __x64_sys_clock_nanosleep+0xb0/0xb0 [ 104.104790][ T6025] ? lockdep_hardirqs_on+0x98/0x150 [ 104.104823][ T6025] do_syscall_64+0x55/0xb0 [ 104.104845][ T6025] ? clear_bhb_loop+0x40/0x90 [ 104.104868][ T6025] ? clear_bhb_loop+0x40/0x90 [ 104.104893][ T6025] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 104.104917][ T6025] RIP: 0033:0x7f540f55e6ce [ 104.104936][ T6025] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 104.104956][ T6025] RSP: 002b:00007ffc08ad8e48 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 104.104980][ T6025] RAX: ffffffffffffffda RBX: 000055557666b500 RCX: 00007f540f55e6ce [ 104.104996][ T6025] RDX: 00007ffc08ad8ea0 RSI: 0000000000000000 RDI: 0000000000000000 [ 104.105011][ T6025] RBP: 00007f540f827da0 R08: 0000000000000000 R09: 0000000000000000 [ 104.105025][ T6025] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000001976b [ 104.105039][ T6025] R13: 00007f540f82618c R14: 000000000001963f R15: 00007f540f826180 [ 104.105071][ T6025] [ 104.429538][ T5783] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 104.493966][ T6042] netlink: 20 bytes leftover after parsing attributes in process `syz.0.67'. [ 104.507834][ T6042] netlink: 24 bytes leftover after parsing attributes in process `syz.0.67'. [ 104.522612][ T6042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.67'. [ 104.744290][ T5783] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 104.856143][ T6055] tipc: Enabling of bearer rejected, already enabled [ 105.039187][ C1] tipc: RX(efcdab90785634122143658709badcfe): key[1] is activated [ 105.243029][ T6036] ceph: No mds server is up or the cluster is laggy [ 105.269907][ T5783] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 105.811376][ T6064] FAULT_INJECTION: forcing a failure. [ 105.811376][ T6064] name fail_futex, interval 1, probability 0, space 0, times 0 [ 105.870910][ T6064] CPU: 1 PID: 6064 Comm: syz.1.75 Not tainted syzkaller #0 [ 105.878239][ T6064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 105.888330][ T6064] Call Trace: [ 105.891665][ T6064] [ 105.894624][ T6064] dump_stack_lvl+0x18c/0x250 [ 105.899355][ T6064] ? lock_chain_count+0x20/0x20 [ 105.904261][ T6064] ? show_regs_print_info+0x20/0x20 [ 105.909491][ T6064] ? load_image+0x420/0x420 [ 105.914047][ T6064] should_fail_ex+0x394/0x4c0 [ 105.918766][ T6064] get_futex_key+0x136/0x1030 [ 105.923473][ T6064] ? futex_wait+0x4a0/0x5c0 [ 105.928006][ T6064] ? futex_setup_timer+0xc0/0xc0 [ 105.932972][ T6064] futex_wake+0x127/0x4f0 [ 105.937336][ T6064] ? futex_wake_mark+0x150/0x150 [ 105.942305][ T6064] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 105.948777][ T6064] ? lockdep_hardirqs_on+0x98/0x150 [ 105.954035][ T6064] do_futex+0x35d/0x3e0 [ 105.958235][ T6064] ? _copy_from_user+0xa5/0xe0 [ 105.963045][ T6064] ? __ia32_sys_get_robust_list+0x110/0x110 [ 105.968979][ T6064] __se_sys_futex+0x3a9/0x440 [ 105.973695][ T6064] ? __x64_sys_futex+0xf0/0xf0 [ 105.978500][ T6064] ? __x64_sys_futex+0x21/0xf0 [ 105.983301][ T6064] do_syscall_64+0x55/0xb0 [ 105.987762][ T6064] ? clear_bhb_loop+0x40/0x90 [ 105.992549][ T6064] ? clear_bhb_loop+0x40/0x90 [ 105.997273][ T6064] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 106.003199][ T6064] RIP: 0033:0x7f1e21f9de99 [ 106.007663][ T6064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.027316][ T6064] RSP: 002b:00007ffeedbe8408 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 106.035770][ T6064] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1e21f9de99 [ 106.043801][ T6064] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1e22225fa8 [ 106.051803][ T6064] RBP: 0000000000001ec6 R08: 0000000000000004 R09: 0000000000000000 [ 106.059805][ T6064] R10: 00007f1e22225fa0 R11: 0000000000000246 R12: 0000000000000000 [ 106.067830][ T6064] R13: 00007f1e22225fac R14: 00007f1e22225fa8 R15: 00007f1e22225fa0 [ 106.075854][ T6064] [ 106.136982][ T6064] FAULT_INJECTION: forcing a failure. [ 106.136982][ T6064] name fail_futex, interval 1, probability 0, space 0, times 0 [ 106.160105][ T6064] CPU: 0 PID: 6064 Comm: syz.1.75 Not tainted syzkaller #0 [ 106.167392][ T6064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 106.177533][ T6064] Call Trace: [ 106.180856][ T6064] [ 106.183867][ T6064] dump_stack_lvl+0x18c/0x250 [ 106.188615][ T6064] ? lock_chain_count+0x20/0x20 [ 106.193521][ T6064] ? show_regs_print_info+0x20/0x20 [ 106.198778][ T6064] ? load_image+0x420/0x420 [ 106.203368][ T6064] ? futex_q_unlock+0x23/0x30 [ 106.208083][ T6064] should_fail_ex+0x394/0x4c0 [ 106.208122][ T6064] get_futex_key+0x136/0x1030 [ 106.217586][ T6064] ? futex_wait+0x4a0/0x5c0 [ 106.222151][ T6064] ? futex_setup_timer+0xc0/0xc0 [ 106.227165][ T6064] futex_wake+0x127/0x4f0 [ 106.231569][ T6064] ? futex_wake_mark+0x150/0x150 [ 106.236573][ T6064] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 106.242874][ T6064] ? lockdep_hardirqs_on+0x98/0x150 [ 106.248137][ T6064] do_futex+0x35d/0x3e0 [ 106.252352][ T6064] ? _copy_from_user+0xa5/0xe0 [ 106.257170][ T6064] ? __ia32_sys_get_robust_list+0x110/0x110 [ 106.263128][ T6064] __se_sys_futex+0x3a9/0x440 [ 106.267865][ T6064] ? __x64_sys_futex+0xf0/0xf0 [ 106.272689][ T6064] ? __x64_sys_futex+0x21/0xf0 [ 106.277510][ T6064] do_syscall_64+0x55/0xb0 [ 106.281995][ T6064] ? clear_bhb_loop+0x40/0x90 [ 106.286722][ T6064] ? clear_bhb_loop+0x40/0x90 [ 106.291442][ T6064] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 106.297375][ T6064] RIP: 0033:0x7f1e21f9de99 [ 106.301820][ T6064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.321475][ T6064] RSP: 002b:00007ffeedbe8408 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 106.329952][ T6064] RAX: ffffffffffffffda RBX: 00000000000000f0 RCX: 00007f1e21f9de99 [ 106.337964][ T6064] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1e22226098 [ 106.345970][ T6064] RBP: 0000000000001ec6 R08: 0000000000000004 R09: 0000000000000000 [ 106.353976][ T6064] R10: 00007f1e22225fa0 R11: 0000000000000246 R12: 0000000000000001 [ 106.362014][ T6064] R13: 00007f1e2222609c R14: 00007f1e22226098 R15: 00007f1e22226090 [ 106.370042][ T6064] [ 106.483528][ T6064] FAULT_INJECTION: forcing a failure. [ 106.483528][ T6064] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.497039][ T6064] CPU: 1 PID: 6064 Comm: syz.1.75 Not tainted syzkaller #0 [ 106.504318][ T6064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 106.514428][ T6064] Call Trace: [ 106.517754][ T6064] [ 106.520728][ T6064] dump_stack_lvl+0x18c/0x250 [ 106.525470][ T6064] ? show_regs_print_info+0x20/0x20 [ 106.530818][ T6064] ? load_image+0x420/0x420 [ 106.535389][ T6064] ? __might_fault+0xaa/0x120 [ 106.540128][ T6064] ? __lock_acquire+0x7d80/0x7d80 [ 106.545246][ T6064] should_fail_ex+0x394/0x4c0 [ 106.549993][ T6064] _copy_from_user+0x2f/0xe0 [ 106.554643][ T6064] get_timespec64+0x97/0x1b0 [ 106.559294][ T6064] ? timespec64_add_safe+0x1f0/0x1f0 [ 106.564687][ T6064] __se_sys_clock_nanosleep+0x1c7/0x3a0 [ 106.570301][ T6064] ? __x64_sys_clock_nanosleep+0xb0/0xb0 [ 106.575998][ T6064] ? lockdep_hardirqs_on+0x98/0x150 [ 106.581261][ T6064] do_syscall_64+0x55/0xb0 [ 106.585747][ T6064] ? clear_bhb_loop+0x40/0x90 [ 106.590509][ T6064] ? clear_bhb_loop+0x40/0x90 [ 106.595275][ T6064] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 106.601324][ T6064] RIP: 0033:0x7f1e21f5e6ce [ 106.605797][ T6064] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 106.625452][ T6064] RSP: 002b:00007ffeedbe8388 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 106.633926][ T6064] RAX: ffffffffffffffda RBX: 0000555555d3b500 RCX: 00007f1e21f5e6ce [ 106.642044][ T6064] RDX: 00007ffeedbe83e0 RSI: 0000000000000000 RDI: 0000000000000000 [ 106.650075][ T6064] RBP: 00007f1e22227da0 R08: 0000000000000000 R09: 0000000000000000 [ 106.658137][ T6064] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000001a01e [ 106.666192][ T6064] R13: 00007f1e2222618c R14: 0000000000019fec R15: 00007f1e22226180 [ 106.674232][ T6064] [ 106.778710][ T6086] bridge0: port 3(syz_tun) entered blocking state [ 106.785699][ T6086] bridge0: port 3(syz_tun) entered disabled state [ 106.792546][ T6086] syz_tun: entered allmulticast mode [ 106.799624][ T6086] syz_tun: entered promiscuous mode [ 106.805981][ T6086] bridge0: port 3(syz_tun) entered blocking state [ 106.812619][ T6086] bridge0: port 3(syz_tun) entered listening state [ 106.891561][ T6088] netlink: 4 bytes leftover after parsing attributes in process `syz.1.81'. [ 106.901386][ T6088] netlink: 7 bytes leftover after parsing attributes in process `syz.1.81'. [ 107.585785][ T6070] NFSD: attempt to initialize umh client tracking in a container ignored. [ 107.631946][ T6070] NFSD: attempt to initialize legacy client tracking in a container ignored. [ 107.651186][ T6070] NFSD: Unable to initialize client recovery tracking! (-22) [ 107.673202][ T6070] NFSD: starting 90-second grace period (net f00004a1) [ 107.753839][ T6098] netlink: 24 bytes leftover after parsing attributes in process `syz.1.85'. [ 108.009153][ T6096] svc: failed to register nfsdv3 RPC service (errno 111). [ 108.019516][ T6096] svc: failed to register nfsaclv3 RPC service (errno 111). [ 108.100647][ T6096] ================================================================== [ 108.108792][ T6096] BUG: KASAN: slab-use-after-free in nfsd_svc+0x99a/0xab0 [ 108.115964][ T6096] Read of size 4 at addr ffff88805cc89c54 by task syz.2.84/6096 [ 108.123634][ T6096] [ 108.125994][ T6096] CPU: 0 PID: 6096 Comm: syz.2.84 Not tainted syzkaller #0 [ 108.126018][ T6096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 108.126032][ T6096] Call Trace: [ 108.126042][ T6096] [ 108.143455][ T6096] dump_stack_lvl+0x18c/0x250 [ 108.143486][ T6096] ? read_lock_is_recursive+0x20/0x20 [ 108.143513][ T6096] ? show_regs_print_info+0x20/0x20 [ 108.143535][ T6096] ? load_image+0x420/0x420 [ 108.169661][ T6096] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 108.169702][ T6096] ? __virt_addr_valid+0x10c/0x380 [ 108.180331][ T6096] ? __virt_addr_valid+0x10c/0x380 [ 108.180367][ T6096] ? __virt_addr_valid+0x10c/0x380 [ 108.180398][ T6096] print_report+0xa8/0x210 [ 108.185647][ T6096] ? nfsd_svc+0x99a/0xab0 [ 108.185673][ T6096] kasan_report+0x117/0x150 [ 108.185698][ T6096] ? slab_free_freelist_hook+0x130/0x1a0 [ 108.185722][ T6096] ? nfsd_svc+0x99a/0xab0 [ 108.185749][ T6096] nfsd_svc+0x99a/0xab0 [ 108.218686][ T6096] write_threads+0x393/0x510 [ 108.223320][ T6096] ? write_unlock_fs+0x450/0x450 [ 108.223358][ T6096] ? __might_fault+0xaa/0x120 [ 