last executing test programs: 8.344589828s ago: executing program 0 (id=188): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'\x00', 0x1002}) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="00112233445566778899aabb08004500003c0000400040110000010101010101010204d204d2002800"/62], 0x40) 7.445467463s ago: executing program 0 (id=197): setns(0xc9, 0x0) r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNADDRESOURCE(r0, 0x89ee, &(0x7f0000000040)=0x1) 7.183062823s ago: executing program 0 (id=199): unshare(0x60000000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000058000000120a01040000000000000000020000000900010073797a30000000000900020073797a30000000000800030000000004240004800c00010000000000000000010c00020000000000000000010800040000000000140000001100010000000000000000000200000a"], 0xa0}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a34000000140a01000000000000000000020000000900010073797a30000000000900020073797a3000000000080003000000000420000000020a01000000000000000000020000000900010073797a3000000000140000001100010000000000000000000200000a"], 0x7c}}, 0x0) 5.959572291s ago: executing program 4 (id=211): r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x5) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='127.0.0.1:20000:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='ms_mode\x00', &(0x7f0000000100)='crc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) r2 = accept4$inet(r1, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000200)="636570682076320a001000ffffffffffffffff000000000000000001011900000001000000000000000000000000000000000000000000c5a213aa010000000001000000000200007f000001000000000000000083e1a2010601100000000100000000000000000000000000000000000000000012eee96201000000000000000100"/140, 0x78) 4.792006822s ago: executing program 4 (id=226): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001000)=@raw={'raw\x00', 0x9, 0x3, 0x270, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffd}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x28}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffd}}}}, 0x2d0) syz_emit_ethernet(0x50, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x20, 0x2c, 0x40, @local, @mcast2, {[@fragment={0x3b, 0x0, 0x0, 0x1, 0x0, 0x0, 0x64}], '\x00\x00\x00\x00\x00\x00\x00\x00'}}}}}, 0x0) 4.624908155s ago: executing program 4 (id=228): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x0, 0x6, 0x6, 0x1, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL]}, 0x1c}}, 0x0) 4.501239049s ago: executing program 4 (id=229): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='10 1\n\x00', 0x5) nanosleep(&(0x7f0000000180)={0x0, 0x5f5e100}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000050000000900010073797a300000000054000000030a01020000000000000000050000000900030073797a30000000000900010073797a300000000008000a4000000002200000048000000002000100000000000900010065746830000000006c000000060a01040000000000000000050000000900010073797a30000000000900030073797a300000000040000004800018000007800c000100696d6d656469617465001c0002800800024000000001100001800800014000000001080002400100000018000000078008000100647570000800028008000140000000011800000007800800010064757000080002800800014000000001140000001000010000000000000000000001000a"], 0x110}}, 0x0) 4.335874302s ago: executing program 4 (id=230): unshare(0x40000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x7117}]}}}]}, 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x7217}]}}}]}, 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x7317}]}}}]}, 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newlink={0x50, 0x10, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x7417}]}}}]}, 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x50, 0x10, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x7517}]}}}]}, 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newlink={0x50, 0x10, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'vlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x7617}]}}}]}, 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newlink={0x50, 0x10, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'macvlan0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x7717}]}}}]}, 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=@newlink={0x50, 0x10, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'macvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x7817}]}}}]}, 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=@newlink={0x50, 0x10, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x7917}]}}}]}, 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=@newlink={0x50, 0x10, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x7a17}]}}}]}, 0x50}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='10 1 1\x00', 0x7) close(r1) sendmsg$nl_route(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=@dellink={0x34, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x34}}, 0x0) nanosleep(&(0x7f0000000800)={0x0, 0x1dcd6500}, 0x0) 4.096800155s ago: executing program 3 (id=232): r0 = socket(0x8, 0x2, 0x0) setsockopt(r0, 0x108, 0x42020054, &(0x7f0000000000)="010000000000000000000000000000000100"/72, 0x48) r1 = socket(0x8, 0x2, 0x0) ioctl(r1, 0x400861f2, &(0x7f0000000100)="0200000001000000dc0500006e61733000000000") ioctl(r0, 0x400461f1, &(0x7f0000000200)="020000006e61733000000000000000000100"/32) 4.041811896s ago: executing program 3 (id=233): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000010)={0x0, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000020)={0x0, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000030)={0x0, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000050)={0x0, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000060)={0x0, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000070)={0x0, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000090)={0x0, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000a0)={0x0, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000b0)={0x0, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000d0)={0x0, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000e0)={0x0, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000f0)={0x0, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000100)={0x0, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000110)={0x0, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000120)={0x0, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000130)={0x0, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000150)={0x0, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000160)={0x0, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000170)={0x0, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0x0, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000190)={0x0, 0x0}) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000200)={0x40, 0x1, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x40, 0x3, 0x3}, 0x10) 3.764910006s ago: executing program 3 (id=236): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newtaction={0x30, 0x30, 0x609, 0x0, 0x0, {}, [{0x20, 0x1, [@m_connmark={0x20, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x0, 0x20000000, 0x6}, 0x5}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@gettaction={0x20, 0x32, 0x301, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0x20}}, 0x0) 3.613470001s ago: executing program 5 (id=238): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000000)=@newsa={0x0, 0x0, 0x1, 0x0, 0x0, {{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {@in=@loopback, 0x1234, 0x32}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x0, 0x0, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "12345678901234567890"}}]}, 0x1}}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000300)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x1234, 0x32}, 0x2, @in=@loopback}}, 0xe4) sendto$inet(r1, &(0x7f0000000400)="00112233445566778899", 0xa, 0x0, &(0x7f0000000500)={0x2, 0x1234, @loopback}, 0x10) 3.467590335s ago: executing program 5 (id=240): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@connlabel={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) sendto$inet(r0, &(0x7f0000000100)='hello\x00', 0x5, 0x0, &(0x7f0000000200)={0x2, 0x1234, @loopback}, 0x10) 3.365081369s ago: executing program 5 (id=241): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x0, 0x18, 0x107, 0x1, 0x0, {0x1, 0x1}, [@nested={0x4}, @typed={0x10, 0x1, 0x0, 0x0, @str='ovs-dp0\x00\x00\x00\x00\x00\x00\x00\x00'}]}}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x0, 0x38, 0x107, 0x1, 0x0, {0x1, 0x1}, [@nested={0x4}, @typed={0x10, 0x1, 0x0, 0x0, @str='ovs-dp0\x00\x00\x00\x00\x00\x00\x00\x00'}]}}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x0, 0x3f, 0x107, 0x1, 0x0, {0x1, 0x1}, [@nested={0x4}, @typed={0x10, 0x1, 0x0, 0x0, @str='ovs-dp0\x00\x00\x00\x00\x00\x00\x00\x00'}]}}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x0, 0x1b, 0x107, 0x1, 0x0, {0x3, 0x1}, [@nested={0x4}, @typed={0x2e, 0x1, 0x0, 0x0, @binary="00112233445566778899aabb08004500001c000100004011f7c30a0000010a0000020050005000080000"}, @nested={0x24, 0x2, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @u32}, @typed={0x10, 0x4, 0x0, 0x0, @binary="00112233445566778899aabb"}, @typed={0x8, 0x6, 0x0, 0x0, @binary='\b\x00\x00\x00'}]}, @nested={0x30, 0x3, 0x0, 0x1, [@nested={0x4, 0xf}, @nested={0x28, 0x11, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @binary="0040010100000100"}, @typed={0x14, 0x2, 0x0, 0x0, @binary='\x00'/16}]}]}]}}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x0, 0x3b, 0x107, 0x1, 0x0, {0x3, 0x1}, [@nested={0x4}, @typed={0x2e, 0x1, 0x0, 0x0, @binary="00112233445566778899aabb08004500001c000100004011f7c30a0000010a0000020050005000080000"}, @nested={0x24, 0x2, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @u32}, @typed={0x10, 0x4, 0x0, 0x0, @binary="00112233445566778899aabb"}, @typed={0x8, 0x6, 0x0, 0x0, @binary='\b\x00\x00\x00'}]}, @nested={0x30, 0x3, 0x0, 0x1, [@nested={0x4, 0xf}, @nested={0x28, 0x11, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @binary="0040010100000100"}, @typed={0x14, 0x2, 0x0, 0x0, @binary='\x00'/16}]}]}]}}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x0, 0x42, 0x107, 0x1, 0x0, {0x3, 0x1}, [@nested={0x4}, @typed={0x2e, 0x1, 0x0, 0x0, @binary="00112233445566778899aabb08004500001c000100004011f7c30a0000010a0000020050005000080000"}, @nested={0x24, 0x2, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @u32}, @typed={0x10, 0x4, 0x0, 0x0, @binary="00112233445566778899aabb"}, @typed={0x8, 0x6, 0x0, 0x0, @binary='\b\x00\x00\x00'}]}, @nested={0x30, 0x3, 0x0, 0x1, [@nested={0x4, 0xf}, @nested={0x28, 0x11, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @binary="0040010100000100"}, @typed={0x14, 0x2, 0x0, 0x0, @binary='\x00'/16}]}]}]}}}, 0x0) 3.280772676s ago: executing program 3 (id=242): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={&(0x7f0000000100), 0x10, &(0x7f0000000200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind(r1, &(0x7f0000000400)=@in={0x2, 0x1f90, @loopback}, 0x10) listen(r1, 0x5) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect(r2, &(0x7f0000000400)=@in={0x2, 0x1f90, @loopback}, 0x10) 3.277433198s ago: executing program 2 (id=243): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='0 1\n', 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={{0x14, 0x10, 0x0, 0x0, 0x0, {0x5, 0x0, 0x0}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0x5, 0x0, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0}}}, 0x48}}, 0x0) 3.18278305s ago: executing program 5 (id=244): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000000)='10 1\x00', 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r1) r3 = getpid() sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)={0x3c, r2, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/netdevsim/del_device\x00', 0x1, 0x0) write(r4, &(0x7f0000000000)='10\x00', 0x3) 3.025256242s ago: executing program 2 (id=245): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000120)='0 1\n\x00', 0x4) nanosleep(&(0x7f0000000140)={0x0, 0x5f5e100}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x1, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0}}}, 0x48}}, 0x0) 2.139706346s ago: executing program 3 (id=247): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1ff) mount(&(0x7f0000000e40)=@filename='proc\x00', &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='\\x01020304 2000000000 0 0 0 krb5 \\x00000000ffffff7f00000000000000001100000000000000000000000000000000000000\n', 0x5d) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='tcp 2049\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000600)='1\n', 0x2) nanosleep(&(0x7f0000000700)={0x0, 0x2faf080}, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000800)={0x2, 0x801, @loopback}, 0x10) write(r3, &(0x7f0000000900)="8000005c000000010000000000000002000186a300000003000000000000000600000018000000010000000000000001000000010000000401020304000000060000001c040400ffffffffff00"/96, 0x60) nanosleep(&(0x7f0000000a00)={0x0, 0x5f5e100}, 0x0) 1.920583016s ago: executing program 1 (id=248): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000010)={0x0, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000020)={0x0, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000030)={0x0, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000050)={0x0, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000060)={0x0, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000070)={0x0, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000090)={0x0, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000a0)={0x0, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000b0)={0x0, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000d0)={0x0, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000e0)={0x0, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000f0)={0x0, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000100)={0x0, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000110)={0x0, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000120)={0x0, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000130)={0x0, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000150)={0x0, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000160)={0x0, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000170)={0x0, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0x0, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000190)={0x0, 0x0}) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x40, 0x3, 0x3}, 0x10) 1.804869177s ago: executing program 1 (id=249): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x74, 0x0, 0x1, 0x0, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x384}]}, 0x74}}, 0x0) 1.738896809s ago: executing program 1 (id=250): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x334) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@ipv4_newaddr={0x1c, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x1c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x1}}, 0x20}}, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r2, &(0x7f0000000600), 0x10) listen(r2, 0x5) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000700)=0x1, 0x4) connect$phonet_pipe(r3, &(0x7f0000000800), 0x10) sendto$phonet(r3, &(0x7f0000000900)='\x00', 0x1, 0x80, 0x0, 0x0) 1.500473562s ago: executing program 2 (id=251): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x1, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x50}}, 0x0) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x54, 0xb, 0x6, 0x1, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x5000}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}}, 0x0) 1.395230348s ago: executing program 2 (id=252): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) 1.323748524s ago: executing program 2 (id=253): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x1, 0x4) syz_emit_ethernet(0x50, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x40, 0x11, 0x0, @local, @mcast2, {[], {0x4000, 0x4e20, 0x20, 0x0, @opaque='\x00'/16}}}}}}, 0x0) syz_emit_ethernet(0x50, &(0x7f0000000200)={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x40, 0x11, 0x0, @local, @mcast2, {[], {0x4000, 0x4e20, 0x9, 0x0, @opaque="ff"}}}}}}, 0x0) syz_emit_ethernet(0x50, &(0x7f0000000300)={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x40, 0x9, 0x0, @local, @mcast2, {[], {0x4000, 0x4e20, 0x18, 0x0, @opaque="0102030405060708090a0b0c0d0e0f10"}}}}}}, 0x0) 1.184670226s ago: executing program 1 (id=254): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@loopback, {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2}, {}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@flushsa={0x14, 0x12, 0x1, 0x0, 0x0, {0x6c}}, 0x14}, 0x1, 0x0, 0x0, 0x8801}, 0x0) close(r0) clock_nanosleep(0x0, 0x0, &(0x7f0000000400)={0x0, 0x1dcd6500}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000400)={0x0, 0x1dcd6500}, 0x0) 1.183418144s ago: executing program 2 (id=255): r0 = syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ff004040b906614000000102030109023f0002010080320904000000ff0000000904000100ff0000000904010000ff0000000904010102ff000000090581020002000000090502020002000000"], 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x5f5e100}, 0x0) r1 = socket(0x8, 0x2, 0x0) setsockopt(r1, 0x108, 0x1, &(0x7f0000000080)="010000000100000001000000e8030000e8030000000200000100000001000000e8030000e80300000002000000000000", 0x2c) connect(r1, &(0x7f0000000140)=@generic={0x8}, 0x10) syz_usb_ep_write(r0, 0x81, 0x30, &(0x7f00000001c0)="0000000100"/50) 692.737006ms ago: executing program 5 (id=256): r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000100)={0x28, 0x1, 0x6, 0x1, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x8}]}, 0x28}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x1d4, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0x4, &(0x7f0000000300), {[{{@uncond, 0x0, 0x74, 0xbc, 0x0, {}, [@common=@inet=@set3={{0x48}, {{0x1, 0x1}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x20, 0x40}, @common=@unspec=@STANDARD={0x20, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x20, 0x40}, @common=@unspec=@STANDARD={0x20, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x20, 0x40}, {0x20}}}}, 0x1d4) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto(r2, &(0x7f0000000500)="1234", 0x4, 0x0, &(0x7f0000000600)=@in={0x2, 0x1234, @loopback}, 0x10) 619.039212ms ago: executing program 0 (id=257): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000040), 0x0) 