last executing test programs: 1m24.699328716s ago: executing program 2 (id=274): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)=@newtfilter={0x40, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0x1}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0x1}}]}}]}, 0x40}}, 0x0) 1m24.557133616s ago: executing program 2 (id=276): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth1\x00'}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x50}}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'veth1\x00'}) sendmsg$netlink(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="30000000240001060000000000000000000000000000000000000000000000000c00010063616b655f6d7100"], 0x30}], 0x1}, 0x0) 1m24.38084762s ago: executing program 2 (id=278): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1122334455667788}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x99aabbccddeeff00}]}]}, 0x30}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x8c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x78, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x24, 0x3, '0102030405060708090a0b0c0d0e0f10'}, @TIPC_NLA_NODE_KEY={0x50, 0x4, {'gcm(aes)\x00', 0x14, '0102030405060708090a0b0c0d0e0f1011121314'}}]}]}, 0x8c}}, 0x0) close(r0) unshare(0x40000000) 1m20.725709941s ago: executing program 4 (id=308): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/self/make-it-fail\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='1\n\x00', 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'veth0\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r2, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000100)='5\n\x00', 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r3, r2, 0x25, 0x0, @void}, 0x10) write(r4, &(0x7f0000000100)='6\n\x00', 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r3, r2, 0x25, 0x0, @void}, 0x10) write(r4, &(0x7f0000000100)='4\n\x00', 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r3, r2, 0x25, 0x0, @void}, 0x10) write(r4, &(0x7f0000000100)='7\n\x00', 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r3, r2, 0x25, 0x0, @void}, 0x10) 1m20.393620484s ago: executing program 3 (id=309): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x204e, @loopback}}, {0x14, 0x2, @in={0x2, 0x204e, @loopback}}}}]}]}, 0x54}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x11) connect$inet(r2, &(0x7f0000000100)={0x2, 0x204e, @loopback}, 0x10) sendto$inet(r2, &(0x7f0000000200)='\x00'/16, 0x10, 0x0, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x2, {0x40, 0x1, 0x1}}, 0x10) sendmsg$tipc(r3, &(0x7f0000000400)={&(0x7f0000000500)=@name={0x1e, 0x2, 0x2, {{0x40, 0x1}}}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000700)='\x00\x00\x00\x00', 0x4}], 0x1}, 0x0) 1m19.568166794s ago: executing program 4 (id=312): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_mnt\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mnt/module/sctp/parameters/no_checksums\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='Y', 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r3, &(0x7f0000000200)={0x2, 0x270f, @remote}, 0x10) listen(r3, 0x5) write$tun(r1, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x0, 0x3d}, @ipv4=@generic={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, "01020304"}}, 0x4e) 1m18.651726978s ago: executing program 3 (id=315): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='proc\x00', &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/ipv6/conf/syz_tun/accept_dad\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/net/ipv6/conf/all/accept_dad\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv6/conf/syz_tun/disable_ipv6\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='0', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/net/ipv6/conf/all/disable_ipv6\x00', 0x1, 0x0) write(r3, &(0x7f0000000340)='0', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/net/ipv6/conf/syz_tun/dad_transmits\x00', 0x1, 0x0) write(r4, &(0x7f00000003c0)='1', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/sys/net/ipv6/conf/all/dad_transmits\x00', 0x1, 0x0) write(r5, &(0x7f0000000440)='1', 0x1) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000480)={'syz_tun\x00', 0x0}) ioctl$sock_ifreq(r6, 0x8914, &(0x7f00000004c0)={'syz_tun\x00', @ifru_ivalue=0x1}) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000500)={@local, 0x40, r7}) syz_emit_ethernet(0x56, &(0x7f0000000540)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x20, 0x3a, 0xff, @local, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x40, '\x00', @local, [{0x2, 0x1, "aaaaaaaaaaaa"}]}}}}}}, 0x0) nanosleep(&(0x7f00000005c0)={0x1}, 0x0) 1m18.485399297s ago: executing program 4 (id=317): socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) 1m18.484853437s ago: executing program 2 (id=318): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @loopback}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000300)={r1}, &(0x7f0000000340)=0x8) 1m18.391919085s ago: executing program 1 (id=319): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syz_tun\x00', 0x101}) r1 = socket(0x2d, 0x2, 0x0) setsockopt(r1, 0x11d, 0x1, &(0x7f0000000200)="01000000", 0x4) ioctl(r1, 0x89e2, &(0x7f0000000300)='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00') sendmsg(r1, &(0x7f0000000400)={&(0x7f0000000500)=@generic={0x2d, "0000080118000200"}, 0x20, &(0x7f0000000600)=[{&(0x7f0000000700)='\x00\x00', 0x2}], 0x1}, 0x0) 1m18.291520067s ago: executing program 4 (id=321): set_mempolicy(0x4005, 0x0, 0x7ffd) r0 = fanotify_init(0x200, 0x0) r1 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000200)=0xfe) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) shmctl$SHM_STAT_ANY(0x0, 0xf, 0x0) ioctl$PPPIOCSACTIVE(r2, 0x40047459, &(0x7f0000009280)={0xfffffffffffffff7, 0x0}) readv(r2, &(0x7f0000000240)=[{&(0x7f0000000180)=""/79, 0x4f}], 0x1) 1m18.15737959s ago: executing program 1 (id=322): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x2, &(0x7f0000000180)=@raw=[@generic={0xb7, 0x0, 0x0, 0x0, 0x2}, @generic={0x95}], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000200)={r0, 0x0, 0xe, 0x0, &(0x7f0000000300)="00112233445566778899aabbccdd", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) 1m18.156877333s ago: executing program 0 (id=323): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}}, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000300)={0x2, 0x4e21, @loopback}, 0x10) connect$rds(r1, &(0x7f0000000340)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000700)=""/8, 0x8}], 0x1, &(0x7f0000000500)=[@fadd={0x0, 0x114, 0x6, {{}, &(0x7f0000000700), 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, 0x1234}}]}, 0x0) close(r1) 1m18.156568216s ago: executing program 5 (id=324): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) socket$netlink(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x40000002) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000140), &(0x7f0000000280)=r3}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r4, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf980000000000000d08000000000000850000001b300000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 1m18.037039111s ago: executing program 0 (id=325): r0 = socket$inet6_tcp(0xa, 0x1, 0x6) socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3d, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4001, 0x0, @loopback, 0x1}, 0x1c) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 1m18.0361571s ago: executing program 5 (id=326): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'ip6_vti0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={@local, 0x40, r2}) nanosleep(&(0x7f0000000200)={0x0, 0xbebc200}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x13c, 0x10, 0x401, 0x0, 0x0, {{@in6=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@local, 0x4d2, 0x33}, @in6=@remote, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x1, {{'digest_null\x00'}}}]}, 0x13c}}, 0x0) write$tun(r0, &(0x7f0000000500)={@void, @void, @ipv6=@generic={0x0, 0x6, '\x00', 0x10, 0x33, 0x40, @remote, @local, {[], "3b010000000004d20000000100000000"}}}, 0x38) 1m17.994346635s ago: executing program 1 (id=327): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) listen(r0, 0x5) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "0101010101010101"}, {0x10, 0x110, 0x5}], 0x28}, 0x0) 1m17.849861114s ago: executing program 1 (id=328): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x10) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x2, @remote}, 0x10) syz_emit_ethernet(0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="fe5400000000fe54000000010004020373"], 0x0) 1m17.786801258s ago: executing program 1 (id=329): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='nfsd\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='1\x00', 0x2) close(r0) 1m17.783789255s ago: executing program 0 (id=330): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syz_tun\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'syz_tun\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f00000000c0), 0x12) ioctl$sock_x25_SIOCADDRT(r2, 0x89e0, &(0x7f0000000100)={@null, 0x0, 'syz_tun\x00'}) write$tun(r0, &(0x7f0000000200)={@val={0x0, 0x805}, @void, @x25={0x0, 0x0, 0xb, '\x00\x00'}}, 0xa) write$tun(r0, &(0x7f0000000300)={@val={0x0, 0x805}, @void, @x25={0x0, 0x0, 0x1, '\x00\x00'}}, 0x8) 1m17.671909077s ago: executing program 3 (id=331): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="1400000010000100000000000000000002000000"], 0x14}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x11) sendto$inet6(r1, &(0x7f0000000100)="12345678", 0x8, 0x0, &(0x7f0000000200)={0xa, 0x22b8, 0x0, @loopback}, 0x1c) 1m17.565349135s ago: executing program 0 (id=332): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m17.564918922s ago: executing program 5 (id=333): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='rpc_pipefs\x00', 0x0, &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) r0 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x0) r1 = fsopen(&(0x7f0000000e00)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) r2 = fsopen(&(0x7f0000001000)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x0) nanosleep(&(0x7f0000000e00)={0x0, 0x7a120}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000e00)={0x0, 0xf4240}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 1m17.469765295s ago: executing program 2 (id=334): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x48}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/net/bridge0/bridge/multicast_snooping\x00', 0x1, 0x0) write(r3, &(0x7f0000000440)='1\n', 0x2) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/class/net/bridge0/bridge/multicast_igmp_version\x00', 0x1, 0x0) write(r4, &(0x7f0000000500)='3\n', 0x2) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/class/net/syz_tun/brport/multicast_fast_leave\x00', 0x1, 0x0) write(r5, &(0x7f00000005c0)='1\n', 0x2) close(r5) syz_emit_ethernet(0x3a, &(0x7f0000000700)={@multicast, @local, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x1, 0x2, 0x0, @rand_addr=0x64010100, @multicast1, {[@ra={0x94, 0x4}]}}, "2200334f0000000106000001e1010203c0a80101"}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000800)={@multicast, @local, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x1, 0x2, 0x0, @rand_addr=0x64010100, @multicast1, {[@ra={0x94, 0x4}]}}, "220035540000000104000001e1010203c0a80101"}}}}, 0x0) 1m17.468956133s ago: executing program 0 (id=335): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv4/ipfrag_max_dist\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='64\x00', 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x0) sendto$inet(r1, &(0x7f0000000100)="4500001c12342001400100007f000001010101010000000000000000", 0x1c, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000300)="4500001c12352001400100007f000001010101020000000000000000", 0x1c, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000400)="4500001c12362001400100007f000001010101030000000000000000", 0x1c, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 1m17.325749376s ago: executing program 3 (id=336): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)={0xcc, 0x10, 0x1, 0x0, 0x0, "", [@generic="64010100000000000000000000000000123400000200500064010100"/188]}, 0xcc}], 0x1}, 0x0) sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)={0x8c, 0x29, 0x1, 0x0, 