last executing test programs: 1m29.212264899s ago: executing program 5 (id=6): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="44000000100001060000000000000000000000000000000001000000010000000e00030076736f636b6d6f6e30000000140012800d00010076736f636b6d6f6e000000"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000110001000000000000000000000000000000000000000000000000000e00030076736f636b6d6f6e30000000"], 0x30}}, 0x0) 1m28.634394098s ago: executing program 5 (id=23): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind(r0, &(0x7f0000000000)=@in={0x2, 0x1324, @empty}, 0x10) listen(r0, 0x5) r1 = socket$inet_sctp(0x2, 0x5, 0x84) connect(r1, &(0x7f0000000040)=@in={0x2, 0x1324, @loopback}, 0x10) 1m28.247773889s ago: executing program 5 (id=26): r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x1, 0x6) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @loopback, 0x1500, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000100)={{0x6, @loopback, 0x1500, 0x0, 'rr\x00'}, {@loopback, 0x4908, 0x0, 0x1}}, 0x44) connect(r1, &(0x7f0000000200)=@in={0x2, 0x1500, @loopback}, 0x10) 1m27.981975429s ago: executing program 5 (id=29): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000100), 0x10, &(0x7f0000000200)={&(0x7f0000000300)=@newlink={0x10, 0x0, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000100), 0x10, &(0x7f0000000200)={&(0x7f0000000300)=@ipv4_newaddr={0x14, 0x0, 0x1, 0x0, 0x0, {0x2, 0x18}, [@IFA_LABEL={0x14, 0x3, 'veth0\x00'}, @IFA_LOCAL={0x8, 0x2, @private=0xa010101}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000100), 0x10, &(0x7f0000000200)={&(0x7f0000000300)=@setlink={0x13, 0x0, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}]}, 0x24}}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000000)={&(0x7f0000000100), 0x10, &(0x7f0000000200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bind(r2, &(0x7f0000000400)=@in={0x2, 0x1f90, @private=0xa010101}, 0x10) listen(r2, 0x5) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect(r3, &(0x7f0000000400)=@in={0x2, 0x1f90, @private=0xa010101}, 0x10) 1m12.913975024s ago: executing program 32 (id=29): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000100), 0x10, &(0x7f0000000200)={&(0x7f0000000300)=@newlink={0x10, 0x0, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000100), 0x10, &(0x7f0000000200)={&(0x7f0000000300)=@ipv4_newaddr={0x14, 0x0, 0x1, 0x0, 0x0, {0x2, 0x18}, [@IFA_LABEL={0x14, 0x3, 'veth0\x00'}, @IFA_LOCAL={0x8, 0x2, @private=0xa010101}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000100), 0x10, &(0x7f0000000200)={&(0x7f0000000300)=@setlink={0x13, 0x0, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}]}, 0x24}}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000000)={&(0x7f0000000100), 0x10, &(0x7f0000000200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bind(r2, &(0x7f0000000400)=@in={0x2, 0x1f90, @private=0xa010101}, 0x10) listen(r2, 0x5) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect(r3, &(0x7f0000000400)=@in={0x2, 0x1f90, @private=0xa010101}, 0x10) 7.704854076s ago: executing program 2 (id=489): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000300)={0x2, 0x115c, @loopback}, 0x10) r2 = accept(r0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000500)="00112233445566778899", 0xa, 0x0, 0x0, 0x0) 6.346031595s ago: executing program 2 (id=499): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/sctp/parameters/no_checksums\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/ipv4/conf/all/route_localnet\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f00000002c0)='1\n', 0x2) close(r1) write(0xffffffffffffffff, &(0x7f0000000340)='1\n', 0x2) socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x5, 0x84) bind(r2, &(0x7f00000003c0)=@in={0x2, 0x3344, @loopback}, 0x10) connect(r2, &(0x7f0000000400)=@in={0x2, 0x1122, @loopback}, 0x10) (async) syz_emit_ethernet(0x6e, &(0x7f0000000480)={@local, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x84, 0x0, @loopback, @loopback}, "1122334400000000000000000a00004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100001400"/76}}}}, 0x0) 6.032505479s ago: executing program 6 (id=500): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x16, 0x17, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000ef0000008500000086000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 5.948220935s ago: executing program 0 (id=501): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000ae8ff030900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000002080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a01010000000000f9ff000a0000090900020073797a31000000200900010073797a310000000014000380100000800c00018006000100"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) close(0x3) 5.615106846s ago: executing program 6 (id=504): mkdirat(0x9, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0x9, &(0x7f00000000c0)='./nfsd/threads\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='1\n', 0x2) close(r0) mkdirat(0x9, &(0x7f0000000140)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./rpc_pipefs\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) r1 = openat(0x9, &(0x7f0000000200)='./rpc_pipefs/cache/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='testhandle 2000000000 0 0 0 krb5 \\x00000000ffffff7f00000000000000001100000000000000000000000000000000000000 testuser\n', 0x77) close(r1) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) r2 = socket(0x2, 0x1, 0x0) connect(r2, &(0x7f0000000600)=@in={0x2, 0x801, @loopback}, 0x10) write(r2, &(0x7f0000000700)="800000c8123456780000000000000002000186a300000003000000000000000600000034000000010000000000000001000000030000000a7465737468616e646c650000000000060000001c040400ffffffffff00000000000000010000000000000000000000000000002c0000000100"/152, 0x98) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) 5.540619931s ago: executing program 0 (id=505): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'syz_tun\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'syz_tun\x00', 0x1}) syz_emit_ethernet(0x10, &(0x7f0000000200)={@local, @empty, @void, {@generic={0x6000, "00040300"/14}}}, 0x0) syz_emit_ethernet(0x10, &(0x7f0000000300)={@local, @empty, @void, {@generic={0x6000, "00040f00"/14}}}, 0x0) syz_emit_ethernet(0x10, &(0x7f0000000400)={@local, @empty, @void, {@generic={0x6000, "00048f00"/14}}}, 0x0) 4.989086426s ago: executing program 6 (id=507): unshare(0x40000000) r0 = socket$tipc(0x1e, 0x80005, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) unshare(0x40000000) 4.364066002s ago: executing program 2 (id=510): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x10, 0x1, 0x2, 0x0, {0x2}, [@generic="0101000000"]}, 0x14}}, 0x0) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, r1, 0x1, 0x3}, 0x14}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000040), 0x0) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000600)={'netdevsim0\x00', 0x1}) nanosleep(&(0x7f0000000700)={0x0, 0x1dcd6500}, 0x0) 4.353749989s ago: executing program 0 (id=511): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000300)={0x2, 0x115c, @loopback}, 0x10) r2 = accept(r0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000500)="00112233445566778899", 0xa, 0x0, 0x0, 0x0) 4.066825753s ago: executing program 4 (id=514): r0 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @empty}, 0x10) listen(r0, 0x5) r1 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='source\x00', &(0x7f0000000300)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='addr\x00', &(0x7f0000000500)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000600)='proto\x00', &(0x7f0000000700)='tcp\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000800)='vers\x00', &(0x7f0000000900)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000a00)='port\x00', &(0x7f0000000b00)='2049\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000c00)='timeo\x00', &(0x7f0000000d00)='1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000e00)='retrans\x00', &(0x7f0000000f00)='1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) accept(r0, 0x0, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x1dcd6500}, 0x0) 3.119895164s ago: executing program 0 (id=517): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x2327, @empty}}, 0x24) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x10, 0x110, 0xe}], 0x30}, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "0200000000000000"}, {0x10, 0x110, 0xe}], 0x30}, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "0300000000000000"}, {0x10, 0x110, 0xe}], 0x30}, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "0400000000000000"}, {0x10, 0x110, 0xe}], 0x30}, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000100)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x2328, @empty}}, 0x24) sendmsg(r1, &(0x7f0000000700)={&(0x7f0000000300)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x2327, @loopback}}, 0x24, &(0x7f0000000400)=[{&(0x7f0000000500)='hello', 0x5}], 0x1, &(0x7f0000000800)=[{0x18, 0x110, 0x1, "0500000000000000"}], 0x18}, 0x0) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b00), 0x100}], 0x1}, 0x40) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)='world', 0x5}], 0x1, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) nanosleep(&(0x7f0000000f00)={0x0, 0x5f5e100}, 0x0) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b00), 0x100}], 0x1}, 0x40) 3.04422213s ago: executing program 2 (id=518): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0x0, {0x0, &(0x7f0000000280)={0x0}, 0x102, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000300)={0x15, 0x50, 0x0, {r2, 0x3e8, 0x0, 0x0, 0x0, @in={0x2, 0x48d2, @loopback}, @in={0x2, 0x48d2, @loopback}}}, 0x58) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000500)={0x4, 0x10, 0x0, {r2, 0x3e8}}, 0x18) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000600)={0x2, 0x48, 0x0, {{0x0, 0x0, "0000000000000000050000007f0000017f00000100", 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r2}}, 0x50) nanosleep(&(0x7f0000000400)={0x0, 0x1dcd6500}, 0x0) 2.91391434s ago: executing program 1 (id=519): r0 = socket(0x2, 0x2, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='bridge0\x00') ioctl$sock_netdev_private(r0, 0x89f0, &(0x7f0000000000)="6272696467653000000000000000000000010000007f0000") 2.787751488s ago: executing program 4 (id=520): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='lo\x00', 0x3) sendto$inet6(r0, &(0x7f0000000100)="00112233", 0x4, 0x0, &(0x7f0000000200)={0xa, 0x1234, 0x0, @remote}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000300)='dummy0\x00', 0x7) sendto$inet6(r1, &(0x7f0000000400)="00112233", 0x4, 0x0, &(0x7f0000000500)={0xa, 0x1234, 0x0, @loopback}, 0x1c) 2.73226871s ago: executing program 3 (id=521): r0 = socket$inet_tcp(0x2, 0x1, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10) r2 = accept$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000200)=@gcm_128={{0x303}, "1234567812345678", "12345678123456781234567812345678", "12345678", "1234567812345678"}, 0x28) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TLS_RX(r2, 0x11a, 0x2, &(0x7f0000000200)=@gcm_128={{0x303}, "1234567812345678", "12345678123456781234567812345678", "12345678", "1234567812345678"}, 0x28) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000400), 0x4000, 0x0, 0x0, 0x0) 2.54779121s ago: executing program 0 (id=522): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/sctp/parameters/no_checksums\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/ipv4/conf/all/route_localnet\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv4/conf/all/accept_local\x00', 0x1, 0x0) write(r1, 0x0, 0x0) close(r1) write(0xffffffffffffffff, &(0x7f0000000340)='1\n', 0x2) socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x5, 0x84) bind(r2, &(0x7f00000003c0)=@in={0x2, 0x3344, @loopback}, 0x10) connect(r2, &(0x7f0000000400)=@in={0x2, 0x1122, @loopback}, 0x10) (async) syz_emit_ethernet(0x6e, &(0x7f0000000480)={@local, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x84, 0x0, @loopback, @loopback}, "1122334400000000000000000a00004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100001400"/76}}}}, 0x0) 2.395408498s ago: executing program 4 (id=523): r0 = socket(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)={0x58, 0x30, 0x5, 0x0, 0x0, "", [@typed={0x48, 0x1, 0x0, 0x0, @binary="4c0001004800010009000100676174650000000038000200180001000000000000000000000000000000000000000000180003000c000100010000000a00000000000000"}]}, 0x58}], 0x1}, 0x0) 2.319635872s ago: executing program 1 (id=524): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000a0)='inet 2049\n\x00', 0x10) 2.319271181s ago: executing program 6 (id=525): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000640)={&(0x7f0000000000), 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x4c, 0x2, 0x6, 0x601, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000100)=0x54) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000200)={'filter\x00', 0x0, '\x00'/1024}, &(0x7f0000000300)=0x420) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000980)=@filter={'filter\x00', 0xe, 0x4, 0x2a0, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x1], 0x1}}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x300) sendto(r1, &(0x7f0000000800)='\x00', 0x1, 0x0, &(0x7f0000000900)=@in={0x2, 0x1234, @loopback}, 0x10) 2.000308082s ago: executing program 2 (id=526): r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00', 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000040)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4001, 0x0, @loopback}, 0x1c) (async) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 1.979225396s ago: executing program 1 (id=527): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r2, 0x4) r3 = socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r3, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @empty}, 0x10, 0x0}, 0x900000000000000) 1.978884738s ago: executing program 4 (id=528): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newtaction={0x4c, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000010000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000080000000000010000000900020073797a32000000"], 0xec}, 0x1, 0x0, 0x0, 0x4004}, 0x40) 1.908131051s ago: executing program 6 (id=529): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000300)={0x2, 0x115c, @loopback}, 0x10) r2 = accept(r0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000500)="00112233445566778899", 0xa, 0x0, 0x0, 0x0) 1.607835993s ago: executing program 3 (id=530): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000001800010600000000000000000a400000000000010004000008000400010000000600150003000000"], 0x34}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000200)="0011223344556677", 0x8, 0x0, &(0x7f0000000280)={0xa, 0x1388, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) 1.563044081s ago: executing program 1 (id=531): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x16, 0x17, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000ef0000008500000086000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.504111974s ago: executing program 4 (id=532): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) listen(r0, 0x5) syz_emit_ethernet(0x37, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x29, 0x0, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4e20, 0x1, 0x0, 0x0, 0x0, 0x2, 0x18, 0x1000}, {'\x00'}}}}}}, 0x0) syz_extract_tcp_res(&(0x7f0000000200)={0x0, 0x0}, 0x0, 0x0) r3 = accept(r0, 0x0, 0x0) setsockopt$inet_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000000080)='espintcp\x00', 0x9) syz_emit_ethernet(0x3c, &(0x7f00000000c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4e20, r1, r2, 0x0, 0x0, 0x5, 0x18, 0x1000}, {"000600000000"}}}}}}, 0x0) 1.224249248s ago: executing program 3 (id=533): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='1 1\x00', 0x3) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0x5, 0x0, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x0, 0x1, 'syz0\x00'}]}], {0x14}}, 0x140}}, 0x0) 1.18093333s ago: executing program 1 (id=534): r0 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @empty}, 0x10) listen(r0, 0x5) r1 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='source\x00', &(0x7f0000000300)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='addr\x00', &(0x7f0000000500)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000600)='proto\x00', &(0x7f0000000700)='tcp\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000800)='vers\x00', &(0x7f0000000900)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000a00)='port\x00', &(0x7f0000000b00)='2049\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000001000)='mountport\x00', &(0x7f0000001100)='2049\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000001200)='mountproto\x00', &(0x7f0000001300)='tcp\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000c00)='timeo\x00', &(0x7f0000000d00)='10\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000e00)='retrans\x00', &(0x7f0000000f00)='5\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = accept(r0, 0x0, 0x0) shutdown(r2, 0x1) nanosleep(&(0x7f0000000080)={0x0, 0x1dcd6500}, 0x0) 973.418286ms ago: executing program 0 (id=535): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x0, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x80}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d2, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_comp={0x0, 0x3, {{'deflate\x00'}}}]}}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x0, 0x10, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x1, '\x00', 0x2}, @in6=@private2={0xfc, 0x1, '\x00', 0x2}, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x80}, {@in6=@private2={0xfc, 0x1, '\x00', 0x2}, 0x4d2, 0x6c}, @in6=@private2={0xfc, 0x1, '\x00', 0x2}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_comp={0x0, 0x3, {{'deflate\x00'}}}]}}}, 0x0) 900.654818ms ago: executing program 3 (id=536): r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='vers\x00', &(0x7f0000000180)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='addr\x00', &(0x7f0000000280)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000002c0)='proto\x00', &(0x7f0000000300)='tcp\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000340)='mountaddr\x00', &(0x7f0000000380)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000380)='mountproto\x00', &(0x7f0000000400)='tcp\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f0000000680)='12345\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 782.075115ms ago: executing program 2 (id=537): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x10, 