last executing test programs: 12m59.397284961s ago: executing program 32 (id=3100): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000001040)={'geneve1\x00', 0x400}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket(0x400000000010, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x7, r3, 0x3e}, 0x80, &(0x7f0000000200)=[{&(0x7f00000004c0)="70b7", 0x5dc}], 0x1}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) 12m58.660584094s ago: executing program 33 (id=3104): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a001000"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newpolicy={0xb8, 0x13, 0x101, 0x0, 0x0, {{@in=@rand_addr=0x64010104, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0xd, 0x400, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3}, {0x0, 0x1, 0x0, 0x100}, 0xfffffffe, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 11m51.736085348s ago: executing program 34 (id=3308): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) r1 = socket(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000000)={'lo\x00', @ifru_flags}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000000)={'lo\x00', @ifru_flags=0x1}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 10m39.869255379s ago: executing program 3 (id=3694): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x78}, 0x1, 0x0, 0x0, 0x40840}, 0x0) 10m39.667548089s ago: executing program 3 (id=3698): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x0, 0x1403, 0x1, 0x0, 0x0, "", [{{0x0, 0x2, 'syz0\x00'}, {0x0, 0x41, 'rxe\x00'}, {0x0, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x5) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, 0x0, 0x0) 10m39.161175985s ago: executing program 3 (id=3699): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_mnt\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x0, &(0x7f00000000c0)='\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_mnt/module/sctp/parameters/no_checksums\x00', 0x1, 0x0) write(r0, &(0x7f0000000000)='Y', 0x1) 10m38.900843529s ago: executing program 3 (id=3701): r0 = socket(0xa, 0x3, 0xff) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r1 = getpgid(0x0) syz_genetlink_get_family_id$nl80211(0x0, r0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r2 = syz_pidfd_open(r1, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, 0x0) pidfd_getfd(r2, r2, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 10m38.433553094s ago: executing program 3 (id=3707): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x0, 0x1403, 0x1, 0x0, 0x0, "", [{{0x0, 0x2, 'syz0\x00'}, {0x0, 0x41, 'rxe\x00'}, {0x0, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x5) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, 0x0, 0x0) 10m37.245512224s ago: executing program 35 (id=3705): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x2) fchdir(r1) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x136) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0x40049366, 0x0) 10m37.097871802s ago: executing program 3 (id=3712): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d80)=ANY=[@ANYBLOB="4c060000", @ANYRES16=r0, @ANYBLOB="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"], 0x64c}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) r1 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r1, &(0x7f0000001280)={&(0x7f00000010c0)=@generic={0xb4521a883191a2a6, "019d51237f6049dbb7ba1ad5c72e28faaa62ed2a913e6425c7408d471d5803768b5a159650dc0e51d14ed0e3842e05f511f5691ff8fe2338e85a35890543365df89bbc689db3603b7f523dad8d0e68811830b5637aa07c0bd1592ffda69d93f33cf9bbb119544d38e1ee137104c4d2c5d9060672fbf0545e416a983341fd"}, 0x80, 0x0}, 0x4c810) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in=@private=0xa010100, @in=@remote, 0x0, 0x0, 0xfffe}, {@in=@multicast1, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1000000000}, {0x0, 0x0, 0x0, 0x80000001}, {0xfffffffc, 0x0, 0x20000000}, 0xfffffffc, 0x0, 0x2, 0x2, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd27, 0x0, 0x0, 0x70bf27}}]}, 0x154}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004000) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) writev(r3, &(0x7f0000000200), 0x20) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x14) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000000)={0x600, 0x1000000}) 10m36.638566779s ago: executing program 36 (id=3712): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d80)=ANY=[@ANYBLOB="4c060000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fedbdf250100000014000200776732000000000000000000000000002400030000000000000000000000000000000000000000000000000000000000000000000006088030000080080003000700000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff48000080200004000a004e220000000120010000000000000000000000000001fa14000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39222c01008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c1400040002004e22ac1414aa00000000000000000800030004000000200004000a004e2300000005fe88000000000000000000000000010100100000060005000121000098000980940000800600010002000000080002007f0000010500030000000000060001000a00000014000200200100000000000000000000000000000500030002000000060001000a00000014000200ff0100000000000000000000000000010500030000000000060001000200000008000200e000000205000300030000000600010002000000080002007f0000010500030003000000200004000a004e220000000dff020000000000000000000000000001020000000800030002000000c4000080240002007dc2e1ed365e02e2513ddefadb5de99be4d95fbf6f0b98b29ab06005070592c8200004000a004e2300010001ff0200000000000000000000000000010000000024000200a38ae58757ed082bbaf191266cd5eb3c1344d5c85f7027ed57243ad50f65917924000100000000000000000000000000000000000000000000000000000000000000000024000200d480776c593a9340566d58a953561005070bd09967d97ee699d5643ffb8edcd2080009800400008008000a"], 0x64c}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) r1 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r1, &(0x7f0000001280)={&(0x7f00000010c0)=@generic={0xb4521a883191a2a6, "019d51237f6049dbb7ba1ad5c72e28faaa62ed2a913e6425c7408d471d5803768b5a159650dc0e51d14ed0e3842e05f511f5691ff8fe2338e85a35890543365df89bbc689db3603b7f523dad8d0e68811830b5637aa07c0bd1592ffda69d93f33cf9bbb119544d38e1ee137104c4d2c5d9060672fbf0545e416a983341fd"}, 0x80, 0x0}, 0x4c810) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in=@private=0xa010100, @in=@remote, 0x0, 0x0, 0xfffe}, {@in=@multicast1, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1000000000}, {0x0, 0x0, 0x0, 0x80000001}, {0xfffffffc, 0x0, 0x20000000}, 0xfffffffc, 0x0, 0x2, 0x2, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd27, 0x0, 0x0, 0x70bf27}}]}, 0x154}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004000) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) writev(r3, &(0x7f0000000200), 0x20) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x14) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000000)={0x600, 0x1000000}) 10m36.591640429s ago: executing program 4 (id=3715): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x5, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x400c010) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/target/core/rd_mcp_0/ramdisk_0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/target/core/rd_mcp_0/ramdisk_0\x00', 0x22a00, 0x0) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/target/core/rd_mcp_0/ramdisk_0/enable\x00', 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x24, r2, 0x200, 0x300, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0xa000) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/target/usb_gadget/naa.1234567890123456\x00', 0x1ff) socket$inet6(0xa, 0x80002, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./config/target/usb_gadget/naa.1234567890123456/tpgt_1/lun/lun_0/alua_tg_pt_offline\x00', 0x1, 0x0) write(r3, &(0x7f0000001500)='1\n', 0x2) 10m35.61110303s ago: executing program 4 (id=3717): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x652800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x81) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1400000010000100000000000000000000000000000000070000040900020073797a3100000022090001a7443dc130000000edd6510bcb0000001f140000001000010000000200000000000000000a"], 0x5c}, 0x1, 0x0, 0x0, 0x4000058}, 0x20008844) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b5, &(0x7f0000006680)) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x0, 0x0}) getrusage(0x0, &(0x7f0000000280)) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r6, 0x113, 0x2, &(0x7f0000000240), &(0x7f0000000380)=0x4) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x44}}, 0x44000) clock_nanosleep(0x5, 0x1, &(0x7f0000000080)={0x0, 0x3938700}, &(0x7f0000000180)) 10m32.799327858s ago: executing program 4 (id=3722): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r1, &(0x7f00000000c0)='on\x00', 0x3) 10m32.63426537s ago: executing program 4 (id=3724): r0 = socket(0xa, 0x3, 0xff) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r1 = getpgid(0x0) syz_genetlink_get_family_id$nl80211(0x0, r0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) syz_pidfd_open(r1, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, 0x0) setns(0xffffffffffffffff, 0x66020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 10m32.436489484s ago: executing program 4 (id=3726): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x840) 10m29.968116222s ago: executing program 4 (id=3730): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r1, &(0x7f00000000c0)='on\x00', 0x3) 10m29.60126899s ago: executing program 37 (id=3730): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r1, &(0x7f00000000c0)='on\x00', 0x3) 5m19.064077027s ago: executing program 9 (id=4510): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r2) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, r3, 0x5, 0x1000000, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24040080}, 0xc888) 5m18.722976508s ago: executing program 9 (id=4512): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz1\x00', {0x6, 0x7fff, 0x0, 0xb}, 0x7, [0x9, 0x8, 0x5, 0x6, 0x6, 0x3, 0xafc, 0x32, 0x838, 0x9, 0x6ff5, 0x9f5, 0x5, 0x1000000, 0x0, 0x6, 0x8001, 0x6, 0x4a4c, 0x3, 0xfffffffd, 0x9, 0x5, 0x8001, 0x5, 0x2, 0xd4a, 0xffefe87a, 0x1, 0x8, 0x9, 0x5a, 0x8, 0x9, 0x0, 0xe, 0xf9c6, 0x3ff, 0x3ff, 0x4, 0xd, 0xff, 0x8, 0x9, 0x80000001, 0x83f5, 0x0, 0x2, 0xfe0, 0x7ff, 0x8, 0x3, 0x4, 0x2, 0xa45, 0x1df, 0xffff, 0x0, 0x2, 0x9, 0xf, 0x101, 0x200, 0x9a0], [0x3, 0x8, 0x6, 0xd, 0x1, 0xad10, 0x6, 0x13a0, 0x86, 0x7fff, 0x101, 0x8, 0x5, 0x1, 0x2, 0xffff, 0x4, 0x4a, 0xf, 0xfffff32a, 0xfffffff7, 0x4c4, 0x400, 0x7f, 0x10000, 0x7, 0x4, 0x8, 0x30, 0x1, 0x1, 0x3, 0x4c6fbc51, 0x10001, 0xd35, 0xa, 0x6, 0x0, 0xfff, 0x200, 0x20, 0x9, 0x0, 0x3ec8d8d2, 0x0, 0x3, 0x3, 0x2, 0x8, 0x0, 0xe51, 0x1, 0x7, 0x8, 0x3, 0x2, 0x0, 0x62, 0x7, 0x6, 0x4, 0x6, 0xfff, 0x4], [0xfffffffd, 0x9, 0x6, 0x10000, 0x6, 0x8, 0xffffffff, 0xfd, 0x20, 0x0, 0x9, 0x74, 0x283, 0x2, 0x4d, 0x6, 0x4, 0x3ff, 0x10000, 0x5, 0x40, 0x4, 0x8, 0x0, 0x4, 0x2, 0x80008001, 0x9, 0x1, 0xffff, 0x5, 0x7, 0x1, 0x9, 0x4, 0xfff, 0x3, 0x0, 0x5, 0x80000001, 0x53c2, 0x4, 0x4, 0x3, 0x80, 0x50, 0x3, 0xc, 0x8, 0x5, 0x4, 0x400, 0x3, 0x5, 0x86, 0x6, 0x400000, 0xb, 0x4, 0x0, 0x420, 0xfe6c, 0x2, 0xfffffff6], [0x3, 0x9, 0xffffffff, 0x2, 0x66, 0xffff, 0x401, 0x6, 0x8, 0x3, 0x101, 0x4, 0x9, 0x7, 0xce, 0x2, 0x8001, 0x1, 0x7, 0x6, 0x601000, 0x9, 0x5, 0xd, 0x1, 0x446, 0x800, 0x2, 0x0, 0x3, 0x2, 0x375, 0xfffffff1, 0x5, 0x5, 0x4, 0x7fff, 0x4, 0x3a2, 0x3, 0x2005, 0x80000001, 0xee6, 0x800, 0x7, 0x3, 0x1, 0x7, 0x3, 0x9, 0xc, 0x3, 0x1, 0x1, 0x3, 0x296, 0x6, 0xb, 0xf, 0x4, 0x6, 0x7, 0xd, 0x400]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz1\x00', {0x0, 0x0, 0x6, 0x101}, 0xfffffffd, [0x8, 0x4, 0x0, 0x4, 0x1, 0x1, 0x401, 0x0, 0x4, 0x2, 0x2000, 0x3, 0x0, 0x7, 0x2000007e, 0x5, 0x1, 0x8800003, 0x0, 0x0, 0x6, 0x0, 0x77, 0x90, 0x801, 0x0, 0x2, 0x1000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x3, 0x0, 0x8, 0x0, 0x0, 0xfffffff9, 0x0, 0x3, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x3, 0x0, 0x0, 0xffff1e06, 0x3], [0xfffffffd, 0x3, 0x6, 0x4, 0x0, 0x2, 0x3, 0xff, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x6189fbd8, 0x0, 0x400000, 0x0, 0x40000fff, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, 0xffffffff, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x9e2b, 0x0, 0xfffffffa, 0x5, 0x7aae62b1, 0x100000, 0x0, 0x40002, 0xffffffff, 0x1c, 0x0, 0x2000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x7, 0xfd5], [0x0, 0xfffffffc, 0x0, 0xd1, 0x0, 0x914, 0x0, 0xfa, 0x0, 0x0, 0x7, 0x7, 0x4, 0x1, 0x0, 0x3, 0x0, 0xf, 0x0, 0xfffffffc, 0x0, 0x74d3, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x3, 0x8800000, 0x4, 0x0, 0x0, 0x99, 0xfffffffd, 0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x836, 0x1, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xf, 0x0, 0x0, 0x0, 0xe9cb], [0x0, 0x0, 0x0, 0x0, 0x0, 0x4bdf, 0x4a92, 0xf152, 0x0, 0x10004, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffff9bf, 0x0, 0x8000, 0x0, 0x800, 0x81, 0x0, 0x7fffffff, 0x0, 0x0, 0xfffffffe, 0x5, 0x5, 0x8, 0x0, 0x735, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xb6, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0xcfb0]}, 0x45c) 5m17.71201927s ago: executing program 9 (id=4519): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r2) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, r3, 0x5, 0x1000000, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24040080}, 0xc888) 5m17.267816181s ago: executing program 9 (id=4523): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000080a010000000000000000000a0000000900010073797a310000"], 0x68}}, 0x0) 5m17.018802531s ago: executing program 9 (id=4526): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000080)="baa100ec66b9800000c00f326635000100000f30baa10066ed0fc79b1000b814000f00d865660f38823b0f01c3b807000f00d00f01c90f22c1", 0x39}], 0x1, 0x14, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x6, 0x12, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="050000", @ANYRES64=0xea60, @ANYRES64=0x0], 0x48}}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) 5m16.370564936s ago: executing program 9 (id=4531): ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000003c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23c, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000040)={0xffffffd}, 0x8) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0xc82, &(0x7f0000019380)=ANY=[@ANYBLOB]) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xfff, 0x4000000007}, 0x0) sched_setscheduler(0x0, 0x6, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000240)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e26, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) 5m1.029432338s ago: executing program 38 (id=4531): ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000003c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23c, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000040)={0xffffffd}, 0x8) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0xc82, &(0x7f0000019380)=ANY=[@ANYBLOB]) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xfff, 0x4000000007}, 0x0) sched_setscheduler(0x0, 0x6, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000240)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e26, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) 2m55.41905912s ago: executing program 8 (id=5195): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4321, @loopback}, 0x10) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) connect$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4321, @loopback}}, 0x24) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)='hello\x00', 0x6}], 0x1, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) recvfrom(r0, &(0x7f0000000300)=""/256, 0x100, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r3, &(0x7f0000000500)="0200", 0x2) read(r2, &(0x7f0000000314), 0x2) write(r3, &(0x7f0000000600)="00020000000000010000000000000001090101", 0x13) read(r2, &(0x7f000000031c), 0x13) sendto$inet(r0, &(0x7f0000000300), 0x2f, 0x0, &(0x7f0000000080)={0x2, 0x1234, @loopback}, 0x10) nanosleep(&(0x7f0000000800)={0x0, 0x1dcd6500}, 0x0) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/256, 0x100}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000a00), &(0x7f0000000a20)=0x4) 2m54.418576975s ago: executing program 2 (id=5198): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x28, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffff, 0x2}}]}, 0x28}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x2}}]}, 0x1c}}, 0x0) 2m54.053360381s ago: executing program 8 (id=5200): socket(0x1e, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 2m53.872316969s ago: executing program 2 (id=5201): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETGEN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x14, 0x10, 0x1, 0x1, 0x0, 0x0, {0xa, 0x0, 0xa00}}, 0x14}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x0, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x0, 0x0, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x0, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x0, 0x3, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x0, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x0, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x0, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM, @NFTA_HOOK_PRIORITY={0x0, 0x2, 0x1, 0x0, 0xffffffd8}]}]}, @NFT_MSG_NEWRULE={0x0, 0x6, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x0, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x0, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x0, 0x4, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, @target={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x0, 0x1, 'TPROXY\x00'}, @NFTA_TARGET_REV={0x0, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x0, 0x3, '\x00'/32}]}}}]}]}], {0x0, 0x11, 0x1, 0x0, 0x0, {0x2}}}}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x11) sendto$inet6(r1, &(0x7f0000000100)="12345678", 0x8, 0x0, &(0x7f0000000200)={0xa, 0x22b8, 0x0, @loopback}, 0x1c) 2m53.604060802s ago: executing program 2 (id=5202): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0x0, 0x40, 0xb95, 0x1790, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x27, 0x1, 0x1, 0x0, 0xa0, 0x32, "", [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xff}}]}}]}}, &(0x7f0000000080)) nanosleep(&(0x7f0000000200)={0x0, 0x1dcd6500}, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x34, r1, 0x1, 0x0, 0x0, {0x0}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}]}, 0x34}}, 0x0) 2m52.780654897s ago: executing program 8 (id=5203): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r0, &(0x7f00000012c0), 0x0) 2m52.375905553s ago: executing program 8 (id=5205): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000080)={[0xeeee0000, 0xa000, 0xdddd0000, 0xb000], 0x2000000db, 0xc}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0x4000, 0x4, 0x5, 0x0, 0x8, 0x3, 0xa, 0x7e, 0x4, 0x15, 0x5, 0x80204}, {0x804, 0x9, 0x1, 0x45, 0x7, 0x15, 0x4, 0x3, 0x0, 0xfe, 0x6, 0x7f, 0x20c}, {0x1, 0x3, 0x24, 0x5, 0x6, 0x7, 0x2, 0x50, 0xfd, 0x70, 0x4, 0x2}], 0xffbfffff}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x129800, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m52.306778863s ago: executing program 0 (id=5206): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r1, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x1000001}}}, 0x24}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x54, r1, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x204e, @local}}, {0x14, 0x2, @in={0x2, 0x204e, @local}}}}]}]}, 0x54}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x11) sendto$inet(r2, &(0x7f0000000200)="4f00002800000000000000000100000200000000000000000100000201000001", 0x28, 0x0, &(0x7f0000000300)={0x2, 0x204e, @loopback}, 0x10) 2m51.323417881s ago: executing program 2 (id=5207): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ed) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/probability\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='100\x00', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/failslab/times\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='1000\x00', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/fail_page_alloc/probability\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='100\x00', 