last executing test programs: 7.47964019s ago: executing program 2 (id=3): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000030073797a6b616c6c65723000001800128008000100767266000c00028008000100e8030000"], 0x48}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="28000000130001000200"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000780)=ANY=[@ANYBLOB="20000000130001000300"/20, @ANYRES32=r2, @ANYBLOB="0100000001000000"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000e0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000780)=ANY=[@ANYBLOB="20000000130001000300"/20, @ANYRES32=r3, @ANYBLOB="0100000001000000"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=@ipv6_newaddr={0x0, 0x14, 0x601, 0x0, 0x0, {0xa, 0x40, 0x2, 0x0, r3}, [@IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000880)=@ipv6_newroute={0x0, 0x18, 0x601, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x4, 0x0, 0x1}, [@RTA_OIF={0x8, 0x3, r3}]}, 0x30}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000780)='veth0\x00', 0x6) connect$inet6(r1, &(0x7f0000000800)={0xa, 0x5000, 0x0, @private1}, 0x1c) write(r1, &(0x7f0000000900)="001122334455", 0x6) 7.07963421s ago: executing program 2 (id=10): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2, 0x1, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0) sendto$inet6(r0, &(0x7f0000000100)="00112233445566778899", 0xa, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) 6.980876273s ago: executing program 2 (id=12): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a85, @loopback}, 0x10) listen(r0, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='127.0.0.1:6789:/\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='ceph\x00', 0x0, &(0x7f0000000400)='ms_mode=legacy\x00') (async) r1 = accept$inet(r0, 0x0, 0x0) write(r1, &(0x7f0000000500)='ceph v027\x00'/322, 0x100) write(r1, &(0x7f0000000600)="01ffffffffffffffff0000000000000000000000000000000001000000", 0x1d) write(r1, &(0x7f0000000700)="01010000000000000000000000000000000000000000000000000000001000000000000100000000000000000000008064a51e", 0x31) nanosleep(&(0x7f0000000800)={0x0, 0x1dcd6500}, 0x0) 2.283139462s ago: executing program 4 (id=13): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1ff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a85, @loopback}, 0x10) listen(r0, 0x5) mount(&(0x7f0000000400)=@filename='127.0.0.1:6789:/\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ceph\x00', 0x0, &(0x7f0000000700)='ms_mode=legacy\x00') (async) r1 = accept$inet(r0, 0x0, 0x0) write(r1, &(0x7f0000000100)='ceph v027\x00'/343, 0x119) write(r1, &(0x7f0000000200)="01ffffffffffffffff010000000100000000000000000000000701000000000000000000000000000000040000000000040000000000000001000000000001000000000000000000000000006505b22100000000", 0x54) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 1.827225423s ago: executing program 0 (id=15): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) r2 = accept(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='veno', 0x4) write(r1, &(0x7f0000001000)='\x00'/131072, 0x20000) write(r1, &(0x7f0000001000)='\x00'/131072, 0x20000) write(r1, &(0x7f0000001000)='\x00'/131072, 0x20000) write(r1, &(0x7f0000001000)='\x00'/131072, 0x20000) write(r1, &(0x7f0000001000)='\x00'/131072, 0x20000) read(r2, &(0x7f0000002000), 0x8000) read(r2, &(0x7f0000002000), 0x8000) read(r2, &(0x7f0000002000), 0x8000) read(r2, &(0x7f0000002000), 0x8000) write(r1, &(0x7f0000001000)='\x00'/131072, 0x20000) write(r1, &(0x7f0000001000)='\x00'/131072, 0x20000) write(r1, &(0x7f0000001000)='\x00'/131072, 0x20000) write(r1, &(0x7f0000001000)='\x00'/131072, 0x20000) read(r2, &(0x7f0000002000), 0x8000) read(r2, &(0x7f0000002000), 0x8000) read(r2, &(0x7f0000002000), 0x8000) read(r2, &(0x7f0000002000), 0x8000) write(r1, &(0x7f0000001000)='\x00'/131072, 0x20000) write(r1, &(0x7f0000001000)='\x00'/131072, 0x20000) write(r1, &(0x7f0000001000)='\x00'/131072, 0x20000) write(r1, &(0x7f0000001000)='\x00'/131072, 0x20000) read(r2, &(0x7f0000002000), 0x8000) read(r2, &(0x7f0000002000), 0x8000) read(r2, &(0x7f0000002000), 0x8000) read(r2, &(0x7f0000002000), 0x8000) nanosleep(&(0x7f0000000a00)={0x0, 0x5f5e100}, 0x0) 1.454696943s ago: executing program 3 (id=17): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000020000000900010073797a300000000040000000120a01040000000000000000020000000900010073797a30000000000900020073797a300000000008000300000000040c0004800800040000000002140000001100010000000000000000000000000a"], 0x88}}, 0x0) 1.362835466s ago: executing program 3 (id=18): r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x1, 0x6) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @loopback, 0x1500, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000100)={{0x6, @loopback, 0x1500, 0x0, 'rr\x00'}, {@loopback, 0x4908, 0x0, 0x1}}, 0x44) connect(r1, &(0x7f0000000200)=@in={0x2, 0x1500, @loopback}, 0x10) 1.297451697s ago: executing program 3 (id=20): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'lo\x00'}]}]}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x138}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='1\n', 0x2) 1.237172489s ago: executing program 0 (id=21): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f00000000c0)={0x0, 0x5, 0x0, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0\x00'}}]}}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000500)={0x15, 0x38, 0xfa00, {r2, 0x3e8, 0x10, 0x10, 0x0, @in={0x2, 0x0, @loopback}, @in={0x2, 0x48ca, @loopback}}}, 0x40) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000600)={0x4, 0x8, 0xfa00, {r2, 0x3e8}}, 0x10) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000700)={0x6, 0x110, 0xfa00, {{0x0, 0x0, "7f0000017f0000010500000100", 0x1c, 0x0, 0x1, 0x1, 0x0, 0x7, 0x7, 0x1}, r2}}, 0x120) nanosleep(&(0x7f0000000800)={0x0, 0xbebc200}, 0x0) 1.117355042s ago: executing program 1 (id=22): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@setlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x3, "01020202010200000101010101010101"}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, {0x0, 0x2}, {0x1, 0x1}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x100}}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, {0x0, 0x3}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x3e8}]}}]}, 0x38}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) bind$packet(r1, &(0x7f0000000500)={0x11, 0x3, 0x2}, 0x14) sendto$packet(r1, &(0x7f0000000200)="00112233445566778899aabb08004500001c000000004011000001010101010101020001000100080000", 0x2a, 0x0, &(0x7f0000000540)={0x11, 0x0, 0x2}, 0x14) sendto$packet(r1, &(0x7f0000000200)="00112233445566778899aabb08004500001c000000004011000001010101010101020001000100080000", 0x2a, 0x0, &(0x7f0000000580)={0x11, 0x0, 0x2}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x38, 0x24, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, {0x0, 0x3}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x38}}, 0x0) 1.093390652s ago: executing program 2 (id=23): syz_emit_ethernet(0x66, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0xff, @local, @remote, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x0, 0x6c, 0x40, @remote, @local}}}}}}}, 0x0) 996.898675ms ago: executing program 3 (id=24): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x2327, @empty}}, 0x24) listen(r0, 0x5) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x10, 0x110, 0xe}], 0x30}, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "0200000000000000"}, {0x10, 0x110, 0xe}], 0x30}, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "0300000000000000"}, {0x10, 0x110, 0xe}], 0x30}, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "0400000000000000"}, {0x10, 0x110, 0xe}], 0x30}, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r1, &(0x7f0000000700)={&(0x7f0000000300)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x2327, @loopback}}, 0x24, &(0x7f0000000400)=[{&(0x7f0000000500)='hello', 0x5}], 0x1, &(0x7f0000000800)=[{0x18, 0x110, 0x1, "0500000000000000"}], 0x18}, 0x0) nanosleep(&(0x7f0000000e00)={0x0, 0x5f5e100}, 0x0) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b00), 0x100}], 0x1}, 0x40) 949.222636ms ago: executing program 2 (id=25): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x5) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710, @local}, 0x10) r2 = accept4$vsock_stream(r0, 0x0, 0x0, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000200)='1234', 0x4, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f0000000480)=""/64, 0x40, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f0000000580)=""/64, 0x40, 0x0, 0x0, 0x0) read(r1, &(0x7f0000000680)=""/64, 0x40) 948.317746ms ago: executing program 4 (id=26): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc_mnt\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc_mnt/sys/net/ipv4/ip_forward\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='1\n', 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'lo\x00'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0}}}, 0xb4}}, 0x0) 918.447067ms ago: executing program 1 (id=27): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x2327, @empty}}, 0x24) listen(r0, 0x5) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x10, 0x110, 0xe}], 0x30}, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "0200000000000000"}, {0x10, 0x110, 0xe}], 0x30}, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "0300000000000000"}, {0x10, 0x110, 0xe}], 0x30}, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "0400000000000000"}, {0x10, 0x110, 0xe}], 0x30}, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000100)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x2328, @empty}}, 0x24) sendmsg(r1, &(0x7f0000000700)={&(0x7f0000000300)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x2327, @loopback}}, 0x24, &(0x7f0000000400)=[{&(0x7f0000000500)='hello', 0x5}], 0x1, &(0x7f0000000800)=[{0x18, 0x110, 0x1, "0500000000000000"}], 0x18}, 0x0) nanosleep(&(0x7f0000000e00)={0x0, 0x5f5e100}, 0x0) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b00), 0x100}], 0x1}, 0x40) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)='world', 0x5}], 0x1, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) nanosleep(&(0x7f0000000f00)={0x0, 0x5f5e100}, 0x0) sendmsg(r1, &(0x7f0000000700)={&(0x7f0000000300)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x2327, @loopback}}, 0x24, &(0x7f0000000400)=[{&(0x7f0000000500)='hello2', 0x6}], 0x1, &(0x7f0000000800)=[{0x18, 0x110, 0x1, "0600000000000000"}], 0x18}, 0x0) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b00), 0x100}], 0x1}, 0x40) 857.074828ms ago: executing program 0 (id=28): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r0, 0x29, 0x40, &(0x7f0000000000)="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000040030000ffffffff000000001001000020020000ffffffffffffffff00000000d0000000a001000027000000ffffffff040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d000000000000000000000000000000000000000000000000000000000002800000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d000000000000000000000000000000000000000000000000000000000002800000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d000000000000000000000000000000000000000000000000000000000002800000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d000000000000000000000000000000000000000000000000000000000002800000000000000feffffff", 0x3a0) 758.865181ms ago: executing program 0 (id=29): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='1\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./rpc_pipefs\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) 705.621982ms ago: executing program 3 (id=30): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x48}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x68}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x115c, @loopback}, 0x10) listen(r1, 0x5) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000300)={0x2, 0x115c, @loopback}, 0x10) r3 = accept(r1, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000500)="00112233445566778899", 0xa, 0x0, 0x0, 0x0) 658.267063ms ago: executing program 0 (id=31): unshare(0x40000000) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='2\n', 0x2) close(r0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'lo\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x5c, 0x10, 0x605, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'veth0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'veth1\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000300)={'veth0\x00', {0x2, 0x0, @private=0x100000a}}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000300)={'veth1\x00', {0x2, 0x0, @private=0x200000a}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r3) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x24, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x24}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000700)={0x2, 0x4e24, @private=0x100000a}, 0x10) listen(0xffffffffffffffff, 0x5) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000800)={0x2, 0x4e24, @private=0x100000a}, 0x10) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x38, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0x300000a}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}]}, 0x38}}, 0x0) 621.068054ms ago: executing program 4 (id=32): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x1) write(r0, &(0x7f0000000000)="00112233", 0x4) 620.307045ms ago: executing program 1 (id=33): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='1\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv4/conf/all/forwarding\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='1\n', 0x2) write(0xffffffffffffffff, &(0x7f0000000200)='0\n', 0x2) 559.994436ms ago: executing program 3 (id=34): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@loopback, {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2}, {}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@delsa={0x28, 0x11, 0x1, 0x0, 0x0, {@in6=@mcast2, 0x4d4, 0x2, 0x6c}}, 0x28}, 0x1, 0x0, 0x0, 0x8801}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000400)={0x0, 0x1dcd6500}, 0x0) 476.682208ms ago: executing program 4 (id=35): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req={0x1000, 0x2, 0x10, 0x200}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x11, r0, 0x0) syz_clone(0x80011, 0x0, 0x0, 