0x1, 0x2, 0x0, {0x2}, [@generic="0101000000"]}, 0x14}}, 0x0) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, r1, 0x1, 0x3}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000600)={'netdevsim0\x00', 0x1}) nanosleep(&(0x7f0000000700)={0x0, 0x1dcd6500}, 0x0) 745.195245ms ago: executing program 6 (id=538): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @local}, 0x10) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000300)={0x2, 0x4e20, @local}, 0x10) r2 = accept(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000000)=0x400, 0x4) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000200)=@gcm_128={{0x304}, "0011223344556677", "00112233445566778899aabbccddeeff", "00112233", "0011223344556677"}, 0x28) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000400)='\x00'/65536, 0x10000, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000400)='\x00'/65536, 0x10000, 0x0, 0x0, 0x0) close(r1) close(r2) close(r0) 533.989386ms ago: executing program 3 (id=539): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000010)) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000b0)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000d0)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000e0)) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r0, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) 312.425078ms ago: executing program 4 (id=540): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a85, @loopback}, 0x10) listen(r0, 0x5) r1 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = accept$inet(r0, &(0x7f0000000200), &(0x7f0000000210)=0x10) nanosleep(&(0x7f0000000400)={0x0, 0x989680}, 0x0) write(r2, &(0x7f0000000300)='ceph v027\x00'/278, 0x119) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) write(r2, &(0x7f0000000800)="01ffffffffffffffff00"/29, 0x1e) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) write(r2, &(0x7f0000000c00)="070100000000000000000000000000000030000000000000000000000000000000000000000100000000000000000000000000000028d7b3ad00"/74, 0x48) nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0) 177.796402ms ago: executing program 3 (id=541): syz_usb_connect(0x0, 0x5b, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ff000040b90661400000010200010902490002010080300904000000ff0000000904000102ff00000007058702000200070507020002000904010000ff0000000904010102ff0000000705870200020007050702000200"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r0 = socket(0x8, 0x2, 0x0) ioctl(r0, 0x400861f2, &(0x7f0000000000)="6e61733000000000000000000000000000000000dc050000") setsockopt(r0, 0x108, 0x1, &(0x7f0000000100)="000000000000000000000000000200000002000000000000000000000000000000000000000000000002000000020000000000000000000000000500000000000000", 0x40) connect(r0, &(0x7f0000000200)=@generic={0x8, "0000000001002000"}, 0x10) ioctl(r0, 0x400461f1, &(0x7f0000000300)="010000006e61733000"/28) 0s ago: executing program 1 (id=542): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000008000000850000007a00000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) kernel console output (not intermixed with test programs): ] bridge_slave_0: entered promiscuous mode [ 87.505300][ T5625] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.512409][ T5625] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.520046][ T5625] bridge_slave_0: entered allmulticast mode [ 87.527573][ T5625] bridge_slave_0: entered promiscuous mode [ 87.550340][ T5627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.574103][ T5624] team0: Port device team_slave_0 added [ 87.579865][ T5623] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.587285][ T5623] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.594535][ T5623] bridge_slave_1: entered allmulticast mode [ 87.601987][ T5623] bridge_slave_1: entered promiscuous mode [ 87.609511][ T5625] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.616998][ T5625] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.624251][ T5625] bridge_slave_1: entered allmulticast mode [ 87.631601][ T5625] bridge_slave_1: entered promiscuous mode [ 87.641667][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.676289][ T5624] team0: Port device team_slave_1 added [ 87.708066][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.731975][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.791352][ T5627] team0: Port device team_slave_0 added [ 87.800073][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.829070][ T5623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.842943][ T5623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.855202][ T5625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.878847][ T5627] team0: Port device team_slave_1 added [ 87.898653][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.905747][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.931758][ T5624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.958143][ T5625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.969604][ T5622] team0: Port device team_slave_0 added [ 88.000748][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.007869][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.034059][ T5624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.088764][ T5622] team0: Port device team_slave_1 added [ 88.108980][ T5621] team0: Port device team_slave_0 added [ 88.125290][ T5623] team0: Port device team_slave_0 added [ 88.133281][ T5625] team0: Port device team_slave_0 added [ 88.159991][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.167135][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.193398][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.206627][ T5621] team0: Port device team_slave_1 added [ 88.216412][ T5623] team0: Port device team_slave_1 added [ 88.223949][ T5625] team0: Port device team_slave_1 added [ 88.242163][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.249159][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.275653][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.337260][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.344440][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.370749][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.402567][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.409586][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.435866][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.472103][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.479346][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.503907][ T5637] Bluetooth: hci5: command tx timeout [ 88.511236][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.536568][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.543679][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.569639][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.582955][ T5640] Bluetooth: hci2: command tx timeout [ 88.583165][ T5646] Bluetooth: hci4: command tx timeout [ 88.588369][ T5631] Bluetooth: hci1: command tx timeout [ 88.593724][ T5646] Bluetooth: hci0: command tx timeout [ 88.602087][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.605925][ T5637] Bluetooth: hci3: command tx timeout [ 88.611675][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.656965][ T5623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.669997][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.677098][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.703360][ T5623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.716764][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.727262][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.754848][ T5625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.797350][ T5624] hsr_slave_0: entered promiscuous mode [ 88.803902][ T5624] hsr_slave_1: entered promiscuous mode [ 88.841416][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.848489][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.874603][ T5625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.913203][ T5627] hsr_slave_0: entered promiscuous mode [ 88.919729][ T5627] hsr_slave_1: entered promiscuous mode [ 88.926256][ T5627] debugfs: 'hsr0' already exists in 'hsr' [ 88.932043][ T5627] Cannot create hsr debugfs directory [ 89.047697][ T5622] hsr_slave_0: entered promiscuous mode [ 89.054321][ T5622] hsr_slave_1: entered promiscuous mode [ 89.060438][ T5622] debugfs: 'hsr0' already exists in 'hsr' [ 89.066319][ T5622] Cannot create hsr debugfs directory [ 89.090376][ T5621] hsr_slave_0: entered promiscuous mode [ 89.096852][ T5621] hsr_slave_1: entered promiscuous mode [ 89.103283][ T5621] debugfs: 'hsr0' already exists in 'hsr' [ 89.108996][ T5621] Cannot create hsr debugfs directory [ 89.120220][ T5623] hsr_slave_0: entered promiscuous mode [ 89.127006][ T5623] hsr_slave_1: entered promiscuous mode [ 89.133386][ T5623] debugfs: 'hsr0' already exists in 'hsr' [ 89.139120][ T5623] Cannot create hsr debugfs directory [ 89.267170][ T5625] hsr_slave_0: entered promiscuous mode [ 89.273680][ T5625] hsr_slave_1: entered promiscuous mode [ 89.279830][ T5625] debugfs: 'hsr0' already exists in 'hsr' [ 89.285612][ T5625] Cannot create hsr debugfs directory [ 89.888561][ T5624] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.901239][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.909380][ T5624] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.920535][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.936606][ T5624] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.947121][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.966144][ T5624] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.977214][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.035707][ T5627] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.050241][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.058752][ T5627] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.069481][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.077575][ T5627] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.088746][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.109689][ T5627] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.119116][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.210377][ T5622] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.220458][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.228471][ T5622] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.239466][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.253576][ T5622] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.264676][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.287210][ T5622] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.297129][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.381332][ T5621] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 90.391594][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.412248][ T5621] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 90.422616][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.430842][ T5621] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 90.441463][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.449777][ T5621] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 90.460610][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.553113][ T5624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.582929][ T5637] Bluetooth: hci5: command tx timeout [ 90.614444][ T5623] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.626609][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.634890][ T5623] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.645937][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.653978][ T5623] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.662825][ T5637] Bluetooth: hci3: command tx timeout [ 90.664629][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.668390][ T5647] Bluetooth: hci1: command tx timeout [ 90.675712][ T5631] Bluetooth: hci2: command tx timeout [ 90.680738][ T5640] Bluetooth: hci0: command tx timeout [ 90.686175][ T5646] Bluetooth: hci4: command tx timeout [ 90.709956][ T5624] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.717607][ T5623] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.727782][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.767707][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.804849][ T149] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.812402][ T149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.824115][ T149] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.831264][ T149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.910998][ T5625] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.921791][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.946252][ T5625] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.957362][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.979779][ T5625] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.991661][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.002102][ T5627] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.019543][ T5625] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.030098][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.051169][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.058323][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.071189][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.113829][ T756] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.121112][ T756] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.148573][ T804] cfg80211: failed to load regulatory.db [ 91.234742][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.254911][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.278917][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.286096][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.354733][ T756] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.361866][ T756] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.431649][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.511744][ T756] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.518937][ T756] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.551320][ T5623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.561593][ T756] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.568778][ T756] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.654126][ T5623] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.698434][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.705600][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.754669][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.778800][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.785982][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.902390][ T5625] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.944278][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.951470][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.979449][ T1173] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.986654][ T1173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.324405][ T5624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.631888][ T5624] veth0_vlan: entered promiscuous mode [ 92.663567][ T5646] Bluetooth: hci5: command tx timeout [ 92.696807][ T5624] veth1_vlan: entered promiscuous mode [ 92.743507][ T5646] Bluetooth: hci2: command tx timeout [ 92.744071][ T5631] Bluetooth: hci1: command tx timeout [ 92.750059][ T5646] Bluetooth: hci0: command tx timeout [ 92.754445][ T5647] Bluetooth: hci3: command tx timeout [ 92.759784][ T5646] Bluetooth: hci4: command tx timeout [ 92.812087][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.940652][ T5624] veth0_macvtap: entered promiscuous mode [ 93.007015][ T5624] veth1_macvtap: entered promiscuous mode [ 93.097205][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.146445][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.184078][ T5627] veth0_vlan: entered promiscuous mode [ 93.207857][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.263486][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.320108][ T5627] veth1_vlan: entered promiscuous mode [ 93.435451][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.475703][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.556618][ T5623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.622277][ T756] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.627064][ T5627] veth0_macvtap: entered promiscuous mode [ 93.653310][ T756] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.721842][ T5627] veth1_macvtap: entered promiscuous mode [ 93.745933][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.779268][ T5622] veth0_vlan: entered promiscuous mode [ 93.812158][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.824619][ T5622] veth1_vlan: entered promiscuous mode [ 93.827324][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.851403][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.863732][ T149] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.888624][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.943696][ T59] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.059267][ T5624] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.088211][ T5622] veth0_macvtap: entered promiscuous mode [ 94.143841][ T1173] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.161692][ T5622] veth1_macvtap: entered promiscuous mode [ 94.203664][ T149] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.288112][ T5625] veth0_vlan: entered promiscuous mode [ 94.298312][ T756] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.309676][ T756] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.337757][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.390826][ T5625] veth1_vlan: entered promiscuous mode [ 94.411368][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.430827][ T5621] veth0_vlan: entered promiscuous mode [ 94.442037][ T1173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.451585][ T1173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.495039][ T1156] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.522967][ T756] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.534777][ T756] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.566767][ T5621] veth1_vlan: entered promiscuous mode [ 94.682057][ T5869] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3'. [ 94.741722][ T5623] veth0_vlan: entered promiscuous mode [ 94.807489][ T5625] veth0_macvtap: entered promiscuous mode [ 94.832858][ T756] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.876738][ T5623] veth1_vlan: entered promiscuous mode [ 94.892955][ T5625] veth1_macvtap: entered promiscuous mode [ 94.998265][ T1173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.018121][ T1173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.065371][ T5621] veth0_macvtap: entered promiscuous mode [ 95.145794][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.206546][ T5621] veth1_macvtap: entered promiscuous mode [ 95.248083][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.259023][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.260433][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.289889][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.317003][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.364111][ T5623] veth0_macvtap: entered promiscuous mode [ 95.395059][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.427493][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.444858][ T5623] veth1_macvtap: entered promiscuous mode [ 95.604463][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.617811][ T59] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.673560][ T59] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.807216][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.941868][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.976947][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.986406][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.045726][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.068434][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.082987][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.473506][ T1156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.485678][ T1156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.562037][ T1173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.608823][ T1173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.653054][ T1156] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.700495][ T1156] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.744295][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.748456][ T1156] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.786900][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.793912][ T1156] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.981533][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.002395][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.016035][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.027100][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.043819][ T1173] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.179953][ T5926] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 97.236618][ T5932] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 97.273122][ T5932] openvswitch: netlink: Flow actions attr not present in new flow. [ 97.325586][ T5918] svc: failed to register lockdv1 RPC service (errno 111). [ 97.354134][ T5918] lockd_up: makesock failed, error=-111 [ 97.379829][ T5926] ovs-system: entered promiscuous mode [ 97.482756][ T149] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.677257][ T5918] svc: failed to register nfsdv3 RPC service (errno 111). [ 97.733063][ T5943] nvme_fabrics: unknown parameter or missing value 'tls_key=1' in ctrl creation request [ 97.745341][ T5918] svc: failed to register nfsaclv3 RPC service (errno 111). [ 97.788126][ T5918] failed to unregister tcp with rpcbind [ 97.829610][ T5918] svc: failed to register nfsdv3 RPC service (errno 97). [ 97.902796][ T5918] svc: failed to register nfsaclv3 RPC service (errno 97). [ 97.926119][ T5918] failed to unregister tcp with rpcbind [ 98.054141][ T5789] IPVS: starting estimator thread 0... [ 98.169333][ T5957] IPVS: using max 27 ests per chain, 64800 per kthread [ 98.265781][ T5965] FAULT_INJECTION: forcing a failure. [ 98.265781][ T5965] name failslab, interval 1, probability 100, space 0, times 10 [ 98.265801][ T5927] FAULT_INJECTION: forcing a failure. [ 98.265801][ T5927] name failslab, interval 1, probability 100, space 0, times 10 [ 98.279184][ T5966] FAULT_INJECTION: forcing a failure. [ 98.279184][ T5966] name failslab, interval 1, probability 100, space 0, times 10 [ 98.293389][ T1156] FAULT_INJECTION: forcing a failure. [ 98.293389][ T1156] name failslab, interval 1, probability 100, space 0, times 10 [ 98.305075][ T5968] FAULT_INJECTION: forcing a failure. [ 98.305075][ T5968] name failslab, interval 1, probability 100, space 0, times 10 [ 98.318044][ T1156] CPU: 0 UID: 0 PID: 1156 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 98.318071][ T1156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 98.318086][ T1156] Workqueue: events_unbound nsim_dev_trap_report_work [ 98.318123][ T1156] Call Trace: [ 98.318132][ T1156] [ 98.318142][ T1156] dump_stack_lvl+0xe8/0x150 [ 98.318182][ T1156] should_fail_ex+0x40c/0x560 [ 98.318220][ T1156] should_failslab+0xa8/0x100 [ 98.318261][ T1156] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 98.318293][ T1156] ? local_lock_release+0x9c/0x160 [ 98.318321][ T1156] ? __alloc_skb+0x1d7/0x7a0 [ 98.318346][ T1156] ? __alloc_skb+0x1d7/0x7a0 [ 98.318379][ T1156] __alloc_skb+0x1d7/0x7a0 [ 98.318417][ T1156] nsim_dev_trap_report_work+0x25f/0xb40 [ 98.318466][ T1156] ? process_scheduled_works+0xa20/0x14e0 [ 98.318497][ T1156] process_scheduled_works+0xa8e/0x14e0 [ 98.318558][ T1156] ? __pfx_process_scheduled_works+0x10/0x10 [ 98.318595][ T1156] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.318624][ T1156] ? assign_work+0x3cf/0x5d0 [ 98.318659][ T1156] worker_thread+0xa47/0xfb0 [ 98.318719][ T1156] kthread+0x388/0x470 [ 98.318756][ T1156] ? __pfx_worker_thread+0x10/0x10 [ 98.318785][ T1156] ? __pfx_kthread+0x10/0x10 [ 98.318823][ T1156] ret_from_fork+0x514/0xb70 [ 98.318864][ T1156] ? __pfx_ret_from_fork+0x10/0x10 [ 98.318900][ T1156] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.318928][ T1156] ? __switch_to+0xc89/0x1420 [ 98.318964][ T1156] ? __pfx_kthread+0x10/0x10 [ 98.319002][ T1156] ret_from_fork_asm+0x1a/0x30 [ 98.319044][ T1156] [ 98.319057][ T1156] FAULT_INJECTION: forcing a failure. [ 98.319057][ T1156] name failslab, interval 1, probability 100, space 0, times 9 [ 98.330785][ C1] FAULT_INJECTION: forcing a failure. [ 98.330785][ C1] name failslab, interval 1, probability 100, space 0, times 9 [ 98.330865][ C1] CPU: 1 UID: 0 PID: 5968 Comm: syz.5.29 Not tainted syzkaller #0 PREEMPT(full) [ 98.330899][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 98.330914][ C1] Call Trace: [ 98.330923][ C1] [ 98.330932][ C1] dump_stack_lvl+0xe8/0x150 [ 98.330949][ C0] FAULT_INJECTION: forcing a failure. [ 98.330949][ C0] name failslab, interval 1, probability 100, space 0, times 9 [ 98.330973][ C1] should_fail_ex+0x40c/0x560 [ 98.331013][ C1] should_failslab+0xa8/0x100 [ 98.331051][ C1] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 98.331081][ C1] ? local_lock_release+0x9c/0x160 [ 98.331106][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.331132][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 98.331158][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 98.331189][ C1] __alloc_skb+0x1d7/0x7a0 [ 98.331218][ C1] __netdev_alloc_skb+0xc1/0x810 [ 98.331243][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.331270][ C1] ? __ieee80211_beacon_get+0x36/0x1920 [ 98.331304][ C1] __ieee80211_beacon_get+0xcfd/0x1920 [ 98.331333][ C1] ? __ieee80211_beacon_get+0x36/0x1920 [ 98.331367][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.331401][ C1] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 98.331436][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 98.331467][ C1] ? perf_trace_lock_acquire+0x1e0/0x440 [ 98.331509][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.331540][ C1] mac80211_hwsim_beacon_tx+0x378/0x820 [ 98.331572][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.331604][ C1] __iterate_interfaces+0x2af/0x5a0 [ 98.331632][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 98.331662][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 98.331692][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 98.331722][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 98.331752][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 98.331777][ C1] mac80211_hwsim_beacon+0xaf/0x240 [ 98.331801][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 98.331825][ C1] __hrtimer_run_queues+0x3bc/0xa10 [ 98.331869][ C1] hrtimer_run_softirq+0x17a/0x240 [ 98.331907][ C1] handle_softirqs+0x225/0x840 [ 98.331939][ C1] ? __irq_exit_rcu+0xca/0x220 [ 98.331974][ C1] __irq_exit_rcu+0xca/0x220 [ 98.332003][ C1] irq_exit_rcu+0x9/0x30 [ 98.332029][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 98.332058][ C1] [ 98.332065][ C1] [ 98.332074][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 98.332099][ C1] RIP: 0010:console_flush_all+0x7d2/0xaf0 [ 98.332126][ C1] Code: ff ff e8 91 2f 21 00 90 0f 0b 90 e9 9c fc ff ff e8 83 2f 21 00 e8 be 4f 2b 0a 48 85 db 74 c0 e8 74 2f 21 00 fb 48 8b 5c 24 18 <48> 8b 44 24 28 42 80 3c 20 00 4d 8d 77 58 74 08 4c 89 f7 e8 76 c8 [ 98.332144][ C1] RSP: 0018:ffffc90004eff3c0 EFLAGS: 00000283 [ 98.332163][ C1] RAX: ffffffff81a5e56c RBX: ffffc90004eff520 RCX: 0000000000080000 [ 98.332179][ C1] RDX: ffffc9000dc9a000 RSI: 00000000000648ee RDI: 00000000000648ef [ 98.332194][ C1] RBP: ffffc90004eff4d0 R08: ffffffff90579d37 R09: 1ffffffff20af3a6 [ 98.332211][ C1] R10: dffffc0000000000 R11: fffffbfff20af3a7 R12: dffffc0000000000 [ 98.332230][ C1] R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff8f46f8e0 [ 98.332253][ C1] ? console_flush_all+0x7cc/0xaf0 [ 98.332291][ C1] ? console_flush_all+0x123/0xaf0 [ 98.332323][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 98.332353][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.332380][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 98.332414][ C1] console_unlock+0xd1/0x1c0 [ 98.332437][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.332466][ C1] ? __pfx_console_unlock+0x10/0x10 [ 98.332488][ C1] ? vprintk_emit+0x231/0x560 [ 98.332512][ C1] ? vprintk_emit+0x455/0x560 [ 98.332535][ C1] ? vprintk_emit+0x2cf/0x560 [ 98.332556][ C1] ? vprintk_emit+0x2cf/0x560 [ 98.332581][ C1] vprintk_emit+0x485/0x560 [ 98.332607][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 98.332628][ C1] ? __lock_acquire+0x683/0x2cf0 [ 98.332667][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.332703][ C1] _printk+0xdd/0x130 [ 98.332734][ C1] ? __pfx__printk+0x10/0x10 [ 98.332757][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.332788][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.332816][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.332842][ C1] ? ___ratelimit+0x584/0x8e0 [ 98.332869][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.332905][ C1] should_fail_ex+0x3ed/0x560 [ 98.332939][ C1] should_failslab+0xa8/0x100 [ 98.332976][ C1] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 98.333005][ C1] ? local_lock_release+0x9c/0x160 [ 98.333030][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 98.333052][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 98.333082][ C1] __alloc_skb+0x1d7/0x7a0 [ 98.333111][ C1] netlink_sendmsg+0x5d4/0xb40 [ 98.333151][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.333185][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.333211][ C1] ? aa_sock_msg_perm+0xf1/0x1b0 [ 98.333239][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.333268][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.333297][ C1] sock_sendmsg_nosec+0x13a/0x180 [ 98.333335][ C1] ____sys_sendmsg+0x54e/0x850 [ 98.333369][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 98.333407][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.333433][ C1] ? import_iovec+0x73/0xa0 [ 98.333459][ C1] ___sys_sendmsg+0x2a5/0x360 [ 98.333486][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.333512][ C1] ? __lock_acquire+0x683/0x2cf0 [ 98.333549][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 98.333582][ C1] ? futex_wait+0x2a2/0x390 [ 98.333639][ C1] ? __fget_files+0x2a/0x420 [ 98.333670][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.333696][ C1] ? __fget_files+0x3a2/0x420 [ 98.333738][ C1] __x64_sys_sendmsg+0x1b1/0x290 [ 98.333767][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.333796][ C1] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 98.333833][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.333868][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.333897][ C1] do_syscall_64+0x174/0x580 [ 98.333927][ C1] ? trace_irq_disable+0x3b/0x140 [ 98.333963][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.333986][ C1] RIP: 0033:0x7f6de3f9e019 [ 98.334005][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.334022][ C1] RSP: 002b:00007f6de4dd3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.334043][ C1] RAX: ffffffffffffffda RBX: 00007f6de4225fa0 RCX: 00007f6de3f9e019 [ 98.334059][ C1] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 98.334073][ C1] RBP: 00007f6de403500c R08: 0000000000000000 R09: 0000000000000000 [ 98.334086][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.334100][ C1] R13: 00007f6de4226038 R14: 00007f6de4225fa0 R15: 00007ffd1d732868 [ 98.334135][ C1] [ 98.334146][ C0] CPU: 0 UID: 0 PID: 1156 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 98.334173][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 98.334185][ C1] FAULT_INJECTION: forcing a failure. [ 98.334185][ C1] name failslab, interval 1, probability 100, space 0, times 8 [ 98.334188][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 98.334221][ C0] Call Trace: [ 98.334229][ C0] [ 98.334237][ C0] dump_stack_lvl+0xe8/0x150 [ 98.334273][ C0] should_fail_ex+0x40c/0x560 [ 98.334307][ C0] should_failslab+0xa8/0x100 [ 98.334344][ C0] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 98.334373][ C0] ? local_lock_release+0x9c/0x160 [ 98.334405][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 98.334427][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 98.334458][ C0] __alloc_skb+0x1d7/0x7a0 [ 98.334487][ C0] __netdev_alloc_skb+0xc1/0x810 [ 98.334511][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.334539][ C0] ? __ieee80211_beacon_get+0x36/0x1920 [ 98.334572][ C0] __ieee80211_beacon_get+0xcfd/0x1920 [ 98.334601][ C0] ? __ieee80211_beacon_get+0x36/0x1920 [ 98.334635][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.334669][ C0] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 98.334705][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 98.334736][ C0] ? perf_trace_lock_acquire+0x1e0/0x440 [ 98.334788][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.334820][ C0] mac80211_hwsim_beacon_tx+0x378/0x820 [ 98.334851][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.334883][ C0] __iterate_interfaces+0x2af/0x5a0 [ 98.334911][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 98.334941][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 98.334972][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 98.335002][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 98.335032][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 98.335057][ C0] mac80211_hwsim_beacon+0xaf/0x240 [ 98.335081][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 98.335106][ C0] __hrtimer_run_queues+0x3bc/0xa10 [ 98.335149][ C0] hrtimer_run_softirq+0x17a/0x240 [ 98.335181][ C0] handle_softirqs+0x225/0x840 [ 98.335213][ C0] ? __irq_exit_rcu+0xca/0x220 [ 98.335248][ C0] __irq_exit_rcu+0xca/0x220 [ 98.335277][ C0] irq_exit_rcu+0x9/0x30 [ 98.335303][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 98.335332][ C0] [ 98.335339][ C0] [ 98.335348][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 98.335373][ C0] RIP: 0010:vprintk_emit+0x45d/0x560 [ 98.335402][ C0] Code: 0f 84 44 ff ff ff e8 d2 6c 21 00 fb eb 44 e8 ca 6c 21 00 e8 05 8d 2b 0a 4d 85 f6 74 94 e8 bb 6c 21 00 fb 48 c7 c7 a0 bf b4 8e <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 fb 1b [ 98.335419][ C0] RSP: 0018:ffffc90005647720 EFLAGS: 00000293 [ 98.335437][ C0] RAX: ffffffff81a5a825 RBX: ffffffff81a5a69f RCX: ffff888028168000 [ 98.335454][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8eb4bfa0 [ 98.335468][ C0] RBP: ffffc900056477d0 R08: ffffffff90579d37 R09: 1ffffffff20af3a6 [ 98.335484][ C0] R10: dffffc0000000000 R11: fffffbfff20af3a7 R12: 0000000000000000 [ 98.335500][ C0] R13: 0000000000000060 R14: 0000000000000200 R15: 1ffff92000ac8ee8 [ 98.335519][ C0] ? vprintk_emit+0x2cf/0x560 [ 98.335543][ C0] ? vprintk_emit+0x455/0x560 [ 98.335577][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 98.335598][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 98.335644][ C0] _printk+0xdd/0x130 [ 98.335675][ C0] ? __pfx__printk+0x10/0x10 [ 98.335706][ C0] ? ___ratelimit+0x584/0x8e0 [ 98.335732][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.335759][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 98.335792][ C0] should_fail_ex+0x3ed/0x560 [ 98.335826][ C0] should_failslab+0xa8/0x100 [ 98.335863][ C0] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 98.335892][ C0] ? local_lock_release+0x9c/0x160 [ 98.335918][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 98.335940][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 98.335971][ C0] __alloc_skb+0x1d7/0x7a0 [ 98.336000][ C0] nsim_dev_trap_report_work+0x25f/0xb40 [ 98.336045][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 98.336073][ C0] process_scheduled_works+0xa8e/0x14e0 [ 98.336132][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 98.336165][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.336192][ C0] ? assign_work+0x3cf/0x5d0 [ 98.336224][ C0] worker_thread+0xa47/0xfb0 [ 98.336279][ C0] kthread+0x388/0x470 [ 98.336314][ C0] ? __pfx_worker_thread+0x10/0x10 [ 98.336341][ C0] ? __pfx_kthread+0x10/0x10 [ 98.336376][ C0] ret_from_fork+0x514/0xb70 [ 98.336420][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 98.336454][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.336481][ C0] ? __switch_to+0xc89/0x1420 [ 98.336514][ C0] ? __pfx_kthread+0x10/0x10 [ 98.336549][ C0] ret_from_fork_asm+0x1a/0x30 [ 98.336587][ C0] [ 98.336598][ C1] CPU: 1 UID: 0 PID: 5968 Comm: syz.5.29 Not tainted syzkaller #0 PREEMPT(full) [ 98.336612][ C0] FAULT_INJECTION: forcing a failure. [ 98.336612][ C0] name failslab, interval 1, probability 100, space 0, times 7 [ 98.336623][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 98.336636][ C1] Call Trace: [ 98.336644][ C1] [ 98.336652][ C1] dump_stack_lvl+0xe8/0x150 [ 98.336687][ C1] should_fail_ex+0x40c/0x560 [ 98.336721][ C1] should_failslab+0xa8/0x100 [ 98.336758][ C1] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 98.336787][ C1] ? local_lock_release+0x9c/0x160 [ 