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./debug/fail_page_alloc/times\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='1000\x00', 0x4) socket$packet(0x11, 0x3, 0x300) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r4, &(0x7f0000000300)="11223344", 0x4, 0x0, &(0x7f0000000400)={0x2, 0x1234, @loopback}, 0x10) 2m51.164136227s ago: executing program 0 (id=5208): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) listen(r0, 0x5) r1 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r1, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) sendmsg$sock(r1, &(0x7f0000000200)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24, &(0x7f0000000300)=[{&(0x7f0000000340)='hello\x00', 0x6}], 0x1, &(0x7f0000000400)=[@mark={{0x14, 0x1, 0x24, 0x1}}], 0x18}, 0x8000) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000520)=[{&(0x7f0000000540), 0x100}], 0x1}, 0x0) 2m50.239376758s ago: executing program 8 (id=5209): add_key$user(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)='payload\x00', 0x7, 0xfffffffffffffffc) add_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f00000000c0), &(0x7f0000000080)='payload\x00', 0x7, 0xfffffffffffffffc) r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='xprtsec\x00', &(0x7f0000000200)='mtls\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='cert_serial\x00', &(0x7f0000000280)='0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x34, 0x10, 0x0, 0x0, 0x0, {0x2, 0x1}, [@generic="0800010001000000"]}, 0x34}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x34, 0x11, 0x0, 0x0, 0x0, {0x2, 0x1}, [@generic="0800010001000000"]}, 0x34}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x34, 0x12, 0x0, 0x0, 0x0, {0x2, 0x1}, [@generic="0800010001000000"]}, 0x34}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x34, 0x13, 0x0, 0x0, 0x0, {0x2, 0x1}, [@generic="0800010001000000"]}, 0x34}}, 0x0) sendmsg$nl_generic(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x34, 0x14, 0x0, 0x0, 0x0, {0x2, 0x1}, [@generic="0800010001000000"]}, 0x34}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x34, 0x15, 0x0, 0x0, 0x0, {0x2, 0x1}, [@generic="0800010001000000"]}, 0x34}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)={0x34, 0x16, 0x0, 0x0, 0x0, {0x2, 0x1}, [@generic="0800010001000000"]}, 0x34}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)={0x34, 0x17, 0x0, 0x0, 0x0, {0x2, 0x1}, [@generic="0800010001000000"]}, 0x34}}, 0x0) sendmsg$nl_generic(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)={0x34, 0x18, 0x0, 0x0, 0x0, {0x2, 0x1}, [@generic="0800010001000000"]}, 0x34}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)={0x34, 0x19, 0x0, 0x0, 0x0, {0x2, 0x1}, [@generic="0800010001000000"]}, 0x34}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)={0x34, 0x1a, 0x0, 0x0, 0x0, {0x2, 0x1}, [@generic="0800010001000000"]}, 0x34}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)={0x34, 0x1b, 0x0, 0x0, 0x0, {0x2, 0x1}, [@generic="0800010001000000"]}, 0x34}}, 0x0) 2m50.238805624s ago: executing program 2 (id=5210): socket(0x1e, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 2m50.157767995s ago: executing program 0 (id=5211): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/net/sctp/addip_enable\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/addip_noauth_enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='1', 0x1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e23, @loopback}, 0x10) listen(r2, 0x5) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}], 0x10) connect$inet(r3, &(0x7f0000000400)={0x2, 0x4e23, @loopback}, 0x10) r4 = accept(r2, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}}}, 0x84) shutdown(r4, 0x2) 2m48.188593677s ago: executing program 0 (id=5212): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x777) mount$9p_fd(0x0, &(0x7f0000000400)='./mnt\x00', &(0x7f0000000500), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (async) read(r1, &(0x7f0000000500), 0x1000) write$P9_RVERSION(r1, &(0x7f0000000100)={0x13, 0x65, 0xffff, 0x1000, 0x7, '9P2000.L'}, 0x13) read(r1, &(0x7f0000000500), 0x1000) write$P9_RATTACH(r1, &(0x7f0000000200)={0x10}, 0x10) read(r1, &(0x7f0000000500), 0x1000) write$P9_RSTAT(r1, &(0x7f0000000300)={0x3a, 0x7d, 0x1, {0x0, 0x33, 0x0, 0x0, {}, 0x777}}, 0x30) 2m45.915914197s ago: executing program 2 (id=5213): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x96}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "6eee7e00"}]}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x108}}, 0x0) 2m43.873643279s ago: executing program 39 (id=5213): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x96}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "6eee7e00"}]}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x108}}, 0x0) 2m43.503280331s ago: executing program 0 (id=5215): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000090)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000d0)='./sys\x00', &(0x7f0000000110)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000150)='./proc/sys/net/sctp/addip_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000190)='1', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001d0)='./proc/sys/net/sctp/addip_noauth_enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000210)='1', 0x1) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000250)='./sys/module/sctp/parameters/no_checksums\x00', 0x1, 0x0) write(r2, &(0x7f0000000290)='1', 0x1) close(r2) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r3, &(0x7f0000000300)={0x2, 0x4e21, @loopback}, 0x10) listen(r3, 0x5) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e22, @loopback}, 0x10) connect$inet(r4, &(0x7f0000000380)={0x2, 0x4e21, @loopback}, 0x10) accept(r3, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000400)=[@in={0x2, 0x4e22, @local}], 0x10) nanosleep(&(0x7f0000000500)={0x0, 0x2faf080}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f0000000400)=[@in={0x2, 0x4e22, @local}], 0x10) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, &(0x7f0000000600)={0x0, @in={{0x2, 0x4e22, @loopback}}}, 0x84) sendmsg$inet_sctp(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000750)=[{&(0x7f0000000780)='data', 0x4}], 0x1}, 0x0) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) 2m43.502634356s ago: executing program 8 (id=5216): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000080)={[0xeeee0000, 0xa000, 0xdddd0000, 0xb000], 0x2000000db, 0xc}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0x4000, 0x4, 0x5, 0x0, 0x8, 0x3, 0xa, 0x7e, 0x4, 0x15, 0x5, 0x80204}, {0x804, 0x9, 0x1, 0x45, 0x7, 0x15, 0x4, 0x3, 0x0, 0xfe, 0x6, 0x7f, 0x20c}, {0x1, 0x3, 0x24, 0x5, 0x6, 0x7, 0x2, 0x50, 0xfd, 0x70, 0x4, 0x2}], 0xffbfffff}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x129800, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m40.889718312s ago: executing program 40 (id=5216): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000080)={[0xeeee0000, 0xa000, 0xdddd0000, 0xb000], 0x2000000db, 0xc}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0x4000, 0x4, 0x5, 0x0, 0x8, 0x3, 0xa, 0x7e, 0x4, 0x15, 0x5, 0x80204}, {0x804, 0x9, 0x1, 0x45, 0x7, 0x15, 0x4, 0x3, 0x0, 0xfe, 0x6, 0x7f, 0x20c}, {0x1, 0x3, 0x24, 0x5, 0x6, 0x7, 0x2, 0x50, 0xfd, 0x70, 0x4, 0x2}], 0xffbfffff}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x129800, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m38.694975156s ago: executing program 0 (id=5218): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') setns(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x1002}) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', 0x1}) write$tun(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="0000000000000000000000006000040001000000"], 0x14) 2m22.04147072s ago: executing program 41 (id=5218): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') setns(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x1002}) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', 0x1}) write$tun(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="0000000000000000000000006000040001000000"], 0x14) 10.136005979s ago: executing program 7 (id=5425): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 10.120139997s ago: executing program 7 (id=5426): r0 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='addr\x00', &(0x7f0000000080)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='vers\x00', &(0x7f0000000100)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='port\x00', &(0x7f0000000180)='0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='mountport\x00', &(0x7f0000000200)='0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 9.960508558s ago: executing program 7 (id=5427): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c01000010000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00040001000000000000000000000000000000000000000000000800220001000000"], 0x15c}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 9.628903048s ago: executing program 7 (id=5432): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bind(r1, &(0x7f0000000100)=@in={0x2, 0x2389, @loopback}, 0x10) listen(r1, 0x5) connect(r2, &(0x7f0000000100)=@in={0x2, 0x2389, @loopback}, 0x10) r3 = accept(r1, 0x0, 0x0) sendto(r2, &(0x7f0000000200)='hello', 0x5, 0x0, 0x0, 0x0) recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)=""/100, 0x64}], 0x1}, 0x0) 9.452186189s ago: executing program 6 (id=5434): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f00000001c0)={0x0, @in={{0xa, 0x4, @multicast2}}, 0xffff, 0x4}, 0x90) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)="13881388000000001234567806000004", 0x10}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) 9.208795621s ago: executing program 6 (id=5437): r0 = socket$inet_smc(0x2b, 0x1, 0x0) shutdown(r0, 0x2) 9.152117379s ago: executing program 7 (id=5438): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/self/fail-nth\x00', 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') write(r0, &(0x7f0000000100)='1\x00', 0x2) read(r1, &(0x7f0000000180)=""/512, 0x200) write(r0, &(0x7f0000000100)='2\x00', 0x2) read(r1, &(0x7f0000000180)=""/512, 0x200) write(r0, &(0x7f0000000100)='3\x00', 0x2) read(r1, &(0x7f0000000180)=""/512, 0x200) write(r0, &(0x7f0000000100)='4\x00', 0x2) read(r1, &(0x7f0000000180)=""/512, 0x200) write(r0, &(0x7f0000000100)='5\x00', 0x2) read(r1, &(0x7f0000000180)=""/512, 0x200) write(r0, &(0x7f0000000100)='6\x00', 0x2) read(r1, &(0x7f0000000180)=""/512, 0x200) write(r0, &(0x7f0000000100)='7\x00', 0x2) read(r1, &(0x7f0000000180)=""/512, 0x200) write(r0, &(0x7f0000000100)='8\x00', 0x2) read(r1, &(0x7f0000000180)=""/512, 0x200) write(r0, &(0x7f0000000100)='9\x00', 0x2) read(r1, &(0x7f0000000180)=""/512, 0x200) write(r0, &(0x7f0000000100)='10\x00', 0x3) read(r1, &(0x7f0000000180)=""/512, 0x200) 8.940172203s ago: executing program 6 (id=5441): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x6}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x2, @in6=@loopback}}, 0xa8) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 6.570945962s ago: executing program 7 (id=5444): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='+4 -2 -3\n\x00', 0x9) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r1, &(0x7f0000000200)={0x2, 0x800, @empty}, 0x10) listen(r1, 0x80) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='3\x00', 0x1) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='1\n\x00', 0x2) close(r3) r4 = socket$inet_tcp(0x2, 0x1, 0x6) connect$inet(r4, &(0x7f0000000200)={0x2, 0x800, @loopback}, 0x10) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 6.139854315s ago: executing program 6 (id=5447): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='debugfs\x00', &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/netdevsim/netdevsim0/max_vfs\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1\x00', 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r1) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, r2, 0x5, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x44}}, 0x0) 6.139566087s ago: executing program 5 (id=5448): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 5.900835871s ago: executing program 5 (id=5449): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1c, {[@window={0x3, 0x3, 0x3}, @timestamp={0x8, 0xa, 0x5, 0x2}, @generic={0x0, 0x8, "d58838068b91"}]}}, {'\x00'}}}}}, 0x4e) 5.156506703s ago: executing program 6 (id=5452): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='-3\n+4\n+4.2\n', 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='tcp 2049\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='1\n', 0x2) 4.852797117s ago: executing program 6 (id=5453): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x24}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/mptcp/add_addr_timeout\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='1\n\x00', 0x2) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000300)={0x2, 0x1f40, @loopback}, 0x10) listen(r3, 0x5) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000300)={0x2, 0x1f40, @loopback}, 0x10) r5 = accept(r3, 0x0, 0x0) write(r4, &(0x7f0000000400)="0123456789", 0xa) read(r5, &(0x7f0000000500), 0xa) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}]}, 0x38}}, 0x0) recvfrom(r4, &(0x7f0000000600), 0x100, 0x40, 0x0, 0x0) nanosleep(&(0x7f0000000700)={0x3}, 0x0) 4.8081916s ago: executing program 5 (id=5454): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000080)={&(0x7f0000000000), 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x18, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x4}]}, 0x18}}, 0x0) 4.713427588s ago: executing program 5 (id=5456): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'syz_tun\x00', {0x2, 0x1234, @private=0x1010101}}) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000100)=0x2, 0x4) bind$rds(r1, &(0x7f0000000200)={0x2, 0x1234, @private=0x1010101}, 0x10) sendmsg$rds(r1, &(0x7f0000000300)={&(0x7f0000000400)={0x2, 0x1234, @private=0x2010101}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000600)=""/4, 0x8}], 0x1}, 0x0) nanosleep(&(0x7f0000000700)={0x0, 0x1dcd6500}, 0x0) 4.041942593s ago: executing program 5 (id=5459): unshare(0x40000000) r0 = socket$inet6_tcp(0xa, 0x1, 0x6) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 2.930259022s ago: executing program 1 (id=5463): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) listen(r0, 0x1) 2.837259693s ago: executing program 1 (id=5464): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x2, @local}, 0x10) connect$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x2, @remote}, 0x10) 2.481374s ago: executing program 1 (id=5465): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, 0x2, 0x3, 0x0, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x2}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, 0x2, 0x3, 0x0, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, 0x2, 0x3, 0x0, 0x0, 0x0, {0x2}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0xffff, 0x2}}]}, 0x20}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x88581, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={'syzkaller0\x00'}) 379.912703ms ago: executing program 1 (id=5466): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 350.697212ms ago: executing program 1 (id=5467): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) listen(r0, 0x5) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x10, 0x110, 0x1}], 0x28}, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x10, 0x110, 0x2}], 0x28}, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x10, 0x110, 0x3}], 0x28}, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x10, 0x110, 0x4}], 0x28}, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x10, 0x110, 0x5}], 0x28}, 0x0) 195.767252ms ago: executing program 5 (id=5468): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a85, @loopback}, 0x10) listen(r0, 0x5) r1 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='source\x00', &(0x7f0000000300)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='ms_mode\x00', &(0x7f0000000500)='crc\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000600)='mount_timeout\x00', &(0x7f0000000700)='5\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = accept$inet(r0, 0x0, 0x0) read(r2, &(0x7f0000000800)=""/100, 0x64) write(r2, &(0x7f0000000900)='ceph v2\n\x00'/28, 0x1c) shutdown(r2, 0x2) close(r2) close(r0) nanosleep(&(0x7f0000000a00)={0x2}, 0x0) 0s ago: executing program 1 (id=5469): r0 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='vers\x00', &(0x7f0000000080)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='addr\x00', &(0x7f0000000100)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='clientaddr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='sec\x00', &(0x7f0000000200)='krb5\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='source\x00', &(0x7f0000000280)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 4] __alloc_skb+0x1d7/0x7a0 [ 1151.482237][T15424] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 1151.482259][T15424] ? process_one_work+0x7fd/0x1480 [ 1151.482270][T15424] process_one_work+0xaaf/0x1480 [ 1151.482293][T15424] ? __pfx_process_one_work+0x10/0x10 [ 1151.482302][T15424] ? do_raw_spin_lock+0x12b/0x2f0 [ 1151.482320][T15424] ? assign_work+0x3cf/0x5d0 [ 1151.482334][T15424] worker_thread+0xb05/0x10d0 [ 1151.482350][T15424] ? __kthread_parkme+0x71/0x1f0 [ 1151.482370][T15424] kthread+0x388/0x470 [ 1151.482384][T15424] ? __pfx_worker_thread+0x10/0x10 [ 1151.482394][T15424] ? __pfx_kthread+0x10/0x10 [ 1151.482408][T15424] ret_from_fork+0x514/0xb70 [ 1151.482423][T15424] ? __pfx_ret_from_fork+0x10/0x10 [ 1151.482437][T15424] ? __switch_to+0xc89/0x1420 [ 1151.482451][T15424] ? __pfx_kthread+0x10/0x10 [ 1151.482465][T15424] ret_from_fork_asm+0x1a/0x30 [ 1151.482488][T15424] [ 1151.482503][T15424] FAULT_INJECTION: forcing a failure. [ 1151.482503][T15424] name failslab, interval 1, probability 100, space 0, times 52 [ 1151.482515][T15424] CPU: 0 UID: 0 PID: 15424 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1151.482526][T15424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1151.482532][T15424] Workqueue: events_unbound nsim_dev_trap_report_work [ 1151.482547][T15424] Call Trace: [ 1151.482551][T15424] [ 1151.482554][T15424] dump_stack_lvl+0xe8/0x150 [ 1151.482568][T15424] should_fail_ex+0x467/0x600 [ 1151.482583][T15424] should_failslab+0xa8/0x100 [ 1151.482593][T15424] kmem_cache_alloc_node_noprof+0xac/0x660 [ 1151.482607][T15424] ? __alloc_skb+0x1d7/0x7a0 [ 1151.482619][T15424] ? __alloc_skb+0x1d7/0x7a0 [ 1151.482636][T15424] __alloc_skb+0x1d7/0x7a0 [ 1151.482651][T15424] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 1151.482673][T15424] ? process_one_work+0x7fd/0x1480 [ 1151.482684][T15424] process_one_work+0xaaf/0x1480 [ 1151.482706][T15424] ? __pfx_process_one_work+0x10/0x10 [ 1151.482721][T15424] ? do_raw_spin_lock+0x12b/0x2f0 [ 1151.482738][T15424] ? assign_work+0x3cf/0x5d0 [ 1151.482752][T15424] worker_thread+0xb05/0x10d0 [ 1151.482768][T15424] ? __kthread_parkme+0x71/0x1f0 [ 1151.482786][T15424] kthread+0x388/0x470 [ 1151.482799][T15424] ? __pfx_worker_thread+0x10/0x10 [ 1151.482809][T15424] ? __pfx_kthread+0x10/0x10 [ 1151.482823][T15424] ret_from_fork+0x514/0xb70 [ 1151.482838][T15424] ? __pfx_ret_from_fork+0x10/0x10 [ 1151.482852][T15424] ? __switch_to+0xc89/0x1420 [ 1151.482866][T15424] ? __pfx_kthread+0x10/0x10 [ 1151.482879][T15424] ret_from_fork_asm+0x1a/0x30 [ 1151.482902][T15424] [ 1151.482909][T15424] FAULT_INJECTION: forcing a failure. [ 1151.482909][T15424] name failslab, interval 1, probability 100, space 0, times 51 [ 1151.482921][T15424] CPU: 0 UID: 0 PID: 15424 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1151.482932][T15424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1151.482938][T15424] Workqueue: events_unbound nsim_dev_trap_report_work [ 1151.482952][T15424] Call Trace: [ 1151.482956][T15424] [ 1151.482960][T15424] dump_stack_lvl+0xe8/0x150 [ 1151.482973][T15424] should_fail_ex+0x467/0x600 [ 1151.482988][T15424] should_failslab+0xa8/0x100 [ 1151.482999][T15424] kmem_cache_alloc_node_noprof+0xac/0x660 [ 1151.483013][T15424] ? __alloc_skb+0x1d7/0x7a0 [ 1151.483025][T15424] ? __alloc_skb+0x1d7/0x7a0 [ 1151.483041][T15424] __alloc_skb+0x1d7/0x7a0 [ 1151.483057][T15424] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 