last executing test programs: 2.717210851s ago: executing program 4 (id=74): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x2327, @empty}}, 0x24) listen(r0, 0x5) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x10, 0x110, 0xe}], 0x30}, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "0200000000000000"}, {0x10, 0x110, 0xe}], 0x30}, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "0300000000000000"}, {0x10, 0x110, 0xe}], 0x30}, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "0400000000000000"}, {0x10, 0x110, 0xe}], 0x30}, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000100)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x2328, @empty}}, 0x24) sendmsg(r1, &(0x7f0000000700)={&(0x7f0000000300)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x2327, @loopback}}, 0x24, &(0x7f0000000400)=[{&(0x7f0000000500)='hello', 0x5}], 0x1, &(0x7f0000000800)=[{0x18, 0x110, 0x1, "0500000000000000"}], 0x18}, 0x0) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b00), 0x100}], 0x1}, 0x40) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)='world', 0x5}], 0x1, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) recvmsg(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000e00), 0x100}], 0x1}, 0x40) 2.632194593s ago: executing program 4 (id=78): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @rand_addr=0xac141401, 0x50, 0x0, 'rr\x00', 0x0, 0x0, 0xffffffff}, 0x2c) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'syz_tun\x00'}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x8) sendto$inet(r1, &(0x7f0000000200)="0000002c0101000000110024000008000000000000501f90000000000000006401020304ac141401ac141401", 0x2c, 0x0, &(0x7f0000000300)={0x2, 0x2290, @rand_addr=0xe0000051}, 0x10) nanosleep(&(0x7f0000000400)={0x0, 0x2fefd800}, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000500)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x1234, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x1020304, @rand_addr=0xac141401}, {0x0, 0x50, 0xc, 0x0, @opaque="aabbccdd"}}}}}, &(0x7f0000000600)={0x1, 0x1, [0x14]}) 2.473409287s ago: executing program 3 (id=80): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x2327, @empty}}, 0x24) listen(r0, 0x5) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x10, 0x110, 0xe}], 0x30}, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "0200000000000000"}, {0x10, 0x110, 0xe}], 0x30}, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "0300000000000000"}, {0x10, 0x110, 0xe}], 0x30}, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "0400000000000000"}, {0x10, 0x110, 0xe}], 0x30}, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000100)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x2328, @empty}}, 0x24) sendmsg(r1, &(0x7f0000000700)={&(0x7f0000000300)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x2327, @loopback}}, 0x24, &(0x7f0000000400)=[{&(0x7f0000000500)='hello', 0x5}], 0x1, &(0x7f0000000800)=[{0x18, 0x110, 0x1, "0500000000000000"}], 0x18}, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)='world', 0x5}], 0x1, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) sendmsg(r1, &(0x7f0000000700)={&(0x7f0000000300)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x2327, @loopback}}, 0x24, &(0x7f0000000400)=[{&(0x7f0000000500)='hello2', 0x6}], 0x1, &(0x7f0000000800)=[{0x18, 0x110, 0x1, "0600000000000000"}], 0x18}, 0x0) 2.389362219s ago: executing program 3 (id=81): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8924, &(0x7f0000000000)={'gretap0\x00', @ifru_addrs=@ethernet={0x1, @local}}) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r1, &(0x7f0000000100)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x2, @local}, 0x10) syz_emit_ethernet(0x15, &(0x7f0000000200)={@local, @local, @void, {@llc={0x4, {@llc={0x2, 0x2, "03", '1234'}}}}}, 0x0) 2.305964801s ago: executing program 3 (id=82): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x1}, 0x10) listen(r0, 0x5) r1 = accept4$llc(r0, &(0x7f0000000100), &(0x7f0000000200)=0x10, 0x800) getpeername$llc(r1, &(0x7f0000000300), &(0x7f0000000400)=0x10) 2.065492867s ago: executing program 2 (id=85): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='nv', 0x2) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10) r2 = accept(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='nv', 0x2) write(r1, &(0x7f0000000200)='abcdefghijklmnopqrstuvwxyz', 0x1a) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000300), 0x4) shutdown(r1, 0x2) 2.065192947s ago: executing program 2 (id=86): r0 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @empty}, 0x10) listen(r0, 0x5) r1 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='source\x00', &(0x7f0000000300)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='addr\x00', &(0x7f0000000500)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000600)='proto\x00', &(0x7f0000000700)='tcp\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000800)='vers\x00', &(0x7f0000000900)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000a00)='port\x00', &(0x7f0000000b00)='2049\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000001000)='mountport\x00', &(0x7f0000001100)='2049\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000001200)='mountproto\x00', &(0x7f0000001300)='tcp\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) accept(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ed) mount(&(0x7f0000000380)=@filename='sysfs\x00', &(0x7f0000000300)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/kernel/sunrpc/xprt-switches/switch-0/xprt-0-tcp/dstaddr\x00', 0x1, 0x0) write(r2, &(0x7f0000000500)='127.0.0.1\n\x00', 0xa) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/kernel/sunrpc/xprt-switches/switch-0/xprt-0-tcp/state\x00', 0x1, 0x0) write(r3, &(0x7f0000000700)='offline\n\x00', 0x8) nanosleep(&(0x7f0000000080)={0x0, 0x1dcd6500}, 0x0) 1.905110211s ago: executing program 0 (id=89): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='1\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv4/conf/all/forwarding\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='1\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/net/ipv4/conf/all/rp_filter\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='0\n', 0x2) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x0, @rand_addr=0x8080808}, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)='syz_tun\x00'}) ioctl$sock_ifreq(r3, 0x8922, &(0x7f0000000200)={'syz_tun\x00', @ifru_mtu=0x1f4}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000f00)=@nat={'nat\x00', 0x670, 0x5, 0x4f0, 0x2c8, 0x1b8, 0xffffffff, 0x0, 0x2c8, 0x458, 0x458, 0xffffffff, 0x458, 0x458, 0x5, 0x0, {[{{@uncond, 0x0, 0x180, 0x1b8, 0x48, {}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@rand_addr=0x64010102, [0xffffff00, 0xff, 0xffffffff, 0xff000000], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0x0, 0xffffff00, 0xffffff00], @ipv6=@local, [0xff, 0xff, 0xffffffff, 0xffffffff], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffffff, 0xff, 0xffffffff, 0xff000000], 0xc9, 0x4, 0x0, 0x4e24, 0x4e24, 0x4e21, 0x4e22}, 0x40, 0x800, 0x4e24, 0x4e24, 0x4e23, 0x4e22}}, @common=@unspec=@helper={{0x48}, {0x0, 'tftp-20000\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x19, @multicast2, @loopback, @icmp_id=0x66, @port=0x4e24}}}}, {{@ip={@broadcast, @remote, 0xff, 0xff, 'nicvf0\x00', 'ipvlan1\x00', {0xff}, {}, 0xc, 0x0, 0x30}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6gre0\x00', {0x8, 0x5, 0xfffffffc, 0x8, 0x8, 0x51f2, 0x6dc0, 0xff}}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x11, @ipv6=@mcast1, @ipv4=@loopback, @icmp_id=0x64, @port=0x4e23}}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'team_slave_0\x00'}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0x890, 0x218, 0x0, 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @gre_key}}}, {{@ip={@broadcast, @rand_addr=0x1, 0x0, 0x0, 'nicvf0\x00', 'pim6reg\x00', {}, {0xff}, 0x1}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0xc0000000, {0x21, @broadcast, @dev={0xac, 0x14, 0x14, 0x1c}, @gre_key=0x40, @port=0x4e23}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x550) syz_emit_ethernet(0x432, &(0x7f0000000500)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x424, 0x5678, 0x4078, 0x40, 0x11, 0x0, @rand_addr=0x1020304, @rand_addr=0x8080808}, '\x00'/1040}}}}, 0x0) 1.872233282s ago: executing program 0 (id=91): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x2327, @empty}}, 0x24) listen(r0, 0x5) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x10, 0x110, 0xe}], 0x30}, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "0200000000000000"}, {0x10, 0x110, 0xe}], 0x30}, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "0300000000000000"}, {0x10, 0x110, 0xe}], 0x30}, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "0400000000000000"}, {0x10, 0x110, 0xe}], 0x30}, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000100)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x2328, @empty}}, 0x24) sendmsg(r1, &(0x7f0000000700)={&(0x7f0000000300)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x2327, @loopback}}, 0x24, &(0x7f0000000400)=[{&(0x7f0000000500)='hello', 