98.336811][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.336837][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 98.336859][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 98.336890][ C1] __alloc_skb+0x1d7/0x7a0 [ 98.336926][ C1] __netdev_alloc_skb+0xc1/0x810 [ 98.336951][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.336978][ C1] ? __ieee80211_beacon_get+0x36/0x1920 [ 98.337011][ C1] __ieee80211_beacon_get+0xcfd/0x1920 [ 98.337041][ C1] ? __ieee80211_beacon_get+0x36/0x1920 [ 98.337075][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.337108][ C1] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 98.337143][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 98.337175][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.337201][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 98.337231][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.337262][ C1] mac80211_hwsim_beacon_tx+0x378/0x820 [ 98.337293][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.337325][ C1] __iterate_interfaces+0x2af/0x5a0 [ 98.337353][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 98.337382][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 98.337413][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 98.337443][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 98.337473][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 98.337498][ C1] mac80211_hwsim_beacon+0xaf/0x240 [ 98.337521][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 98.337546][ C1] __hrtimer_run_queues+0x3bc/0xa10 [ 98.337589][ C1] hrtimer_run_softirq+0x17a/0x240 [ 98.337621][ C1] handle_softirqs+0x225/0x840 [ 98.337652][ C1] ? __irq_exit_rcu+0xca/0x220 [ 98.337688][ C1] __irq_exit_rcu+0xca/0x220 [ 98.337716][ C1] irq_exit_rcu+0x9/0x30 [ 98.337742][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 98.337770][ C1] [ 98.337777][ C1] [ 98.337786][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 98.337810][ C1] RIP: 0010:console_flush_all+0x7d2/0xaf0 [ 98.337837][ C1] Code: ff ff e8 91 2f 21 00 90 0f 0b 90 e9 9c fc ff ff e8 83 2f 21 00 e8 be 4f 2b 0a 48 85 db 74 c0 e8 74 2f 21 00 fb 48 8b 5c 24 18 <48> 8b 44 24 28 42 80 3c 20 00 4d 8d 77 58 74 08 4c 89 f7 e8 76 c8 [ 98.337854][ C1] RSP: 0018:ffffc90004eff3c0 EFLAGS: 00000283 [ 98.337872][ C1] RAX: ffffffff81a5e56c RBX: ffffc90004eff520 RCX: 0000000000080000 [ 98.337888][ C1] RDX: ffffc9000dc9a000 RSI: 00000000000648ee RDI: 00000000000648ef [ 98.337908][ C1] RBP: ffffc90004eff4d0 R08: ffffffff90579d37 R09: 1ffffffff20af3a6 [ 98.337925][ C1] R10: dffffc0000000000 R11: fffffbfff20af3a7 R12: dffffc0000000000 [ 98.337941][ C1] R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff8f46f8e0 [ 98.337963][ C1] ? console_flush_all+0x7cc/0xaf0 [ 98.338002][ C1] ? console_flush_all+0x123/0xaf0 [ 98.338033][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 98.338064][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.338090][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 98.338124][ C1] console_unlock+0xd1/0x1c0 [ 98.338147][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.338175][ C1] ? __pfx_console_unlock+0x10/0x10 [ 98.338197][ C1] ? vprintk_emit+0x231/0x560 [ 98.338222][ C1] ? vprintk_emit+0x455/0x560 [ 98.338244][ C1] ? vprintk_emit+0x2cf/0x560 [ 98.338265][ C1] ? vprintk_emit+0x2cf/0x560 [ 98.338290][ C1] vprintk_emit+0x485/0x560 [ 98.338316][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 98.338338][ C1] ? __lock_acquire+0x683/0x2cf0 [ 98.338371][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.338406][ C1] _printk+0xdd/0x130 [ 98.338437][ C1] ? __pfx__printk+0x10/0x10 [ 98.338460][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.338491][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.338518][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.338544][ C1] ? ___ratelimit+0x584/0x8e0 [ 98.338571][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.338603][ C1] should_fail_ex+0x3ed/0x560 [ 98.338637][ C1] should_failslab+0xa8/0x100 [ 98.338673][ C1] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 98.338702][ C1] ? local_lock_release+0x9c/0x160 [ 98.338727][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 98.338749][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 98.338780][ C1] __alloc_skb+0x1d7/0x7a0 [ 98.338808][ C1] netlink_sendmsg+0x5d4/0xb40 [ 98.338849][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.338882][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.338912][ C1] ? aa_sock_msg_perm+0xf1/0x1b0 [ 98.338940][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.338970][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.338999][ C1] sock_sendmsg_nosec+0x13a/0x180 [ 98.339037][ C1] ____sys_sendmsg+0x54e/0x850 [ 98.339071][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 98.339108][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.339134][ C1] ? import_iovec+0x73/0xa0 [ 98.339161][ C1] ___sys_sendmsg+0x2a5/0x360 [ 98.339187][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.339213][ C1] ? __lock_acquire+0x683/0x2cf0 [ 98.339251][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 98.339283][ C1] ? futex_wait+0x2a2/0x390 [ 98.339340][ C1] ? __fget_files+0x2a/0x420 [ 98.339371][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.339397][ C1] ? __fget_files+0x3a2/0x420 [ 98.339440][ C1] __x64_sys_sendmsg+0x1b1/0x290 [ 98.339468][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.339498][ C1] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 98.339534][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.339570][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.339595][ C1] do_syscall_64+0x174/0x580 [ 98.339624][ C1] ? trace_irq_disable+0x3b/0x140 [ 98.339660][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.339683][ C1] RIP: 0033:0x7f6de3f9e019 [ 98.339701][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.339718][ C1] RSP: 002b:00007f6de4dd3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.339738][ C1] RAX: ffffffffffffffda RBX: 00007f6de4225fa0 RCX: 00007f6de3f9e019 [ 98.339754][ C1] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 98.339768][ C1] RBP: 00007f6de403500c R08: 0000000000000000 R09: 0000000000000000 [ 98.339782][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.339795][ C1] R13: 00007f6de4226038 R14: 00007f6de4225fa0 R15: 00007ffd1d732868 [ 98.339828][ C1] [ 98.339838][ C0] CPU: 0 UID: 0 PID: 1156 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 98.339849][ C1] FAULT_INJECTION: forcing a failure. [ 98.339849][ C1] name failslab, interval 1, probability 100, space 0, times 6 [ 98.339863][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 98.339877][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 98.339906][ C0] Call Trace: [ 98.339914][ C0] [ 98.339921][ C0] dump_stack_lvl+0xe8/0x150 [ 98.339955][ C0] should_fail_ex+0x40c/0x560 [ 98.339989][ C0] should_failslab+0xa8/0x100 [ 98.340026][ C0] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 98.340055][ C0] ? local_lock_release+0x9c/0x160 [ 98.340081][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 98.340103][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 98.340133][ C0] __alloc_skb+0x1d7/0x7a0 [ 98.340162][ C0] __netdev_alloc_skb+0xc1/0x810 [ 98.340187][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.340214][ C0] ? __ieee80211_beacon_get+0x36/0x1920 [ 98.340247][ C0] __ieee80211_beacon_get+0xcfd/0x1920 [ 98.340276][ C0] ? __ieee80211_beacon_get+0x36/0x1920 [ 98.340310][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.340344][ C0] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 98.340379][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 98.340417][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.340443][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 98.340472][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.340504][ C0] mac80211_hwsim_beacon_tx+0x378/0x820 [ 98.340535][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.340567][ C0] __iterate_interfaces+0x2af/0x5a0 [ 98.340595][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 98.340625][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 98.340655][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 98.340685][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 98.340715][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 98.340740][ C0] mac80211_hwsim_beacon+0xaf/0x240 [ 98.340764][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 98.340789][ C0] __hrtimer_run_queues+0x3bc/0xa10 [ 98.340844][ C0] hrtimer_run_softirq+0x17a/0x240 [ 98.340877][ C0] handle_softirqs+0x225/0x840 [ 98.340908][ C0] ? __irq_exit_rcu+0xca/0x220 [ 98.340944][ C0] __irq_exit_rcu+0xca/0x220 [ 98.340973][ C0] irq_exit_rcu+0x9/0x30 [ 98.340999][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 98.341027][ C0] [ 98.341034][ C0] [ 98.341043][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 98.341068][ C0] RIP: 0010:vprintk_emit+0x45d/0x560 [ 98.341091][ C0] Code: 0f 84 44 ff ff ff e8 d2 6c 21 00 fb eb 44 e8 ca 6c 21 00 e8 05 8d 2b 0a 4d 85 f6 74 94 e8 bb 6c 21 00 fb 48 c7 c7 a0 bf b4 8e <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 fb 1b [ 98.341109][ C0] RSP: 0018:ffffc90005647720 EFLAGS: 00000293 [ 98.341126][ C0] RAX: ffffffff81a5a825 RBX: ffffffff81a5a69f RCX: ffff888028168000 [ 98.341143][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8eb4bfa0 [ 98.341157][ C0] RBP: ffffc900056477d0 R08: ffffffff90579d37 R09: 1ffffffff20af3a6 [ 98.341174][ C0] R10: dffffc0000000000 R11: fffffbfff20af3a7 R12: 0000000000000000 [ 98.341189][ C0] R13: 0000000000000060 R14: 0000000000000200 R15: 1ffff92000ac8ee8 [ 98.341208][ C0] ? vprintk_emit+0x2cf/0x560 [ 98.341233][ C0] ? vprintk_emit+0x455/0x560 [ 98.341266][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 98.341288][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 98.341333][ C0] _printk+0xdd/0x130 [ 98.341364][ C0] ? __pfx__printk+0x10/0x10 [ 98.341400][ C0] ? ___ratelimit+0x584/0x8e0 [ 98.341426][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.341453][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 98.341486][ C0] should_fail_ex+0x3ed/0x560 [ 98.341519][ C0] should_failslab+0xa8/0x100 [ 98.341556][ C0] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 98.341586][ C0] ? local_lock_release+0x9c/0x160 [ 98.341611][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 98.341633][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 98.341664][ C0] __alloc_skb+0x1d7/0x7a0 [ 98.341693][ C0] nsim_dev_trap_report_work+0x25f/0xb40 [ 98.341738][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 98.341765][ C0] process_scheduled_works+0xa8e/0x14e0 [ 98.341820][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 98.341854][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.341880][ C0] ? assign_work+0x3cf/0x5d0 [ 98.341913][ C0] worker_thread+0xa47/0xfb0 [ 98.341968][ C0] kthread+0x388/0x470 [ 98.342002][ C0] ? __pfx_worker_thread+0x10/0x10 [ 98.342029][ C0] ? __pfx_kthread+0x10/0x10 [ 98.342065][ C0] ret_from_fork+0x514/0xb70 [ 98.342102][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 98.342137][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.342163][ C0] ? __switch_to+0xc89/0x1420 [ 98.342196][ C0] ? __pfx_kthread+0x10/0x10 [ 98.342231][ C0] ret_from_fork_asm+0x1a/0x30 [ 98.342269][ C0] [ 98.342280][ C1] CPU: 1 UID: 0 PID: 5968 Comm: syz.5.29 Not tainted syzkaller #0 PREEMPT(full) [ 98.342292][ C0] FAULT_INJECTION: forcing a failure. [ 98.342292][ C0] name failslab, interval 1, probability 100, space 0, times 5 [ 98.342304][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 98.342317][ C1] Call Trace: [ 98.342325][ C1] [ 98.342334][ C1] dump_stack_lvl+0xe8/0x150 [ 98.342368][ C1] should_fail_ex+0x40c/0x560 [ 98.342402][ C1] should_failslab+0xa8/0x100 [ 98.342439][ C1] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 98.342468][ C1] ? local_lock_release+0x9c/0x160 [ 98.342493][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.342519][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 98.342541][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 98.342571][ C1] __alloc_skb+0x1d7/0x7a0 [ 98.342600][ C1] __netdev_alloc_skb+0xc1/0x810 [ 98.342624][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.342656][ C1] ? __ieee80211_beacon_get+0x36/0x1920 [ 98.342692][ C1] __ieee80211_beacon_get+0xcfd/0x1920 [ 98.342721][ C1] ? __ieee80211_beacon_get+0x36/0x1920 [ 98.342755][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.342789][ C1] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 98.342824][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 98.342856][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.342882][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 98.342916][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.342947][ C1] mac80211_hwsim_beacon_tx+0x378/0x820 [ 98.342978][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.343010][ C1] __iterate_interfaces+0x2af/0x5a0 [ 98.343037][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 98.343067][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 98.343098][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 98.343127][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 98.343157][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 98.343182][ C1] mac80211_hwsim_beacon+0xaf/0x240 [ 98.343206][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 98.343230][ C1] __hrtimer_run_queues+0x3bc/0xa10 [ 98.343273][ C1] hrtimer_run_softirq+0x17a/0x240 [ 98.343305][ C1] handle_softirqs+0x225/0x840 [ 98.343336][ C1] ? __irq_exit_rcu+0xca/0x220 [ 98.343371][ C1] __irq_exit_rcu+0xca/0x220 [ 98.343400][ C1] irq_exit_rcu+0x9/0x30 [ 98.343426][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 98.343455][ C1] [ 98.343462][ C1] [ 98.343471][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 98.343495][ C1] RIP: 0010:console_flush_all+0x7d2/0xaf0 [ 98.343522][ C1] Code: ff ff e8 91 2f 21 00 90 0f 0b 90 e9 9c fc ff ff e8 83 2f 21 00 e8 be 4f 2b 0a 48 85 db 74 c0 e8 74 2f 21 00 fb 48 8b 5c 24 18 <48> 8b 44 24 28 42 80 3c 20 00 4d 8d 77 58 74 08 4c 89 f7 e8 76 c8 [ 98.343539][ C1] RSP: 0018:ffffc90004eff3c0 EFLAGS: 00000283 [ 98.343557][ C1] RAX: ffffffff81a5e56c RBX: ffffc90004eff520 RCX: 0000000000080000 [ 98.343573][ C1] RDX: ffffc9000dc9a000 RSI: 00000000000648ee RDI: 00000000000648ef [ 98.343588][ C1] RBP: ffffc90004eff4d0 R08: ffffffff90579d37 R09: 1ffffffff20af3a6 [ 98.343604][ C1] R10: dffffc0000000000 R11: fffffbfff20af3a7 R12: dffffc0000000000 [ 98.343621][ C1] R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff8f46f8e0 [ 98.343643][ C1] ? console_flush_all+0x7cc/0xaf0 [ 98.343681][ C1] ? console_flush_all+0x123/0xaf0 [ 98.343713][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 98.343743][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.343769][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 98.343803][ C1] console_unlock+0xd1/0x1c0 [ 98.343826][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.343855][ C1] ? __pfx_console_unlock+0x10/0x10 [ 98.343877][ C1] ? vprintk_emit+0x231/0x560 [ 98.343907][ C1] ? vprintk_emit+0x455/0x560 [ 98.343929][ C1] ? vprintk_emit+0x2cf/0x560 [ 98.343950][ C1] ? vprintk_emit+0x2cf/0x560 [ 98.343975][ C1] vprintk_emit+0x485/0x560 [ 98.344001][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 98.344023][ C1] ? __lock_acquire+0x683/0x2cf0 [ 98.344055][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.344091][ C1] _printk+0xdd/0x130 [ 98.344122][ C1] ? __pfx__printk+0x10/0x10 [ 98.344145][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.344175][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.344203][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.344229][ C1] ? ___ratelimit+0x584/0x8e0 [ 98.344255][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.344287][ C1] should_fail_ex+0x3ed/0x560 [ 98.344321][ C1] should_failslab+0xa8/0x100 [ 98.344358][ C1] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 98.344387][ C1] ? local_lock_release+0x9c/0x160 [ 98.344412][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 98.344434][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 98.344465][ C1] __alloc_skb+0x1d7/0x7a0 [ 98.344493][ C1] netlink_sendmsg+0x5d4/0xb40 [ 98.344533][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.344566][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.344593][ C1] ? aa_sock_msg_perm+0xf1/0x1b0 [ 98.344621][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.344650][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.344679][ C1] sock_sendmsg_nosec+0x13a/0x180 [ 98.344717][ C1] ____sys_sendmsg+0x54e/0x850 [ 98.344751][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 98.344788][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.344814][ C1] ? import_iovec+0x73/0xa0 [ 98.344840][ C1] ___sys_sendmsg+0x2a5/0x360 [ 98.344867][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.344897][ C1] ? __lock_acquire+0x683/0x2cf0 [ 98.344935][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 98.344967][ C1] ? futex_wait+0x2a2/0x390 [ 98.345024][ C1] ? __fget_files+0x2a/0x420 [ 98.345055][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.345081][ C1] ? __fget_files+0x3a2/0x420 [ 98.345123][ C1] __x64_sys_sendmsg+0x1b1/0x290 [ 98.345152][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.345181][ C1] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 98.345218][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.345254][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.345278][ C1] do_syscall_64+0x174/0x580 [ 98.345307][ C1] ? trace_irq_disable+0x3b/0x140 [ 98.345343][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.345366][ C1] RIP: 0033:0x7f6de3f9e019 [ 98.345384][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.345402][ C1] RSP: 002b:00007f6de4dd3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.345422][ C1] RAX: ffffffffffffffda RBX: 00007f6de4225fa0 RCX: 00007f6de3f9e019 [ 98.345438][ C1] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 98.345452][ C1] RBP: 00007f6de403500c R08: 0000000000000000 R09: 0000000000000000 [ 98.345466][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.345479][ C1] R13: 00007f6de4226038 R14: 00007f6de4225fa0 R15: 00007ffd1d732868 [ 98.345512][ C1] [ 98.345522][ C0] CPU: 0 UID: 0 PID: 1156 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 98.345549][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 98.345557][ C1] FAULT_INJECTION: forcing a failure. [ 98.345557][ C1] name failslab, interval 1, probability 100, space 0, times 4 [ 98.345563][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 