1151.483079][T15424] ? process_one_work+0x7fd/0x1480 [ 1151.483090][T15424] process_one_work+0xaaf/0x1480 [ 1151.483112][T15424] ? __pfx_process_one_work+0x10/0x10 [ 1151.483122][T15424] ? do_raw_spin_lock+0x12b/0x2f0 [ 1151.483139][T15424] ? assign_work+0x3cf/0x5d0 [ 1151.483153][T15424] worker_thread+0xb05/0x10d0 [ 1151.483169][T15424] ? __kthread_parkme+0x71/0x1f0 [ 1151.483187][T15424] kthread+0x388/0x470 [ 1151.483200][T15424] ? __pfx_worker_thread+0x10/0x10 [ 1151.483210][T15424] ? __pfx_kthread+0x10/0x10 [ 1151.483224][T15424] ret_from_fork+0x514/0xb70 [ 1151.483239][T15424] ? __pfx_ret_from_fork+0x10/0x10 [ 1151.483253][T15424] ? __switch_to+0xc89/0x1420 [ 1151.483267][T15424] ? __pfx_kthread+0x10/0x10 [ 1151.483281][T15424] ret_from_fork_asm+0x1a/0x30 [ 1151.483304][T15424] [ 1151.483310][T15424] FAULT_INJECTION: forcing a failure. [ 1151.483310][T15424] name failslab, interval 1, probability 100, space 0, times 50 [ 1151.483322][T15424] CPU: 0 UID: 0 PID: 15424 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1151.483333][T15424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1151.483338][T15424] Workqueue: events_unbound nsim_dev_trap_report_work [ 1151.483353][T15424] Call Trace: [ 1151.483356][T15424] [ 1151.483360][T15424] dump_stack_lvl+0xe8/0x150 [ 1151.483374][T15424] should_fail_ex+0x467/0x600 [ 1151.483389][T15424] should_failslab+0xa8/0x100 [ 1151.483399][T15424] kmem_cache_alloc_node_noprof+0xac/0x660 [ 1151.483414][T15424] ? __alloc_skb+0x1d7/0x7a0 [ 1151.483425][T15424] ? __alloc_skb+0x1d7/0x7a0 [ 1151.483442][T15424] __alloc_skb+0x1d7/0x7a0 [ 1151.483457][T15424] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 1151.483479][T15424] ? process_one_work+0x7fd/0x1480 [ 1151.483491][T15424] process_one_work+0xaaf/0x1480 [ 1151.483513][T15424] ? __pfx_process_one_work+0x10/0x10 [ 1151.483522][T15424] ? do_raw_spin_lock+0x12b/0x2f0 [ 1151.483540][T15424] ? assign_work+0x3cf/0x5d0 [ 1151.483553][T15424] worker_thread+0xb05/0x10d0 [ 1151.483570][T15424] ? __kthread_parkme+0x71/0x1f0 [ 1151.483587][T15424] kthread+0x388/0x470 [ 1151.483601][T15424] ? __pfx_worker_thread+0x10/0x10 [ 1151.483611][T15424] ? __pfx_kthread+0x10/0x10 [ 1151.483625][T15424] ret_from_fork+0x514/0xb70 [ 1151.483640][T15424] ? __pfx_ret_from_fork+0x10/0x10 [ 1151.483654][T15424] ? __switch_to+0xc89/0x1420 [ 1151.483669][T15424] ? __pfx_kthread+0x10/0x10 [ 1151.483683][T15424] ret_from_fork_asm+0x1a/0x30 [ 1151.483706][T15424] [ 1151.485327][ T1039] FAULT_INJECTION: forcing a failure. [ 1151.485327][ T1039] name failslab, interval 1, probability 100, space 0, times 48 [ 1151.485344][ T1039] CPU: 0 UID: 0 PID: 1039 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1151.485357][ T1039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1151.485364][ T1039] Workqueue: events_unbound nsim_dev_trap_report_work [ 1151.485381][ T1039] Call Trace: [ 1151.485386][ T1039] [ 1151.485391][ T1039] dump_stack_lvl+0xe8/0x150 [ 1151.485407][ T1039] should_fail_ex+0x467/0x600 [ 1151.485423][ T1039] should_failslab+0xa8/0x100 [ 1151.485434][ T1039] kmem_cache_alloc_node_noprof+0xac/0x660 [ 1151.485449][ T1039] ? __alloc_skb+0x1d7/0x7a0 [ 1151.485462][ T1039] ? __alloc_skb+0x1d7/0x7a0 [ 1151.485478][ T1039] __alloc_skb+0x1d7/0x7a0 [ 1151.485494][ T1039] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 1151.485516][ T1039] ? process_one_work+0x7fd/0x1480 [ 1151.485528][ T1039] process_one_work+0xaaf/0x1480 [ 1151.485550][ T1039] ? __pfx_process_one_work+0x10/0x10 [ 1151.485559][ T1039] ? do_raw_spin_lock+0x12b/0x2f0 [ 1151.485578][ T1039] ? assign_work+0x3cf/0x5d0 [ 1151.485591][ T1039] worker_thread+0xb05/0x10d0 [ 1151.485615][ T1039] kthread+0x388/0x470 [ 1151.485638][ T1039] ? __pfx_worker_thread+0x10/0x10 [ 1151.485651][ T1039] ? __pfx_kthread+0x10/0x10 [ 1151.485665][ T1039] ret_from_fork+0x514/0xb70 [ 1151.485681][ T1039] ? __pfx_ret_from_fork+0x10/0x10 [ 1151.485695][ T1039] ? __switch_to+0xc89/0x1420 [ 1151.485709][ T1039] ? __pfx_kthread+0x10/0x10 [ 1151.485728][ T1039] ret_from_fork_asm+0x1a/0x30 [ 1151.485751][ T1039] [ 1151.485759][ T1039] FAULT_INJECTION: forcing a failure. [ 1151.485759][ T1039] name failslab, interval 1, probability 100, space 0, times 47 [ 1151.485772][ T1039] CPU: 0 UID: 0 PID: 1039 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1151.485784][ T1039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1151.485790][ T1039] Workqueue: events_unbound nsim_dev_trap_report_work [ 1151.485805][ T1039] Call Trace: [ 1151.485809][ T1039] [ 1151.485813][ T1039] dump_stack_lvl+0xe8/0x150 [ 1151.485827][ T1039] should_fail_ex+0x467/0x600 [ 1151.485842][ T1039] should_failslab+0xa8/0x100 [ 1151.485853][ T1039] kmem_cache_alloc_node_noprof+0xac/0x660 [ 1151.485867][ T1039] ? __alloc_skb+0x1d7/0x7a0 [ 1151.485879][ T1039] ? __alloc_skb+0x1d7/0x7a0 [ 1151.485895][ T1039] __alloc_skb+0x1d7/0x7a0 [ 1151.485911][ T1039] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 1151.485933][ T1039] ? process_one_work+0x7fd/0x1480 [ 1151.485944][ T1039] process_one_work+0xaaf/0x1480 [ 1151.485967][ T1039] ? __pfx_process_one_work+0x10/0x10 [ 1151.485976][ T1039] ? do_raw_spin_lock+0x12b/0x2f0 [ 1151.485993][ T1039] ? assign_work+0x3cf/0x5d0 [ 1151.486007][ T1039] worker_thread+0xb05/0x10d0 [ 1151.486031][ T1039] kthread+0x388/0x470 [ 1151.486045][ T1039] ? __pfx_worker_thread+0x10/0x10 [ 1151.486055][ T1039] ? __pfx_kthread+0x10/0x10 [ 1151.486069][ T1039] ret_from_fork+0x514/0xb70 [ 1151.486084][ T1039] ? __pfx_ret_from_fork+0x10/0x10 [ 1151.486098][ T1039] ? __switch_to+0xc89/0x1420 [ 1151.486111][ T1039] ? __pfx_kthread+0x10/0x10 [ 1151.486125][ T1039] ret_from_fork_asm+0x1a/0x30 [ 1151.486148][ T1039] [ 1151.486166][ T1039] FAULT_INJECTION: forcing a failure. [ 1151.486166][ T1039] name failslab, interval 1, probability 100, space 0, times 46 [ 1151.486179][ T1039] CPU: 0 UID: 0 PID: 1039 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1151.486189][ T1039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1151.486195][ T1039] Workqueue: events_unbound nsim_dev_trap_report_work [ 1151.486210][ T1039] Call Trace: [ 1151.486213][ T1039] [ 1151.486218][ T1039] dump_stack_lvl+0xe8/0x150 [ 1151.486231][ T1039] should_fail_ex+0x467/0x600 [ 1151.486247][ T1039] should_failslab+0xa8/0x100 [ 1151.486257][ T1039] kmem_cache_alloc_node_noprof+0xac/0x660 [ 1151.486272][ T1039] ? __alloc_skb+0x1d7/0x7a0 [ 1151.486284][ T1039] ? __alloc_skb+0x1d7/0x7a0 [ 1151.486300][ T1039] __alloc_skb+0x1d7/0x7a0 [ 1151.486315][ T1039] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 1151.486337][ T1039] ? process_one_work+0x7fd/0x1480 [ 1151.486348][ T1039] process_one_work+0xaaf/0x1480 [ 1151.486371][ T1039] ? __pfx_process_one_work+0x10/0x10 [ 1151.486380][ T1039] ? do_raw_spin_lock+0x12b/0x2f0 [ 1151.486397][ T1039] ? assign_work+0x3cf/0x5d0 [ 1151.486411][ T1039] worker_thread+0xb05/0x10d0 [ 1151.486435][ T1039] kthread+0x388/0x470 [ 1151.486449][ T1039] ? __pfx_worker_thread+0x10/0x10 [ 1151.486459][ T1039] ? __pfx_kthread+0x10/0x10 [ 1151.486473][ T1039] ret_from_fork+0x514/0xb70 [ 1151.486488][ T1039] ? __pfx_ret_from_fork+0x10/0x10 [ 1151.486502][ T1039] ? __switch_to+0xc89/0x1420 [ 1151.486515][ T1039] ? __pfx_kthread+0x10/0x10 [ 1151.486529][ T1039] ret_from_fork_asm+0x1a/0x30 [ 1151.486552][ T1039] [ 1151.486559][ T1039] FAULT_INJECTION: forcing a failure. [ 1151.486559][ T1039] name failslab, interval 1, probability 100, space 0, times 45 [ 1151.486571][ T1039] CPU: 0 UID: 0 PID: 1039 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1151.486582][ T1039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1151.486588][ T1039] Workqueue: events_unbound nsim_dev_trap_report_work [ 1151.486602][ T1039] Call Trace: [ 1151.486606][ T1039] [ 1151.486610][ T1039] dump_stack_lvl+0xe8/0x150 [ 1151.486623][ T1039] should_fail_ex+0x467/0x600 [ 1151.486639][ T1039] should_failslab+0xa8/0x100 [ 1151.486650][ T1039] kmem_cache_alloc_node_noprof+0xac/0x660 [ 1151.486664][ T1039] ? __alloc_skb+0x1d7/0x7a0 [ 1151.486676][ T1039] ? __alloc_skb+0x1d7/0x7a0 [ 1151.486693][ T1039] __alloc_skb+0x1d7/0x7a0 [ 1151.486713][ T1039] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 1151.486736][ T1039] ? process_one_work+0x7fd/0x1480 [ 1151.486747][ T1039] process_one_work+0xaaf/0x1480 [ 1151.486770][ T1039] ? __pfx_process_one_work+0x10/0x10 [ 1151.486779][ T1039] ? do_raw_spin_lock+0x12b/0x2f0 [ 1151.486797][ T1039] ? assign_work+0x3cf/0x5d0 [ 1151.486811][ T1039] worker_thread+0xb05/0x10d0 [ 1151.486835][ T1039] kthread+0x388/0x470 [ 1151.486848][ T1039] ? __pfx_worker_thread+0x10/0x10 [ 1151.486858][ T1039] ? __pfx_kthread+0x10/0x10 [ 1151.486872][ T1039] ret_from_fork+0x514/0xb70 [ 1151.486888][ T1039] ? __pfx_ret_from_fork+0x10/0x10 [ 1151.486901][ T1039] ? __switch_to+0xc89/0x1420 [ 1151.486917][ T1039] ? __pfx_kthread+0x10/0x10 [ 1151.486931][ T1039] ret_from_fork_asm+0x1a/0x30 [ 1151.486954][ T1039] [ 1151.486993][ T46] FAULT_INJECTION: forcing a failure. [ 1151.486993][ T46] name failslab, interval 1, probability 100, space 0, times 44 [ 1151.487007][ T46] CPU: 0 UID: 0 PID: 46 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1151.487018][ T46] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1151.487025][ T46] Workqueue: events_unbound nsim_dev_trap_report_work [ 1151.487040][ T46] Call Trace: [ 1151.487044][ T46] [ 1151.487048][ T46] dump_stack_lvl+0xe8/0x150 [ 1151.487062][ T46] should_fail_ex+0x467/0x600 [ 1151.487077][ T46] should_failslab+0xa8/0x100 [ 1151.487088][ T46] kmem_cache_alloc_node_noprof+0xac/0x660 [ 1151.487102][ T46] ? __alloc_skb+0x1d7/0x7a0 [ 1151.487118][ T46] ? __alloc_skb+0x1d7/0x7a0 [ 1151.487135][ T46] __alloc_skb+0x1d7/0x7a0 [ 1151.487150][ T46] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 1151.487172][ T46] ? process_one_work+0x7fd/0x1480 [ 1151.487183][ T46] process_one_work+0xaaf/0x1480 [ 1151.487193][ T46] ? irqentry_exit+0x218/0x8f0 [ 1151.487215][ T46] ? __pfx_process_one_work+0x10/0x10 [ 1151.487224][ T46] ? do_raw_spin_lock+0x12b/0x2f0 [ 1151.487242][ T46] ? assign_work+0x3cf/0x5d0 [ 1151.487255][ T46] worker_thread+0xb05/0x10d0 [ 1151.487272][ T46] ? __kthread_parkme+0x71/0x1f0 [ 1151.487290][ T46] kthread+0x388/0x470 [ 1151.487304][ T46] ? __pfx_worker_thread+0x10/0x10 [ 1151.487314][ T46] ? __pfx_kthread+0x10/0x10 [ 1151.487329][ T46] ret_from_fork+0x514/0xb70 [ 1151.487344][ T46] ? __pfx_ret_from_fork+0x10/0x10 [ 1151.487358][ T46] ? __switch_to+0xc89/0x1420 [ 1151.487372][ T46] ? __pfx_kthread+0x10/0x10 [ 1151.487386][ T46] ret_from_fork_asm+0x1a/0x30 [ 1151.487409][ T46] [ 1151.487427][ T46] FAULT_INJECTION: forcing a failure. [ 1151.487427][ T46] name failslab, interval 1, probability 100, space 0, times 43 [ 1151.487439][ T46] CPU: 0 UID: 0 PID: 46 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1151.487450][ T46] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1151.487457][ T46] Workqueue: events_unbound nsim_dev_trap_report_work [ 1151.487471][ T46] Call Trace: [ 1151.487475][ T46] [ 1151.487479][ T46] dump_stack_lvl+0xe8/0x150 [ 1151.487493][ T46] should_fail_ex+0x467/0x600 [ 1151.487508][ T46] should_failslab+0xa8/0x100 [ 1151.487519][ T46] kmem_cache_alloc_node_noprof+0xac/0x660 [ 1151.487533][ T46] ? __alloc_skb+0x1d7/0x7a0 [ 1151.487545][ T46] ? __alloc_skb+0x1d7/0x7a0 [ 1151.487562][ T46] __alloc_skb+0x1d7/0x7a0 [ 1151.487577][ T46] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 1151.487599][ T46] ? process_one_work+0x7fd/0x1480 [ 1151.487611][ T46] process_one_work+0xaaf/0x1480 [ 1151.487620][ T46] ? irqentry_exit+0x218/0x8f0 [ 1151.487641][ T46] ? __pfx_process_one_work+0x10/0x10 [ 1151.487651][ T46] ? do_raw_spin_lock+0x12b/0x2f0 [ 1151.487668][ T46] ? assign_work+0x3cf/0x5d0 [ 1151.487682][ T46] worker_thread+0xb05/0x10d0 [ 1151.487699][ T46] ? __kthread_parkme+0x71/0x1f0 [ 1151.487721][ T46] kthread+0x388/0x470 [ 1151.487735][ T46] ? __pfx_worker_thread+0x10/0x10 [ 1151.487745][ T46] ? __pfx_kthread+0x10/0x10 [ 1151.487759][ T46] ret_from_fork+0x514/0xb70 [ 1151.487774][ T46] ? __pfx_ret_from_fork+0x10/0x10 [ 1151.487788][ T46] ? __switch_to+0xc89/0x1420 [ 1151.487801][ T46] ? __pfx_kthread+0x10/0x10 [ 1151.487815][ T46] ret_from_fork_asm+0x1a/0x30 [ 1151.487838][ T46] [ 1151.487845][ T46] FAULT_INJECTION: forcing a failure. [ 1151.487845][ T46] name failslab, interval 1, probability 100, space 0, times 42 [ 1151.487857][ T46] CPU: 0 UID: 0 PID: 46 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1151.487868][ T46] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1151.487874][ T46] Workqueue: events_unbound nsim_dev_trap_report_work [ 1151.487888][ T46] Call Trace: [ 1151.487892][ T46] [ 1151.487896][ T46] dump_stack_lvl+0xe8/0x150 [ 1151.487909][ T46] should_fail_ex+0x467/0x600 [ 1151.487925][ T46] should_failslab+0xa8/0x100 [ 1151.487936][ T46] kmem_cache_alloc_node_noprof+0xac/0x660 [ 1151.487950][ T46] ? __alloc_skb+0x1d7/0x7a0 [ 1151.487962][ T46] ? __alloc_skb+0x1d7/0x7a0 [ 1151.487979][ T46] __alloc_skb+0x1d7/0x7a0 [ 1151.487994][ T46] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 1151.488016][ T46] ? process_one_work+0x7fd/0x1480 [ 1151.488027][ T46] process_one_work+0xaaf/0x1480 [ 1151.488038][ T46] ? irqentry_exit+0x218/0x8f0 [ 1151.488059][ T46] ? __pfx_process_one_work+0x10/0x10 [ 1151.488068][ T46] ? do_raw_spin_lock+0x12b/0x2f0 [ 1151.488085][ T46] ? assign_work+0x3cf/0x5d0 [ 1151.488099][ T46] worker_thread+0xb05/0x10d0 [ 1151.488115][ T46] ? __kthread_parkme+0x71/0x1f0 [ 1151.488133][ T46] kthread+0x388/0x470 [ 1151.488146][ T46] ? __pfx_worker_thread+0x10/0x10 [ 1151.488156][ T46] ? __pfx_kthread+0x10/0x10 [ 1151.488170][ T46] ret_from_fork+0x514/0xb70 [ 1151.488186][ T46] ? __pfx_ret_from_fork+0x10/0x10 [ 1151.488199][ T46] ? __switch_to+0xc89/0x1420 [ 1151.488213][ T46] ? __pfx_kthread+0x10/0x10 [ 1151.488227][ T46] ret_from_fork_asm+0x1a/0x30 [ 1151.488249][ T46] [ 1151.488256][ T46] FAULT_INJECTION: forcing a failure. [ 1151.488256][ T46] name failslab, interval 1, probability 100, space 0, times 41 [ 1151.488268][ T46] CPU: 0 UID: 0 PID: 46 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1151.488279][ T46] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1151.488285][ T46] Workqueue: events_unbound nsim_dev_trap_report_work [ 1151.488299][ T46] Call Trace: [ 1151.488303][ T46] [ 1151.488307][ T46] dump_stack_lvl+0xe8/0x150 [ 1151.488320][ T46] should_fail_ex+0x467/0x600 [ 1151.488335][ T46] should_failslab+0xa8/0x100 [ 1151.488346][ T46] kmem_cache_alloc_node_noprof+0xac/0x660 [ 1151.488360][ T46] ? __alloc_skb+0x1d7/0x7a0 [ 1151.488372][ T46] ? __alloc_skb+0x1d7/0x7a0 [ 1151.488388][ T46] __alloc_skb+0x1d7/0x7a0 [ 1151.488404][ T46] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 1151.488426][ T46] ? process_one_work+0x7fd/0x1480 [ 1151.488437][ T46] process_one_work+0xaaf/0x1480 [ 1151.488447][ T46] ? irqentry_exit+0x218/0x8f0 [ 1151.488468][ T46] ? __pfx_process_one_work+0x10/0x10 [ 1151.488477][ T46] ? do_raw_spin_lock+0x12b/0x2f0 [ 1151.488494][ T46] ? assign_work+0x3cf/0x5d0 [ 1151.488508][ T46] worker_thread+0xb05/0x10d0 [ 1151.488525][ T46] ? __kthread_parkme+0x71/0x1f0 [ 1151.488542][ T46] kthread+0x388/0x470 [ 1151.488556][ T46] ? __pfx_worker_thread+0x10/0x10 [ 1151.488568][ T46] ? __pfx_kthread+0x10/0x10 [ 1151.488582][ T46] ret_from_fork+0x514/0xb70 [ 1151.488597][ T46] ? __pfx_ret_from_fork+0x10/0x10 [ 1151.488611][ T46] ? __switch_to+0xc89/0x1420 [ 1151.488625][ T46] ? __pfx_kthread+0x10/0x10 [ 1151.488639][ T46] ret_from_fork_asm+0x1a/0x30 [ 1151.488662][ T46] [ 1151.488740][ T5579] FAULT_INJECTION: forcing a failure. [ 1151.488740][ T5579] name failslab, interval 1, probability 100, space 0, times 41 [ 1151.488755][ T5579] CPU: 0 UID: 0 PID: 5579 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1151.488766][ T5579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1151.488772][ T5579] Call Trace: [ 1151.488776][ T5579] [ 1151.488780][ T5579] dump_stack_lvl+0xe8/0x150 [ 1151.488794][ T5579] should_fail_ex+0x467/0x600 [ 1151.488809][ T5579] should_failslab+0xa8/0x100 [ 1151.488820][ T5579] kmem_cache_alloc_node_noprof+0xac/0x660 [ 1151.488834][ T5579] ? __alloc_skb+0x1d7/0x7a0 [ 1151.488846][ T5579] ? __alloc_skb+0x1d7/0x7a0 [ 1151.488862][ T5579] __alloc_skb+0x1d7/0x7a0 [ 1151.488877][ T5579] tcp_stream_alloc_skb+0x3f/0x5c0 [ 1151.488896][ T5579] tcp_sendmsg_locked+0x143d/0x55c0 [ 1151.488937][ T5579] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 1151.488957][ T5579] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 1151.488970][ T5579] ? lockdep_hardirqs_on+0x7a/0x110 [ 1151.488983][ T5579] tcp_sendmsg+0x2f/0x50 [ 1151.488997][ T5579] ? __pfx_inet_sendmsg+0x10/0x10 [ 1151.489010][ T5579] sock_sendmsg_nosec+0x10e/0x180 [ 1151.489025][ T5579] sock_write_iter+0x2e4/0x3f0 [ 1151.489038][ T5579] ? __pfx_sock_write_iter+0x10/0x10 [ 1151.489053][ T5579] ? bpf_lsm_file_permission+0x9/0x20 [ 1151.489070][ T5579] ? security_file_permission+0x68/0x220 [ 1151.489087][ T5579] vfs_write+0x61e/0xbb0 [ 1151.489105][ T5579] ? __pfx_vfs_write+0x10/0x10 [ 1151.489128][ T5579] ksys_write+0x156/0x270 [ 1151.489141][ T5579] ? __pfx_ksys_write+0x10/0x10 [ 1151.489158][ T5579] do_syscall_64+0x17b/0x530 [ 1151.489169][ T5579] ? irqentry_exit+0x10f/0x8f0 [ 1151.489179][ T5579] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1151.489190][ T5579] ? clear_bhb_loop+0x40/0x90 [ 1151.489203][ T5579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1151.489215][ T5579] RIP: 0033:0x7f7ec3cf9017 [ 1151.489226][ T5579] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1151.489236][ T5579] RSP: 002b:00007ffe5f1b12a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 1151.489247][ T5579] RAX: ffffffffffffffda RBX: 000055557d444540 RCX: 00007f7ec3cf9017 [ 1151.489255][ T5579] RDX: 0000000000000248 RSI: 00007f7ebd79fdb8 RDI: 0000000000000003 [ 1151.489262][ T5579] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1151.489268][ T5579] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000248 [ 1151.489275][ T5579] R13: 000055557d458960 R14: 00007ffe5f1b1840 R15: 00007f7ebd79fdb8 [ 1151.489291][ T5579] [ 1151.496836][T15424] FAULT_INJECTION: forcing a failure. [ 1151.496836][T15424] name failslab, interval 1, probability 100, space 0, times 39 [ 1151.496902][T15424] CPU: 0 UID: 0 PID: 15424 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1151.496915][T15424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1151.496925][T15424] Workqueue: events_unbound nsim_dev_trap_report_work [ 1151.496948][T15424] Call Trace: [ 1151.496957][T15424] [ 1151.496963][T15424] dump_stack_lvl+0xe8/0x150 [ 1151.496981][T15424] should_fail_ex+0x467/0x600 [ 1151.497000][T15424] should_failslab+0xa8/0x100 [ 1151.497013][T15424] kmem_cache_alloc_node_noprof+0xac/0x660 [ 1151.497029][T15424] ? __alloc_skb+0x1d7/0x7a0 [ 1151.497043][T15424] ? __alloc_skb+0x1d7/0x7a0 [ 1151.497059][T15424] __alloc_skb+0x1d7/0x7a0 [ 1151.497075][T15424] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 1151.497099][T15424] ? process_one_work+0x7fd/0x1480 [ 1151.497115][T15424] process_one_work+0xaaf/0x1480 [ 1151.497139][T15424] ? __pfx_process_one_work+0x10/0x10 [ 1151.497148][T15424] ? do_raw_spin_lock+0x12b/0x2f0 [ 1151.497168][T15424] ? assign_work+0x3cf/0x5d0 [ 1151.497182][T15424] worker_thread+0xb05/0x10d0 [ 1151.497200][T15424] ? __kthread_parkme+0x71/0x1f0 [ 1151.497218][T15424] kthread+0x388/0x470 [ 1151.497233][T15424] ? __pfx_worker_thread+0x10/0x10 [ 1151.497243][T15424] ? __pfx_kthread+0x10/0x10 [ 1151.497257][T15424] ret_from_fork+0x514/0xb70 [ 1151.497275][T15424] ? __pfx_ret_from_fork+0x10/0x10 [ 1151.497290][T15424] ? __switch_to+0xc89/0x1420 [ 1151.497305][T15424] ? __pfx_kthread+0x10/0x10 [ 1151.497319][T15424] ret_from_fork_asm+0x1a/0x30 [ 1151.497343][T15424] [ 1151.497352][T15424] FAULT_INJECTION: forcing a failure. [ 1151.497352][T15424] name failslab, interval 1, probability 100, space 0, times 38 [ 1151.497366][T15424] CPU: 0 UID: 0 PID: 15424 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1151.497377][T15424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1151.497383][T15424] Workqueue: events_unbound nsim_dev_trap_report_work [ 1151.497398][T15424] Call Trace: [ 1151.497402][T15424] [ 1151.497406][T15424] dump_stack_lvl+0xe8/0x150 [ 1151.497419][T15424] should_fail_ex+0x467/0x600 [ 1151.497435][T15424] should_failslab+0xa8/0x100 [ 1151.497446][T15424] kmem_cache_alloc_node_noprof+0xac/0x660 [ 1151.497460][T15424] ? __alloc_skb+0x1d7/0x7a0 [ 1151.497472][T15424] ? __alloc_skb+0x1d7/0x7a0 [ 1151.497489][T15424] __alloc_skb+0x1d7/0x7a0 [ 1151.497504][T15424] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 1151.497526][T15424] ? process_one_work+0x7fd/0x1480 [ 1151.497537][T15424] process_one_work+0xaaf/0x1480 [ 1151.497560][T15424] ? __pfx_process_one_work+0x10/0x10 [ 1151.497569][T15424] ? do_raw_spin_lock+0x12b/0x2f0 [ 1151.497587][T15424] ? assign_work+0x3cf/0x5d0 [ 1151.497601][T15424] worker_thread+0xb05/0x10d0 [ 1151.497618][T15424] ? __kthread_parkme+0x71/0x1f0 [ 1151.497635][T15424] kthread+0x388/0x470 [ 1151.497649][T15424] ? __pfx_worker_thread+0x10/0x10 [ 1151.497659][T15424] ? __pfx_kthread+0x10/0x10 [ 1151.497673][T15424] ret_from_fork+0x514/0xb70 [ 1151.497689][T15424] ? __pfx_ret_from_fork+0x10/0x10 [ 1151.497702][T15424] ? __switch_to+0xc89/0x1420 [ 1151.497716][T15424] ? __pfx_kthread+0x10/0x10 [ 1151.497730][T15424] ret_from_fork_asm+0x1a/0x30 [ 1151.497753][T15424] [ 1151.497761][T15424] FAULT_INJECTION: forcing a failure. [ 1151.497761][T15424] name failslab, interval 1, probability 100, space 0, times 37 [ 1151.497773][T15424] CPU: 0 UID: 0 PID: 15424 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1151.497784][T15424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1151.497790][T15424] Workqueue: events_unbound nsim_dev_trap_report_work [ 1151.497805][T15424] Call Trace: [ 1151.497809][T15424] [ 1151.497813][T15424] dump_stack_lvl+0xe8/0x150 [ 1151.497826][T15424] should_fail_ex+0x467/0x600 [ 1151.497842][T15424] should_failslab+0xa8/0x100 [ 1151.497858][T15424] kmem_cache_alloc_node_noprof+0xac/0x660 [ 1151.497873][T15424] ? __alloc_skb+0x1d7/0x7a0 [ 1151.497885][T15424] ? __alloc_skb+0x1d7/0x7a0 [ 1151.497901][T15424] __alloc_skb+0x1d7/0x7a0 [ 1151.497917][T15424] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 1151.497939][T15424] ? process_one_work+0x7fd/0x1480 [ 1151.497950][T15424] process_one_work+0xaaf/0x1480 [ 1151.497972][T15424] ? __pfx_process_one_work+0x10/0x10 [ 1151.497982][T15424] ? do_raw_spin_lock+0x12b/0x2f0 [ 1151.498000][T15424] ? assign_work+0x3cf/0x5d0 [ 1151.498013][T15424] worker_thread+0xb05/0x10d0 [ 1151.498030][T15424] ? __kthread_parkme+0x71/0x1f0 [ 1151.498048][T15424] kthread+0x388/0x470 [ 1151.498062][T15424] ? __pfx_worker_thread+0x10/0x10 [ 1151.498072][T15424] ? __pfx_kthread+0x10/0x10 [ 1151.498086][T15424] ret_from_fork+0x514/0xb70 [ 1151.498102][T15424] ? __pfx_ret_from_fork+0x10/0x10 [ 1151.498116][T15424] ? __switch_to+0xc89/0x1420 [ 1151.498130][T15424] ? __pfx_kthread+0x10/0x10 [ 1151.498144][T15424] ret_from_fork_asm+0x1a/0x30 [ 1151.498167][T15424] [ 1151.498174][T15424] FAULT_INJECTION: forcing a failure. [ 1151.498174][T15424] name failslab, interval 1, probability 100, space 0, times 36 [ 1151.498186][T15424] CPU: 0 UID: 0 PID: 15424 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1151.498198][T15424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1151.498204][T15424] Workqueue: events_unbound nsim_dev_trap_report_work [ 1151.498219][T15424] Call Trace: [ 1151.498223][T15424] [ 1151.498227][T15424] dump_stack_lvl+0xe8/0x150 [ 1151.498240][T15424] should_fail_ex+0x467/0x600 [ 1151.498256][T15424] should_failslab+0xa8/0x100 [ 1151.498266][T15424] kmem_cache_alloc_node_noprof+0xac/0x660 [ 1151.498281][T15424] ? __alloc_skb+0x1d7/0x7a0 [ 1151.498293][T15424] ? __alloc_skb+0x1d7/0x7a0 [ 1151.498309][T15424] __alloc_skb+0x1d7/0x7a0 [ 1151.498324][T15424] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 1151.498347][T15424] ? process_one_work+0x7fd/0x1480 [ 1151.498360][T15424] process_one_work+0xaaf/0x1480 [ 1151.498383][T15424] ? __pfx_process_one_work+0x10/0x10 [ 1151.498392][T15424] ? do_raw_spin_lock+0x12b/0x2f0 [ 1151.498410][T15424] ? assign_work+0x3cf/0x5d0 [ 1151.498423][T15424] worker_thread+0xb05/0x10d0 [ 1151.498440][T15424] ? __kthread_parkme+0x71/0x1f0 [ 1151.498458][T15424] kthread+0x388/0x470 [ 1151.498472][T15424] ? __pfx_worker_thread+0x10/0x10 [ 1151.498482][T15424] ? __pfx_kthread+0x10/0x10 [ 1151.498496][T15424] ret_from_fork+0x514/0xb70 [ 1151.498511][T15424] ? __pfx_ret_from_fork+0x10/0x10 [ 1151.498524][T15424] ? __switch_to+0xc89/0x1420 [ 1151.498538][T15424] ? __pfx_kthread+0x10/0x10 [ 1151.498552][T15424] ret_from_fork_asm+0x1a/0x30 [ 1151.498575][T15424] [ 1151.500240][ T5579] FAULT_INJECTION: forcing a failure. [ 1151.500240][ T5579] name failslab, interval 1, probability 100, space 0, times 29 [ 1151.500268][ T5579] CPU: 0 UID: 0 PID: 5579 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1151.500280][ T5579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1151.500287][ T5579] Call Trace: [ 1151.500293][ T5579] [ 1151.500298][ T5579] dump_stack_lvl+0xe8/0x150 [ 1151.500319][ T5579] should_fail_ex+0x467/0x600 [ 1151.500337][ T5579] should_failslab+0xa8/0x100 [ 1151.500349][ T5579] kmem_cache_alloc_node_noprof+0xac/0x660 [ 1151.500365][ T5579] ? __alloc_skb+0x1d7/0x7a0 [ 1151.500381][ T5579] ? __alloc_skb+0x1d7/0x7a0 [ 1151.500397][ T5579] __alloc_skb+0x1d7/0x7a0 [ 1151.500413][ T5579] tcp_stream_alloc_skb+0x3f/0x5c0 [ 1151.500431][ T5579] tcp_sendmsg_locked+0x143d/0x55c0 [ 1151.500472][ T5579] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 1151.500492][ T5579] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 1151.500505][ T5579] ? lockdep_hardirqs_on+0x7a/0x110 [ 1151.500519][ T5579] tcp_sendmsg+0x2f/0x50 [ 1151.500534][ T5579] ? __pfx_inet_sendmsg+0x10/0x10 [ 1151.500547][ T5579] sock_sendmsg_nosec+0x10e/0x180 [ 1151.500562][ T5579] sock_write_iter+0x2e4/0x3f0 [ 1151.500575][ T5579] ? __pfx_sock_write_iter+0x10/0x10 [ 1151.500590][ T5579] ? bpf_lsm_file_permission+0x9/0x20 [ 1151.500609][ T5579] ? security_file_permission+0x68/0x220 [ 1151.500626][ T5579] vfs_write+0x61e/0xbb0 [ 1151.500644][ T5579] ? __pfx_vfs_write+0x10/0x10 [ 1151.500666][ T5579] ksys_write+0x156/0x270 [ 1151.500687][ T5579] ? __pfx_ksys_write+0x10/0x10 [ 1151.500705][ T5579] do_syscall_64+0x17b/0x530 [ 1151.500717][ T5579] ? irqentry_exit+0x10f/0x8f0 [ 1151.500727][ T5579] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1151.500739][ T5579] ? clear_bhb_loop+0x40/0x90 [ 1151.500753][ T5579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1151.500763][ T5579] RIP: 0033:0x7f7ec3cf9017 [ 1151.500776][ T5579] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1151.500786][ T5579] RSP: 002b:00007ffe5f1b12a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 1151.500798][ T5579] RAX: ffffffffffffffda RBX: 000055557d444540 RCX: 00007f7ec3cf9017 [ 1151.500806][ T5579] RDX: 0000000000000248 RSI: 00007f7ebd79fdb8 RDI: 0000000000000003 [ 1151.500818][ T5579] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1151.500824][ T5579] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000248 [ 1151.500830][ T5579] R13: 000055557d458960 R14: 00007ffe5f1b1840 R15: 00007f7ebd79fdb8 [ 1151.500847][ T5579] [ 1151.501031][T21863] FAULT_INJECTION: forcing a failure. [ 1151.501031][T21863] name failslab, interval 1, probability 100, space 0, times 27 [ 1151.501047][T21863] CPU: 0 UID: 0 PID: 21863 Comm: syz.0.5208 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1151.501059][T21863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1151.501065][T21863] Call Trace: [ 1151.501070][T21863] [ 1151.501074][T21863] dump_stack_lvl+0xe8/0x150 [ 1151.501089][T21863] should_fail_ex+0x467/0x600 [ 1151.501105][T21863] should_failslab+0xa8/0x100 [ 1151.501116][T21863] ? __pmd_alloc+0xa4/0x5e0 [ 1151.501130][T21863] kmem_cache_alloc_noprof+0x9e/0x680 [ 1151.501145][T21863] ? __pmd_alloc+0xa4/0x5e0 [ 1151.501161][T21863] __pmd_alloc+0xa4/0x5e0 [ 1151.501176][T21863] handle_mm_fault+0x21aa/0x28d0 [ 1151.501192][T21863] ? reacquire_held_locks+0x117/0x1a0 [ 1151.501204][T21863] ? lock_vma_under_rcu+0x1d1/0x500 [ 1151.501220][T21863] ? handle_mm_fault+0xeb/0x28d0 [ 1151.501236][T21863] ? lock_vma_under_rcu+0x116/0x500 [ 1151.501252][T21863] ? __pfx_handle_mm_fault+0x10/0x10 [ 1151.501265][T21863] ? lock_vma_under_rcu+0x45a/0x500 [ 1151.501279][T21863] ? __wake_up_klogd+0xe6/0x120 [ 1151.501305][T21863] do_user_addr_fault+0xa4d/0x1340 [ 1151.501327][T21863] ? trace_page_fault_user+0x84/0x1e0 [ 1151.501342][T21863] exc_page_fault+0x6a/0xc0 [ 1151.501352][T21863] asm_exc_page_fault+0x26/0x30 [ 1151.501362][T21863] RIP: 0033:0x7f8d8b9474a7 [ 1151.501374][T21863] Code: 48 85 c0 74 1b 48 83 f8 01 0f 85 bf 03 00 00 0f b7 44 24 10 66 c1 c0 08 0f b7 c0 48 89 44 24 10 48 8b 44 24 18 0f b7 74 24 10 <66> 89 30 e9 18 ff ff ff 48 83 7c 24 08 17 0f 85 20 03 00 00 64 f0 [ 1151.501383][T21863] RSP: 002b:00007fff7086ec50 EFLAGS: 00010246 [ 1151.501392][T21863] RAX: 0000200000000080 RBX: 0000000000000002 RCX: 0000000000000000 [ 1151.501399][T21863] RDX: a79ca19a2be4f82b RSI: 0000000000000021 RDI: 00005555853903d8 [ 1151.501406][T21863] RBP: 00007fff7086ed70 R08: 0000000000000000 R09: 0000000000000000 [ 1151.501412][T21863] R10: 0000000000000021 R11: 0000000000000000 R12: 00007fff7086edb0 [ 1151.501418][T21863] R13: 00007f8d8bd05fac R14: 00000000001189df R15: 00007fff7086ed90 [ 1151.501434][T21863] [ 1151.501472][T21863] FAULT_INJECTION: forcing a failure. [ 1151.501472][T21863] name failslab, interval 1, probability 100, space 0, times 26 [ 1151.501485][T21863] CPU: 0 UID: 0 PID: 21863 Comm: syz.0.5208 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1151.501496][T21863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1151.501501][T21863] Call Trace: [ 1151.501505][T21863] [ 1151.501509][T21863] dump_stack_lvl+0xe8/0x150 [ 1151.501522][T21863] should_fail_ex+0x467/0x600 [ 1151.501537][T21863] should_failslab+0xa8/0x100 [ 1151.501546][T21863] ? __pmd_alloc+0xa4/0x5e0 [ 1151.501559][T21863] kmem_cache_alloc_noprof+0x9e/0x680 [ 1151.501573][T21863] ? __pmd_alloc+0xa4/0x5e0 [ 1151.501589][T21863] __pmd_alloc+0xa4/0x5e0 [ 1151.501604][T21863] handle_mm_fault+0x21aa/0x28d0 [ 1151.501619][T21863] ? reacquire_held_locks+0x117/0x1a0 [ 1151.501630][T21863] ? lock_vma_under_rcu+0x1d1/0x500 [ 1151.501645][T21863] ? handle_mm_fault+0xeb/0x28d0 [ 1151.501660][T21863] ? lock_vma_under_rcu+0x116/0x500 [ 1151.501676][T21863] ? __pfx_handle_mm_fault+0x10/0x10 [ 1151.501689][T21863] ? lock_vma_under_rcu+0x45a/0x500 [ 1151.501703][T21863] ? __wake_up_klogd+0xe6/0x120 [ 1151.501728][T21863] do_user_addr_fault+0xa4d/0x1340 [ 1151.501751][T21863] ? trace_page_fault_user+0x84/0x1e0 [ 1151.501766][T21863] exc_page_fault+0x6a/0xc0 [ 1151.501776][T21863] asm_exc_page_fault+0x26/0x30 [ 1151.501785][T21863] RIP: 0033:0x7f8d8b9474a7 [ 1151.501794][T21863] Code: 48 85 c0 74 1b 48 83 f8 01 0f 85 bf 03 00 00 0f b7 44 24 10 66 c1 c0 08 0f b7 c0 48 89 44 24 10 48 8b 44 24 18 0f b7 74 24 10 <66> 89 30 e9 18 ff ff ff 48 83 7c 24 08 17 0f 85 20 03 00 00 64 f0 [ 1151.501803][T21863] RSP: 002b:00007fff7086ec50 EFLAGS: 00010246 [ 1151.501811][T21863] RAX: 0000200000000080 RBX: 0000000000000002 RCX: 0000000000000000 [ 1151.501818][T21863] RDX: a79ca19a2be4f82b RSI: 0000000000000021 RDI: 00005555853903d8 [ 1151.501825][T21863] RBP: 00007fff7086ed70 R08: 0000000000000000 R09: 0000000000000000 [ 1151.501831][T21863] R10: 0000000000000021 R11: 0000000000000000 R12: 00007fff7086edb0 [ 1151.501838][T21863] R13: 00007f8d8bd05fac R14: 00000000001189df R15: 00007fff7086ed90 [ 1151.501853][T21863] [ 1151.501904][T21863] FAULT_INJECTION: forcing a failure. [ 1151.501904][T21863] name failslab, interval 1, probability 100, space 0, times 25 [ 1151.501918][T21863] CPU: 0 UID: 0 PID: 21863 Comm: syz.0.5208 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1151.501931][T21863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1151.501937][T21863] Call Trace: [ 1151.501940][T21863] [ 1151.501945][T21863] dump_stack_lvl+0xe8/0x150 [ 1151.501958][T21863] should_fail_ex+0x467/0x600 [ 1151.501974][T21863] should_failslab+0xa8/0x100 [ 1151.501983][T21863] ? __pmd_alloc+0xa4/0x5e0 [ 1151.501995][T21863] kmem_cache_alloc_noprof+0x9e/0x680 [ 1151.502010][T21863] ? __pmd_alloc+0xa4/0x5e0 [ 1151.502025][T21863] __pmd_alloc+0xa4/0x5e0 [ 1151.502041][T21863] handle_mm_fault+0x21aa/0x28d0 [ 1151.502056][T21863] ? reacquire_held_locks+0x117/0x1a0 [ 1151.502067][T21863] ? lock_vma_under_rcu+0x1d1/0x500 [ 1151.502082][T21863] ? handle_mm_fault+0xeb/0x28d0 [ 1151.502098][T21863] ? lock_vma_under_rcu+0x116/0x500 [ 1151.502118][T21863] ? __pfx_handle_mm_fault+0x10/0x10 [ 1151.502131][T21863] ? lock_vma_under_rcu+0x45a/0x500 [ 1151.502145][T21863] ? __wake_up_klogd+0xe6/0x120 [ 1151.502170][T21863] do_user_addr_fault+0xa4d/0x1340 [ 1151.502189][T21863] ? trace_page_fault_user+0x84/0x1e0 [ 1151.502204][T21863] exc_page_fault+0x6a/0xc0 [ 1151.502215][T21863] asm_exc_page_fault+0x26/0x30 [ 1151.502224][T21863] RIP: 0033:0x7f8d8b9474a7 [ 1151.502233][T21863] Code: 48 85 c0 74 1b 48 83 f8 01 0f 85 bf 03 00 00 0f b7 44 24 10 66 c1 c0 08 0f b7 c0 48 89 44 24 10 48 8b 44 24 18 0f b7 74 24 10 <66> 89 30 e9 18 ff ff ff 48 83 7c 24 08 17 0f 85 20 03 00 00 64 f0 [ 1151.502241][T21863] RSP: 002b:00007fff7086ec50 EFLAGS: 00010246 [ 1151.502249][T21863] RAX: 0000200000000080 RBX: 0000000000000002 RCX: 0000000000000000 [ 1151.502256][T21863] RDX: a79ca19a2be4f82b RSI: 0000000000000021 RDI: 00005555853903d8 [ 1151.502263][T21863] RBP: 00007fff7086ed70 R08: 0000000000000000 R09: 0000000000000000 [ 1151.502269][T21863] R10: 0000000000000021 R11: 0000000000000000 R12: 00007fff7086edb0 [ 1151.502275][T21863] R13: 00007f8d8bd05fac R14: 00000000001189df R15: 00007fff7086ed90 [ 1151.502291][T21863] [ 1151.502441][ T1039] FAULT_INJECTION: forcing a failure. [ 1151.502441][ T1039] name failslab, interval 1, probability 100, space 0, times 23 [ 1151.502457][ T1039] CPU: 0 UID: 0 PID: 1039 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1151.502469][ T1039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1151.502476][ T1039] Workqueue: events_unbound nsim_dev_trap_report_work [ 1151.502494][ T1039] Call Trace: [ 1151.502498][ T1039] [ 1151.502502][ T1039] dump_stack_lvl+0xe8/0x150 [ 1151.502516][ T1039] should_fail_ex+0x467/0x600 [ 1151.502532][ T1039] should_failslab+0xa8/0x100 [ 1151.502543][ T1039] kmem_cache_alloc_node_noprof+0xac/0x660 [ 1151.502558][ T1039] ? __alloc_skb+0x1d7/0x7a0 [ 1151.502570][ T1039] ? __alloc_skb+0x1d7/0x7a0 [ 1151.502589][ T1039] __alloc_skb+0x1d7/0x7a0 [ 1151.502606][ T1039] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 1151.502630][ T1039] ? process_one_work+0x7fd/0x1480 [ 1151.502642][ T1039] process_one_work+0xaaf/0x1480 [ 1151.502666][ T1039] ? __pfx_process_one_work+0x10/0x10 [ 1151.502675][ T1039] ? do_raw_spin_lock+0x12b/0x2f0 [ 1151.502694][ T1039] ? assign_work+0x3cf/0x5d0 [ 1151.502708][ T1039] worker_thread+0xb05/0x10d0 [ 1151.502733][ T1039] kthread+0x388/0x470 [ 1151.502748][ T1039] ? __pfx_worker_thread+0x10/0x10 [ 1151.502758][ T1039] ? __pfx_kthread+0x10/0x10 [ 1151.502772][ T1039] ret_from_fork+0x514/0xb70 [ 1151.502791][ T1039] ? __pfx_ret_from_fork+0x10/0x10 [ 1151.502804][ T1039] ? __switch_to+0xc89/0x1420 [ 1151.502820][ T1039] ? __pfx_kthread+0x10/0x10 [ 1151.502834][ T1039] ret_from_fork_asm+0x1a/0x30 [ 1151.502860][ T1039] [ 1151.502868][ T1039] FAULT_INJECTION: forcing a failure. [ 1151.502868][ T1039] name failslab, interval 1, probability 100, space 0, times 22 [ 1151.502887][ T1039] CPU: 0 UID: 0 PID: 1039 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1151.502898][ T1039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1151.502905][ T1039] Workqueue: events_unbound nsim_dev_trap_report_work [ 1151.502920][ T1039] Call Trace: [ 1151.502924][ T1039] [ 1151.502928][ T1039] dump_stack_lvl+0xe8/0x150 [ 1151.502942][ T1039] should_fail_ex+0x467/0x600 [ 1151.502958][ T1039] should_failslab+0xa8/0x100 [ 1151.502969][ T1039] kmem_cache_alloc_node_noprof+0xac/0x660 [ 1151.502984][ T1039] ? __alloc_skb+0x1d7/0x7a0 [ 1151.502996][ T1039] ? __alloc_skb+0x1d7/0x7a0 [ 1151.503013][ T1039] __alloc_skb+0x1d7/0x7a0 [ 1151.503029][ T1039] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 1151.503051][ T1039] ? process_one_work+0x7fd/0x1480 [ 1151.503063][ T1039] process_one_work+0xaaf/0x1480 [ 1151.503085][ T1039] ? __pfx_process_one_work+0x10/0x10 [ 1151.503095][ T1039] ? do_raw_spin_lock+0x12b/0x2f0 [ 1151.503112][ T1039] ? assign_work+0x3cf/0x5d0 [ 1151.503126][ T1039] worker_thread+0xb05/0x10d0 [ 1151.503150][ T1039] kthread+0x388/0x470 [ 1151.503164][ T1039] ? __pfx_worker_thread+0x10/0x10 [ 1151.503174][ T1039] ? __pfx_kthread+0x10/0x10 [ 1151.503188][ T1039] ret_from_fork+0x514/0xb70 [ 1151.503203][ T1039] ? __pfx_ret_from_fork+0x10/0x10 [ 1151.503217][ T1039] ? __switch_to+0xc89/0x1420 [ 1151.503230][ T1039] ? __pfx_kthread+0x10/0x10 [ 1151.503244][ T1039] ret_from_fork_asm+0x1a/0x30 [ 1151.503267][ T1039] [ 1151.503296][ T1039] FAULT_INJECTION: forcing a failure. [ 1151.503296][ T1039] name failslab, interval 1, probability 100, space 0, times 21 [ 1151.503309][ T1039] CPU: 0 UID: 0 PID: 1039 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1151.503320][ T1039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1151.503326][ T1039] Workqueue: events_unbound nsim_dev_trap_report_work [ 1151.503340][ T1039] Call Trace: [ 1151.503344][ T1039] [ 1151.503348][ T1039] dump_stack_lvl+0xe8/0x150 [ 1151.503362][ T1039] should_fail_ex+0x467/0x600 [ 1151.503380][ T1039] should_failslab+0xa8/0x100 [ 1151.503391][ T1039] kmem_cache_alloc_node_noprof+0xac/0x660 [ 1151.503405][ T1039] ? __alloc_skb+0x1d7/0x7a0 [ 1151.503418][ T1039] ? __alloc_skb+0x1d7/0x7a0 [ 1151.503434][ T1039] __alloc_skb+0x1d7/0x7a0 [ 1151.503450][ T1039] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 1151.503473][ T1039] ? process_one_work+0x7fd/0x1480 [ 1151.503484][ T1039] process_one_work+0xaaf/0x1480 [ 1151.503506][ T1039] ? __pfx_process_one_work+0x10/0x10 [ 1151.503517][ T1039] ? do_raw_spin_lock+0x12b/0x2f0 [ 1151.503534][ T1039] ? assign_work+0x3cf/0x5d0 [ 1151.503548][ T1039] worker_thread+0xb05/0x10d0 [ 1151.503573][ T1039] kthread+0x388/0x470 [ 1151.503586][ T1039] ? __pfx_worker_thread+0x10/0x10 [ 1151.503596][ T1039] ? __pfx_kthread+0x10/0x10 [ 1151.503611][ T1039] ret_from_fork+0x514/0xb70 [ 1151.503626][ T1039] ? __pfx_ret_from_fork+0x10/0x10 [ 1151.503640][ T1039] ? __switch_to+0xc89/0x1420 [ 1151.503654][ T1039] ? __pfx_kthread+0x10/0x10 [ 1151.503669][ T1039] ret_from_fork_asm+0x1a/0x30 [ 1151.503692][ T1039] [ 1151.503700][ T1039] FAULT_INJECTION: forcing a failure. [ 1151.503700][ T1039] name failslab, interval 1, probability 100, space 0, times 20 [ 1151.503713][ T1039] CPU: 0 UID: 0 PID: 1039 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1151.503725][ T1039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1151.503731][ T1039] Workqueue: events_unbound nsim_dev_trap_report_work [ 1151.503746][ T1039] Call Trace: [ 1151.503750][ T1039] [ 1151.503754][ T1039] dump_stack_lvl+0xe8/0x150 [ 1151.503768][ T1039] should_fail_ex+0x467/0x600 [ 1151.503784][ T1039] should_failslab+0xa8/0x100 [ 1151.503794][ T1039] kmem_cache_alloc_node_noprof+0xac/0x660 [ 1151.503809][ T1039] ? __alloc_skb+0x1d7/0x7a0 [ 1151.503821][ T1039] ? __alloc_skb+0x1d7/0x7a0 [ 1151.503837][ T1039] __alloc_skb+0x1d7/0x7a0 [ 1151.503853][ T1039] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 1151.503880][ T1039] ? process_one_work+0x7fd/0x1480 [ 1151.503891][ T1039] process_one_work+0xaaf/0x1480 [ 1151.503914][ T1039] ? __pfx_process_one_work+0x10/0x10 [ 1151.503923][ T1039] ? do_raw_spin_lock+0x12b/0x2f0 [ 1151.503940][ T1039] ? assign_work+0x3cf/0x5d0 [ 1151.503954][ T1039] worker_thread+0xb05/0x10d0 [ 1151.503980][ T1039] kthread+0x388/0x470 [ 1151.503994][ T1039] ? __pfx_worker_thread+0x10/0x10 [ 1151.504004][ T1039] ? __pfx_kthread+0x10/0x10 [ 1151.504018][ T1039] ret_from_fork+0x514/0xb70 [ 1151.504033][ T1039] ? __pfx_ret_from_fork+0x10/0x10 [ 1151.504047][ T1039] ? __switch_to+0xc89/0x1420 [ 1151.504060][ T1039] ? __pfx_kthread+0x10/0x10 [ 1151.504074][ T1039] ret_from_fork_asm+0x1a/0x30 [ 1151.504098][ T1039] [ 1151.504150][ T46] FAULT_INJECTION: forcing a failure. [ 1151.504150][ T46] name failslab, interval 1, probability 100, space 0, times 19 [ 1151.504165][ T46] CPU: 0 UID: 0 PID: 46 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1151.504176][ T46] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1151.504183][ T46] Workqueue: events_unbound nsim_dev_trap_report_work [ 1151.504198][ T46] Call Trace: [ 1151.504202][ T46] [ 1151.504206][ T46] dump_stack_lvl+0xe8/0x150 [ 1151.504221][ T46] should_fail_ex+0x467/0x600 [ 1151.504237][ T46] should_failslab+0xa8/0x100 [ 1151.504248][ T46] kmem_cache_alloc_node_noprof+0xac/0x660 [ 1151.504263][ T46] ? __alloc_skb+0x1d7/0x7a0 [ 1151.504275][ T46] ? __alloc_skb+0x1d7/0x7a0 [ 1151.504292][ T46] __alloc_skb+0x1d7/0x7a0 [ 1151.504307][ T46] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 1151.504331][ T46] ? process_one_work+0x7fd/0x1480 [ 1151.504342][ T46] process_one_work+0xaaf/0x1480 [ 1151.504352][ T46] ? irqentry_exit+0x218/0x8f0 [ 1151.504377][ T46] ? __pfx_process_one_work+0x10/0x10 [ 1151.504387][ T46] ? do_raw_spin_lock+0x12b/0x2f0 [ 1151.504405][ T46] ? assign_work+0x3cf/0x5d0 [ 1151.504418][ T46] worker_thread+0xb05/0x10d0 [ 1151.504435][ T46] ? __kthread_parkme+0x71/0x1f0 [ 1151.504453][ T46] kthread+0x388/0x470 [ 1151.504467][ T46] ? __pfx_worker_thread+0x10/0x10 [ 1151.504477][ T46] ? __pfx_kthread+0x10/0x10 [ 1151.504491][ T46] ret_from_fork+0x514/0xb70 [ 1151.504511][ T46] ? __pfx_ret_from_fork+0x10/0x10 [ 1151.504526][ T46] ? __switch_to+0xc89/0x1420 [ 1151.504542][ T46] ? __pfx_kthread+0x10/0x10 [ 1151.504559][ T46] ret_from_fork_asm+0x1a/0x30 [ 1151.504588][ T46] [ 1151.504612][ T46] FAULT_INJECTION: forcing a failure. [ 1151.504612][ T46] name failslab, interval 1, probability 100, space 0, times 18 [ 1151.504626][ T46] CPU: 0 UID: 0 PID: 46 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1151.504637][ T46] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1151.504644][ T46] Workqueue: events_unbound nsim_dev_trap_report_work [ 1151.504659][ T46] Call Trace: [ 1151.504663][ T46] [ 1151.504667][ T46] dump_stack_lvl+0xe8/0x150 [ 1151.504681][ T46] should_fail_ex+0x467/0x600 [ 1151.504697][ T46] should_failslab+0xa8/0x100 [ 1151.504708][ T46] kmem_cache_alloc_node_noprof+0xac/0x660 [ 1151.504723][ T46] ? __alloc_skb+0x1d7/0x7a0 [ 1151.504735][ T46] ? __alloc_skb+0x1d7/0x7a0 [ 1151.504752][ T46] __alloc_skb+0x1d7/0x7a0 [ 1151.504768][ T46] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 1151.504794][ T46] ? process_one_work+0x7fd/0x1480 [ 1151.504806][ T46] process_one_work+0xaaf/0x1480 [ 1151.504816][ T46] ? irqentry_exit+0x218/0x8f0 [ 1151.504838][ T46] ? __pfx_process_one_work+0x10/0x10 [ 1151.504847][ T46] ? do_raw_spin_lock+0x12b/0x2f0 [ 1151.504865][ T46] ? assign_work+0x3cf/0x5d0 [ 1151.504886][ T46] worker_thread+0xb05/0x10d0 [ 1151.504907][ T46] ? __kthread_parkme+0x71/0x1f0 [ 1151.504925][ T46] kthread+0x388/0x470 [ 1151.504938][ T46] ? __pfx_worker_thread+0x10/0x10 [ 1151.504949][ T46] ? __pfx_kthread+0x10/0x10 [ 1151.504963][ T46] ret_from_fork+0x514/0xb70 [ 1151.504979][ T46] ? __pfx_ret_from_fork+0x10/0x10 [ 1151.504993][ T46] ? __switch_to+0xc89/0x1420 [ 1151.505007][ T46] ? __pfx_kthread+0x10/0x10 [ 1151.505022][ T46] ret_from_fork_asm+0x1a/0x30 [ 1151.505045][ T46] [ 1151.505054][ T46] FAULT_INJECTION: forcing a failure. [ 1151.505054][ T46] name failslab, interval 1, probability 100, space 0, times 17 [ 1151.505067][ T46] CPU: 0 UID: 0 PID: 46 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1151.505078][ T46] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1151.505084][ T46] Workqueue: events_unbound nsim_dev_trap_report_work [ 1151.505099][ T46] Call Trace: [ 1151.505104][ T46] [ 1151.505108][ T46] dump_stack_lvl+0xe8/0x150 [ 1151.505122][ T46] should_fail_ex+0x467/0x600 [ 1151.505137][ T46] should_failslab+0xa8/0x100 [ 1151.505148][ T46] kmem_cache_alloc_node_noprof+0xac/0x660 [ 1151.505163][ T46] ? __alloc_skb+0x1d7/0x7a0 [ 1151.505176][ T46] ? __alloc_skb+0x1d7/0x7a0 [ 1151.505195][ T46] __alloc_skb+0x1d7/0x7a0 [ 1151.505212][ T46] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 1151.505235][ T46] ? process_one_work+0x7fd/0x1480 [ 1151.505246][ T46] process_one_work+0xaaf/0x1480 [ 1151.505259][ T46] ? irqentry_exit+0x218/0x8f0 [ 1151.505282][ T46] ? __pfx_process_one_work+0x10/0x10 [ 1151.505298][ T46] ? do_raw_spin_lock+0x12b/0x2f0 [ 1151.505322][ T46] ? assign_work+0x3cf/0x5d0 [ 1151.505338][ T46] worker_thread+0xb05/0x10d0 [ 1151.505356][ T46] ? __kthread_parkme+0x71/0x1f0 [ 1151.505375][ T46] kthread+0x388/0x470 [ 1151.505390][ T46] ? __pfx_worker_thread+0x10/0x10 [ 1151.505400][ T46] ? __pfx_kthread+0x10/0x10 [ 1151.505415][ T46] ret_from_fork+0x514/0xb70 [ 1151.505431][ T46] ? __pfx_ret_from_fork+0x10/0x10 [ 1151.505445][ T46] ? __switch_to+0xc89/0x1420 [ 1151.505459][ T46] ? __pfx_kthread+0x10/0x10 [ 1151.505473][ T46] ret_from_fork_asm+0x1a/0x30 [ 1151.505497][ T46] [ 1151.505635][ T5579] FAULT_INJECTION: forcing a failure. [ 1151.505635][ T5579] name failslab, interval 1, probability 100, space 0, times 16 [ 1151.505651][ T5579] CPU: 0 UID: 0 PID: 5579 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1151.505663][ T5579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1151.505669][ T5579] Call Trace: [ 1151.505674][ T5579] [ 1151.505678][ T5579] dump_stack_lvl+0xe8/0x150 [ 1151.505693][ T5579] should_fail_ex+0x467/0x600 [ 1151.505708][ T5579] should_failslab+0xa8/0x100 [ 1151.505718][ T5579] kmem_cache_alloc_node_noprof+0xac/0x660 [ 1151.505733][ T5579] ? __alloc_skb+0x1d7/0x7a0 [ 1151.505746][ T5579] ? __alloc_skb+0x1d7/0x7a0 [ 1151.505762][ T5579] __alloc_skb+0x1d7/0x7a0 [ 1151.505777][ T5579] tcp_stream_alloc_skb+0x3f/0x5c0 [ 1151.505796][ T5579] tcp_sendmsg_locked+0x143d/0x55c0 [ 1151.505837][ T5579] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 1151.505857][ T5579] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 1151.505876][ T5579] ? lockdep_hardirqs_on+0x7a/0x110 [ 1151.505889][ T5579] tcp_sendmsg+0x2f/0x50 [ 1151.505904][ T5579] ? __pfx_inet_sendmsg+0x10/0x10 [ 1151.505917][ T5579] sock_sendmsg_nosec+0x10e/0x180 [ 1151.505933][ T5579] sock_write_iter+0x2e4/0x3f0 [ 1151.505947][ T5579] ? __pfx_sock_write_iter+0x10/0x10 [ 1151.505962][ T5579] ? bpf_lsm_file_permission+0x9/0x20 [ 1151.505979][ T5579] ? security_file_permission+0x68/0x220 [ 1151.505996][ T5579] vfs_write+0x61e/0xbb0 [ 1151.506014][ T5579] ? __pfx_vfs_write+0x10/0x10 [ 1151.506037][ T5579] ksys_write+0x156/0x270 [ 1151.506051][ T5579] ? __pfx_ksys_write+0x10/0x10 [ 1151.506068][ T5579] do_syscall_64+0x17b/0x530 [ 1151.506080][ T5579] ? irqentry_exit+0x10f/0x8f0 [ 1151.506090][ T5579] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1151.506102][ T5579] ? clear_bhb_loop+0x40/0x90 [ 1151.506116][ T5579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1151.506127][ T5579] RIP: 0033:0x7f7ec3cf9017 [ 1151.506138][ T5579] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1151.506147][ T5579] RSP: 002b:00007ffe5f1b12a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 1151.506158][ T5579] RAX: ffffffffffffffda RBX: 000055557d444540 RCX: 00007f7ec3cf9017 [ 1151.506165][ T5579] RDX: 0000000000000248 RSI: 00007f7ebd79fdb8 RDI: 0000000000000003 [ 1151.506172][ T5579] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1151.506179][ T5579] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000248 [ 1151.506185][ T5579] R13: 000055557d458960 R14: 00007ffe5f1b1840 R15: 00007f7ebd79fdb8 [ 1151.506201][ T5579] [ 1155.854141][ T46] rpcbind: server 127.0.0.1 not responding, timed out [ 1161.248007][ T4906] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1161.522318][ T4906] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1161.601374][ T4906] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1161.725794][ T4906] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1161.765020][ T4906] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1163.435053][ T4906] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1163.929504][ T4906] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1164.017704][ T4906] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1164.061934][ T4906] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1164.108914][ T4906] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1164.636552][ T4906] Bluetooth: hci0: command tx timeout [ 1166.718027][ T5605] Bluetooth: hci0: command tx timeout [ 1167.066498][ T5605] Bluetooth: hci1: command tx timeout [ 1168.813465][ T5605] Bluetooth: hci0: command tx timeout [ 1169.118546][ T5605] Bluetooth: hci1: command tx timeout [ 1170.879625][ T5605] Bluetooth: hci0: command tx timeout [ 1171.209638][ T5605] Bluetooth: hci1: command tx timeout [ 1173.302182][ T5605] Bluetooth: hci1: command tx timeout [ 1178.896192][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.896253][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 1192.007416][ T4906] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1192.102411][ T4906] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1192.108495][ T4906] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1192.139827][ T4906] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1192.178658][ T4906] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1193.359246][ T5605] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1193.642929][ T5605] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1193.693009][ T5605] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1193.706034][ T5605] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1193.706733][ T5605] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1194.538454][ T4906] Bluetooth: hci3: command tx timeout [ 1194.773319][T21883] lo speed is unknown, defaulting to 1000 [ 1195.899496][T21887] lo speed is unknown, defaulting to 1000 [ 1196.012040][ T4906] Bluetooth: hci2: command tx timeout [ 1196.188877][ T3019] hsr_slave_0: left promiscuous mode [ 1196.189728][ T3019] hsr_slave_1: left promiscuous mode [ 1196.206713][ T3019] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1196.206741][ T3019] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1196.209299][ T3019] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1196.209319][ T3019] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1196.514535][ T3019] veth1_macvtap: left promiscuous mode [ 1196.514609][ T3019] veth0_macvtap: left promiscuous mode [ 1196.514800][ T3019] veth1_vlan: left promiscuous mode [ 1196.514949][ T3019] veth0_vlan: left promiscuous mode [ 1196.573107][ T4906] Bluetooth: hci3: command tx timeout [ 1197.032153][ T3019] team_slave_1 (unregistering): left promiscuous mode [ 1197.032188][ T3019] team_slave_1 (unregistering): left allmulticast mode [ 1197.053955][ T3019] team0 (unregistering): Port device team_slave_1 removed [ 1197.077356][ T3019] team_slave_0 (unregistering): left promiscuous mode [ 1197.077387][ T3019] team_slave_0 (unregistering): left allmulticast mode [ 1197.078365][ T3019] team0 (unregistering): Port device team_slave_0 removed [ 1197.835609][T21921] lo speed is unknown, defaulting to 1000 [ 1198.178289][ T4906] Bluetooth: hci2: command tx timeout [ 1198.267161][ T3019] IPVS: stop unused estimator thread 0... [ 1198.775398][ T5605] Bluetooth: hci3: command tx timeout [ 1198.862718][T21913] lo speed is unknown, defaulting to 1000 [ 1200.273022][ T5605] Bluetooth: hci2: command tx timeout [ 1200.819389][ T5605] Bluetooth: hci3: command tx timeout [ 1200.942473][T21883] bridge0: port 1(bridge_slave_0) entered blocking state [ 1200.942715][T21883] bridge0: port 1(bridge_slave_0) entered disabled state [ 1200.943104][T21883] bridge_slave_0: entered allmulticast mode [ 1200.966674][T21883] bridge_slave_0: entered promiscuous mode [ 1201.064969][T21883] bridge0: port 2(bridge_slave_1) entered blocking state [ 1201.065165][T21883] bridge0: port 2(bridge_slave_1) entered disabled state [ 1201.065606][T21883] bridge_slave_1: entered allmulticast mode [ 1201.067545][T21883] bridge_slave_1: entered promiscuous mode [ 1201.161698][T21887] bridge0: port 1(bridge_slave_0) entered blocking state [ 1201.161917][T21887] bridge0: port 1(bridge_slave_0) entered disabled state [ 1201.162069][T21887] bridge_slave_0: entered allmulticast mode [ 1201.184693][T21887] bridge_slave_0: entered promiscuous mode [ 1201.321260][T21887] bridge0: port 2(bridge_slave_1) entered blocking state [ 1201.321437][T21887] bridge0: port 2(bridge_slave_1) entered disabled state [ 1201.321779][T21887] bridge_slave_1: entered allmulticast mode [ 1201.323994][T21887] bridge_slave_1: entered promiscuous mode [ 1201.419349][T21883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1201.759465][ T3019] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1201.858489][T21883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1201.881181][T21887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1201.978564][T21887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1202.111378][T21883] team0: Port device team_slave_0 added [ 1202.150156][T21883] team0: Port device team_slave_1 added [ 1202.339118][ T5605] Bluetooth: hci2: command tx timeout [ 1202.366656][ T3019] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1202.406869][T21887] team0: Port device team_slave_0 added [ 1202.481803][T21887] team0: Port device team_slave_1 added [ 1202.718621][T21883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1202.718634][T21883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1202.718649][T21883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1202.836354][T21883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1202.836368][T21883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1202.836384][T21883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1203.132609][ T3019] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1203.167228][T21887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1203.167241][T21887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1203.167257][T21887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1203.276497][T21887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1203.276512][T21887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1203.276528][T21887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1203.470287][ T3019] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1203.493429][T21921] bridge0: port 1(bridge_slave_0) entered blocking state [ 1203.493675][T21921] bridge0: port 1(bridge_slave_0) entered disabled state [ 1203.493907][T21921] bridge_slave_0: entered allmulticast mode [ 1203.517721][T21921] bridge_slave_0: entered promiscuous mode [ 1203.587798][T21921] bridge0: port 2(bridge_slave_1) entered blocking state [ 1203.587990][T21921] bridge0: port 2(bridge_slave_1) entered disabled state [ 1203.588466][T21921] bridge_slave_1: entered allmulticast mode [ 1203.590719][T21921] bridge_slave_1: entered promiscuous mode [ 1203.773859][T21883] hsr_slave_0: entered promiscuous mode [ 1203.775281][T21883] hsr_slave_1: entered promiscuous mode [ 1203.854639][T21921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1203.965691][T21887] hsr_slave_0: entered promiscuous mode [ 1203.980383][T21887] hsr_slave_1: entered promiscuous mode [ 1203.981644][T21887] debugfs: 'hsr0' already exists in 'hsr' [ 1203.981666][T21887] Cannot create hsr debugfs directory [ 1204.005385][T21921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1204.183566][T21913] bridge0: port 1(bridge_slave_0) entered blocking state [ 1204.183749][T21913] bridge0: port 1(bridge_slave_0) entered disabled state [ 1204.183914][T21913] bridge_slave_0: entered allmulticast mode [ 1204.206719][T21913] bridge_slave_0: entered promiscuous mode [ 1204.299046][T21921] team0: Port device team_slave_0 added [ 1204.299757][T21913] bridge0: port 2(bridge_slave_1) entered blocking state [ 1204.299976][T21913] bridge0: port 2(bridge_slave_1) entered disabled state [ 1204.300189][T21913] bridge_slave_1: entered allmulticast mode [ 1204.319382][T21913] bridge_slave_1: entered promiscuous mode [ 1204.405401][T21921] team0: Port device team_slave_1 added [ 1204.646921][T21913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1204.855896][T21921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1204.855909][T21921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1204.855924][T21921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1204.907138][T21913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1204.942144][T21921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1204.942158][T21921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1204.942174][T21921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1205.201659][T21913] team0: Port device team_slave_0 added [ 1205.258550][T21913] team0: Port device team_slave_1 added [ 1205.595837][T21921] hsr_slave_0: entered promiscuous mode [ 1205.603990][T21921] hsr_slave_1: entered promiscuous mode [ 1205.606271][T21921] debugfs: 'hsr0' already exists in 'hsr' [ 1205.606294][T21921] Cannot create hsr debugfs directory [ 1205.954503][T21913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1205.954517][T21913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1205.954534][T21913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1206.044042][T21913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1206.044056][T21913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1206.044073][T21913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1206.924444][ T3019] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1207.126180][T21913] hsr_slave_0: entered promiscuous mode [ 1207.133842][T21913] hsr_slave_1: entered promiscuous mode [ 1207.135043][T21913] debugfs: 'hsr0' already exists in 'hsr' [ 1207.135060][T21913] Cannot create hsr debugfs directory [ 1207.436008][ T3019] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1207.877402][ T3019] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1208.453128][ T3019] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1209.443135][ T3019] bridge_slave_1: left allmulticast mode [ 1209.443160][ T3019] bridge_slave_1: left promiscuous mode [ 1209.443344][ T3019] bridge0: port 2(bridge_slave_1) entered disabled state [ 1209.467004][ T3019] bridge_slave_0: left allmulticast mode [ 1209.467028][ T3019] bridge_slave_0: left promiscuous mode [ 1209.467195][ T3019] bridge0: port 1(bridge_slave_0) entered disabled state [ 1209.513070][ T3019] bridge_slave_1: left allmulticast mode [ 1209.513102][ T3019] bridge_slave_1: left promiscuous mode [ 1209.513323][ T3019] bridge0: port 2(bridge_slave_1) entered disabled state [ 1209.544631][ T3019] bridge_slave_0: left allmulticast mode [ 1209.544658][ T3019] bridge_slave_0: left promiscuous mode [ 1209.544821][ T3019] bridge0: port 1(bridge_slave_0) entered disabled state [ 1209.593412][ T3019] bridge_slave_1: left allmulticast mode [ 1209.593444][ T3019] bridge_slave_1: left promiscuous mode [ 1209.593642][ T3019] bridge0: port 2(bridge_slave_1) entered disabled state [ 1209.614935][ T3019] bridge_slave_0: left allmulticast mode [ 1209.614961][ T3019] bridge_slave_0: left promiscuous mode [ 1209.615230][ T3019] bridge0: port 1(bridge_slave_0) entered disabled state [ 1210.302844][ T3019] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1210.305631][ T3019] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1210.307560][ T3019] bond0 (unregistering): Released all slaves [ 1210.806789][ T3019] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1210.819571][ T3019] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1210.821600][ T3019] bond0 (unregistering): Released all slaves [ 1211.277758][ T3019] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1211.290089][ T3019] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1211.292149][ T3019] bond0 (unregistering): Released all slaves [ 1211.933103][ T3019] tipc: Disabling bearer [ 1211.933672][ T3019] tipc: Disabling bearer [ 1211.933848][ T3019] tipc: Left network mode [ 1212.448012][ T3019] tipc: Left network mode [ 1214.259369][T21883] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1214.285252][T21883] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1214.289270][T21883] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1214.385519][T21883] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1214.451248][T21883] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1214.455578][T21883] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1214.456568][T21883] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1214.502403][T21883] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1215.295387][ T3019] hsr_slave_0: left promiscuous mode [ 1215.295939][ T3019] hsr_slave_1: left promiscuous mode [ 1215.297745][ T3019] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1215.297761][ T3019] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1215.298520][ T3019] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1215.298533][ T3019] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1215.360793][ T3019] hsr_slave_0: left promiscuous mode [ 1215.361435][ T3019] hsr_slave_1: left promiscuous mode [ 1215.376972][ T3019] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1215.376992][ T3019] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1215.410451][ T3019] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1215.410469][ T3019] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1215.440927][ T3019] hsr_slave_0: left promiscuous mode [ 1215.449494][ T3019] hsr_slave_1: left promiscuous mode [ 1215.457548][ T3019] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1215.457574][ T3019] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1215.458499][ T3019] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1215.458514][ T3019] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1215.620330][ T3019] veth1_macvtap: left promiscuous mode [ 1215.620416][ T3019] veth0_macvtap: left promiscuous mode [ 1215.620588][ T3019] veth1_vlan: left promiscuous mode [ 1215.620708][ T3019] veth0_vlan: left promiscuous mode [ 1215.653072][ T3019] veth1_macvtap: left promiscuous mode [ 1215.653188][ T3019] veth0_macvtap: left promiscuous mode [ 1215.653367][ T3019] veth1_vlan: left promiscuous mode [ 1215.653490][ T3019] veth0_vlan: left promiscuous mode [ 1215.658089][ T3019] veth1_macvtap: left promiscuous mode [ 1215.658159][ T3019] veth0_macvtap: left promiscuous mode [ 1215.658332][ T3019] veth1_vlan: left promiscuous mode [ 1215.658451][ T3019] veth0_vlan: left promiscuous mode [ 1216.309292][ T3019] team0 (unregistering): Port device team_slave_1 removed [ 1216.349232][ T3019] team0 (unregistering): Port device team_slave_0 removed [ 1216.490797][ T1194] smc: removing ib device syz0 [ 1216.536179][ T1194] smbdirect: ib_dev[syz0] removed [ 1217.372297][ T3019] team0 (unregistering): Port device team_slave_1 removed [ 1217.412146][ T3019] team0 (unregistering): Port device team_slave_0 removed [ 1218.690463][ T4906] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1218.761572][ T4906] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1218.786274][ T4906] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1218.816899][ T4906] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1218.819690][ T4906] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1219.091385][ T3019] team0 (unregistering): Port device team_slave_1 removed [ 1219.125360][ T3019] team0 (unregistering): Port device team_slave_0 removed [ 1219.352716][ T10] lo speed is unknown, defaulting to 1000 [ 1219.456950][ T10] syz0: Port: 1 Link DOWN [ 1221.118435][ T5605] Bluetooth: hci4: command tx timeout [ 1222.666657][ T4906] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1222.858199][ T4906] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1222.900755][ T4906] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1222.902966][ T4906] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1222.903387][ T4906] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1223.169348][ T4906] Bluetooth: hci4: command tx timeout [ 1223.988912][T21975] bridge0: port 1(bridge_slave_0) entered blocking state [ 1223.989178][T21975] bridge0: port 1(bridge_slave_0) entered disabled state [ 1223.989424][T21975] bridge_slave_0: entered allmulticast mode [ 1223.994632][T21975] bridge_slave_0: entered promiscuous mode [ 1224.044141][T21975] bridge0: port 2(bridge_slave_1) entered blocking state [ 1224.044390][T21975] bridge0: port 2(bridge_slave_1) entered disabled state [ 1224.044609][T21975] bridge_slave_1: entered allmulticast mode [ 1224.086284][T21975] bridge_slave_1: entered promiscuous mode [ 1224.305799][T21975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1224.595186][T21975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1224.636031][ T3019] IPVS: stop unused estimator thread 0... [ 1225.209593][T21975] team0: Port device team_slave_0 added [ 1225.236242][T21993] Bluetooth: hci0: command tx timeout [ 1225.243747][ T5606] Bluetooth: hci4: command tx timeout [ 1225.274750][T21975] team0: Port device team_slave_1 added [ 1225.756228][T21975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1225.756241][T21975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1225.756257][T21975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1225.792409][T21975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1225.792423][T21975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1225.792441][T21975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1227.428203][T21993] Bluetooth: hci0: command tx timeout [ 1227.428235][T21993] Bluetooth: hci4: command tx timeout [ 1227.601903][T21975] hsr_slave_0: entered promiscuous mode [ 1227.603275][T21975] hsr_slave_1: entered promiscuous mode [ 1227.604246][T21975] debugfs: 'hsr0' already exists in 'hsr' [ 1227.604262][T21975] Cannot create hsr debugfs directory [ 1229.484847][ T5606] Bluetooth: hci0: command tx timeout [ 1229.529414][T21921] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1229.545515][T21921] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1229.625369][T21921] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1229.651036][T21921] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1229.774797][T21921] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1229.778681][T21921] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1229.799435][T21921] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1229.850912][T21921] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1230.200146][T21988] bridge0: port 1(bridge_slave_0) entered blocking state [ 1230.200374][T21988] bridge0: port 1(bridge_slave_0) entered disabled state [ 1230.200542][T21988] bridge_slave_0: entered allmulticast mode [ 1230.202431][T21988] bridge_slave_0: entered promiscuous mode [ 1230.244374][ T3019] bridge_slave_1: left allmulticast mode [ 1230.244401][ T3019] bridge_slave_1: left promiscuous mode [ 1230.244569][ T3019] bridge0: port 2(bridge_slave_1) entered disabled state [ 1230.247618][ T3019] bridge_slave_0: left allmulticast mode [ 1230.247642][ T3019] bridge_slave_0: left promiscuous mode [ 1230.247828][ T3019] bridge0: port 1(bridge_slave_0) entered disabled state [ 1230.295774][ T3019] bridge_slave_1: left allmulticast mode [ 1230.295799][ T3019] bridge_slave_1: left promiscuous mode [ 1230.295958][ T3019] bridge0: port 2(bridge_slave_1) entered disabled state [ 1230.297786][ T3019] bridge_slave_0: left allmulticast mode [ 1230.297804][ T3019] bridge_slave_0: left promiscuous mode [ 1230.297974][ T3019] bridge0: port 1(bridge_slave_0) entered disabled state [ 1230.447976][ T3019] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1230.461016][ T3019] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1230.462715][ T3019] bond0 (unregistering): Released all slaves [ 1230.568142][ T3019] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1230.581108][ T3019] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1230.582827][ T3019] bond0 (unregistering): Released all slaves [ 1230.588812][T21988] bridge0: port 2(bridge_slave_1) entered blocking state [ 1230.588981][T21988] bridge0: port 2(bridge_slave_1) entered disabled state [ 1230.621432][T21988] bridge_slave_1: entered allmulticast mode [ 1230.623498][T21988] bridge_slave_1: entered promiscuous mode [ 1230.954026][T21988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1230.976416][ T3019] hsr_slave_0: left promiscuous mode [ 1230.977027][ T3019] hsr_slave_1: left promiscuous mode [ 1230.977950][ T3019] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1230.978509][ T3019] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1231.067909][ T3019] hsr_slave_0: left promiscuous mode [ 1231.068450][ T3019] hsr_slave_1: left promiscuous mode [ 1231.069274][ T3019] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1231.070270][ T3019] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1231.431804][ T3019] team0 (unregistering): Port device team_slave_1 removed [ 1231.450972][ T3019] team0 (unregistering): Port device team_slave_0 removed [ 1231.555794][ T5606] Bluetooth: hci0: command tx timeout [ 1231.867228][ T3019] team0 (unregistering): Port device team_slave_1 removed [ 1231.895683][ T3019] team0 (unregistering): Port device team_slave_0 removed [ 1232.045266][T21988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1232.181738][T21913] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1232.209261][T21913] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1232.253015][T21988] team0: Port device team_slave_0 added [ 1232.253415][T21913] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1232.366220][T21913] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1232.415449][T21988] team0: Port device team_slave_1 added [ 1232.415582][T21913] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1232.419854][T21913] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1232.432390][T21913] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1232.437599][T21913] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1233.102081][T21988] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1233.102095][T21988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1233.102116][T21988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1233.256025][T21988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1233.256039][T21988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1233.256056][T21988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1233.800324][T21988] hsr_slave_0: entered promiscuous mode [ 1233.817518][T21988] hsr_slave_1: entered promiscuous mode [ 1235.358608][T21921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1236.366971][T21921] 8021q: adding VLAN 0 to HW filter on device team0 [ 1236.474416][T15438] bridge0: port 1(bridge_slave_0) entered blocking state [ 1236.474520][T15438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1236.606390][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 1236.606554][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1236.658380][T21913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1237.117374][T21913] 8021q: adding VLAN 0 to HW filter on device team0 [ 1237.296654][T16713] bridge0: port 1(bridge_slave_0) entered blocking state [ 1237.296905][T16713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1237.312705][T21975] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1237.341025][T21975] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1237.484388][T21975] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1237.495242][T21975] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1237.500234][ T1039] bridge0: port 2(bridge_slave_1) entered blocking state [ 1237.500386][ T1039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1237.551951][T21975] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1237.607560][T21975] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1237.687531][T21975] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1237.701910][T21975] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1237.853461][ T3019] bridge_slave_1: left allmulticast mode [ 1237.853493][ T3019] bridge_slave_1: left promiscuous mode [ 1237.853700][ T3019] bridge0: port 2(bridge_slave_1) entered disabled state [ 1237.855566][ T3019] bridge_slave_0: left allmulticast mode [ 1237.855588][ T3019] bridge_slave_0: left promiscuous mode [ 1237.855755][ T3019] bridge0: port 1(bridge_slave_0) entered disabled state [ 1238.119731][ T3019] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1238.122286][ T3019] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1238.151650][ T3019] bond0 (unregistering): Released all slaves [ 1238.377316][ T3019] hsr_slave_0: left promiscuous mode [ 1238.377934][ T3019] hsr_slave_1: left promiscuous mode [ 1238.378914][ T3019] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1238.380069][ T3019] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1238.928631][ T3019] team0 (unregistering): Port device team_slave_1 removed [ 1238.948538][ T3019] team0 (unregistering): Port device team_slave_0 removed [ 1240.250294][T21975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1240.383522][T21975] 8021q: adding VLAN 0 to HW filter on device team0 [ 1240.407901][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.407966][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.713279][T15438] bridge0: port 1(bridge_slave_0) entered blocking state [ 1240.713449][T15438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1240.779069][T21921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1241.195956][ T3019] bridge0: port 2(bridge_slave_1) entered blocking state [ 1241.196076][ T3019] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1241.691396][ T5605] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1241.865877][ T5605] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1241.891784][ T5605] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1241.904138][ T5605] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1241.930583][ T5605] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1242.524618][T21975] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1244.134998][ T5606] Bluetooth: hci1: command tx timeout [ 1244.521825][T21921] veth0_vlan: entered promiscuous mode [ 1245.242010][T21921] veth1_vlan: entered promiscuous mode [ 1245.663190][T21975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1245.681600][T21988] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1245.740611][T21988] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1245.779729][T21988] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1245.849714][T21988] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1245.885168][T21988] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1245.896563][T21988] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1245.936273][T21988] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1245.963722][T21988] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1246.203238][ T5606] Bluetooth: hci1: command tx timeout [ 1246.214428][T21921] veth0_macvtap: entered promiscuous mode [ 1246.350152][T21921] veth1_macvtap: entered promiscuous mode [ 1246.469475][T21975] veth0_vlan: entered promiscuous mode [ 1246.563858][T21921] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1246.714765][T21975] veth1_vlan: entered promiscuous mode [ 1246.766783][T21921] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1246.992723][ T1039] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1247.038951][ T1039] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1247.043414][ T1039] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1247.083238][ T1039] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1247.134833][T22052] bridge0: port 1(bridge_slave_0) entered blocking state [ 1247.135015][T22052] bridge0: port 1(bridge_slave_0) entered disabled state [ 1247.135235][T22052] bridge_slave_0: entered allmulticast mode [ 1247.137164][T22052] bridge_slave_0: entered promiscuous mode [ 1247.179048][T22052] bridge0: port 2(bridge_slave_1) entered blocking state [ 1247.179229][T22052] bridge0: port 2(bridge_slave_1) entered disabled state [ 1247.179632][T22052] bridge_slave_1: entered allmulticast mode [ 1247.181623][T22052] bridge_slave_1: entered promiscuous mode [ 1247.481879][T22052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1247.834236][T22052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1248.189075][T22052] team0: Port device team_slave_0 added [ 1248.219216][T21975] veth0_macvtap: entered promiscuous mode [ 1248.283492][ T5606] Bluetooth: hci1: command tx timeout [ 1248.322678][T22052] team0: Port device team_slave_1 added [ 1248.324775][ T1194] bridge_slave_1: left allmulticast mode [ 1248.324802][ T1194] bridge_slave_1: left promiscuous mode [ 1248.324982][ T1194] bridge0: port 2(bridge_slave_1) entered disabled state [ 1248.393414][ T1194] bridge_slave_0: left allmulticast mode [ 1248.393441][ T1194] bridge_slave_0: left promiscuous mode [ 1248.393637][ T1194] bridge0: port 1(bridge_slave_0) entered disabled state [ 1249.256207][ T1194] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1249.269146][ T1194] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1249.271201][ T1194] bond0 (unregistering): Released all slaves [ 1249.533088][T21975] veth1_macvtap: entered promiscuous mode [ 1249.543882][T22052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1249.543896][T22052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1249.543910][T22052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1249.633495][T22052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1249.633508][T22052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1249.633524][T22052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1249.640387][ T1194] hsr_slave_0: left promiscuous mode [ 1249.640920][ T1194] hsr_slave_1: left promiscuous mode [ 1249.641856][ T1194] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1249.642401][ T1194] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1250.151852][ T1194] team0 (unregistering): Port device team_slave_1 removed [ 1250.177157][ T1194] team0 (unregistering): Port device team_slave_0 removed [ 1250.349818][T21988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1250.362680][ T5606] Bluetooth: hci1: command tx timeout [ 1250.585723][T21975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1250.617276][T22052] hsr_slave_0: entered promiscuous mode [ 1250.618613][T22052] hsr_slave_1: entered promiscuous mode [ 1250.631529][T22052] debugfs: 'hsr0' already exists in 'hsr' [ 1250.631551][T22052] Cannot create hsr debugfs directory [ 1250.653698][T21898] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1250.653714][T21898] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1250.697126][T21975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1251.012282][T16713] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1251.012297][T16713] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1251.012506][T15438] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.201448][T15438] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.270320][T21988] 8021q: adding VLAN 0 to HW filter on device team0 [ 1251.271037][T15438] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.357619][T15438] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.380526][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 1251.380629][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1251.571170][T16713] bridge0: port 2(bridge_slave_1) entered blocking state [ 1251.571281][T16713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1254.090419][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1254.090436][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1255.191334][ T3024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1255.191350][ T3024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1256.586298][T22114] svc: failed to register nfsdv3 RPC service (errno 111). [ 1256.588938][T22114] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1256.933599][T21988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1257.150813][T22116] NFSD: Failed to start, no listeners configured. [ 1258.557433][T22133] NFSD: Failed to start, no listeners configured. [ 1259.510095][T22141] tipc: Started in network mode [ 1259.510115][T22141] tipc: Node identity 0010000000000000002, cluster identity 1 [ 1259.570074][T21988] veth0_vlan: entered promiscuous mode [ 1259.597216][T22143] tipc: Enabling of bearer rejected, failed to enable media [ 1259.750749][T22150] tipc: Started in network mode [ 1259.750767][T22150] tipc: Node identity 1000001, cluster identity 4711 [ 1259.750775][T22150] tipc: Node number set to 16777217 [ 1259.838319][T22151] tipc: New replicast peer: 