0x0, "", [@generic="64010100000000000000000000000000123400000200500064010101000000000000000000000000640101010000000000000000000000000000000000000000640101010000000000000000000000006401010100000000000000000000000000000000000000000200202050000000000000000000000002000000"]}, 0x8c}], 0x1}, 0x0) 1m17.237253099s ago: executing program 1 (id=337): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='nfsd\x00', &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='tcp 2049\n\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='1\n\x00', 0x2) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000340)='127.0.0.1:/\x00', &(0x7f0000000380)='./mnt\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='port=2049,proto=tcp,clientaddr=127.0.0.1\x00']) 1m17.168007832s ago: executing program 3 (id=338): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) socket$netlink(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x40000002) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000140), &(0x7f0000000280)=r3}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r4, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf980000000000000d08000000000000850000001b300000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 1m17.138927336s ago: executing program 5 (id=339): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) listen(r0, 0x5) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000100)="00000001000000010000000101000000000000010000000000000000", 0x1c, 0x0, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000300)="0000000100000001000000000b000000", 0x10, 0x0, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000400)="0000000100000001000000000a000000", 0x10, 0x0, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) 1m16.933606478s ago: executing program 4 (id=340): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@setlink={0x20, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x28}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000700)=@newqdisc={0x90, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0x1, [], 0x1}, [@TCA_MQPRIO_MODE={0x6, 0x1, 0x1}]}}}]}, 0x90}}, 0x0) 1m16.933198177s ago: executing program 0 (id=341): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x1}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0xc0, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x90, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3e8}]}]}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0xc0}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f0000000400)={0x11, 0x0, r2, 0x0}, 0x14) write(r3, &(0x7f0000000500)="00000000000000000000000008004500001c000000004011000001010101010101020001000100080000", 0x2a) nanosleep(&(0x7f0000000600)={0x0, 0x5f5e100}, 0x0) 1m16.894795324s ago: executing program 5 (id=342): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x1234}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x4}]}, 0x34}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="0073797a30300073797a30300800450000300000400040113c237f0000017f00000112341234001c0000450000140000400040043c3f7f0000017f000001"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) 1m16.887490893s ago: executing program 2 (id=343): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x38, 0x1403, 0x5, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x38, 0x1403, 0x5, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000200), r1) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x48, r2, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x48}}, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x48, r2, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'lo\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x48}}, 0x0) nanosleep(&(0x7f0000000600)={0x0, 0x5f5e100}, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) bind(r3, &(0x7f0000000700)=@in={0x2, 0x2382, @local}, 0x10) listen(r3, 0x5) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000800)={0x2, 0x2382, @local}, 0x10) r5 = accept(r3, 0x0, 0x0) shutdown(r4, 0x2) shutdown(r5, 0x2) close(r5) close(r4) close(r3) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x18, 0x1404, 0x5, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x18, 0x1404, 0x5, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}}, 0x0) nanosleep(&(0x7f0000000600)={0x0, 0xbebc200}, 0x0) 1m16.878810948s ago: executing program 3 (id=344): syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) write(r0, &(0x7f0000000100)="3c0000001000010001000000000000003801000025001c0044454641554c54554549443030303030303030303030303030303000", 0x3c) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x1403, 0x5, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x38, 0x1403, 0x5, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) nanosleep(&(0x7f0000000400)={0x1}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bind(r2, &(0x7f0000000500)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xaa}}, 0x10) listen(r2, 0x5) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, &(0x7f0000000600)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xaa}}, 0x10) nanosleep(&(0x7f0000000700)={0x0, 0x1dcd6500}, 0x0) close(r3) close(r2) 1m16.729237257s ago: executing program 4 (id=345): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_tracing={0x1a, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x80) 1m14.625579144s ago: executing program 5 (id=346): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@mpls_newroute={0x1c, 0x18, 0x405, 0x1, 0x0, {0x1c, 0x0, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1}}, 0x1c}}, 0x0) 0s ago: executing program 32 (id=341): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x1}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0xc0, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x90, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3e8}]}]}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0xc0}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f0000000400)={0x11, 0x0, r2, 0x0}, 0x14) write(r3, &(0x7f0000000500)="00000000000000000000000008004500001c000000004011000001010101010101020001000100080000", 0x2a) nanosleep(&(0x7f0000000600)={0x0, 0x5f5e100}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.161' (ED25519) to the list of known hosts. [ 75.475789][ T5606] cgroup: Unknown subsys name 'net' [ 75.587113][ T5606] cgroup: Unknown subsys name 'cpuset' [ 75.596525][ T5606] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.064777][ T5606] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.165511][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.175831][ T5629] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.184152][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.193004][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.200066][ T5629] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.212207][ T5632] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.231358][ T5635] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 81.243710][ T5642] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.245615][ T5640] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 81.251498][ T5642] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.267163][ T5640] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 81.274951][ T5642] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 81.275604][ T5640] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.282775][ T5642] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.298180][ T5642] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.298709][ T5644] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.306399][ T5642] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.312973][ T5640] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 81.328666][ T5644] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.330803][ T5645] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.336364][ T5644] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 81.343234][ T5646] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.350837][ T5644] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 81.357850][ T5645] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 81.364396][ T5644] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.371400][ T5646] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.380246][ T5644] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.386239][ T5646] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 81.392843][ T5644] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.406155][ T5645] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.421365][ T5632] Bluetooth: hci0: command tx timeout [ 83.421369][ T50] Bluetooth: hci5: command tx timeout [ 83.502976][ T50] Bluetooth: hci2: command tx timeout [ 83.503035][ T5629] Bluetooth: hci4: command tx timeout [ 83.508927][ T50] Bluetooth: hci1: command tx timeout [ 83.514526][ T5632] Bluetooth: hci3: command tx timeout [ 83.708654][ T5624] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.715963][ T5624] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.723456][ T5624] bridge_slave_0: entered allmulticast mode [ 83.731069][ T5624] bridge_slave_0: entered promiscuous mode [ 83.800052][ T5624] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.807325][ T5624] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.814718][ T5624] bridge_slave_1: entered allmulticast mode [ 83.822431][ T5624] bridge_slave_1: entered promiscuous mode [ 83.841099][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.848203][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.855451][ T5622] bridge_slave_0: entered allmulticast mode [ 83.863020][ T5622] bridge_slave_0: entered promiscuous mode [ 83.891989][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.899115][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.906365][ T5620] bridge_slave_0: entered allmulticast mode [ 83.914763][ T5620] bridge_slave_0: entered promiscuous mode [ 83.941419][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.948574][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.955839][ T5622] bridge_slave_1: entered allmulticast mode [ 83.963336][ T5622] bridge_slave_1: entered promiscuous mode [ 84.000631][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.007805][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.015301][ T5620] bridge_slave_1: entered allmulticast mode [ 84.022745][ T5620] bridge_slave_1: entered promiscuous mode [ 84.099189][ T5624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.129493][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.136726][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.144299][ T5627] bridge_slave_0: entered allmulticast mode [ 84.151960][ T5627] bridge_slave_0: entered promiscuous mode [ 84.160126][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.167386][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.174901][ T5621] bridge_slave_0: entered allmulticast mode [ 84.182325][ T5621] bridge_slave_0: entered promiscuous mode [ 84.204024][ T5624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.228641][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.238413][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.245641][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.252896][ T5627] bridge_slave_1: entered allmulticast mode [ 84.260397][ T5627] bridge_slave_1: entered promiscuous mode [ 84.267756][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.274896][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.282089][ T5621] bridge_slave_1: entered allmulticast mode [ 84.289533][ T5621] bridge_slave_1: entered promiscuous mode [ 84.299304][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.335434][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.371134][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.393012][ T5623] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.400223][ T5623] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.407730][ T5623] bridge_slave_0: entered allmulticast mode [ 84.415293][ T5623] bridge_slave_0: entered promiscuous mode [ 84.489223][ T5624] team0: Port device team_slave_0 added [ 84.495596][ T5623] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.503269][ T5623] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.511014][ T5623] bridge_slave_1: entered allmulticast mode [ 84.518426][ T5623] bridge_slave_1: entered promiscuous mode [ 84.540337][ T5627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.553526][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.564983][ T5620] team0: Port device team_slave_0 added [ 84.573137][ T5624] team0: Port device team_slave_1 added [ 84.593504][ T5622] team0: Port device team_slave_0 added [ 84.601834][ T5627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.613527][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.625053][ T5620] team0: Port device team_slave_1 added [ 84.669408][ T5622] team0: Port device team_slave_1 added [ 84.725458][ T5623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.771915][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.778939][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.804916][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.818756][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.825792][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.851912][ T5624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.865615][ T5623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.888963][ T5627] team0: Port device team_slave_0 added [ 84.896995][ T5621] team0: Port device team_slave_0 added [ 84.903425][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.910465][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.936625][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.948306][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.955336][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.981257][ T5624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.004618][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.011643][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.037559][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.051448][ T5627] team0: Port device team_slave_1 added [ 85.059067][ T5621] team0: Port device team_slave_1 added [ 85.106180][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.113193][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.139620][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.176434][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.183435][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.209397][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.222617][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.229581][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.255479][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.268600][ T5623] team0: Port device team_slave_0 added [ 85.297053][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.304152][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.330052][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.367008][ T5623] team0: Port device team_slave_1 added [ 85.398088][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.405108][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.432713][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.475780][ T5624] hsr_slave_0: entered promiscuous mode [ 85.482772][ T5624] hsr_slave_1: entered promiscuous mode [ 85.500578][ T5629] Bluetooth: hci5: command tx timeout [ 85.506177][ T5632] Bluetooth: hci0: command tx timeout [ 85.551759][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.558766][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.581201][ T5632] Bluetooth: hci1: command tx timeout [ 85.584954][ T5629] Bluetooth: hci3: command tx timeout [ 85.590166][ T50] Bluetooth: hci4: command tx timeout [ 85.595459][ T5646] Bluetooth: hci2: command tx timeout [ 85.597313][ T5623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.625886][ T5620] hsr_slave_0: entered promiscuous mode [ 85.632807][ T5620] hsr_slave_1: entered promiscuous mode [ 85.662395][ T5620] debugfs: 'hsr0' already exists in 'hsr' [ 85.668180][ T5620] Cannot create hsr debugfs directory [ 85.727271][ T5622] hsr_slave_0: entered promiscuous mode [ 85.733715][ T5622] hsr_slave_1: entered promiscuous mode [ 85.739872][ T5622] debugfs: 'hsr0' already exists in 'hsr' [ 85.746365][ T5622] Cannot create hsr debugfs directory [ 85.752795][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.759793][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.786138][ T5623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.835192][ T5627] hsr_slave_0: entered promiscuous mode [ 85.841705][ T5627] hsr_slave_1: entered promiscuous mode [ 85.847826][ T5627] debugfs: 'hsr0' already exists in 'hsr' [ 85.853825][ T5627] Cannot create hsr debugfs directory [ 85.875494][ T5621] hsr_slave_0: entered promiscuous mode [ 85.882049][ T5621] hsr_slave_1: entered promiscuous mode [ 85.888194][ T5621] debugfs: 'hsr0' already exists in 'hsr' [ 85.894059][ T5621] Cannot create hsr debugfs directory [ 86.150857][ T5623] hsr_slave_0: entered promiscuous mode [ 86.157583][ T5623] hsr_slave_1: entered promiscuous mode [ 86.164151][ T5623] debugfs: 'hsr0' already exists in 'hsr' [ 86.169872][ T5623] Cannot create hsr debugfs directory [ 86.803595][ T5624] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 86.820182][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.828691][ T5624] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 86.840104][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.848049][ T5624] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 86.858573][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.866724][ T5624] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 86.876650][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.955088][ T5621] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.966022][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.973877][ T5621] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.983608][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.997448][ T5621] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.009304][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.036403][ T5621] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.048028][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.119877][ T5620] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 87.134136][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.145051][ T5620] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 87.155686][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.165010][ T5620] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 87.175023][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.183558][ T5620] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 87.193190][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.276840][ T5624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.324342][ T5627] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.335017][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.343573][ T5627] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.355354][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.370225][ T5627] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.381955][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.389809][ T5627] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.399599][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.415225][ T5624] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.454977][ T1333] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.462315][ T1333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.509089][ T655] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.516252][ T655] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.584922][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.591703][ T5632] Bluetooth: hci0: command tx timeout [ 87.597261][ T50] Bluetooth: hci5: command tx timeout [ 87.606045][ T5622] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.617387][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.625722][ T5622] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.638347][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.646340][ T5622] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.657224][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.661373][ T50] Bluetooth: hci1: command tx timeout [ 87.665079][ T5632] Bluetooth: hci4: command tx timeout [ 87.671296][ T50] Bluetooth: hci3: command tx timeout [ 87.675247][ T5629] Bluetooth: hci2: command tx timeout [ 87.694491][ T5622] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.704587][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.792449][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.838085][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.848259][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.855367][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.898337][ T655] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.905489][ T655] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.919213][ T5623] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.929928][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.939997][ T5623] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.951024][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.958904][ T5623] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.969566][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.989820][ T5623] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.999723][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.020359][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.076559][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.083819][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.143624][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.150762][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.187355][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.283980][ T5627] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.327825][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.334997][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.370407][ T1333] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.377603][ T1333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.440080][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.597302][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.661752][ T5623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.697784][ T3344] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.704976][ T3344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.748027][ T3344] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.755225][ T3344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.855978][ T5623] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.930283][ T1333] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.937480][ T1333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.987123][ T5624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.026011][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.033189][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.660801][ T5629] Bluetooth: hci5: command tx timeout [ 89.666293][ T5632] Bluetooth: hci0: command tx timeout [ 89.738121][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.742431][ T5632] Bluetooth: hci3: command tx timeout [ 89.746414][ T5646] Bluetooth: hci2: command tx timeout [ 89.750397][ T50] Bluetooth: hci4: command tx timeout [ 89.761864][ T5629] Bluetooth: hci1: command tx timeout [ 89.949854][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.963685][ T5621] veth0_vlan: entered promiscuous mode [ 89.988572][ T5621] veth1_vlan: entered promiscuous mode [ 90.197445][ T5621] veth0_macvtap: entered promiscuous mode [ 90.228745][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.263079][ T5621] veth1_macvtap: entered promiscuous mode [ 90.318120][ T5624] veth0_vlan: entered promiscuous mode [ 90.365291][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.397442][ T5624] veth1_vlan: entered promiscuous mode [ 90.427757][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.458892][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.507461][ T136] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.516974][ T136] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.551751][ T136] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.583528][ T136] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.673482][ T5624] veth0_macvtap: entered promiscuous mode [ 90.687709][ T5624] veth1_macvtap: entered promiscuous mode [ 90.696621][ T5623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.714370][ T5627] veth0_vlan: entered promiscuous mode [ 90.759547][ T5620] veth0_vlan: entered promiscuous mode [ 90.801537][ T5627] veth1_vlan: entered promiscuous mode [ 90.808791][ T5620] veth1_vlan: entered promiscuous mode [ 90.817441][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.848812][ T1333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.868256][ T1333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.885825][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.896033][ T5622] veth0_vlan: entered promiscuous mode [ 90.935796][ T3344] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.945275][ T3344] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.971673][ T3344] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.981390][ T3344] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.992338][ T5622] veth1_vlan: entered promiscuous mode [ 91.026028][ T3344] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.034687][ T3344] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.044652][ T5623] veth0_vlan: entered promiscuous mode [ 91.071637][ T5620] veth0_macvtap: entered promiscuous mode [ 91.115093][ T5620] veth1_macvtap: entered promiscuous mode [ 91.123477][ T10] cfg80211: failed to load regulatory.db [ 91.141501][ T5627] veth0_macvtap: entered promiscuous mode [ 91.168786][ T5621] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.180005][ T5627] veth1_macvtap: entered promiscuous mode [ 91.215835][ T5623] veth1_vlan: entered promiscuous mode [ 91.257173][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.277877][ T655] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.289433][ T5622] veth0_macvtap: entered promiscuous mode [ 91.297725][ T655] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.343090][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.356404][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.382892][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.399202][ T5622] veth1_macvtap: entered promiscuous mode [ 91.414265][ T5863] tipc: Started in network mode [ 91.419777][ T5863] tipc: Node identity 0010000000000000002, cluster identity 1 [ 91.429238][ T1333] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.438129][ T1333] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.453555][ T655] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.457662][ T1333] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.463423][ T655] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.481928][ T1333] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.544931][ T1333] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.581987][ T1333] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.597121][ T1333] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.637916][ T1333] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.657765][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.775980][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.806697][ T5623] veth0_macvtap: entered promiscuous mode [ 91.844836][ T5869] Zero length message leads to an empty skb [ 91.867291][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.878289][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.894645][ T5623] veth1_macvtap: entered promiscuous mode [ 91.920066][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.941448][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.986495][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.997695][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.081592][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.095639][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.202666][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.210945][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.253539][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.322110][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.374362][ T1333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.406656][ T1333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.587248][ T3344] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.605723][ T655] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.619697][ T655] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.650358][ T3344] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.679311][ T3344] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.813951][ T3344] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.849623][ T3344] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.884214][ T3344] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.949248][ T655] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.995837][ T1333] netdevsim netdevsim10 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.203362][ T3293] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.234078][ T3293] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.359957][ T655] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.412816][ T655] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.144517][ T5924] tipc: New replicast peer: 172.20.20.170 [ 94.176419][ T5924] tipc: Enabled bearer , priority 10 [ 94.531186][ T5897] infiniband syz0: set active [ 94.570811][ T5897] infiniband syz0: added veth0 [ 94.681980][ T5897] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 94.711221][ T5897] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 94.797402][ T5945] netlink: 4 bytes leftover after parsing attributes in process `syz.3.34'. [ 94.817536][ T5897] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 94.994533][ T5897] RDS/IB: syz0: added [ 95.015023][ T5897] smc: adding ib device syz0 with port count 1 [ 95.039225][ T5897] smc: ib device syz0 port 1 has no pnetid [ 95.065793][ T5950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.35'. [ 95.101207][ T5950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.35'. [ 95.250098][ T5963] netlink: 20 bytes leftover after parsing attributes in process `syz.0.41'. [ 95.307328][ T5964] netlink: 20 bytes leftover after parsing attributes in process `syz.0.41'. [ 95.354540][ T5753] tipc: Node number set to 3145728 [ 95.361811][ T5963] netlink: 20 bytes leftover after parsing attributes in process `syz.0.41'. [ 95.404206][ T5963] netlink: 20 bytes leftover after parsing attributes in process `syz.0.41'. [ 95.674478][ T5974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.46'. [ 95.735172][ T5974] openvswitch: netlink: Flow actions attr not present in new flow. [ 96.078746][ T5989] netlink: 120 bytes leftover after parsing attributes in process `syz.1.52'. [ 96.337142][ T5995] syzkaller0: entered promiscuous mode [ 96.350635][ T5995] syzkaller0: entered allmulticast mode [ 96.356825][ T5998] netlink: 16 bytes leftover after parsing attributes in process `syz.3.56'. [ 97.060708][ T5978] NFSD: Unable to initialize client recovery tracking! (-110) [ 97.081084][ T5978] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 97.100061][ T6020] openvswitch: netlink: Flow actions attr not present in new flow. [ 97.106557][ T5978] NFSD: starting 90-second grace period (net f0000666) [ 97.487590][ T6031] syzkaller0: entered promiscuous mode [ 97.512761][ T6031] syzkaller0: entered allmulticast mode [ 99.041060][ T6048] NFSD: Unable to initialize client recovery tracking! (-110) [ 99.061007][ T6048] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 99.086548][ T6048] NFSD: starting 90-second grace period (net f0000666) [ 99.570018][ T6092] FAULT_INJECTION: forcing a failure. [ 99.570018][ T6092] name failslab, interval 1, probability 100, space 0, times 1 [ 99.582951][ C1] FAULT_INJECTION: forcing a failure. [ 99.582951][ C1] name failslab, interval 1, probability 100, space 0, times 1 [ 99.583066][ C1] CPU: 1 UID: 0 PID: 6092 Comm: syz.0.94 Not tainted syzkaller #0 PREEMPT(full) [ 99.583093][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 99.583107][ C1] Call Trace: [ 99.583116][ C1] [ 99.583125][ C1] dump_stack_lvl+0xe8/0x150 [ 99.583166][ C1] should_fail_ex+0x40c/0x560 [ 99.583204][ C1] should_failslab+0xa8/0x100 [ 99.583245][ C1] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 99.583276][ C1] ? local_lock_release+0x9c/0x160 [ 99.583303][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 99.583325][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 99.583356][ C1] __alloc_skb+0x1d7/0x7a0 [ 99.583389][ C1] wg_packet_send_keepalive+0x65/0x2c0 [ 99.583422][ C1] call_timer_fn+0x192/0x5e0 [ 99.583446][ C1] ? __pfx_wg_expired_send_persistent_keepalive+0x10/0x10 [ 99.583487][ C1] ? call_timer_fn+0xd4/0x5e0 [ 99.583508][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 99.583542][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 99.583566][ C1] ? __pfx_wg_expired_send_persistent_keepalive+0x10/0x10 [ 99.583610][ C1] __run_timer_base+0x652/0x8b0 [ 99.583646][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 99.583691][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 99.583733][ C1] ? ktime_get+0x1f5/0x220 [ 99.583767][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 99.583794][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 99.583831][ C1] run_timer_softirq+0xb7/0x170 [ 99.583868][ C1] handle_softirqs+0x225/0x840 [ 99.583902][ C1] ? __irq_exit_rcu+0xca/0x220 [ 99.583941][ C1] __irq_exit_rcu+0xca/0x220 [ 99.583972][ C1] irq_exit_rcu+0x9/0x30 [ 99.584000][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 99.584026][ C1] [ 99.584034][ C1] [ 99.584044][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 99.584071][ C1] RIP: 0010:console_flush_all+0x7d2/0xaf0 [ 99.584100][ C1] Code: ff ff e8 31 2f 21 00 90 0f 0b 90 e9 9c fc ff ff e8 23 2f 21 00 e8 3e 10 2b 0a 48 85 db 74 c0 e8 14 2f 21 00 fb 48 8b 5c 24 18 <48> 8b 44 24 28 42 80 3c 20 00 4d 8d 77 58 74 08 4c 89 f7 e8 56 c3 [ 99.584119][ C1] RSP: 0018:ffffc90004f3ee80 EFLAGS: 00000283 [ 99.584140][ C1] RAX: ffffffff81a5d4ec RBX: ffffc90004f3efe0 RCX: 0000000000080000 [ 99.584158][ C1] RDX: ffffc9000dd69000 RSI: 0000000000005c3c RDI: 0000000000005c3d [ 99.584174][ C1] RBP: ffffc90004f3ef90 R08: ffffffff90579137 R09: 1ffffffff20af226 [ 99.584192][ C1] R10: dffffc0000000000 R11: fffffbfff20af227 R12: dffffc0000000000 [ 99.584209][ C1] R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff8f46f6a0 [ 99.584234][ C1] ? console_flush_all+0x7cc/0xaf0 [ 99.584269][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 99.584301][ C1] ? console_flush_all+0x123/0xaf0 [ 99.584335][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 99.584368][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 99.584401][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 99.584438][ C1] console_unlock+0xd1/0x1c0 [ 99.584467][ C1] ? __pfx_console_unlock+0x10/0x10 [ 99.584490][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 99.584520][ C1] ? _printk+0xdd/0x130 [ 99.584548][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 99.584581][ C1] vprintk_emit+0x485/0x560 [ 99.584610][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 99.584646][ C1] _printk+0xdd/0x130 [ 99.584673][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 99.584706][ C1] ? __pfx__printk+0x10/0x10 [ 99.584735][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 99.584764][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 99.584793][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 99.584816][ T136] FAULT_INJECTION: forcing a failure. [ 99.584816][ T136] name failslab, interval 1, probability 100, space 0, times 1 [ 99.584828][ C1] should_fail_ex+0x3ed/0x560 [ 99.584864][ C1] should_failslab+0xa8/0x100 [ 99.584901][ C1] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 99.584929][ C1] ? local_lock_release+0x9c/0x160 [ 99.584953][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 99.584972][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 99.585001][ C1] __alloc_skb+0x1d7/0x7a0 [ 99.585027][ C1] alloc_skb_with_frags+0xc6/0x760 [ 99.585055][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 99.585081][ C1] ? __lock_acquire+0x683/0x2cf0 [ 99.585117][ C1] sock_alloc_send_pskb+0x878/0x990 [ 99.585152][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 99.585189][ C1] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 99.585218][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 99.585244][ C1] ? __lock_acquire+0x683/0x2cf0 [ 99.585290][ C1] __ip_append_data+0x29ea/0x3cf0 [ 99.585322][ C1] ? rcu_is_watching+0x15/0xb0 [ 