108.233192][ T6096] ? __might_fault+0xaa/0x120 [ 108.237902][ T6096] ? simple_transaction_get+0x11d/0x140 [ 108.237928][ T6096] nfsctl_transaction_write+0x10c/0x150 [ 108.237957][ T6096] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 108.237985][ T6096] vfs_write+0x299/0x9a0 [ 108.254832][ T6096] ? file_end_write+0x250/0x250 [ 108.254871][ T6096] ? __fget_files+0x28/0x460 [ 108.254902][ T6096] ? __fget_files+0x3fc/0x460 [ 108.273339][ T6096] ? __fdget_pos+0x2a3/0x330 [ 108.273379][ T6096] ? ksys_write+0x74/0x260 [ 108.282413][ T6096] ksys_write+0x151/0x260 [ 108.282452][ T6096] ? __ia32_sys_read+0x90/0x90 [ 108.291569][ T6096] ? lockdep_hardirqs_on+0x98/0x150 [ 108.291606][ T6096] do_syscall_64+0x55/0xb0 [ 108.301403][ T6096] ? clear_bhb_loop+0x40/0x90 [ 108.306118][ T6096] ? clear_bhb_loop+0x40/0x90 [ 108.306151][ T6096] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 108.316758][ T6096] RIP: 0033:0x7f2f41f9de99 [ 108.316781][ T6096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.316800][ T6096] RSP: 002b:00007f2f42e1b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 108.316822][ T6096] RAX: ffffffffffffffda RBX: 00007f2f42225fa0 RCX: 00007f2f41f9de99 [ 108.316837][ T6096] RDX: 0000000000000002 RSI: 0000200000000100 RDI: 0000000000000003 [ 108.316850][ T6096] RBP: 00007f2f42033eaf R08: 0000000000000000 R09: 0000000000000000 [ 108.316863][ T6096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.316876][ T6096] R13: 00007f2f42226038 R14: 00007f2f42225fa0 R15: 00007ffc2a66df38 [ 108.316899][ T6096] [ 108.316906][ T6096] [ 108.316910][ T6096] Allocated by task 6096: [ 108.316918][ T6096] kasan_set_track+0x4e/0x70 [ 108.340975][ T6096] __kasan_kmalloc+0x8f/0xa0 [ 108.341009][ T6096] __svc_create+0x60/0xa20 [ 108.341027][ T6096] svc_create_pooled+0x66a/0x7e0 [ 108.341043][ T6096] nfsd_create_serv+0x29f/0x5c0 [ 108.341065][ T6096] nfsd_svc+0x183/0xab0 [ 108.341085][ T6096] write_threads+0x393/0x510 [ 108.357526][ T6096] nfsctl_transaction_write+0x10c/0x150 [ 108.357566][ T6096] vfs_write+0x299/0x9a0 [ 108.357594][ T6096] ksys_write+0x151/0x260 [ 108.373590][ T6096] do_syscall_64+0x55/0xb0 [ 108.373617][ T6096] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 108.373639][ T6096] [ 108.373644][ T6096] Freed by task 6096: [ 108.389624][ T6096] kasan_set_track+0x4e/0x70 [ 108.389653][ T6096] kasan_save_free_info+0x28/0x40 [ 108.389680][ T6096] ____kasan_slab_free+0x126/0x1f0 [ 108.389704][ T6096] slab_free_freelist_hook+0x130/0x1a0 [ 108.399480][ T6096] __kmem_cache_free+0xba/0x1f0 [ 108.399517][ T6096] nfsd_svc+0x762/0xab0 [ 108.408729][ T6096] write_threads+0x393/0x510 [ 108.408758][ T6096] nfsctl_transaction_write+0x10c/0x150 [ 108.418142][ T6096] vfs_write+0x299/0x9a0 [ 108.418173][ T6096] ksys_write+0x151/0x260 [ 108.418199][ T6096] do_syscall_64+0x55/0xb0 [ 108.418220][ T6096] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 108.418242][ T6096] [ 108.418246][ T6096] Last potentially related work creation: [ 108.418253][ T6096] kasan_save_stack+0x3e/0x60 [ 108.418274][ T6096] __kasan_record_aux_stack+0xaf/0xc0 [ 108.418300][ T6096] call_rcu+0x153/0x900 [ 108.431982][ T6096] ip6_route_info_create+0xa0d/0x1260 [ 108.432017][ T6096] ip6_route_add+0x28/0x160 [ 108.432044][ T6096] addrconf_add_dev+0x29c/0x3b0 [ 108.441860][ T6096] inet6_addr_add+0x25d/0xb30 [ 108.441897][ T6096] inet6_rtm_newaddr+0x6fd/0x9d0 [ 108.450676][ T6096] rtnetlink_rcv_msg+0x843/0xf90 [ 108.450705][ T6096] netlink_rcv_skb+0x235/0x4c0 [ 