0x0, 0x0, 0x0) close(r0) munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) 446.006719ms ago: executing program 1 (id=36): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='1\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv4/conf/all/forwarding\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='1\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/net/ipv4/conf/all/rp_filter\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='0\n', 0x2) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x0, @rand_addr=0x8080808}, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)='syz_tun\x00'}) ioctl$sock_ifreq(r3, 0x8922, &(0x7f0000000200)={'syz_tun\x00', @ifru_mtu=0x1f4}) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e2, &(0x7f0000000400)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3d4, 0x5678, 0x6000, 0x40, 0x11, 0x0, @rand_addr=0x1020304, @rand_addr=0x8080808}, {0x1234, 0x5678, 0x3c0, 0x0, @opaque='\x00'/952}}}}}, 0x0) syz_emit_ethernet(0x432, &(0x7f0000000500)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x424, 0x5678, 0x4078, 0x40, 0x11, 0x0, @rand_addr=0x1020304, @rand_addr=0x8080808}, '\x00'/1040}}}}, 0x0) 330.811962ms ago: executing program 4 (id=37): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b8, 0x0, 0x98, 0x130, 0x1c8, 0x288, 0x98, 0x130, 0x130, 0x288, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@loopback, @local}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@length={{0x28}, {0x0, 0xffff}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000100)="0011223344557788", 0x8, 0x0, &(0x7f0000000200)={0x2, 0x1f90, @loopback}, 0x10) 271.668703ms ago: executing program 1 (id=38): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x2327, @empty}}, 0x24) listen(r0, 0x5) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x10, 0x110, 0xe}], 0x30}, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "0200000000000000"}, {0x10, 0x110, 0xe}], 0x30}, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "0300000000000000"}, {0x10, 0x110, 0xe}], 0x30}, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "0400000000000000"}, {0x10, 0x110, 0xe}], 0x30}, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000100)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x2328, @empty}}, 0x24) nanosleep(&(0x7f0000000e00)={0x0, 0x5f5e100}, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)='world', 0x5}], 0x1, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) sendmsg(r1, &(0x7f0000000700)={&(0x7f0000000300)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x2327, @loopback}}, 0x24, &(0x7f0000000400)=[{&(0x7f0000000500)='hello2', 0x6}], 0x1, &(0x7f0000000800)=[{0x18, 0x110, 0x1, "0600000000000000"}], 0x18}, 0x0) 204.505835ms ago: executing program 0 (id=39): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nodev\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\n', 0x2) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r1, &(0x7f0000000200)={0x2, 0x2080, @loopback}, 0x10) listen(r1, 0x5) connect$inet(r2, &(0x7f0000000200)={0x2, 0x2080, @loopback}, 0x10) r3 = accept(r1, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000300), 0x4) setsockopt$inet_tcp_TLS_RX(r3, 0x11a, 0x2, &(0x7f0000000400)=@gcm_128={{0x303}, '12345678', '1234567812345678', '1234', '00000000'}, 0x28) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000300), 0x4) setsockopt$inet_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000400)=@gcm_128={{0x303}, '12345678', '1234567812345678', '1234', '00000000'}, 0x28) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/portlist\x00', 0x1, 0x0) write(r4, &(0x7f0000000540)='5\n', 0x2) sendto(r2, &(0x7f0000000600)="15030300020100", 0x7, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0) 64.553868ms ago: executing program 4 (id=40): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x8, 0x3a, 0x40, @remote, @local, {[], @echo_request}}}}}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000), 0x1, 0x20, 0x0, 0x0) 32.498669ms ago: executing program 2 (id=41): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x2327, @empty}}, 0x24) listen(r0, 0x5) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x10, 0x110, 0xe}], 0x30}, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "0200000000000000"}, {0x10, 0x110, 0xe}], 0x30}, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "0300000000000000"}, {0x10, 0x110, 0xe}], 0x30}, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r1, &(0x7f0000000700)={&(0x7f0000000300)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x2327, @loopback}}, 0x24, &(0x7f0000000400)=[{&(0x7f0000000500)='hello', 0x5}], 0x1, &(0x7f0000000800)=[{0x18, 0x110, 0x1, "0500000000000000"}], 0x18}, 0x0) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b00), 0x100}], 0x1}, 0x40) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)='world', 0x5}], 0x1, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) 0s ago: executing program 1 (id=42): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000300)='\x00\x00', 0x4, 0x0, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) nanosleep(&(0x7f0000000400)={0x2}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.186' (ED25519) to the list of known hosts. [ 59.662849][ T4175] cgroup: Unknown subsys name 'net' [ 59.802595][ T4175] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 61.309990][ T4175] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 63.265549][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 63.275554][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 63.411895][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 63.426963][ T4199] chnl_net:caif_netlink_parms(): no params data found [ 63.472189][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.480135][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.488170][ T4188] device bridge_slave_0 entered promiscuous mode [ 63.514654][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.521949][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.529927][ T4187] device bridge_slave_0 entered promiscuous mode [ 63.544776][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.551996][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.560573][ T4188] device bridge_slave_1 entered promiscuous mode [ 63.568887][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 63.583506][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.591021][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.599873][ T4187] device bridge_slave_1 entered promiscuous mode [ 63.672680][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.680707][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.689151][ T4189] device bridge_slave_0 entered promiscuous mode [ 63.698949][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.717300][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.733278][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.742545][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.750530][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.758459][ T4189] device bridge_slave_1 entered promiscuous mode [ 63.785660][ T4199] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.792893][ T4199] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.801354][ T4199] device bridge_slave_0 entered promiscuous mode [ 63.813558][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.838936][ T4199] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.846032][ T4199] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.854307][ T4199] device bridge_slave_1 entered promiscuous mode [ 63.880658][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.893288][ T4188] team0: Port device team_slave_0 added [ 63.919271][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.943665][ T4188] team0: Port device team_slave_1 added [ 63.951597][ T4187] team0: Port device team_slave_0 added [ 63.959790][ T4187] team0: Port device team_slave_1 added [ 63.967890][ T4199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.977261][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.984334][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.992947][ T4190] device bridge_slave_0 entered promiscuous mode [ 64.002866][ T4189] team0: Port device team_slave_0 added [ 64.023212][ T4199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.032925][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.040611][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.049352][ T4190] device bridge_slave_1 entered promiscuous mode [ 64.057790][ T4189] team0: Port device team_slave_1 added [ 64.083315][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.090374][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.116475][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.135169][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.142291][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.168254][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.186724][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.193861][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.219829][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.261021][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.268250][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.294733][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.308275][ T4199] team0: Port device team_slave_0 added [ 64.320723][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.332391][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.339473][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.372230][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.385276][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.392594][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.418878][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.432096][ T4199] team0: Port device team_slave_1 added [ 64.452741][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.496649][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.503840][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.529819][ T4199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.546301][ T4187] device hsr_slave_0 entered promiscuous mode [ 64.553549][ T4187] device hsr_slave_1 entered promiscuous mode [ 64.572177][ T4188] device hsr_slave_0 entered promiscuous mode [ 64.579698][ T4188] device hsr_slave_1 entered promiscuous mode [ 64.586414][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.594284][ T4188] Cannot create hsr debugfs directory [ 64.601052][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.608309][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.634580][ T4199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.652655][ T4190] team0: Port device team_slave_0 added [ 64.666379][ T4190] team0: Port device team_slave_1 added [ 64.710357][ T4189] device hsr_slave_0 entered promiscuous mode [ 64.718415][ T4189] device hsr_slave_1 entered promiscuous mode [ 64.725319][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.733031][ T4189] Cannot create hsr debugfs directory [ 64.776926][ T4199] device hsr_slave_0 entered promiscuous mode [ 64.783860][ T4199] device hsr_slave_1 entered promiscuous mode [ 64.791252][ T4199] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.798987][ T4199] Cannot create hsr debugfs directory [ 64.804927][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.811938][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.838438][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.853540][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.860896][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.886998][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.997949][ T1110] Bluetooth: hci1: command 0x0409 tx timeout [ 64.997959][ T1107] Bluetooth: hci3: command 0x0409 tx timeout [ 65.005127][ T1107] Bluetooth: hci0: command 0x0409 tx timeout [ 65.015777][ T1110] Bluetooth: hci2: command 0x0409 tx timeout [ 65.016779][ T1107] Bluetooth: hci4: command 0x0409 tx timeout [ 65.044279][ T4190] device hsr_slave_0 entered promiscuous mode [ 65.051122][ T4190] device hsr_slave_1 entered promiscuous mode [ 65.057832][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.065402][ T4190] Cannot create hsr debugfs directory [ 65.266589][ T4188] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.280253][ T4188] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.291004][ T4188] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.301298][ T4188] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.361115][ T4187] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.401968][ T4187] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.414492][ T4187] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.423433][ T4187] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.441400][ T4189] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.472357][ T4189] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.494805][ T4189] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.505116][ T4189] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.554437][ T4190] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.564495][ T4190] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.577967][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.603799][ T4190] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.614635][ T4190] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.654712][ T1129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.668924][ T1129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.698216][ T4199] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.710144][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.735652][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.744432][ T4199] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.774002][ T4199] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.788457][ T1129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.798992][ T1129] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.809158][ T1129] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.816315][ T1129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.825448][ T1129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.834781][ T1129] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.843315][ T1129] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.850440][ T1129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.859117][ T1129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.870560][ T1129] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.885589][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.895262][ T1129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.904033][ T1129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.913022][ T4199] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.927899][ T1129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.945418][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.967169][ T1129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.975301][ T1129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.987235][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.017733][ T1129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.027900][ T1129] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.036291][ T1129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.045632][ T1129] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.054212][ T1129] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.061339][ T1129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.069234][ T1129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.081205][ T1129] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.090485][ T1129] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.097624][ T1129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.105801][ T1129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.115382][ T1129] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.125266][ T1129] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.132379][ T1129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.140693][ T1129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.149943][ T1129] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.158553][ T1129] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.165814][ T1129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.174051][ T1129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.184015][ T1129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.193036][ T1129] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.201573][ T1129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.210707][ T1129] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.219450][ T1129] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.228390][ T1129] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.236313][ T1129] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.279673][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.294544][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.303917][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.312720][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.321816][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.331051][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.341595][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.350252][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.360132][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.369201][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.378339][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.386808][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.395597][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.404433][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.413435][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.422425][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.430419][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.455319][ T4187] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.465899][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.489631][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.497362][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.505925][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.515725][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.526539][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.535345][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.544803][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.553795][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.563417][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.571951][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.599549][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.628467][ T1129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.636333][ T1129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.656879][ T4199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.680849][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.724171][ T4199] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.751930][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.763360][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.775711][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.782850][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.792564][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.800811][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.808911][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.817736][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.826059][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.833165][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.841374][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.872028][ T1129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.882199][ T1129] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.892164][ T1129] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.899303][ T1129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.911979][ T1129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.921941][ T1129] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.930923][ T1129] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.938043][ T1129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.958515][ T1129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.978953][ T1129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.988019][ T1129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.005360][ T1129] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.019914][ T1129] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.029878][ T1129] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.055097][ T1129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.065336][ T1129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.075222][ T1129] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.083991][ T4233] Bluetooth: hci2: command 0x041b tx timeout [ 67.084972][ T4235] Bluetooth: hci4: command 0x041b tx timeout [ 67.096111][ T4235] Bluetooth: hci0: command 0x041b tx timeout [ 67.099650][ T1129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.103131][ T4235] Bluetooth: hci1: command 0x041b tx timeout [ 67.111237][ T1129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.116567][ T4235] Bluetooth: hci3: command 0x041b tx timeout [ 67.132516][ T1129] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.142686][ T1129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.152143][ T1129] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.164799][ T1129] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.186181][ T4190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 67.196917][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.224177][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.231494][ T1129] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.240255][ T1129] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.248398][ T1129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.256693][ T1129] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.265722][ T1129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.275373][ T1129] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.284003][ T1129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.292798][ T1129] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.301373][ T1129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.310525][ T1129] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.319708][ T1129] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.327218][ T1129] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.334676][ T1129] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.345475][ T4199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.358413][ T1129] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.365861][ T1129] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.399920][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.422919][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.436111][ T1129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.445993][ T1129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.488815][ T1129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.501136][ T1129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.512318][ T4188] device veth0_vlan entered promiscuous mode [ 67.539924][ T1129] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.549772][ T1129] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.558830][ T1129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.569592][ T1129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.602159][ T4189] device veth0_vlan entered promiscuous mode [ 67.618961][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.634906][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.645734][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.661958][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.685555][ T4188] device veth1_vlan entered promiscuous mode [ 67.707923][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.720001][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.728728][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.736545][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.744861][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.753450][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.761630][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.773923][ T4189] device veth1_vlan entered promiscuous mode [ 67.782959][ T4187] device veth0_vlan entered promiscuous mode [ 67.803351][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.813292][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.821237][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.853252][ T4199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.866723][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.876002][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.886553][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.896163][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.908524][ T4187] device veth1_vlan entered promiscuous mode [ 67.919853][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.939664][ T4189] device veth0_macvtap entered promiscuous mode [ 67.954638][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.963610][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.972678][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.981453][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.995871][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.004279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.013721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.036734][ T4189] device veth1_macvtap entered promiscuous mode [ 68.054734][ T4188] device veth0_macvtap entered promiscuous mode [ 68.067794][ T1129] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.083858][ T1129] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.092955][ T1129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.102646][ T1129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.125372][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.136705][ T4188] device veth1_macvtap entered promiscuous mode [ 68.156575][ T1129] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.171697][ T1129] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.186917][ T1129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.203057][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.233692][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.243637][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.252932][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.261770][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.271111][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.281794][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.303747][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.313121][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.325404][ T4189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.335516][ T4189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.344768][ T4189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.353637][ T4189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.370199][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.383255][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.395930][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.416039][ T4190] device veth0_vlan entered promiscuous mode [ 68.429081][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.439545][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.448852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.457461][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.468532][ T4187] device veth0_macvtap entered promiscuous mode [ 68.483278][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.494909][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.505997][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.520867][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.537076][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.545812][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.555018][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.576128][ T4187] device veth1_macvtap entered promiscuous mode [ 68.588610][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.596700][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.606515][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.615950][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.624924][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.633965][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.642944][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.652593][ T4190] device veth1_vlan entered promiscuous mode [ 68.684625][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.698000][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.709899][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.720617][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.732909][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.745871][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.756640][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.767590][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.778228][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.789220][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.800349][ T4187] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.810252][ T4187] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.819360][ T4187] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.828378][ T4187] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.841433][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.850264][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.859480][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.868314][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.900743][ T4199] device veth0_vlan entered promiscuous mode [ 68.946733][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.956468][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.971205][ T4199] device veth1_vlan entered promiscuous mode [ 68.985317][ T4190] device veth0_macvtap entered promiscuous mode [ 69.042682][ T4190] device veth1_macvtap entered promiscuous mode [ 69.049523][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.062979][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.076198][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.086052][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.094738][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.104224][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.112648][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.136341][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.147863][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.158495][ T1110] Bluetooth: hci3: command 0x040f tx timeout [ 69.159563][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.164591][ T1110] Bluetooth: hci1: command 0x040f tx timeout [ 69.175469][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.187278][ T1110] Bluetooth: hci0: command 0x040f tx timeout [ 69.191366][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.196889][ T1110] Bluetooth: hci2: command 0x040f tx timeout [ 69.207713][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.219263][ T1110] Bluetooth: hci4: command 0x040f tx timeout [ 69.224907][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.266454][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.276331][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.289301][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.300375][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.310540][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.321449][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.331690][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.342356][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.353515][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.369393][ T1236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.379921][ T1236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.392508][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.401786][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.411935][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.421023][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.430757][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.439845][ T4190] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.449277][ T4190] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.458957][ T4190] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.468477][ T4190] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.497953][ T4199] device veth0_macvtap entered promiscuous mode [ 69.536208][ T4199] device veth1_macvtap entered promiscuous mode [ 69.549256][ T1236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.557596][ T1236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.579173][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.594351][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.612778][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.620859][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.633262][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.648506][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.660840][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.672116][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.682283][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.693050][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.703181][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.713943][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.725784][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.770325][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.783447][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.810043][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.823264][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.834971][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.846007][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.856134][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.866902][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.876846][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.889331][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.900334][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.931317][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.939529][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.952684][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.961898][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.976898][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.005673][ T1236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.014436][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.020313][ T4199] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.046702][ T1236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.054050][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.063269][ T4199] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.072637][ T4199] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.081738][ T4199] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.109021][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.116885][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.167121][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.175486][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.202797][ T4275] netlink: 'syz.0.6': attribute type 4 has an invalid length. [ 70.248425][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.407652][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.444824][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.463486][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.501593][ T1236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.514111][ T1236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.577133][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.765086][ T4285] syz.2.3 (4285) used greatest stack depth: 21104 bytes left [ 70.844740][ T4297] IPVS: sync thread started: state = BACKUP, mcast_ifn = syz_tun, syncid = 0, id = 0 [ 70.887979][ T4294] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 70.979142][ T4302] FAULT_INJECTION: forcing a failure. [ 70.979142][ T4302] name failslab, interval 1, probability 100, space 0, times 10 [ 70.987854][ T3852] FAULT_INJECTION: forcing a failure. [ 70.987854][ T3852] name failslab, interval 1, probability 100, space 0, times 10 [ 70.992072][ C0] FAULT_INJECTION: forcing a failure. [ 70.992072][ C0] name failslab, interval 1, probability 100, space 0, times 10 [ 70.992156][ C0] CPU: 0 PID: 3852 Comm: dhcpcd Not tainted syzkaller #0 [ 70.992176][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 70.992187][ C0] Call Trace: [ 70.992194][ C0] [ 70.992202][ C0] dump_stack_lvl+0x188/0x250 [ 70.992213][ C1] FAULT_INJECTION: forcing a failure. [ 70.992213][ C1] name failslab, interval 1, probability 100, space 0, times 10 [ 70.992235][ C0] ? show_regs_print_info+0x20/0x20 [ 70.992254][ C0] ? load_image+0x410/0x410 [ 70.992274][ C0] ? prandom_u32+0x217/0x250 [ 70.992299][ C0] should_fail+0x383/0x4b0 [ 70.992320][ C0] should_failslab+0x5/0x20 [ 70.992335][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 70.992353][ C0] kmem_cache_alloc_node+0x47/0x2c0 [ 70.992367][ C0] ? __alloc_skb+0xf4/0x750 [ 70.992387][ C0] __alloc_skb+0xf4/0x750 [ 70.992406][ C0] __netdev_alloc_skb+0x110/0x4c0 [ 70.992424][ C0] ? __alloc_skb+0x750/0x750 [ 70.992437][ C0] ? mark_lock+0x94/0x320 [ 70.992460][ C0] __ieee80211_beacon_get+0xa8f/0x1ff0 [ 70.992484][ C0] ? verify_lock_unused+0x140/0x140 [ 70.992504][ C0] ? ieee80211_beacon_get_template+0x30/0x30 [ 70.992524][ C0] ? verify_lock_unused+0x140/0x140 [ 70.992567][ C0] ieee80211_beacon_get_tim+0x48/0x840 [ 70.992591][ C0] mac80211_hwsim_beacon_tx+0x104/0x900 [ 70.992624][ C0] __iterate_interfaces+0x225/0x4c0 [ 70.992640][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 70.992660][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 70.992677][ C0] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 70.992696][ C0] mac80211_hwsim_beacon+0x9b/0x180 [ 70.992712][ C0] ? hw_scan_work+0xef0/0xef0 [ 70.992729][ C0] __hrtimer_run_queues+0x4ea/0xb60 [ 70.992762][ C0] ? hrtimer_interrupt+0x8b0/0x8b0 [ 70.992786][ C0] hrtimer_run_softirq+0x176/0x240 [ 70.992807][ C0] handle_softirqs+0x336/0x830 [ 70.992828][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 70.992846][ C0] ? do_softirq+0x210/0x210 [ 70.992860][ C0] ? hrtimer_interrupt+0x6a2/0x8b0 [ 70.992880][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 70.992899][ C0] __irq_exit_rcu+0x13b/0x230 [ 70.992914][ C0] ? irq_exit_rcu+0x20/0x20 [ 70.992938][ C0] irq_exit_rcu+0x5/0x20 [ 70.992951][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 70.992967][ C0] [ 70.992972][ C0] [ 70.992979][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 70.992995][ C0] RIP: 0010:console_trylock_spinning+0x301/0x370 [ 70.993012][ C0] Code: 85 db 74 89 e8 10 ec 18 00 fb 31 c0 eb 48 e8 06 ec 18 00 e8 e1 03 60 08 48 85 db 74 d1 e8 f7 eb 18 00 fb 48 c7 c7 a0 3a 31 8c <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 68 ba 10 60 [ 70.993025][ C0] RSP: 0018:ffffc9000313f460 EFLAGS: 00000293 [ 70.993042][ C0] RAX: ffffffff816010b9 RBX: 0000000000000200 RCX: ffff888027209dc0 [ 70.993054][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8c313aa0 [ 70.993064][ C0] RBP: ffffc9000313f530 R08: ffffffff8d8b0def R09: 1ffffffff1b161bd [ 70.993076][ C0] R10: dffffc0000000000 R11: fffffbfff1b161be R12: dffffc0000000000 [ 70.993087][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffff92000627e8c [ 70.993105][ C0] ? console_trylock_spinning+0x2f9/0x370 [ 70.993126][ C0] ? vprintk_emit+0x150/0x150 [ 70.993146][ C0] ? verify_lock_unused+0x140/0x140 [ 70.993164][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 70.993185][ C0] vprintk_emit+0xa7/0x150 [ 70.993202][ C0] _printk+0xda/0x130 [ 70.993223][ C0] ? load_image+0x410/0x410 [ 70.993241][ C0] ? prandom_u32+0x217/0x250 [ 70.993264][ C0] should_fail+0x364/0x4b0 [ 70.993292][ C0] should_failslab+0x5/0x20 [ 70.993306][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 70.993342][ C0] kmem_cache_alloc_node+0x47/0x2c0 [ 70.993356][ C0] ? __alloc_skb+0xf4/0x750 [ 70.993375][ C0] __alloc_skb+0xf4/0x750 [ 70.993394][ C0] alloc_skb_with_frags+0xa7/0x720 [ 70.993421][ C0] sock_alloc_send_pskb+0x87f/0x9a0 [ 70.993450][ C0] ? sock_kzfree_s+0x50/0x50 [ 70.993463][ C0] ? do_raw_spin_lock+0x128/0x2f0 [ 70.993480][ C0] ? __rwlock_init+0x140/0x140 [ 70.993498][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 70.993517][ C0] unix_dgram_sendmsg+0x6f8/0x19c0 [ 70.993542][ C0] ? aa_sk_perm+0x7dc/0x910 [ 70.993563][ C0] ? aa_af_perm+0x340/0x340 [ 70.993579][ C0] ? unix_dgram_poll+0x680/0x680 [ 70.993593][ C0] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 70.993623][ C0] ? apparmor_socket_sendmsg+0x88/0x230 [ 70.993639][ C0] ? unix_seqpacket_sendmsg+0x108/0x1d0 [ 70.993658][ C0] sock_write_iter+0x2a6/0x3a0 [ 70.993677][ C0] ? sock_read_iter+0x380/0x380 [ 70.993701][ C0] ? memset+0x1e/0x40 [ 70.993718][ C0] ? iov_iter_init+0xb4/0x170 [ 70.993736][ C0] vfs_write+0x748/0xd70 [ 70.993758][ C0] ? file_end_write+0x250/0x250 [ 70.993789][ C0] ? __fdget_pos+0x1e2/0x370 [ 70.993807][ C0] ksys_write+0x153/0x260 [ 70.993824][ C0] ? __ia32_sys_read+0x80/0x80 [ 70.993847][ C0] do_syscall_64+0x4c/0xa0 [ 70.993860][ C0] ? clear_bhb_loop+0x30/0x80 [ 70.993874][ C0] ? clear_bhb_loop+0x30/0x80 [ 70.993890][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 70.993906][ C0] RIP: 0033:0x7fcd86a5d407 [ 70.993920][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 70.993932][ C0] RSP: 002b:00007ffdead6fed0 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 70.993948][ C0] RAX: ffffffffffffffda RBX: 00007fcd869d3740 RCX: 00007fcd86a5d407 [ 70.993960][ C0] RDX: 0000000000000047 RSI: 00007ffdead6ff30 RDI: 0000000000000005 [ 70.993970][ C0] RBP: 00005584f1452a48 R08: 0000000000000000 R09: 0000000000000000 [ 70.993980][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffdead70360 [ 70.993990][ C0] R13: 0000000000007af7 R14: 0000000000000001 R15: 0000000000000001 [ 70.994012][ C0] [ 70.994019][ C1] CPU: 1 PID: 4302 Comm: syz.1.11 Not tainted syzkaller #0 [ 70.994032][ C0] FAULT_INJECTION: forcing a failure. [ 70.994032][ C0] name failslab, interval 1, probability 100, space 0, times 9 [ 70.994038][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 70.994048][ C1] Call Trace: [ 70.994055][ C1] [ 70.994062][ C1] dump_stack_lvl+0x188/0x250 [ 70.994082][ C1] ? show_regs_print_info+0x20/0x20 [ 70.994099][ C1] ? load_image+0x410/0x410 [ 70.994126][ C1] ? prandom_u32+0x217/0x250 [ 70.994149][ C1] should_fail+0x383/0x4b0 [ 70.994169][ C1] should_failslab+0x5/0x20 [ 70.994182][ C1] slab_pre_alloc_hook+0x51/0xc0 [ 70.994199][ C1] kmem_cache_alloc_node+0x47/0x2c0 [ 70.994213][ C1] ? __alloc_skb+0xf4/0x750 [ 70.994232][ C1] __alloc_skb+0xf4/0x750 [ 70.994250][ C1] __netdev_alloc_skb+0x110/0x4c0 [ 70.994268][ C1] ? __alloc_skb+0x750/0x750 [ 70.994282][ C1] ? mark_lock+0x94/0x320 [ 70.994303][ C1] __ieee80211_beacon_get+0xa8f/0x1ff0 [ 70.994325][ C1] ? verify_lock_unused+0x140/0x140 [ 70.994345][ C1] ? ieee80211_beacon_get_template+0x30/0x30 [ 70.994365][ C1] ? verify_lock_unused+0x140/0x140 [ 70.994408][ C1] ieee80211_beacon_get_tim+0x48/0x840 [ 70.994429][ C1] mac80211_hwsim_beacon_tx+0x104/0x900 [ 70.994452][ C1] __iterate_interfaces+0x225/0x4c0 [ 70.994467][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 70.994486][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 70.994504][ C1] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 70.994522][ C1] mac80211_hwsim_beacon+0x9b/0x180 [ 70.994538][ C1] ? hw_scan_work+0xef0/0xef0 [ 70.994555][ C1] __hrtimer_run_queues+0x4ea/0xb60 [ 70.994587][ C1] ? hrtimer_interrupt+0x8b0/0x8b0 [ 70.994612][ C1] hrtimer_run_softirq+0x176/0x240 [ 70.994633][ C1] handle_softirqs+0x336/0x830 [ 70.994658][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 70.994676][ C1] ? do_softirq+0x210/0x210 [ 70.994690][ C1] ? hrtimer_interrupt+0x6a2/0x8b0 [ 70.994709][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 70.994728][ C1] __irq_exit_rcu+0x13b/0x230 [ 70.994742][ C1] ? irq_exit_rcu+0x20/0x20 [ 70.994766][ C1] irq_exit_rcu+0x5/0x20 [ 70.994779][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 70.994795][ C1] [ 70.994800][ C1] [ 70.994807][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 70.994822][ C1] RIP: 0010:console_unlock+0xc90/0x10f0 [ 70.994837][ C1] Code: 75 11 e8 13 df 18 00 4d 85 e4 75 16 e8 09 df 18 00 eb 15 e8 02 df 18 00 e8 dd f6 5f 08 4d 85 e4 74 ea e8 f3 de 18 00 fb 31 ff <89> de e8 49 e2 18 00 85 db 0f 94 c0 22 44 24 1f 3c 01 75 1f e8 d7 [ 70.994849][ C1] RSP: 0018:ffffc900014ef960 EFLAGS: 00000246 [ 70.994863][ C1] RAX: ffffffff81601dbd RBX: 0000000000000001 RCX: 0000000000080000 [ 70.994874][ C1] RDX: ffffc90003cd3000 RSI: 0000000000002e67 RDI: 0000000000000000 [ 70.994885][ C1] RBP: ffffc900014efbd0 R08: ffffffff8d8b0def R09: 1ffffffff1b161bd [ 70.994896][ C1] R10: dffffc0000000000 R11: fffffbfff1b161be R12: 0000000000000200 [ 70.994907][ C1] R13: 0000000000000090 R14: 0000000000000000 R15: dffffc0000000000 [ 70.994923][ C1] ? console_unlock+0xc8d/0x10f0 [ 70.994944][ C1] ? read_lock_is_recursive+0x10/0x10 [ 70.994966][ C1] ? console_trylock_spinning+0x370/0x370 [ 70.994980][ C1] ? __down_trylock_console_sem+0xf2/0x1f0 [ 70.994998][ C1] ? __down_trylock_console_sem+0x19f/0x1f0 [ 70.995012][ C1] ? vprintk_emit+0xa7/0x150 [ 70.995026][ C1] ? printk_parse_prefix+0x310/0x310 [ 70.995039][ C1] ? vprintk_emit+0xa7/0x150 [ 70.995053][ C1] ? console_trylock+0x70/0x70 [ 70.995080][ C1] ? vprintk_emit+0x150/0x150 [ 70.995107][ C1] vprintk_emit+0xc0/0x150 [ 70.995130][ C1] _printk+0xda/0x130 [ 70.995151][ C1] ? load_image+0x410/0x410 [ 70.995169][ C1] ? prandom_u32+0x217/0x250 [ 70.995192][ C1] should_fail+0x364/0x4b0 [ 70.995211][ C1] should_failslab+0x5/0x20 [ 70.995225][ C1] slab_pre_alloc_hook+0x51/0xc0 [ 70.995238][ C1] ? sockfs_init_fs_context+0xa0/0xa0 [ 70.995254][ C1] ? sock_alloc_inode+0x17/0xb0 [ 70.995270][ C1] kmem_cache_alloc+0x3d/0x280 [ 70.995285][ C1] ? sockfs_init_fs_context+0xa0/0xa0 [ 70.995303][ C1] sock_alloc_inode+0x17/0xb0 [ 70.995319][ C1] ? sockfs_init_fs_context+0xa0/0xa0 [ 70.995333][ C1] new_inode_pseudo+0x5f/0x210 [ 70.995352][ C1] __sock_create+0x128/0x910 [ 70.995375][ C1] __sys_socket+0xe2/0x170 [ 70.995393][ C1] __x64_sys_socket+0x76/0x80 [ 70.995409][ C1] do_syscall_64+0x4c/0xa0 [ 70.995422][ C1] ? clear_bhb_loop+0x30/0x80 [ 70.995436][ C1] ? clear_bhb_loop+0x30/0x80 [ 70.995452][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 70.995467][ C1] RIP: 0033:0x7f9d47123019 [ 70.995480][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.995492][ C1] RSP: 002b:00007f9d4537b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 70.995508][ C1] RAX: ffffffffffffffda RBX: 00007f9d473aafa0 RCX: 00007f9d47123019 [ 70.995519][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 70.995529][ C1] RBP: 00007f9d471ba00c R08: 0000000000000000 R09: 0000000000000000 [ 70.995539][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 70.995549][ C1] R13: 00007f9d473ab038 R14: 00007f9d473aafa0 R15: 00007fff14f54c38 [ 70.995572][ C1] [ 70.995578][ C0] CPU: 0 PID: 3852 Comm: dhcpcd Not tainted syzkaller #0 [ 70.995590][ C1] FAULT_INJECTION: forcing a failure. [ 70.995590][ C1] name failslab, interval 1, probability 100, space 0, times 8 [ 70.995597][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 70.995607][ C0] Call Trace: [ 70.995622][ C0] [ 70.995628][ C0] dump_stack_lvl+0x188/0x250 [ 70.995647][ C0] ? show_regs_print_info+0x20/0x20 [ 70.995671][ C0] ? load_image+0x410/0x410 [ 70.995691][ C0] ? prandom_u32+0x217/0x250 [ 70.995714][ C0] should_fail+0x383/0x4b0 [ 70.995733][ C0] should_failslab+0x5/0x20 [ 70.995746][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 70.995763][ C0] kmem_cache_alloc_node+0x47/0x2c0 [ 70.995776][ C0] ? __alloc_skb+0xf4/0x750 [ 70.995795][ C0] __alloc_skb+0xf4/0x750 [ 70.995814][ C0] __netdev_alloc_skb+0x110/0x4c0 [ 70.995831][ C0] ? __alloc_skb+0x750/0x750 [ 70.995844][ C0] ? mark_lock+0x94/0x320 [ 70.995866][ C0] __ieee80211_beacon_get+0xa8f/0x1ff0 [ 70.995887][ C0] ? verify_lock_unused+0x140/0x140 [ 70.995907][ C0] ? ieee80211_beacon_get_template+0x30/0x30 [ 70.995924][ C0] ? verify_lock_unused+0x140/0x140 [ 70.995941][ C0] ? verify_lock_unused+0x140/0x140 [ 70.995983][ C0] ieee80211_beacon_get_tim+0x48/0x840 [ 70.996005][ C0] mac80211_hwsim_beacon_tx+0x104/0x900 [ 70.996027][ C0] __iterate_interfaces+0x225/0x4c0 [ 70.996043][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 70.996061][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 70.996079][ C0] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 70.996097][ C0] mac80211_hwsim_beacon+0x9b/0x180 [ 70.996113][ C0] ? hw_scan_work+0xef0/0xef0 [ 70.996131][ C0] __hrtimer_run_queues+0x4ea/0xb60 [ 70.996162][ C0] ? hrtimer_interrupt+0x8b0/0x8b0 [ 70.996187][ C0] hrtimer_run_softirq+0x176/0x240 [ 70.996208][ C0] handle_softirqs+0x336/0x830 [ 70.996227][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 70.996245][ C0] ? do_softirq+0x210/0x210 [ 70.996266][ C0] ? hrtimer_interrupt+0x6a2/0x8b0 [ 70.996285][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 70.996303][ C0] __irq_exit_rcu+0x13b/0x230 [ 70.996318][ C0] ? irq_exit_rcu+0x20/0x20 [ 70.996342][ C0] irq_exit_rcu+0x5/0x20 [ 70.996355][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 70.996371][ C0] [ 70.996376][ C0] [ 70.996382][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 70.996398][ C0] RIP: 0010:console_trylock_spinning+0x301/0x370 [ 70.996413][ C0] Code: 85 db 74 89 e8 10 ec 18 00 fb 31 c0 eb 48 e8 06 ec 18 00 e8 e1 03 60 08 48 85 db 74 d1 e8 f7 eb 18 00 fb 48 c7 c7 a0 3a 31 8c <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 68 ba 10 60 [ 70.996425][ C0] RSP: 0018:ffffc9000313f460 EFLAGS: 00000293 [ 70.996438][ C0] RAX: ffffffff816010b9 RBX: 0000000000000200 RCX: ffff888027209dc0 [ 70.996449][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8c313aa0 [ 70.996459][ C0] RBP: ffffc9000313f530 R08: ffffffff8d8b0def R09: 1ffffffff1b161bd [ 70.996471][ C0] R10: dffffc0000000000 R11: fffffbfff1b161be R12: dffffc0000000000 [ 70.996482][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffff92000627e8c [ 70.996498][ C0] ? console_trylock_spinning+0x2f9/0x370 [ 70.996519][ C0] ? vprintk_emit+0x150/0x150 [ 70.996538][ C0] ? verify_lock_unused+0x140/0x140 [ 70.996556][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 70.996577][ C0] vprintk_emit+0xa7/0x150 [ 70.996593][ C0] _printk+0xda/0x130 [ 70.996620][ C0] ? load_image+0x410/0x410 [ 70.996639][ C0] ? prandom_u32+0x217/0x250 [ 70.996662][ C0] should_fail+0x364/0x4b0 [ 70.996681][ C0] should_failslab+0x5/0x20 [ 70.996694][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 70.996711][ C0] kmem_cache_alloc_node+0x47/0x2c0 [ 70.996724][ C0] ? __alloc_skb+0xf4/0x750 [ 70.996743][ C0] __alloc_skb+0xf4/0x750 [ 70.996762][ C0] alloc_skb_with_frags+0xa7/0x720 [ 70.996788][ C0] sock_alloc_send_pskb+0x87f/0x9a0 [ 70.996817][ C0] ? sock_kzfree_s+0x50/0x50 [ 70.996830][ C0] ? do_raw_spin_lock+0x128/0x2f0 [ 70.996847][ C0] ? __rwlock_init+0x140/0x140 [ 70.996865][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 70.996884][ C0] unix_dgram_sendmsg+0x6f8/0x19c0 [ 70.996908][ C0] ? aa_sk_perm+0x7dc/0x910 [ 70.996928][ C0] ? aa_af_perm+0x340/0x340 [ 70.996944][ C0] ? unix_dgram_poll+0x680/0x680 [ 70.996958][ C0] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 70.996980][ C0] ? apparmor_socket_sendmsg+0x88/0x230 [ 70.996996][ C0] ? unix_seqpacket_sendmsg+0x108/0x1d0 [ 70.997021][ C0] sock_write_iter+0x2a6/0x3a0 [ 70.997045][ C0] ? sock_read_iter+0x380/0x380 [ 70.997071][ C0] ? memset+0x1e/0x40 [ 70.997087][ C0] ? iov_iter_init+0xb4/0x170 [ 70.997105][ C0] vfs_write+0x748/0xd70 [ 70.997127][ C0] ? file_end_write+0x250/0x250 [ 70.997157][ C0] ? __fdget_pos+0x1e2/0x370 [ 70.997175][ C0] ksys_write+0x153/0x260 [ 70.997192][ C0] ? __ia32_sys_read+0x80/0x80 [ 70.997215][ C0] do_syscall_64+0x4c/0xa0 [ 70.997228][ C0] ? clear_bhb_loop+0x30/0x80 [ 70.997242][ C0] ? clear_bhb_loop+0x30/0x80 [ 70.997258][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 70.997273][ C0] RIP: 0033:0x7fcd86a5d407 [ 70.997285][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 70.997297][ C0] RSP: 002b:00007ffdead6fed0 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 70.997313][ C0] RAX: ffffffffffffffda RBX: 00007fcd869d3740 RCX: 00007fcd86a5d407 [ 70.997324][ C0] RDX: 0000000000000047 RSI: 00007ffdead6ff30 RDI: 0000000000000005 [ 70.997334][ C0] RBP: 00005584f1452a48 R08: 0000000000000000 R09: 0000000000000000 [ 70.997344][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffdead70360 [ 70.997354][ C0] R13: 0000000000007af7 R14: 0000000000000001 R15: 0000000000000001 [ 70.997376][ C0] [ 70.997382][ C1] CPU: 1 PID: 4302 Comm: syz.1.11 Not tainted syzkaller #0 [ 70.997401][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 70.997410][ C1] Call Trace: [ 70.997416][ C1] [ 70.997423][ C1] dump_stack_lvl+0x188/0x250 [ 70.997448][ C1] ? show_regs_print_info+0x20/0x20 [ 71.010523][ C0] FAULT_INJECTION: forcing a failure. [ 71.010523][ C0] name failslab, interval 1, probability 100, space 0, times 7 [ 71.023270][ C1] ? load_image+0x410/0x410 [ 71.023300][ C1] ? prandom_u32+0x217/0x250 [ 71.023329][ C1] should_fail+0x383/0x4b0 [ 72.772281][ C1] should_failslab+0x5/0x20 [ 72.776806][ C1] slab_pre_alloc_hook+0x51/0xc0 [ 72.781756][ C1] kmem_cache_alloc_node+0x47/0x2c0 [ 72.786961][ C1] ? __alloc_skb+0xf4/0x750 [ 72.791474][ C1] __alloc_skb+0xf4/0x750 [ 72.795816][ C1] __netdev_alloc_skb+0x110/0x4c0 [ 72.800866][ C1] ? __alloc_skb+0x750/0x750 [ 72.805480][ C1] ? mark_lock+0x94/0x320 [ 72.809835][ C1] __ieee80211_beacon_get+0xa8f/0x1ff0 [ 72.815315][ C1] ? verify_lock_unused+0x140/0x140 [ 72.820532][ C1] ? ieee80211_beacon_get_template+0x30/0x30 [ 72.826524][ C1] ? verify_lock_unused+0x140/0x140 [ 72.831728][ C1] ? verify_lock_unused+0x140/0x140 [ 72.836959][ C1] ieee80211_beacon_get_tim+0x48/0x840 [ 72.842426][ C1] mac80211_hwsim_beacon_tx+0x104/0x900 [ 72.847985][ C1] __iterate_interfaces+0x225/0x4c0 [ 72.853189][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 72.859442][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 72.865685][ C1] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 72.872713][ C1] mac80211_hwsim_beacon+0x9b/0x180 [ 72.877926][ C1] ? hw_scan_work+0xef0/0xef0 [ 72.882608][ C1] __hrtimer_run_queues+0x4ea/0xb60 [ 72.887831][ C1] ? hrtimer_interrupt+0x8b0/0x8b0 [ 72.892958][ C1] hrtimer_run_softirq+0x176/0x240 [ 72.898076][ C1] handle_softirqs+0x336/0x830 [ 72.902850][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 72.907705][ C1] ? do_softirq+0x210/0x210 [ 72.912210][ C1] ? hrtimer_interrupt+0x6a2/0x8b0 [ 72.917326][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 72.922532][ C1] __irq_exit_rcu+0x13b/0x230 [ 72.927218][ C1] ? irq_exit_rcu+0x20/0x20 [ 72.931733][ C1] irq_exit_rcu+0x5/0x20 [ 72.935974][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 72.941611][ C1] [ 72.944542][ C1] [ 72.947484][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 72.953468][ C1] RIP: 0010:console_unlock+0xc90/0x10f0 [ 72.959025][ C1] Code: 75 11 e8 13 df 18 00 4d 85 e4 75 16 e8 09 df 18 00 eb 15 e8 02 df 18 00 e8 dd f6 5f 08 4d 85 e4 74 ea e8 f3 de 18 00 fb 31 ff <89> de e8 49 e2 18 00 85 db 0f 94 c0 22 44 24 1f 3c 01 75 1f e8 d7 [ 72.978635][ C1] RSP: 0018:ffffc900014ef960 EFLAGS: 00000246 [ 72.984711][ C1] RAX: ffffffff81601dbd RBX: 0000000000000001 RCX: 0000000000080000 [ 72.992692][ C1] RDX: ffffc90003cd3000 RSI: 0000000000002e67 RDI: 0000000000000000 [ 73.000689][ C1] RBP: ffffc900014efbd0 R08: ffffffff8d8b0def R09: 1ffffffff1b161bd [ 73.008752][ C1] R10: dffffc0000000000 R11: fffffbfff1b161be R12: 0000000000000200 [ 73.016729][ C1] R13: 0000000000000090 R14: 0000000000000000 R15: dffffc0000000000 [ 73.024718][ C1] ? console_unlock+0xc8d/0x10f0 [ 73.029666][ C1] ? read_lock_is_recursive+0x10/0x10 [ 73.035066][ C1] ? console_trylock_spinning+0x370/0x370 [ 73.040788][ C1] ? __down_trylock_console_sem+0xf2/0x1f0 [ 73.046604][ C1] ? __down_trylock_console_sem+0x19f/0x1f0 [ 73.052497][ C1] ? vprintk_emit+0xa7/0x150 [ 73.057088][ C1] ? printk_parse_prefix+0x310/0x310 [ 73.062386][ C1] ? vprintk_emit+0xa7/0x150 [ 73.066976][ C1] ? console_trylock+0x70/0x70 [ 73.071757][ C1] ? vprintk_emit+0x150/0x150 [ 73.076447][ C1] vprintk_emit+0xc0/0x150 [ 73.080869][ C1] _printk+0xda/0x130 [ 73.084861][ C1] ? load_image+0x410/0x410 [ 73.089368][ C1] ? prandom_u32+0x217/0x250 [ 73.093967][ C1] should_fail+0x364/0x4b0 [ 73.098390][ C1] should_failslab+0x5/0x20 [ 73.102893][ C1] slab_pre_alloc_hook+0x51/0xc0 [ 73.107833][ C1] ? sockfs_init_fs_context+0xa0/0xa0 [ 73.113207][ C1] ? sock_alloc_inode+0x17/0xb0 [ 73.118058][ C1] kmem_cache_alloc+0x3d/0x280 [ 73.122823][ C1] ? sockfs_init_fs_context+0xa0/0xa0 [ 73.128197][ C1] sock_alloc_inode+0x17/0xb0 [ 73.132874][ C1] ? sockfs_init_fs_context+0xa0/0xa0 [ 73.138248][ C1] new_inode_pseudo+0x5f/0x210 [ 73.143021][ C1] __sock_create+0x128/0x910 [ 73.147620][ C1] __sys_socket+0xe2/0x170 [ 73.152044][ C1] __x64_sys_socket+0x76/0x80 [ 73.156731][ C1] do_syscall_64+0x4c/0xa0 [ 73.161150][ C1] ? clear_bhb_loop+0x30/0x80 [ 73.165830][ C1] ? clear_bhb_loop+0x30/0x80 [ 73.170510][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 73.176594][ C1] RIP: 0033:0x7f9d47123019 [ 73.181018][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.200629][ C1] RSP: 002b:00007f9d4537b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 73.209050][ C1] RAX: ffffffffffffffda RBX: 00007f9d473aafa0 RCX: 00007f9d47123019 [ 73.217144][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 73.225142][ C1] RBP: 00007f9d471ba00c R08: 0000000000000000 R09: 0000000000000000 [ 73.233126][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.241106][ C1] R13: 00007f9d473ab038 R14: 00007f9d473aafa0 R15: 00007fff14f54c38 [ 73.249112][ C1] [ 73.252153][ C0] CPU: 0 PID: 14 Comm: ksoftirqd/0 Not tainted syzkaller #0 [ 73.252276][ C1] FAULT_INJECTION: forcing a failure. [ 73.252276][ C1] name failslab, interval 1, probability 100, space 0, times 6 [ 73.259467][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 73.259481][ C0] Call Trace: [ 73.259492][ C0] [ 73.259500][ C0] dump_stack_lvl+0x188/0x250 [ 73.293204][ C0] ? show_regs_print_info+0x20/0x20 [ 73.298415][ C0] ? load_image+0x410/0x410 [ 73.302930][ C0] ? prandom_u32+0x217/0x250 [ 73.307532][ C0] should_fail+0x383/0x4b0 [ 73.311961][ C0] should_failslab+0x5/0x20 [ 73.316472][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 73.321414][ C0] kmem_cache_alloc_node+0x47/0x2c0 [ 73.326614][ C0] ? __alloc_skb+0xf4/0x750 [ 73.331123][ C0] __alloc_skb+0xf4/0x750 [ 73.335466][ C0] ndisc_alloc_skb+0xa6/0x420 [ 73.340156][ C0] ndisc_send_rs+0x271/0x700 [ 73.344758][ C0] ? ipv6_get_lladdr+0x33f/0x3b0 [ 73.349703][ C0] addrconf_rs_timer+0x367/0x640 [ 73.354645][ C0] ? detach_timer+0x33/0x2b0 [ 73.359243][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 73.365318][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 73.371389][ C0] call_timer_fn+0x17b/0x540 [ 73.375987][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 73.382067][ C0] ? __run_timers+0x810/0x810 [ 73.386754][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 73.391956][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 73.397174][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 73.403249][ C0] __run_timers+0x56c/0x810 [ 73.407758][ C0] ? lock_chain_count+0x20/0x20 [ 73.412630][ C0] ? detach_timer+0x2b0/0x2b0 [ 73.417314][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 73.423305][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 73.428179][ C0] run_timer_softirq+0x63/0xf0 [ 73.432953][ C0] handle_softirqs+0x336/0x830 [ 73.437728][ C0] ? run_ksoftirqd+0xa4/0x100 [ 73.442414][ C0] ? do_softirq+0x210/0x210 [ 73.446921][ C0] ? run_ksoftirqd+0x81/0x100 [ 73.451718][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 73.456946][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 73.462256][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 73.467479][ C0] run_ksoftirqd+0xa4/0x100 [ 73.472011][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 73.477238][ C0] smpboot_thread_fn+0x520/0x990 [ 73.482202][ C0] kthread+0x42e/0x520 [ 73.486276][ C0] ? cpu_report_death+0x180/0x180 [ 73.491321][ C0] ? kthread_blkcg+0xd0/0xd0 [ 73.495939][ C0] ret_from_fork+0x1f/0x30 [ 73.500388][ C0] [ 73.503429][ C1] CPU: 1 PID: 4302 Comm: syz.1.11 Not tainted syzkaller #0 [ 73.503723][ C0] FAULT_INJECTION: forcing a failure. [ 73.503723][ C0] name failslab, interval 1, probability 100, space 0, times 5 [ 73.510751][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 73.510768][ C1] Call Trace: [ 73.510778][ C1] [ 73.510786][ C1] dump_stack_lvl+0x188/0x250 [ 73.510818][ C1] ? show_regs_print_info+0x20/0x20 [ 73.510839][ C1] ? load_image+0x410/0x410 [ 73.510861][ C1] ? prandom_u32+0x217/0x250 [ 73.558884][ C1] should_fail+0x383/0x4b0 [ 73.563346][ C1] should_failslab+0x5/0x20 [ 73.567894][ C1] slab_pre_alloc_hook+0x51/0xc0 [ 73.572841][ C1] kmem_cache_alloc_node+0x47/0x2c0 [ 73.578046][ C1] ? __alloc_skb+0xf4/0x750 [ 73.582565][ C1] __alloc_skb+0xf4/0x750 [ 73.587043][ C1] __netdev_alloc_skb+0x110/0x4c0 [ 73.592095][ C1] ? __alloc_skb+0x750/0x750 [ 73.596691][ C1] ? mark_lock+0x94/0x320 [ 73.601042][ C1] __ieee80211_beacon_get+0xa8f/0x1ff0 [ 73.606532][ C1] ? verify_lock_unused+0x140/0x140 [ 73.611766][ C1] ? ieee80211_beacon_get_template+0x30/0x30 [ 73.617755][ C1] ? verify_lock_unused+0x140/0x140 [ 73.622972][ C1] ? verify_lock_unused+0x140/0x140 [ 73.628221][ C1] ieee80211_beacon_get_tim+0x48/0x840 [ 73.633702][ C1] mac80211_hwsim_beacon_tx+0x104/0x900 [ 73.639282][ C1] __iterate_interfaces+0x225/0x4c0 [ 73.644596][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 73.650864][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 73.657123][ C1] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 73.664162][ C1] mac80211_hwsim_beacon+0x9b/0x180 [ 73.669367][ C1] ? hw_scan_work+0xef0/0xef0 [ 73.674059][ C1] __hrtimer_run_queues+0x4ea/0xb60 [ 73.679297][ C1] ? hrtimer_interrupt+0x8b0/0x8b0 [ 73.684428][ C1] hrtimer_run_softirq+0x176/0x240 [ 73.689555][ C1] handle_softirqs+0x336/0x830 [ 73.694334][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 73.699209][ C1] ? do_softirq+0x210/0x210 [ 73.703751][ C1] ? hrtimer_interrupt+0x6a2/0x8b0 [ 73.708892][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 73.714117][ C1] __irq_exit_rcu+0x13b/0x230 [ 73.718897][ C1] ? irq_exit_rcu+0x20/0x20 [ 73.723513][ C1] irq_exit_rcu+0x5/0x20 [ 73.727764][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 73.733403][ C1] [ 73.736336][ C1] [ 73.739272][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 73.745266][ C1] RIP: 0010:console_unlock+0xc90/0x10f0 [ 73.750836][ C1] Code: 75 11 e8 13 df 18 00 4d 85 e4 75 16 e8 09 df 18 00 eb 15 e8 02 df 18 00 e8 dd f6 5f 08 4d 85 e4 74 ea e8 f3 de 18 00 fb 31 ff <89> de e8 49 e2 18 00 85 db 0f 94 c0 22 44 24 1f 3c 01 75 1f e8 d7 [ 73.770453][ C1] RSP: 0018:ffffc900014ef960 EFLAGS: 00000246 [ 73.776530][ C1] RAX: ffffffff81601dbd RBX: 0000000000000001 RCX: 0000000000080000 [ 73.784504][ C1] RDX: ffffc90003cd3000 RSI: 0000000000002e67 RDI: 0000000000000000 [ 73.792681][ C1] RBP: ffffc900014efbd0 R08: ffffffff8d8b0def R09: 1ffffffff1b161bd [ 73.800660][ C1] R10: dffffc0000000000 R11: fffffbfff1b161be R12: 0000000000000200 [ 73.808638][ C1] R13: 0000000000000090 R14: 0000000000000000 R15: dffffc0000000000 [ 73.816716][ C1] ? console_unlock+0xc8d/0x10f0 [ 73.821674][ C1] ? read_lock_is_recursive+0x10/0x10 [ 73.827056][ C1] ? console_trylock_spinning+0x370/0x370 [ 73.832775][ C1] ? __down_trylock_console_sem+0xf2/0x1f0 [ 73.838585][ C1] ? __down_trylock_console_sem+0x19f/0x1f0 [ 73.844475][ C1] ? vprintk_emit+0xa7/0x150 [ 73.849067][ C1] ? printk_parse_prefix+0x310/0x310 [ 73.854352][ C1] ? vprintk_emit+0xa7/0x150 [ 73.858950][ C1] ? console_trylock+0x70/0x70 [ 73.863818][ C1] ? vprintk_emit+0x150/0x150 [ 73.868513][ C1] vprintk_emit+0xc0/0x150 [ 73.872936][ C1] _printk+0xda/0x130 [ 73.876925][ C1] ? load_image+0x410/0x410 [ 73.881435][ C1] ? prandom_u32+0x217/0x250 [ 73.886037][ C1] should_fail+0x364/0x4b0 [ 73.890462][ C1] should_failslab+0x5/0x20 [ 73.894968][ C1] slab_pre_alloc_hook+0x51/0xc0 [ 73.899908][ C1] ? sockfs_init_fs_context+0xa0/0xa0 [ 73.905298][ C1] ? sock_alloc_inode+0x17/0xb0 [ 73.910152][ C1] kmem_cache_alloc+0x3d/0x280 [ 73.914920][ C1] ? sockfs_init_fs_context+0xa0/0xa0 [ 73.920294][ C1] sock_alloc_inode+0x17/0xb0 [ 73.924973][ C1] ? sockfs_init_fs_context+0xa0/0xa0 [ 73.930346][ C1] new_inode_pseudo+0x5f/0x210 [ 73.935126][ C1] __sock_create+0x128/0x910 [ 73.939726][ C1] __sys_socket+0xe2/0x170 [ 73.944145][ C1] __x64_sys_socket+0x76/0x80 [ 73.948826][ C1] do_syscall_64+0x4c/0xa0 [ 73.953244][ C1] ? clear_bhb_loop+0x30/0x80 [ 73.957929][ C1] ? clear_bhb_loop+0x30/0x80 [ 73.962610][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 73.968509][ C1] RIP: 0033:0x7f9d47123019 [ 73.972928][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.992543][ C1] RSP: 002b:00007f9d4537b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 74.000981][ C1] RAX: ffffffffffffffda RBX: 00007f9d473aafa0 RCX: 00007f9d47123019 [ 74.008960][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 74.016936][ C1] RBP: 00007f9d471ba00c R08: 0000000000000000 R09: 0000000000000000 [ 74.024907][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.032884][ C1] R13: 00007f9d473ab038 R14: 00007f9d473aafa0 R15: 00007fff14f54c38 [ 74.040879][ C1] [ 74.043904][ C0] CPU: 0 PID: 14 Comm: ksoftirqd/0 Not tainted syzkaller #0 [ 74.043959][ C1] FAULT_INJECTION: forcing a failure. [ 74.043959][ C1] name failslab, interval 1, probability 100, space 0, times 4 [ 74.051213][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 74.051226][ C0] Call Trace: [ 74.051236][ C0] [ 74.051245][ C0] dump_stack_lvl+0x188/0x250 [ 74.084914][ C0] ? show_regs_print_info+0x20/0x20 [ 74.090127][ C0] ? load_image+0x410/0x410 [ 74.094661][ C0] ? prandom_u32+0x217/0x250 [ 74.099267][ C0] should_fail+0x383/0x4b0 [ 74.103702][ C0] should_failslab+0x5/0x20 [ 74.108212][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 74.113156][ C0] kmem_cache_alloc_node+0x47/0x2c0 [ 74.118365][ C0] ? __alloc_skb+0xf4/0x750 [ 74.122883][ C0] __alloc_skb+0xf4/0x750 [ 74.127220][ C0] lapb_send_control+0x34/0x3e0 [ 74.132078][ C0] ? lapb_t1timer_expiry+0x2f/0xa50 [ 74.137282][ C0] lapb_t1timer_expiry+0x65b/0xa50 [ 74.142402][ C0] ? lapb_start_t1timer+0xf0/0xf0 [ 74.147432][ C0] call_timer_fn+0x17b/0x540 [ 74.152029][ C0] ? lapb_start_t1timer+0xf0/0xf0 [ 74.157058][ C0] ? __run_timers+0x810/0x810 [ 74.161747][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 74.166947][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 74.172151][ C0] ? lapb_start_t1timer+0xf0/0xf0 [ 74.177197][ C0] __run_timers+0x56c/0x810 [ 74.181857][ C0] ? lock_chain_count+0x20/0x20 [ 74.186751][ C0] ? detach_timer+0x2b0/0x2b0 [ 74.191441][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 74.197444][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 74.202311][ C0] run_timer_softirq+0x63/0xf0 [ 74.207082][ C0] handle_softirqs+0x336/0x830 [ 74.211857][ C0] ? run_ksoftirqd+0xa4/0x100 [ 74.216542][ C0] ? do_softirq+0x210/0x210 [ 74.221055][ C0] ? run_ksoftirqd+0x81/0x100 [ 74.225733][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 74.230932][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 74.236225][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 74.241423][ C0] run_ksoftirqd+0xa4/0x100 [ 74.245929][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 74.251141][ C0] smpboot_thread_fn+0x520/0x990 [ 74.256094][ C0] kthread+0x42e/0x520 [ 74.260174][ C0] ? cpu_report_death+0x180/0x180 [ 74.265209][ C0] ? kthread_blkcg+0xd0/0xd0 [ 74.270194][ C0] ret_from_fork+0x1f/0x30 [ 74.274638][ C0] [ 74.277663][ C1] CPU: 1 PID: 4302 Comm: syz.1.11 Not tainted syzkaller #0 [ 74.277835][ C0] FAULT_INJECTION: forcing a failure. [ 74.277835][ C0] name failslab, interval 1, probability 100, space 0, times 3 [ 74.284879][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 74.284892][ C1] Call Trace: [ 74.284899][ C1] [ 74.284905][ C1] dump_stack_lvl+0x188/0x250 [ 74.318734][ C1] ? show_regs_print_info+0x20/0x20 [ 74.323953][ C1] ? load_image+0x410/0x410 [ 74.328464][ C1] ? prandom_u32+0x217/0x250 [ 74.333068][ C1] should_fail+0x383/0x4b0 [ 74.337492][ C1] should_failslab+0x5/0x20 [ 74.342007][ C1] slab_pre_alloc_hook+0x51/0xc0 [ 74.346950][ C1] kmem_cache_alloc_node+0x47/0x2c0 [ 74.352153][ C1] ? __alloc_skb+0xf4/0x750 [ 74.356666][ C1] __alloc_skb+0xf4/0x750 [ 74.361006][ C1] __netdev_alloc_skb+0x110/0x4c0 [ 74.366038][ C1] ? __alloc_skb+0x750/0x750 [ 74.370626][ C1] ? mark_lock+0x94/0x320 [ 74.374966][ C1] __ieee80211_beacon_get+0xa8f/0x1ff0 [ 74.380436][ C1] ? verify_lock_unused+0x140/0x140 [ 74.385648][ C1] ? ieee80211_beacon_get_template+0x30/0x30 [ 74.391637][ C1] ? verify_lock_unused+0x140/0x140 [ 74.397111][ C1] ? verify_lock_unused+0x140/0x140 [ 74.402361][ C1] ieee80211_beacon_get_tim+0x48/0x840 [ 74.407851][ C1] mac80211_hwsim_beacon_tx+0x104/0x900 [ 74.413417][ C1] __iterate_interfaces+0x225/0x4c0 [ 74.418616][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 74.424870][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 74.431213][ C1] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 74.438245][ C1] mac80211_hwsim_beacon+0x9b/0x180 [ 74.443445][ C1] ? hw_scan_work+0xef0/0xef0 [ 74.448129][ C1] __hrtimer_run_queues+0x4ea/0xb60 [ 74.453350][ C1] ? hrtimer_interrupt+0x8b0/0x8b0 [ 74.458472][ C1] hrtimer_run_softirq+0x176/0x240 [ 74.463592][ C1] handle_softirqs+0x336/0x830 [ 74.468367][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 74.473224][ C1] ? do_softirq+0x210/0x210 [ 74.477741][ C1] ? hrtimer_interrupt+0x6a2/0x8b0 [ 74.482860][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 74.488066][ C1] __irq_exit_rcu+0x13b/0x230 [ 74.492745][ C1] ? irq_exit_rcu+0x20/0x20 [ 74.497257][ C1] irq_exit_rcu+0x5/0x20 [ 74.501513][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 74.507150][ C1] [ 74.510085][ C1] [ 74.513018][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 74.519005][ C1] RIP: 0010:console_unlock+0xc90/0x10f0 [ 74.524556][ C1] Code: 75 11 e8 13 df 18 00 4d 85 e4 75 16 e8 09 df 18 00 eb 15 e8 02 df 18 00 e8 dd f6 5f 08 4d 85 e4 74 ea e8 f3 de 18 00 fb 31 ff <89> de e8 49 e2 18 00 85 db 0f 94 c0 22 44 24 1f 3c 01 75 1f e8 d7 [ 74.544164][ C1] RSP: 0018:ffffc900014ef960 EFLAGS: 00000246 [ 74.550234][ C1] RAX: ffffffff81601dbd RBX: 0000000000000001 RCX: 0000000000080000 [ 74.558210][ C1] RDX: ffffc90003cd3000 RSI: 0000000000002e67 RDI: 0000000000000000 [ 74.566179][ C1] RBP: ffffc900014efbd0 R08: ffffffff8d8b0def R09: 1ffffffff1b161bd [ 74.574152][ C1] R10: dffffc0000000000 R11: fffffbfff1b161be R12: 0000000000000200 [ 74.582129][ C1] R13: 0000000000000090 R14: 