98.345594][ C0] Call Trace: [ 98.345602][ C0] [ 98.345610][ C0] dump_stack_lvl+0xe8/0x150 [ 98.345644][ C0] should_fail_ex+0x40c/0x560 [ 98.345678][ C0] should_failslab+0xa8/0x100 [ 98.345716][ C0] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 98.345744][ C0] ? local_lock_release+0x9c/0x160 [ 98.345770][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 98.345792][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 98.345822][ C0] __alloc_skb+0x1d7/0x7a0 [ 98.345851][ C0] __netdev_alloc_skb+0xc1/0x810 [ 98.345876][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.345904][ C0] ? __ieee80211_beacon_get+0x36/0x1920 [ 98.345937][ C0] __ieee80211_beacon_get+0xcfd/0x1920 [ 98.345966][ C0] ? __ieee80211_beacon_get+0x36/0x1920 [ 98.346000][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.346034][ C0] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 98.346069][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 98.346101][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.346128][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 98.346156][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.346188][ C0] mac80211_hwsim_beacon_tx+0x378/0x820 [ 98.346219][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.346251][ C0] __iterate_interfaces+0x2af/0x5a0 [ 98.346279][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 98.346309][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 98.346339][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 98.346369][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 98.346405][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 98.346430][ C0] mac80211_hwsim_beacon+0xaf/0x240 [ 98.346454][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 98.346478][ C0] __hrtimer_run_queues+0x3bc/0xa10 [ 98.346522][ C0] hrtimer_run_softirq+0x17a/0x240 [ 98.346554][ C0] handle_softirqs+0x225/0x840 [ 98.346585][ C0] ? __irq_exit_rcu+0xca/0x220 [ 98.346621][ C0] __irq_exit_rcu+0xca/0x220 [ 98.346650][ C0] irq_exit_rcu+0x9/0x30 [ 98.346675][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 98.346704][ C0] [ 98.346711][ C0] [ 98.346720][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 98.346744][ C0] RIP: 0010:vprintk_emit+0x45d/0x560 [ 98.346767][ C0] Code: 0f 84 44 ff ff ff e8 d2 6c 21 00 fb eb 44 e8 ca 6c 21 00 e8 05 8d 2b 0a 4d 85 f6 74 94 e8 bb 6c 21 00 fb 48 c7 c7 a0 bf b4 8e <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 fb 1b [ 98.346785][ C0] RSP: 0018:ffffc90005647720 EFLAGS: 00000293 [ 98.346802][ C0] RAX: ffffffff81a5a825 RBX: ffffffff81a5a69f RCX: ffff888028168000 [ 98.346819][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8eb4bfa0 [ 98.346833][ C0] RBP: ffffc900056477d0 R08: ffffffff90579d37 R09: 1ffffffff20af3a6 [ 98.346850][ C0] R10: dffffc0000000000 R11: fffffbfff20af3a7 R12: 0000000000000000 [ 98.346865][ C0] R13: 0000000000000060 R14: 0000000000000200 R15: 1ffff92000ac8ee8 [ 98.346884][ C0] ? vprintk_emit+0x2cf/0x560 [ 98.346909][ C0] ? vprintk_emit+0x455/0x560 [ 98.346942][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 98.346964][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 98.347009][ C0] _printk+0xdd/0x130 [ 98.347039][ C0] ? __pfx__printk+0x10/0x10 [ 98.347070][ C0] ? ___ratelimit+0x584/0x8e0 [ 98.347096][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.347122][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 98.347155][ C0] should_fail_ex+0x3ed/0x560 [ 98.347189][ C0] should_failslab+0xa8/0x100 [ 98.347226][ C0] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 98.347255][ C0] ? local_lock_release+0x9c/0x160 [ 98.347280][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 98.347302][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 98.347333][ C0] __alloc_skb+0x1d7/0x7a0 [ 98.347362][ C0] nsim_dev_trap_report_work+0x25f/0xb40 [ 98.347412][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 98.347439][ C0] process_scheduled_works+0xa8e/0x14e0 [ 98.347494][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 98.347528][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.347554][ C0] ? assign_work+0x3cf/0x5d0 [ 98.347586][ C0] worker_thread+0xa47/0xfb0 [ 98.347641][ C0] kthread+0x388/0x470 [ 98.347676][ C0] ? __pfx_worker_thread+0x10/0x10 [ 98.347703][ C0] ? __pfx_kthread+0x10/0x10 [ 98.347738][ C0] ret_from_fork+0x514/0xb70 [ 98.347776][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 98.347810][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.347837][ C0] ? __switch_to+0xc89/0x1420 [ 98.347869][ C0] ? __pfx_kthread+0x10/0x10 [ 98.347905][ C0] ret_from_fork_asm+0x1a/0x30 [ 98.347943][ C0] [ 98.347953][ C1] CPU: 1 UID: 0 PID: 5968 Comm: syz.5.29 Not tainted syzkaller #0 PREEMPT(full) [ 98.347965][ C0] FAULT_INJECTION: forcing a failure. [ 98.347965][ C0] name failslab, interval 1, probability 100, space 0, times 3 [ 98.347978][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 98.347991][ C1] Call Trace: [ 98.347999][ C1] [ 98.348007][ C1] dump_stack_lvl+0xe8/0x150 [ 98.348041][ C1] should_fail_ex+0x40c/0x560 [ 98.348075][ C1] should_failslab+0xa8/0x100 [ 98.348112][ C1] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 98.348141][ C1] ? local_lock_release+0x9c/0x160 [ 98.348165][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.348192][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 98.348214][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 98.348244][ C1] __alloc_skb+0x1d7/0x7a0 [ 98.348273][ C1] __netdev_alloc_skb+0xc1/0x810 [ 98.348297][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.348325][ C1] ? __ieee80211_beacon_get+0x36/0x1920 [ 98.348357][ C1] __ieee80211_beacon_get+0xcfd/0x1920 [ 98.348386][ C1] ? __ieee80211_beacon_get+0x36/0x1920 [ 98.348421][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.348455][ C1] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 98.348490][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 98.348522][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.348548][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 98.348577][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.348608][ C1] mac80211_hwsim_beacon_tx+0x378/0x820 [ 98.348639][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.348670][ C1] __iterate_interfaces+0x2af/0x5a0 [ 98.348698][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 98.348728][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 98.348758][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 98.348788][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 98.348818][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 98.348843][ C1] mac80211_hwsim_beacon+0xaf/0x240 [ 98.348866][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 98.348891][ C1] __hrtimer_run_queues+0x3bc/0xa10 [ 98.348938][ C1] hrtimer_run_softirq+0x17a/0x240 [ 98.348970][ C1] handle_softirqs+0x225/0x840 [ 98.349001][ C1] ? __irq_exit_rcu+0xca/0x220 [ 98.349037][ C1] __irq_exit_rcu+0xca/0x220 [ 98.349065][ C1] irq_exit_rcu+0x9/0x30 [ 98.349091][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 98.349119][ C1] [ 98.349126][ C1] [ 98.349135][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 98.349159][ C1] RIP: 0010:console_flush_all+0x7d2/0xaf0 [ 98.349186][ C1] Code: ff ff e8 91 2f 21 00 90 0f 0b 90 e9 9c fc ff ff e8 83 2f 21 00 e8 be 4f 2b 0a 48 85 db 74 c0 e8 74 2f 21 00 fb 48 8b 5c 24 18 <48> 8b 44 24 28 42 80 3c 20 00 4d 8d 77 58 74 08 4c 89 f7 e8 76 c8 [ 98.349203][ C1] RSP: 0018:ffffc90004eff3c0 EFLAGS: 00000283 [ 98.349220][ C1] RAX: ffffffff81a5e56c RBX: ffffc90004eff520 RCX: 0000000000080000 [ 98.349236][ C1] RDX: ffffc9000dc9a000 RSI: 00000000000648ee RDI: 00000000000648ef [ 98.349251][ C1] RBP: ffffc90004eff4d0 R08: ffffffff90579d37 R09: 1ffffffff20af3a6 [ 98.349268][ C1] R10: dffffc0000000000 R11: fffffbfff20af3a7 R12: dffffc0000000000 [ 98.349284][ C1] R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff8f46f8e0 [ 98.349306][ C1] ? console_flush_all+0x7cc/0xaf0 [ 98.349344][ C1] ? console_flush_all+0x123/0xaf0 [ 98.349376][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 98.349407][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.349433][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 98.349467][ C1] console_unlock+0xd1/0x1c0 [ 98.349490][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.349519][ C1] ? __pfx_console_unlock+0x10/0x10 [ 98.349541][ C1] ? vprintk_emit+0x231/0x560 [ 98.349565][ C1] ? vprintk_emit+0x455/0x560 [ 98.349588][ C1] ? vprintk_emit+0x2cf/0x560 [ 98.349609][ C1] ? vprintk_emit+0x2cf/0x560 [ 98.349634][ C1] vprintk_emit+0x485/0x560 [ 98.349660][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 98.349681][ C1] ? __lock_acquire+0x683/0x2cf0 [ 98.349714][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.349749][ C1] _printk+0xdd/0x130 [ 98.349780][ C1] ? __pfx__printk+0x10/0x10 [ 98.349803][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.349833][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.349861][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.349887][ C1] ? ___ratelimit+0x584/0x8e0 [ 98.349917][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.349949][ C1] should_fail_ex+0x3ed/0x560 [ 98.349983][ C1] should_failslab+0xa8/0x100 [ 98.350020][ C1] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 98.350048][ C1] ? local_lock_release+0x9c/0x160 [ 98.350073][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 98.350095][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 98.350126][ C1] __alloc_skb+0x1d7/0x7a0 [ 98.350154][ C1] netlink_sendmsg+0x5d4/0xb40 [ 98.350194][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.350227][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.350253][ C1] ? aa_sock_msg_perm+0xf1/0x1b0 [ 98.350281][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.350310][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.350339][ C1] sock_sendmsg_nosec+0x13a/0x180 [ 98.350377][ C1] ____sys_sendmsg+0x54e/0x850 [ 98.350412][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 98.350449][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.350475][ C1] ? import_iovec+0x73/0xa0 [ 98.350501][ C1] ___sys_sendmsg+0x2a5/0x360 [ 98.350528][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.350554][ C1] ? __lock_acquire+0x683/0x2cf0 [ 98.350591][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 98.350624][ C1] ? futex_wait+0x2a2/0x390 [ 98.350680][ C1] ? __fget_files+0x2a/0x420 [ 98.350710][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.350736][ C1] ? __fget_files+0x3a2/0x420 [ 98.350779][ C1] __x64_sys_sendmsg+0x1b1/0x290 [ 98.350807][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.350836][ C1] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 98.350873][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.350912][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.350937][ C1] do_syscall_64+0x174/0x580 [ 98.350966][ C1] ? trace_irq_disable+0x3b/0x140 [ 98.351002][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.351025][ C1] RIP: 0033:0x7f6de3f9e019 [ 98.351043][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.351060][ C1] RSP: 002b:00007f6de4dd3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.351080][ C1] RAX: ffffffffffffffda RBX: 00007f6de4225fa0 RCX: 00007f6de3f9e019 [ 98.351096][ C1] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 98.351110][ C1] RBP: 00007f6de403500c R08: 0000000000000000 R09: 0000000000000000 [ 98.351124][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.351137][ C1] R13: 00007f6de4226038 R14: 00007f6de4225fa0 R15: 00007ffd1d732868 [ 98.351173][ C1] [ 98.351183][ C0] CPU: 0 UID: 0 PID: 1156 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 98.351193][ C1] FAULT_INJECTION: forcing a failure. [ 98.351193][ C1] name failslab, interval 1, probability 100, space 0, times 2 [ 98.351208][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 98.351222][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 98.351251][ C0] Call Trace: [ 98.351258][ C0] [ 98.351267][ C0] dump_stack_lvl+0xe8/0x150 [ 98.351301][ C0] should_fail_ex+0x40c/0x560 [ 98.351335][ C0] should_failslab+0xa8/0x100 [ 98.351372][ C0] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 98.351406][ C0] ? local_lock_release+0x9c/0x160 [ 98.351431][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 98.351453][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 98.351484][ C0] __alloc_skb+0x1d7/0x7a0 [ 98.351513][ C0] __netdev_alloc_skb+0xc1/0x810 [ 98.351538][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.351565][ C0] ? __ieee80211_beacon_get+0x36/0x1920 [ 98.351598][ C0] __ieee80211_beacon_get+0xcfd/0x1920 [ 98.351627][ C0] ? __ieee80211_beacon_get+0x36/0x1920 [ 98.351661][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.351695][ C0] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 98.351730][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 98.351762][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.351788][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 98.351817][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.351849][ C0] mac80211_hwsim_beacon_tx+0x378/0x820 [ 98.351880][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.351912][ C0] __iterate_interfaces+0x2af/0x5a0 [ 98.351940][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 98.351970][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 98.352000][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 98.352030][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 98.352060][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 98.352085][ C0] mac80211_hwsim_beacon+0xaf/0x240 [ 98.352115][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 98.352142][ C0] __hrtimer_run_queues+0x3bc/0xa10 [ 98.352185][ C0] hrtimer_run_softirq+0x17a/0x240 [ 98.352218][ C0] handle_softirqs+0x225/0x840 [ 98.352249][ C0] ? __irq_exit_rcu+0xca/0x220 [ 98.352285][ C0] __irq_exit_rcu+0xca/0x220 [ 98.352314][ C0] irq_exit_rcu+0x9/0x30 [ 98.352339][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 98.352368][ C0] [ 98.352375][ C0] [ 98.352384][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 98.352417][ C0] RIP: 0010:vprintk_emit+0x45d/0x560 [ 98.352440][ C0] Code: 0f 84 44 ff ff ff e8 d2 6c 21 00 fb eb 44 e8 ca 6c 21 00 e8 05 8d 2b 0a 4d 85 f6 74 94 e8 bb 6c 21 00 fb 48 c7 c7 a0 bf b4 8e <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 fb 1b [ 98.352458][ C0] RSP: 0018:ffffc90005647720 EFLAGS: 00000293 [ 98.352475][ C0] RAX: ffffffff81a5a825 RBX: ffffffff81a5a69f RCX: ffff888028168000 [ 98.352492][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8eb4bfa0 [ 98.352506][ C0] RBP: ffffc900056477d0 R08: ffffffff90579d37 R09: 1ffffffff20af3a6 [ 98.352522][ C0] R10: dffffc0000000000 R11: fffffbfff20af3a7 R12: 0000000000000000 [ 98.352538][ C0] R13: 0000000000000060 R14: 0000000000000200 R15: 1ffff92000ac8ee8 [ 98.352557][ C0] ? vprintk_emit+0x2cf/0x560 [ 98.352581][ C0] ? vprintk_emit+0x455/0x560 [ 98.352615][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 98.352636][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 98.352687][ C0] _printk+0xdd/0x130 [ 98.352717][ C0] ? __pfx__printk+0x10/0x10 [ 98.352748][ C0] ? ___ratelimit+0x584/0x8e0 [ 98.352774][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.352800][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 98.352833][ C0] should_fail_ex+0x3ed/0x560 [ 98.352867][ C0] should_failslab+0xa8/0x100 [ 98.352904][ C0] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 98.352933][ C0] ? local_lock_release+0x9c/0x160 [ 98.352959][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 98.352981][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 98.353011][ C0] __alloc_skb+0x1d7/0x7a0 [ 98.353040][ C0] nsim_dev_trap_report_work+0x25f/0xb40 [ 98.353085][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 98.353113][ C0] process_scheduled_works+0xa8e/0x14e0 [ 98.353167][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 98.353201][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.353227][ C0] ? assign_work+0x3cf/0x5d0 [ 98.353259][ C0] worker_thread+0xa47/0xfb0 [ 98.353314][ C0] kthread+0x388/0x470 [ 98.353349][ C0] ? __pfx_worker_thread+0x10/0x10 [ 98.353375][ C0] ? __pfx_kthread+0x10/0x10 [ 98.353416][ C0] ret_from_fork+0x514/0xb70 [ 98.353454][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 98.353488][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.353514][ C0] ? __switch_to+0xc89/0x1420 [ 98.353547][ C0] ? __pfx_kthread+0x10/0x10 [ 98.353582][ C0] ret_from_fork_asm+0x1a/0x30 [ 98.353620][ C0] [ 98.353631][ C1] CPU: 1 UID: 0 PID: 5968 Comm: syz.5.29 Not tainted syzkaller #0 PREEMPT(full) [ 98.353658][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 98.353671][ C1] Call Trace: [ 98.353671][ C0] FAULT_INJECTION: forcing a failure. [ 98.353671][ C0] name failslab, interval 1, probability 100, space 0, times 1 [ 98.353679][ C1] [ 98.353687][ C1] dump_stack_lvl+0xe8/0x150 [ 98.353722][ C1] should_fail_ex+0x40c/0x560 [ 98.353756][ C1] should_failslab+0xa8/0x100 [ 98.353793][ C1] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 98.353822][ C1] ? local_lock_release+0x9c/0x160 [ 98.353846][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.353872][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 98.353902][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 98.353932][ C1] __alloc_skb+0x1d7/0x7a0 [ 98.353961][ C1] __netdev_alloc_skb+0xc1/0x810 [ 98.353985][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.354013][ C1] ? __ieee80211_beacon_get+0x36/0x1920 [ 98.354045][ C1] __ieee80211_beacon_get+0xcfd/0x1920 [ 98.354074][ C1] ? __ieee80211_beacon_get+0x36/0x1920 [ 98.354108][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.354142][ C1] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 98.354177][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 98.354209][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.354235][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 98.354264][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.354295][ C1] mac80211_hwsim_beacon_tx+0x378/0x820 [ 98.354326][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.354358][ C1] __iterate_interfaces+0x2af/0x5a0 [ 98.354385][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 98.354416][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 98.354446][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 98.354476][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 98.354506][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 98.354531][ C1] mac80211_hwsim_beacon+0xaf/0x240 [ 98.354554][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 