452.538167ms ago: executing program 1 (id=258): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000300)=@newsa={0x0, 0x0, 0x5, 0x0, 0x0, {{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {@in=@loopback, 0x1234, 0x32}, @in=@loopback, {}, {}, {}, 0x0, 0x34ff, 0x2, 0x1}, [@algo_crypt={0x0, 0x2, {{'cbc(aes)\x00'}, 0x80, '\x00'/16}}]}}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={&(0x7f0000000500), 0xc, &(0x7f0000000600)={&(0x7f0000000700)=@newpolicy={0x0, 0x0, 0x5, 0x0, 0x0, {{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x0, 0x5, [{{@in=@loopback, 0x1234, 0x32}, 0x2, @in=@loopback, 0x34ff, 0x1}]}]}}}, 0x0) r1 = socket(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000800)=0x200, 0x4) sendto(r1, &(0x7f0000000700)='\x00', 0x1000, 0x0, &(0x7f0000000800)=@in={0x2, 0x2389, @loopback}, 0x10) 452.274786ms ago: executing program 5 (id=259): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) listen(r0, 0x5) r1 = socket$inet(0x2, 0x2, 0x11) sendto$inet(r1, &(0x7f0000000300)="000000010000000400000001000000010000000101010001000000010000000000000000", 0x24, 0x0, &(0x7f0000000100)={0x2, 0x1234, @loopback}, 0x10) nanosleep(&(0x7f0000000200)={0x0, 0x5f5e100}, 0x0) sendto$inet(r1, &(0x7f0000000400)="00000001000000040000000000000000000000020701000100000001", 0x1c, 0x0, &(0x7f0000000100)={0x2, 0x1234, @loopback}, 0x10) nanosleep(&(0x7f0000000200)={0x0, 0x5f5e100}, 0x0) sendto$inet(r1, &(0x7f0000000500)="00000001000000040000000000000000000000030701000100000001", 0x1c, 0x0, &(0x7f0000000100)={0x2, 0x1234, @loopback}, 0x10) nanosleep(&(0x7f0000000200)={0x0, 0x5f5e100}, 0x0) 440.136105ms ago: executing program 0 (id=260): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) listen(r0, 0x5) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f0000000120)=[{0x15, 0x0, 0x1, 0x54}, {0x6}, {0x6, 0x0, 0x0, 0xffff}]}, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) r2 = accept(r0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000100)={0x0, 0x0}, 0x10) 256.475756ms ago: executing program 1 (id=261): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000010)={0x0, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000020)={0x0, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000030)={0x0, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000050)={0x0, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000060)={0x0, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000070)={0x0, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000090)={0x0, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000a0)={0x0, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000b0)={0x0, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000d0)={0x0, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000e0)={0x0, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000f0)={0x0, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000100)={0x0, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000110)={0x0, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000120)={0x0, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000130)={0x0, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000150)={0x0, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000160)={0x0, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000170)={0x0, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0x0, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000190)={0x0, 0x0}) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x40, 0x3, 0x3}, 0x10) 112.607002ms ago: executing program 0 (id=262): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a0a, @empty}, 0x10) listen(r0, 0x5) r1 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='source\x00', &(0x7f0000000300)='127.0.0.1:6666:/path\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='mon_addr\x00', &(0x7f0000000500)='127.0.0.1:6666\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = accept$inet(r0, 0x0, 0x0) write(r2, &(0x7f0000000800)="636570682076303237000000000000000002001a0a7f0000010000000000000000000000000000000002001a0a7f00000100"/61, 0x41) read(r2, &(0x7f0000000900), 0x1d) write(r2, &(0x7f0000000a00)="0100"/25, 0x19) write(r2, &(0x7f0000000b00)="040000000000000000000000000000000000000000000000040000000000000000000000120000005d9e5b7201000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002001a0a7f00000100000000000000005d9e5b72", 0x55) write(r2, &(0x7f0000000c00)="2900000000000000000000000000000000000000000000002900000000000000000000002000000001000000010000000100"/76, 0x50) 84.597024ms ago: executing program 3 (id=263): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, @NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xa, 0x1, 'quota\x00'}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x1c, 0x3, '\x00'/24}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x108}}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000100)="00112233445566778899", 0xa, 0x0, &(0x7f0000000080)={0x2, 0x1234, @loopback}, 0x10) 0s ago: executing program 4 (id=264): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000030073797a6b616c6c65723000001800128008000100767266000c00028008000100e8030000"], 0x48}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'veth1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="28000000130001000200"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000700)=ANY=[@ANYBLOB="20000000130001000300"/20, @ANYRES32=r2, @ANYBLOB="0100000001000000"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000e0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000780)=ANY=[@ANYBLOB="20000000130001000300"/20, @ANYRES32=r3, @ANYBLOB="0100000001000000"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006a0)={&(0x7f00000007a0)=ANY=[@ANYBLOB="20000000130001000300"/20, @ANYRES32=r4, @ANYBLOB="0100000001000000"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000120)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="340000001400010604000000000000000a402000", @ANYRES32=r3, @ANYBLOB="14000200200100000000000000000000000000010800080020000000"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000160)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=ANY=[@ANYBLOB="340000001400010605000000000000000a402000", @ANYRES32=r2, @ANYBLOB="14000200200100000000000000000000000000020800080020000000"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001a0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000840)=ANY=[@ANYBLOB="2c0000001800010606000000000000000a000000030001000000000008000f00e803000008000400", @ANYRES32=r3], 0x2c}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000880)='veth0\x00', 0x6) sendto$inet6(r1, &(0x7f0000000900)="001122334455", 0x6, 0x0, &(0x7f0000000a00)={0xa, 0x5000, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.251' (ED25519) to the list of known hosts. [ 83.005187][ T5607] cgroup: Unknown subsys name 'net' [ 83.137021][ T5607] cgroup: Unknown subsys name 'cpuset' [ 83.147284][ T5607] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.666240][ T5607] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.351811][ T5622] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.362152][ T5626] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.373021][ T5622] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.376820][ T5632] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.380134][ T5626] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.388979][ T5632] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.394728][ T5622] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.401921][ T5632] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.408963][ T5626] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.416405][ T5632] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.430645][ T5626] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.438631][ T5626] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.438899][ T5632] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.454182][ T5632] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.455474][ T5626] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.490655][ T5632] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.499672][ T5632] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.513954][ T5626] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.523901][ T4936] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.533165][ T4936] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.543184][ T4936] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 87.550908][ T4936] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.551830][ T5626] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 87.561621][ T5628] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.566735][ T5626] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 87.573225][ T5628] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.580516][ T5626] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 87.587998][ T5628] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.596550][ T5626] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 87.602657][ T5628] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.505381][ T50] Bluetooth: hci2: command tx timeout [ 89.505384][ T5632] Bluetooth: hci0: command tx timeout [ 89.516787][ T5628] Bluetooth: hci1: command tx timeout [ 89.662568][ T5632] Bluetooth: hci5: command tx timeout [ 89.669775][ T5628] Bluetooth: hci4: command tx timeout [ 89.675603][ T50] Bluetooth: hci3: command tx timeout [ 90.125718][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.134100][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.141843][ T5627] bridge_slave_0: entered allmulticast mode [ 90.149987][ T5627] bridge_slave_0: entered promiscuous mode [ 90.230445][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.238034][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.245655][ T5627] bridge_slave_1: entered allmulticast mode [ 90.256836][ T5627] bridge_slave_1: entered promiscuous mode [ 90.271698][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.279029][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.287157][ T5621] bridge_slave_0: entered allmulticast mode [ 90.294922][ T5621] bridge_slave_0: entered promiscuous mode [ 90.309924][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.317240][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.324745][ T5620] bridge_slave_0: entered allmulticast mode [ 90.332628][ T5620] bridge_slave_0: entered promiscuous mode [ 90.386761][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.394039][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.401312][ T5621] bridge_slave_1: entered allmulticast mode [ 90.410689][ T5621] bridge_slave_1: entered promiscuous mode [ 90.431021][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.438241][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.445717][ T5620] bridge_slave_1: entered allmulticast mode [ 90.453549][ T5620] bridge_slave_1: entered promiscuous mode [ 90.555745][ T5627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.597124][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.623472][ T5627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.643035][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.665375][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.704592][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.711849][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.719831][ T5633] bridge_slave_0: entered allmulticast mode [ 90.728228][ T5633] bridge_slave_0: entered promiscuous mode [ 90.756942][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.784892][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.792340][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.799614][ T5633] bridge_slave_1: entered allmulticast mode [ 90.807254][ T5633] bridge_slave_1: entered promiscuous mode [ 90.868862][ T5620] team0: Port device team_slave_0 added [ 90.889446][ T5627] team0: Port device team_slave_0 added [ 90.934710][ T5620] team0: Port device team_slave_1 added [ 90.957336][ T5627] team0: Port device team_slave_1 added [ 90.963359][ T5634] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.970575][ T5634] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.977875][ T5634] bridge_slave_0: entered allmulticast mode [ 90.985643][ T5634] bridge_slave_0: entered promiscuous mode [ 90.996513][ T5621] team0: Port device team_slave_0 added [ 91.002439][ T5636] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.010183][ T5636] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.017409][ T5636] bridge_slave_0: entered allmulticast mode [ 91.025282][ T5636] bridge_slave_0: entered promiscuous mode [ 91.051276][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.074954][ T5634] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.082463][ T5634] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.089729][ T5634] bridge_slave_1: entered allmulticast mode [ 91.097568][ T5634] bridge_slave_1: entered promiscuous mode [ 91.106831][ T5621] team0: Port device team_slave_1 added [ 91.112626][ T5636] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.119737][ T5636] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.127293][ T5636] bridge_slave_1: entered allmulticast mode [ 91.135121][ T5636] bridge_slave_1: entered promiscuous mode [ 91.158223][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.183247][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.190212][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.216261][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.265780][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.272934][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.299422][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.344055][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.351038][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.378211][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.440413][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.447680][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.473980][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.487717][ T5633] team0: Port device team_slave_0 added [ 91.497904][ T5633] team0: Port device team_slave_1 added [ 91.508456][ T5634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.518826][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.526234][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.552451][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.567039][ T5636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.580726][ T5636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.589946][ T5628] Bluetooth: hci2: command tx timeout [ 91.592296][ T5632] Bluetooth: hci1: command tx timeout [ 91.602626][ T5628] Bluetooth: hci0: command tx timeout [ 91.638081][ T5634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.648239][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.656068][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.682877][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.722752][ T5636] team0: Port device team_slave_0 added [ 91.742327][ T5628] Bluetooth: hci3: command tx timeout [ 91.748379][ T5632] Bluetooth: hci4: command tx timeout [ 91.749033][ T50] Bluetooth: hci5: command tx timeout [ 91.803551][ T5636] team0: Port device team_slave_1 added [ 91.816564][ T5627] hsr_slave_0: entered promiscuous mode [ 91.823625][ T5627] hsr_slave_1: entered promiscuous mode [ 91.831158][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.838303][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.864239][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.941757][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.949424][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.975756][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.989337][ T5634] team0: Port device team_slave_0 added [ 92.021851][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.029016][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.071614][ T5636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.122056][ T5634] team0: Port device team_slave_1 added [ 92.140508][ T5621] hsr_slave_0: entered promiscuous mode [ 92.148022][ T5621] hsr_slave_1: entered promiscuous mode [ 92.155587][ T5621] debugfs: 'hsr0' already exists in 'hsr' [ 92.161442][ T5621] Cannot create hsr debugfs directory [ 92.190110][ T5620] hsr_slave_0: entered promiscuous mode [ 92.197101][ T5620] hsr_slave_1: entered promiscuous mode [ 92.203622][ T5620] debugfs: 'hsr0' already exists in 'hsr' [ 92.209337][ T5620] Cannot create hsr debugfs directory [ 92.216255][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.224013][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.251943][ T5636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.348892][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.356161][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.382139][ T5634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.453223][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.460244][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.486650][ T5634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.576207][ T5633] hsr_slave_0: entered promiscuous mode [ 92.582902][ T5633] hsr_slave_1: entered promiscuous mode [ 92.589364][ T5633] debugfs: 'hsr0' already exists in 'hsr' [ 92.595388][ T5633] Cannot create hsr debugfs directory [ 92.607421][ T5636] hsr_slave_0: entered promiscuous mode [ 92.613920][ T5636] hsr_slave_1: entered promiscuous mode [ 92.620138][ T5636] debugfs: 'hsr0' already exists in 'hsr' [ 92.626301][ T5636] Cannot create hsr debugfs directory [ 92.706705][ T29] cfg80211: failed to load regulatory.db [ 92.840989][ T5634] hsr_slave_0: entered promiscuous mode [ 92.848523][ T5634] hsr_slave_1: entered promiscuous mode [ 92.855081][ T5634] debugfs: 'hsr0' already exists in 'hsr' [ 92.860824][ T5634] Cannot create hsr debugfs directory [ 93.288484][ T5627] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 93.303592][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.313432][ T5627] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 93.325190][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.334086][ T5627] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 93.347728][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.395590][ T5627] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 93.406673][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.538830][ T5620] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.551523][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.564100][ T5620] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.576707][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.585208][ T5620] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.596199][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.604338][ T5620] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.615015][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.663672][ T50] Bluetooth: hci0: command tx timeout [ 93.664138][ T5628] Bluetooth: hci1: command tx timeout [ 93.669476][ T50] Bluetooth: hci2: command tx timeout [ 93.747421][ T5621] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.758565][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.770014][ T5621] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.785303][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.799144][ T5621] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.810152][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.819031][ T5621] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.822757][ T50] Bluetooth: hci5: command tx timeout [ 93.826343][ T5628] Bluetooth: hci3: command tx timeout [ 93.831297][ T50] Bluetooth: hci4: command tx timeout [ 93.846471][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.955955][ T5636] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.968257][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.976864][ T5636] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.989773][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.005786][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.016037][ T5636] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.027310][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.053944][ T5636] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.066587][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.165920][ T5633] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.176981][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.185696][ T5633] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.197683][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.205818][ T5633] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.215820][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.224352][ T5633] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.237494][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.258580][ T5627] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.302719][ T3331] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.310095][ T3331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.337560][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.384704][ T1115] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.391902][ T1115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.458424][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.495862][ T5634] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.507546][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.516533][ T5634] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.529647][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.548532][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.555709][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.568743][ T5634] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.580912][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.606737][ T5634] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.617352][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.644203][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.665391][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.672552][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.757227][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.825601][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.832817][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.881562][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.888803][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.989281][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.023387][ T5636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.121759][ T5633] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.176274][ T5636] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.187996][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.195216][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.208067][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.215320][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.294694][ T3331] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.302761][ T3331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.389214][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.396488][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.477344][ T5634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.618322][ T5634] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.682752][ T3362] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.689971][ T3362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.724948][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.744101][ T5628] Bluetooth: hci2: command tx timeout [ 95.744152][ T50] Bluetooth: hci0: command tx timeout [ 95.758793][ T5632] Bluetooth: hci1: command tx timeout [ 95.764667][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.771832][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.905143][ T50] Bluetooth: hci3: command tx timeout [ 95.910683][ T5632] Bluetooth: hci4: command tx timeout [ 95.910704][ T5628] Bluetooth: hci5: command tx timeout [ 96.451120][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.760532][ T5620] veth0_vlan: entered promiscuous mode [ 96.781465][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.831213][ T5620] veth1_vlan: entered promiscuous mode [ 97.038463][ T5627] veth0_vlan: entered promiscuous mode [ 97.119055][ T5620] veth0_macvtap: entered promiscuous mode [ 97.153602][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.190583][ T5627] veth1_vlan: entered promiscuous mode [ 97.225916][ T5620] veth1_macvtap: entered promiscuous mode [ 97.254458][ T5621] veth0_vlan: entered promiscuous mode [ 97.319834][ T5621] veth1_vlan: entered promiscuous mode [ 97.390837][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.426419][ T5627] veth0_macvtap: entered promiscuous mode [ 97.452846][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.478807][ T5627] veth1_macvtap: entered promiscuous mode [ 97.490721][ T5634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.531554][ T5636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.574467][ T1115] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.631322][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.661933][ T5621] veth0_macvtap: entered promiscuous mode [ 97.691372][ T5621] veth1_macvtap: entered promiscuous mode [ 97.703885][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.805038][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.850438][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.861533][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.874049][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.923375][ T5636] veth0_vlan: entered promiscuous mode [ 97.935120][ T5634] veth0_vlan: entered promiscuous mode [ 97.973222][ T54] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.007285][ T5636] veth1_vlan: entered promiscuous mode [ 98.031070][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.033565][ T5633] veth0_vlan: entered promiscuous mode [ 98.044936][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.076450][ T5634] veth1_vlan: entered promiscuous mode [ 98.150202][ T114] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.172640][ T114] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.185287][ T5633] veth1_vlan: entered promiscuous mode [ 98.200529][ T5620] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 98.236778][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.247367][ T377] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.251480][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.282275][ T114] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.362699][ T114] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.439533][ T114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.458821][ T5636] veth0_macvtap: entered promiscuous mode [ 98.465967][ T114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.517789][ T5858] svc: failed to register lockdv1 RPC service (errno 111). [ 98.521297][ T5636] veth1_macvtap: entered promiscuous mode [ 98.526709][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.550598][ T5634] veth0_macvtap: entered promiscuous mode [ 98.552497][ T5858] lockd_up: makesock failed, error=-111 [ 98.562964][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.574682][ T5633] veth0_macvtap: entered promiscuous mode [ 98.590814][ T5634] veth1_macvtap: entered promiscuous mode [ 98.618017][ T114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.626107][ T1115] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.638954][ T114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.659316][ T5633] veth1_macvtap: entered promiscuous mode [ 98.683900][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.740204][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.773038][ T3331] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.782070][ T3331] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.812594][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.821845][ T5858] svc: failed to register nfsdv3 RPC service (errno 111). [ 98.833380][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.851328][ T5858] svc: failed to register nfsaclv3 RPC service (errno 111). [ 98.863374][ T1115] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.866948][ T5858] failed to unregister tcp with rpcbind [ 98.887266][ T5858] svc: failed to register nfsdv3 RPC service (errno 97). [ 98.895829][ T5858] svc: failed to register nfsaclv3 RPC service (errno 97). [ 98.904397][ T5858] failed to unregister tcp with rpcbind [ 98.913932][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.936494][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.011446][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.223425][ T54] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.326864][ T54] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.476166][ T5869] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.593730][ T3331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.618315][ T3331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.667807][ T5872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8'. [ 99.669743][ T54] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.711919][ T5869] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.925373][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.951933][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.972873][ T3331] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.991868][ T3331] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.042158][ T5869] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.162415][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.188299][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.197616][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.232570][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.245945][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.332913][ T5869] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.537056][ T3331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.550390][ T3331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.560271][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.570280][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.909720][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.922375][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.535169][ T5906] ip_tables: iptables: counters copy to user failed while replacing table [ 102.067152][ T5910] NFSD: Failed to start, no listeners configured. [ 102.293802][ T54] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.502695][ T5740] FAULT_INJECTION: forcing a failure. [ 102.502695][ T5740] name failslab, interval 1, probability 100, space 0, times 10 [ 102.502838][ T5912] FAULT_INJECTION: forcing a failure. [ 102.502838][ T5912] name failslab, interval 1, probability 100, space 0, times 9 [ 102.515938][ T5621] FAULT_INJECTION: forcing a failure. [ 102.515938][ T5621] name failslab, interval 1, probability 100, space 0, times 9 [ 102.528672][ C0] FAULT_INJECTION: forcing a failure. [ 102.528672][ C0] name failslab, interval 1, probability 100, space 0, times 9 [ 102.528786][ C0] CPU: 0 UID: 0 PID: 5912 Comm: syz.4.5 Not tainted syzkaller #0 PREEMPT(full) [ 102.528815][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 102.528837][ C0] Call Trace: [ 102.528855][ C0] [ 102.528864][ C1] FAULT_INJECTION: forcing a failure. [ 102.528864][ C1] name failslab, interval 1, probability 100, space 0, times 9 [ 102.528867][ C0] dump_stack_lvl+0xe8/0x150 [ 102.528934][ C0] should_fail_ex+0x40c/0x560 [ 102.528975][ C0] should_failslab+0xa8/0x100 [ 102.529015][ C0] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 102.529048][ C0] ? local_lock_release+0x9c/0x160 [ 102.529082][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 102.529113][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 102.529144][ C0] __alloc_skb+0x1d7/0x7a0 [ 102.529172][ C0] __netdev_alloc_skb+0xc1/0x810 [ 102.529197][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.529227][ C0] ? __ieee80211_beacon_get+0x36/0x1920 [ 102.529265][ C0] __ieee80211_beacon_get+0xcfd/0x1920 [ 102.529294][ C0] ? __ieee80211_beacon_get+0x36/0x1920 [ 102.529343][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.529378][ C0] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 102.529413][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 102.529444][ C0] ? perf_trace_lock_acquire+0x1e0/0x440 [ 102.529490][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.529521][ C0] mac80211_hwsim_beacon_tx+0x378/0x820 [ 102.529558][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.529590][ C0] __iterate_interfaces+0x2af/0x5a0 [ 102.529619][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 102.529650][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 102.529680][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 102.529710][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 102.529744][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 102.529770][ C0] mac80211_hwsim_beacon+0xaf/0x240 [ 102.529794][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 102.529819][ C0] __hrtimer_run_queues+0x3bc/0xa10 [ 102.529864][ C0] hrtimer_run_softirq+0x17a/0x240 [ 102.529897][ C0] handle_softirqs+0x225/0x840 [ 102.529930][ C0] ? __irq_exit_rcu+0xca/0x220 [ 102.529966][ C0] __irq_exit_rcu+0xca/0x220 [ 102.529995][ C0] irq_exit_rcu+0x9/0x30 [ 102.530021][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 102.530052][ C0] [ 102.530060][ C0] [ 102.530070][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 102.530096][ C0] RIP: 0010:console_flush_all+0x7d2/0xaf0 [ 102.530129][ C0] Code: ff ff e8 91 2f 21 00 90 0f 0b 90 e9 9c fc ff ff e8 83 2f 21 00 e8 be 4f 2b 0a 48 85 db 74 c0 e8 74 2f 21 00 fb 48 8b 5c 24 18 <48> 8b 44 24 28 42 80 3c 20 00 4d 8d 77 58 74 08 4c 89 f7 e8 76 c8 [ 102.530152][ C0] RSP: 0000:ffffc9000408f3c0 EFLAGS: 00000293 [ 102.530178][ C0] RAX: ffffffff81a5e56c RBX: ffffc9000408f520 RCX: ffff8880312a5d00 [ 102.530195][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 102.530209][ C0] RBP: ffffc9000408f4d0 R08: ffffffff90579d37 R09: 1ffffffff20af3a6 [ 102.530225][ C0] R10: dffffc0000000000 R11: fffffbfff20af3a7 R12: dffffc0000000000 [ 102.530242][ C0] R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff8f46f8e0 [ 102.530264][ C0] ? console_flush_all+0x7cc/0xaf0 [ 102.530303][ C0] ? console_flush_all+0x123/0xaf0 [ 102.530341][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 102.530372][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.530398][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 102.530432][ C0] console_unlock+0xd1/0x1c0 [ 102.530455][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.530484][ C0] ? __pfx_console_unlock+0x10/0x10 [ 102.530506][ C0] ? vprintk_emit+0x231/0x560 [ 102.530531][ C0] ? vprintk_emit+0x455/0x560 [ 102.530554][ C0] ? vprintk_emit+0x2cf/0x560 [ 102.530575][ C0] ? vprintk_emit+0x2cf/0x560 [ 102.530600][ C0] vprintk_emit+0x485/0x560 [ 102.530627][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 102.530660][ C0] _printk+0xdd/0x130 [ 102.530685][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.530718][ C0] ? __pfx__printk+0x10/0x10 [ 102.530746][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.530775][ C0] ? ___ratelimit+0x584/0x8e0 [ 102.530804][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.530836][ C0] should_fail_ex+0x3ed/0x560 [ 102.530871][ C0] should_failslab+0xa8/0x100 [ 102.530909][ C0] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 102.530939][ C0] ? jbd2__journal_start+0x145/0x5c0 [ 102.530967][ C0] ? jbd2__journal_start+0x145/0x5c0 [ 102.530995][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.531027][ C0] jbd2__journal_start+0x145/0x5c0 [ 102.531060][ C0] __ext4_journal_start_sb+0x203/0x5d0 [ 102.531102][ C0] ext4_dirty_inode+0x93/0x110 [ 102.531134][ C0] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 102.531163][ C0] __mark_inode_dirty+0x3a8/0x13b0 [ 102.531197][ C0] file_update_time_flags+0x3ee/0x4a0 [ 102.531225][ C0] ext4_page_mkwrite+0x224/0x1140 [ 102.531269][ C0] ? __pfx_filemap_fault+0x10/0x10 [ 102.531302][ C0] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 102.531343][ C0] do_page_mkwrite+0x147/0x310 [ 102.531381][ C0] do_pte_missing+0x757/0x34b0 [ 102.531420][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.531450][ C0] ? handle_mm_fault+0xec/0x3080 [ 102.531481][ C0] handle_mm_fault+0x1b36/0x3080 [ 102.531521][ C0] ? handle_mm_fault+0xec/0x3080 [ 102.531556][ C0] ? __pfx_handle_mm_fault+0x10/0x10 [ 102.531580][ C0] ? lock_vma_under_rcu+0x45a/0x500 [ 102.531611][ C0] ? __pfx_do_futex+0x10/0x10 [ 102.531658][ C0] do_user_addr_fault+0xa4d/0x1340 [ 102.531702][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.531731][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.531758][ C0] ? trace_page_fault_user+0x84/0x1e0 [ 102.531797][ C0] exc_page_fault+0x6a/0xc0 [ 102.531831][ C0] asm_exc_page_fault+0x26/0x30 [ 102.531853][ C0] RIP: 0033:0x7fd45a0726e0 [ 102.531877][ C0] Code: 83 e6 07 0f 85 19 01 00 00 be 08 00 00 00 4c 89 ff 83 c5 01 e8 41 93 fe ff 49 8b 47 40 41 83 47 30 08 48 8d 48 f8 49 89 4f 40 <48> 89 58 f8 49 83 c5 01 45 3b 6c 24 04 0f 82 fd fe ff ff 41 80 7f [ 102.531895][ C0] RSP: 002b:00007fff8ddea860 EFLAGS: 00010202 [ 102.531913][ C0] RAX: 0000001b3441c000 RBX: ffffffff8485abe2 RCX: 0000001b3441bff8 [ 102.531929][ C0] RDX: 0000001b33e2421c RSI: 0000000000000008 RDI: 00007fd45af55720 [ 102.531944][ C0] RBP: 0000000000000057 R08: 00007fd45a410000 R09: 00007fd45a412000 [ 102.531959][ C0] R10: 000000008485abe6 R11: 000000000000000b R12: 00007fd45a426038 [ 102.531973][ C0] R13: 0000000000000056 R14: ffffffff8485a9bb R15: 00007fd45af55720 [ 102.531990][ C0] ? security_socket_getpeersec_dgram+0x7b/0x2c0 [ 102.532028][ C0] ? security_socket_getpeersec_dgram+0x2a2/0x2c0 [ 102.532075][ C0] [ 102.532136][ C1] CPU: 1 UID: 0 PID: 5621 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 102.532162][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 102.532168][ C0] FAULT_INJECTION: forcing a failure. [ 102.532168][ C0] name failslab, interval 1, probability 100, space 0, times 8 [ 102.532176][ C1] Call Trace: [ 102.532184][ C1] [ 102.532193][ C1] dump_stack_lvl+0xe8/0x150 [ 102.532231][ C1] should_fail_ex+0x40c/0x560 [ 102.532265][ C1] should_failslab+0xa8/0x100 [ 102.532302][ C1] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 102.532332][ C1] ? local_lock_release+0x9c/0x160 [ 102.532358][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 102.532380][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 102.532410][ C1] __alloc_skb+0x1d7/0x7a0 [ 102.532439][ C1] __netdev_alloc_skb+0xc1/0x810 [ 102.532464][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.532491][ C1] ? __ieee80211_beacon_get+0x36/0x1920 [ 102.532524][ C1] __ieee80211_beacon_get+0xcfd/0x1920 [ 102.532554][ C1] ? __ieee80211_beacon_get+0x36/0x1920 [ 102.532587][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.532627][ C1] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 102.532662][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 102.532693][ C1] ? perf_trace_lock_acquire+0x1e0/0x440 [ 102.532734][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.532766][ C1] mac80211_hwsim_beacon_tx+0x378/0x820 [ 102.532798][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.532830][ C1] __iterate_interfaces+0x2af/0x5a0 [ 102.532858][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 102.532888][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 102.532919][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 102.532948][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 102.532978][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 102.533003][ C1] mac80211_hwsim_beacon+0xaf/0x240 [ 102.533027][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 102.533052][ C1] __hrtimer_run_queues+0x3bc/0xa10 [ 102.533101][ C1] hrtimer_run_softirq+0x17a/0x240 [ 102.533134][ C1] handle_softirqs+0x225/0x840 [ 102.533165][ C1] ? __irq_exit_rcu+0xca/0x220 [ 102.533201][ C1] __irq_exit_rcu+0xca/0x220 [ 102.533230][ C1] irq_exit_rcu+0x9/0x30 [ 102.533255][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 102.533284][ C1] [ 102.533291][ C1] [ 102.533301][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 102.533325][ C1] RIP: 0010:vprintk_emit+0x45d/0x560 [ 102.533349][ C1] Code: 0f 84 44 ff ff ff e8 d2 6c 21 00 fb eb 44 e8 ca 6c 21 00 e8 05 8d 2b 0a 4d 85 f6 74 94 e8 bb 6c 21 00 fb 48 c7 c7 a0 bf b4 8e <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 fb 1b [ 102.533366][ C1] RSP: 0018:ffffc90002eef480 EFLAGS: 00000293 [ 102.533385][ C1] RAX: ffffffff81a5a825 RBX: ffffffff81a5a69f RCX: ffff88807f40be00 [ 102.533405][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8eb4bfa0 [ 102.533420][ C1] RBP: ffffc90002eef530 R08: ffffffff90579d37 R09: 1ffffffff20af3a6 [ 102.533436][ C1] R10: dffffc0000000000 R11: fffffbfff20af3a7 R12: 0000000000000000 [ 102.533451][ C1] R13: 0000000000000060 R14: 0000000000000200 R15: 1ffff920005dde94 [ 102.533470][ C1] ? vprintk_emit+0x2cf/0x560 [ 102.533495][ C1] ? vprintk_emit+0x455/0x560 [ 102.533528][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 102.533562][ C1] _printk+0xdd/0x130 [ 102.533593][ C1] ? __pfx__printk+0x10/0x10 [ 102.533625][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.533654][ C1] ? ___ratelimit+0x584/0x8e0 [ 102.533681][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.533715][ C1] should_fail_ex+0x3ed/0x560 [ 102.533749][ C1] should_failslab+0xa8/0x100 [ 102.533786][ C1] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 102.533817][ C1] ? vm_area_dup+0x28/0x670 [ 102.533845][ C1] ? vm_area_dup+0x28/0x670 [ 102.533882][ C1] vm_area_dup+0x28/0x670 [ 102.533911][ C1] ? dup_mmap+0x6bd/0x1d90 [ 102.533943][ C1] dup_mmap+0x8a2/0x1d90 [ 102.533990][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 102.534016][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 102.534057][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.534086][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.534120][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.534155][ C1] copy_mm+0x11a/0x480 [ 102.534186][ C1] ? copy_process+0xd3c/0x4390 [ 102.534213][ C1] copy_process+0x1e3e/0x4390 [ 102.534249][ C1] ? copy_process+0xd3c/0x4390 [ 102.534295][ C1] ? __pfx_copy_process+0x10/0x10 [ 102.534336][ C1] kernel_clone+0x2d7/0x940 [ 102.534372][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 102.534422][ C1] __x64_sys_clone+0x1b6/0x230 [ 102.534456][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 102.534507][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.534534][ C1] ? do_user_addr_fault+0xc4a/0x1340 [ 102.534577][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.534606][ C1] do_syscall_64+0x174/0x580 [ 102.534636][ C1] ? trace_irq_disable+0x3b/0x140 [ 102.534674][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.534697][ C1] RIP: 0033:0x7f118b7c6a92 [ 102.534716][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 102.534737][ C1] RSP: 002b:00007ffc9cc8bc30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 102.534758][ C1] RAX: ffffffffffffffda RBX: 00007ffc9cc8bc30 RCX: 00007f118b7c6a92 [ 102.534775][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 102.534788][ C1] RBP: 00007ffc9cc8bdbc R08: 0000000000000000 R09: 0000000000000001 [ 102.534802][ C1] R10: 000055558a0d97d0 R11: 0000000000000246 R12: 0000000000000001 [ 102.534816][ C1] R13: 000055558a0eca00 R14: 0000000000018667 R15: 00007ffc9cc8be10 [ 102.534849][ C1] [ 102.534860][ C0] CPU: 0 UID: 0 PID: 5912 Comm: syz.4.5 Not tainted syzkaller #0 PREEMPT(full) [ 102.534879][ C1] FAULT_INJECTION: forcing a failure. [ 102.534879][ C1] name failslab, interval 1, probability 100, space 0, times 7 [ 102.534883][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 102.534896][ C0] Call Trace: [ 102.534905][ C0] [ 102.534913][ C0] dump_stack_lvl+0xe8/0x150 [ 102.534949][ C0] should_fail_ex+0x40c/0x560 [ 102.534983][ C0] should_failslab+0xa8/0x100 [ 102.535020][ C0] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 102.535049][ C0] ? local_lock_release+0x9c/0x160 [ 102.535075][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 102.535103][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 102.535134][ C0] __alloc_skb+0x1d7/0x7a0 [ 102.535163][ C0] __netdev_alloc_skb+0xc1/0x810 [ 102.535188][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.535215][ C0] ? __ieee80211_beacon_get+0x36/0x1920 [ 102.535248][ C0] __ieee80211_beacon_get+0xcfd/0x1920 [ 102.535277][ C0] ? __ieee80211_beacon_get+0x36/0x1920 [ 102.535311][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.535346][ C0] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 102.535381][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 102.535413][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.535439][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 102.535468][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.535500][ C0] mac80211_hwsim_beacon_tx+0x378/0x820 [ 102.535531][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.535563][ C0] __iterate_interfaces+0x2af/0x5a0 [ 102.535590][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 102.535631][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 102.535662][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 102.535692][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 102.535726][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 102.535751][ C0] mac80211_hwsim_beacon+0xaf/0x240 [ 102.535775][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 102.535800][ C0] __hrtimer_run_queues+0x3bc/0xa10 [ 102.535844][ C0] hrtimer_run_softirq+0x17a/0x240 [ 102.535876][ C0] handle_softirqs+0x225/0x840 [ 102.535908][ C0] ? __irq_exit_rcu+0xca/0x220 [ 102.535943][ C0] __irq_exit_rcu+0xca/0x220 [ 102.535972][ C0] irq_exit_rcu+0x9/0x30 [ 102.535998][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 102.536026][ C0] [ 102.536034][ C0] [ 102.536043][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 102.536067][ C0] RIP: 0010:console_flush_all+0x7d2/0xaf0 [ 102.536094][ C0] Code: ff ff e8 91 2f 21 00 90 0f 0b 90 e9 9c fc ff ff e8 83 2f 21 00 e8 be 4f 2b 0a 48 85 db 74 c0 e8 74 2f 21 00 fb 48 8b 5c 24 18 <48> 8b 44 24 28 42 80 3c 20 00 4d 8d 77 58 74 08 4c 89 f7 e8 76 c8 [ 102.536116][ C0] RSP: 0000:ffffc9000408f3c0 EFLAGS: 00000293 [ 102.536133][ C0] RAX: ffffffff81a5e56c RBX: ffffc9000408f520 RCX: ffff8880312a5d00 [ 102.536150][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 102.536163][ C0] RBP: ffffc9000408f4d0 R08: ffffffff90579d37 R09: 1ffffffff20af3a6 [ 102.536179][ C0] R10: dffffc0000000000 R11: fffffbfff20af3a7 R12: dffffc0000000000 [ 102.536196][ C0] R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff8f46f8e0 [ 102.536218][ C0] ? console_flush_all+0x7cc/0xaf0 [ 102.536257][ C0] ? console_flush_all+0x123/0xaf0 [ 102.536289][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 102.536319][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.536346][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 102.536380][ C0] console_unlock+0xd1/0x1c0 [ 102.536403][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.536432][ C0] ? __pfx_console_unlock+0x10/0x10 [ 102.536454][ C0] ? vprintk_emit+0x231/0x560 [ 102.536479][ C0] ? vprintk_emit+0x455/0x560 [ 102.536502][ C0] ? vprintk_emit+0x2cf/0x560 [ 102.536523][ C0] ? vprintk_emit+0x2cf/0x560 [ 102.536548][ C0] vprintk_emit+0x485/0x560 [ 102.536575][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 102.536609][ C0] _printk+0xdd/0x130 [ 102.536632][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.536665][ C0] ? __pfx__printk+0x10/0x10 [ 102.536693][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.536722][ C0] ? ___ratelimit+0x584/0x8e0 [ 102.536748][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.536781][ C0] should_fail_ex+0x3ed/0x560 [ 102.536815][ C0] should_failslab+0xa8/0x100 [ 102.536851][ C0] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 102.536881][ C0] ? jbd2__journal_start+0x145/0x5c0 [ 102.536908][ C0] ? jbd2__journal_start+0x145/0x5c0 [ 102.536936][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.536971][ C0] jbd2__journal_start+0x145/0x5c0 [ 102.537004][ C0] __ext4_journal_start_sb+0x203/0x5d0 [ 102.537040][ C0] ext4_dirty_inode+0x93/0x110 [ 102.537071][ C0] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 102.537104][ C0] __mark_inode_dirty+0x3a8/0x13b0 [ 102.537138][ C0] file_update_time_flags+0x3ee/0x4a0 [ 102.537166][ C0] ext4_page_mkwrite+0x224/0x1140 [ 102.537205][ C0] ? __pfx_filemap_fault+0x10/0x10 [ 102.537237][ C0] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 102.537278][ C0] do_page_mkwrite+0x147/0x310 [ 102.537315][ C0] do_pte_missing+0x757/0x34b0 [ 102.537354][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.537383][ C0] ? handle_mm_fault+0xec/0x3080 [ 102.537414][ C0] handle_mm_fault+0x1b36/0x3080 [ 102.537454][ C0] ? handle_mm_fault+0xec/0x3080 [ 102.537489][ C0] ? __pfx_handle_mm_fault+0x10/0x10 [ 102.537513][ C0] ? lock_vma_under_rcu+0x45a/0x500 [ 102.537544][ C0] ? __pfx_do_futex+0x10/0x10 [ 102.537590][ C0] do_user_addr_fault+0xa4d/0x1340 [ 102.537632][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.537661][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.537688][ C0] ? trace_page_fault_user+0x84/0x1e0 [ 102.537726][ C0] exc_page_fault+0x6a/0xc0 [ 102.537756][ C0] asm_exc_page_fault+0x26/0x30 [ 102.537778][ C0] RIP: 0033:0x7fd45a0726e0 [ 102.537797][ C0] Code: 83 e6 07 0f 85 19 01 00 00 be 08 00 00 00 4c 89 ff 83 c5 01 e8 41 93 fe ff 49 8b 47 40 41 83 47 30 08 48 8d 48 f8 49 89 4f 40 <48> 89 58 f8 49 83 c5 01 45 3b 6c 24 04 0f 82 fd fe ff ff 41 80 7f [ 102.537815][ C0] RSP: 002b:00007fff8ddea860 EFLAGS: 00010202 [ 102.537832][ C0] RAX: 0000001b3441c000 RBX: ffffffff8485abe2 RCX: 0000001b3441bff8 [ 102.537851][ C0] RDX: 0000001b33e2421c RSI: 0000000000000008 RDI: 00007fd45af55720 [ 102.537866][ C0] RBP: 0000000000000057 R08: 00007fd45a410000 R09: 00007fd45a412000 [ 102.537881][ C0] R10: 000000008485abe6 R11: 000000000000000b R12: 00007fd45a426038 [ 102.537896][ C0] R13: 0000000000000056 R14: ffffffff8485a9bb R15: 00007fd45af55720 [ 102.537912][ C0] ? security_socket_getpeersec_dgram+0x7b/0x2c0 [ 102.537950][ C0] ? security_socket_getpeersec_dgram+0x2a2/0x2c0 [ 102.537996][ C0] [ 102.538007][ C1] CPU: 1 UID: 0 PID: 5621 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 102.538023][ C0] FAULT_INJECTION: forcing a failure. [ 102.538023][ C0] name failslab, interval 1, probability 100, space 0, times 6 [ 102.538031][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 102.538043][ C1] Call Trace: [ 102.538051][ C1] [ 102.538060][ C1] dump_stack_lvl+0xe8/0x150 [ 102.538095][ C1] should_fail_ex+0x40c/0x560 [ 102.538129][ C1] should_failslab+0xa8/0x100 [ 102.538166][ C1] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 102.538195][ C1] ? local_lock_release+0x9c/0x160 [ 102.538220][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 102.538246][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 102.538276][ C1] __alloc_skb+0x1d7/0x7a0 [ 102.538305][ C1] __netdev_alloc_skb+0xc1/0x810 [ 102.538330][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.538357][ C1] ? __ieee80211_beacon_get+0x36/0x1920 [ 102.538390][ C1] __ieee80211_beacon_get+0xcfd/0x1920 [ 102.538419][ C1] ? __ieee80211_beacon_get+0x36/0x1920 [ 102.538452][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.538486][ C1] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 102.538521][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 102.538553][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.538580][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 102.538614][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.538646][ C1] mac80211_hwsim_beacon_tx+0x378/0x820 [ 102.538677][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.538708][ C1] __iterate_interfaces+0x2af/0x5a0 [ 102.538736][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 102.538767][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 102.538797][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 102.538827][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 102.538857][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 102.538881][ C1] mac80211_hwsim_beacon+0xaf/0x240 [ 102.538905][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 102.538930][ C1] __hrtimer_run_queues+0x3bc/0xa10 [ 102.538973][ C1] hrtimer_run_softirq+0x17a/0x240 [ 102.539005][ C1] handle_softirqs+0x225/0x840 [ 102.539036][ C1] ? __irq_exit_rcu+0xca/0x220 [ 102.539072][ C1] __irq_exit_rcu+0xca/0x220 [ 102.539100][ C1] irq_exit_rcu+0x9/0x30 [ 102.539126][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 102.539154][ C1] [ 102.539162][ C1] [ 102.539171][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 102.539195][ C1] RIP: 0010:vprintk_emit+0x45d/0x560 [ 102.539218][ C1] Code: 0f 84 44 ff ff ff e8 d2 6c 21 00 fb eb 44 e8 ca 6c 21 00 e8 05 8d 2b 0a 4d 85 f6 74 94 e8 bb 6c 21 00 fb 48 c7 c7 a0 bf b4 8e <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 fb 1b [ 102.539235][ C1] RSP: 0018:ffffc90002eef480 EFLAGS: 00000293 [ 102.539253][ C1] RAX: ffffffff81a5a825 RBX: ffffffff81a5a69f RCX: ffff88807f40be00 [ 102.539270][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8eb4bfa0 [ 102.539284][ C1] RBP: ffffc90002eef530 R08: ffffffff90579d37 R09: 1ffffffff20af3a6 [ 102.539303][ C1] R10: dffffc0000000000 R11: fffffbfff20af3a7 R12: 0000000000000000 [ 102.539319][ C1] R13: 0000000000000060 R14: 0000000000000200 R15: 1ffff920005dde94 [ 102.539337][ C1] ? vprintk_emit+0x2cf/0x560 [ 102.539362][ C1] ? vprintk_emit+0x455/0x560 [ 102.539395][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 102.539429][ C1] _printk+0xdd/0x130 [ 102.539459][ C1] ? __pfx__printk+0x10/0x10 [ 102.539487][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.539519][ C1] ? ___ratelimit+0x584/0x8e0 [ 102.539545][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.539577][ C1] should_fail_ex+0x3ed/0x560 [ 102.539616][ C1] should_failslab+0xa8/0x100 [ 102.539653][ C1] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 102.539683][ C1] ? vm_area_dup+0x28/0x670 [ 102.539711][ C1] ? vm_area_dup+0x28/0x670 [ 102.539748][ C1] vm_area_dup+0x28/0x670 [ 102.539778][ C1] ? dup_mmap+0x6bd/0x1d90 [ 102.539809][ C1] dup_mmap+0x8a2/0x1d90 [ 102.539856][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 102.539887][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 102.539926][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.539956][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.539989][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.540024][ C1] copy_mm+0x11a/0x480 [ 102.540055][ C1] ? copy_process+0xd3c/0x4390 [ 102.540081][ C1] copy_process+0x1e3e/0x4390 [ 102.540118][ C1] ? copy_process+0xd3c/0x4390 [ 102.540165][ C1] ? __pfx_copy_process+0x10/0x10 [ 102.540205][ C1] kernel_clone+0x2d7/0x940 [ 102.540242][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 102.540291][ C1] __x64_sys_clone+0x1b6/0x230 [ 102.540326][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 102.540374][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.540400][ C1] ? do_user_addr_fault+0xc4a/0x1340 [ 