99.585343][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 99.585380][ C1] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 99.585415][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 99.585449][ C1] ? __pfx___ip_append_data+0x10/0x10 [ 99.585470][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 99.585496][ C1] ? ipv4_mtu+0x23/0x670 [ 99.585529][ C1] ? __pfx_ipv4_mtu+0x10/0x10 [ 99.585560][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 99.585585][ C1] ? ip_setup_cork+0x4ed/0x8f0 [ 99.585610][ C1] ip_make_skb+0x22e/0x440 [ 99.585635][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 99.585662][ C1] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 99.585686][ C1] ? __pfx_ip_make_skb+0x10/0x10 [ 99.585718][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 99.585752][ C1] udp_sendmsg+0x1937/0x2140 [ 99.585793][ C1] ? __lock_acquire+0x683/0x2cf0 [ 99.585826][ C1] ? __pfx_udp_sendmsg+0x10/0x10 [ 99.585860][ C1] ? ip4_datagram_release_cb+0x976/0xbe0 [ 99.585901][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 99.585926][ C1] ? reacquire_held_locks+0x104/0x190 [ 99.585953][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 99.585987][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 99.586014][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 99.586039][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 99.586063][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 99.586090][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 99.586115][ C1] ? inet_sendmsg+0x23e/0x320 [ 99.586139][ C1] ? __pfx_inet_sendmsg+0x10/0x10 [ 99.586160][ C1] sock_sendmsg_nosec+0x10e/0x180 [ 99.586195][ C1] __sys_sendto+0x408/0x5a0 [ 99.586224][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 99.586273][ C1] ? rcu_is_watching+0x15/0xb0 [ 99.586294][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 99.586326][ C1] __x64_sys_sendto+0xde/0x100 [ 99.586349][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.586374][ C1] do_syscall_64+0x174/0x580 [ 99.586402][ C1] ? trace_irq_disable+0x3b/0x140 [ 99.586438][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.586460][ C1] RIP: 0033:0x7ff98959de99 [ 99.586479][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.586495][ C1] RSP: 002b:00007ff9877f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 99.586516][ C1] RAX: ffffffffffffffda RBX: 00007ff989825fa0 RCX: 00007ff98959de99 [ 99.586532][ C1] RDX: 0000000000000010 RSI: 0000200000000700 RDI: 0000000000000008 [ 99.586546][ C1] RBP: 00007ff989633eaf R08: 0000200000000750 R09: 0000000000000010 [ 99.586560][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.586573][ C1] R13: 00007ff989826038 R14: 00007ff989825fa0 R15: 00007ffe4235dbf8 [ 99.586605][ C1] [ 99.586618][ T136] CPU: 0 UID: 0 PID: 136 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 99.586643][ T136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 99.586658][ T136] Workqueue: events_unbound nsim_dev_trap_report_work [ 99.586689][ T136] Call Trace: [ 99.586698][ T136] [ 99.586707][ T136] dump_stack_lvl+0xe8/0x150 [ 99.586744][ T136] should_fail_ex+0x40c/0x560 [ 99.586780][ T136] should_failslab+0xa8/0x100 [ 99.586819][ T136] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 99.586847][ T136] ? local_lock_release+0x9c/0x160 [ 99.586867][ T136] ? __alloc_skb+0x1d7/0x7a0 [ 99.586893][ T136] ? __alloc_skb+0x1d7/0x7a0 [ 99.586924][ T136] __alloc_skb+0x1d7/0x7a0 [ 99.586953][ T136] nsim_dev_trap_report_work+0x25f/0xb40 [ 99.587001][ T136] ? process_scheduled_works+0xa20/0x14e0 [ 99.587035][ T136] process_scheduled_works+0xa8e/0x14e0 [ 99.587097][ T136] ? __pfx_process_scheduled_works+0x10/0x10 [ 99.587132][ T136] ? srso_alias_return_thunk+0x5/0xfbef5 [ 99.587161][ T136] ? assign_work+0x3cf/0x5d0 [ 99.587196][ T136] worker_thread+0xa47/0xfb0 [ 99.587257][ T136] kthread+0x388/0x470 [ 99.587295][ T136] ? __pfx_worker_thread+0x10/0x10 [ 99.587322][ T136] ? __pfx_kthread+0x10/0x10 [ 99.587360][ T136] ret_from_fork+0x514/0xb70 [ 99.587401][ T136] ? __pfx_ret_from_fork+0x10/0x10 [ 99.587436][ T136] ? srso_alias_return_thunk+0x5/0xfbef5 [ 99.587463][ T136] ? __switch_to+0xc89/0x1420 [ 99.587499][ T136] ? __pfx_kthread+0x10/0x10 [ 99.587536][ T136] ret_from_fork_asm+0x1a/0x30 [ 99.587578][ T136] [ 99.979042][ T6102] tipc: Enabling of bearer rejected, failed to enable media [ 100.088539][ T6092] CPU: 1 UID: 0 PID: 6092 Comm: syz.0.94 Not tainted syzkaller #0 PREEMPT(full) [ 100.088570][ T6092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 100.088584][ T6092] Call Trace: [ 100.088593][ T6092] [ 100.088603][ T6092] dump_stack_lvl+0xe8/0x150 [ 100.088645][ T6092] should_fail_ex+0x40c/0x560 [ 100.088684][ T6092] should_failslab+0xa8/0x100 [ 100.088725][ T6092] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 100.088757][ T6092] ? local_lock_release+0x9c/0x160 [ 100.088784][ T6092] ? __alloc_skb+0x1d7/0x7a0 [ 100.088806][ T6092] ? __alloc_skb+0x1d7/0x7a0 [ 100.088837][ T6092] __alloc_skb+0x1d7/0x7a0 [ 100.088871][ T6092] alloc_skb_with_frags+0xc6/0x760 [ 100.088903][ T6092] ? srso_alias_return_thunk+0x5/0xfbef5 [ 100.088932][ T6092] ? __lock_acquire+0x683/0x2cf0 [ 100.088974][ T6092] sock_alloc_send_pskb+0x878/0x990 [ 100.089013][ T6092] ? srso_alias_return_thunk+0x5/0xfbef5 [ 100.089054][ T6092] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 100.089087][ T6092] ? srso_alias_return_thunk+0x5/0xfbef5 [ 100.089116][ T6092] ? __lock_acquire+0x683/0x2cf0 [ 100.089165][ T6092] __ip_append_data+0x29ea/0x3cf0 [ 100.089200][ T6092] ? rcu_is_watching+0x15/0xb0 [ 100.089225][ T6092] ? srso_alias_return_thunk+0x5/0xfbef5 [ 100.089261][ T6092] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 100.089301][ T6092] ? srso_alias_return_thunk+0x5/0xfbef5 [ 100.089339][ T6092] ? __pfx___ip_append_data+0x10/0x10 [ 100.089362][ T6092] ? srso_alias_return_thunk+0x5/0xfbef5 [ 100.089395][ T6092] ? ipv4_mtu+0x23/0x670 [ 100.089432][ T6092] ? __pfx_ipv4_mtu+0x10/0x10 [ 100.089467][ T6092] ? srso_alias_return_thunk+0x5/0xfbef5 [ 100.089495][ T6092] ? ip_setup_cork+0x4ed/0x8f0 [ 100.089523][ T6092] ip_make_skb+0x22e/0x440 [ 100.089552][ T6092] ? srso_alias_return_thunk+0x5/0xfbef5 [ 100.089582][ T6092] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 100.089609][ T6092] ? __pfx_ip_make_skb+0x10/0x10 [ 100.089645][ T6092] ? srso_alias_return_thunk+0x5/0xfbef5 [ 100.089683][ T6092] udp_sendmsg+0x1937/0x2140 [ 100.089729][ T6092] ? __lock_acquire+0x683/0x2cf0 [ 100.089767][ T6092] ? __pfx_udp_sendmsg+0x10/0x10 [ 100.089805][ T6092] ? ip4_datagram_release_cb+0x976/0xbe0 [ 100.089850][ T6092] ? srso_alias_return_thunk+0x5/0xfbef5 [ 100.089878][ T6092] ? reacquire_held_locks+0x104/0x190 [ 100.089909][ T6092] ? srso_alias_return_thunk+0x5/0xfbef5 [ 100.089947][ T6092] ? __local_bh_enable_ip+0xd0/0x130 [ 100.089977][ T6092] ? srso_alias_return_thunk+0x5/0xfbef5 [ 100.090005][ T6092] ? lockdep_hardirqs_on+0x7a/0x110 [ 100.090033][ T6092] ? srso_alias_return_thunk+0x5/0xfbef5 [ 100.090063][ T6092] ? srso_alias_return_thunk+0x5/0xfbef5 [ 100.090091][ T6092] ? inet_sendmsg+0x23e/0x320 [ 100.090119][ T6092] ? __pfx_inet_sendmsg+0x10/0x10 [ 100.090142][ T6092] sock_sendmsg_nosec+0x10e/0x180 [ 100.090181][ T6092] __sys_sendto+0x408/0x5a0 [ 100.090214][ T6092] ? __pfx___sys_sendto+0x10/0x10 [ 100.090269][ T6092] ? rcu_is_watching+0x15/0xb0 [ 100.090293][ T6092] ? srso_alias_return_thunk+0x5/0xfbef5 [ 100.090328][ T6092] __x64_sys_sendto+0xde/0x100 [ 100.090355][ T6092] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.090386][ T6092] do_syscall_64+0x174/0x580 [ 100.090414][ T6092] ? trace_irq_disable+0x3b/0x140 [ 100.090454][ T6092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.090479][ T6092] RIP: 0033:0x7ff98959de99 [ 100.090501][ T6092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.090521][ T6092] RSP: 002b:00007ff9877f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 100.090546][ T6092] RAX: ffffffffffffffda RBX: 00007ff989825fa0 RCX: 00007ff98959de99 [ 100.090564][ T6092] RDX: 0000000000000010 RSI: 0000200000000700 RDI: 0000000000000008 [ 100.090579][ T6092] RBP: 00007ff989633eaf R08: 0000200000000750 R09: 0000000000000010 [ 100.090596][ T6092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.090610][ T6092] R13: 00007ff989826038 R14: 00007ff989825fa0 R15: 00007ffe4235dbf8 [ 100.090648][ T6092] [ 100.935205][ T6109] rdma_rxe: rxe_newlink: failed to add veth0 [ 101.088452][ T6122] __nla_validate_parse: 7 callbacks suppressed [ 101.088472][ T6122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.104'. [ 101.723107][ T5753] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 101.756365][ T6151] netlink: 44 bytes leftover after parsing attributes in process `syz.2.115'. [ 101.768390][ T6151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.115'. [ 101.904131][ T6155] tipc: Started in network mode [ 101.904169][ T5753] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 101.913789][ T6155] tipc: Node identity 7f000001, cluster identity 1 [ 101.920595][ T5753] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.928740][ T6155] tipc: New replicast peer: 127.0.0.1 [ 101.934372][ T5753] usb 6-1: Product: syz [ 101.939602][ T6155] tipc: Enabled bearer , priority 10 [ 101.943625][ T5753] usb 6-1: Manufacturer: syz [ 101.954447][ T5753] usb 6-1: SerialNumber: syz [ 102.261219][ T6165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.121'. [ 102.549482][ T6177] netlink: 32 bytes leftover after parsing attributes in process `syz.0.124'. [ 102.639690][ T6166] syzkaller0: entered promiscuous mode [ 102.652032][ T6166] syzkaller0: entered allmulticast mode [ 102.666177][ T6179] netlink: 'syz.3.123': attribute type 6 has an invalid length. [ 102.700766][ T6177] tipc: Started in network mode [ 102.708596][ T5753] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 102.721218][ T6177] tipc: Node identity aaaaaaaaaa18, cluster identity 4711 [ 102.735726][ T5753] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 102.751814][ T5753] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 102.761537][ T6177] tipc: Enabled bearer , priority 10 [ 102.773277][ T5753] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 102.801451][ T5753] usb 6-1: USB disconnect, device number 2 [ 103.175536][ T6197] svc: failed to register lockdv1 RPC service (errno 111). [ 103.189400][ T6197] lockd_up: makesock failed, error=-111 [ 103.441791][ T6197] svc: failed to register nfsdv3 RPC service (errno 111). [ 103.462079][ T6197] svc: failed to register nfsaclv3 RPC service (errno 111). [ 103.469740][ T6197] failed to unregister udp with rpcbind [ 103.481500][ T6197] svc: failed to register nfsdv3 RPC service (errno 97). [ 103.488731][ T6197] svc: failed to register nfsaclv3 RPC service (errno 97). [ 103.503575][ T6197] failed to unregister udp with rpcbind [ 104.198759][ T5760] tipc: Node number set to 2130706433 [ 104.204431][ T6195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.129'. [ 104.213620][ T6195] netlink: 16 bytes leftover after parsing attributes in process `syz.0.129'. [ 104.223000][ T6196] netlink: 28 bytes leftover after parsing attributes in process `syz.0.129'. [ 104.232061][ T6196] tc_dump_action: action bad kind [ 104.237649][ T5782] tipc: Node number set to 11709098 [ 104.388302][ T6217] netlink: 8 bytes leftover after parsing attributes in process `syz.4.137'. [ 104.543139][ C0] tipc: RX(0010000000000000002): key[1] is activated [ 104.629475][ T6226] netlink: 68 bytes leftover after parsing attributes in process `syz.5.142'. [ 104.875247][ T30] audit: type=1804 audit(1785178072.362:2): pid=6235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.144" name="/newroot/20/nfsd/portlist" dev="nfsd" ino=13 res=1 errno=0 [ 105.039832][ T6243] rdma_rxe: rxe_newlink: failed to add lo [ 105.264764][ T6248] syzkaller0: entered promiscuous mode [ 105.290652][ T6248] syzkaller0: entered allmulticast mode [ 106.192980][ T6291] syzkaller0: entered promiscuous mode [ 106.201492][ T6291] syzkaller0: entered allmulticast mode [ 106.587731][ T6307] __nla_validate_parse: 4 callbacks suppressed [ 106.587747][ T6307] netlink: 16 bytes leftover after parsing attributes in process `syz.5.175'. [ 106.603249][ T6307] netlink: 4 bytes leftover after parsing attributes in process `syz.5.175'. [ 106.767292][ T6311] rdma_rxe: rxe_newlink: failed to add lo [ 106.896805][ T6316] smc: removing ib device syz0 [ 