98.354579][ C1] __hrtimer_run_queues+0x3bc/0xa10 [ 98.354622][ C1] hrtimer_run_softirq+0x17a/0x240 [ 98.354654][ C1] handle_softirqs+0x225/0x840 [ 98.354685][ C1] ? __irq_exit_rcu+0xca/0x220 [ 98.354720][ C1] __irq_exit_rcu+0xca/0x220 [ 98.354749][ C1] irq_exit_rcu+0x9/0x30 [ 98.354775][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 98.354803][ C1] [ 98.354810][ C1] [ 98.354819][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 98.354843][ C1] RIP: 0010:console_flush_all+0x7d2/0xaf0 [ 98.354870][ C1] Code: ff ff e8 91 2f 21 00 90 0f 0b 90 e9 9c fc ff ff e8 83 2f 21 00 e8 be 4f 2b 0a 48 85 db 74 c0 e8 74 2f 21 00 fb 48 8b 5c 24 18 <48> 8b 44 24 28 42 80 3c 20 00 4d 8d 77 58 74 08 4c 89 f7 e8 76 c8 [ 98.354887][ C1] RSP: 0018:ffffc90004eff3c0 EFLAGS: 00000283 [ 98.354909][ C1] RAX: ffffffff81a5e56c RBX: ffffc90004eff520 RCX: 0000000000080000 [ 98.354925][ C1] RDX: ffffc9000dc9a000 RSI: 00000000000648ee RDI: 00000000000648ef [ 98.354940][ C1] RBP: ffffc90004eff4d0 R08: ffffffff90579d37 R09: 1ffffffff20af3a6 [ 98.354956][ C1] R10: dffffc0000000000 R11: fffffbfff20af3a7 R12: dffffc0000000000 [ 98.354973][ C1] R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff8f46f8e0 [ 98.354995][ C1] ? console_flush_all+0x7cc/0xaf0 [ 98.355033][ C1] ? console_flush_all+0x123/0xaf0 [ 98.355065][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 98.355095][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.355122][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 98.355156][ C1] console_unlock+0xd1/0x1c0 [ 98.355179][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.355207][ C1] ? __pfx_console_unlock+0x10/0x10 [ 98.355229][ C1] ? vprintk_emit+0x231/0x560 [ 98.355254][ C1] ? vprintk_emit+0x455/0x560 [ 98.355276][ C1] ? vprintk_emit+0x2cf/0x560 [ 98.355297][ C1] ? vprintk_emit+0x2cf/0x560 [ 98.355322][ C1] vprintk_emit+0x485/0x560 [ 98.355348][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 98.355370][ C1] ? __lock_acquire+0x683/0x2cf0 [ 98.355403][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.355438][ C1] _printk+0xdd/0x130 [ 98.355469][ C1] ? __pfx__printk+0x10/0x10 [ 98.355491][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.355522][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.355550][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.355576][ C1] ? ___ratelimit+0x584/0x8e0 [ 98.355602][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.355634][ C1] should_fail_ex+0x3ed/0x560 [ 98.355668][ C1] should_failslab+0xa8/0x100 [ 98.355705][ C1] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 98.355733][ C1] ? local_lock_release+0x9c/0x160 [ 98.355758][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 98.355780][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 98.355811][ C1] __alloc_skb+0x1d7/0x7a0 [ 98.355839][ C1] netlink_sendmsg+0x5d4/0xb40 [ 98.355879][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.355917][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.355943][ C1] ? aa_sock_msg_perm+0xf1/0x1b0 [ 98.355970][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.356000][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.356029][ C1] sock_sendmsg_nosec+0x13a/0x180 [ 98.356066][ C1] ____sys_sendmsg+0x54e/0x850 [ 98.356100][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 98.356138][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.356164][ C1] ? import_iovec+0x73/0xa0 [ 98.356190][ C1] ___sys_sendmsg+0x2a5/0x360 [ 98.356216][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.356242][ C1] ? __lock_acquire+0x683/0x2cf0 [ 98.356280][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 98.356312][ C1] ? futex_wait+0x2a2/0x390 [ 98.356368][ C1] ? __fget_files+0x2a/0x420 [ 98.356399][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.356426][ C1] ? __fget_files+0x3a2/0x420 [ 98.356468][ C1] __x64_sys_sendmsg+0x1b1/0x290 [ 98.356496][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.356526][ C1] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 98.356563][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.356598][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.356623][ C1] do_syscall_64+0x174/0x580 [ 98.356652][ C1] ? trace_irq_disable+0x3b/0x140 [ 98.356687][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.356710][ C1] RIP: 0033:0x7f6de3f9e019 [ 98.356728][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.356746][ C1] RSP: 002b:00007f6de4dd3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.356766][ C1] RAX: ffffffffffffffda RBX: 00007f6de4225fa0 RCX: 00007f6de3f9e019 [ 98.356782][ C1] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 98.356796][ C1] RBP: 00007f6de403500c R08: 0000000000000000 R09: 0000000000000000 [ 98.356809][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.356822][ C1] R13: 00007f6de4226038 R14: 00007f6de4225fa0 R15: 00007ffd1d732868 [ 98.356856][ C1] [ 98.356866][ C0] CPU: 0 UID: 0 PID: 1156 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 98.356892][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 98.356906][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 98.356937][ C0] Call Trace: [ 98.356945][ C0] [ 98.356954][ C0] dump_stack_lvl+0xe8/0x150 [ 98.356991][ C0] should_fail_ex+0x40c/0x560 [ 98.357028][ C0] should_failslab+0xa8/0x100 [ 98.357069][ C0] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 98.357102][ C0] ? local_lock_release+0x9c/0x160 [ 98.357130][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 98.357154][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 98.357188][ C0] __alloc_skb+0x1d7/0x7a0 [ 98.357220][ C0] __netdev_alloc_skb+0xc1/0x810 [ 98.357246][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.357276][ C0] ? __ieee80211_beacon_get+0x36/0x1920 [ 98.357311][ C0] __ieee80211_beacon_get+0xcfd/0x1920 [ 98.357343][ C0] ? __ieee80211_beacon_get+0x36/0x1920 [ 98.357380][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.357424][ C0] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 98.357461][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 98.357496][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.357525][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 98.357556][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.357591][ C0] mac80211_hwsim_beacon_tx+0x378/0x820 [ 98.357625][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.357660][ C0] __iterate_interfaces+0x2af/0x5a0 [ 98.357690][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 98.357722][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 98.357756][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 98.357788][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 98.357822][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 98.357849][ C0] mac80211_hwsim_beacon+0xaf/0x240 [ 98.357875][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 98.357902][ C0] __hrtimer_run_queues+0x3bc/0xa10 [ 98.357950][ C0] hrtimer_run_softirq+0x17a/0x240 [ 98.357986][ C0] handle_softirqs+0x225/0x840 [ 98.358020][ C0] ? __irq_exit_rcu+0xca/0x220 [ 98.358059][ C0] __irq_exit_rcu+0xca/0x220 [ 98.358091][ C0] irq_exit_rcu+0x9/0x30 [ 98.358118][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 98.358148][ C0] [ 98.358156][ C0] [ 98.358165][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 98.358191][ C0] RIP: 0010:vprintk_emit+0x45d/0x560 [ 98.358216][ C0] Code: 0f 84 44 ff ff ff e8 d2 6c 21 00 fb eb 44 e8 ca 6c 21 00 e8 05 8d 2b 0a 4d 85 f6 74 94 e8 bb 6c 21 00 fb 48 c7 c7 a0 bf b4 8e <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 fb 1b [ 98.358235][ C0] RSP: 0018:ffffc90005647720 EFLAGS: 00000293 [ 98.358254][ C0] RAX: ffffffff81a5a825 RBX: ffffffff81a5a69f RCX: ffff888028168000 [ 98.358272][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8eb4bfa0 [ 98.358286][ C0] RBP: ffffc900056477d0 R08: ffffffff90579d37 R09: 1ffffffff20af3a6 [ 98.358303][ C0] R10: dffffc0000000000 R11: fffffbfff20af3a7 R12: 0000000000000000 [ 98.358320][ C0] R13: 0000000000000060 R14: 0000000000000200 R15: 1ffff92000ac8ee8 [ 98.358341][ C0] ? vprintk_emit+0x2cf/0x560 [ 98.358369][ C0] ? vprintk_emit+0x455/0x560 [ 98.358412][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 98.358436][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 98.358483][ C0] _printk+0xdd/0x130 [ 98.358515][ C0] ? __pfx__printk+0x10/0x10 [ 98.358549][ C0] ? ___ratelimit+0x584/0x8e0 [ 98.358578][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.358607][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 98.358643][ C0] should_fail_ex+0x3ed/0x560 [ 98.358680][ C0] should_failslab+0xa8/0x100 [ 98.358721][ C0] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 98.358753][ C0] ? local_lock_release+0x9c/0x160 [ 98.358780][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 98.358805][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 98.358838][ C0] __alloc_skb+0x1d7/0x7a0 [ 98.358870][ C0] nsim_dev_trap_report_work+0x25f/0xb40 [ 98.358920][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 98.358950][ C0] process_scheduled_works+0xa8e/0x14e0 [ 98.359010][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 98.359047][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.359076][ C0] ? assign_work+0x3cf/0x5d0 [ 98.359112][ C0] worker_thread+0xa47/0xfb0 [ 98.359174][ C0] kthread+0x388/0x470 [ 98.359212][ C0] ? __pfx_worker_thread+0x10/0x10 [ 98.359241][ C0] ? __pfx_kthread+0x10/0x10 [ 98.359280][ C0] ret_from_fork+0x514/0xb70 [ 98.359322][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 98.359360][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.359389][ C0] ? __switch_to+0xc89/0x1420 [ 98.359430][ C0] ? __pfx_kthread+0x10/0x10 [ 98.359469][ C0] ret_from_fork_asm+0x1a/0x30 [ 98.359511][ C0] [ 98.381389][ T5927] CPU: 1 UID: 0 PID: 5927 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 98.381418][ T5927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 98.381432][ T5927] Call Trace: [ 98.381441][ T5927] [ 98.381451][ T5927] dump_stack_lvl+0xe8/0x150 [ 98.381491][ T5927] should_fail_ex+0x40c/0x560 [ 98.381529][ T5927] should_failslab+0xa8/0x100 [ 98.381569][ T5927] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 98.381603][ T5927] ? do_getname+0x2e/0x250 [ 98.381633][ T5927] ? do_getname+0x2e/0x250 [ 98.381671][ T5927] do_getname+0x2e/0x250 [ 98.381701][ T5927] ? getname_flags+0x11/0x20 [ 98.381735][ T5927] do_sys_openat2+0xcc/0x200 [ 98.381769][ T5927] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 98.381802][ T5927] ? __pfx_do_sys_openat2+0x10/0x10 [ 98.381843][ T5927] ? rcu_is_watching+0x15/0xb0 [ 98.381868][ T5927] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.381907][ T5927] __x64_sys_openat+0x138/0x170 [ 98.381947][ T5927] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.381974][ T5927] do_syscall_64+0x174/0x580 [ 98.382016][ T5927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.382042][ T5927] RIP: 0033:0x7f8c6faa7407 [ 98.382064][ T5927] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 98.382084][ T5927] RSP: 002b:00007fff9a9643e0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 98.382108][ T5927] RAX: ffffffffffffffda RBX: 00007f8c702a9880 RCX: 00007f8c6faa7407 [ 98.382130][ T5927] RDX: 0000000000080000 RSI: 00005652f5ab1fb0 RDI: ffffffffffffff9c [ 98.382148][ T5927] RBP: 00005652f5ab1fb0 R08: 0000000000000000 R09: 0000000000000000 [ 98.382164][ T5927] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 98.382179][ T5927] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000009 [ 98.382214][ T5927] [ 98.394058][ T5966] CPU: 1 UID: 0 PID: 5966 Comm: syz.1.28 Not tainted syzkaller #0 PREEMPT(full) [ 98.394087][ T5966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 98.394101][ T5966] Call Trace: [ 98.394109][ T5966] [ 98.394118][ T5966] dump_stack_lvl+0xe8/0x150 [ 98.394157][ T5966] should_fail_ex+0x40c/0x560 [ 98.394194][ T5966] should_failslab+0xa8/0x100 [ 98.394236][ T5966] kmem_cache_alloc_lru_noprof+0xa7/0x5f0 [ 98.394272][ T5966] ? sock_alloc_inode+0x2c/0x1a0 [ 98.394308][ T5966] ? sock_alloc_inode+0x2c/0x1a0 [ 98.394350][ T5966] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.394384][ T5966] ? __pfx_sock_alloc_inode+0x10/0x10 [ 98.394421][ T5966] sock_alloc_inode+0x2c/0x1a0 [ 98.394459][ T5966] ? __pfx_sock_alloc_inode+0x10/0x10 [ 98.394495][ T5966] alloc_inode+0x6a/0x1b0 [ 98.394531][ T5966] __sock_create+0x12d/0x9d0 [ 98.394581][ T5966] __sys_socket+0xd6/0x1b0 [ 98.394607][ T5966] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.394635][ T5966] __x64_sys_socket+0x7a/0x90 [ 98.394662][ T5966] do_syscall_64+0x174/0x580 [ 98.394695][ T5966] ? trace_irq_disable+0x3b/0x140 [ 98.394734][ T5966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.394760][ T5966] RIP: 0033:0x7f135f59e019 [ 98.394782][ T5966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.394802][ T5966] RSP: 002b:00007f135d7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 98.394827][ T5966] RAX: ffffffffffffffda RBX: 00007f135f825fa0 RCX: 00007f135f59e019 [ 98.394845][ T5966] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 98.394860][ T5966] RBP: 00007f135f63500c R08: 0000000000000000 R09: 0000000000000000 [ 98.394876][ T5966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.394891][ T5966] R13: 00007f135f826038 R14: 00007f135f825fa0 R15: 00007ffc84fc50b8 [ 98.394935][ T5966] [ 98.394960][ T5966] socket: no more sockets [ 98.398764][ T1156] CPU: 0 UID: 0 PID: 1156 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 98.398792][ T1156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 98.398808][ T1156] Workqueue: events_unbound nsim_dev_trap_report_work [ 98.398840][ T1156] Call Trace: [ 98.398850][ T1156] [ 98.398859][ T1156] dump_stack_lvl+0xe8/0x150 [ 98.398897][ T1156] should_fail_ex+0x40c/0x560 [ 98.398934][ T1156] should_failslab+0xa8/0x100 [ 98.398974][ T1156] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 98.399005][ T1156] ? local_lock_release+0x9c/0x160 [ 98.399032][ T1156] ? __alloc_skb+0x1d7/0x7a0 [ 98.399056][ T1156] ? __alloc_skb+0x1d7/0x7a0 [ 98.399090][ T1156] __alloc_skb+0x1d7/0x7a0 [ 98.399122][ T1156] nsim_dev_trap_report_work+0x25f/0xb40 [ 98.399170][ T1156] ? process_scheduled_works+0xa20/0x14e0 [ 98.399200][ T1156] process_scheduled_works+0xa8e/0x14e0 [ 98.399261][ T1156] ? __pfx_process_scheduled_works+0x10/0x10 [ 98.399297][ T1156] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.399325][ T1156] ? assign_work+0x3cf/0x5d0 [ 98.399360][ T1156] worker_thread+0xa47/0xfb0 [ 98.399426][ T1156] kthread+0x388/0x470 [ 98.399463][ T1156] ? __pfx_worker_thread+0x10/0x10 [ 98.399494][ T1156] ? __pfx_kthread+0x10/0x10 [ 98.399532][ T1156] ret_from_fork+0x514/0xb70 [ 98.399572][ T1156] ? __pfx_ret_from_fork+0x10/0x10 [ 98.399609][ T1156] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.399637][ T1156] ? __switch_to+0xc89/0x1420 [ 98.399672][ T1156] ? __pfx_kthread+0x10/0x10 [ 98.399710][ T1156] ret_from_fork_asm+0x1a/0x30 [ 98.399752][ T1156] [ 98.412773][ T5965] CPU: 0 UID: 0 PID: 5965 Comm: sed Not tainted syzkaller #0 PREEMPT(full) [ 98.412801][ T5965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 98.412814][ T5965] Call Trace: [ 98.412824][ T5965] [ 98.412833][ T5965] dump_stack_lvl+0xe8/0x150 [ 98.412871][ T5965] should_fail_ex+0x40c/0x560 [ 98.412909][ T5965] should_failslab+0xa8/0x100 [ 98.412948][ T5965] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 98.412981][ T5965] ? mas_alloc_nodes+0x291/0x350 [ 98.413010][ T5965] ? mas_alloc_nodes+0x291/0x350 [ 98.413048][ T5965] mas_alloc_nodes+0x291/0x350 [ 98.413085][ T5965] mas_preallocate+0x2cf/0x630 [ 98.413123][ T5965] ? __pfx_mas_preallocate+0x10/0x10 [ 98.413164][ T5965] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.413192][ T5965] ? __asan_memset+0x22/0x50 [ 98.413223][ T5965] ? init_multi_vma_prep+0x463/0x550 [ 98.413256][ T5965] commit_merge+0x20c/0x700 [ 98.413296][ T5965] ? up_write+0x19f/0x4a0 [ 98.413324][ T5965] ? __pfx_commit_merge+0x10/0x10 [ 98.413377][ T5965] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.413416][ T5965] vma_expand+0x81e/0xf40 [ 98.413452][ T5965] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.413480][ T5965] ? seqcount_lockdep_reader_access+0xea/0x100 [ 98.413525][ T5965] ? __pfx_vma_expand+0x10/0x10 [ 98.413563][ T5965] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.413591][ T5965] ? is_mergeable_anon_vma+0x26c/0x390 [ 98.413624][ T5965] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.413653][ T5965] ? can_vma_merge_right+0x40c/0x420 [ 98.413694][ T5965] vma_merge_new_range+0x6c0/0x8e0 [ 98.413742][ T5965] ? __pfx_vma_merge_new_range+0x10/0x10 [ 98.413784][ T5965] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.413822][ T5965] mmap_region+0x10e8/0x2310 [ 98.413868][ T5965] ? __pfx_mmap_region+0x10/0x10 [ 98.413896][ T5965] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.413924][ T5965] ? __mutex_trylock_common+0x15f/0x270 [ 98.413963][ T5965] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.413991][ T5965] ? trace_contention_end+0x3d/0x140 [ 98.414030][ T5965] ? process_measurement+0x139d/0x1c10 [ 98.414154][ T5965] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.414185][ T5965] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.414214][ T5965] ? cap_mmap_addr+0xaf/0x100 [ 98.414253][ T5965] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.414281][ T5965] ? security_mmap_addr+0x71/0x240 [ 98.414320][ T5965] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.414349][ T5965] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.414377][ T5965] ? shmem_mapping+0xd/0x50 [ 98.414421][ T5965] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.414450][ T5965] ? memfd_check_seals_mmap+0xc5/0x200 [ 98.414489][ T5965] do_mmap+0xc3b/0x10c0 [ 98.414530][ T5965] ? __pfx_do_mmap+0x10/0x10 [ 98.414554][ T5965] ? down_write_killable+0x180/0x240 [ 98.414595][ T5965] ? __pfx_down_write_killable+0x10/0x10 [ 98.414631][ T5965] ? apparmor_mmap_file+0x2da/0x3e0 [ 98.414675][ T5965] vm_mmap_pgoff+0x272/0x4e0 [ 98.414723][ T5965] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 98.414764][ T5965] ? __fget_files+0x2a/0x420 [ 98.414803][ T5965] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.414831][ T5965] ? __fget_files+0x3a2/0x420 [ 98.414865][ T5965] ? __fget_files+0x2a/0x420 [ 98.414904][ T5965] ksys_mmap_pgoff+0x4dc/0x760 [ 98.414937][ T5965] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.414964][ T5965] do_syscall_64+0x174/0x580 [ 98.414995][ T5965] ? trace_irq_disable+0x3b/0x140 [ 98.415034][ T5965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.415059][ T5965] RIP: 0033:0x7f944775e242 [ 98.415080][ T5965] Code: 