127.0.0.1 [ 1259.868769][T22151] tipc: Enabled bearer , priority 10 [ 1259.896627][T21988] veth1_vlan: entered promiscuous mode [ 1260.333641][T22052] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1260.439339][T22052] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1260.441751][T22052] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1260.870835][T22052] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1260.916120][T22052] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1260.949723][T22052] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1260.999576][T22052] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1261.042426][T22052] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1261.061381][T21988] veth0_macvtap: entered promiscuous mode [ 1261.137028][T21988] veth1_macvtap: entered promiscuous mode [ 1261.357795][T21988] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1261.466907][T21988] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1261.557335][T16713] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1261.560733][T16713] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1261.562081][T16713] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1261.620634][T16713] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1262.523505][T22184] tipc: Enabling of bearer rejected, already enabled [ 1263.113107][T22052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1263.592445][T15438] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1263.592459][T15438] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1263.678049][T21921] svc: failed to register nfsdv3 RPC service (errno 111). [ 1263.731561][T21921] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1263.731576][T21921] failed to unregister udp with rpcbind [ 1263.732645][T21921] svc: failed to register nfsdv3 RPC service (errno 97). [ 1263.732657][T21921] svc: failed to register nfsaclv3 RPC service (errno 97). [ 1263.732664][T21921] failed to unregister udp with rpcbind [ 1263.908445][T22052] 8021q: adding VLAN 0 to HW filter on device team0 [ 1263.922666][T16713] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1263.922681][T16713] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1263.983667][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 1263.983770][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1264.200484][T16713] bridge0: port 2(bridge_slave_1) entered blocking state [ 1264.200605][T16713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1264.894986][T22203] tipc: Cannot configure node identity twice [ 1264.918976][T22203] tipc: New replicast peer: 127.0.0.1 [ 1265.339099][T22203] tipc: Enabled bearer , priority 10 [ 1265.688989][T22207] svc: failed to register nfsdv3 RPC service (errno 111). [ 1265.693454][T22207] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1265.767120][T22214] tipc: Cannot configure node identity twice [ 1265.769623][T22217] tipc: Enabling of bearer rejected, already enabled [ 1266.169719][ T10] tipc: Node number set to 3145728 [ 1266.465173][T22208] NFSD: Failed to start, no listeners configured. [ 1267.349031][T22236] tipc: Enabling of bearer rejected, already enabled [ 1267.887189][T22052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1269.514641][T22052] veth0_vlan: entered promiscuous mode [ 1269.588294][T22052] veth1_vlan: entered promiscuous mode [ 1269.758231][T22052] veth0_macvtap: entered promiscuous mode [ 1269.775245][T22052] veth1_macvtap: entered promiscuous mode [ 1269.850010][T22052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1269.876607][T22052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1269.917998][ T1194] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.918037][ T1194] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.918062][ T1194] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.918084][ T1194] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1270.349133][T22246] NFSD: Unable to initialize client recovery tracking! (-110) [ 1270.349151][T22246] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 1270.349159][T22246] NFSD: starting 90-second grace period (net f00003aa) [ 1271.651752][ T3024] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1271.651765][ T3024] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1272.476160][T16713] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1272.476177][T16713] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1273.015099][ C0] tipc: RX(1000001): key[1] is activated [ 1273.351695][T22286] NFSD: Failed to start, no listeners configured. [ 1274.120140][T21988] svc: failed to register nfsdv3 RPC service (errno 111). [ 1274.135018][T21988] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1274.135035][T21988] failed to unregister udp with rpcbind [ 1274.135179][T21988] svc: failed to register nfsdv3 RPC service (errno 97). [ 1274.135189][T21988] svc: failed to register nfsaclv3 RPC service (errno 97). [ 1274.135196][T21988] failed to unregister udp with rpcbind [ 1274.139485][T21988] svc: failed to register nfsdv3 RPC service (errno 111). [ 1274.285746][T21988] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1274.285766][T21988] failed to unregister tcp with rpcbind [ 1274.566308][T21988] svc: failed to register nfsdv3 RPC service (errno 97). [ 1274.566328][T21988] svc: failed to register nfsaclv3 RPC service (errno 97). [ 1274.566335][T21988] failed to unregister tcp with rpcbind [ 1275.009900][T22275] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 1275.308461][T22314] ceph: No mds server is up or the cluster is laggy [ 1275.375560][T12349] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 1275.901639][T22275] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 1276.184259][T22338] netlink: 114 bytes leftover after parsing attributes in process `syz.6.5276'. [ 1276.565702][T22344] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5279'. [ 1276.577247][T22344] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5279'. [ 1276.577279][T22344] ksmbd: Unknown IPC event: 1, ignore. [ 1276.577540][T22344] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5279'. [ 1276.577558][T22344] nbd: must specify at least one socket [ 1276.591987][T22344] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5279'. [ 1276.621753][T22344] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5279'. [ 1276.652045][T22344] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5279'. [ 1276.658696][T22344] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5279'. [ 1276.689508][T22344] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5279'. [ 1276.749396][T22349] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5279'. [ 1276.749413][T22349] ksmbd: Unknown IPC event: 1, ignore. [ 1276.749571][T22349] nbd: must specify at least one socket [ 1277.141601][T22342] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1277.693024][T22340] NFSD: Unable to initialize client recovery tracking! (-110) [ 1277.693039][T22340] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 1277.693048][T22340] NFSD: starting 90-second grace period (net f00003a7) [ 1278.356944][T22381] rdma_rxe: rxe_newlink: failed to add veth0 [ 1278.358592][T22381] lo speed is unknown, defaulting to 1000 [ 1278.360565][T22381] lo speed is unknown, defaulting to 1000 [ 1278.413924][T22381] lo speed is unknown, defaulting to 1000 [ 1278.444208][T22383] smc: net device veth0 applied user defined pnetid SYZ0 [ 1278.446320][T22383] smc: net device lo applied user defined pnetid SYZ1 [ 1279.749426][T22361] svc: failed to register lockdv1 RPC service (errno 512). [ 1279.962040][T22381] infiniband syz1: set active [ 1279.962131][T15642] lo speed is unknown, defaulting to 1000 [ 1279.962245][T22381] infiniband syz1: added lo [ 1280.030115][T22381] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1280.030145][T22381] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1280.030167][T22381] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1280.143045][T22381] RDS/IB: syz1: added [ 1280.143116][T22381] smc: adding ib device syz1 with port count 1 [ 1280.143285][T22381] smc: ib device syz1 port 1 has no pnetid [ 1280.143387][ T5704] lo speed is unknown, defaulting to 1000 [ 1280.174745][T22361] svc: failed to register nfsdv3 RPC service (errno 512). [ 1280.174889][T22361] svc: failed to register nfsaclv3 RPC service (errno 512). [ 1280.174910][T22361] failed to unregister tcp with rpcbind [ 1280.175121][T22361] svc: failed to register nfsdv3 RPC service (errno 97). [ 1280.175131][T22361] svc: failed to register nfsaclv3 RPC service (errno 97). [ 1280.175139][T22361] failed to unregister tcp with rpcbind [ 1280.263642][T22381] lo speed is unknown, defaulting to 1000 [ 1280.984943][T22381] lo speed is unknown, defaulting to 1000 [ 1281.660852][T22381] lo speed is unknown, defaulting to 1000 [ 1282.441733][T22381] lo speed is unknown, defaulting to 1000 [ 1282.998507][T22378] infiniband syz0: set active [ 1282.998694][T22378] infiniband syz0: added veth0 [ 1283.287588][T22378] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1283.287614][T22378] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1283.287636][T22378] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1283.364931][T22378] RDS/IB: syz0: added [ 1283.364983][T22378] smc: adding ib device syz0 with port count 1 [ 1283.365150][T22378] smc: ib device syz0 port 1 has pnetid SYZ0 (user defined) [ 1283.555759][T22425] NFSD: Unable to initialize client recovery tracking! (-110) [ 1283.555774][T22425] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 1283.555782][T22425] NFSD: starting 90-second grace period (net f00004f1) [ 1284.201298][T22436] NFSD: Failed to start, no listeners configured. [ 1284.565708][T22440] NFSD: Failed to start, no listeners configured. [ 1285.206204][ T5704] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 1285.468610][ T5704] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 1285.736299][T22444] ceph: No mds server is up or the cluster is laggy [ 1285.830999][ C0] tipc: RX(0010000000000000002): key[1] is activated [ 1286.342987][ T5704] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 1286.347959][ T5704] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 1286.507454][T22454] NFSD: Unable to initialize client recovery tracking! (-110) [ 1286.507470][T22454] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 1286.507477][T22454] NFSD: starting 90-second grace period (net f00003aa) [ 1286.608728][T22275] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 1286.794597][T22457] NFSD: Failed to start, no listeners configured. [ 1287.121301][T22275] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 1287.167333][T22472] ceph: No mds server is up or the cluster is laggy [ 1288.208237][T22470] NFSD: Unable to initialize client recovery tracking! (-110) [ 1288.208258][T22470] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 1288.208267][T22470] NFSD: starting 90-second grace period (net f00003a7) [ 1288.272966][T22483] __nla_validate_parse: 6 callbacks suppressed [ 1288.272986][T22483] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5321'. [ 1288.273657][T22483] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5321'. [ 1292.306945][T22509] netlink: 'syz.6.5330': attribute type 37 has an invalid length. [ 1292.896370][T22520] rdma_rxe: rxe_newlink: failed to add lo [ 1293.032454][T22524] netlink: 'syz.6.5336': attribute type 1 has an invalid length. [ 1293.033396][T22524] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5336'. [ 1297.713172][T22535] siw: device registration error -23 [ 1297.746247][T22534] tipc: Enabled bearer , priority 1 [ 1297.829460][T22532] tipc: Disabling bearer [ 1298.068416][T22528] NFSD: Failed to start, no listeners configured. [ 1298.338688][T22529] NFSD: Failed to start, no listeners configured. [ 1298.471910][T15642] libceph: mon0 (2)127.0.0.1:6789 socket closed (con state V2_BANNER_PREFIX) [ 1298.853727][ T198] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 1298.912113][T22539] NFSD: Failed to start, no listeners configured. [ 1299.179165][T22543] ceph: No mds server is up or the cluster is laggy [ 1299.482863][T22275] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 1300.030322][T22568] netlink: 108 bytes leftover after parsing attributes in process `syz.6.5348'. [ 1300.140373][T22573] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5350'. [ 1300.895183][T22275] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1301.065218][T22275] usb 7-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 1301.065241][T22275] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1301.065252][T22275] usb 7-1: Product: syz [ 1301.065259][T22275] usb 7-1: Manufacturer: syz [ 1301.829734][T22275] speedtch 7-1:1.0: speedtch_bind: wrong device class 0 [ 1301.829956][T22275] speedtch 7-1:1.0: usbatm_usb_probe: bind failed: -19! [ 1301.857358][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 1301.857423][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.887064][T22275] usb 7-1: USB disconnect, device number 4 [ 1303.527152][T22634] tipc: Enabled bearer , priority 1 [ 1303.849139][T22275] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 1304.163741][T12349] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 1304.526006][T22658] syz0: rxe_newlink: already configured on veth0 [ 1304.553039][T22641] ceph: No mds server is up or the cluster is laggy [ 1304.724610][ T198] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 1305.189400][ T198] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 1305.643495][T22662] ceph: No mds server is up or the cluster is laggy [ 1305.684089][ T198] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 1305.794961][T22681] syzkaller0: renamed from veth0 (while UP) [ 1307.082629][ T5704] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1307.253745][T22713] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5399'. [ 1307.270719][ T5704] usb 8-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 1307.270742][ T5704] usb 8-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 1307.270756][ T5704] usb 8-1: config 1 interface 0 has no altsetting 0 [ 1307.277913][ T5704] usb 8-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 1307.277931][ T5704] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.277943][ T5704] usb 8-1: Product: syz [ 1307.277951][ T5704] usb 8-1: Manufacturer: syz [ 1307.277960][ T5704] usb 8-1: SerialNumber: syz [ 1307.282388][T22702] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1307.282596][T22702] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1309.086581][T22730] NFSD: Failed to start, no listeners configured. [ 1309.130591][ T5704] (unnamed net_device) (uninitialized): Assigned a random MAC address: 36:f3:d1:2b:12:41 [ 1310.694497][T22771] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5420'. [ 1310.695455][T22771] atomic_op ffff8880367a2218 conn xmit_atomic 0000000000000000 [ 1310.939261][T22764] tipc: Enabling of bearer rejected, failed to enable media [ 1310.961060][ T5704] rtl8150 8-1:1.0: eth9: rtl8150 is detected [ 1310.982030][ T5704] usb 8-1: USB disconnect, device number 3 [ 1311.094468][T22776] rdma_rxe: rxe_newlink: failed to add dummy0 [ 1311.327906][T22776] smc: net device dummy0 applied user defined pnetid SYZ0 [ 1311.355472][T22755] NFSD: Unable to initialize client recovery tracking! (-110) [ 1311.355488][T22755] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 1311.355496][T22755] NFSD: starting 90-second grace period (net f000041d) [ 1311.899246][T22794] netlink: 108 bytes leftover after parsing attributes in process `syz.7.5427'. [ 1312.127883][T22802] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5430'. [ 1312.620903][T22815] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5436'. [ 1312.641950][T22815] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5436'. [ 1312.743331][T22817] FAULT_INJECTION: forcing a failure. [ 1312.743331][T22817] name fail_futex, interval 1, probability 0, space 0, times 1 [ 1312.743358][T22817] CPU: 0 UID: 0 PID: 22817 Comm: syz.7.5438 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1312.743372][T22817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1312.743380][T22817] Call Trace: [ 1312.743385][T22817] [ 1312.743390][T22817] dump_stack_lvl+0xe8/0x150 [ 1312.743409][T22817] should_fail_ex+0x467/0x600 [ 1312.743428][T22817] get_futex_key+0x1b3/0x1580 [ 1312.743447][T22817] ? __pfx_get_futex_key+0x10/0x10 [ 1312.743459][T22817] ? debug_object_free+0x29c/0x340 [ 1312.743478][T22817] futex_wake+0x119/0x600 [ 1312.743494][T22817] ? __pfx_futex_wait+0x10/0x10 [ 1312.743509][T22817] ? __pfx_futex_wake+0x10/0x10 [ 1312.743524][T22817] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1312.743543][T22817] ? lock_acquire+0x115/0x350 [ 1312.743563][T22817] do_futex+0x458/0x4e0 [ 1312.743577][T22817] ? __pfx_do_futex+0x10/0x10 [ 1312.743589][T22817] ? lockdep_hardirqs_on+0x7a/0x110 [ 1312.743600][T22817] ? ktime_get+0x45/0x220 [ 1312.743618][T22817] __se_sys_futex+0x3a8/0x450 [ 1312.743633][T22817] ? __pfx___se_sys_futex+0x10/0x10 [ 1312.743644][T22817] ? rcu_is_watching+0x15/0xb0 [ 1312.743660][T22817] ? __x64_sys_futex+0x21/0xf0 [ 1312.743673][T22817] do_syscall_64+0x17b/0x530 [ 1312.743684][T22817] ? irqentry_exit+0x10f/0x8f0 [ 1312.743694][T22817] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1312.743705][T22817] ? clear_bhb_loop+0x40/0x90 [ 1312.743718][T22817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1312.743729][T22817] RIP: 0033:0x7f1cc6fcde99 [ 1312.743740][T22817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1312.743750][T22817] RSP: 002b:00007ffe86c3ed98 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1312.743762][T22817] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1cc6fcde99 [ 1312.743770][T22817] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1cc7255fa8 [ 1312.743777][T22817] RBP: 0000000000001530 R08: 0000000000000008 R09: 0000000000000000 [ 1312.743784][T22817] R10: 00007f1cc7255fa0 R11: 0000000000000246 R12: 0000000000000000 [ 1312.743791][T22817] R13: 00007f1cc7255fac R14: 00007f1cc7255fa8 R15: 00007f1cc7255fa0 [ 1312.743806][T22817] [ 1313.078703][T22817] FAULT_INJECTION: forcing a failure. [ 1313.078703][T22817] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1313.078732][T22817] CPU: 0 UID: 0 PID: 22817 Comm: syz.7.5438 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1313.078746][T22817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1313.078754][T22817] Call Trace: [ 1313.078761][T22817] [ 1313.078768][T22817] dump_stack_lvl+0xe8/0x150 [ 1313.078790][T22817] should_fail_ex+0x467/0x600 [ 1313.078809][T22817] __se_sys_futex+0x180/0x450 [ 1313.078827][T22817] ? __pfx___se_sys_futex+0x10/0x10 [ 1313.078839][T22817] ? rcu_is_watching+0x15/0xb0 [ 1313.078856][T22817] ? __x64_sys_futex+0x21/0xf0 [ 1313.078870][T22817] do_syscall_64+0x17b/0x530 [ 1313.078883][T22817] ? irqentry_exit+0x10f/0x8f0 [ 1313.078894][T22817] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1313.078905][T22817] ? clear_bhb_loop+0x40/0x90 [ 1313.078919][T22817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1313.078930][T22817] RIP: 0033:0x7f1cc6fcde99 [ 1313.078943][T22817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1313.078952][T22817] RSP: 002b:00007ffe86c3ed98 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1313.078964][T22817] RAX: ffffffffffffffda RBX: 000000000014042c RCX: 00007f1cc6fcde99 [ 1313.078973][T22817] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1cc725609c [ 1313.078980][T22817] RBP: 0000000000000032 R08: 3fffffffffffffff R09: 0000000000000000 [ 1313.078987][T22817] R10: 00007ffe86c3eea0 R11: 0000000000000246 R12: 00007ffe86c3eec0 [ 1313.078994][T22817] R13: 00007f1cc725609c R14: 000000000014045e R15: 00007ffe86c3eea0 [ 1313.079010][T22817] [ 1313.127512][T22817] FAULT_INJECTION: forcing a failure. [ 1313.127512][T22817] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1313.127539][T22817] CPU: 0 UID: 0 PID: 22817 Comm: syz.7.5438 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1313.127552][T22817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1313.127560][T22817] Call Trace: [ 1313.127568][T22817] [ 1313.127575][T22817] dump_stack_lvl+0xe8/0x150 [ 1313.127597][T22817] should_fail_ex+0x467/0x600 [ 