106.946935][ T6316] smbdirect: ib_dev[syz0] removed [ 107.079924][ T6320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.181'. [ 107.286269][ T6324] syzkaller0: entered promiscuous mode [ 107.294982][ T6324] syzkaller0: entered allmulticast mode [ 107.330546][ T6292] NFSD: Unable to initialize client recovery tracking! (-110) [ 107.354514][ T6292] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 107.369674][ T6292] NFSD: starting 90-second grace period (net f00004d4) [ 107.505176][ T3344] rpcbind: server 127.0.0.1 not responding, timed out [ 108.570954][ T6301] NFSD: Unable to initialize client recovery tracking! (-110) [ 108.583266][ T6301] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 108.594797][ T6301] NFSD: starting 90-second grace period (net f00004d9) [ 109.204752][ T6356] tipc: Started in network mode [ 109.209773][ T6356] tipc: Node identity 7f000001, cluster identity 4711 [ 109.218003][ T6356] tipc: New replicast peer: 127.0.0.1 [ 109.226066][ T6356] tipc: Enabled bearer , priority 10 [ 109.237928][ T6355] netlink: 8 bytes leftover after parsing attributes in process `syz.5.195'. [ 109.266026][ T6358] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 109.460680][ T6364] syzkaller0: entered promiscuous mode [ 109.466188][ T6364] syzkaller0: entered allmulticast mode [ 110.155625][ T6380] lo speed is unknown, defaulting to 1000 [ 110.163879][ T6380] lo speed is unknown, defaulting to 1000 [ 110.171566][ T6380] lo speed is unknown, defaulting to 1000 [ 110.210571][ T6330] NFSD: Unable to initialize client recovery tracking! (-110) [ 110.218540][ T6381] smc: net device lo applied user defined pnetid SYZ0 [ 110.225665][ T6330] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 110.230776][ T5626] tipc: Node number set to 2130706433 [ 110.242842][ T6330] NFSD: starting 90-second grace period (net f0000666) [ 110.526357][ T6380] infiniband syz0: set active [ 110.531767][ T5639] lo speed is unknown, defaulting to 1000 [ 110.557772][ T6380] infiniband syz0: added lo [ 110.631802][ T6380] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 110.650641][ T6380] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 110.676214][ T6380] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 110.843268][ T6380] RDS/IB: syz0: added [ 110.868301][ T6380] smc: adding ib device syz0 with port count 1 [ 110.900621][ T6380] smc: ib device syz0 port 1 has no pnetid [ 110.928367][ T5626] lo speed is unknown, defaulting to 1000 [ 110.956040][ T6380] lo speed is unknown, defaulting to 1000 [ 110.964723][ T6400] netlink: 16 bytes leftover after parsing attributes in process `syz.1.207'. [ 111.044692][ T6403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.210'. [ 111.085412][ T6406] netlink: 32 bytes leftover after parsing attributes in process `syz.5.211'. [ 111.442586][ T6414] NFSD: Failed to start, no listeners configured. [ 112.079062][ T6380] lo speed is unknown, defaulting to 1000 [ 112.088344][ T6445] netlink: 8 bytes leftover after parsing attributes in process `syz.5.225'. [ 112.702252][ T6380] lo speed is unknown, defaulting to 1000 [ 113.018665][ T6380] lo speed is unknown, defaulting to 1000 [ 113.218223][ T6380] lo speed is unknown, defaulting to 1000 [ 113.345192][ T6448] NFSD: Unable to initialize client recovery tracking! (-110) [ 113.359627][ T6448] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 113.371911][ T6448] NFSD: starting 90-second grace period (net f00005e1) [ 113.464399][ T6380] lo speed is unknown, defaulting to 1000 [ 113.660974][ T6398] lo speed is unknown, defaulting to 1000 [ 113.668384][ T6477] rdma_rxe: rxe_newlink: failed to add lo [ 113.687779][ T6398] lo speed is unknown, defaulting to 1000 [ 113.701472][ T6398] lo speed is unknown, defaulting to 1000 [ 113.883164][ T6483] netlink: 8 bytes leftover after parsing attributes in process `syz.5.238'. [ 114.612547][ T6512] openvswitch: netlink: Flow actions attr not present in new flow. [ 114.626941][ T6398] infiniband syz1: set active [ 114.644744][ T6398] infiniband syz1: added lo [ 114.662163][ T6398] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 114.673127][ T6398] infiniband syz1: Couldn't open port 1 [ 114.698429][ T5760] lo speed is unknown, defaulting to 1000 [ 114.715678][ T6398] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 114.761246][ T6398] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 114.819134][ T6398] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 114.968379][ T6398] RDS/IB: syz1: added [ 114.999125][ T6398] smc: adding ib device syz1 with port count 1 [ 115.026989][ T6398] smc: ib device syz1 port 1 has no pnetid [ 115.054425][ T5760] lo speed is unknown, defaulting to 1000 [ 115.083669][ T6398] lo speed is unknown, defaulting to 1000 [ 115.811906][ T6561] netlink: 16 bytes leftover after parsing attributes in process `syz.4.267'. [ 115.984929][ T6398] lo speed is unknown, defaulting to 1000 [ 116.011503][ T6568] syzkaller0: entered promiscuous mode [ 116.028517][ T6568] syzkaller0: entered allmulticast mode [ 116.327463][ T6582] netlink: 12 bytes leftover after parsing attributes in process `syz.2.276'. [ 116.571991][ T6589] lo speed is unknown, defaulting to 1000 [ 116.808542][ T6398] lo speed is unknown, defaulting to 1000 [ 117.019030][ T6602] netlink: 4 bytes leftover after parsing attributes in process `syz.3.284'. [ 117.265906][ T5626] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 117.280038][ T5626] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 117.379671][ T6398] lo speed is unknown, defaulting to 1000 [ 117.451727][ T6581] NFSD: Unable to initialize client recovery tracking! (-110) [ 117.459574][ T6581] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 117.468892][ T6581] NFSD: starting 90-second grace period (net f00004d9) [ 117.542544][ T5782] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 117.648977][ T6589] lo speed is unknown, defaulting to 1000 [ 117.953172][ T6398] lo speed is unknown, defaulting to 1000 [ 118.055730][ T6606] ceph: No mds server is up or the cluster is laggy [ 118.082152][ T5782] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 118.152922][ T6625] syzkaller0: entered promiscuous mode [ 118.172700][ T6625] syzkaller0: entered allmulticast mode [ 118.471928][ T6620] netlink: 12 bytes leftover after parsing attributes in process `syz.4.289'. [ 118.799007][ T6398] lo speed is unknown, defaulting to 1000 [ 119.806370][ T5760] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 119.814373][ T6641] NFSD: Unable to initialize client recovery tracking! (-110) [ 119.841736][ T6641] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 119.866755][ T6641] NFSD: starting 90-second grace period (net f00003cb) [ 119.980340][ T6670] syzkaller0: entered promiscuous mode [ 119.990677][ T6670] syzkaller0: entered allmulticast mode [ 120.008982][ T5760] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 120.032371][ T5760] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 120.043698][ T5760] usb 1-1: SerialNumber: syz [ 120.198497][ T6678] FAULT_INJECTION: forcing a failure. [ 120.198497][ T6678] name fail_futex, interval 1, probability 0, space 0, times 1 [ 120.219672][ T6678] CPU: 0 UID: 0 PID: 6678 Comm: syz.4.308 Not tainted syzkaller #0 PREEMPT(full) [ 120.219699][ T6678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 120.219712][ T6678] Call Trace: [ 120.219720][ T6678] [ 120.219729][ T6678] dump_stack_lvl+0xe8/0x150 [ 120.219766][ T6678] should_fail_ex+0x40c/0x560 [ 120.219800][ T6678] get_futex_key+0x1b3/0x1580 [ 120.219839][ T6678] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.219869][ T6678] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.219907][ T6678] ? __pfx_get_futex_key+0x10/0x10 [ 120.219943][ T6678] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.219972][ T6678] ? debug_object_free+0x29c/0x340 [ 120.220020][ T6678] futex_wake+0x119/0x5f0 [ 120.220053][ T6678] ? __pfx_futex_wait+0x10/0x10 [ 120.220083][ T6678] ? __pfx_futex_wake+0x10/0x10 [ 120.220116][ T6678] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 120.220153][ T6678] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.220189][ T6678] do_futex+0x458/0x4e0 [ 120.220222][ T6678] ? __pfx_do_futex+0x10/0x10 [ 120.220246][ T6678] ? lockdep_hardirqs_on+0x7a/0x110 [ 120.220274][ T6678] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.220311][ T6678] __se_sys_futex+0x3a8/0x450 [ 120.220344][ T6678] ? __pfx___se_sys_futex+0x10/0x10 [ 120.220368][ T6678] ? rcu_is_watching+0x15/0xb0 [ 120.220399][ T6678] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.220427][ T6678] ? __x64_sys_futex+0x21/0xf0 [ 120.220452][ T6678] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.220479][ T6678] do_syscall_64+0x174/0x580 [ 120.220507][ T6678] ? trace_irq_disable+0x3b/0x140 [ 120.220546][ T6678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.220571][ T6678] RIP: 0033:0x7f575779de99 [ 120.220592][ T6678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.220611][ T6678] RSP: 002b:00007ffd0a033b68 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 120.220636][ T6678] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f575779de99 [ 120.220653][ T6678] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5757a25fa8 [ 120.220669][ T6678] RBP: 0000000000001ec6 R08: 0000000000000004 R09: 0000000000000000 [ 120.220683][ T6678] R10: 00007f5757a25fa0 R11: 0000000000000246 R12: 0000000000000000 [ 120.220697][ T6678] R13: 00007f5757a25fac R14: 00007f5757a25fa8 R15: 00007f5757a25fa0 [ 120.220734][ T6678] [ 120.463980][ T6678] FAULT_INJECTION: forcing a failure. [ 120.463980][ T6678] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 120.493994][ T6678] CPU: 1 UID: 0 PID: 6678 Comm: syz.4.308 Not tainted syzkaller #0 PREEMPT(full) [ 120.494026][ T6678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 120.494040][ T6678] Call Trace: [ 120.494050][ T6678] [ 120.494061][ T6678] dump_stack_lvl+0xe8/0x150 [ 120.494098][ T6678] should_fail_ex+0x40c/0x560 [ 120.494134][ T6678] _copy_from_user+0x2d/0xb0 [ 120.494156][ T6678] get_timespec64+0x96/0x1b0 [ 120.494191][ T6678] ? __pfx_get_timespec64+0x10/0x10 [ 120.494225][ T6678] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.494259][ T6678] __se_sys_futex+0x19a/0x450 [ 120.494287][ T6678] ? __pfx___se_sys_futex+0x10/0x10 [ 120.494308][ T6678] ? rcu_is_watching+0x15/0xb0 [ 120.494335][ T6678] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.494359][ T6678] ? __x64_sys_futex+0x21/0xf0 [ 120.494386][ T6678] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.494410][ T6678] do_syscall_64+0x174/0x580 [ 120.494435][ T6678] ? trace_irq_disable+0x3b/0x140 [ 120.494470][ T6678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.494491][ T6678] RIP: 0033:0x7f575779de99 [ 120.494509][ T6678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.494526][ T6678] RSP: 002b:00007ffd0a033b68 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 120.494547][ T6678] RAX: ffffffffffffffda RBX: 000000000001d67b RCX: 00007f575779de99 [ 120.494562][ T6678] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5757a25fac [ 120.494575][ T6678] RBP: 0000000000000032 R08: 3fffffffffffffff R09: 0000000000000000 [ 120.494588][ T6678] R10: 00007ffd0a033c70 R11: 0000000000000246 R12: 00007ffd0a033c90 [ 120.494602][ T6678] R13: 00007f5757a25fac R14: 000000000001d6ad R15: 00007ffd0a033c70 [ 120.494634][ T6678] [ 120.494769][ T6678] FAULT_INJECTION: forcing a failure. [ 120.494769][ T6678] name fail_futex, interval 1, probability 0, space 0, times 0 [ 120.700406][ T6678] CPU: 0 UID: 0 PID: 6678 Comm: syz.4.308 Not tainted syzkaller #0 PREEMPT(full) [ 120.700434][ T6678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 120.700446][ T6678] Call Trace: [ 120.700455][ T6678] [ 120.700463][ T6678] dump_stack_lvl+0xe8/0x150 [ 120.700501][ T6678] should_fail_ex+0x40c/0x560 [ 120.700535][ T6678] get_futex_key+0x1b3/0x1580 [ 120.700572][ T6678] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.700599][ T6678] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.700629][ T6678] ? __pfx_get_futex_key+0x10/0x10 [ 120.700667][ T6678] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.700694][ T6678] ? debug_object_free+0x29c/0x340 [ 120.700740][ T6678] futex_wake+0x119/0x5f0 [ 120.700772][ T6678] ? __pfx_futex_wait+0x10/0x10 [ 120.700801][ T6678] ? __pfx_futex_wake+0x10/0x10 [ 120.700832][ T6678] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 120.700869][ T6678] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.700908][ T6678] do_futex+0x458/0x4e0 [ 120.700935][ T6678] ? __pfx_do_futex+0x10/0x10 [ 120.700957][ T6678] ? lockdep_hardirqs_on+0x7a/0x110 [ 120.700983][ T6678] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.701014][ T6678] __se_sys_futex+0x3a8/0x450 [ 120.701043][ T6678] ? __pfx___se_sys_futex+0x10/0x10 [ 120.701065][ T6678] ? rcu_is_watching+0x15/0xb0 [ 120.701092][ T6678] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.701118][ T6678] ? __x64_sys_futex+0x21/0xf0 [ 120.701140][ T6678] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.701163][ T6678] do_syscall_64+0x174/0x580 [ 120.701187][ T6678] ? trace_irq_disable+0x3b/0x140 [ 120.701222][ T6678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.701245][ T6678] RIP: 0033:0x7f575779de99 [ 120.701265][ T6678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.701282][ T6678] RSP: 002b:00007ffd0a033b68 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 120.701304][ T6678] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f575779de99 [ 120.701330][ T6678] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5757a25fa8 [ 120.701343][ T6678] RBP: 0000000000000085 R08: 0000000000000020 R09: 0000000000000000 [ 120.701356][ T6678] R10: 00007f5757a25fa0 R11: 0000000000000246 R12: 0000000000000000 [ 120.701368][ T6678] R13: 00007f5757a25fac R14: 00007f5757a25fa8 R15: 00007f5757a25fa0 [ 120.701402][ T6678] [ 120.997544][ T5760] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 121.015416][ T6678] FAULT_INJECTION: forcing a failure. [ 121.015416][ T6678] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.040507][ T6678] CPU: 1 UID: 0 PID: 6678 Comm: syz.4.308 Not tainted syzkaller #0 PREEMPT(full) [ 121.040537][ T6678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 121.040555][ T6678] Call Trace: [ 121.040565][ T6678] [ 121.040575][ T6678] dump_stack_lvl+0xe8/0x150 [ 121.040623][ T6678] should_fail_ex+0x40c/0x560 [ 121.040662][ T6678] _copy_from_user+0x2d/0xb0 [ 121.040687][ T6678] get_timespec64+0x96/0x1b0 [ 121.040726][ T6678] ? __pfx_get_timespec64+0x10/0x10 [ 121.040776][ T6678] __se_sys_clock_nanosleep+0x1ce/0x3b0 [ 121.040810][ T6678] ? __pfx___se_sys_clock_nanosleep+0x10/0x10 [ 121.040847][ T6678] ? srso_alias_return_thunk+0x5/0xfbef5 [ 121.040878][ T6678] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.040904][ T6678] do_syscall_64+0x174/0x580 [ 121.040933][ T6678] ? trace_irq_disable+0x3b/0x140 [ 121.040972][ T6678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.040997][ T6678] RIP: 0033:0x7f575775e6ce [ 121.041018][ T6678] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 121.041037][ T6678] RSP: 002b:00007ffd0a033ae8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 121.041062][ T6678] RAX: ffffffffffffffda RBX: 000055556fbeb500 RCX: 00007f575775e6ce [ 121.041079][ T6678] RDX: 00007ffd0a033b40 RSI: 0000000000000000 RDI: 0000000000000000 [ 121.041094][ T6678] RBP: 00007f5757a27da0 R08: 0000000000000000 R09: 0000000000000000 [ 121.041109][ T6678] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000001d8fe [ 121.041124][ T6678] R13: 00007f5757a2609c R14: 000000000001d8cc R15: 00007f5757a26090 [ 121.041162][ T6678] [ 121.225891][ T6691] netlink: 4 bytes leftover after parsing attributes in process `syz.5.311'. [ 121.294673][ T5760] usb 1-1: USB disconnect, device number 2 [ 121.345822][ T6694] syz.4.312 uses obsolete (PF_INET,SOCK_PACKET) [ 122.107776][ T6681] tipc: Enabling of bearer rejected, already enabled [ 122.340216][ T6703] ICMPv6: NA: aa:aa:aa:aa:aa:aa advertised our address fe80::aa on syz_tun! [ 122.729708][ T6722] rdma_rxe: rxe_newlink: failed to add veth0 [ 123.215661][ T6741] NFSD: Failed to start, no listeners configured. [ 123.473170][ T6754] bridge0: port 3(syz_tun) entered blocking state [ 123.487474][ T6754] bridge0: port 3(syz_tun) entered disabled state [ 123.508156][ T6754] syz_tun: entered allmulticast mode [ 123.533444][ T6754] syz_tun: entered promiscuous mode [ 123.558504][ T6754] bridge0: port 3(syz_tun) entered blocking state [ 123.565438][ T6754] bridge0: port 3(syz_tun) entered forwarding state [ 123.733339][ T6754] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 123.800190][ T6759] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 124.087608][ T6778] rdma_rxe: rxe_newlink: failed to add veth0 [ 126.111855][ T6778] rdma_rxe: rxe_newlink: failed to add lo [ 126.160512][ T36] rpcbind: server 127.0.0.1 not responding, timed out [ 229.010374][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 229.017340][ C0] rcu: 1-...0: (8 ticks this GP) idle=495c/1/0x4000000000000000 softirq=21602/21603 fqs=11 [ 229.028070][ C0] rcu: hardirqs softirqs csw/system [ 229.034466][ C0] rcu: number: 0 0 0 [ 229.040863][ C0] rcu: cputime: 0 0 0 ==> 28730(ms) [ 229.048656][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5746/1:b..l P5622/1:b..l [ 229.057707][ C0] rcu: (detected by 0, t=10502 jiffies, g=22517, q=866 ncpus=2) [ 229.065412][ C0] Sending NMI from CPU 0 to CPUs 1: [ 229.065445][ C1] NMI backtrace for cpu 1 [ 229.065460][ C1] CPU: 1 UID: 0 PID: 6774 Comm: syz.0.341 Not tainted syzkaller #0 PREEMPT(full) [ 229.065483][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 229.065495][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x4c/0x80 [ 229.065524][ C1] Code: f5 f7 c3 00 02 00 00 74 05 e8 20 a1 fb f5 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 e8 b4 d2 c0 f5 <65> 8b 05 ad 82 99 07 85 c0 74 18 5b 41 5e e9 7c a3 3c f5 cc e8 8b [ 229.065541][ C1] RSP: 0018:ffffc90000a08d08 EFLAGS: 00000017 [ 229.065559][ C1] RAX: 0000000000010204 RBX: 0000000000000092 RCX: 0000000000010200 [ 229.065572][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 00000000ffffffff [ 229.065585][ C1] RBP: ffff8880754f2278 R08: ffffffff9a991c73 R09: 1ffffffff353238e [ 229.065601][ C1] R10: dffffc0000000000 R11: fffffbfff353238f R12: ffff8880754f2280 [ 229.065617][ C1] R13: ffff8880754f2268 R14: ffffffff9a991c70 R15: 1ffff1100ea9e44f [ 229.065635][ C1] FS: 00007ff9877f66c0(0000) GS:ffff88812504e000(0000) knlGS:0000000000000000 [ 229.065653][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 229.065668][ C1] CR2: 000000110c3b0bc6 CR3: 000000007c6f1000 CR4: 0000000000350ef0 [ 229.065684][ C1] Call Trace: [ 229.065693][ C1] [ 229.065703][ C1] debug_object_activate+0x2ec/0x420 [ 229.065743][ C1] enqueue_hrtimer+0xa9/0x2c0 [ 229.065773][ C1] __hrtimer_run_queues+0x4ce/0xa10 [ 229.065810][ C1] hrtimer_interrupt+0x448/0x910 [ 229.065853][ C1] __sysvec_apic_timer_interrupt+0x102/0x430 [ 229.065880][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 229.065904][ C1] [ 229.065911][ C1] [ 229.065919][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 229.065943][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 229.065966][ C1] Code: f7 e8 ad bc cf f5 f7 c3 00 02 00 00 74 05 e8 20 a1 fb f5 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 b4 d2 c0 f5 65 8b 05 ad 82 99 07 85 c0 74 18 5b 41 5e e9 7c a3 [ 229.065982][ C1] RSP: 0018:ffffc9001e986ee8 EFLAGS: 00000206 [ 229.066000][ C1] RAX: 0000000000000002 RBX: 0000000000000282 RCX: 0000000080000202 [ 229.066013][ C1] RDX: 0000000000000002 RSI: ffffffff8e22d06b RDI: 0000000000000001 [ 229.066026][ C1] RBP: ffffc9001e9871d0 R08: ffffffff90579137 R09: 1ffffffff20af226 [ 229.066042][ C1] R10: dffffc0000000000 R11: fffffbfff20af227 R12: ffff88802b8da2a8 [ 229.066058][ C1] R13: dffffc0000000000 R14: ffff88802b8da2a8 R15: ffff88802b8da2f8 [ 229.066088][ C1] taprio_change+0x34f3/0x4640 [ 229.066129][ C1] ? __pfx_taprio_change+0x10/0x10 [ 229.066165][ C1] ? static_key_slow_inc_cpuslocked+0xba/0xf0 [ 229.066213][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.066239][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.066267][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.066295][ C1] taprio_init+0x994/0xc00 [ 229.066320][ C1] ? netlink_rcv_skb+0x226/0x4a0 [ 229.066344][ C1] ? netlink_unicast+0x7bb/0x940 [ 229.066364][ C1] ? netlink_sendmsg+0x813/0xb40 [ 229.066400][ C1] ? __pfx_taprio_init+0x10/0x10 [ 229.066424][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.066456][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.066481][ C1] ? lockdep_rtnl_is_held+0x26/0x40 [ 229.066508][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.066533][ C1] ? qdisc_lookup+0x364/0x6c0 [ 229.066562][ C1] ? __pfx_taprio_init+0x10/0x10 [ 229.066588][ C1] qdisc_create+0x7b5/0xf00 [ 229.066621][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.066651][ C1] tc_modify_qdisc+0x17af/0x2390 [ 229.066693][ C1] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 229.066726][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.066765][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.066795][ C1] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 229.066826][ C1] rtnetlink_rcv_msg+0x7b9/0xc00 [ 229.066851][ C1] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 229.066873][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 229.066893][ C1] ? ref_tracker_free+0x689/0x830 [ 229.066926][ C1] ? __pfx_ref_tracker_free+0x10/0x10 [ 229.066964][ C1] netlink_rcv_skb+0x226/0x4a0 [ 229.066990][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 229.067013][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 229.067048][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 229.067073][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 229.067103][ C1] netlink_unicast+0x7bb/0x940 [ 229.067133][ C1] netlink_sendmsg+0x813/0xb40 [ 229.067166][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 229.067195][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.067220][ C1] ? aa_sock_msg_perm+0xf1/0x1b0 [ 229.067246][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.067273][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 229.067298][ C1] sock_sendmsg_nosec+0x13a/0x180 [ 229.067332][ C1] ____sys_sendmsg+0x54e/0x850 [ 229.067362][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 229.067388][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.067417][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.067445][ C1] ? import_iovec+0x73/0xa0 [ 229.067468][ C1] ___sys_sendmsg+0x2a5/0x360 [ 229.067492][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.067516][ C1] ? __lock_acquire+0x683/0x2cf0 [ 229.067551][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 229.067579][ C1] ? futex_wait+0x2a2/0x390 [ 229.067626][ C1] ? __fget_files+0x2a/0x420 [ 229.067656][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.067680][ C1] ? __fget_files+0x3a2/0x420 [ 229.067718][ C1] __x64_sys_sendmsg+0x1b1/0x290 [ 229.067743][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.067770][ C1] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 229.067801][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.067832][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.067856][ C1] do_syscall_64+0x174/0x580 [ 229.067880][ C1] ? trace_irq_disable+0x3b/0x140 [ 229.067913][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.067935][ C1] RIP: 0033:0x7ff98959de99 [ 229.067954][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.067971][ C1] RSP: 002b:00007ff9877f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 229.067991][ C1] RAX: ffffffffffffffda RBX: 00007ff989825fa0 RCX: 00007ff98959de99 [ 229.068006][ C1] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 229.068019][ C1] RBP: 00007ff989633eaf R08: 0000000000000000 R09: 0000000000000000 [ 229.068032][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 229.068045][ C1] R13: 00007ff989826038 R14: 00007ff989825fa0 R15: 00007ffe4235dbf8 [ 229.068073][ C1] [ 229.068434][ C0] task:syz-executor state:R running task stack:22080 pid:5622 tgid:5622 ppid:5617 task_flags:0x400140 flags:0x00080000 [ 229.727201][ C0] Call Trace: [ 229.730491][ C0] [ 229.733420][ C0] __schedule+0x17d9/0x56c0 [ 229.737959][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.743591][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 229.748614][ C0] ? __pfx___schedule+0x10/0x10 [ 229.753476][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 229.758851][ C0] preempt_schedule_common+0x82/0xd0 [ 229.764130][ C0] ? copy_pmd_range+0x4dd7/0x5880 [ 229.769156][ C0] preempt_schedule_thunk+0x16/0x40 [ 229.774360][ C0] _raw_spin_unlock+0x3f/0x50 [ 229.779030][ C0] copy_pmd_range+0x4e08/0x5880 [ 229.783912][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.789548][ C0] ? kasan_save_track+0x4f/0x80 [ 229.794402][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 229.799434][ C0] ? __pfx_copy_pmd_range+0x10/0x10 [ 229.804629][ C0] ? do_syscall_64+0x174/0x580 [ 229.809392][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.815461][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.821091][ C0] ? __lock_acquire+0x683/0x2cf0 [ 229.826040][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.831684][ C0] copy_page_range+0xc26/0x1250 [ 229.836567][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 229.841866][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.847497][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.853129][ C0] ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10 [ 229.859900][ C0] dup_mmap+0xf21/0x1d90 [ 229.864172][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 229.868846][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 229.873884][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.879521][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.885163][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.890803][ C0] copy_mm+0x11a/0x480 [ 229.894876][ C0] ? copy_process+0xd3c/0x4390 [ 229.899639][ C0] copy_process+0x1e3e/0x4390 [ 229.904328][ C0] ? copy_process+0xd3c/0x4390 [ 229.909112][ C0] ? __pfx_copy_process+0x10/0x10 [ 229.914149][ C0] kernel_clone+0x2d7/0x940 [ 229.918662][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 229.923711][ C0] __x64_sys_clone+0x1b6/0x230 [ 229.928485][ C0] ? __pfx___x64_sys_clone+0x10/0x10 [ 229.933792][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.939420][ C0] ? do_user_addr_fault+0xc4a/0x1340 [ 229.944721][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.950783][ C0] do_syscall_64+0x174/0x580 [ 229.955370][ C0] ? trace_irq_disable+0x3b/0x140 [ 229.960404][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.966292][ C0] RIP: 0033:0x7fabd37c6912 [ 229.970702][ C0] RSP: 002b:00007ffcc1256af0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 229.979132][ C0] RAX: ffffffffffffffda RBX: 00007ffcc1256af0 RCX: 00007fabd37c6912 [ 229.987095][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 229.995058][ C0] RBP: 00007ffcc1256c7c R08: 0000000000000000 R09: 0000000000000001 [ 230.003019][ C0] R10: 0000555559fc97d0 R11: 0000000000000246 R12: 0000000000000001 [ 230.010979][ C0] R13: 00000000000927c0 R14: 000000000001e3b7 R15: 00007ffcc1256cd0 [ 230.018967][ C0] [ 230.021977][ C0] task:udevd state:R running task stack:24904 pid:5746 tgid:5746 ppid:4987 task_flags:0x400140 flags:0x00080000 [ 230.035476][ C0] Call Trace: [ 230.038744][ C0] [ 230.041671][ C0] __schedule+0x17d9/0x56c0 [ 230.046183][ C0] ? __lock_acquire+0x683/0x2cf0 [ 230.051135][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.056775][ C0] ? __pfx___schedule+0x10/0x10 [ 230.061625][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.067267][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.072909][ C0] preempt_schedule_irq+0x4d/0xa0 [ 230.077937][ C0] irqentry_exit+0x14f/0x8f0 [ 230.082524][ C0] ? trace_irq_disable+0x3b/0x140 [ 230.087558][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 230.093534][ C0] RIP: 0010:unwind_next_frame+0xbab/0x2550 [ 230.099338][ C0] Code: 48 8b 4c 24 10 0f b6 04 01 84 c0 0f 85 3b 14 00 00 41 83 3e 00 0f 95 c0 49 39 d7 0f 96 c1 20 c1 49 39 d5 0f 97 c0 20 c8 3c 01 <75> 18 48 8d 42 08 4c 39 f8 0f 97 c1 4c 39 e8 0f 96 c0 84 c1 0f 85 [ 230.118944][ C0] RSP: 0018:ffffc900040ff8e0 EFLAGS: 00000246 [ 230.125013][ C0] RAX: 0000000000000001 RBX: 1ffff9200081ff32 RCX: 1ffff9200081ff01 [ 230.132976][ C0] RDX: ffffc900040ffac8 RSI: 0000000000000002 RDI: ffffc900040ff998 [ 230.140940][ C0] RBP: 1ffffffff21e6c4f R08: ffffc900040ffad0 R09: 0000000000000000 [ 230.148902][ C0] R10: 0000000000000000 R11: ffffffff8eb59c60 R12: 1ffff9200081ff33 [ 230.156868][ C0] R13: ffffc90004100000 R14: ffffc900040ff988 R15: ffffc900040f8000 [ 230.164860][ C0] ? stack_trace_save+0xa9/0x100 [ 230.169801][ C0] ? unwind_next_frame+0x8f/0x2550 [ 230.174911][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 230.181070][ C0] arch_stack_walk+0x11b/0x150 [ 230.185840][ C0] ? stack_trace_save+0xa9/0x100 [ 230.190783][ C0] stack_trace_save+0xa9/0x100 [ 230.195547][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 230.200916][ C0] ? kasan_save_track+0x4f/0x80 [ 230.205777][ C0] ? kmem_cache_free+0x182/0x650 [ 230.210720][ C0] ? vfs_fstatat+0x13d/0x170 [ 230.215308][ C0] ? __x64_sys_newfstatat+0x151/0x200 [ 230.220684][ C0] ? do_syscall_64+0x174/0x580 [ 230.225448][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.231518][ C0] kasan_save_track+0x3e/0x80 [ 230.236257][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.241893][ C0] __kasan_slab_alloc+0x6c/0x80 [ 230.246760][ C0] kmem_cache_alloc_noprof+0x2a0/0x5f0 [ 230.252219][ C0] ? kmem_cache_alloc_noprof+0x150/0x5f0 [ 230.257848][ C0] ? do_getname+0x2e/0x250 [ 230.262265][ C0] ? do_getname+0x2e/0x250 [ 230.266694][ C0] do_getname+0x2e/0x250 [ 230.270938][ C0] ? getname_flags+0x11/0x20 [ 230.275528][ C0] do_readlinkat+0xc8/0x510 [ 230.280041][ C0] ? __pfx_do_readlinkat+0x10/0x10 [ 230.285159][ C0] ? kmem_cache_free+0x182/0x650 [ 230.290099][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.295737][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.301803][ C0] __x64_sys_readlink+0x7f/0x90 [ 230.306660][ C0] do_syscall_64+0x174/0x580 [ 230.311261][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.317150][ C0] RIP: 0033:0x7fb8ec9153a7 [ 230.321557][ C0] RSP: 002b:00007fffb0409f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000059 [ 230.329965][ C0] RAX: ffffffffffffffda RBX: 00007fffb040a420 RCX: 00007fb8ec9153a7 [ 230.337927][ C0] RDX: 0000000000000400 RSI: 00007fffb0409f50 RDI: 00007fffb040a420 [ 230.345893][ C0] RBP: 00007fffb0409f50 R08: 0000000000000000 R09: 0000000000000020 [ 230.353860][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000400 [ 230.361820][ C0] R13: 00007fffb040ac55 R14: 000055ff6785fca4 R15: 000055ff6785fbcc [ 230.369803][ C0] [ 230.372810][ C0] rcu: rcu_preempt kthread starved for 2819 jiffies! g22517 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 230.383906][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 230.393863][ C0] rcu: RCU grace-period kthread stack dump: [ 230.399733][ C0] task:rcu_preempt state:R running task stack:27496 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 230.413234][ C0] Call Trace: [ 230.416499][ C0] [ 230.419423][ C0] __schedule+0x17d9/0x56c0 [ 230.423923][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.429560][ C0] ? __lock_acquire+0x683/0x2cf0 [ 230.434513][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.440160][ C0] ? __pfx___schedule+0x10/0x10 [ 230.445013][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.450669][ C0] ? schedule+0x90/0x2b0 [ 230.454911][ C0] schedule+0x164/0x2b0 [ 230.459070][ C0] schedule_timeout+0x152/0x2c0 [ 230.463933][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 230.469312][ C0] ? __pfx_process_timeout+0x10/0x10 [ 230.474602][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.480231][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 230.486031][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.491669][ C0] ? prepare_to_swait_event+0x322/0x350 [ 230.497219][ C0] rcu_gp_fqs_loop+0x30c/0x11f0 [ 230.502106][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 230.508292][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 230.513581][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 230.518783][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 230.524587][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 230.529186][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 230.534397][ C0] ? __kthread_parkme+0x71/0x1f0 [ 230.539337][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.544970][ C0] ? __kthread_parkme+0x196/0x1f0 [ 230.550004][ C0] kthread+0x388/0x470 [ 230.554081][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 230.559283][ C0] ? __pfx_kthread+0x10/0x10 [ 230.563880][ C0] ret_from_fork+0x514/0xb70 [ 230.568487][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 230.573604][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.579235][ C0] ? __switch_to+0xc89/0x1420 [ 230.583916][ C0] ? __pfx_kthread+0x10/0x10 [ 230.588518][ C0] ret_from_fork_asm+0x1a/0x30 [ 230.593295][ C0] [ 230.596299][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 230.602608][ C0] CPU: 0 UID: 0 PID: 1333 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 230.612054][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 230.622097][ C0] Workqueue: events_unbound toggle_allocation_gate [ 230.628610][ C0] RIP: 0010:smp_call_function_many_cond+0x11eb/0x15f0 [ 230.635379][ C0] Code: 1e 89 de 83 e6 01 31 ff e8 e2 22 0c 00 83 e3 01 48 bb 00 00 00 00 00 fc ff df 75 07 e8 8e 1e 0c 00 eb 37 f3 90 41 0f b6 04 1c <84> c0 75 10 41 f7 06 01 00 00 00 74 1e e8 73 1e 0c 00 eb e5 44 89 [ 230.654975][ C0] RSP: 0018:ffffc90005c77700 EFLAGS: 00000293 [ 230.661038][ C0] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff888028e75d00 [ 230.669000][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 230.676960][ C0] RBP: ffffc90005c77860 R08: ffffffff90579137 R09: 1ffffffff20af226 [ 230.684922][ C0] R10: dffffc0000000000 R11: fffffbfff20af227 R12: 1ffff110170e81d1 [ 230.692890][ C0] R13: ffff8880b863c448 R14: ffff8880b8740e88 R15: 0000000000000001 [ 230.700859][ C0] FS: 0000000000000000(0000) GS:ffff888124f4e000(0000) knlGS:0000000000000000 [ 230.709778][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 230.716350][ C0] CR2: 00007ff986f6ed58 CR3: 000000000e946000 CR4: 0000000000350ef0 [ 230.724316][ C0] Call Trace: [ 230.727587][ C0] [ 230.730506][ C0] ? smp_call_function_many_cond+0x971/0x15f0 [ 230.736583][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 230.741617][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 230.747952][ C0] ? __pfx_text_poke_memcpy+0x10/0x10 [ 230.753326][ C0] ? kmem_cache_alloc_bulk_noprof+0xb7/0x7b0 [ 230.759313][ C0] ? __pfx___text_poke+0x10/0x10 [ 230.764254][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 230.769277][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 230.774396][ C0] smp_text_poke_batch_finish+0xe8a/0x1110 [ 230.780203][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 230.786190][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 230.792437][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.798066][ C0] ? arch_jump_label_transform_queue+0x97/0x110 [ 230.804313][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.809947][ C0] ? __jump_label_update+0x347/0x370 [ 230.815231][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 230.821215][ C0] static_key_enable_cpuslocked+0x128/0x240 [ 230.827117][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 230.832835][ C0] static_key_enable+0x1a/0x20 [ 230.837603][ C0] toggle_allocation_gate+0xab/0x290 [ 230.842895][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 230.848798][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.854436][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.860066][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.865696][ C0] ? trace_workqueue_execute_start+0x7c/0x1d0 [ 230.871761][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 230.877479][ C0] process_scheduled_works+0xa8e/0x14e0 [ 230.883058][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 230.889044][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.894674][ C0] ? assign_work+0x3cf/0x5d0 [ 230.899266][ C0] worker_thread+0xa47/0xfb0 [ 230.903860][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.909502][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.915131][ C0] ? __kthread_parkme+0x71/0x1f0 [ 230.920083][ C0] kthread+0x388/0x470 [ 230.924159][ C0] ? __pfx_worker_thread+0x10/0x10 [ 230.929269][ C0] ? __pfx_kthread+0x10/0x10 [ 230.933865][ C0] ret_from_fork+0x514/0xb70 [ 230.938466][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 230.943583][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.949212][ C0] ? __switch_to+0xc89/0x1420 [ 230.953893][ C0] ? __pfx_kthread+0x10/0x10 [ 230.958496][ C0] ret_from_fork_asm+0x1a/0x30 [ 230.963272][ C0]