108.450737][ T6096] netlink_unicast+0x7b1/0x930 [ 108.458980][ T6096] netlink_sendmsg+0x8d0/0xbf0 [ 108.467615][ T6096] __sys_sendto+0x4a9/0x6b0 [ 108.467638][ T6096] __x64_sys_sendto+0xde/0xf0 [ 108.467656][ T6096] do_syscall_64+0x55/0xb0 [ 108.467676][ T6096] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 108.467697][ T6096] [ 108.467702][ T6096] The buggy address belongs to the object at ffff88805cc89c00 [ 108.467702][ T6096] which belongs to the cache kmalloc-512 of size 512 [ 108.467720][ T6096] The buggy address is located 84 bytes inside of [ 108.467720][ T6096] freed 512-byte region [ffff88805cc89c00, ffff88805cc89e00) [ 108.467741][ T6096] [ 108.467746][ T6096] The buggy address belongs to the physical page: [ 108.467771][ T6096] page:ffffea0001732200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5cc88 [ 108.467794][ T6096] head:ffffea0001732200 order:2 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 108.483521][ T6096] anon flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 108.483582][ T6096] page_type: 0xffffffff() [ 108.492625][ T6096] raw: 00fff00000000840 ffff888017c41c80 0000000000000000 dead000000000001 [ 108.492647][ T6096] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 108.492658][ T6096] page dumped because: kasan: bad access detected [ 108.497277][ T6096] page_owner tracks the page as allocated [ 108.497286][ T6096] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 49, tgid 49 (kworker/u4:3), ts 90072845238, free_ts 30131993086 [ 108.497323][ T6096] post_alloc_hook+0x1c1/0x200 [ 108.511495][ T6096] get_page_from_freelist+0x2181/0x22a0 [ 108.521852][ T6096] __alloc_pages+0x1f0/0x460 [ 108.521877][ T6096] alloc_slab_page+0x5d/0x180 [ 108.521897][ T6096] new_slab+0x87/0x2d0 [ 108.521914][ T6096] ___slab_alloc+0xc5c/0x12f0 [ 108.529981][ T6096] __kmem_cache_alloc_node+0x11f/0x250 [ 108.530017][ T6096] __kmalloc+0xa7/0x240 [ 108.530046][ T6096] fib6_info_alloc+0x30/0xf0 [ 108.540111][ T6096] ip6_route_info_create+0x455/0x1260 [ 108.540142][ T6096] ip6_route_add+0x28/0x160 [ 108.540167][ T6096] addrconf_add_linklocal+0x44d/0x6d0 [ 108.549902][ T6096] addrconf_addr_gen+0x50e/0x620 [ 108.554963][ C1] sctp: Created asoc ffff888021824000 [ 108.559268][ T6096] addrconf_init_auto_addrs+0x720/0xac0 [ 108.559296][ T6096] addrconf_notify+0xb62/0x1010 [ 108.564095][ C1] sctp: sctp_assoc_add_peer: association:ffff888021824000 addr:172.20.20.170:53711 state:2 [ 108.568930][ T6096] notifier_call_chain+0x18f/0x380 [ 108.568958][ T6096] page last free stack trace: [ 108.568963][ T6096] free_unref_page_prepare+0x7d7/0x8f0 [ 108.568982][ T6096] free_unref_page+0x32/0x2e0 [ 108.568998][ T6096] free_contig_range+0xa1/0x150 [ 108.574129][ C1] sctp: sctp_v4_get_dst: dst:172.20.20.170, src:0.0.0.0 - [ 108.578721][ T6096] destroy_args+0x7d/0x840 [ 108.578747][ T6096] debug_vm_pgtable+0x411/0x440 [ 108.578771][ T6096] do_one_initcall+0x242/0x790 [ 108.583994][ C1] sctp: rt_dst:172.20.20.170, rt_src:172.20.20.170 [ 108.588326][ T6096] do_initcall_level+0x13d/0x1f0 [ 108.588362][ T6096] do_initcalls+0x69/0xd0 [ 108.588388][ T6096] kernel_init_freeable+0x3d9/0x560 [ 108.593064][ C1] sctp: sctp_v4_get_dst: dst:172.20.20.170, src:172.20.20.170 - [ 108.597610][ T6096] kernel_init+0x1d/0x1c0 [ 108.597640][ T6096] ret_from_fork+0x48/0x80 [ 108.602367][ C1] sctp: rt_dst:172.20.20.170, rt_src:172.20.20.170 [ 108.607962][ T6096] ret_from_fork_asm+0x11/0x20 [ 108.607992][ T6096] [ 108.608001][ T6096] Memory state around the buggy