08 00 04 00 00 eb e2 90 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 33 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5e 5b 5d c3 0f 1f 00 c7 05 46 40 01 00 16 00 [ 98.415099][ T5965] RSP: 002b:00007ffe6e9baba8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 98.415123][ T5965] RAX: ffffffffffffffda RBX: 00007f9447472000 RCX: 00007f944775e242 [ 98.415141][ T5965] RDX: 0000000000000001 RSI: 0000000000002000 RDI: 00007f9447472000 [ 98.415156][ T5965] RBP: 0000000000000812 R08: 0000000000000003 R09: 000000000000b000 [ 98.415171][ T5965] R10: 0000000000000812 R11: 0000000000000206 R12: 00007ffe6e9bac30 [ 98.415186][ T5965] R13: 00007f9447733580 R14: 00007ffe6e9bb020 R15: 00000fffcdd37578 [ 98.415224][ T5965] [ 98.424067][ T5968] CPU: 0 UID: 0 PID: 5968 Comm: syz.5.29 Not tainted syzkaller #0 PREEMPT(full) [ 98.424097][ T5968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 98.424111][ T5968] Call Trace: [ 98.424120][ T5968] [ 98.424129][ T5968] dump_stack_lvl+0xe8/0x150 [ 98.424168][ T5968] should_fail_ex+0x40c/0x560 [ 98.424205][ T5968] should_failslab+0xa8/0x100 [ 98.424245][ T5968] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 98.424276][ T5968] ? local_lock_release+0x9c/0x160 [ 98.424304][ T5968] ? __alloc_skb+0x1d7/0x7a0 [ 98.424328][ T5968] ? __alloc_skb+0x1d7/0x7a0 [ 98.424362][ T5968] __alloc_skb+0x1d7/0x7a0 [ 98.424400][ T5968] netlink_sendmsg+0x5d4/0xb40 [ 98.424444][ T5968] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.424481][ T5968] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.424509][ T5968] ? aa_sock_msg_perm+0xf1/0x1b0 [ 98.424540][ T5968] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.424571][ T5968] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.424603][ T5968] sock_sendmsg_nosec+0x13a/0x180 [ 98.424644][ T5968] ____sys_sendmsg+0x54e/0x850 [ 98.424681][ T5968] ? __pfx_____sys_sendmsg+0x10/0x10 [ 98.424721][ T5968] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.424750][ T5968] ? import_iovec+0x73/0xa0 [ 98.424784][ T5968] ___sys_sendmsg+0x2a5/0x360 [ 98.424813][ T5968] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.424842][ T5968] ? __lock_acquire+0x683/0x2cf0 [ 98.424884][ T5968] ? __pfx____sys_sendmsg+0x10/0x10 [ 98.424920][ T5968] ? futex_wait+0x2a2/0x390 [ 98.424981][ T5968] ? __fget_files+0x2a/0x420 [ 98.425014][ T5968] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.425042][ T5968] ? __fget_files+0x3a2/0x420 [ 98.425088][ T5968] __x64_sys_sendmsg+0x1b1/0x290 [ 98.425118][ T5968] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.425149][ T5968] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 98.425189][ T5968] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.425227][ T5968] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.425254][ T5968] do_syscall_64+0x174/0x580 [ 98.425286][ T5968] ? trace_irq_disable+0x3b/0x140 [ 98.425324][ T5968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.425349][ T5968] RIP: 0033:0x7f6de3f9e019 [ 98.425370][ T5968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.425389][ T5968] RSP: 002b:00007f6de4dd3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.425418][ T5968] RAX: ffffffffffffffda RBX: 00007f6de4225fa0 RCX: 00007f6de3f9e019 [ 98.425436][ T5968] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 98.425451][ T5968] RBP: 00007f6de403500c R08: 0000000000000000 R09: 0000000000000000 [ 98.425466][ T5968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.425480][ T5968] R13: 00007f6de4226038 R14: 00007f6de4225fa0 R15: 00007ffd1d732868 [ 98.425517][ T5968] [ 105.870599][ T5983] x_tables: duplicate underflow at hook 2 [ 106.149363][ T5993] rdma_rxe: rxe_newlink: failed to add lo [ 106.760707][ T5968] infiniband syz0: set active [ 106.773285][ T5968] infiniband syz0: added veth0 [ 106.865972][ T5968] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 106.890541][ T6007] bridge0: port 3(veth0) entered blocking state [ 106.906802][ T6007] bridge0: port 3(veth0) entered disabled state [ 106.916806][ T6007] veth0: entered allmulticast mode [ 106.921977][ T5968] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 106.943504][ T6007] veth0: entered promiscuous mode [ 106.949382][ T6007] bridge0: port 3(veth0) entered blocking state [ 106.956700][ T6007] bridge0: port 3(veth0) entered forwarding state [ 106.966217][ T5968] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 107.190491][ T5968] RDS/IB: syz0: added [ 107.216636][ T5968] smc: adding ib device syz0 with port count 1 [ 107.243330][ T5968] smc: ib device syz0 port 1 has no pnetid [ 107.833119][ T5789] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 108.010416][ T6056] netlink: 'syz.3.45': attribute type 2 has an invalid length. [ 108.072934][ T5789] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 0.00 [ 108.097740][ T5789] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 108.112802][ T5789] usb 3-1: Product: syz [ 108.117613][ T5789] usb 3-1: Manufacturer: syz [ 108.130116][ T6044] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.230112][ T6049] bridge0: port 3(gretap0) entered blocking state [ 108.243248][ T6049] bridge0: port 3(gretap0) entered disabled state [ 108.258013][ T6049] gretap0: entered allmulticast mode [ 108.275077][ T6049] gretap0: entered promiscuous mode [ 108.281232][ T6049] bridge0: port 3(gretap0) entered blocking state [ 108.288119][ T6049] bridge0: port 3(gretap0) entered forwarding state [ 108.306095][ T6051] bridge0: port 4(erspan0) entered blocking state [ 108.325328][ T6051] bridge0: port 4(erspan0) entered disabled state [ 108.332500][ T6051] erspan0: entered allmulticast mode [ 108.359329][ T6051] erspan0: entered promiscuous mode [ 108.379639][ T6051] bridge0: port 4(erspan0) entered blocking state [ 108.386523][ T6051] bridge0: port 4(erspan0) entered forwarding state [ 109.164420][ T6078] Zero length message leads to an empty skb [ 109.196863][ T6078] netlink: 48 bytes leftover after parsing attributes in process `syz.1.53'. [ 109.257051][ T6081] ip_tables: iptables: counters copy to user failed while replacing table [ 109.410477][ T5789] speedtch 3-1:1.0: speedtch_bind: setting interface to 1 failed (-71)! [ 109.457377][ T5789] speedtch 3-1:1.0: usbatm_usb_probe: bind failed: -71! [ 109.497591][ T5789] speedtch 3-1:1.0: probe with driver speedtch failed with error -71 [ 109.593350][ T5789] speedtch 3-1:1.1: speedtch_bind: setting interface to 1 failed (-71)! [ 109.625737][ T5789] speedtch 3-1:1.1: usbatm_usb_probe: bind failed: -71! [ 109.662332][ T5789] speedtch 3-1:1.1: probe with driver speedtch failed with error -71 [ 109.723443][ T5789] usb 3-1: USB disconnect, device number 2 [ 109.835379][ T6090] svc: failed to register nfsdv3 RPC service (errno 111). [ 109.866521][ T6090] svc: failed to register nfsaclv3 RPC service (errno 111). [ 110.029078][ T6097] NFSD: Failed to start, no listeners configured. [ 110.315790][ T6116] rdma_op ffff888069d139f0 conn xmit_rdma 0000000000000000 [ 111.000625][ T6044] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.449644][ T6146] netlink: 40 bytes leftover after parsing attributes in process `syz.2.78'. [ 112.694366][ T6194] netlink: 4 bytes leftover after parsing attributes in process `syz.1.93'. [ 112.705273][ T6194] bridge0: port 3(veth0) entered blocking state [ 112.722630][ T6194] bridge0: port 3(veth0) entered disabled state [ 112.733148][ T6194] veth0: entered allmulticast mode [ 112.740737][ T6194] veth0: entered promiscuous mode [ 112.759065][ T6194] bridge0: port 3(veth0) entered blocking state [ 112.765508][ T6194] bridge0: port 3(veth0) entered forwarding state [ 112.909536][ T6200] x_tables: duplicate underflow at hook 2 [ 113.079366][ T6206] netlink: 68 bytes leftover after parsing attributes in process `syz.2.97'. [ 113.447177][ T5647] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 113.457945][ T5647] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 113.466353][ T5647] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 113.476680][ T5647] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 113.487209][ T5647] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 114.095926][ T24] libceph: mon0 (2)127.0.0.1:20000 socket closed (con state V2_BANNER_PAYLOAD) [ 114.111661][ T6212] ceph: No mds server is up or the cluster is laggy [ 114.889096][ T10] IPVS: starting estimator thread 0... [ 114.905273][ T6253] IPVS: sync thread started: state = BACKUP, mcast_ifn = syz_tun, syncid = 0, id = 0 [ 114.922522][ T6113] lo speed is unknown, defaulting to 1000 [ 114.931727][ T6110] rdma_rxe: rxe_newlink: failed to add lo [ 114.971388][ T6113] lo speed is unknown, defaulting to 1000 [ 114.996742][ T6252] IPVS: using max 24 ests per chain, 57600 per kthread [ 115.035372][ T6113] lo speed is unknown, defaulting to 1000 [ 115.071624][ T6113] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 115.092978][ T6113] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 115.132972][ T6113] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 115.199127][ T6113] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 115.217935][ T6044] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.263689][ T6113] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 115.511247][ T6044] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.553534][ T5647] Bluetooth: hci6: command tx timeout [ 115.589763][ T6113] lo speed is unknown, defaulting to 1000 [ 115.665819][ T6113] lo speed is unknown, defaulting to 1000 [ 115.770140][ T6113] lo speed is unknown, defaulting to 1000 [ 115.860119][ T6113] lo speed is unknown, defaulting to 1000 [ 115.976817][ T6113] lo speed is unknown, defaulting to 1000 [ 115.996305][ T1173] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.045505][ T6113] lo speed is unknown, defaulting to 1000 [ 116.087737][ T6113] lo speed is unknown, defaulting to 1000 [ 116.134341][ T59] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.166355][ T6113] lo speed is unknown, defaulting to 1000 [ 116.229171][ T6113] lo speed is unknown, defaulting to 1000 [ 116.280548][ T1156] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.354852][ T6257] lo speed is unknown, defaulting to 1000 [ 116.399701][ T6113] lo speed is unknown, defaulting to 1000 [ 116.435241][ T1156] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.448948][ T5769] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_CONNECT_MSG) [ 116.460088][ T6264] ceph: No mds server is up or the cluster is laggy [ 116.508382][ T6113] lo speed is unknown, defaulting to 1000 [ 116.632552][ T1156] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.803062][ T6216] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.810286][ T6216] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.818215][ T6216] bridge_slave_0: entered allmulticast mode [ 116.829203][ T6216] bridge_slave_0: entered promiscuous mode [ 116.847615][ T1156] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.869000][ T6216] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.879374][ T6216] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.887013][ T6216] bridge_slave_1: entered allmulticast mode [ 116.897164][ T6216] bridge_slave_1: entered promiscuous mode [ 117.150108][ T6216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.202154][ T6216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.520071][ T6216] team0: Port device team_slave_0 added [ 117.532009][ T6216] team0: Port device team_slave_1 added [ 117.576417][ T5769] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 117.625478][ T6299] ceph: No mds server is up or the cluster is laggy [ 117.642705][ T5647] Bluetooth: hci6: command tx timeout [ 117.661762][ T6216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.727821][ T6216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.852229][ T6216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.102326][ T6216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.112002][ T6216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.176877][ T6216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.413449][ T191] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.535936][ T6331] sctp: [Deprecated]: syz.2.130 (pid 6331) Use of int in maxseg socket option. [ 118.535936][ T6331] Use struct sctp_assoc_value instead [ 118.577019][ T1156] bridge_slave_1: left allmulticast mode [ 118.610716][ T1156] bridge_slave_1: left promiscuous mode [ 118.642905][ T1156] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.746176][ T1156] bridge_slave_0: left allmulticast mode [ 118.783873][ T1156] bridge_slave_0: left promiscuous mode [ 118.809928][ T1156] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.484850][ T187] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 119.540522][ T6349] ipt_REJECT: TCP_RESET invalid for non-tcp [ 119.652826][ T187] usb 1-1: device descriptor read/64, error -71 [ 119.703002][ T5647] Bluetooth: hci6: command tx timeout [ 119.849650][ T1156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.904375][ T187] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 119.966297][ T1156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.996721][ T1156] bond0 (unregistering): Released all slaves [ 120.063194][ T187] usb 1-1: device descriptor read/64, error -71 [ 120.185627][ T187] usb usb1-port1: attempt power cycle [ 120.207086][ T6358] NFSD: Failed to start, no listeners configured. [ 120.563116][ T187] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 120.594074][ T187] usb 1-1: device descriptor read/8, error -71 [ 120.753896][ T1173] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.842852][ T187] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 120.915124][ T187] usb 1-1: device descriptor read/8, error -71 [ 121.074773][ T187] usb usb1-port1: unable to enumerate USB device [ 121.086259][ T6216] hsr_slave_0: entered promiscuous mode [ 121.133472][ T6216] hsr_slave_1: entered promiscuous mode [ 121.166921][ T6216] debugfs: 'hsr0' already exists in 'hsr' [ 121.186563][ T6216] Cannot create hsr debugfs directory [ 121.624575][ T6158] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.651086][ T6371] netlink: 'syz.3.146': attribute type 3 has an invalid length. [ 121.671049][ T6371] netlink: 24 bytes leftover after parsing attributes in process `syz.3.146'. [ 121.710602][ T6371] netlink: 'syz.3.146': attribute type 3 has an invalid length. [ 121.736197][ T6371] netlink: 24 bytes leftover after parsing attributes in process `syz.3.146'. [ 121.784676][ T5647] Bluetooth: hci6: command tx timeout [ 122.527836][ T6341] lo speed is unknown, defaulting to 1000 [ 122.572563][ T6383] rdma_rxe: rxe_newlink: failed to add lo [ 123.574739][ T5638] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 123.800463][ T5638] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 123.830360][ T5638] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 123.859928][ T187] IPVS: starting estimator thread 0... [ 123.885338][ T5638] usb 5-1: New USB device found, idVendor=0b95, idProduct=1790, bcdDevice= 1.00 [ 123.917814][ T5638] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.943313][ T5638] usb 5-1: Product: syz [ 123.951824][ T5638] usb 5-1: Manufacturer: syz [ 123.976638][ T6414] IPVS: using max 24 ests per chain, 57600 per kthread [ 123.985822][ T5638] usb 5-1: SerialNumber: syz [ 124.887001][ T5638] ax88179_178a 5-1:1.0: probe with driver ax88179_178a failed with error -71 [ 125.045554][ T5638] usb 5-1: USB disconnect, device number 2 [ 125.072877][ T6422] netlink: 32 bytes leftover after parsing attributes in process `syz.0.158'. [ 125.295915][ T6423] netlink: 332 bytes leftover after parsing attributes in process `syz.0.158'. [ 126.147930][ T5281] 8021q: adding VLAN 0 to HW filter on device eth1 [ 126.199097][ T6445] 8021q: VLANs not supported on lo [ 126.493415][ T6216] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 126.607387][ T6216] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 126.658742][ T6216] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 126.776806][ T6216] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 126.846529][ T6216] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 126.930285][ T6216] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 127.021034][ T6216] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 127.131708][ T6216] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 129.403504][ T6216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.679514][ T6216] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.772332][ T149] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.779545][ T149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.909001][ T149] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.916244][ T149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.978485][ T6503] NFSD: Failed to start, no listeners configured. [ 131.135827][ T6514] NFSD: Failed to start, no listeners configured. [ 131.692261][ T1156] hsr_slave_0: left promiscuous mode [ 131.760449][ T1156] hsr_slave_1: left promiscuous mode [ 131.797423][ T1156] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.839015][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.890332][ T1156] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.931901][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.115841][ T1156] veth1_macvtap: left promiscuous mode [ 132.123731][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.136075][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.160508][ T1156] veth0_macvtap: left promiscuous mode [ 132.208241][ T1156] veth1_vlan: left promiscuous mode [ 132.247370][ T1156] veth0_vlan: left promiscuous mode [ 132.918362][ T6568] netlink: 'syz.4.194': attribute type 2 has an invalid length. [ 133.637629][ T1156] team0 (unregistering): Port device team_slave_1 removed [ 133.702279][ T1156] team0 (unregistering): Port device team_slave_0 removed [ 134.106809][ T36] smc: removing ib device syz0 [ 134.507869][ T6549] netlink: 56 bytes leftover after parsing attributes in process `syz.2.186'. [ 134.711059][ T5630] syz0: Port: 1 Link DOWN [ 134.723263][ T5281] 8021q: adding VLAN 0 to HW filter on device eth2 [ 135.217834][ T36] smbdirect: ib_dev[syz0] removed [ 136.571906][ T6635] netlink: 'syz.3.209': attribute type 2 has an invalid length. [ 137.305561][ T6216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.411622][ T6675] netlink: 'syz.4.218': attribute type 1 has an invalid length. [ 138.507851][ T6679] netlink: 'syz.4.218': attribute type 1 has an invalid length. [ 138.593199][ T6675] netlink: 'syz.4.218': attribute type 1 has an invalid length. [ 138.686086][ T6679] netlink: 