1313.127614][T22817] _copy_from_user+0x2d/0xb0 [ 1313.127626][T22817] get_timespec64+0x96/0x1b0 [ 1313.127639][T22817] ? __pfx_get_timespec64+0x10/0x10 [ 1313.127652][T22817] ? ktime_get+0x45/0x220 [ 1313.127670][T22817] __se_sys_futex+0x19a/0x450 [ 1313.127694][T22817] ? __pfx___se_sys_futex+0x10/0x10 [ 1313.127705][T22817] ? rcu_is_watching+0x15/0xb0 [ 1313.127722][T22817] ? __x64_sys_futex+0x21/0xf0 [ 1313.127735][T22817] do_syscall_64+0x17b/0x530 [ 1313.127749][T22817] ? irqentry_exit+0x10f/0x8f0 [ 1313.127759][T22817] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1313.127771][T22817] ? clear_bhb_loop+0x40/0x90 [ 1313.127785][T22817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1313.127796][T22817] RIP: 0033:0x7f1cc6fcde99 [ 1313.127808][T22817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1313.127818][T22817] RSP: 002b:00007ffe86c3ed98 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1313.127836][T22817] RAX: ffffffffffffffda RBX: 000000000014045d RCX: 00007f1cc6fcde99 [ 1313.127844][T22817] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1cc725609c [ 1313.127851][T22817] RBP: 0000000000000032 R08: 3fffffffffffffff R09: 0000000000000000 [ 1313.127858][T22817] R10: 00007ffe86c3eea0 R11: 0000000000000246 R12: 00007ffe86c3eec0 [ 1313.127866][T22817] R13: 00007f1cc725609c R14: 000000000014048f R15: 00007ffe86c3eea0 [ 1313.127882][T22817] [ 1313.544121][T22817] FAULT_INJECTION: forcing a failure. [ 1313.544121][T22817] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1313.544150][T22817] CPU: 0 UID: 0 PID: 22817 Comm: syz.7.5438 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1313.544165][T22817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1313.544173][T22817] Call Trace: [ 1313.544178][T22817] [ 1313.544184][T22817] dump_stack_lvl+0xe8/0x150 [ 1313.544207][T22817] should_fail_ex+0x467/0x600 [ 1313.544225][T22817] get_futex_key+0x1b3/0x1580 [ 1313.544244][T22817] ? __pfx_get_futex_key+0x10/0x10 [ 1313.544256][T22817] ? update_se+0x90/0xf30 [ 1313.544270][T22817] futex_wait_setup+0x4a/0x590 [ 1313.544288][T22817] ? __futex_wait+0xe1/0x410 [ 1313.544304][T22817] __futex_wait+0x161/0x410 [ 1313.544321][T22817] ? __pfx___futex_wait+0x10/0x10 [ 1313.544337][T22817] ? __pfx_futex_wake_mark+0x10/0x10 [ 1313.544354][T22817] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1313.544372][T22817] ? hrtimer_setup_sleeper_on_stack+0xb5/0x110 [ 1313.544386][T22817] ? ktime_add_safe+0x38/0x70 [ 1313.544400][T22817] futex_wait+0x121/0x390 [ 1313.544415][T22817] ? __pfx_futex_wait+0x10/0x10 [ 1313.544428][T22817] ? lock_acquire+0x115/0x350 [ 1313.544448][T22817] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1313.544464][T22817] ? lock_acquire+0x115/0x350 [ 1313.544481][T22817] do_futex+0x3e7/0x4e0 [ 1313.544496][T22817] ? __pfx_do_futex+0x10/0x10 [ 1313.544507][T22817] ? lockdep_hardirqs_on+0x7a/0x110 [ 1313.544518][T22817] ? ktime_get+0x45/0x220 [ 1313.544536][T22817] __se_sys_futex+0x3a8/0x450 [ 1313.544552][T22817] ? __pfx___se_sys_futex+0x10/0x10 [ 1313.544563][T22817] ? rcu_is_watching+0x15/0xb0 [ 1313.544579][T22817] ? __x64_sys_futex+0x21/0xf0 [ 1313.544593][T22817] do_syscall_64+0x17b/0x530 [ 1313.544604][T22817] ? irqentry_exit+0x10f/0x8f0 [ 1313.544614][T22817] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1313.544625][T22817] ? clear_bhb_loop+0x40/0x90 [ 1313.544637][T22817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1313.544647][T22817] RIP: 0033:0x7f1cc6fcde99 [ 1313.544658][T22817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1313.544667][T22817] RSP: 002b:00007ffe86c3ed98 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1313.544679][T22817] RAX: ffffffffffffffda RBX: 00000000001405fd RCX: 00007f1cc6fcde99 [ 1313.544687][T22817] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1cc725627c [ 1313.544694][T22817] RBP: 0000000000000032 R08: 3fffffffffffffff R09: 0000000000000000 [ 1313.544701][T22817] R10: 00007ffe86c3eea0 R11: 0000000000000246 R12: 00007ffe86c3eec0 [ 1313.544708][T22817] R13: 00007f1cc725627c R14: 000000000014062f R15: 00007ffe86c3eea0 [ 1313.544724][T22817] [ 1313.953577][T22817] FAULT_INJECTION: forcing a failure. [ 1313.953577][T22817] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1313.953603][T22817] CPU: 0 UID: 0 PID: 22817 Comm: syz.7.5438 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1313.953617][T22817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1313.953628][T22817] Call Trace: [ 1313.953634][T22817] [ 1313.953639][T22817] dump_stack_lvl+0xe8/0x150 [ 1313.953661][T22817] should_fail_ex+0x467/0x600 [ 1313.953678][T22817] get_futex_key+0x1b3/0x1580 [ 1313.953697][T22817] ? __pfx_get_futex_key+0x10/0x10 [ 1313.953709][T22817] ? debug_object_free+0x29c/0x340 [ 1313.953729][T22817] futex_wake+0x119/0x600 [ 1313.953745][T22817] ? __pfx_futex_wait+0x10/0x10 [ 1313.953759][T22817] ? __pfx_futex_wake+0x10/0x10 [ 1313.953774][T22817] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1313.953794][T22817] ? lock_acquire+0x115/0x350 [ 1313.953812][T22817] do_futex+0x458/0x4e0 [ 1313.953827][T22817] ? __pfx_do_futex+0x10/0x10 [ 1313.953839][T22817] ? lockdep_hardirqs_on+0x7a/0x110 [ 1313.953850][T22817] ? ktime_get+0x45/0x220 [ 1313.953868][T22817] __se_sys_futex+0x3a8/0x450 [ 1313.953883][T22817] ? __pfx___se_sys_futex+0x10/0x10 [ 1313.953894][T22817] ? rcu_is_watching+0x15/0xb0 [ 1313.953911][T22817] ? __x64_sys_futex+0x21/0xf0 [ 1313.953924][T22817] do_syscall_64+0x17b/0x530 [ 1313.953935][T22817] ? irqentry_exit+0x10f/0x8f0 [ 1313.953945][T22817] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1313.953957][T22817] ? clear_bhb_loop+0x40/0x90 [ 1313.953971][T22817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1313.953981][T22817] RIP: 0033:0x7f1cc6fcde99 [ 1313.953993][T22817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1313.954003][T22817] RSP: 002b:00007ffe86c3ed98 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1313.954015][T22817] RAX: ffffffffffffffda RBX: 00000000000000f0 RCX: 00007f1cc6fcde99 [ 1313.954023][T22817] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1cc7256098 [ 1313.954030][T22817] RBP: 0000000000001ec6 R08: 0000000000000004 R09: 0000000000000000 [ 1313.954037][T22817] R10: 00007f1cc7255fa0 R11: 0000000000000246 R12: 0000000000000001 [ 1313.954044][T22817] R13: 00007f1cc725609c R14: 00007f1cc7256098 R15: 00007f1cc7256090 [ 1313.954060][T22817] [ 1314.191138][T22817] FAULT_INJECTION: forcing a failure. [ 1314.191138][T22817] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1314.191170][T22817] CPU: 0 UID: 0 PID: 22817 Comm: syz.7.5438 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1314.191184][T22817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1314.191193][T22817] Call Trace: [ 1314.191201][T22817] [ 1314.191209][T22817] dump_stack_lvl+0xe8/0x150 [ 1314.191231][T22817] should_fail_ex+0x467/0x600 [ 1314.191249][T22817] _copy_from_user+0x2d/0xb0 [ 1314.191261][T22817] get_timespec64+0x96/0x1b0 [ 1314.191275][T22817] ? __pfx_get_timespec64+0x10/0x10 [ 1314.191287][T22817] ? ktime_get+0x45/0x220 [ 1314.191307][T22817] __se_sys_futex+0x19a/0x450 [ 1314.191325][T22817] ? __pfx___se_sys_futex+0x10/0x10 [ 1314.191336][T22817] ? rcu_is_watching+0x15/0xb0 [ 1314.191353][T22817] ? __x64_sys_futex+0x21/0xf0 [ 1314.191367][T22817] do_syscall_64+0x17b/0x530 [ 1314.191382][T22817] ? irqentry_exit+0x10f/0x8f0 [ 1314.191392][T22817] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1314.191404][T22817] ? clear_bhb_loop+0x40/0x90 [ 1314.191417][T22817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1314.191429][T22817] RIP: 0033:0x7f1cc6fcde99 [ 1314.191441][T22817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1314.191451][T22817] RSP: 002b:00007ffe86c3ed98 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1314.191463][T22817] RAX: ffffffffffffffda RBX: 0000000000140884 RCX: 00007f1cc6fcde99 [ 1314.191472][T22817] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1cc725618c [ 1314.191479][T22817] RBP: 0000000000000032 R08: 3fffffffffffffff R09: 0000000000000000 [ 1314.191485][T22817] R10: 00007ffe86c3eea0 R11: 0000000000000246 R12: 00007ffe86c3eec0 [ 1314.191493][T22817] R13: 00007f1cc725618c R14: 00000000001408b6 R15: 00007ffe86c3eea0 [ 1314.191508][T22817] [ 1314.409015][T22817] FAULT_INJECTION: forcing a failure. [ 1314.409015][T22817] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1314.409044][T22817] CPU: 0 UID: 0 PID: 22817 Comm: syz.7.5438 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1314.409058][T22817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1314.409066][T22817] Call Trace: [ 1314.409073][T22817] [ 1314.409081][T22817] dump_stack_lvl+0xe8/0x150 [ 1314.409103][T22817] should_fail_ex+0x467/0x600 [ 1314.409121][T22817] get_futex_key+0x1b3/0x1580 [ 1314.409139][T22817] ? __pfx_get_futex_key+0x10/0x10 [ 1314.409152][T22817] ? update_se+0x90/0xf30 [ 1314.409166][T22817] futex_wait_setup+0x4a/0x590 [ 1314.409184][T22817] ? __futex_wait+0xe1/0x410 [ 1314.409201][T22817] __futex_wait+0x161/0x410 [ 1314.409217][T22817] ? __pfx___futex_wait+0x10/0x10 [ 1314.409234][T22817] ? __pfx_futex_wake_mark+0x10/0x10 [ 1314.409251][T22817] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1314.409268][T22817] ? hrtimer_setup_sleeper_on_stack+0xb5/0x110 [ 1314.409282][T22817] ? ktime_add_safe+0x38/0x70 [ 1314.409296][T22817] futex_wait+0x121/0x390 [ 1314.409312][T22817] ? __pfx_futex_wait+0x10/0x10 [ 1314.409325][T22817] ? lock_acquire+0x115/0x350 [ 1314.409344][T22817] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1314.409361][T22817] ? lock_acquire+0x115/0x350 [ 1314.409377][T22817] do_futex+0x3e7/0x4e0 [ 1314.409392][T22817] ? __pfx_do_futex+0x10/0x10 [ 1314.409403][T22817] ? lockdep_hardirqs_on+0x7a/0x110 [ 1314.409415][T22817] ? ktime_get+0x45/0x220 [ 1314.409432][T22817] __se_sys_futex+0x3a8/0x450 [ 1314.409448][T22817] ? __pfx___se_sys_futex+0x10/0x10 [ 1314.409459][T22817] ? rcu_is_watching+0x15/0xb0 [ 1314.409475][T22817] ? __x64_sys_futex+0x21/0xf0 [ 1314.409489][T22817] do_syscall_64+0x17b/0x530 [ 1314.409501][T22817] ? irqentry_exit+0x10f/0x8f0 [ 1314.409511][T22817] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1314.409522][T22817] ? clear_bhb_loop+0x40/0x90 [ 1314.409536][T22817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1314.409548][T22817] RIP: 0033:0x7f1cc6fcde99 [ 1314.409559][T22817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1314.409569][T22817] RSP: 002b:00007ffe86c3ed98 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1314.409582][T22817] RAX: ffffffffffffffda RBX: 000000000014095d RCX: 00007f1cc6fcde99 [ 1314.409590][T22817] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1cc725618c [ 1314.409597][T22817] RBP: 0000000000000032 R08: 3fffffffffffffff R09: 0000000000000000 [ 1314.409604][T22817] R10: 00007ffe86c3eea0 R11: 0000000000000246 R12: 00007ffe86c3eec0 [ 1314.409611][T22817] R13: 00007f1cc725618c R14: 000000000014098f R15: 00007ffe86c3eea0 [ 1314.409626][T22817] [ 1314.795724][T22817] FAULT_INJECTION: forcing a failure. [ 1314.795724][T22817] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1314.795754][T22817] CPU: 0 UID: 0 PID: 22817 Comm: syz.7.5438 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1314.795771][T22817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1314.795779][T22817] Call Trace: [ 1314.795785][T22817] [ 1314.795791][T22817] dump_stack_lvl+0xe8/0x150 [ 1314.795812][T22817] should_fail_ex+0x467/0x600 [ 1314.795831][T22817] _copy_from_user+0x2d/0xb0 [ 1314.795842][T22817] get_timespec64+0x96/0x1b0 [ 1314.795855][T22817] ? __pfx_get_timespec64+0x10/0x10 [ 1314.795872][T22817] __se_sys_clock_nanosleep+0x1ce/0x3b0 [ 1314.795889][T22817] ? __pfx___se_sys_clock_nanosleep+0x10/0x10 [ 1314.795909][T22817] do_syscall_64+0x17b/0x530 [ 1314.795921][T22817] ? irqentry_exit+0x10f/0x8f0 [ 1314.795932][T22817] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1314.795943][T22817] ? clear_bhb_loop+0x40/0x90 [ 1314.795957][T22817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1314.795968][T22817] RIP: 0033:0x7f1cc6f8e6ce [ 1314.795980][T22817] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1314.795990][T22817] RSP: 002b:00007ffe86c3ed18 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 1314.796003][T22817] RAX: ffffffffffffffda RBX: 0000555572c22500 RCX: 00007f1cc6f8e6ce [ 1314.796011][T22817] RDX: 00007ffe86c3ed70 RSI: 0000000000000000 RDI: 0000000000000000 [ 1314.796017][T22817] RBP: 00007f1cc7257da0 R08: 0000000000000000 R09: 0000000000000000 [ 1314.796024][T22817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000140b2f [ 1314.796031][T22817] R13: 00007f1cc725618c R14: 0000000000140ac9 R15: 00007f1cc7256180 [ 1314.796051][T22817] [ 1316.803379][T22846] NFSD: Unable to initialize client recovery tracking! (-110) [ 1316.803398][T22846] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 1316.803406][T22846] NFSD: starting 90-second grace period (net f00003aa) [ 1317.608247][T22876] rdma_rxe: rxe_newlink: failed to add veth0 [ 1319.303336][T22879] lo speed is unknown, defaulting to 1000 [ 1319.388119][ T5606] Bluetooth: hci2: command 0x0406 tx timeout [ 1322.028782][ T5704] ------------[ cut here ]------------ [ 1322.028797][ T5704] !iov_iter_count(&con->v2.in_iter) [ 1322.028813][ T5704] WARNING: net/ceph/messenger_v2.c:3129 at ceph_con_v2_try_read+0x6634/0x6810, CPU#0: kworker/0:5/5704 [ 1322.028848][ T5704] Modules linked in: [ 1322.028874][ T5704] CPU: 0 UID: 0 PID: 5704 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1322.028887][ T5704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1322.028896][ T5704] Workqueue: ceph-msgr ceph_con_workfn [ 1322.028909][ T5704] RIP: 0010:ceph_con_v2_try_read+0x6634/0x6810 [ 1322.028923][ T5704] Code: 8d 3d 60 8d cd 04 43 0f b6 04 3e 84 c0 48 8b 54 24 38 0f 85 85 00 00 00 8b 32 67 48 0f b9 3a e9 40 ff ff ff e8 cd f7 b0 f6 90 <0f> 0b 90 41 bd c3 ff ff ff e9 32 ff ff ff e8 b9 f7 b0 f6 90 0f 0b [ 1322.028934][ T5704] RSP: 0018:ffffc9000602f500 EFLAGS: 00010293 [ 1322.028943][ T5704] RAX: ffffffff8b14abe3 RBX: 0000000000000000 RCX: ffff88805d5f5dc0 [ 1322.028951][ T5704] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1322.028958][ T5704] RBP: ffffc9000602fad8 R08: 0000000000000000 R09: 0000000000000000 [ 1322.028965][ T5704] R10: ffff888035c40703 R11: ffffed1006b880e2 R12: fffff52000c05ef0 [ 1322.028972][ T5704] R13: 0000000000000000 R14: 0000000000000010 R15: dffffc0000000000 [ 1322.028979][ T5704] FS: 0000000000000000(0000) GS:ffff8881259f2000(0000) knlGS:0000000000000000 [ 1322.028988][ T5704] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1322.028995][ T5704] CR2: 00007f3dac3c0ff8 CR3: 000000005bed4000 CR4: 00000000003526f0 [ 1322.029005][ T5704] Call Trace: [ 1322.029011][ T5704] [ 1322.029051][ T5704] ? __pfx_ceph_con_v2_try_read+0x10/0x10 [ 1322.029066][ T5704] ? __lock_acquire+0x6df/0x2e40 [ 1322.029086][ T5704] ? __lock_acquire+0x6df/0x2e40 [ 1322.029099][ T5704] ? __lock_acquire+0x6df/0x2e40 [ 1322.029112][ T5704] ? __lock_acquire+0x6df/0x2e40 [ 1322.029122][ T5704] ? look_up_lock_class+0x57/0x110 [ 1322.029135][ T5704] ? register_lock_class+0x31/0x2e0 [ 1322.029154][ T5704] ? __lock_acquire+0x6df/0x2e40 [ 1322.029174][ T5704] ? lockdep_hardirqs_on+0x7a/0x110 [ 1322.029185][ T5704] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1322.029196][ T5704] ? mutex_lock_nested+0x152/0x1d0 [ 1322.029209][ T5704] ? ceph_con_workfn+0x3b/0x14a0 [ 1322.029221][ T5704] ceph_con_workfn+0x1f5/0x14a0 [ 1322.029233][ T5704] ? rcu_is_watching+0x15/0xb0 [ 1322.029249][ T5704] ? process_one_work+0x7fd/0x1480 [ 1322.029261][ T5704] process_one_work+0xaaf/0x1480 [ 1322.029283][ T5704] ? __pfx_process_one_work+0x10/0x10 [ 1322.029293][ T5704] ? do_raw_spin_lock+0x12b/0x2f0 [ 1322.029310][ T5704] ? assign_work+0x3cf/0x5d0 [ 1322.029324][ T5704] worker_thread+0xb05/0x10d0 [ 1322.029347][ T5704] kthread+0x388/0x470 [ 1322.029363][ T5704] ? __pfx_worker_thread+0x10/0x10 [ 1322.029374][ T5704] ? __pfx_kthread+0x10/0x10 [ 1322.029388][ T5704] ret_from_fork+0x514/0xb70 [ 1322.029406][ T5704] ? __pfx_ret_from_fork+0x10/0x10 [ 1322.029420][ T5704] ? __switch_to+0xc89/0x1420 [ 1322.029435][ T5704] ? __pfx_kthread+0x10/0x10 [ 1322.029449][ T5704] ret_from_fork_asm+0x1a/0x30 [ 1322.029474][ T5704] [ 1322.029481][ T5704] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1322.029489][ T5704] CPU: 0 UID: 0 PID: 5704 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1322.029501][ T5704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1322.029508][ T5704] Workqueue: ceph-msgr ceph_con_workfn [ 1322.029518][ T5704] Call Trace: [ 1322.029523][ T5704] [ 1322.029527][ T5704] vpanic+0x56c/0xa60 [ 1322.029539][ T5704] ? __pfx__printk+0x10/0x10 [ 1322.029551][ T5704] ? __pfx_vpanic+0x10/0x10 [ 1322.029560][ T5704] ? is_bpf_text_address+0x292/0x2b0 [ 1322.029573][ T5704] ? is_bpf_text_address+0x26/0x2b0 [ 1322.029589][ T5704] panic+0xc5/0xd0 [ 1322.029599][ T5704] ? __pfx_panic+0x10/0x10 [ 1322.029614][ T5704] ? ret_from_fork_asm+0x1a/0x30 [ 1322.029630][ T5704] __warn+0x315/0x4c0 [ 1322.029640][ T5704] ? ceph_con_v2_try_read+0x6634/0x6810 [ 1322.029654][ T5704] ? ceph_con_v2_try_read+0x6634/0x6810 [ 1322.029666][ T5704] __report_bug+0x276/0x570 [ 1322.029681][ T5704] ? ceph_con_v2_try_read+0x6634/0x6810 [ 1322.029695][ T5704] ? __pfx___report_bug+0x10/0x10 [ 1322.029705][ T5704] ? __local_bh_enable+0x1e1/0x2f0 [ 1322.029720][ T5704] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 1322.029730][ T5704] ? lockdep_hardirqs_on+0x7a/0x110 [ 1322.029744][ T5704] ? ceph_con_v2_try_read+0x6634/0x6810 [ 1322.029757][ T5704] report_bug+0x16a/0x220 [ 1322.029768][ T5704] ? ceph_con_v2_try_read+0x6634/0x6810 [ 1322.029780][ T5704] ? ceph_con_v2_try_read+0x6636/0x6810 [ 1322.029792][ T5704] handle_bug+0x9c/0x200 [ 1322.029806][ T5704] exc_invalid_op+0x1a/0x50 [ 1322.029818][ T5704] asm_exc_invalid_op+0x1a/0x20 [ 1322.029830][ T5704] RIP: 0010:ceph_con_v2_try_read+0x6634/0x6810 [ 1322.029843][ T5704] Code: 8d 3d 60 8d cd 04 43 0f b6 04 3e 84 c0 48 8b 54 24 38 0f 85 85 00 00 00 8b 32 67 48 0f b9 3a e9 40 ff ff ff e8 cd f7 b0 f6 90 <0f> 0b 90 41 bd c3 ff ff ff e9 32 ff ff ff e8 b9 f7 b0 f6 90 0f 0b [ 1322.029852][ T5704] RSP: 0018:ffffc9000602f500 EFLAGS: 00010293 [ 1322.029868][ T5704] RAX: ffffffff8b14abe3 RBX: 0000000000000000 RCX: ffff88805d5f5dc0 [ 1322.029876][ T5704] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1322.029882][ T5704] RBP: ffffc9000602fad8 R08: 0000000000000000 R09: 0000000000000000 [ 1322.029889][ T5704] R10: ffff888035c40703 R11: ffffed1006b880e2 R12: fffff52000c05ef0 [ 1322.029896][ T5704] R13: 0000000000000000 R14: 0000000000000010 R15: dffffc0000000000 [ 1322.029907][ T5704] ? ceph_con_v2_try_read+0x6633/0x6810 [ 1322.029954][ T5704] ? __pfx_ceph_con_v2_try_read+0x10/0x10 [ 1322.029967][ T5704] ? __lock_acquire+0x6df/0x2e40 [ 1322.029981][ T5704] ? __lock_acquire+0x6df/0x2e40 [ 1322.029997][ T5704] ? __lock_acquire+0x6df/0x2e40 [ 1322.030010][ T5704] ? __lock_acquire+0x6df/0x2e40 [ 1322.030019][ T5704] ? look_up_lock_class+0x57/0x110 [ 1322.030030][ T5704] ? register_lock_class+0x31/0x2e0 [ 1322.030056][ T5704] ? __lock_acquire+0x6df/0x2e40 [ 1322.030076][ T5704] ? lockdep_hardirqs_on+0x7a/0x110 [ 1322.030086][ T5704] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1322.030096][ T5704] ? mutex_lock_nested+0x152/0x1d0 [ 1322.030109][ T5704] ? ceph_con_workfn+0x3b/0x14a0 [ 1322.030121][ T5704] ceph_con_workfn+0x1f5/0x14a0 [ 1322.030132][ T5704] ? rcu_is_watching+0x15/0xb0 [ 1322.030145][ T5704] ? process_one_work+0x7fd/0x1480 [ 1322.030156][ T5704] process_one_work+0xaaf/0x1480 [ 1322.030177][ T5704] ? __pfx_process_one_work+0x10/0x10 [ 1322.030187][ T5704] ? do_raw_spin_lock+0x12b/0x2f0 [ 1322.030204][ T5704] ? assign_work+0x3cf/0x5d0 [ 1322.030217][ T5704] worker_thread+0xb05/0x10d0 [ 1322.030240][ T5704] kthread+0x388/0x470 [ 1322.030253][ T5704] ? __pfx_worker_thread+0x10/0x10 [ 1322.030264][ T5704] ? __pfx_kthread+0x10/0x10 [ 1322.030278][ T5704] ret_from_fork+0x514/0xb70 [ 1322.030293][ T5704] ? __pfx_ret_from_fork+0x10/0x10 [ 1322.030307][ T5704] ? __switch_to+0xc89/0x1420 [ 1322.030320][ T5704] ? __pfx_kthread+0x10/0x10 [ 1322.030334][ T5704] ret_from_fork_asm+0x1a/0x30 [ 1322.030358][ T5704] [ 1322.030421][ T5704] Kernel Offset: disabled