0000000000000000 R15: dffffc0000000000 [ 74.590196][ C1] ? console_unlock+0xc8d/0x10f0 [ 74.595152][ C1] ? read_lock_is_recursive+0x10/0x10 [ 74.600535][ C1] ? console_trylock_spinning+0x370/0x370 [ 74.606254][ C1] ? __down_trylock_console_sem+0xf2/0x1f0 [ 74.612059][ C1] ? __down_trylock_console_sem+0x19f/0x1f0 [ 74.617952][ C1] ? vprintk_emit+0xa7/0x150 [ 74.622544][ C1] ? printk_parse_prefix+0x310/0x310 [ 74.627827][ C1] ? vprintk_emit+0xa7/0x150 [ 74.632416][ C1] ? console_trylock+0x70/0x70 [ 74.637192][ C1] ? vprintk_emit+0x150/0x150 [ 74.641881][ C1] vprintk_emit+0xc0/0x150 [ 74.646300][ C1] _printk+0xda/0x130 [ 74.650290][ C1] ? load_image+0x410/0x410 [ 74.654797][ C1] ? prandom_u32+0x217/0x250 [ 74.659397][ C1] should_fail+0x364/0x4b0 [ 74.663818][ C1] should_failslab+0x5/0x20 [ 74.668323][ C1] slab_pre_alloc_hook+0x51/0xc0 [ 74.673260][ C1] ? sockfs_init_fs_context+0xa0/0xa0 [ 74.678651][ C1] ? sock_alloc_inode+0x17/0xb0 [ 74.683521][ C1] kmem_cache_alloc+0x3d/0x280 [ 74.688289][ C1] ? sockfs_init_fs_context+0xa0/0xa0 [ 74.693670][ C1] sock_alloc_inode+0x17/0xb0 [ 74.698345][ C1] ? sockfs_init_fs_context+0xa0/0xa0 [ 74.703717][ C1] new_inode_pseudo+0x5f/0x210 [ 74.708488][ C1] __sock_create+0x128/0x910 [ 74.713087][ C1] __sys_socket+0xe2/0x170 [ 74.717508][ C1] __x64_sys_socket+0x76/0x80 [ 74.722184][ C1] do_syscall_64+0x4c/0xa0 [ 74.726597][ C1] ? clear_bhb_loop+0x30/0x80 [ 74.731277][ C1] ? clear_bhb_loop+0x30/0x80 [ 74.735971][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 74.741866][ C1] RIP: 0033:0x7f9d47123019 [ 74.746285][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.765893][ C1] RSP: 002b:00007f9d4537b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 74.774325][ C1] RAX: ffffffffffffffda RBX: 00007f9d473aafa0 RCX: 00007f9d47123019 [ 74.782296][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 74.790267][ C1] RBP: 00007f9d471ba00c R08: 0000000000000000 R09: 0000000000000000 [ 74.798239][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.806215][ C1] R13: 00007f9d473ab038 R14: 00007f9d473aafa0 R15: 00007fff14f54c38 [ 74.814201][ C1] [ 74.817223][ C0] CPU: 0 PID: 14 Comm: ksoftirqd/0 Not tainted syzkaller #0 [ 74.817274][ C1] FAULT_INJECTION: forcing a failure. [ 74.817274][ C1] name failslab, interval 1, probability 100, space 0, times 2 [ 74.824526][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 74.847320][ C0] Call Trace: [ 74.850609][ C0] [ 74.853560][ C0] dump_stack_lvl+0x188/0x250 [ 74.858271][ C0] ? show_regs_print_info+0x20/0x20 [ 74.863480][ C0] ? load_image+0x410/0x410 [ 74.867991][ C0] ? prandom_u32+0x217/0x250 [ 74.872590][ C0] should_fail+0x383/0x4b0 [ 74.877013][ C0] should_failslab+0x5/0x20 [ 74.881527][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 74.886472][ C0] kmem_cache_alloc_node+0x47/0x2c0 [ 74.891676][ C0] ? __alloc_skb+0xf4/0x750 [ 74.896190][ C0] __alloc_skb+0xf4/0x750 [ 74.900528][ C0] __netdev_alloc_skb+0x110/0x4c0 [ 74.905557][ C0] ? __alloc_skb+0x750/0x750 [ 74.910164][ C0] hsr_init_skb+0xec/0x5a0 [ 74.914584][ C0] ? read_lock_is_recursive+0x10/0x10 [ 74.919969][ C0] send_hsr_supervision_frame+0x141/0xb90 [ 74.925697][ C0] hsr_announce+0x168/0x310 [ 74.930202][ C0] ? hsr_dev_finalize+0x870/0x870 [ 74.935234][ C0] ? hsr_dev_finalize+0x870/0x870 [ 74.940262][ C0] call_timer_fn+0x17b/0x540 [ 74.944857][ C0] ? hsr_dev_finalize+0x870/0x870 [ 74.949884][ C0] ? __run_timers+0x810/0x810 [ 74.954575][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 74.959776][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 74.964981][ C0] ? hsr_dev_finalize+0x870/0x870 [ 74.970010][ C0] __run_timers+0x56c/0x810 [ 74.974523][ C0] ? lock_chain_count+0x20/0x20 [ 74.979390][ C0] ? detach_timer+0x2b0/0x2b0 [ 74.984069][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 74.990062][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 74.994931][ C0] run_timer_softirq+0x63/0xf0 [ 74.999699][ C0] handle_softirqs+0x336/0x830 [ 75.004557][ C0] ? run_ksoftirqd+0xa4/0x100 [ 75.009252][ C0] ? do_softirq+0x210/0x210 [ 75.013786][ C0] ? run_ksoftirqd+0x81/0x100 [ 75.018478][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 75.023697][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 75.029051][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 75.034279][ C0] run_ksoftirqd+0xa4/0x100 [ 75.038800][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 75.044011][ C0] smpboot_thread_fn+0x520/0x990 [ 75.048967][ C0] kthread+0x42e/0x520 [ 75.053041][ C0] ? cpu_report_death+0x180/0x180 [ 75.058070][ C0] ? kthread_blkcg+0xd0/0xd0 [ 75.062663][ C0] ret_from_fork+0x1f/0x30 [ 75.067095][ C0] [ 75.070118][ C1] CPU: 1 PID: 4302 Comm: syz.1.11 Not tainted syzkaller #0 [ 75.070164][ C0] hsr0: HSR: Could not send supervision frame [ 75.077330][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 75.077343][ C1] Call Trace: [ 75.077353][ C1] [ 75.077361][ C1] dump_stack_lvl+0x188/0x250 [ 75.083462][ C0] FAULT_INJECTION: forcing a failure. [ 75.083462][ C0] name failslab, interval 1, probability 100, space 0, times 1 [ 75.093506][ C1] ? show_regs_print_info+0x20/0x20 [ 75.093541][ C1] ? load_image+0x410/0x410 [ 75.093565][ C1] ? prandom_u32+0x217/0x250 [ 75.131379][ C1] should_fail+0x383/0x4b0 [ 75.135814][ C1] should_failslab+0x5/0x20 [ 75.140317][ C1] slab_pre_alloc_hook+0x51/0xc0 [ 75.145262][ C1] kmem_cache_alloc_node+0x47/0x2c0 [ 75.150458][ C1] ? __alloc_skb+0xf4/0x750 [ 75.154971][ C1] __alloc_skb+0xf4/0x750 [ 75.159306][ C1] __netdev_alloc_skb+0x110/0x4c0 [ 75.164337][ C1] ? __alloc_skb+0x750/0x750 [ 75.168925][ C1] ? mark_lock+0x94/0x320 [ 75.173275][ C1] __ieee80211_beacon_get+0xa8f/0x1ff0 [ 75.178746][ C1] ? verify_lock_unused+0x140/0x140 [ 75.183952][ C1] ? ieee80211_beacon_get_template+0x30/0x30 [ 75.189934][ C1] ? verify_lock_unused+0x140/0x140 [ 75.195139][ C1] ? verify_lock_unused+0x140/0x140 [ 75.200376][ C1] ieee80211_beacon_get_tim+0x48/0x840 [ 75.205844][ C1] mac80211_hwsim_beacon_tx+0x104/0x900 [ 75.211400][ C1] __iterate_interfaces+0x225/0x4c0 [ 75.216598][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 75.222844][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 75.229092][ C1] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 75.236120][ C1] mac80211_hwsim_beacon+0x9b/0x180 [ 75.241318][ C1] ? hw_scan_work+0xef0/0xef0 [ 75.246016][ C1] __hrtimer_run_queues+0x4ea/0xb60 [ 75.251243][ C1] ? hrtimer_interrupt+0x8b0/0x8b0 [ 75.256366][ C1] hrtimer_run_softirq+0x176/0x240 [ 75.261626][ C1] handle_softirqs+0x336/0x830 [ 75.266426][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 75.271297][ C1] ? do_softirq+0x210/0x210 [ 75.275813][ C1] ? hrtimer_interrupt+0x6a2/0x8b0 [ 75.280935][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 75.286159][ C1] __irq_exit_rcu+0x13b/0x230 [ 75.290842][ C1] ? irq_exit_rcu+0x20/0x20 [ 75.295356][ C1] irq_exit_rcu+0x5/0x20 [ 75.299599][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 75.305237][ C1] [ 75.308175][ C1] [ 75.311107][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 75.317089][ C1] RIP: 0010:console_unlock+0xc90/0x10f0 [ 75.322639][ C1] Code: 75 11 e8 13 df 18 00 4d 85 e4 75 16 e8 09 df 18 00 eb 15 e8 02 df 18 00 e8 dd f6 5f 08 4d 85 e4 74 ea e8 f3 de 18 00 fb 31 ff <89> de e8 49 e2 18 00 85 db 0f 94 c0 22 44 24 1f 3c 01 75 1f e8 d7 [ 75.342248][ C1] RSP: 0018:ffffc900014ef960 EFLAGS: 00000246 [ 75.348320][ C1] RAX: ffffffff81601dbd RBX: 0000000000000001 RCX: 0000000000080000 [ 75.356291][ C1] RDX: ffffc90003cd3000 RSI: 0000000000002e67 RDI: 0000000000000000 [ 75.364261][ C1] RBP: ffffc900014efbd0 R08: ffffffff8d8b0def R09: 1ffffffff1b161bd [ 75.372231][ C1] R10: dffffc0000000000 R11: fffffbfff1b161be R12: 0000000000000200 [ 75.380209][ C1] R13: 0000000000000090 R14: 0000000000000000 R15: dffffc0000000000 [ 75.388199][ C1] ? console_unlock+0xc8d/0x10f0 [ 75.393145][ C1] ? read_lock_is_recursive+0x10/0x10 [ 75.398531][ C1] ? console_trylock_spinning+0x370/0x370 [ 75.404247][ C1] ? __down_trylock_console_sem+0xf2/0x1f0 [ 75.410058][ C1] ? __down_trylock_console_sem+0x19f/0x1f0 [ 75.415950][ C1] ? vprintk_emit+0xa7/0x150 [ 75.420542][ C1] ? printk_parse_prefix+0x310/0x310 [ 75.425825][ C1] ? vprintk_emit+0xa7/0x150 [ 75.430434][ C1] ? console_trylock+0x70/0x70 [ 75.435215][ C1] ? vprintk_emit+0x150/0x150 [ 75.439906][ C1] vprintk_emit+0xc0/0x150 [ 75.444326][ C1] _printk+0xda/0x130 [ 75.448315][ C1] ? load_image+0x410/0x410 [ 75.452819][ C1] ? prandom_u32+0x217/0x250 [ 75.457424][ C1] should_fail+0x364/0x4b0 [ 75.461848][ C1] should_failslab+0x5/0x20 [ 75.466348][ C1] slab_pre_alloc_hook+0x51/0xc0 [ 75.471282][ C1] ? sockfs_init_fs_context+0xa0/0xa0 [ 75.476657][ C1] ? sock_alloc_inode+0x17/0xb0 [ 75.481512][ C1] kmem_cache_alloc+0x3d/0x280 [ 75.486275][ C1] ? sockfs_init_fs_context+0xa0/0xa0 [ 75.491649][ C1] sock_alloc_inode+0x17/0xb0 [ 75.496418][ C1] ? sockfs_init_fs_context+0xa0/0xa0 [ 75.501791][ C1] new_inode_pseudo+0x5f/0x210 [ 75.506575][ C1] __sock_create+0x128/0x910 [ 75.511178][ C1] __sys_socket+0xe2/0x170 [ 75.515601][ C1] __x64_sys_socket+0x76/0x80 [ 75.520280][ C1] do_syscall_64+0x4c/0xa0 [ 75.524700][ C1] ? clear_bhb_loop+0x30/0x80 [ 75.529382][ C1] ? clear_bhb_loop+0x30/0x80 [ 75.534065][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 75.539984][ C1] RIP: 0033:0x7f9d47123019 [ 75.544402][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.564010][ C1] RSP: 002b:00007f9d4537b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 75.572423][ C1] RAX: ffffffffffffffda RBX: 00007f9d473aafa0 RCX: 00007f9d47123019 [ 75.581262][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 75.589231][ C1] RBP: 00007f9d471ba00c R08: 0000000000000000 R09: 0000000000000000 [ 75.597199][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.605195][ C1] R13: 00007f9d473ab038 R14: 00007f9d473aafa0 R15: 00007fff14f54c38 [ 75.613186][ C1] [ 75.616213][ C0] CPU: 0 PID: 14 Comm: ksoftirqd/0 Not tainted syzkaller #0 [ 75.623524][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 75.633607][ C0] Call Trace: [ 75.636920][ C0] [ 75.639877][ C0] dump_stack_lvl+0x188/0x250 [ 75.644593][ C0] ? show_regs_print_info+0x20/0x20 [ 75.649332][ T4270] Bluetooth: hci2: command 0x0419 tx timeout [ 75.649821][ C0] ? load_image+0x410/0x410 [ 75.660318][ C0] ? prandom_u32+0x217/0x250 [ 75.664949][ C0] should_fail+0x383/0x4b0 [ 75.669398][ C0] should_failslab+0x5/0x20 [ 75.673338][ T4270] Bluetooth: hci0: command 0x0419 tx timeout [ 75.673928][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 75.673956][ C0] kmem_cache_alloc_node+0x47/0x2c0 [ 75.690076][ C0] ? __alloc_skb+0xf4/0x750 [ 75.694619][ C0] __alloc_skb+0xf4/0x750 [ 75.698991][ C0] ndisc_alloc_skb+0xa6/0x420 [ 75.702007][ T4270] Bluetooth: hci1: command 0x0419 tx timeout [ 75.703695][ C0] ndisc_send_rs+0x271/0x700 [ 75.714357][ C0] ? ipv6_get_lladdr+0x33f/0x3b0 [ 75.719328][ C0] addrconf_rs_timer+0x367/0x640 [ 75.724295][ C0] ? detach_timer+0x33/0x2b0 [ 75.728919][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 75.735023][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 75.741126][ C0] call_timer_fn+0x17b/0x540 [ 75.745751][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 75.751850][ C0] ? __run_timers+0x810/0x810 [ 75.756564][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 75.761779][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 75.767008][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 75.771473][ T4270] Bluetooth: hci3: command 0x0419 tx timeout [ 75.773096][ C0] __run_timers+0x56c/0x810 [ 75.783607][ C0] ? lock_chain_count+0x20/0x20 [ 75.788502][ C0] ? detach_timer+0x2b0/0x2b0 [ 75.793206][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 75.799233][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 75.803963][ T4270] Bluetooth: hci4: command 0x0419 tx timeout [ 75.804147][ C0] run_timer_softirq+0x63/0xf0 [ 75.814887][ C0] handle_softirqs+0x336/0x830 [ 75.819684][ C0] ? run_ksoftirqd+0xa4/0x100 [ 75.824394][ C0] ? do_softirq+0x210/0x210 [ 75.828931][ C0] ? run_ksoftirqd+0x81/0x100 [ 75.833635][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 75.838869][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 75.844201][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 75.849435][ C0] run_ksoftirqd+0xa4/0x100 [ 75.853970][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 75.859212][ C0] smpboot_thread_fn+0x520/0x990 [ 75.864188][ C0] kthread+0x42e/0x520 [ 75.868281][ C0] ? cpu_report_death+0x180/0x180 [ 75.873423][ C0] ? kthread_blkcg+0xd0/0xd0 [ 75.878047][ C0] ret_from_fork+0x1f/0x30 [ 75.882520][ C0] [ 75.885564][ T4302] CPU: 1 PID: 4302 Comm: syz.1.11 Not tainted syzkaller #0 [ 75.892797][ T4302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 75.902873][ T4302] Call Trace: [ 75.906177][ T4302] [ 75.907874][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 75.909125][ T4302] dump_stack_lvl+0x188/0x250 [ 75.915596][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 75.920201][ T4302] ? show_regs_print_info+0x20/0x20 [ 75.920231][ T4302] ? load_image+0x410/0x410 [ 75.920257][ T4302] ? prandom_u32+0x217/0x250 [ 75.940889][ T4302] should_fail+0x383/0x4b0 [ 75.945339][ T4302] should_failslab+0x5/0x20 [ 75.949875][ T4302] slab_pre_alloc_hook+0x51/0xc0 [ 75.954842][ T4302] ? sockfs_init_fs_context+0xa0/0xa0 [ 75.960241][ T4302] ? sock_alloc_inode+0x17/0xb0 [ 75.965171][ T4302] kmem_cache_alloc+0x3d/0x280 [ 75.970009][ T4302] ? sockfs_init_fs_context+0xa0/0xa0 [ 75.975418][ T4302] sock_alloc_inode+0x17/0xb0 [ 75.980120][ T4302] ? sockfs_init_fs_context+0xa0/0xa0 [ 75.985509][ T4302] new_inode_pseudo+0x5f/0x210 [ 75.990291][ T4302] __sock_create+0x128/0x910 [ 75.994915][ T4302] __sys_socket+0xe2/0x170 [ 75.999349][ T4302] __x64_sys_socket+0x76/0x80 [ 76.004030][ T4302] do_syscall_64+0x4c/0xa0 [ 76.008455][ T4302] ? clear_bhb_loop+0x30/0x80 [ 76.013155][ T4302] ? clear_bhb_loop+0x30/0x80 [ 76.017862][ T4302] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 76.023784][ T4302] RIP: 0033:0x7f9d47123019 [ 76.028217][ T4302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.047839][ T4302] RSP: 002b:00007f9d4537b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 76.056273][ T4302] RAX: ffffffffffffffda RBX: 00007f9d473aafa0 RCX: 00007f9d47123019 [ 76.064248][ T4302] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 