102.540443][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.540468][ C1] do_syscall_64+0x174/0x580 [ 102.540496][ C1] ? trace_irq_disable+0x3b/0x140 [ 102.540533][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.540555][ C1] RIP: 0033:0x7f118b7c6a92 [ 102.540574][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 102.540591][ C1] RSP: 002b:00007ffc9cc8bc30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 102.540616][ C1] RAX: ffffffffffffffda RBX: 00007ffc9cc8bc30 RCX: 00007f118b7c6a92 [ 102.540632][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 102.540646][ C1] RBP: 00007ffc9cc8bdbc R08: 0000000000000000 R09: 0000000000000001 [ 102.540659][ C1] R10: 000055558a0d97d0 R11: 0000000000000246 R12: 0000000000000001 [ 102.540673][ C1] R13: 000055558a0eca00 R14: 0000000000018667 R15: 00007ffc9cc8be10 [ 102.540706][ C1] [ 102.540716][ C0] CPU: 0 UID: 0 PID: 5912 Comm: syz.4.5 Not tainted syzkaller #0 PREEMPT(full) [ 102.540734][ C1] FAULT_INJECTION: forcing a failure. [ 102.540734][ C1] name failslab, interval 1, probability 100, space 0, times 5 [ 102.540740][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 102.540752][ C0] Call Trace: [ 102.540761][ C0] [ 102.540770][ C0] dump_stack_lvl+0xe8/0x150 [ 102.540805][ C0] should_fail_ex+0x40c/0x560 [ 102.540845][ C0] should_failslab+0xa8/0x100 [ 102.540882][ C0] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 102.540912][ C0] ? local_lock_release+0x9c/0x160 [ 102.540937][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 102.540959][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 102.540990][ C0] __alloc_skb+0x1d7/0x7a0 [ 102.541018][ C0] __netdev_alloc_skb+0xc1/0x810 [ 102.541043][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.541070][ C0] ? __ieee80211_beacon_get+0x36/0x1920 [ 102.541108][ C0] __ieee80211_beacon_get+0xcfd/0x1920 [ 102.541137][ C0] ? __ieee80211_beacon_get+0x36/0x1920 [ 102.541171][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.541206][ C0] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 102.541241][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 102.541273][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.541299][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 102.541328][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.541360][ C0] mac80211_hwsim_beacon_tx+0x378/0x820 [ 102.541391][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.541429][ C0] __iterate_interfaces+0x2af/0x5a0 [ 102.541457][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 102.541487][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 102.541518][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 102.541548][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 102.541578][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 102.541603][ C0] mac80211_hwsim_beacon+0xaf/0x240 [ 102.541626][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 102.541650][ C0] __hrtimer_run_queues+0x3bc/0xa10 [ 102.541693][ C0] hrtimer_run_softirq+0x17a/0x240 [ 102.541726][ C0] handle_softirqs+0x225/0x840 [ 102.541757][ C0] ? __irq_exit_rcu+0xca/0x220 [ 102.541793][ C0] __irq_exit_rcu+0xca/0x220 [ 102.541822][ C0] irq_exit_rcu+0x9/0x30 [ 102.541848][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 102.541876][ C0] [ 102.541884][ C0] [ 102.541893][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 102.541918][ C0] RIP: 0010:console_flush_all+0x7d2/0xaf0 [ 102.541944][ C0] Code: ff ff e8 91 2f 21 00 90 0f 0b 90 e9 9c fc ff ff e8 83 2f 21 00 e8 be 4f 2b 0a 48 85 db 74 c0 e8 74 2f 21 00 fb 48 8b 5c 24 18 <48> 8b 44 24 28 42 80 3c 20 00 4d 8d 77 58 74 08 4c 89 f7 e8 76 c8 [ 102.541962][ C0] RSP: 0000:ffffc9000408f3c0 EFLAGS: 00000293 [ 102.541983][ C0] RAX: ffffffff81a5e56c RBX: ffffc9000408f520 RCX: ffff8880312a5d00 [ 102.542000][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 102.542012][ C0] RBP: ffffc9000408f4d0 R08: ffffffff90579d37 R09: 1ffffffff20af3a6 [ 102.542029][ C0] R10: dffffc0000000000 R11: fffffbfff20af3a7 R12: dffffc0000000000 [ 102.542045][ C0] R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff8f46f8e0 [ 102.542068][ C0] ? console_flush_all+0x7cc/0xaf0 [ 102.542128][ C0] ? console_flush_all+0x123/0xaf0 [ 102.542164][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 102.542195][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.542221][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 102.542256][ C0] console_unlock+0xd1/0x1c0 [ 102.542278][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.542307][ C0] ? __pfx_console_unlock+0x10/0x10 [ 102.542330][ C0] ? vprintk_emit+0x231/0x560 [ 102.542354][ C0] ? vprintk_emit+0x455/0x560 [ 102.542377][ C0] ? vprintk_emit+0x2cf/0x560 [ 102.542398][ C0] ? vprintk_emit+0x2cf/0x560 [ 102.542423][ C0] vprintk_emit+0x485/0x560 [ 102.542449][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 102.542483][ C0] _printk+0xdd/0x130 [ 102.542506][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.542539][ C0] ? __pfx__printk+0x10/0x10 [ 102.542567][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.542618][ C0] ? ___ratelimit+0x584/0x8e0 [ 102.542643][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.542675][ C0] should_fail_ex+0x3ed/0x560 [ 102.542709][ C0] should_failslab+0xa8/0x100 [ 102.542747][ C0] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 102.542777][ C0] ? jbd2__journal_start+0x145/0x5c0 [ 102.542803][ C0] ? jbd2__journal_start+0x145/0x5c0 [ 102.542831][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.542862][ C0] jbd2__journal_start+0x145/0x5c0 [ 102.542896][ C0] __ext4_journal_start_sb+0x203/0x5d0 [ 102.542931][ C0] ext4_dirty_inode+0x93/0x110 [ 102.542962][ C0] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 102.542990][ C0] __mark_inode_dirty+0x3a8/0x13b0 [ 102.543024][ C0] file_update_time_flags+0x3ee/0x4a0 [ 102.543052][ C0] ext4_page_mkwrite+0x224/0x1140 [ 102.543091][ C0] ? __pfx_filemap_fault+0x10/0x10 [ 102.543128][ C0] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 102.543169][ C0] do_page_mkwrite+0x147/0x310 [ 102.543206][ C0] do_pte_missing+0x757/0x34b0 [ 102.543245][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.543274][ C0] ? handle_mm_fault+0xec/0x3080 [ 102.543305][ C0] handle_mm_fault+0x1b36/0x3080 [ 102.543345][ C0] ? handle_mm_fault+0xec/0x3080 [ 102.543380][ C0] ? __pfx_handle_mm_fault+0x10/0x10 [ 102.543404][ C0] ? lock_vma_under_rcu+0x45a/0x500 [ 102.543434][ C0] ? __pfx_do_futex+0x10/0x10 [ 102.543480][ C0] do_user_addr_fault+0xa4d/0x1340 [ 102.543522][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.543551][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.543577][ C0] ? trace_page_fault_user+0x84/0x1e0 [ 102.543620][ C0] exc_page_fault+0x6a/0xc0 [ 102.543650][ C0] asm_exc_page_fault+0x26/0x30 [ 102.543672][ C0] RIP: 0033:0x7fd45a0726e0 [ 102.543691][ C0] Code: 83 e6 07 0f 85 19 01 00 00 be 08 00 00 00 4c 89 ff 83 c5 01 e8 41 93 fe ff 49 8b 47 40 41 83 47 30 08 48 8d 48 f8 49 89 4f 40 <48> 89 58 f8 49 83 c5 01 45 3b 6c 24 04 0f 82 fd fe ff ff 41 80 7f [ 102.543709][ C0] RSP: 002b:00007fff8ddea860 EFLAGS: 00010202 [ 102.543726][ C0] RAX: 0000001b3441c000 RBX: ffffffff8485abe2 RCX: 0000001b3441bff8 [ 102.543742][ C0] RDX: 0000001b33e2421c RSI: 0000000000000008 RDI: 00007fd45af55720 [ 102.543757][ C0] RBP: 0000000000000057 R08: 00007fd45a410000 R09: 00007fd45a412000 [ 102.543772][ C0] R10: 000000008485abe6 R11: 000000000000000b R12: 00007fd45a426038 [ 102.543787][ C0] R13: 0000000000000056 R14: ffffffff8485a9bb R15: 00007fd45af55720 [ 102.543803][ C0] ? security_socket_getpeersec_dgram+0x7b/0x2c0 [ 102.543839][ C0] ? security_socket_getpeersec_dgram+0x2a2/0x2c0 [ 102.543885][ C0] [ 102.543897][ C1] CPU: 1 UID: 0 PID: 5621 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 102.543923][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 102.543936][ C1] Call Trace: [ 102.543944][ C1] [ 102.543939][ C0] FAULT_INJECTION: forcing a failure. [ 102.543939][ C0] name failslab, interval 1, probability 100, space 0, times 4 [ 102.543953][ C1] dump_stack_lvl+0xe8/0x150 [ 102.543989][ C1] should_fail_ex+0x40c/0x560 [ 102.544023][ C1] should_failslab+0xa8/0x100 [ 102.544060][ C1] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 102.544089][ C1] ? local_lock_release+0x9c/0x160 [ 102.544119][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 102.544144][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 102.544175][ C1] __alloc_skb+0x1d7/0x7a0 [ 102.544203][ C1] __netdev_alloc_skb+0xc1/0x810 [ 102.544228][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.544255][ C1] ? __ieee80211_beacon_get+0x36/0x1920 [ 102.544288][ C1] __ieee80211_beacon_get+0xcfd/0x1920 [ 102.544317][ C1] ? __ieee80211_beacon_get+0x36/0x1920 [ 102.544351][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.544385][ C1] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 102.544420][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 102.544452][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.544478][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 102.544507][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.544538][ C1] mac80211_hwsim_beacon_tx+0x378/0x820 [ 102.544570][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.544608][ C1] __iterate_interfaces+0x2af/0x5a0 [ 102.544636][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 102.544666][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 102.544696][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 102.544726][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 102.544756][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 102.544781][ C1] mac80211_hwsim_beacon+0xaf/0x240 [ 102.544805][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 102.544832][ C1] __hrtimer_run_queues+0x3bc/0xa10 [ 102.544875][ C1] hrtimer_run_softirq+0x17a/0x240 [ 102.544907][ C1] handle_softirqs+0x225/0x840 [ 102.544938][ C1] ? __irq_exit_rcu+0xca/0x220 [ 102.544974][ C1] __irq_exit_rcu+0xca/0x220 [ 102.545002][ C1] irq_exit_rcu+0x9/0x30 [ 102.545028][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 102.545056][ C1] [ 102.545064][ C1] [ 102.545073][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 102.545097][ C1] RIP: 0010:vprintk_emit+0x45d/0x560 [ 102.545121][ C1] Code: 0f 84 44 ff ff ff e8 d2 6c 21 00 fb eb 44 e8 ca 6c 21 00 e8 05 8d 2b 0a 4d 85 f6 74 94 e8 bb 6c 21 00 fb 48 c7 c7 a0 bf b4 8e <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 fb 1b [ 102.545138][ C1] RSP: 0018:ffffc90002eef480 EFLAGS: 00000293 [ 102.545156][ C1] RAX: ffffffff81a5a825 RBX: ffffffff81a5a69f RCX: ffff88807f40be00 [ 102.545173][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8eb4bfa0 [ 102.545187][ C1] RBP: ffffc90002eef530 R08: ffffffff90579d37 R09: 1ffffffff20af3a6 [ 102.545204][ C1] R10: dffffc0000000000 R11: fffffbfff20af3a7 R12: 0000000000000000 [ 102.545219][ C1] R13: 0000000000000060 R14: 0000000000000200 R15: 1ffff920005dde94 [ 102.545237][ C1] ? vprintk_emit+0x2cf/0x560 [ 102.545262][ C1] ? vprintk_emit+0x455/0x560 [ 102.545295][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 102.545329][ C1] _printk+0xdd/0x130 [ 102.545359][ C1] ? __pfx__printk+0x10/0x10 [ 102.545387][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.545416][ C1] ? ___ratelimit+0x584/0x8e0 [ 102.545441][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.545474][ C1] should_fail_ex+0x3ed/0x560 [ 102.545507][ C1] should_failslab+0xa8/0x100 [ 102.545544][ C1] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 102.545574][ C1] ? vm_area_dup+0x28/0x670 [ 102.545608][ C1] ? vm_area_dup+0x28/0x670 [ 102.545645][ C1] vm_area_dup+0x28/0x670 [ 102.545674][ C1] ? dup_mmap+0x6bd/0x1d90 [ 102.545706][ C1] dup_mmap+0x8a2/0x1d90 [ 102.545753][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 102.545779][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 102.545819][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.545848][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.545882][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.545917][ C1] copy_mm+0x11a/0x480 [ 102.545947][ C1] ? copy_process+0xd3c/0x4390 [ 102.545974][ C1] copy_process+0x1e3e/0x4390 [ 102.546010][ C1] ? copy_process+0xd3c/0x4390 [ 102.546056][ C1] ? __pfx_copy_process+0x10/0x10 [ 102.546097][ C1] kernel_clone+0x2d7/0x940 [ 102.546134][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 102.546183][ C1] __x64_sys_clone+0x1b6/0x230 [ 102.546220][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 102.546268][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.546294][ C1] ? do_user_addr_fault+0xc4a/0x1340 [ 102.546337][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.546362][ C1] do_syscall_64+0x174/0x580 [ 102.546391][ C1] ? trace_irq_disable+0x3b/0x140 [ 102.546428][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.546451][ C1] RIP: 0033:0x7f118b7c6a92 [ 102.546470][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 102.546490][ C1] RSP: 002b:00007ffc9cc8bc30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 102.546511][ C1] RAX: ffffffffffffffda RBX: 00007ffc9cc8bc30 RCX: 00007f118b7c6a92 [ 102.546527][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 102.546540][ C1] RBP: 00007ffc9cc8bdbc R08: 0000000000000000 R09: 0000000000000001 [ 102.546554][ C1] R10: 000055558a0d97d0 R11: 0000000000000246 R12: 0000000000000001 [ 102.546568][ C1] R13: 000055558a0eca00 R14: 0000000000018667 R15: 00007ffc9cc8be10 [ 102.546609][ C1] [ 102.546619][ C0] CPU: 0 UID: 0 PID: 5912 Comm: syz.4.5 Not tainted syzkaller #0 PREEMPT(full) [ 102.546635][ C1] FAULT_INJECTION: forcing a failure. [ 102.546635][ C1] name failslab, interval 1, probability 100, space 0, times 3 [ 102.546644][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 102.546658][ C0] Call Trace: [ 102.546666][ C0] [ 102.546675][ C0] dump_stack_lvl+0xe8/0x150 [ 102.546709][ C0] should_fail_ex+0x40c/0x560 [ 102.546743][ C0] should_failslab+0xa8/0x100 [ 102.546780][ C0] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 102.546809][ C0] ? local_lock_release+0x9c/0x160 [ 102.546835][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 102.546857][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 102.546887][ C0] __alloc_skb+0x1d7/0x7a0 [ 102.546916][ C0] __netdev_alloc_skb+0xc1/0x810 [ 102.546941][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.546968][ C0] ? __ieee80211_beacon_get+0x36/0x1920 [ 102.547001][ C0] __ieee80211_beacon_get+0xcfd/0x1920 [ 102.547030][ C0] ? __ieee80211_beacon_get+0x36/0x1920 [ 102.547083][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.547122][ C0] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 102.547157][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 102.547190][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.547216][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 102.547245][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.547277][ C0] mac80211_hwsim_beacon_tx+0x378/0x820 [ 102.547308][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.547349][ C0] __iterate_interfaces+0x2af/0x5a0 [ 102.547377][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 102.547407][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 102.547438][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 102.547472][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 102.547503][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 102.547527][ C0] mac80211_hwsim_beacon+0xaf/0x240 [ 102.547551][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 102.547576][ C0] __hrtimer_run_queues+0x3bc/0xa10 [ 102.547620][ C0] hrtimer_run_softirq+0x17a/0x240 [ 102.547652][ C0] handle_softirqs+0x225/0x840 [ 102.547683][ C0] ? __irq_exit_rcu+0xca/0x220 [ 102.547719][ C0] __irq_exit_rcu+0xca/0x220 [ 102.547747][ C0] irq_exit_rcu+0x9/0x30 [ 102.547773][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 102.547801][ C0] [ 102.547809][ C0] [ 102.547818][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 102.547843][ C0] RIP: 0010:console_flush_all+0x7d2/0xaf0 [ 102.547869][ C0] Code: ff ff e8 91 2f 21 00 90 0f 0b 90 e9 9c fc ff ff e8 83 2f 21 00 e8 be 4f 2b 0a 48 85 db 74 c0 e8 74 2f 21 00 fb 48 8b 5c 24 18 <48> 8b 44 24 28 42 80 3c 20 00 4d 8d 77 58 74 08 4c 89 f7 e8 76 c8 [ 102.547887][ C0] RSP: 0000:ffffc9000408f3c0 EFLAGS: 00000293 [ 102.547905][ C0] RAX: ffffffff81a5e56c RBX: ffffc9000408f520 RCX: ffff8880312a5d00 [ 102.547922][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 102.547934][ C0] RBP: ffffc9000408f4d0 R08: ffffffff90579d37 R09: 1ffffffff20af3a6 [ 102.547951][ C0] R10: dffffc0000000000 R11: fffffbfff20af3a7 R12: dffffc0000000000 [ 102.547968][ C0] R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff8f46f8e0 [ 102.547990][ C0] ? console_flush_all+0x7cc/0xaf0 [ 102.548028][ C0] ? console_flush_all+0x123/0xaf0 [ 102.548060][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 102.548090][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.548121][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 102.548156][ C0] console_unlock+0xd1/0x1c0 [ 102.548179][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.548207][ C0] ? __pfx_console_unlock+0x10/0x10 [ 102.548230][ C0] ? vprintk_emit+0x231/0x560 [ 102.548254][ C0] ? vprintk_emit+0x455/0x560 [ 102.548277][ C0] ? vprintk_emit+0x2cf/0x560 [ 102.548298][ C0] ? vprintk_emit+0x2cf/0x560 [ 102.548323][ C0] vprintk_emit+0x485/0x560 [ 102.548350][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 102.548383][ C0] _printk+0xdd/0x130 [ 102.548409][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.548443][ C0] ? __pfx__printk+0x10/0x10 [ 102.548470][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.548499][ C0] ? ___ratelimit+0x584/0x8e0 [ 102.548525][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.548557][ C0] should_fail_ex+0x3ed/0x560 [ 102.548591][ C0] should_failslab+0xa8/0x100 [ 102.548628][ C0] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 102.548659][ C0] ? jbd2__journal_start+0x145/0x5c0 [ 102.548685][ C0] ? jbd2__journal_start+0x145/0x5c0 [ 102.548715][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.548747][ C0] jbd2__journal_start+0x145/0x5c0 [ 102.548781][ C0] __ext4_journal_start_sb+0x203/0x5d0 [ 102.548816][ C0] ext4_dirty_inode+0x93/0x110 [ 102.548846][ C0] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 102.548875][ C0] __mark_inode_dirty+0x3a8/0x13b0 [ 102.548908][ C0] file_update_time_flags+0x3ee/0x4a0 [ 102.548936][ C0] ext4_page_mkwrite+0x224/0x1140 [ 102.548979][ C0] ? __pfx_filemap_fault+0x10/0x10 [ 102.549010][ C0] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 102.549051][ C0] do_page_mkwrite+0x147/0x310 [ 102.549088][ C0] do_pte_missing+0x757/0x34b0 [ 102.549131][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.549161][ C0] ? handle_mm_fault+0xec/0x3080 [ 102.549191][ C0] handle_mm_fault+0x1b36/0x3080 [ 102.549231][ C0] ? handle_mm_fault+0xec/0x3080 [ 102.549266][ C0] ? __pfx_handle_mm_fault+0x10/0x10 [ 102.549294][ C0] ? lock_vma_under_rcu+0x45a/0x500 [ 102.549338][ C0] ? __pfx_do_futex+0x10/0x10 [ 102.549383][ C0] do_user_addr_fault+0xa4d/0x1340 [ 102.549425][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.549454][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.549481][ C0] ? trace_page_fault_user+0x84/0x1e0 [ 102.549520][ C0] exc_page_fault+0x6a/0xc0 [ 102.549550][ C0] asm_exc_page_fault+0x26/0x30 [ 102.549572][ C0] RIP: 0033:0x7fd45a0726e0 [ 102.549590][ C0] Code: 83 e6 07 0f 85 19 01 00 00 be 08 00 00 00 4c 89 ff 83 c5 01 e8 41 93 fe ff 49 8b 47 40 41 83 47 30 08 48 8d 48 f8 49 89 4f 40 <48> 89 58 f8 49 83 c5 01 45 3b 6c 24 04 0f 82 fd fe ff ff 41 80 7f [ 102.549608][ C0] RSP: 002b:00007fff8ddea860 EFLAGS: 00010202 [ 102.549625][ C0] RAX: 0000001b3441c000 RBX: ffffffff8485abe2 RCX: 0000001b3441bff8 [ 102.549641][ C0] RDX: 0000001b33e2421c RSI: 0000000000000008 RDI: 00007fd45af55720 [ 102.549656][ C0] RBP: 0000000000000057 R08: 00007fd45a410000 R09: 00007fd45a412000 [ 102.549671][ C0] R10: 000000008485abe6 R11: 000000000000000b R12: 00007fd45a426038 [ 102.549686][ C0] R13: 0000000000000056 R14: ffffffff8485a9bb R15: 00007fd45af55720 [ 102.549702][ C0] ? security_socket_getpeersec_dgram+0x7b/0x2c0 [ 102.549738][ C0] ? security_socket_getpeersec_dgram+0x2a2/0x2c0 [ 102.549784][ C0] [ 102.549795][ C1] CPU: 1 UID: 0 PID: 5621 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 102.549818][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 102.549831][ C1] Call Trace: [ 102.549839][ C1] [ 102.549848][ C1] dump_stack_lvl+0xe8/0x150 [ 102.549885][ C1] should_fail_ex+0x40c/0x560 [ 102.549921][ C1] should_failslab+0xa8/0x100 [ 102.549959][ C1] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 102.549990][ C1] ? local_lock_release+0x9c/0x160 [ 102.550017][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 102.550046][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 102.550049][ C0] FAULT_INJECTION: forcing a failure. [ 102.550049][ C0] name failslab, interval 1, probability 100, space 0, times 2 [ 102.550078][ C1] __alloc_skb+0x1d7/0x7a0 [ 102.550110][ C1] __netdev_alloc_skb+0xc1/0x810 [ 102.550136][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.550163][ C1] ? __ieee80211_beacon_get+0x36/0x1920 [ 102.550196][ C1] __ieee80211_beacon_get+0xcfd/0x1920 [ 102.550225][ C1] ? __ieee80211_beacon_get+0x36/0x1920 [ 102.550259][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.550293][ C1] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 102.550328][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 102.550360][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.550386][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 102.550415][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.550447][ C1] mac80211_hwsim_beacon_tx+0x378/0x820 [ 102.550478][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.550510][ C1] __iterate_interfaces+0x2af/0x5a0 [ 102.550537][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 102.550567][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 102.550602][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 102.550632][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 102.550662][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 102.550690][ C1] mac80211_hwsim_beacon+0xaf/0x240 [ 102.550714][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 102.550739][ C1] __hrtimer_run_queues+0x3bc/0xa10 [ 102.550782][ C1] hrtimer_run_softirq+0x17a/0x240 [ 102.550815][ C1] handle_softirqs+0x225/0x840 [ 102.550846][ C1] ? __irq_exit_rcu+0xca/0x220 [ 102.550882][ C1] __irq_exit_rcu+0xca/0x220 [ 102.550910][ C1] irq_exit_rcu+0x9/0x30 [ 102.550936][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 102.550964][ C1] [ 102.550972][ C1] [ 102.550980][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 102.551005][ C1] RIP: 0010:vprintk_emit+0x45d/0x560 [ 102.551028][ C1] Code: 0f 84 44 ff ff ff e8 d2 6c 21 00 fb eb 44 e8 ca 6c 21 00 e8 05 8d 2b 0a 4d 85 f6 74 94 e8 bb 6c 21 00 fb 48 c7 c7 a0 bf b4 8e <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 fb 1b [ 102.551046][ C1] RSP: 0018:ffffc90002eef480 EFLAGS: 00000293 [ 102.551064][ C1] RAX: ffffffff81a5a825 RBX: ffffffff81a5a69f RCX: ffff88807f40be00 [ 102.551081][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8eb4bfa0 [ 102.551095][ C1] RBP: ffffc90002eef530 R08: ffffffff90579d37 R09: 1ffffffff20af3a6 [ 102.551112][ C1] R10: dffffc0000000000 R11: fffffbfff20af3a7 R12: 0000000000000000 [ 102.551127][ C1] R13: 0000000000000060 R14: 0000000000000200 R15: 1ffff920005dde94 [ 102.551146][ C1] ? vprintk_emit+0x2cf/0x560 [ 102.551170][ C1] ? vprintk_emit+0x455/0x560 [ 102.551203][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 102.551237][ C1] _printk+0xdd/0x130 [ 102.551268][ C1] ? __pfx__printk+0x10/0x10 [ 102.551303][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.551332][ C1] ? ___ratelimit+0x584/0x8e0 [ 102.551358][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.551390][ C1] should_fail_ex+0x3ed/0x560 [ 102.551424][ C1] should_failslab+0xa8/0x100 [ 102.551461][ C1] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 102.551491][ C1] ? vm_area_dup+0x28/0x670 [ 102.551519][ C1] ? vm_area_dup+0x28/0x670 [ 102.551556][ C1] vm_area_dup+0x28/0x670 [ 102.551585][ C1] ? dup_mmap+0x6bd/0x1d90 [ 102.551621][ C1] dup_mmap+0x8a2/0x1d90 [ 102.551668][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 102.551695][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 102.551734][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.551763][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.551798][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.551832][ C1] copy_mm+0x11a/0x480 [ 102.551862][ C1] ? copy_process+0xd3c/0x4390 [ 102.551889][ C1] copy_process+0x1e3e/0x4390 [ 102.551925][ C1] ? copy_process+0xd3c/0x4390 [ 102.551971][ C1] ? __pfx_copy_process+0x10/0x10 [ 102.552012][ C1] kernel_clone+0x2d7/0x940 [ 102.552049][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 102.552104][ C1] __x64_sys_clone+0x1b6/0x230 [ 102.552141][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 102.552189][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.552217][ C1] ? do_user_addr_fault+0xc4a/0x1340 [ 102.552260][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.552285][ C1] do_syscall_64+0x174/0x580 [ 102.552314][ C1] ? trace_irq_disable+0x3b/0x140 [ 102.552350][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.552373][ C1] RIP: 0033:0x7f118b7c6a92 [ 102.552392][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 102.552409][ C1] RSP: 002b:00007ffc9cc8bc30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 102.552430][ C1] RAX: ffffffffffffffda RBX: 00007ffc9cc8bc30 RCX: 00007f118b7c6a92 [ 102.552446][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 102.552459][ C1] RBP: 00007ffc9cc8bdbc R08: 0000000000000000 R09: 0000000000000001 [ 102.552473][ C1] R10: 000055558a0d97d0 R11: 0000000000000246 R12: 0000000000000001 [ 102.552487][ C1] R13: 000055558a0eca00 R14: 0000000000018667 R15: 00007ffc9cc8be10 [ 102.552520][ C1] [ 102.552531][ C0] CPU: 0 UID: 0 PID: 5627 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 102.552558][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 102.552571][ C0] Call Trace: [ 102.552579][ C0] [ 102.552578][ C1] FAULT_INJECTION: forcing a failure. [ 102.552578][ C1] name failslab, interval 1, probability 100, space 0, times 1 [ 102.552589][ C0] dump_stack_lvl+0xe8/0x150 [ 102.552629][ C0] should_fail_ex+0x40c/0x560 [ 102.552663][ C0] should_failslab+0xa8/0x100 [ 102.552700][ C0] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 102.552737][ C0] ? local_lock_release+0x9c/0x160 [ 102.552763][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 102.552785][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 102.552816][ C0] __alloc_skb+0x1d7/0x7a0 [ 102.552845][ C0] __netdev_alloc_skb+0xc1/0x810 [ 102.552869][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.552896][ C0] ? __lock_acquire+0x683/0x2cf0 [ 102.552932][ C0] hsr_init_skb+0xf3/0x6d0 [ 102.552958][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.552990][ C0] send_hsr_supervision_frame+0x195/0xcf0 [ 102.553024][ C0] ? __pfx_send_hsr_supervision_frame+0x10/0x10 [ 102.553051][ C0] hsr_announce+0x1db/0x370 [ 102.553074][ C0] ? hsr_announce+0x89/0x370 [ 102.553097][ C0] ? __pfx_hsr_announce+0x10/0x10 [ 102.553126][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 102.553160][ C0] call_timer_fn+0x192/0x5e0 [ 102.553182][ C0] ? __pfx_hsr_announce+0x10/0x10 [ 102.553203][ C0] ? call_timer_fn+0xd4/0x5e0 [ 102.553223][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 102.553252][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.553281][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 102.553307][ C0] ? __pfx_hsr_announce+0x10/0x10 [ 102.553332][ C0] __run_timer_base+0x652/0x8b0 [ 102.553381][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 102.553424][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.553455][ C0] run_timer_softirq+0xb7/0x170 [ 102.553490][ C0] handle_softirqs+0x225/0x840 [ 102.553522][ C0] ? do_softirq+0x76/0xd0 [ 102.553554][ C0] ? do_ip_setsockopt+0x1cb6/0x2e30 [ 102.553585][ C0] do_softirq+0x76/0xd0 [ 102.553611][ C0] [ 102.553618][ C0] [ 102.553627][ C0] __local_bh_enable_ip+0xf8/0x130 [ 102.553656][ C0] do_ip_setsockopt+0x1cb6/0x2e30 [ 102.553691][ C0] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 102.553721][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.553753][ C0] ? aa_sk_perm+0x6d5/0x900 [ 102.553778][ C0] ? __pfx_handle_mm_fault+0x10/0x10 [ 102.553811][ C0] ? __pfx_aa_sk_perm+0x10/0x10 [ 102.553838][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.553865][ C0] ? aa_sock_opt_perm+0xff/0x1a0 [ 102.553895][ C0] ip_setsockopt+0x66/0x110 [ 102.553923][ C0] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 102.553963][ C0] do_sock_setsockopt+0x17c/0x1b0 [ 102.553999][ C0] __x64_sys_setsockopt+0x13d/0x1b0 [ 102.554029][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.554055][ C0] do_syscall_64+0x174/0x580 [ 102.554084][ C0] ? trace_irq_disable+0x3b/0x140 [ 102.554124][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.554147][ C0] RIP: 0033:0x7f1945b9f85a [ 102.554167][ C0] Code: 48 83 ec 10 48 63 c9 48 63 ff 45 89 c9 6a 2c e8 6c 99 fb ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 49 89 ca b8 36 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 [ 102.554185][ C0] RSP: 002b:00007fffc30647d8 EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 102.554206][ C0] RAX: ffffffffffffffda RBX: 00007fffc3064860 RCX: 00007f1945b9f85a [ 102.554222][ C0] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 102.554235][ C0] RBP: 0000000000000003 R08: 00000000000002d8 R09: 0000000000000000 [ 102.554248][ C0] R10: 00007f1945df0020 R11: 0000000000000206 R12: 00007f1945deffc0 [ 102.554263][ C0] R13: 00007fffc30647fc R14: 0000000000000000 R15: 00007f1945df2180 [ 102.554296][ C0] [ 102.554307][ C0] hsr0: HSR: Could not send supervision frame [ 102.554306][ C1] CPU: 1 UID: 0 PID: 5621 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 102.554330][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 102.554342][ C1] Call Trace: [ 102.554350][ C1] [ 102.554358][ C1] dump_stack_lvl+0xe8/0x150 [ 102.554395][ C1] should_fail_ex+0x40c/0x560 [ 102.554437][ C1] should_failslab+0xa8/0x100 [ 102.554476][ C1] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 102.554504][ C1] ? local_lock_release+0x9c/0x160 [ 102.554529][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 102.554553][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 102.554583][ C1] __alloc_skb+0x1d7/0x7a0 [ 102.554618][ C1] __netdev_alloc_skb+0xc1/0x810 [ 102.554645][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.554675][ C1] ? __ieee80211_beacon_get+0x36/0x1920 [ 102.554711][ C1] __ieee80211_beacon_get+0xcfd/0x1920 [ 102.554742][ C1] ? __ieee80211_beacon_get+0x36/0x1920 [ 102.554779][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.554813][ C1] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 102.554849][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 102.554884][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.554912][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 102.554940][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.554976][ C1] mac80211_hwsim_beacon_tx+0x378/0x820 [ 102.555006][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.555038][ C1] __iterate_interfaces+0x2af/0x5a0 [ 102.555068][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 102.555099][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 102.555132][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 102.555162][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 102.555193][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 102.555224][ C1] mac80211_hwsim_beacon+0xaf/0x240 [ 102.555250][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 102.555275][ C1] __hrtimer_run_queues+0x3bc/0xa10 [ 102.555319][ C1] hrtimer_run_softirq+0x17a/0x240 [ 102.555351][ C1] handle_softirqs+0x225/0x840 [ 102.555381][ C1] ? __irq_exit_rcu+0xca/0x220 [ 102.555415][ C1] __irq_exit_rcu+0xca/0x220 [ 102.555443][ C1] irq_exit_rcu+0x9/0x30 [ 102.555470][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 102.555500][ C1] [ 102.555508][ C1] [ 102.555518][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 102.555545][ C1] RIP: 0010:vprintk_emit+0x45d/0x560 [ 102.555571][ C1] Code: 0f 84 44 ff ff ff e8 d2 6c 21 00 fb eb 44 e8 ca 6c 21 00 e8 05 8d 2b 0a 4d 85 f6 74 94 e8 bb 6c 21 00 fb 48 c7 c7 a0 bf b4 8e <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 fb 1b [ 102.555590][ C1] RSP: 0018:ffffc90002eef480 EFLAGS: 00000293 [ 102.555618][ C1] RAX: ffffffff81a5a825 RBX: ffffffff81a5a69f RCX: ffff88807f40be00 [ 102.555636][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8eb4bfa0 [ 102.555651][ C1] RBP: ffffc90002eef530 R08: ffffffff90579d37 R09: 1ffffffff20af3a6 [ 102.555669][ C1] R10: dffffc0000000000 R11: fffffbfff20af3a7 R12: 0000000000000000 [ 102.555686][ C1] R13: 0000000000000060 R14: 0000000000000200 R15: 1ffff920005dde94 [ 102.555707][ C1] ? vprintk_emit+0x2cf/0x560 [ 102.555735][ C1] ? vprintk_emit+0x455/0x560 [ 102.555772][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 102.555808][ C1] _printk+0xdd/0x130 [ 102.555840][ C1] ? __pfx__printk+0x10/0x10 [ 102.555869][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.555901][ C1] ? ___ratelimit+0x584/0x8e0 [ 102.555930][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.555966][ C1] should_fail_ex+0x3ed/0x560 [ 102.556003][ C1] should_failslab+0xa8/0x100 [ 102.556044][ C1] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 102.556077][ C1] ? vm_area_dup+0x28/0x670 [ 102.556108][ C1] ? vm_area_dup+0x28/0x670 [ 102.556148][ C1] vm_area_dup+0x28/0x670 [ 102.556180][ C1] ? dup_mmap+0x6bd/0x1d90 [ 102.556215][ C1] dup_mmap+0x8a2/0x1d90 [ 102.556267][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 102.556297][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 102.556340][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.556373][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.556410][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.556448][ C1] copy_mm+0x11a/0x480 [ 102.556481][ C1] ? copy_process+0xd3c/0x4390 [ 102.556510][ C1] copy_process+0x1e3e/0x4390 [ 102.556551][ C1] ? copy_process+0xd3c/0x4390 [ 102.556607][ C1] ? __pfx_copy_process+0x10/0x10 [ 102.556653][ C1] kernel_clone+0x2d7/0x940 [ 102.556697][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 102.556752][ C1] __x64_sys_clone+0x1b6/0x230 [ 102.556790][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 102.556843][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.556872][ C1] ? do_user_addr_fault+0xc4a/0x1340 [ 102.556920][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.556947][ C1] do_syscall_64+0x174/0x580 [ 102.556979][ C1] ? trace_irq_disable+0x3b/0x140 [ 102.557017][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.557042][ C1] RIP: 0033:0x7f118b7c6a92 [ 102.557063][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 102.557083][ C1] RSP: 002b:00007ffc9cc8bc30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 102.557106][ C1] RAX: ffffffffffffffda RBX: 00007ffc9cc8bc30 RCX: 00007f118b7c6a92 [ 102.557124][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 102.557139][ C1] RBP: 00007ffc9cc8bdbc R08: 0000000000000000 R09: 0000000000000001 [ 102.557154][ C1] R10: 000055558a0d97d0 R11: 0000000000000246 R12: 0000000000000001 [ 102.557169][ C1] R13: 000055558a0eca00 R14: 0000000000018667 R15: 00007ffc9cc8be10 [ 102.557205][ C1] [ 102.659781][ T5912] CPU: 0 UID: 0 PID: 5912 Comm: syz.4.5 Not tainted syzkaller #0 PREEMPT(full) [ 102.659828][ T5912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 102.659843][ T5912] Call Trace: [ 102.659855][ T5912] [ 102.659866][ T5912] dump_stack_lvl+0xe8/0x150 [ 102.659920][ T5912] should_fail_ex+0x40c/0x560 [ 102.659963][ T5912] should_failslab+0xa8/0x100 [ 102.660012][ T5912] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 102.660048][ T5912] ? jbd2__journal_start+0x145/0x5c0 [ 102.660079][ T5912] ? jbd2__journal_start+0x145/0x5c0 [ 102.660119][ T5912] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.660157][ T5912] jbd2__journal_start+0x145/0x5c0 [ 102.660193][ T5912] __ext4_journal_start_sb+0x203/0x5d0 [ 102.660235][ T5912] ext4_dirty_inode+0x93/0x110 [ 102.660273][ T5912] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 102.660305][ T5912] __mark_inode_dirty+0x3a8/0x13b0 [ 102.660342][ T5912] file_update_time_flags+0x3ee/0x4a0 [ 102.660377][ T5912] ext4_page_mkwrite+0x224/0x1140 [ 102.660421][ T5912] ? __pfx_filemap_fault+0x10/0x10 [ 102.660458][ T5912] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 102.660504][ T5912] do_page_mkwrite+0x147/0x310 [ 102.660546][ T5912] do_pte_missing+0x757/0x34b0 [ 102.660589][ T5912] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.660621][ T5912] ? handle_mm_fault+0xec/0x3080 [ 102.660654][ T5912] handle_mm_fault+0x1b36/0x3080 [ 102.660698][ T5912] ? handle_mm_fault+0xec/0x3080 [ 102.660738][ T5912] ? __pfx_handle_mm_fault+0x10/0x10 [ 102.660764][ T5912] ? lock_vma_under_rcu+0x45a/0x500 [ 102.660804][ T5912] ? __pfx_do_futex+0x10/0x10 [ 102.660857][ T5912] do_user_addr_fault+0xa4d/0x1340 [ 102.660906][ T5912] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.660937][ T5912] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.660965][ T5912] ? trace_page_fault_user+0x84/0x1e0 [ 102.661007][ T5912] exc_page_fault+0x6a/0xc0 [ 102.661044][ T5912] asm_exc_page_fault+0x26/0x30 [ 102.661069][ T5912] RIP: 0033:0x7fd45a0726e0 [ 102.661093][ T5912] Code: 83 e6 07 0f 85 19 01 00 00 be 08 00 00 00 4c 89 ff 83 c5 01 e8 41 93 fe ff 49 8b 47 40 41 83 47 30 08 48 8d 48 f8 49 89 4f 40 <48> 89 58 f8 49 83 c5 01 45 3b 6c 24 04 0f 82 fd fe ff ff 41 80 7f [ 102.661119][ T5912] RSP: 002b:00007fff8ddea860 EFLAGS: 00010202 [ 102.661142][ T5912] RAX: 0000001b3441c000 RBX: ffffffff8485abe2 RCX: 0000001b3441bff8 [ 102.661160][ T5912] RDX: 0000001b33e2421c RSI: 0000000000000008 RDI: 00007fd45af55720 [ 102.661177][ T5912] RBP: 0000000000000057 R08: 00007fd45a410000 R09: 00007fd45a412000 [ 102.661194][ T5912] R10: 000000008485abe6 R11: 000000000000000b R12: 00007fd45a426038 [ 102.661210][ T5912] R13: 0000000000000056 R14: ffffffff8485a9bb R15: 00007fd45af55720 [ 102.661229][ T5912] ? security_socket_getpeersec_dgram+0x7b/0x2c0 [ 102.661269][ T5912] ? security_socket_getpeersec_dgram+0x2a2/0x2c0 [ 102.661319][ T5912] [ 102.722281][ T5740] CPU: 0 UID: 0 PID: 5740 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 102.722317][ T5740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 102.722332][ T5740] Call Trace: [ 102.722343][ T5740] [ 102.722353][ T5740] dump_stack_lvl+0xe8/0x150 [ 102.722402][ T5740] should_fail_ex+0x40c/0x560 [ 102.722450][ T5740] should_failslab+0xa8/0x100 [ 102.722493][ T5740] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 102.722524][ T5740] ? __se_sys_flock+0x500/0x650 [ 102.722563][ T5740] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.722593][ T5740] ? do_getname+0x2e/0x250 [ 102.722623][ T5740] ? do_getname+0x2e/0x250 [ 102.722661][ T5740] do_getname+0x2e/0x250 [ 102.722690][ T5740] ? getname_flags+0x11/0x20 [ 102.722724][ T5740] do_sys_openat2+0xcc/0x200 [ 102.722763][ T5740] ? __pfx_do_sys_openat2+0x10/0x10 [ 102.722806][ T5740] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.722839][ T5740] __x64_sys_openat+0x138/0x170 [ 102.722878][ T5740] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.722904][ T5740] do_syscall_64+0x174/0x580 [ 102.722947][ T5740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.722973][ T5740] RIP: 0033:0x7f05298a7407 [ 102.722997][ T5740] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 102.723017][ T5740] RSP: 002b:00007ffc9a76e4a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 102.723043][ T5740] RAX: ffffffffffffffda RBX: 00007f0529f71880 RCX: 00007f05298a7407 [ 102.723061][ T5740] RDX: 0000000000080000 RSI: 00007ffc9a76e620 RDI: ffffffffffffff9c [ 102.723078][ T5740] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 102.723099][ T5740] R10: 0000000000000000 R11: 0000000000000202 R12: 000055be498567f5 [ 102.723114][ T5740] R13: 000055be498567f5 R14: 0000000000000001 R15: 000055be49871140 [ 102.723159][ T5740] [ 103.008214][ T5919] Zero length message leads to an empty skb [ 103.017013][ T5621] CPU: 1 UID: 0 PID: 5621 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 103.017048][ T5621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 103.017074][ T5621] Call Trace: [ 103.017085][ T5621] [ 103.017096][ T5621] dump_stack_lvl+0xe8/0x150 [ 103.017146][ T5621] should_fail_ex+0x40c/0x560 [ 103.017189][ T5621] should_failslab+0xa8/0x100 [ 103.017232][ T5621] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 103.017267][ T5621] ? vm_area_dup+0x28/0x670 [ 103.017300][ T5621] ? vm_area_dup+0x28/0x670 [ 103.017341][ T5621] vm_area_dup+0x28/0x670 [ 103.017372][ T5621] ? dup_mmap+0x6bd/0x1d90 [ 103.017407][ T5621] dup_mmap+0x8a2/0x1d90 [ 103.017460][ T5621] ? __pfx_dup_mmap+0x10/0x10 [ 103.017489][ T5621] ? do_raw_spin_lock+0x12b/0x2f0 [ 103.017536][ T5621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 103.017569][ T5621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 103.017607][ T5621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 103.017645][ T5621] copy_mm+0x11a/0x480 [ 103.017681][ T5621] ? copy_process+0xd3c/0x4390 [ 103.017715][ T5621] copy_process+0x1e3e/0x4390 [ 103.017759][ T5621] ? copy_process+0xd3c/0x4390 [ 103.017811][ T5621] ? __pfx_copy_process+0x10/0x10 [ 103.017857][ T5621] kernel_clone+0x2d7/0x940 [ 103.017897][ T5621] ? __pfx_kernel_clone+0x10/0x10 [ 103.017952][ T5621] __x64_sys_clone+0x1b6/0x230 [ 103.017990][ T5621] ? __pfx___x64_sys_clone+0x10/0x10 [ 103.018044][ T5621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 103.018076][ T5621] ? do_user_addr_fault+0xc4a/0x1340 [ 103.018124][ T5621] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.018152][ T5621] do_syscall_64+0x174/0x580 [ 103.018186][ T5621] ? trace_irq_disable+0x3b/0x140 [ 103.018227][ T5621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.018253][ T5621] RIP: 0033:0x7f118b7c6a92 [ 103.018278][ T5621] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 103.018298][ T5621] RSP: 002b:00007ffc9cc8bc30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 103.018325][ T5621] RAX: ffffffffffffffda RBX: 00007ffc9cc8bc30 RCX: 00007f118b7c6a92 [ 103.018347][ T5621] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 103.018362][ T5621] RBP: 00007ffc9cc8bdbc R08: 0000000000000000 R09: 0000000000000001 [ 103.018378][ T5621] R10: 000055558a0d97d0 R11: 0000000000000246 R12: 0000000000000001 [ 103.018393][ T5621] R13: 000055558a0eca00 R14: 0000000000018667 R15: 00007ffc9cc8be10 [ 103.018430][ T5621] [ 103.137501][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.483687][ T114] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.498630][ T114] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.525058][ T5926] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20'. [ 109.789892][ T114] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.825933][ T5935] tipc: Started in network mode [ 109.837215][ T5935] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 109.872900][ T5935] tipc: Enabled bearer , priority 0 [ 109.892463][ T114] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.957493][ T5945] svc: failed to register lockdv1 RPC service (errno 111). [ 109.958226][ T5947] tipc: Enabling of bearer rejected, failed to enable media [ 110.230525][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.270559][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.319006][ T5945] svc: failed to register nfsdv3 RPC service (errno 111). [ 110.343322][ T5945] svc: failed to register nfsaclv3 RPC service (errno 111). [ 110.362468][ T5945] failed to unregister tcp with rpcbind [ 110.364190][ T12] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.391276][ T5945] svc: failed to register nfsdv3 RPC service (errno 97). [ 110.398891][ T5945] svc: failed to register nfsaclv3 RPC service (errno 97). [ 110.427970][ T5945] failed to unregister tcp with rpcbind [ 110.511371][ T12] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.690752][ T12] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.814013][ T12] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.915679][ T5767] tipc: Node number set to 43690 [ 111.149194][ T5632] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 111.158932][ T5632] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 111.168939][ T5632] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 111.180084][ T5632] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 111.199203][ T5632] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 111.420754][ T5985] key id 00000003 not found [ 111.440020][ T5985] key id 00000004 not found [ 111.891667][ T12] bridge_slave_1: left allmulticast mode [ 111.910005][ T12] bridge_slave_1: left promiscuous mode [ 111.918666][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.989811][ T12] bridge_slave_0: left allmulticast mode [ 112.005531][ T12] bridge_slave_0: left promiscuous mode [ 112.020577][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.046366][ T6004] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 112.477639][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.494106][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.505812][ T12] bond0 (unregistering): Released all slaves [ 113.274441][ T5628] Bluetooth: hci1: command tx timeout [ 113.986640][ T6058] netlink: 64 bytes leftover after parsing attributes in process `syz.4.51'. [ 114.035506][ T6058] netlink: 64 bytes leftover after parsing attributes in process `syz.4.51'. [ 114.084047][ T6060] netlink: 64 bytes leftover after parsing attributes in process `syz.4.51'. [ 114.128871][ T6060] netlink: 64 bytes leftover after parsing attributes in process `syz.4.51'. [ 114.208932][ T6067] lo speed is unknown, defaulting to 1000 [ 114.448915][ T6067] lo speed is unknown, defaulting to 1000 [ 114.857152][ T6067] lo speed is unknown, defaulting to 1000 [ 114.988402][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1 [ 115.126463][ T9] IPVS: starting estimator thread 0... [ 115.141785][ T12] hsr_slave_0: left promiscuous mode [ 115.158123][ T12] hsr_slave_1: left promiscuous mode [ 115.173795][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.188003][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.206032][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.234586][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.246112][ T6102] IPVS: using max 28 ests per chain, 67200 per kthread [ 115.325588][ T12] veth1_macvtap: left promiscuous mode [ 115.338905][ T12] veth0_macvtap: left promiscuous mode [ 115.350711][ T5628] Bluetooth: hci1: command tx timeout [ 115.360213][ T12] veth1_vlan: left promiscuous mode [ 115.365742][ T12] veth0_vlan: left promiscuous mode [ 115.674488][ T6067] infiniband syz0: set active [ 115.685151][ T6067] infiniband syz0: added lo [ 115.716076][ T6067] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 115.734071][ T6067] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 115.756576][ T6067] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 115.782186][ T12] team0 (unregistering): Port device team_slave_1 removed [ 115.813960][ T12] team0 (unregistering): Port device team_slave_0 removed [ 115.843513][ T6067] RDS/IB: syz0: added [ 115.849749][ T6067] smc: adding ib device syz0 with port count 1 [ 115.856933][ T6067] smc: ib device syz0 port 1 has no pnetid [ 116.040600][ T29] lo speed is unknown, defaulting to 1000 [ 116.093472][ T5726] lo speed is unknown, defaulting to 1000 [ 116.123621][ T6067] lo speed is unknown, defaulting to 1000 [ 117.269696][ T6067] lo speed is unknown, defaulting to 1000 [ 117.422762][ T5628] Bluetooth: hci1: command tx timeout [ 117.522060][ T5973] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.551095][ T5973] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.558977][ T5973] bridge_slave_0: entered allmulticast mode [ 117.581191][ T5973] bridge_slave_0: entered promiscuous mode [ 117.602305][ T5973] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.619963][ T5973] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.632755][ T5973] bridge_slave_1: entered allmulticast mode [ 117.651488][ T5973] bridge_slave_1: entered promiscuous mode [ 117.706941][ T5282] 8021q: adding VLAN 0 to HW filter on device eth2 [ 117.736956][ T5973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.756987][ T5973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.834190][ T5973] team0: Port device team_slave_0 added [ 117.875248][ T5973] team0: Port device team_slave_1 added [ 117.931137][ T6067] lo speed is unknown, defaulting to 1000 [ 117.938340][ T5973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.952346][ T6127] NFSD: Unable to initialize client recovery tracking! (-110) [ 117.977326][ T6127] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 117.991999][ T5973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.005414][ T6127] NFSD: starting 90-second grace period (net f00004a6) [ 118.052735][ T5973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.102314][ T3362] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.140382][ T5973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.168751][ T5973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.244420][ T5973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.591040][ T5973] hsr_slave_0: entered promiscuous mode [ 118.625069][ T5973] hsr_slave_1: entered promiscuous mode [ 118.656065][ T5973] debugfs: 'hsr0' already exists in 'hsr' [ 118.673868][ T5973] Cannot create hsr debugfs directory [ 118.984446][ T6067] lo speed is unknown, defaulting to 1000 [ 119.502544][ T5628] Bluetooth: hci1: command tx timeout [ 119.559871][ T6199] x_tables: duplicate underflow at hook 2 [ 119.644972][ T6201] tipc: Started in network mode [ 119.659179][ T6201] tipc: Node identity aaaaaaaaaa18, cluster identity 4711 [ 119.691398][ T6201] tipc: Enabled bearer , priority 10 [ 119.730971][ T5282] 8021q: adding VLAN 0 to HW filter on device eth3 [ 119.810325][ T6201] tipc: Disabling bearer [ 119.820370][ T6067] lo speed is unknown, defaulting to 1000 [ 120.033313][ T5807] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 120.229264][ T5807] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 0.00 [ 120.244329][ T5807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.276794][ T5807] usb 2-1: Product: syz [ 120.293264][ T5807] usb 2-1: Manufacturer: syz [ 120.300866][ T5807] usb 2-1: SerialNumber: syz [ 120.310239][ T6214] netlink: 40 bytes leftover after parsing attributes in process `syz.4.90'. [ 120.462954][ T5973] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 120.491693][ T5973] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 120.504914][ T5973] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 120.546778][ T5973] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 120.586841][ T5973] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 120.625137][ T5973] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 120.653910][ T5973] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 120.684750][ T5973] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 120.711094][ T6067] lo speed is unknown, defaulting to 1000 [ 121.056154][ T5807] speedtch 2-1:1.0: speedtch_bind: setting interface to 1 failed (-71)! [ 121.096129][ T5973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.099365][ T5807] speedtch 2-1:1.0: usbatm_usb_probe: bind failed: -71! [ 121.132566][ T5807] speedtch 2-1:1.0: probe with driver speedtch failed with error -71 [ 121.199061][ T5973] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.239259][ T5807] speedtch 2-1:1.1: speedtch_bind: setting interface to 1 failed (-71)! [ 121.270155][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.277488][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.306398][ T5807] speedtch 2-1:1.1: usbatm_usb_probe: bind failed: -71! [ 121.335070][ T5807] speedtch 2-1:1.1: probe with driver speedtch failed with error -71 [ 121.398175][ T1115] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.405489][ T1115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.528778][ T5807] usb 2-1: USB disconnect, device number 2 [ 122.102839][ T6067] lo speed is unknown, defaulting to 1000 [ 123.281966][ T6302] nvme_fabrics: unknown parameter or missing value 'tls_key=1' in ctrl creation request [ 124.156336][ T6328] netlink: 'syz.5.119': attribute type 1 has an invalid length. [ 124.212013][ T6328] netlink: 'syz.5.119': attribute type 1 has an invalid length. [ 124.276677][ T6328] netlink: 'syz.5.119': attribute type 1 has an invalid length. [ 124.327204][ T6334] netlink: 'syz.5.119': attribute type 1 has an invalid length. [ 124.354339][ T6328] netlink: 'syz.5.119': attribute type 1 has an invalid length. [ 124.377078][ T5973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.661482][ T6344] x_tables: duplicate underflow at hook 2 [ 124.728119][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.970512][ T6356] ip_tables: iptables: counters copy to user failed while replacing table [ 125.084307][ T6353] netlink: 44 bytes leftover after parsing attributes in process `syz.1.124'. [ 125.135978][ T6353] netlink: 48 bytes leftover after parsing attributes in process `syz.1.124'. [ 125.380696][ T6372] sctp: [Deprecated]: syz.3.128 (pid 6372) Use of int in max_burst socket option deprecated. [ 125.380696][ T6372] Use struct sctp_assoc_value instead [ 125.669217][ T5973] veth0_vlan: entered promiscuous mode [ 125.723798][ T5973] veth1_vlan: entered promiscuous mode [ 125.965252][ T5973] veth0_macvtap: entered promiscuous mode [ 126.019211][ T5973] veth1_macvtap: entered promiscuous mode [ 126.057696][ T6393] x_tables: duplicate entry at hook 2 [ 126.076294][ T5973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.115155][ T6397] netlink: 12 bytes leftover after parsing attributes in process `syz.2.137'. [ 126.168310][ T5973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.400455][ T6400] sctp: [Deprecated]: syz.1.138 (pid 6400) Use of int in maxseg socket option. [ 126.400455][ T6400] Use struct sctp_assoc_value instead [ 126.533304][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.577162][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.911230][ T114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.958674][ T114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.967211][ T6412] lo speed is unknown, defaulting to 1000 [ 127.167994][ T6431] netlink: 32 bytes leftover after parsing attributes in process `syz.1.147'. [ 127.509029][ T6445] ipt_ECN: cannot use operation on non-tcp rule [ 128.153453][ T12] netdevsim netdevsim99 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.435275][ T6477] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 128.528110][ T6480] netlink: 'syz.0.162': attribute type 11 has an invalid length. [ 128.538293][ T6441] NFSD: Unable to initialize client recovery tracking! (-110) [ 128.560254][ T6480] netlink: 11 bytes leftover after parsing attributes in process `syz.0.162'. [ 128.570080][ T6441] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 128.583559][ T6480] netlink: 