0x5}], 0x1, &(0x7f0000000800)=[{0x18, 0x110, 0x1, "0500000000000000"}], 0x18}, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)='world', 0x5}], 0x1, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) sendmsg(r1, &(0x7f0000000700)={&(0x7f0000000300)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x2327, @loopback}}, 0x24, &(0x7f0000000400)=[{&(0x7f0000000500)='hello2', 0x6}], 0x1, &(0x7f0000000800)=[{0x18, 0x110, 0x1, "0600000000000000"}], 0x18}, 0x0) 1.833331273s ago: executing program 1 (id=92): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x9, 0x3, 0x2e0, 0x0, 0xffffffff, 0xffffffff, 0xf8, 0xffffffff, 0x210, 0xffffffff, 0xffffffff, 0x210, 0xffffffff, 0x3, &(0x7f0000000200), {[{{@ipv6={@remote, @remote, [0xff, 0xff000000, 0x0, 0xffffff00], [0xff000000, 0xff, 0xff], 'wg2\x00', 'geneve1\x00', {}, {}, 0x29, 0x10, 0x0, 0x1c}, 0x0, 0xd0, 0xf8, 0x0, {0x0, 0xff000000}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffff, 0x6, 0x2}, {0xffff, 0x6}}}}, {{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@unspec=@mark={{0x30}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0x1, {0xd457}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) nanosleep(&(0x7f0000000300)={0x0, 0x11e1a300}, 0x0) 1.815724534s ago: executing program 0 (id=93): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000019080)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, 0x0, 0x0) setreuid(0xee01, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r5, 0x9c3fa077fa966179, 0x1f, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) 1.705505587s ago: executing program 4 (id=94): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') write(r0, &(0x7f0000000100)='1\x00', 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) 1.621536229s ago: executing program 4 (id=95): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x10) listen(r0, 0x5) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x10) r2 = accept4$llc(r0, 0x0, 0x0, 0x800) getpeername$llc(r2, &(0x7f0000000100), &(0x7f0000000140)=0x10) getpeername$llc(r1, &(0x7f0000000200), &(0x7f0000000240)=0x10) 1.395145425s ago: executing program 1 (id=96): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000030073797a6b616c6c65723000001800128008000100767266000c00028008000100e8030000"], 0x48}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="28000000130001000200"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000780)=ANY=[@ANYBLOB="20000000130001000300"/20, @ANYRES32=r2, @ANYBLOB="0100000001000000"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000e0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000780)=ANY=[@ANYBLOB="20000000130001000300"/20, @ANYRES32=r3, @ANYBLOB="0100000001000000"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=@ipv6_newaddr={0x0, 0x14, 0x601, 0x0, 0x0, {0xa, 0x40, 0x2, 0x0, r3}, [@IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000880)=@ipv6_newroute={0x0, 0x18, 0x601, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x4, 0x0, 0x1}, [@RTA_OIF={0x8, 0x3, r3}]}, 0x30}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000780)='veth0\x00', 0x6) connect$inet6(r1, &(0x7f0000000800)={0xa, 0x5000, 0x0, @private1}, 0x1c) write(r1, &(0x7f0000000900)="001122334455", 0x6) 1.265342288s ago: executing program 3 (id=97): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt(r0, 0x1, 0x19, &(0x7f0000000080)='lo\x00', 0x3) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x12}, 0x10) listen(r0, 0xa) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt(r1, 0x1, 0x19, &(0x7f00000000c0)='lo\x00', 0x3) sendto$packet(r1, &(0x7f0000000100)="525400123456fe0000000001000312206f", 0x11, 0x0, &(0x7f0000000200)={0x11, 0x0, 0x1}, 0x14) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) sendto$packet(r1, &(0x7f0000000400)="525400123456fe0000000001000412210101", 0x12, 0x0, &(0x7f0000000200)={0x11, 0x0, 0x1}, 0x14) 1.101307202s ago: executing program 2 (id=98): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x2327, @empty}}, 0x24) listen(r0, 0x5) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x10, 0x110, 0xe}], 0x30}, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "0200000000000000"}, {0x10, 0x110, 0xe}], 0x30}, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "0300000000000000"}, {0x10, 0x110, 0xe}], 0x30}, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "0400000000000000"}, {0x10, 0x110, 0xe}], 0x30}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000300)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x2327, @loopback}}, 0x24, &(0x7f0000000400)=[{&(0x7f0000000500)='hello', 0x5}], 0x1, &(0x7f0000000800)=[{0x18, 0x110, 0x1, "0500000000000000"}], 0x18}, 0x0) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b00), 0x100}], 0x1}, 0x40) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)='world', 0x5}], 0x1, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) 1.004107094s ago: executing program 2 (id=99): mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000600)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='nfsd 127.0.0.1 2147483647 test\n\x00', 0x1f) close(r0) r1 = syz_clone(0x40000011, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='nfsd 127.0.0.2 2147483647 test2\n\x00', 0x20) close(r2) wait4(r1, 0x0, 0x0, 0x0) 929.274216ms ago: executing program 3 (id=100): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040)=0x400, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000003c0)=@gcm_128={{0x303, 0x35}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = dup(r0) write(r0, &(0x7f0000001000)='\x00'/65536, 0x10000) (async) close(r0) close(r1) 836.480929ms ago: executing program 1 (id=101): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x2327, @empty}}, 0x24) listen(r0, 0x5) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x10, 0x110, 0xe}], 0x30}, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "0200000000000000"}, {0x10, 0x110, 0xe}], 0x30}, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "0300000000000000"}, {0x10, 0x110, 0xe}], 0x30}, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "0400000000000000"}, {0x10, 0x110, 0xe}], 0x30}, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000100)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x2328, @empty}}, 0x24) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b00), 0x100}], 0x1}, 0x40) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)='world', 0x5}], 0x1, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) recvmsg(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000e00), 0x100}], 0x1}, 0x40) 749.780131ms ago: executing program 4 (id=102): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='1\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv4/conf/all/forwarding\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='1\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/net/ipv4/conf/all/rp_filter\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='0\n', 0x2) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x0, @rand_addr=0x8080808}, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)='syz_tun\x00'}) ioctl$sock_ifreq(r3, 0x8922, &(0x7f0000000200)={'syz_tun\x00', @ifru_mtu=0x1f4}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000f00)=@nat={'nat\x00', 0x670, 0x5, 0x4f0, 0x2c8, 0x1b8, 0xffffffff, 0x0, 0x2c8, 0x458, 0x458, 0xffffffff, 0x458, 0x458, 0x5, 0x0, {[{{@uncond, 0x0, 0x180, 0x1b8, 0x48, {}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@rand_addr=0x64010102, [0xffffff00, 0xff, 0xffffffff, 0xff000000], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0x0, 0xffffff00, 0xffffff00], @ipv6=@local, [0xff, 0xff, 0xffffffff, 0xffffffff], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffffff, 0xff, 0xffffffff, 0xff000000], 0xc9, 0x4, 0x0, 0x4e24, 0x4e24, 0x4e21, 0x4e22}, 0x40, 0x800, 0x4e24, 0x4e24, 0x4e23, 0x4e22}}, @common=@unspec=@helper={{0x48}, {0x0, 'tftp-20000\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x19, @multicast2, @loopback, @icmp_id=0x66, @port=0x4e24}}}}, {{@ip={@broadcast, @remote, 0xff, 0xff, 'nicvf0\x00', 'ipvlan1\x00', {0xff}, {}, 0xc, 0x0, 0x30}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6gre0\x00', {0x8, 0x5, 0xfffffffc, 0x8, 0x8, 0x51f2, 0x6dc0, 0xff}}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x11, @ipv6=@mcast1, @ipv4=@loopback, @icmp_id=0x64, @port=0x4e23}}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'team_slave_0\x00'}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0x890, 0x218, 0x0, 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @gre_key}}}, {{@ip={@broadcast, @rand_addr=0x1, 0x0, 0x0, 'nicvf0\x00', 'pim6reg\x00', {}, {0xff}, 0x1}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0xc0000000, {0x21, @broadcast, @dev={0xac, 0x14, 0x14, 0x1c}, @gre_key=0x40, @port=0x4e23}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x550) syz_emit_ethernet(0x432, &(0x7f0000000500)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x424, 0x5678, 0x4078, 0x40, 0x11, 0x0, @rand_addr=0x1020304, @rand_addr=0x8080808}, '\x00'/1040}}}}, 0x0) 689.471982ms ago: executing program 1 (id=103): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='1\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv4/conf/all/forwarding\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='1\n', 