'syz.4.218': attribute type 1 has an invalid length. [ 140.552079][ T6712] netlink: 'syz.4.230': attribute type 2 has an invalid length. [ 140.575441][ T6216] veth0_vlan: entered promiscuous mode [ 140.688163][ T6216] veth1_vlan: entered promiscuous mode [ 140.999323][ T6216] veth0_macvtap: entered promiscuous mode [ 141.104554][ T6216] veth1_macvtap: entered promiscuous mode [ 141.320247][ T6216] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.418207][ T6727] netlink: 16 bytes leftover after parsing attributes in process `syz.0.233'. [ 141.521316][ T6727] netlink: 48 bytes leftover after parsing attributes in process `syz.0.233'. [ 141.805466][ T6216] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.922839][ T191] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.992070][ T191] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.416291][ T6743] netlink: 44 bytes leftover after parsing attributes in process `syz.2.238'. [ 142.677096][ T1173] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.869094][ T59] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.481369][ T1173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.543955][ T1173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.772337][ T6766] netlink: 'syz.1.247': attribute type 2 has an invalid length. [ 143.875534][ T804] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 143.971730][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.025142][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.327793][ T804] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 0.00 [ 144.369473][ T804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.474306][ T804] usb 3-1: Product: syz [ 144.526508][ T804] usb 3-1: Manufacturer: syz [ 144.572492][ T804] usb 3-1: SerialNumber: syz [ 145.002031][ T6783] netlink: 44 bytes leftover after parsing attributes in process `syz.1.252'. [ 145.821095][ T1156] IPVS: stop unused estimator thread 0... [ 146.586295][ T804] speedtch 3-1:1.0: speedtch_bind: setting interface to 1 failed (-71)! [ 146.634790][ T6815] netlink: 'syz.0.264': attribute type 2 has an invalid length. [ 146.645489][ T804] speedtch 3-1:1.0: usbatm_usb_probe: bind failed: -71! [ 146.736676][ T804] speedtch 3-1:1.0: probe with driver speedtch failed with error -71 [ 147.134813][ T6825] netlink: 44 bytes leftover after parsing attributes in process `syz.1.267'. [ 147.710884][ T804] speedtch 3-1:1.1: speedtch_bind: setting interface to 1 failed (-71)! [ 148.013316][ T804] speedtch 3-1:1.1: usbatm_usb_probe: bind failed: -71! [ 148.085256][ T804] speedtch 3-1:1.1: probe with driver speedtch failed with error -71 [ 148.904680][ T804] usb 3-1: USB disconnect, device number 3 [ 149.794512][ T6875] netlink: 'syz.4.285': attribute type 2 has an invalid length. [ 151.849093][ T6889] NFSD: Failed to start, no listeners configured. [ 154.107710][ T6966] rdma_rxe: rxe_newlink: failed to add lo [ 154.832824][ T6981] netlink: 'syz.1.322': attribute type 2 has an invalid length. [ 155.433377][ T6986] lo speed is unknown, defaulting to 1000 [ 157.068521][ T5281] 8021q: adding VLAN 0 to HW filter on device eth3 [ 157.120689][ T7019] svc: failed to register lockdv1 RPC service (errno 101). [ 157.620710][ T7019] svc: failed to register nfsdv3 RPC service (errno 512). [ 157.638033][ T5789] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 157.688485][ T7019] svc: failed to register nfsaclv3 RPC service (errno 512). [ 157.727111][ T7019] failed to unregister tcp with rpcbind [ 157.797305][ T7019] svc: failed to register nfsdv3 RPC service (errno 97). [ 157.820033][ T7019] svc: failed to register nfsaclv3 RPC service (errno 97). [ 157.861845][ T7019] failed to unregister tcp with rpcbind [ 158.030010][ T5789] usb 2-1: config 1 descriptor has 1 excess byte, ignoring [ 158.077802][ T5789] usb 2-1: config 1 interface 2 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 158.214608][ T5789] usb 2-1: New USB device found, idVendor=1110, idProduct=9000, bcdDevice= 1.00 [ 158.293414][ T5789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 158.372524][ T5789] usb 2-1: Product: syz [ 158.413264][ T5789] usb 2-1: Manufacturer: syz [ 159.231243][ T7072] netlink: 32 bytes leftover after parsing attributes in process `syz.4.353'. [ 160.434730][ T5789] usb 2-1: reset high-speed USB device number 2 using dummy_hcd [ 161.238032][ T7122] netlink: 12 bytes leftover after parsing attributes in process `syz.1.365'. [ 161.325453][ T7125] netlink: 108 bytes leftover after parsing attributes in process `syz.1.365'. [ 161.904034][ T7129] ip_tables: iptables: counters copy to user failed while replacing table [ 162.233667][ T5789] usb 2-1: Direct firmware load for ueagle-atm/930-fpga.bin failed with error -2 [ 162.274054][ T5789] usb 2-1: Falling back to sysfs fallback for: ueagle-atm/930-fpga.bin [ 162.805925][ T5281] 8021q: adding VLAN 0 to HW filter on device eth4 [ 167.532004][ T7271] netlink: 32 bytes leftover after parsing attributes in process `syz.0.416'. [ 167.727881][ T7275] netlink: 12 bytes leftover after parsing attributes in process `syz.2.419'. [ 171.044789][ T7333] NFSD: Failed to start, no listeners configured. [ 171.100795][ T7339] ovs-system: entered promiscuous mode [ 172.955705][ T7394] lo speed is unknown, defaulting to 1000 [ 173.002826][ T7351] NFSD: Unable to initialize client recovery tracking! (-110) [ 173.016258][ T7351] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 173.037770][ T7351] NFSD: starting 90-second grace period (net f00003cb) [ 173.046582][ T7395] lo speed is unknown, defaulting to 1000 [ 173.707414][ T7398] lo speed is unknown, defaulting to 1000 [ 174.150173][ T7396] lo speed is unknown, defaulting to 1000 [ 174.376215][ T7401] lo speed is unknown, defaulting to 1000 [ 174.493880][ T7416] tipc: Started in network mode [ 174.521153][ T7416] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 174.547955][ T7416] tipc: Enabled bearer , priority 0 [ 176.256302][ T5638] tipc: Node number set to 43690 [ 177.575712][ T7477] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 177.610020][ T7482] netlink: 12 bytes leftover after parsing attributes in process `syz.4.481'. [ 179.884382][ T7529] netlink: 12 bytes leftover after parsing attributes in process `syz.3.496'. [ 181.931427][ T7573] lo speed is unknown, defaulting to 1000 [ 182.312075][ T7578] lo speed is unknown, defaulting to 1000 [ 182.629894][ T7596] netlink: 12 bytes leftover after parsing attributes in process `syz.1.515'. [ 183.314743][ T7604] rdma_rxe: rxe_newlink: failed to add veth0 [ 183.968138][ T7618] netlink: 68 bytes leftover after parsing attributes in process `syz.4.523'. [ 184.407188][ T7629] netlink: 12 bytes leftover after parsing attributes in process `syz.4.528'. [ 184.757906][ T7638] netlink: 8 bytes leftover after parsing attributes in process `syz.3.530'. [ 186.231431][ T5638] ------------[ cut here ]------------ [ 186.237493][ T5638] con->v1.connect_seq != le32_to_cpu(con->v1.in_reply.connect_seq) [ 186.237515][ T5638] WARNING: net/ceph/messenger_v1.c:902 at ceph_con_v1_try_read+0x3335/0x6eb0, CPU#0: kworker/0:4/5638 [ 186.256518][ T5638] Modules linked in: [ 186.261715][ T5638] CPU: 0 UID: 0 PID: 5638 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(full) [ 186.271247][ T5638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 186.281731][ T5638] Workqueue: ceph-msgr ceph_con_workfn [ 186.288340][ T5638] RIP: 0010:ceph_con_v1_try_read+0x3335/0x6eb0 [ 186.295820][ T5638] Code: 45 31 e4 e9 3f d1 ff ff e8 08 c6 32 f6 90 0f 0b 90 e9 cd d3 ff ff e8 fa c5 32 f6 90 0f 0b 90 e9 dd e6 ff ff e8 ec c5 32 f6 90 <0f> 0b 90 e9 f4 e7 ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 30 d1 [ 186.316466][ T5638] RSP: 0018:ffffc900024ef180 EFLAGS: 00010293 [ 186.322544][ T5638] RAX: ffffffff8b944ef4 RBX: 0000000000000001 RCX: ffff88807fb6dd00 [ 186.330692][ T5638] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 186.339167][ T5638] RBP: ffffc900024efa78 R08: ffff88807fb6dd00 R09: 0000000000000009 [ 186.347287][ T5638] R10: 000000000000000d R11: 0000000000000000 R12: ffff88806a448418 [ 186.355322][ T5638] R13: fffff5200049de70 R14: dffffc0000000000 R15: 0000000000000000 [ 186.363341][ T5638] FS: 0000000000000000(0000) GS:ffff888124f4b000(0000) knlGS:0000000000000000 [ 186.372360][ T5638] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 186.379208][ T5638] CR2: 000000110c3863a5 CR3: 000000004de84000 CR4: 0000000000350ef0 [ 186.387282][ T5638] Call Trace: [ 186.390576][ T5638] [ 186.394808][ T5638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.400474][ T5638] ? __pfx_ceph_con_v1_try_read+0x10/0x10 [ 186.407206][ T5638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.412948][ T5638] ? __resched_curr+0x23e/0x530 [ 186.417844][ T5638] ? __pfx___resched_curr+0x10/0x10 [ 186.423139][ T5638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.428792][ T5638] ? wakeup_preempt_fair+0x745/0xb10 [ 186.434208][ T5638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.439887][ T5638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.445596][ T5638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.451240][ T5638] ? do_raw_spin_unlock+0xf5/0x210 [ 186.457569][ T5638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.463310][ T5638] ? _raw_spin_unlock+0x28/0x50 [ 186.468172][ T5638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.473867][ T5638] ? sched_balance_rq+0x6511/0x7020 [ 186.479127][ T5638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.484813][ T5638] ? __pfx_sched_balance_rq+0x10/0x10 [ 186.490202][ T5638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.497139][ T5638] ? __lock_acquire+0x683/0x2cf0 [ 186.502105][ T5638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.508833][ T5638] ? __lock_acquire+0x683/0x2cf0 [ 186.513859][ T5638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.519505][ T5638] ? __lock_acquire+0x683/0x2cf0 [ 186.524565][ T5638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.530206][ T5638] ? __mutex_trylock_common+0x15f/0x270 [ 186.535800][ T5638] ? __pfx___mutex_trylock_common+0x10/0x10 [ 186.541710][ T5638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.547412][ T5638] ? rcu_is_watching+0x15/0xb0 [ 186.552185][ T5638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.557950][ T5638] ? trace_contention_end+0x3d/0x140 [ 186.563452][ T5638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.569096][ T5638] ? __mutex_lock+0x30d/0x1550 [ 186.573915][ T5638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.579555][ T5638] ? __lock_acquire+0x683/0x2cf0 [ 186.584671][ T5638] ? rcu_is_watching+0x15/0xb0 [ 186.589443][ T5638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.595160][ T5638] ? ceph_con_workfn+0x3b/0x14a0 [ 186.601348][ T5638] ? __pfx___mutex_lock+0x10/0x10 [ 186.607199][ T5638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.612923][ T5638] ? do_raw_spin_lock+0x12b/0x2f0 [ 186.618058][ T5638] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 186.623499][ T5638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.629152][ T5638] ceph_con_workfn+0x208/0x14a0 [ 186.634055][ T5638] ? rcu_is_watching+0x15/0xb0 [ 186.638825][ T5638] ? process_scheduled_works+0xa20/0x14e0 [ 186.644643][ T5638] process_scheduled_works+0xa8e/0x14e0 [ 186.650234][ T5638] ? __pfx_process_scheduled_works+0x10/0x10 [ 186.656282][ T5638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.661924][ T5638] ? assign_work+0x3cf/0x5d0 [ 186.666734][ T5638] worker_thread+0xa47/0xfb0 [ 186.671348][ T5638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.677065][ T5638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.682782][ T5638] ? __kthread_parkme+0x71/0x1f0 [ 186.687754][ T5638] kthread+0x388/0x470 [ 186.691841][ T5638] ? __pfx_worker_thread+0x10/0x10 [ 186.697028][ T5638] ? __pfx_kthread+0x10/0x10 [ 186.702918][ T5638] ret_from_fork+0x514/0xb70 [ 186.707538][ T5638] ? __pfx_ret_from_fork+0x10/0x10 [ 186.713486][ T5638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.719129][ T5638] ? __switch_to+0xc89/0x1420 [ 186.723890][ T5638] ? __pfx_kthread+0x10/0x10 [ 186.728504][ T5638] ret_from_fork_asm+0x1a/0x30 [ 186.733394][ T5638] [ 186.736433][ T5638] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 186.743712][ T5638] CPU: 0 UID: 0 PID: 5638 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(full) [ 186.753083][ T5638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 186.763133][ T5638] Workqueue: ceph-msgr ceph_con_workfn [ 186.768609][ T5638] Call Trace: [ 186.771887][ T5638] [ 186.774811][ T5638] vpanic+0x56c/0xa60 [ 186.778816][ T5638] ? __pfx__printk+0x10/0x10 [ 186.783416][ T5638] ? __pfx_vpanic+0x10/0x10 [ 186.787966][ T5638] ? is_bpf_text_address+0x292/0x2b0 [ 186.793275][ T5638] ? is_bpf_text_address+0x26/0x2b0 [ 186.798591][ T5638] panic+0xc5/0xd0 [ 186.802331][ T5638] ? __pfx_panic+0x10/0x10 [ 186.806776][ T5638] ? ret_from_fork_asm+0x1a/0x30 [ 186.811734][ T5638] __warn+0x315/0x4c0 [ 186.815715][ T5638] ? ceph_con_v1_try_read+0x3335/0x6eb0 [ 186.821290][ T5638] ? ceph_con_v1_try_read+0x3335/0x6eb0 [ 186.826894][ T5638] __report_bug+0x276/0x570 [ 186.831447][ T5638] ? ceph_con_v1_try_read+0x3335/0x6eb0 [ 186.837014][ T5638] ? __pfx___report_bug+0x10/0x10 [ 186.842052][ T5638] ? tcp_recvmsg+0x213/0x7f0 [ 186.846658][ T5638] ? __local_bh_enable_ip+0xd0/0x130 [ 186.852132][ T5638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.857774][ T5638] ? lockdep_hardirqs_on+0x7a/0x110 [ 186.862984][ T5638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.868626][ T5638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.874264][ T5638] ? tcp_recvmsg+0x288/0x7f0 [ 186.878870][ T5638] ? ceph_con_v1_try_read+0x3335/0x6eb0 [ 186.884446][ T5638] report_bug+0x16a/0x220 [ 186.888798][ T5638] ? ceph_con_v1_try_read+0x3335/0x6eb0 [ 186.894444][ T5638] ? ceph_con_v1_try_read+0x3337/0x6eb0 [ 186.900002][ T5638] handle_bug+0x9c/0x200 [ 186.904260][ T5638] exc_invalid_op+0x1a/0x50 [ 186.908777][ T5638] asm_exc_invalid_op+0x1a/0x20 [ 186.913631][ T5638] RIP: 0010:ceph_con_v1_try_read+0x3335/0x6eb0 [ 186.919806][ T5638] Code: 45 31 e4 e9 3f d1 ff ff e8 08 c6 32 f6 90 0f 0b 90 e9 cd d3 ff ff e8 fa c5 32 f6 90 0f 0b 90 e9 dd e6 ff ff e8 ec c5 32 f6 90 <0f> 0b 90 e9 f4 e7 ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 30 d1 [ 186.939414][ T5638] RSP: 0018:ffffc900024ef180 EFLAGS: 00010293 [ 186.945486][ T5638] RAX: ffffffff8b944ef4 RBX: 0000000000000001 RCX: ffff88807fb6dd00 [ 186.953460][ T5638] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 186.961427][ T5638] RBP: ffffc900024efa78 R08: ffff88807fb6dd00 R09: 0000000000000009 [ 186.969397][ T5638] R10: 000000000000000d R11: 0000000000000000 R12: ffff88806a448418 [ 186.977367][ T5638] R13: fffff5200049de70 R14: dffffc0000000000 R15: 0000000000000000 [ 186.985346][ T5638] ? ceph_con_v1_try_read+0x3334/0x6eb0 [ 186.990978][ T5638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.996628][ T5638] ? __pfx_ceph_con_v1_try_read+0x10/0x10 [ 187.002370][ T5638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.008011][ T5638] ? __resched_curr+0x23e/0x530 [ 187.012882][ T5638] ? __pfx___resched_curr+0x10/0x10 [ 187.018105][ T5638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.023742][ T5638] ? wakeup_preempt_fair+0x745/0xb10 [ 187.029035][ T5638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.034677][ T5638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.040322][ T5638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.045962][ T5638] ? do_raw_spin_unlock+0xf5/0x210 [ 187.051088][ T5638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.056727][ T5638] ? _raw_spin_unlock+0x28/0x50 [ 187.061585][ T5638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.067223][ T5638] ? sched_balance_rq+0x6511/0x7020 [ 187.072470][ T5638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.078109][ T5638] ? __pfx_sched_balance_rq+0x10/0x10 [ 187.083504][ T5638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.089139][ T5638] ? __lock_acquire+0x683/0x2cf0 [ 187.094092][ T5638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.099728][ T5638] ? __lock_acquire+0x683/0x2cf0 [ 187.104684][ T5638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.110321][ T5638] ? __lock_acquire+0x683/0x2cf0 [ 187.115282][ T5638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.120920][ T5638] ? __mutex_trylock_common+0x15f/0x270 [ 187.126474][ T5638] ? __pfx___mutex_trylock_common+0x10/0x10 [ 187.132371][ T5638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.138017][ T5638] ? rcu_is_watching+0x15/0xb0 [ 187.142782][ T5638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.148417][ T5638] ? trace_contention_end+0x3d/0x140 [ 187.153714][ T5638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.159349][ T5638] ? __mutex_lock+0x30d/0x1550 [ 187.164123][ T5638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.169761][ T5638] ? __lock_acquire+0x683/0x2cf0 [ 187.174713][ T5638] ? rcu_is_watching+0x15/0xb0 [ 187.179476][ T5638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.185205][ T5638] ? ceph_con_workfn+0x3b/0x14a0 [ 187.190160][ T5638] ? __pfx___mutex_lock+0x10/0x10 [ 187.195291][ T5638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.200933][ T5638] ? do_raw_spin_lock+0x12b/0x2f0 [ 187.205972][ T5638] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 187.211358][ T5638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.217009][ T5638] ceph_con_workfn+0x208/0x14a0 [ 187.221876][ T5638] ? rcu_is_watching+0x15/0xb0 [ 187.226656][ T5638] ? process_scheduled_works+0xa20/0x14e0 [ 187.232387][ T5638] process_scheduled_works+0xa8e/0x14e0 [ 187.237974][ T5638] ? __pfx_process_scheduled_works+0x10/0x10 [ 187.243971][ T5638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.249620][ T5638] ? assign_work+0x3cf/0x5d0 [ 187.254228][ T5638] worker_thread+0xa47/0xfb0 [ 187.258833][ T5638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.264490][ T5638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.270137][ T5638] ? __kthread_parkme+0x71/0x1f0 [ 187.275103][ T5638] kthread+0x388/0x470 [ 187.279190][ T5638] ? __pfx_worker_thread+0x10/0x10 [ 187.284309][ T5638] ? __pfx_kthread+0x10/0x10 [ 187.288919][ T5638] ret_from_fork+0x514/0xb70 [ 187.293529][ T5638] ? __pfx_ret_from_fork+0x10/0x10 [ 187.298659][ T5638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.304301][ T5638] ? __switch_to+0xc89/0x1420 [ 187.309000][ T5638] ? __pfx_kthread+0x10/0x10 [ 187.313695][ T5638] ret_from_fork_asm+0x1a/0x30 [ 187.318483][ T5638] [ 187.321720][ T5638] Kernel Offset: disabled [ 187.326040][ T5638] Rebooting in 86400 seconds..