'syz.0.162': attribute type 1 has an invalid length. [ 128.591621][ T6441] NFSD: starting 90-second grace period (net f00004a6) [ 128.604767][ T6480] netlink: 'syz.0.162': attribute type 1 has an invalid length. [ 128.623451][ T6480] netlink: 'syz.0.162': attribute type 1 has an invalid length. [ 128.650755][ T6479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.867425][ T6487] tipc: Started in network mode [ 128.886340][ T6487] tipc: Node identity aaaaaaaaaa18, cluster identity 4711 [ 128.898751][ T6487] tipc: Enabled bearer , priority 10 [ 128.913365][ T6487] tipc: Disabling bearer [ 129.152966][ T6495] netlink: 32 bytes leftover after parsing attributes in process `syz.3.168'. [ 129.173462][ T6492] netlink: 'syz.1.167': attribute type 3 has an invalid length. [ 129.189122][ T6495] netlink: 332 bytes leftover after parsing attributes in process `syz.3.168'. [ 129.393179][ T5807] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 129.565096][ T5807] usb 5-1: config 1 descriptor has 1 excess byte, ignoring [ 129.579498][ T5807] usb 5-1: config 1 interface 2 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 129.612772][ T5807] usb 5-1: New USB device found, idVendor=1110, idProduct=9000, bcdDevice= 1.00 [ 129.628448][ T6509] lo speed is unknown, defaulting to 1000 [ 129.630612][ T5807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 129.652588][ T5807] usb 5-1: Product: syz [ 129.664188][ T5807] usb 5-1: Manufacturer: syz [ 129.687320][ T6509] lo speed is unknown, defaulting to 1000 [ 129.737315][ T6509] lo speed is unknown, defaulting to 1000 [ 129.854811][ T6520] netlink: 40 bytes leftover after parsing attributes in process `syz.3.179'. [ 129.920659][ T5807] usb 5-1: reset high-speed USB device number 2 using dummy_hcd [ 130.354664][ T6537] netlink: 'syz.0.182': attribute type 2 has an invalid length. [ 130.391671][ T6537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.182'. [ 130.496230][ T6541] netlink: 24 bytes leftover after parsing attributes in process `syz.2.184'. [ 130.510172][ T6541] netlink: 28 bytes leftover after parsing attributes in process `syz.2.184'. [ 130.527747][ T6541] netlink: 28 bytes leftover after parsing attributes in process `syz.2.184'. [ 130.540866][ T6537] : entered promiscuous mode [ 130.713589][ T6545] bridge0: port 3(veth0) entered blocking state [ 130.731439][ T6545] bridge0: port 3(veth0) entered disabled state [ 130.741718][ T6545] veth0: entered allmulticast mode [ 130.775679][ T6545] veth0: entered promiscuous mode [ 130.802279][ T6545] bridge0: port 3(veth0) entered blocking state [ 130.810137][ T6545] bridge0: port 3(veth0) entered forwarding state [ 130.857238][ T6509] infiniband syz1: set active [ 130.873903][ T6509] infiniband syz1: added lo [ 130.895077][ T6509] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 130.904547][ T6509] infiniband syz1: Couldn't open port 1 [ 130.925258][ T6509] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 130.941365][ T6509] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 130.961538][ T6509] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 131.029524][ T6509] RDS/IB: syz1: added [ 131.036350][ T6509] smc: adding ib device syz1 with port count 1 [ 131.043290][ T6509] smc: ib device syz1 port 1 has no pnetid [ 131.293549][ T5807] usb 5-1: Direct firmware load for ueagle-atm/930-fpga.bin failed with error -2 [ 131.332641][ T5807] usb 5-1: Falling back to sysfs fallback for: ueagle-atm/930-fpga.bin [ 131.434280][ T5774] lo speed is unknown, defaulting to 1000 [ 131.473394][ T6558] lo speed is unknown, defaulting to 1000 [ 131.526690][ T6509] lo speed is unknown, defaulting to 1000 [ 131.883501][ T6579] __nla_validate_parse: 1 callbacks suppressed [ 131.883547][ T6579] netlink: 40 bytes leftover after parsing attributes in process `syz.4.193'. [ 132.286618][ T6593] lo speed is unknown, defaulting to 1000 [ 132.672724][ T6509] lo speed is unknown, defaulting to 1000 [ 133.299603][ T6629] netlink: 48 bytes leftover after parsing attributes in process `syz.5.210'. [ 133.503776][ T6642] sch_tbf: burst 2048 is lower than device syzkaller0 mtu (65589) ! [ 133.533479][ T9] libceph: mon0 (2)127.0.0.1:20000 socket error on write [ 133.555896][ T9] libceph: mon0 (2)127.0.0.1:20000 socket error on write [ 133.671167][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.679576][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.724828][ T6593] lo speed is unknown, defaulting to 1000 [ 133.826073][ T5855] libceph: mon0 (2)127.0.0.1:20000 socket error on write [ 134.132510][ T6660] syz_tun: mtu less than device minimum [ 134.134226][ T6632] ceph: No mds server is up or the cluster is laggy [ 134.531072][ T6509] lo speed is unknown, defaulting to 1000 [ 135.125116][ T6509] lo speed is unknown, defaulting to 1000 [ 135.441760][ T6694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.235'. [ 135.588785][ T6509] lo speed is unknown, defaulting to 1000 [ 135.614318][ T6698] netlink: 28 bytes leftover after parsing attributes in process `syz.3.236'. [ 135.648150][ T6698] netlink: 12 bytes leftover after parsing attributes in process `syz.3.236'. [ 135.681570][ T6698] tc_dump_action: action bad kind [ 135.749428][ T6701] netlink: 12 bytes leftover after parsing attributes in process `syz.2.239'. [ 135.781649][ T6705] netlink: 108 bytes leftover after parsing attributes in process `syz.2.239'. [ 136.203599][ T6715] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.247971][ T6716] netdevsim netdevsim10 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.275622][ T6509] lo speed is unknown, defaulting to 1000 [ 136.497707][ T6509] lo speed is unknown, defaulting to 1000 [ 136.703320][ T6683] lo speed is unknown, defaulting to 1000 [ 136.896777][ T6709] rdma_rxe: rxe_newlink: failed to add veth0 [ 137.148756][ T6715] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.467515][ T6715] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.612412][ T6734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.250'. [ 137.685939][ T6715] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.035983][ T6743] netlink: 36 bytes leftover after parsing attributes in process `syz.1.254'. [ 138.302237][ T803] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 138.394136][ T1115] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.411203][ T1115] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.431639][ T1115] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.441528][ T6727] NFSD: Unable to initialize client recovery tracking! (-110) [ 138.453061][ T1115] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.461359][ T6727] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 138.473503][ T6727] NFSD: starting 90-second grace period (net f00004a6) [ 138.489483][ T803] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 0.00 [ 138.514884][ T803] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.547236][ T803] usb 3-1: Product: syz [ 138.555377][ T803] usb 3-1: Manufacturer: syz [ 138.564961][ T803] usb 3-1: SerialNumber: syz [ 138.588893][ T6749] netlink: 'syz.5.256': attribute type 1 has an invalid length. [ 138.611361][ T6749] netlink: 12 bytes leftover after parsing attributes in process `syz.5.256'. [ 138.978762][ T803] speedtch 3-1:1.0: speedtch_bind: setting interface to 1 failed (-71)! [ 138.999574][ T803] speedtch 3-1:1.0: usbatm_usb_probe: bind failed: -71! [ 139.009577][ T803] speedtch 3-1:1.0: probe with driver speedtch failed with error -71 [ 139.023927][ T803] speedtch 3-1:1.1: speedtch_bind: setting interface to 1 failed (-71)! [ 139.037827][ T803] speedtch 3-1:1.1: usbatm_usb_probe: bind failed: -71! [ 139.046531][ T803] speedtch 3-1:1.1: probe with driver speedtch failed with error -71 [ 139.083856][ T803] usb 3-1: USB disconnect, device number 2 [ 139.254915][ T5855] ------------[ cut here ]------------ [ 139.260459][ T5855] a->in_addr.ss_family == 512 [ 139.260489][ T5855] WARNING: ./include/linux/ceph/decode.h:238 at ceph_con_v1_try_read+0x657e/0x6eb0, CPU#0: kworker/0:7/5855 [ 139.276878][ T5855] Modules linked in: [ 139.282698][ T5855] CPU: 0 UID: 0 PID: 5855 Comm: kworker/0:7 Not tainted syzkaller #0 PREEMPT(full) [ 139.292910][ T5855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 139.303877][ T5855] Workqueue: ceph-msgr ceph_con_workfn [ 139.310773][ T5855] RIP: 0010:ceph_con_v1_try_read+0x657e/0x6eb0 [ 139.317378][ T5855] Code: c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 ca 2d a0 f6 48 c7 03 c0 ee 29 8d 41 bc ff ff ff ff e9 47 fc ff ff e8 a3 93 32 f6 90 <0f> 0b 90 e9 2d f4 ff ff e8 95 93 32 f6 48 c7 c7 a0 fb 29 8d 44 89 [ 139.337659][ T5855] RSP: 0018:ffffc90003fcf180 EFLAGS: 00010293 [ 139.344428][ T5855] RAX: ffffffff8b94813d RBX: dffffc0000000000 RCX: ffff88807fbc5d00 [ 139.352506][ T5855] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 139.360488][ T5855] RBP: ffffc90003fcfa78 R08: ffffffff90579d37 R09: 1ffffffff20af3a6 [ 139.368665][ T5855] R10: dffffc0000000000 R11: fffffbfff20af3a7 R12: 0000000000000200 [ 139.377099][ T5855] R13: fffff520007f9e70 R14: 0000000000000002 R15: ffff8880654b8762 [ 139.385172][ T5855] FS: 0000000000000000(0000) GS:ffff888124f4b000(0000) knlGS:0000000000000000 [ 139.395288][ T5855] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 139.401885][ T5855] CR2: 0000001b32e20000 CR3: 000000007497d000 CR4: 0000000000350ef0 [ 139.410584][ T5855] Call Trace: [ 139.414369][ T5855] [ 139.417334][ T5855] ? ktime_get+0x45/0x220 [ 139.421751][ T5855] ? __pfx_ceph_con_v1_try_read+0x10/0x10 [ 139.428636][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 139.434814][ T5855] ? __lock_acquire+0x683/0x2cf0 [ 139.439820][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 139.445861][ T5855] ? __lock_acquire+0x683/0x2cf0 [ 139.450837][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 139.456550][ T5855] ? __lock_acquire+0x683/0x2cf0 [ 139.461520][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 139.467246][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 139.473328][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 139.478991][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 139.484696][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 139.490344][ T5855] ? __lock_acquire+0x683/0x2cf0 [ 139.496127][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 139.501793][ T5855] ? __lock_acquire+0x683/0x2cf0 [ 139.507706][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 139.513488][ T5855] ? ceph_con_flag_clear+0x38/0x50 [ 139.518643][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 139.524356][ T5855] ? ceph_con_v1_try_write+0x3808/0x3dc0 [ 139.530024][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 139.536099][ T5855] ? __lock_acquire+0x683/0x2cf0 [ 139.541085][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 139.546850][ T5855] ? __lock_acquire+0x683/0x2cf0 [ 139.551845][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 139.557558][ T5855] ? __mutex_trylock_common+0x15f/0x270 [ 139.563502][ T5855] ? __pfx___mutex_trylock_common+0x10/0x10 [ 139.569416][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 139.575179][ T5855] ? rcu_is_watching+0x15/0xb0 [ 139.579958][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 139.585660][ T5855] ? trace_contention_end+0x3d/0x140 [ 139.590976][ T5855] ? ceph_con_workfn+0x3b/0x14a0 [ 139.597057][ T5855] ? __pfx___mutex_lock+0x10/0x10 [ 139.602672][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 139.608330][ T5855] ? do_raw_spin_lock+0x12b/0x2f0 [ 139.613455][ T5855] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 139.618869][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 139.625087][ T5855] ceph_con_workfn+0x208/0x14a0 [ 139.629977][ T5855] ? rcu_is_watching+0x15/0xb0 [ 139.634842][ T5855] ? process_scheduled_works+0xa20/0x14e0 [ 139.640594][ T5855] process_scheduled_works+0xa8e/0x14e0 [ 139.646228][ T5855] ? __pfx_process_scheduled_works+0x10/0x10 [ 139.652782][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 139.658433][ T5855] ? assign_work+0x3cf/0x5d0 [ 139.663104][ T5855] worker_thread+0xa47/0xfb0 [ 139.667772][ T5855] kthread+0x388/0x470 [ 139.671873][ T5855] ? __pfx_worker_thread+0x10/0x10 [ 139.677057][ T5855] ? __pfx_kthread+0x10/0x10 [ 139.681687][ T5855] ret_from_fork+0x514/0xb70 [ 139.686713][ T5855] ? __pfx_ret_from_fork+0x10/0x10 [ 139.691856][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 139.698414][ T5855] ? __switch_to+0xc89/0x1420 [ 139.703705][ T5855] ? __pfx_kthread+0x10/0x10 [ 139.708327][ T5855] ret_from_fork_asm+0x1a/0x30 [ 139.713527][ T5855] [ 139.716586][ T5855] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 139.723865][ T5855] CPU: 0 UID: 0 PID: 5855 Comm: kworker/0:7 Not tainted syzkaller #0 PREEMPT(full) [ 139.733234][ T5855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 139.743291][ T5855] Workqueue: ceph-msgr ceph_con_workfn [ 139.748779][ T5855] Call Trace: [ 139.752056][ T5855] [ 139.754984][ T5855] vpanic+0x56c/0xa60 [ 139.758993][ T5855] ? __pfx__printk+0x10/0x10 [ 139.763596][ T5855] ? __pfx_vpanic+0x10/0x10 [ 139.768125][ T5855] ? is_bpf_text_address+0x292/0x2b0 [ 139.773435][ T5855] ? is_bpf_text_address+0x26/0x2b0 [ 139.778683][ T5855] panic+0xc5/0xd0 [ 139.782425][ T5855] ? __pfx_panic+0x10/0x10 [ 139.786870][ T5855] ? ret_from_fork_asm+0x1a/0x30 [ 139.791820][ T5855] __warn+0x315/0x4c0 [ 139.795806][ T5855] ? ceph_con_v1_try_read+0x657e/0x6eb0 [ 139.801367][ T5855] ? ceph_con_v1_try_read+0x657e/0x6eb0 [ 139.806933][ T5855] __report_bug+0x276/0x570 [ 139.811444][ T5855] ? ceph_con_v1_try_read+0x657e/0x6eb0 [ 139.816996][ T5855] ? __pfx___report_bug+0x10/0x10 [ 139.822022][ T5855] ? tcp_recvmsg+0x213/0x7f0 [ 139.826623][ T5855] ? __local_bh_enable_ip+0xd0/0x130 [ 139.831912][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 139.837542][ T5855] ? lockdep_hardirqs_on+0x7a/0x110 [ 139.842744][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 139.848372][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 139.853998][ T5855] ? tcp_recvmsg+0x288/0x7f0 [ 139.858592][ T5855] ? ceph_con_v1_try_read+0x657e/0x6eb0 [ 139.864157][ T5855] report_bug+0x16a/0x220 [ 139.868496][ T5855] ? ceph_con_v1_try_read+0x657e/0x6eb0 [ 139.874048][ T5855] ? ceph_con_v1_try_read+0x6580/0x6eb0 [ 139.879602][ T5855] handle_bug+0x9c/0x200 [ 139.883854][ T5855] exc_invalid_op+0x1a/0x50 [ 139.888365][ T5855] asm_exc_invalid_op+0x1a/0x20 [ 139.893211][ T5855] RIP: 0010:ceph_con_v1_try_read+0x657e/0x6eb0 [ 139.899373][ T5855] Code: c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 ca 2d a0 f6 48 c7 03 c0 ee 29 8d 41 bc ff ff ff ff e9 47 fc ff ff e8 a3 93 32 f6 90 <0f> 0b 90 e9 2d f4 ff ff e8 95 93 32 f6 48 c7 c7 a0 fb 29 8d 44 89 [ 139.918982][ T5855] RSP: 0018:ffffc90003fcf180 EFLAGS: 00010293 [ 139.925057][ T5855] RAX: ffffffff8b94813d RBX: dffffc0000000000 RCX: ffff88807fbc5d00 [ 139.933025][ T5855] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 139.940986][ T5855] RBP: ffffc90003fcfa78 R08: ffffffff90579d37 R09: 1ffffffff20af3a6 [ 139.948949][ T5855] R10: dffffc0000000000 R11: fffffbfff20af3a7 R12: 0000000000000200 [ 139.956913][ T5855] R13: fffff520007f9e70 R14: 0000000000000002 R15: ffff8880654b8762 [ 139.964890][ T5855] ? ceph_con_v1_try_read+0x657d/0x6eb0 [ 139.970494][ T5855] ? ktime_get+0x45/0x220 [ 139.974897][ T5855] ? __pfx_ceph_con_v1_try_read+0x10/0x10 [ 139.980626][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 139.986262][ T5855] ? __lock_acquire+0x683/0x2cf0 [ 139.991209][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 139.996842][ T5855] ? __lock_acquire+0x683/0x2cf0 [ 140.001796][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 140.007431][ T5855] ? __lock_acquire+0x683/0x2cf0 [ 140.012399][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 140.018052][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 140.023700][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 140.029345][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 140.035176][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 140.040808][ T5855] ? __lock_acquire+0x683/0x2cf0 [ 140.045777][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 140.051409][ T5855] ? __lock_acquire+0x683/0x2cf0 [ 140.056367][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 140.062002][ T5855] ? ceph_con_flag_clear+0x38/0x50 [ 140.067127][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 140.072772][ T5855] ? ceph_con_v1_try_write+0x3808/0x3dc0 [ 140.078478][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 140.084114][ T5855] ? __lock_acquire+0x683/0x2cf0 [ 140.089070][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 140.094698][ T5855] ? __lock_acquire+0x683/0x2cf0 [ 140.099667][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 140.105312][ T5855] ? __mutex_trylock_common+0x15f/0x270 [ 140.110872][ T5855] ? __pfx___mutex_trylock_common+0x10/0x10 [ 140.116772][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 140.122430][ T5855] ? rcu_is_watching+0x15/0xb0 [ 140.127193][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 140.132824][ T5855] ? trace_contention_end+0x3d/0x140 [ 140.138126][ T5855] ? ceph_con_workfn+0x3b/0x14a0 [ 140.143071][ T5855] ? __pfx___mutex_lock+0x10/0x10 [ 140.148146][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 140.153781][ T5855] ? do_raw_spin_lock+0x12b/0x2f0 [ 140.158808][ T5855] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 140.164185][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 140.169832][ T5855] ceph_con_workfn+0x208/0x14a0 [ 140.174726][ T5855] ? rcu_is_watching+0x15/0xb0 [ 140.179492][ T5855] ? process_scheduled_works+0xa20/0x14e0 [ 140.185210][ T5855] process_scheduled_works+0xa8e/0x14e0 [ 140.190783][ T5855] ? __pfx_process_scheduled_works+0x10/0x10 [ 140.196769][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 140.202512][ T5855] ? assign_work+0x3cf/0x5d0 [ 140.207125][ T5855] worker_thread+0xa47/0xfb0 [ 140.211752][ T5855] kthread+0x388/0x470 [ 140.215853][ T5855] ? __pfx_worker_thread+0x10/0x10 [ 140.220980][ T5855] ? __pfx_kthread+0x10/0x10 [ 140.225582][ T5855] ret_from_fork+0x514/0xb70 [ 140.230186][ T5855] ? __pfx_ret_from_fork+0x10/0x10 [ 140.235304][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 140.240935][ T5855] ? __switch_to+0xc89/0x1420 [ 140.245627][ T5855] ? __pfx_kthread+0x10/0x10 [ 140.250227][ T5855] ret_from_fork_asm+0x1a/0x30 [ 140.255003][ T5855] [ 140.258288][ T5855] Kernel Offset: disabled [ 140.262605][ T5855] Rebooting in 86400 seconds..