0x2) write(0xffffffffffffffff, &(0x7f0000000200)='0\n', 0x2) 616.897114ms ago: executing program 0 (id=104): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x2327, @empty}}, 0x24) listen(r0, 0x5) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x10, 0x110, 0xe}], 0x30}, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "0200000000000000"}, {0x10, 0x110, 0xe}], 0x30}, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "0300000000000000"}, {0x10, 0x110, 0xe}], 0x30}, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "0400000000000000"}, {0x10, 0x110, 0xe}], 0x30}, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000100)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x2328, @empty}}, 0x24) nanosleep(&(0x7f0000000e00)={0x0, 0x5f5e100}, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)='world', 0x5}], 0x1, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) sendmsg(r1, &(0x7f0000000700)={&(0x7f0000000300)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x2327, @loopback}}, 0x24, &(0x7f0000000400)=[{&(0x7f0000000500)='hello2', 0x6}], 0x1, &(0x7f0000000800)=[{0x18, 0x110, 0x1, "0600000000000000"}], 0x18}, 0x0) 584.327805ms ago: executing program 1 (id=105): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x9, 0x3, 0x5f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x520, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0x0, 0x0, 0xffffff00], 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x230, 0x258, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x6, 0x5b, 0x21, 0x1a1, 0x101}}, @common=@inet=@hashlimit2={{0x150}, {'bridge0\x00', {0x3, 0x4, 0x60, 0x400, 0x1, 0xf6, 0x7fffffff, 0x20, 0x80}}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x5, 0x6}}}, {{@uncond, 0x0, 0x258, 0x2c8, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_batadv\x00', {0x0, 0x0, 0x5, 0x0, 0x3, 0x7, 0x83ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg0\x00', {0x3, 0xd, 0x41, 0x1, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x800, 0x2, 0x5, 0x1, 0x0, "ea1ee5d1c9601b30deb958a92fe3434d35835e19b49a3ba41abc1c94d6a2fafc10325c60f0f8e407c0ad2bf4a9bcbc2a6c01a85913d84289f09effeb1b724612"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x650) 500.595597ms ago: executing program 4 (id=106): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nodev\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\n', 0x2) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r1, &(0x7f0000000200)={0x2, 0x2080, @loopback}, 0x10) listen(r1, 0x5) connect$inet(r2, &(0x7f0000000200)={0x2, 0x2080, @loopback}, 0x10) r3 = accept(r1, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000300), 0x4) setsockopt$inet_tcp_TLS_RX(r3, 0x11a, 0x2, &(0x7f0000000400)=@gcm_128={{0x303}, '12345678', '1234567812345678', '1234', '00000000'}, 0x28) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000300), 0x4) setsockopt$inet_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000400)=@gcm_128={{0x303}, '12345678', '1234567812345678', '1234', '00000000'}, 0x28) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/portlist\x00', 0x1, 0x0) write(r4, &(0x7f0000000540)='5\n', 0x2) sendto(r2, &(0x7f0000000600)="15030300020100", 0x7, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0) 449.471499ms ago: executing program 2 (id=107): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='0 1 1\x00', 0x6) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./debug\x00', &(0x7f00000001c0)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/netdevsim/netdevsim0/ports/0/qreset\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='0 0\x00', 0x4) close(r1) 449.203148ms ago: executing program 1 (id=108): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000300)='\x00\x00', 0x4, 0x0, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) nanosleep(&(0x7f0000000400)={0x2}, 0x0) 399.05657ms ago: executing program 0 (id=109): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x2327, @empty}}, 0x24) listen(r0, 0x5) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x10, 0x110, 0xe}], 0x30}, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "0200000000000000"}, {0x10, 0x110, 0xe}], 0x30}, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "0300000000000000"}, {0x10, 0x110, 0xe}], 0x30}, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "0400000000000000"}, {0x10, 0x110, 0xe}], 0x30}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000300)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x2327, @loopback}}, 0x24, &(0x7f0000000400)=[{&(0x7f0000000500)='hello', 0x5}], 0x1, &(0x7f0000000800)=[{0x18, 0x110, 0x1, "0500000000000000"}], 0x18}, 0x0) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b00), 0x100}], 0x1}, 0x40) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)='world', 0x5}], 0x1, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) 169.666996ms ago: executing program 0 (id=110): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@loopback, {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2}, {}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@delsa={0x28, 0x11, 0x1, 0x0, 0x0, {@in6=@mcast2, 0x4d4, 0x2, 0x6c}}, 0x28}, 0x1, 0x0, 0x0, 0x8801}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000400)={0x0, 0x1dcd6500}, 0x0) 117.392687ms ago: executing program 2 (id=111): r0 = socket$inet_tcp(0x2, 0x1, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) r2 = accept$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0xa, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x8, &(0x7f00000001c0)=0x800, 0x4) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000), 0x3) setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "be45f415d19a877b", "53a8e8ba641839da93589ef68e3aace9", "d6c25a50", "12b78d5d9ab7ce57"}, 0x28) sendto$inet(r1, &(0x7f0000000200)="12345678901234567890123456789012345678901234567890123456789012345678901234567890", 0x50, 0x4000, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) 0s ago: executing program 3 (id=112): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x1) write(r0, &(0x7f0000000000)="00112233", 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.244' (ED25519) to the list of known hosts. [ 59.440853][ T4174] cgroup: Unknown subsys name 'net' [ 59.598530][ T4174] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 61.167128][ T4174] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 63.133700][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 63.167836][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 63.183580][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 63.204893][ T4199] chnl_net:caif_netlink_parms(): no params data found [ 63.237622][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 63.358450][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.366226][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.374854][ T4190] device bridge_slave_0 entered promiscuous mode [ 63.390715][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.398122][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.406657][ T4190] device bridge_slave_1 entered promiscuous mode [ 63.473977][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.483333][ T4199] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.491124][ T4199] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.499117][ T4199] device bridge_slave_0 entered promiscuous mode [ 63.507246][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.514491][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.522264][ T4187] device bridge_slave_0 entered promiscuous mode [ 63.530280][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.537470][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.546359][ T4186] device bridge_slave_0 entered promiscuous mode [ 63.555211][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.564683][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.571747][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.580354][ T4193] device bridge_slave_0 entered promiscuous mode [ 63.588291][ T4199] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.595448][ T4199] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.603580][ T4199] device bridge_slave_1 entered promiscuous mode [ 63.610401][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.617657][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.626050][ T4187] device bridge_slave_1 entered promiscuous mode [ 63.633417][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.640477][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.648931][ T4186] device bridge_slave_1 entered promiscuous mode [ 63.661990][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.669543][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.677861][ T4193] device bridge_slave_1 entered promiscuous mode [ 63.741339][ T4190] team0: Port device team_slave_0 added [ 63.749877][ T4199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.761053][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.772286][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.783732][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.794749][ T4190] team0: Port device team_slave_1 added [ 63.802034][ T4199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.820353][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.830996][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.841987][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.897613][ T4199] team0: Port device team_slave_0 added [ 63.904209][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.911167][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.937571][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.959287][ T4187] team0: Port device team_slave_0 added [ 63.967017][ T4193] team0: Port device team_slave_0 added [ 63.982358][ T4193] team0: Port device team_slave_1 added [ 63.989894][ T4199] team0: Port device team_slave_1 added [ 63.996044][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.003583][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.029881][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.042004][ T4187] team0: Port device team_slave_1 added [ 64.070531][ T4186] team0: Port device team_slave_0 added [ 64.099128][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.106252][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.132337][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.145116][ T4186] team0: Port device team_slave_1 added [ 64.151349][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.158440][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.184834][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.203216][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.210180][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.236204][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.256186][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.263528][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.289504][ T4199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.301528][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.308788][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.334833][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.364715][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.371675][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.397706][ T4199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.421486][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.429020][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.455221][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.475144][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.482120][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.508165][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.528239][ T4190] device hsr_slave_0 entered promiscuous mode [ 64.535075][ T4190] device hsr_slave_1 entered promiscuous mode [ 64.561228][ T4193] device hsr_slave_0 entered promiscuous mode [ 64.568066][ T4193] device hsr_slave_1 entered promiscuous mode [ 64.575086][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.583127][ T4193] Cannot create hsr debugfs directory [ 64.591758][ T4187] device hsr_slave_0 entered promiscuous mode [ 64.599068][ T4187] device hsr_slave_1 entered promiscuous mode [ 64.605757][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.613397][ T4187] Cannot create hsr debugfs directory [ 64.647600][ T4186] device hsr_slave_0 entered promiscuous mode [ 64.654883][ T4186] device hsr_slave_1 entered promiscuous mode [ 64.661396][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.669070][ T4186] Cannot create hsr debugfs directory [ 64.732328][ T4199] device hsr_slave_0 entered promiscuous mode [ 64.739065][ T4199] device hsr_slave_1 entered promiscuous mode [ 64.746060][ T4199] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.753698][ T4199] Cannot create hsr debugfs directory [ 64.773470][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 64.774002][ T1109] Bluetooth: hci3: command 0x0409 tx timeout [ 64.852862][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 64.858929][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 64.862713][ T1109] Bluetooth: hci4: command 0x0409 tx timeout [ 65.073721][ T4193] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.087412][ T4193] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.100825][ T4193] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.109572][ T4193] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.163501][ T4187] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.175811][ T4187] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.185316][ T4187] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.195978][ T4187] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.264572][ T4186] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.274387][ T4186] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.283806][ T4186] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.309678][ T4186] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.388366][ T4199] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.398589][ T4199] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.410144][ T4199] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.424044][ T4199] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.445057][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.476890][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.486514][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.497597][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.531993][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.542037][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.551268][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.570468][ T4190] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.586630][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.597133][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.606474][ T370] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.613802][ T370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.629090][ T4190] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.640660][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.651805][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.660319][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.668918][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.679364][ T370] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.686515][ T370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.700357][ T4190] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.709189][ T4190] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.726247][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.735998][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.747383][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.754703][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.763009][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.771565][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.784670][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.794301][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.803190][ T557] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.810260][ T557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.820641][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.833093][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.848848][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.860916][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.881972][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.890350][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.919865][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.928515][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.936640][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.946361][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.955480][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.964524][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.974476][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.986495][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.001789][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.015026][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.035171][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.046263][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.055037][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.065071][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.073790][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.084735][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.093653][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.107942][ T4193] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.118435][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.154679][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.165502][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.177464][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.187745][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.197739][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.206865][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.215630][ T370] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.222740][ T370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.230797][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.239532][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.248575][ T370] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.255690][ T370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.264590][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.273615][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.281244][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.300946][ T4199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.351364][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.367801][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.390090][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.399612][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.410633][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.426119][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.446914][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.466118][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.496161][ T4199] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.509370][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.528197][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.539292][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.550995][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.563024][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.577302][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.603462][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.611662][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.633890][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.641852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.656590][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.683005][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.691799][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.700712][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.707886][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.717340][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.728936][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.743183][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.753714][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.762275][ T370] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.769486][ T370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.780253][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.799367][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.847405][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.855310][ T4231] Bluetooth: hci3: command 0x041b tx timeout [ 66.862304][ T4231] Bluetooth: hci0: command 0x041b tx timeout [ 66.869734][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.880726][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.890006][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.899376][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.908229][ T557] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.915334][ T557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.924701][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.934054][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.942347][ T557] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.942941][ T4231] Bluetooth: hci4: command 0x041b tx timeout [ 66.949450][ T557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.961429][ T4231] Bluetooth: hci1: command 0x041b tx timeout [ 66.964258][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.976425][ T4231] Bluetooth: hci2: command 0x041b tx timeout [ 66.991373][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.002301][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.014079][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.022664][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.031020][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.039596][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.070031][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.081182][ T4199] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.104180][ T4199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.112777][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.120964][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.130985][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.138776][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.149560][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.158772][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.198948][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.215753][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.234670][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.243605][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.252457][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.262383][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.278468][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.287368][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.308143][ T4193] device veth0_vlan entered promiscuous mode [ 67.368143][ T4193] device veth1_vlan entered promiscuous mode [ 67.379536][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.391226][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.400009][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.409633][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.418972][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.428664][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.438583][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.447345][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.456311][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.465218][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.474350][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.482483][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.491159][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.503077][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.517659][ T4186] device veth0_vlan entered promiscuous mode [ 67.535524][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.543656][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.551332][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.559829][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.568302][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.586877][ T4187] device veth0_vlan entered promiscuous mode [ 67.608911][ T4187] device veth1_vlan entered promiscuous mode [ 67.639190][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.648075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.666469][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.675121][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.683853][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.695348][ T4186] device veth1_vlan entered promiscuous mode [ 67.705505][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.715523][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.723926][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.756064][ T4193] device veth0_macvtap entered promiscuous mode [ 67.769263][ T4199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.785222][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.798016][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.806981][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.816538][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.830872][ T4187] device veth0_macvtap entered promiscuous mode [ 67.841271][ T4193] device veth1_macvtap entered promiscuous mode [ 67.861533][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.870162][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.878465][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.887796][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.896644][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.905400][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.916431][ T4187] device veth1_macvtap entered promiscuous mode [ 67.941826][ T4186] device veth0_macvtap entered promiscuous mode [ 67.949172][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.957738][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.966587][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.977196][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.986022][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.999343][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.007649][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.022387][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.033483][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.045258][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.057999][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.068819][ T4186] device veth1_macvtap entered promiscuous mode [ 