76.072229][ T4302] RBP: 00007f9d471ba00c R08: 0000000000000000 R09: 0000000000000000 [ 76.080216][ T4302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.088194][ T4302] R13: 00007f9d473ab038 R14: 00007f9d473aafa0 R15: 00007fff14f54c38 [ 76.096488][ T4302] [ 76.099721][ T3852] CPU: 0 PID: 3852 Comm: dhcpcd Not tainted syzkaller #0 [ 76.106775][ T3852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 76.116855][ T3852] Call Trace: [ 76.120164][ T3852] [ 76.123292][ T3852] dump_stack_lvl+0x188/0x250 [ 76.128006][ T3852] ? show_regs_print_info+0x20/0x20 [ 76.133236][ T3852] ? load_image+0x410/0x410 [ 76.137789][ T3852] ? prandom_u32+0x217/0x250 [ 76.142426][ T3852] should_fail+0x383/0x4b0 [ 76.146877][ T3852] should_failslab+0x5/0x20 [ 76.151404][ T3852] slab_pre_alloc_hook+0x51/0xc0 [ 76.156368][ T3852] kmem_cache_alloc_node+0x47/0x2c0 [ 76.161621][ T3852] ? __alloc_skb+0xf4/0x750 [ 76.166167][ T3852] __alloc_skb+0xf4/0x750 [ 76.170555][ T3852] alloc_skb_with_frags+0xa7/0x720 [ 76.175710][ T3852] sock_alloc_send_pskb+0x87f/0x9a0 [ 76.180953][ T3852] ? sock_kzfree_s+0x50/0x50 [ 76.184850][ T4232] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 76.185560][ T3852] ? do_raw_spin_lock+0x128/0x2f0 [ 76.185589][ T3852] ? __rwlock_init+0x140/0x140 [ 76.202382][ T3852] ? do_raw_spin_unlock+0x11d/0x230 [ 76.207610][ T3852] unix_dgram_sendmsg+0x6f8/0x19c0 [ 76.212761][ T3852] ? aa_sk_perm+0x7dc/0x910 [ 76.217297][ T3852] ? aa_af_perm+0x340/0x340 [ 76.221941][ T3852] ? unix_dgram_poll+0x680/0x680 [ 76.226911][ T3852] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 76.233364][ T3852] ? apparmor_socket_sendmsg+0x88/0x230 [ 76.238944][ T3852] ? unix_seqpacket_sendmsg+0x108/0x1d0 [ 76.244530][ T3852] sock_write_iter+0x2a6/0x3a0 [ 76.249329][ T3852] ? sock_read_iter+0x380/0x380 [ 76.254219][ T3852] ? memset+0x1e/0x40 [ 76.258225][ T3852] ? iov_iter_init+0xb4/0x170 [ 76.262932][ T3852] vfs_write+0x748/0xd70 [ 76.267205][ T3852] ? file_end_write+0x250/0x250 [ 76.272102][ T3852] ? __fdget_pos+0x1e2/0x370 [ 76.276720][ T3852] ksys_write+0x153/0x260 [ 76.281076][ T3852] ? __ia32_sys_read+0x80/0x80 [ 76.285883][ T3852] do_syscall_64+0x4c/0xa0 [ 76.290323][ T3852] ? clear_bhb_loop+0x30/0x80 [ 76.295020][ T3852] ? clear_bhb_loop+0x30/0x80 [ 76.295920][ T4302] socket: no more sockets [ 76.299715][ T3852] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 76.299740][ T3852] RIP: 0033:0x7fcd86a5d407 [ 76.299761][ T3852] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 76.299778][ T3852] RSP: 002b:00007ffdead6fed0 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 76.299802][ T3852] RAX: ffffffffffffffda RBX: 00007fcd869d3740 RCX: 00007fcd86a5d407 [ 76.299817][ T3852] RDX: 0000000000000047 RSI: 00007ffdead6ff30 RDI: 0000000000000005 [ 76.299830][ T3852] RBP: 00005584f1452a48 R08: 0000000000000000 R09: 0000000000000000 [ 76.299843][ T3852] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffdead70360 [ 76.299856][ T3852] R13: 0000000000007af7 R14: 0000000000000001 R15: 0000000000000001 [ 76.299884][ T3852] [ 76.335779][ T4265] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 76.468884][ T4232] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 76.647844][ T4265] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 76.742913][ T4310] ceph: No mds server is up or the cluster is laggy [ 76.803666][ T4309] ceph: No mds server is up or the cluster is laggy [ 76.810836][ T4335] Zero length message leads to an empty skb [ 77.492543][ T4371] netlink: 36 bytes leftover after parsing attributes in process `syz.3.34'. [ 77.741084][ T4376] x_tables: duplicate underflow at hook 2 [ 77.837362][ T4380] svc: failed to register nfsdv3 RPC service (errno 111). [ 77.846117][ T4380] svc: failed to register nfsaclv3 RPC service (errno 111). [ 78.039193][ T4380] ================================================================== [ 78.047514][ T4380] BUG: KASAN: use-after-free in nfsd_create_serv+0x11b/0x700 [ 78.054923][ T4380] Write of size 4 at addr ffff888061b76850 by task syz.0.39/4380 [ 78.062680][ T4380] [ 78.065038][ T4380] CPU: 0 PID: 4380 Comm: syz.0.39 Not tainted syzkaller #0 [ 78.072257][ T4380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 78.082343][ T4380] Call Trace: [ 78.085646][ T4380] [ 78.088594][ T4380] dump_stack_lvl+0x188/0x250 [ 78.093311][ T4380] ? show_regs_print_info+0x20/0x20 [ 78.098540][ T4380] ? _printk+0xda/0x130 [ 78.102735][ T4380] ? nfsd_create_serv+0x11b/0x700 [ 78.107794][ T4380] ? load_image+0x410/0x410 [ 78.112330][ T4380] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 78.117816][ T4380] print_address_description+0x60/0x2d0 [ 78.123385][ T4380] ? nfsd_create_serv+0x11b/0x700 [ 78.128435][ T4380] kasan_report+0xdf/0x130 [ 78.132890][ T4380] ? nfsd_create_serv+0x11b/0x700 [ 78.137945][ T4380] kasan_check_range+0x235/0x290 [ 78.142913][ T4380] nfsd_create_serv+0x11b/0x700 [ 78.147797][ T4380] ? _parse_integer_limit+0x195/0x1d0 [ 78.153199][ T4380] ? nfsd+0x2d0/0x2d0 [ 78.157226][ T4380] ? simple_strntoull+0x10e/0x180 [ 78.162282][ T4380] ? simple_strtoull+0x30/0x30 [ 78.167081][ T4380] ? qword_get+0x5a5/0x640 [ 78.171528][ T4380] write_ports+0x526/0xb80 [ 78.175975][ T4380] ? write_versions+0xbb0/0xbb0 [ 78.180865][ T4380] ? __might_fault+0xb3/0x110 [ 78.185569][ T4380] ? _copy_from_user+0x111/0x170 [ 78.190535][ T4380] ? simple_transaction_get+0x119/0x140 [ 78.196197][ T4380] nfsctl_transaction_write+0x105/0x150 [ 78.201777][ T4380] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 78.207523][ T4380] vfs_write+0x304/0xd70 [ 78.211800][ T4380] ? file_end_write+0x250/0x250 [ 78.216694][ T4380] ? mutex_lock_nested+0x17/0x20 [ 78.221661][ T4380] ? __fdget_pos+0x2bf/0x370 [ 78.226279][ T4380] ? ksys_write+0x70/0x260 [ 78.230724][ T4380] ksys_write+0x153/0x260 [ 78.235083][ T4380] ? __ia32_sys_read+0x80/0x80 [ 78.239873][ T4380] ? lockdep_hardirqs_on+0x94/0x140 [ 78.245116][ T4380] do_syscall_64+0x4c/0xa0 [ 78.249555][ T4380] ? clear_bhb_loop+0x30/0x80 [ 78.254255][ T4380] ? clear_bhb_loop+0x30/0x80 [ 78.258963][ T4380] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 78.264881][ T4380] RIP: 0033:0x7fb00c764019 [ 78.269329][ T4380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.288968][ T4380] RSP: 002b:00007fb00a9bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 78.297425][ T4380] RAX: ffffffffffffffda RBX: 00007fb00c9ebfa0 RCX: 00007fb00c764019 [ 78.305432][ T4380] RDX: 0000000000000002 RSI: 0000200000000540 RDI: 0000000000000006 [ 78.313433][ T4380] RBP: 00007fb00c7fb00c R08: 0000000000000000 R09: 0000000000000000 [ 78.321457][ T4380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.329460][ T4380] R13: 00007fb00c9ec038 R14: 00007fb00c9ebfa0 R15: 00007ffeed398fc8 [ 78.337539][ T4380] [ 78.340586][ T4380] [ 78.342928][ T4380] Allocated by task 4380: [ 78.347273][ T4380] __kasan_kmalloc+0xaf/0xe0 [ 78.351897][ T4380] __svc_create+0x60/0x9d0 [ 78.356343][ T4380] svc_create_pooled+0x62f/0x810 [ 78.361315][ T4380] nfsd_create_serv+0x2f9/0x700 [ 78.366193][ T4380] nfsd_svc+0x132/0x9e0 [ 78.370374][ T4380] write_threads+0x2ea/0x350 [ 78.374991][ T4380] nfsctl_transaction_write+0x105/0x150 [ 78.380562][ T4380] vfs_write+0x304/0xd70 [ 78.384828][ T4380] ksys_write+0x153/0x260 [ 78.389177][ T4380] do_syscall_64+0x4c/0xa0 [ 78.393621][ T4380] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 78.399546][ T4380] [ 78.401890][ T4380] Freed by task 4380: [ 78.405881][ T4380] kasan_set_track+0x4b/0x70 [ 78.410495][ T4380] kasan_set_free_info+0x1f/0x40 [ 78.415458][ T4380] ____kasan_slab_free+0xd5/0x110 [ 78.420506][ T4380] slab_free_freelist_hook+0xec/0x170 [ 78.425900][ T4380] kfree+0xef/0x2a0 [ 78.429731][ T4380] nfsd_svc+0x7cf/0x9e0 [ 78.433903][ T4380] write_threads+0x2ea/0x350 [ 78.438515][ T4380] nfsctl_transaction_write+0x105/0x150 [ 78.444086][ T4380] vfs_write+0x304/0xd70 [ 78.448351][ T4380] ksys_write+0x153/0x260 [ 78.452706][ T4380] do_syscall_64+0x4c/0xa0 [ 78.457587][ T4380] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 78.463516][ T4380] [ 78.465854][ T4380] The buggy address belongs to the object at ffff888061b76800 [ 78.465854][ T4380] which belongs to the cache kmalloc-512 of size 512 [ 78.479929][ T4380] The buggy address is located 80 bytes inside of [ 78.479929][ T4380] 512-byte region [ffff888061b76800, ffff888061b76a00) [ 78.493144][ T4380] The buggy address belongs to the page: [ 78.498791][ T4380] page:ffffea000186dd00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888061b76000 pfn:0x61b74 [ 78.510278][ T4380] head:ffffea000186dd00 order:2 compound_mapcount:0 compound_pincount:0 [ 78.518634][ T4380] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 78.526653][ T4380] raw: 00fff00000010200 ffffea000186e208 ffffea000186e308 ffff888016c41c80 [ 78.535269][ T4380] raw: ffff888061b76000 000000000010000f 00000001ffffffff 0000000000000000 [ 78.543867][ T4380] page dumped because: kasan: bad access detected [ 78.550296][ T4380] page_owner tracks the page as allocated [ 78.556033][ T4380] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4190, ts 63205939387, free_ts 21569551526 [ 78.575172][ T4380] get_page_from_freelist+0x24f6/0x2670 [ 78.580767][ T4380] __alloc_pages+0x1ee/0x480 [ 78.585395][ T4380] new_slab+0xc0/0x4b0 [ 78.589495][ T4380] ___slab_alloc+0x807/0xdd0 [ 78.594115][ T4380] __kmalloc_node_track_caller+0x13d/0x3a0 [ 78.599950][ T4380] __alloc_skb+0x22c/0x750 [ 78.604393][ T4380] alloc_uevent_skb+0x7d/0x230 [ 78.609178][ T4380] kobject_uevent_net_broadcast+0x17e/0x530 [ 78.615100][ T4380] kobject_uevent_env+0x550/0x890 [ 78.620156][ T4380] net_rx_queue_update_kobjects+0x22b/0x4b0 [ 78.626083][ T4380] netdev_register_kobject+0x231/0x320 [ 78.631572][ T4380] register_netdevice+0x10e8/0x1720 [ 78.636791][ T4380] register_netdev+0x37/0x50 [ 78.641405][ T4380] ip6gre_init_net+0x21f/0x2f0 [ 78.646192][ T4380] ops_init+0x360/0x5f0 [ 78.650372][ T4380] setup_net+0x39e/0xa10 [ 78.654638][ T4380] page last free stack trace: [ 78.659321][ T4380] free_unref_page_prepare+0x637/0x6c0 [ 78.664800][ T4380] free_unref_page+0x8f/0x2a0 [ 78.669504][ T4380] free_contig_range+0x96/0xf0 [ 78.674302][ T4380] destroy_args+0xef/0xa00 [ 78.678739][ T4380] debug_vm_pgtable+0x321/0x380 [ 78.683610][ T4380] do_one_initcall+0x272/0x730 [ 78.688483][ T4380] do_initcall_level+0x13d/0x1f0 [ 78.693450][ T4380] do_initcalls+0x4b/0x90 [ 78.697804][ T4380] kernel_init_freeable+0x3d5/0x560 [ 78.703116][ T4380] kernel_init+0x19/0x1b0 [ 78.707472][ T4380] ret_from_fork+0x1f/0x30 [ 78.711955][ T4380] [ 78.714301][ T4380] Memory state around the buggy address: [ 78.719946][ T4380] ffff888061b76700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 78.728026][ T4380] ffff888061b76780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 78.736108][ T4380] >ffff888061b76800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 78.744187][ T4380] ^ [ 78.750880][ T4380] ffff888061b76880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 78.758961][ T4380] ffff888061b76900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 78.767039][ T4380] ================================================================== [ 78.775123][ T4380] Disabling lock debugging due to kernel taint [ 78.788233][ T4380] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 78.795461][ T4380] CPU: 1 PID: 4380 Comm: syz.0.39 Tainted: G B syzkaller #0 [ 78.804068][ T4380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 78.814139][ T4380] Call Trace: [ 78.817444][ T4380] [ 78.820390][ T4380] dump_stack_lvl+0x188/0x250 [ 78.825100][ T4380] ? show_regs_print_info+0x20/0x20 [ 78.830323][ T4380] ? load_image+0x410/0x410 [ 78.834858][ T4380] panic+0x2f8/0x850 [ 78.838781][ T4380] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 78.844956][ T4380] ? bpf_jit_dump+0xd0/0xd0 [ 78.849486][ T4380] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 78.855491][ T4380] ? _raw_spin_unlock+0x40/0x40 [ 78.860365][ T4380] ? nfsd_create_serv+0x11b/0x700 [ 78.865411][ T4380] check_panic_on_warn+0x80/0xa0 [ 78.870373][ T4380] ? nfsd_create_serv+0x11b/0x700 [ 78.875428][ T4380] end_report+0x6d/0xf0 [ 78.879610][ T4380] kasan_report+0x102/0x130 [ 78.884140][ T4380] ? nfsd_create_serv+0x11b/0x700 [ 78.889283][ T4380] kasan_check_range+0x235/0x290 [ 78.894261][ T4380] nfsd_create_serv+0x11b/0x700 [ 78.899136][ T4380] ? _parse_integer_limit+0x195/0x1d0 [ 78.904548][ T4380] ? nfsd+0x2d0/0x2d0 [ 78.908564][ T4380] ? simple_strntoull+0x10e/0x180 [ 78.913626][ T4380] ? simple_strtoull+0x30/0x30 [ 78.918419][ T4380] ? qword_get+0x5a5/0x640 [ 78.922868][ T4380] write_ports+0x526/0xb80 [ 78.927306][ T4380] ? write_versions+0xbb0/0xbb0 [ 78.932185][ T4380] ? __might_fault+0xb3/0x110 [ 78.936885][ T4380] ? _copy_from_user+0x111/0x170 [ 78.941882][ T4380] ? simple_transaction_get+0x119/0x140 [ 78.947449][ T4380] nfsctl_transaction_write+0x105/0x150 [ 78.953016][ T4380] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 78.958672][ T4380] vfs_write+0x304/0xd70 [ 78.962939][ T4380] ? file_end_write+0x250/0x250 [ 78.967825][ T4380] ? mutex_lock_nested+0x17/0x20 [ 78.972791][ T4380] ? __fdget_pos+0x2bf/0x370 [ 78.977404][ T4380] ? ksys_write+0x70/0x260 [ 78.981860][ T4380] ksys_write+0x153/0x260 [ 78.986217][ T4380] ? __ia32_sys_read+0x80/0x80 [ 78.991010][ T4380] ? lockdep_hardirqs_on+0x94/0x140 [ 78.996239][ T4380] do_syscall_64+0x4c/0xa0 [ 79.000683][ T4380] ? clear_bhb_loop+0x30/0x80 [ 79.005387][ T4380] ? clear_bhb_loop+0x30/0x80 [ 79.010094][ T4380] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 79.016012][ T4380] RIP: 0033:0x7fb00c764019 [ 79.020450][ T4380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.040082][ T4380] RSP: 002b:00007fb00a9bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 79.048528][ T4380] RAX: ffffffffffffffda RBX: 00007fb00c9ebfa0 RCX: 00007fb00c764019 [ 79.056532][ T4380] RDX: 0000000000000002 RSI: 0000200000000540 RDI: 0000000000000006 [ 79.064538][ T4380] RBP: 00007fb00c7fb00c R08: 0000000000000000 R09: 0000000000000000 [ 79.064933][ T4382] crypto_alloc_aead failed rc=-4 [ 79.072534][ T4380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.072551][ T4380] R13: 00007fb00c9ec038 R14: 00007fb00c9ebfa0 R15: 00007ffeed398fc8 [ 79.072570][ T4380] [ 79.072654][ T4380] Kernel Offset: disabled [ 79.100776][ T4380] Rebooting in 86400 seconds..