address: [ 108.608012][ T6096] ffff88805cc89b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 108.610347][ C1] sctp: sctp_assoc_set_pmtu: asoc:ffff888021824000, pmtu:65532, frag_point:65484 [ 108.624416][ T6096] ffff88805cc89b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 108.624437][ T6096] >ffff88805cc89c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 108.624448][ T6096] ^ [ 108.624460][ T6096] ffff88805cc89c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 108.624475][ T6096] ffff88805cc89d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 108.624487][ T6096] ================================================================== [ 108.787595][ T6096] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 108.787638][ T6096] CPU: 0 PID: 6096 Comm: syz.2.84 Not tainted syzkaller #0 [ 108.787699][ T6096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 108.787733][ T6096] Call Trace: [ 108.787754][ T6096] [ 108.787783][ T6096] dump_stack_lvl+0x18c/0x250 [ 108.787869][ T6096] ? show_regs_print_info+0x20/0x20 [ 108.787953][ T6096] ? load_image+0x420/0x420 [ 108.788071][ T6096] panic+0x2ca/0x720 [ 108.788148][ T6096] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 108.788223][ T6096] ? bpf_jit_dump+0xd0/0xd0 [ 108.788310][ T6096] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 108.788396][ T6096] ? _raw_spin_unlock+0x40/0x40 [ 108.788483][ T6096] ? nfsd_svc+0x99a/0xab0 [ 108.788547][ T6096] check_panic_on_warn+0x84/0xa0 [ 108.788611][ T6096] ? nfsd_svc+0x99a/0xab0 [ 108.788669][ T6096] end_report+0x6f/0x130 [ 108.788727][ T6096] kasan_report+0x128/0x150 [ 108.788787][ T6096] ? slab_free_freelist_hook+0x130/0x1a0 [ 108.788839][ T6096] ? nfsd_svc+0x99a/0xab0 [ 108.788906][ T6096] nfsd_svc+0x99a/0xab0 [ 108.788981][ T6096] write_threads+0x393/0x510 [ 108.789040][ T6096] ? write_unlock_fs+0x450/0x450 [ 108.789118][ T6096] ? __might_fault+0xaa/0x120 [ 108.789173][ T6096] ? __might_fault+0xaa/0x120 [ 108.789233][ T6096] ? simple_transaction_get+0x11d/0x140 [ 108.789311][ T6096] nfsctl_transaction_write+0x10c/0x150 [ 108.789405][ T6096] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 108.789469][ T6096] vfs_write+0x299/0x9a0 [ 108.789566][ T6096] ? file_end_write+0x250/0x250 [ 108.789650][ T6096] ? __fget_files+0x28/0x460 [ 108.789761][ T6096] ? __fget_files+0x3fc/0x460 [ 108.789848][ T6096] ? __fdget_pos+0x2a3/0x330 [ 108.789930][ T6096] ? ksys_write+0x74/0x260 [ 108.790006][ T6096] ksys_write+0x151/0x260 [ 108.790077][ T6096] ? __ia32_sys_read+0x90/0x90 [ 108.790162][ T6096] ? lockdep_hardirqs_on+0x98/0x150 [ 108.790237][ T6096] do_syscall_64+0x55/0xb0 [ 108.790298][ T6096] ? clear_bhb_loop+0x40/0x90 [ 108.790355][ T6096] ? clear_bhb_loop+0x40/0x90 [ 108.790419][ T6096] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 108.790481][ T6096] RIP: 0033:0x7f2f41f9de99 [ 108.790532][ T6096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.790578][ T6096] RSP: 002b:00007f2f42e1b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 108.790649][ T6096] RAX: ffffffffffffffda RBX: 00007f2f42225fa0 RCX: 00007f2f41f9de99 [ 108.790706][ T6096] RDX: 0000000000000002 RSI: 0000200000000100 RDI: 0000000000000003 [ 108.790740][ T6096] RBP: 00007f2f42033eaf R08: 0000000000000000 R09: 0000000000000000 [ 108.790780][ T6096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.790812][ T6096] R13: 00007f2f42226038 R14: 00007f2f42225fa0 R15: 00007ffc2a66df38 [ 108.790875][ T6096] [ 108.791918][ T6096] Kernel Offset: disabled