68.076520][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.085984][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.094891][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.104518][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.113167][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.124857][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.147195][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.158381][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.170558][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.183219][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.192159][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.201236][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.210008][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.219532][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.228300][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.240864][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.254982][ T4193] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.266338][ T4193] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.275452][ T4193] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.285150][ T4193] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.305723][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.314873][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.335383][ T4187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.344886][ T4187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.353658][ T4187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.362356][ T4187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.379985][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.391239][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.401481][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.412203][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.424520][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.434763][ T4199] device veth0_vlan entered promiscuous mode [ 68.443927][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.460522][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.470762][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.481617][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.494357][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.515168][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.524349][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.533791][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.542448][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.551579][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.560671][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.612487][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.624716][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.635048][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.644139][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.657280][ T4199] device veth1_vlan entered promiscuous mode [ 68.742748][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.750859][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.759380][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.775944][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.785372][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.794026][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.819098][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.829197][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.842238][ T4190] device veth0_vlan entered promiscuous mode [ 68.878186][ T4199] device veth0_macvtap entered promiscuous mode [ 68.898665][ T4190] device veth1_vlan entered promiscuous mode [ 68.916832][ T4199] device veth1_macvtap entered promiscuous mode [ 68.926893][ T557] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.935520][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.937188][ T557] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.950020][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 68.957853][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.958763][ T13] Bluetooth: hci3: command 0x040f tx timeout [ 68.985452][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.994436][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.002539][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.011026][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.019386][ T4261] Bluetooth: hci2: command 0x040f tx timeout [ 69.020142][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.025771][ T4261] Bluetooth: hci1: command 0x040f tx timeout [ 69.040312][ T4261] Bluetooth: hci4: command 0x040f tx timeout [ 69.040939][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.084697][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.097183][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.107489][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.118546][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.128681][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.139640][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.150898][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.162072][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.172294][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.181889][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.191779][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.203538][ T4190] device veth0_macvtap entered promiscuous mode [ 69.229555][ T370] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.237789][ T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.238306][ T370] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.254763][ T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.259895][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.276458][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.286566][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.297722][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.307660][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.319501][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.330633][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.342547][ T4190] device veth1_macvtap entered promiscuous mode [ 69.349415][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.352504][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.361650][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.367418][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.380972][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.389188][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.398260][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.407228][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.434193][ T4199] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.443093][ T4199] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.451817][ T4199] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.461007][ T4199] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.518638][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.539809][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.550643][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.567804][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.578870][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.591249][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.601295][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.612088][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.626164][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.636757][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.647656][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.658748][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.669620][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.679717][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.690482][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.700378][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.710916][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.723747][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.739387][ T4190] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.748912][ T4190] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.758574][ T4190] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.767537][ T4190] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.783550][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.792122][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.810742][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.820728][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.861979][ T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.889635][ T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.942179][ T4267] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 69.948606][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.998626][ T4269] HTB: quantum of class FFF10001 is small. Consider r2q change. [ 70.043043][ T4265] HTB: quantum of class FFF10001 is small. Consider r2q change. [ 70.056914][ T4271] Cannot find add_set index 4 as target [ 70.166566][ T4237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.209683][ T4237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.227142][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.252554][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.267306][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.279691][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.340740][ T4237] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.350243][ T4237] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.360603][ T4237] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.369660][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.372791][ T4237] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.387961][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.592890][ T4284] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 70.636877][ T4288] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 70.662513][ T4289] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 70.780971][ T4297] IPVS: sync thread started: state = BACKUP, mcast_ifn = syz_tun, syncid = 0, id = 0 [ 71.013952][ T4230] Bluetooth: hci3: command 0x0419 tx timeout [ 71.020653][ T4230] Bluetooth: hci0: command 0x0419 tx timeout [ 71.093826][ T4230] Bluetooth: hci4: command 0x0419 tx timeout [ 71.106815][ T4230] Bluetooth: hci1: command 0x0419 tx timeout [ 71.115720][ T4230] Bluetooth: hci2: command 0x0419 tx timeout [ 71.223968][ T4323] Zero length message leads to an empty skb [ 71.256755][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.263865][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.437110][ T4329] netlink: 16 bytes leftover after parsing attributes in process `syz.0.19'. [ 71.576939][ T4230] libceph: try_read bad tag 1 [ 71.602993][ T4230] libceph: mon0 (1)127.0.0.1:6789 protocol error, garbage tag [ 71.897647][ T4356] x_tables: duplicate underflow at hook 1 [ 71.908148][ T4359] netlink: 60 bytes leftover after parsing attributes in process `syz.2.25'. [ 71.970027][ T4359] netlink: 60 bytes leftover after parsing attributes in process `syz.2.25'. [ 72.045277][ T4359] netlink: 60 bytes leftover after parsing attributes in process `syz.2.25'. [ 72.076077][ T4359] netlink: 60 bytes leftover after parsing attributes in process `syz.2.25'. [ 72.134649][ T4366] netlink: 60 bytes leftover after parsing attributes in process `syz.2.25'. [ 72.161419][ T4359] netlink: 60 bytes leftover after parsing attributes in process `syz.2.25'. [ 72.189849][ T4354] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 72.383605][ T4331] ceph: No mds server is up or the cluster is laggy [ 72.431562][ T4229] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 72.462510][ T4339] ceph: No mds server is up or the cluster is laggy [ 72.470303][ T4369] FAULT_INJECTION: forcing a failure. [ 72.470303][ T4369] name failslab, interval 1, probability 100, space 0, times 10 [ 72.470300][ T4199] FAULT_INJECTION: forcing a failure. [ 72.470300][ T4199] name failslab, interval 1, probability 100, space 0, times 10 [ 72.483428][ C1] FAULT_INJECTION: forcing a failure. [ 72.483428][ C1] name failslab, interval 1, probability 100, space 0, times 10 [ 72.496376][ C0] FAULT_INJECTION: forcing a failure. [ 72.496376][ C0] name failslab, interval 1, probability 100, space 0, times 10 [ 72.509271][ C1] CPU: 1 PID: 20 Comm: ksoftirqd/1 Not tainted syzkaller #0 [ 72.529366][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 72.539432][ C1] Call Trace: [ 72.542712][ C1] [ 72.545646][ C1] dump_stack_lvl+0x188/0x250 [ 72.550435][ C1] ? show_regs_print_info+0x20/0x20 [ 72.555671][ C1] ? load_image+0x410/0x410 [ 72.560184][ C1] should_fail+0x383/0x4b0 [ 72.564614][ C1] should_failslab+0x5/0x20 [ 72.569118][ C1] slab_pre_alloc_hook+0x51/0xc0 [ 72.574055][ C1] ? __build_skb+0x26/0x2e0 [ 72.578560][ C1] kmem_cache_alloc+0x3d/0x280 [ 72.583326][ C1] __build_skb+0x26/0x2e0 [ 72.587656][ C1] build_skb+0x1e/0x160 [ 72.591810][ C1] page_to_skb+0x127/0xce0 [ 72.596237][ C1] receive_buf+0x14d0/0x5900 [ 72.600839][ C1] ? virtnet_poll_tx+0x4d0/0x4d0 [ 72.605776][ C1] ? __lock_acquire+0x13dc/0x7b50 [ 72.610803][ C1] ? verify_lock_unused+0x140/0x140 [ 72.616015][ C1] ? detach_buf_split+0x8a6/0xab0 [ 72.621044][ C1] ? __lock_acquire+0x7b50/0x7b50 [ 72.626072][ C1] ? free_old_xmit_skbs+0x252/0x2b0 [ 72.631268][ C1] ? virtqueue_get_buf_ctx+0x6aa/0xe50 [ 72.636735][ C1] virtnet_poll+0x5ce/0xfb0 [ 72.641248][ C1] ? refill_work+0x220/0x220 [ 72.645835][ C1] ? virtqueue_poll+0x169/0x210 [ 72.650867][ C1] ? rcu_is_watching+0x11/0xa0 [ 72.655836][ C1] __napi_poll+0xbb/0x430 [ 72.660192][ C1] net_rx_action+0x522/0xa80 [ 72.664804][ C1] ? net_tx_action+0x880/0x880 [ 72.669575][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 72.675566][ C1] ? lock_chain_count+0x20/0x20 [ 72.680454][ C1] handle_softirqs+0x336/0x830 [ 72.685227][ C1] ? run_ksoftirqd+0xa4/0x100 [ 72.689910][ C1] ? do_softirq+0x210/0x210 [ 72.694416][ C1] ? run_ksoftirqd+0x81/0x100 [ 72.699093][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 72.704294][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 72.709593][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 72.714889][ C1] run_ksoftirqd+0xa4/0x100 [ 72.719420][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 72.724629][ C1] smpboot_thread_fn+0x520/0x990 [ 72.729584][ C1] kthread+0x42e/0x520 [ 72.733657][ C1] ? cpu_report_death+0x180/0x180 [ 72.738714][ C1] ? kthread_blkcg+0xd0/0xd0 [ 72.743305][ C1] ret_from_fork+0x1f/0x30 [ 72.747763][ C1] [ 72.750788][ C0] CPU: 0 PID: 4369 Comm: syz.1.31 Not tainted syzkaller #0 [ 72.750850][ C1] FAULT_INJECTION: forcing a failure. [ 72.750850][ C1] name failslab, interval 1, probability 100, space 0, times 9 [ 72.758003][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 72.758016][ C0] Call Trace: [ 72.758025][ C0] [ 72.758033][ C0] dump_stack_lvl+0x188/0x250 [ 72.791594][ C0] ? show_regs_print_info+0x20/0x20 [ 72.796795][ C0] ? load_image+0x410/0x410 [ 72.801305][ C0] ? prandom_u32+0x217/0x250 [ 72.805902][ C0] should_fail+0x383/0x4b0 [ 72.810326][ C0] should_failslab+0x5/0x20 [ 72.814931][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 72.819875][ C0] kmem_cache_alloc_node+0x47/0x2c0 [ 72.825071][ C0] ? __alloc_skb+0xf4/0x750 [ 72.829582][ C0] __alloc_skb+0xf4/0x750 [ 72.833914][ C0] __netdev_alloc_skb+0x110/0x4c0 [ 72.839120][ C0] ? __alloc_skb+0x750/0x750 [ 72.843707][ C0] ? mark_lock+0x94/0x320 [ 72.848043][ C0] __ieee80211_beacon_get+0xa8f/0x1ff0 [ 72.853510][ C0] ? verify_lock_unused+0x140/0x140 [ 72.858711][ C0] ? ieee80211_beacon_get_template+0x30/0x30 [ 72.864698][ C0] ? verify_lock_unused+0x140/0x140 [ 72.869926][ C0] ieee80211_beacon_get_tim+0x48/0x840 [ 72.875391][ C0] mac80211_hwsim_beacon_tx+0x104/0x900 [ 72.880944][ C0] __iterate_interfaces+0x225/0x4c0 [ 72.886145][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 72.892394][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 72.898648][ C0] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 72.905671][ C0] mac80211_hwsim_beacon+0x9b/0x180 [ 72.910870][ C0] ? hw_scan_work+0xef0/0xef0 [ 72.915551][ C0] __hrtimer_run_queues+0x4ea/0xb60 [ 72.920765][ C0] ? hrtimer_interrupt+0x8b0/0x8b0 [ 72.925884][ C0] hrtimer_run_softirq+0x176/0x240 [ 72.931002][ C0] handle_softirqs+0x336/0x830 [ 72.935773][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 72.940624][ C0] ? do_softirq+0x210/0x210 [ 72.945125][ C0] ? hrtimer_interrupt+0x6a2/0x8b0 [ 72.950238][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 72.955441][ C0] __irq_exit_rcu+0x13b/0x230 [ 72.960120][ C0] ? irq_exit_rcu+0x20/0x20 [ 72.964645][ C0] irq_exit_rcu+0x5/0x20 [ 72.968889][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 72.974522][ C0] [ 72.977457][ C0] [ 72.980386][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 72.986371][ C0] RIP: 0010:console_unlock+0xc90/0x10f0 [ 72.991914][ C0] Code: 75 11 e8 13 df 18 00 4d 85 e4 75 16 e8 09 df 18 00 eb 15 e8 02 df 18 00 e8 dd f6 5f 08 4d 85 e4 74 ea e8 f3 de 18 00 fb 31 ff <89> de e8 49 e2 18 00 85 db 0f 94 c0 22 44 24 1f 3c 01 75 1f e8 d7 [ 73.011518][ C0] RSP: 0000:ffffc900032df480 EFLAGS: 00000246 [ 73.017587][ C0] RAX: ffffffff81601dbd RBX: 0000000000000001 RCX: ffff88807a138000 [ 73.025558][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 73.033527][ C0] RBP: ffffc900032df6f0 R08: ffffffff901ee1af R09: 1ffffffff203dc35 [ 73.041496][ C0] R10: dffffc0000000000 R11: fffffbfff203dc36 R12: 0000000000000200 [ 73.049467][ C0] R13: 0000000000000090 R14: 0000000000000000 R15: dffffc0000000000 [ 73.057448][ C0] ? console_unlock+0xc8d/0x10f0 [ 73.062398][ C0] ? console_trylock_spinning+0x370/0x370 [ 73.068119][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 73.073321][ C0] ? read_lock_is_recursive+0x10/0x10 [ 73.078698][ C0] ? console_trylock_spinning+0x2f9/0x370 [ 73.084426][ C0] ? vprintk_emit+0x150/0x150 [ 73.089102][ C0] ? __lock_acquire+0x1305/0x7b50 [ 73.094131][ C0] ? verify_lock_unused+0x140/0x140 [ 73.099334][ C0] vprintk_emit+0xc0/0x150 [ 73.103750][ C0] _printk+0xda/0x130 [ 73.107739][ C0] ? load_image+0x410/0x410 [ 73.112242][ C0] ? prandom_u32+0x217/0x250 [ 73.116841][ C0] should_fail+0x364/0x4b0 [ 73.121264][ C0] should_failslab+0x5/0x20 [ 73.125766][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 73.130704][ C0] ? jbd2__journal_start+0x13c/0x5a0 [ 73.135991][ C0] kmem_cache_alloc+0x3d/0x280 [ 73.140761][ C0] jbd2__journal_start+0x13c/0x5a0 [ 73.145876][ C0] __ext4_journal_start_sb+0x167/0x360 [ 73.151341][ C0] ext4_dirty_inode+0x8b/0x100 [ 73.156104][ C0] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 73.161910][ C0] __mark_inode_dirty+0x2c8/0xc90 [ 73.167027][ C0] generic_update_time+0x1cd/0x1f0 [ 73.172145][ C0] file_update_time+0x3c0/0x440 [ 73.177002][ C0] ? file_remove_privs+0x5d0/0x5d0 [ 73.182122][ C0] ext4_page_mkwrite+0x1bc/0x1250 [ 73.187155][ C0] ? mapping_seek_hole_data+0x1300/0x1300 [ 73.192877][ C0] ? ext4_change_inode_journal_flag+0x710/0x710 [ 73.199120][ C0] ? count_memcg_event_mm+0x324/0x370 [ 73.204491][ C0] ? remove_device_exclusive_entry+0xac0/0xac0 [ 73.210646][ C0] ? verify_lock_unused+0x140/0x140 [ 73.215855][ C0] do_page_mkwrite+0x168/0x3c0 [ 73.220813][ C0] handle_mm_fault+0x1e47/0x4440 [ 73.225766][ C0] ? get_page+0xe0/0xe0 [ 73.229935][ C0] ? vmacache_find+0x4e3/0x590 [ 73.234704][ C0] ? vmacache_update+0xa0/0x100 [ 73.239572][ C0] ? find_vma+0x1df/0x230 [ 73.243904][ C0] do_user_addr_fault+0x494/0xc90 [ 73.248943][ C0] exc_page_fault+0x60/0x100 [ 73.253536][ C0] ? clear_bhb_loop+0x30/0x80 [ 73.258217][ C0] asm_exc_page_fault+0x22/0x30 [ 73.263068][ C0] RIP: 0033:0x7fef31ce5e52 [ 73.267488][ C0] Code: 00 00 00 eb 39 0f 1f 00 be 08 00 00 00 48 89 df e8 d3 8b fe ff 48 8b 53 40 48 8d 42 f8 48 89 43 40 8b 43 30 83 c0 08 89 43 30 <4c> 89 62 f8 41 8d 56 01 41 39 ee 0f 83 9d 00 00 00 41 89 d6 48 8b [ 73.287263][ C0] RSP: 002b:00007ffdc77eb8a0 EFLAGS: 00010202 [ 73.293454][ C0] RAX: 0000000000006008 RBX: 00007fef32bc8720 RCX: 0000000000000000 [ 73.301614][ C0] RDX: 0000001b3281e000 RSI: 0000000000000008 RDI: 00007fef32bc8720 [ 73.309593][ C0] RBP: 0000000000000088 R08: 00007fef32083000 R09: 00007fef32099128 [ 73.317566][ C0] R10: 0000000000000003 R11: 0000000000000007 R12: ffffffff819d3ee2 [ 73.325886][ C0] R13: 00007fef32099128 R14: 0000000000000064 R15: ffffffffffffa000 [ 73.333950][ C0] ? trace_user_enter+0x12/0x190 [ 73.338908][ C0] [ 73.341930][ C1] CPU: 1 PID: 20 Comm: ksoftirqd/1 Not tainted syzkaller #0 [ 73.341987][ C0] FAULT_INJECTION: forcing a failure. [ 73.341987][ C0] name failslab, interval 1, probability 100, space 0, times 8 [ 73.349251][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 73.349270][ C1] Call Trace: [ 73.349281][ C1] [ 73.378335][ C1] dump_stack_lvl+0x188/0x250 [ 73.383065][ C1] ? show_regs_print_info+0x20/0x20 [ 73.388279][ C1] ? load_image+0x410/0x410 [ 73.392800][ C1] should_fail+0x383/0x4b0 [ 73.397224][ C1] should_failslab+0x5/0x20 [ 73.401726][ C1] slab_pre_alloc_hook+0x51/0xc0 [ 73.406663][ C1] ? __build_skb+0x26/0x2e0 [ 73.411179][ C1] kmem_cache_alloc+0x3d/0x280 [ 73.415949][ C1] __build_skb+0x26/0x2e0 [ 73.420284][ C1] build_skb+0x1e/0x160 [ 73.424448][ C1] page_to_skb+0x127/0xce0 [ 73.428873][ C1] receive_buf+0x14d0/0x5900 [ 73.433478][ C1] ? virtnet_poll_tx+0x4d0/0x4d0 [ 73.438413][ C1] ? __lock_acquire+0x13dc/0x7b50 [ 73.443438][ C1] ? verify_lock_unused+0x140/0x140 [ 73.448642][ C1] ? detach_buf_split+0x8a6/0xab0 [ 73.453709][ C1] ? __lock_acquire+0x7b50/0x7b50 [ 73.458733][ C1] ? free_old_xmit_skbs+0x252/0x2b0 [ 73.463931][ C1] ? virtqueue_get_buf_ctx+0x6aa/0xe50 [ 73.469402][ C1] virtnet_poll+0x5ce/0xfb0 [ 73.473913][ C1] ? refill_work+0x220/0x220 [ 73.478586][ C1] ? virtqueue_poll+0x169/0x210 [ 73.483441][ C1] ? rcu_is_watching+0x11/0xa0 [ 73.488211][ C1] __napi_poll+0xbb/0x430 [ 73.492544][ C1] net_rx_action+0x522/0xa80 [ 73.497141][ C1] ? net_tx_action+0x880/0x880 [ 73.501913][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 73.507896][ C1] ? lock_chain_count+0x20/0x20 [ 73.512764][ C1] handle_softirqs+0x336/0x830 [ 73.517537][ C1] ? run_ksoftirqd+0xa4/0x100 [ 73.522215][ C1] ? do_softirq+0x210/0x210 [ 73.526721][ C1] ? run_ksoftirqd+0x81/0x100 [ 73.531401][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 73.536595][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 73.541970][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 73.547176][ C1] run_ksoftirqd+0xa4/0x100 [ 73.551682][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 73.556885][ C1] smpboot_thread_fn+0x520/0x990 [ 73.561833][ C1] kthread+0x42e/0x520 [ 73.565899][ C1] ? cpu_report_death+0x180/0x180 [ 73.570922][ C1] ? kthread_blkcg+0xd0/0xd0 [ 73.575513][ C1] ret_from_fork+0x1f/0x30 [ 73.579939][ C1] [ 73.582967][ C0] CPU: 0 PID: 4369 Comm: syz.1.31 Not tainted syzkaller #0 [ 73.583046][ C1] FAULT_INJECTION: forcing a failure. [ 73.583046][ C1] name failslab, interval 1, probability 100, space 0, times 7 [ 73.590178][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 73.612973][ C0] Call Trace: [ 73.616267][ C0] [ 73.619129][ C0] dump_stack_lvl+0x188/0x250 [ 73.623825][ C0] ? show_regs_print_info+0x20/0x20 [ 73.629033][ C0] ? load_image+0x410/0x410 [ 73.633544][ C0] ? prandom_u32+0x217/0x250 [ 73.638151][ C0] should_fail+0x383/0x4b0 [ 73.642577][ C0] should_failslab+0x5/0x20 [ 73.647123][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 73.652062][ C0] kmem_cache_alloc_node+0x47/0x2c0 [ 73.657263][ C0] ? __alloc_skb+0xf4/0x750 [ 73.661770][ C0] __alloc_skb+0xf4/0x750 [ 73.666107][ C0] __netdev_alloc_skb+0x110/0x4c0 [ 73.671138][ C0] ? __alloc_skb+0x750/0x750 [ 73.675737][ C0] ? mark_lock+0x94/0x320 [ 73.680094][ C0] __ieee80211_beacon_get+0xa8f/0x1ff0 [ 73.685571][ C0] ? verify_lock_unused+0x140/0x140 [ 73.690800][ C0] ? ieee80211_beacon_get_template+0x30/0x30 [ 73.696808][ C0] ? verify_lock_unused+0x140/0x140 [ 73.702037][ C0] ? verify_lock_unused+0x140/0x140 [ 73.707282][ C0] ieee80211_beacon_get_tim+0x48/0x840 [ 73.712766][ C0] mac80211_hwsim_beacon_tx+0x104/0x900 [ 73.718340][ C0] __iterate_interfaces+0x225/0x4c0 [ 73.723551][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 73.729798][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 73.736047][ C0] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 73.743072][ C0] mac80211_hwsim_beacon+0x9b/0x180 [ 73.748271][ C0] ? hw_scan_work+0xef0/0xef0 [ 73.752952][ C0] __hrtimer_run_queues+0x4ea/0xb60 [ 73.758170][ C0] ? hrtimer_interrupt+0x8b0/0x8b0 [ 73.763291][ C0] hrtimer_run_softirq+0x176/0x240 [ 73.768418][ C0] handle_softirqs+0x336/0x830 [ 73.773191][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 73.778047][ C0] ? do_softirq+0x210/0x210 [ 73.782549][ C0] ? hrtimer_interrupt+0x6a2/0x8b0 [ 73.787669][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 73.792875][ C0] __irq_exit_rcu+0x13b/0x230 [ 73.797553][ C0] ? irq_exit_rcu+0x20/0x20 [ 73.802070][ C0] irq_exit_rcu+0x5/0x20 [ 73.806319][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 73.811961][ C0] [ 73.814898][ C0] [ 73.817830][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 73.823813][ C0] RIP: 0010:console_unlock+0xc90/0x10f0 [ 73.829360][ C0] Code: 75 11 e8 13 df 18 00 4d 85 e4 75 16 e8 09 df 18 00 eb 15 e8 02 df 18 00 e8 dd f6 5f 08 4d 85 e4 74 ea e8 f3 de 18 00 fb 31 ff <89> de e8 49 e2 18 00 85 db 0f 94 c0 22 44 24 1f 3c 01 75 1f e8 d7 [ 73.848968][ C0] RSP: 0000:ffffc900032df480 EFLAGS: 00000246 [ 73.855048][ C0] RAX: ffffffff81601dbd RBX: 0000000000000001 RCX: ffff88807a138000 [ 73.863024][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 73.870995][ C0] RBP: ffffc900032df6f0 R08: ffffffff901ee1af R09: 1ffffffff203dc35 [ 73.878969][ C0] R10: dffffc0000000000 R11: fffffbfff203dc36 R12: 0000000000000200 [ 73.886941][ C0] R13: 0000000000000090 R14: 0000000000000000 R15: dffffc0000000000 [ 73.894924][ C0] ? console_unlock+0xc8d/0x10f0 [ 73.899877][ C0] ? console_trylock_spinning+0x370/0x370 [ 73.905603][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 73.910807][ C0] ? read_lock_is_recursive+0x10/0x10 [ 73.916190][ C0] ? console_trylock_spinning+0x2f9/0x370 [ 73.921932][ C0] ? vprintk_emit+0x150/0x150 [ 73.926608][ C0] ? __lock_acquire+0x1305/0x7b50 [ 73.931645][ C0] ? verify_lock_unused+0x140/0x140 [ 73.936853][ C0] vprintk_emit+0xc0/0x150 [ 73.941278][ C0] _printk+0xda/0x130 [ 73.945274][ C0] ? load_image+0x410/0x410 [ 73.949806][ C0] ? prandom_u32+0x217/0x250 [ 73.954406][ C0] should_fail+0x364/0x4b0 [ 73.958831][ C0] should_failslab+0x5/0x20 [ 73.963335][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 73.968290][ C0] ? jbd2__journal_start+0x13c/0x5a0 [ 73.973583][ C0] kmem_cache_alloc+0x3d/0x280 [ 73.978350][ C0] jbd2__journal_start+0x13c/0x5a0 [ 73.983471][ C0] __ext4_journal_start_sb+0x167/0x360 [ 73.988935][ C0] ext4_dirty_inode+0x8b/0x100 [ 73.993705][ C0] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 73.999513][ C0] __mark_inode_dirty+0x2c8/0xc90 [ 74.004545][ C0] generic_update_time+0x1cd/0x1f0 [ 74.009667][ C0] file_update_time+0x3c0/0x440 [ 74.014523][ C0] ? file_remove_privs+0x5d0/0x5d0 [ 74.019648][ C0] ext4_page_mkwrite+0x1bc/0x1250 [ 74.024697][ C0] ? mapping_seek_hole_data+0x1300/0x1300 [ 74.030421][ C0] ? ext4_change_inode_journal_flag+0x710/0x710 [ 74.036662][ C0] ? count_memcg_event_mm+0x324/0x370 [ 74.042132][ C0] ? remove_device_exclusive_entry+0xac0/0xac0 [ 74.048288][ C0] ? verify_lock_unused+0x140/0x140 [ 74.053514][ C0] do_page_mkwrite+0x168/0x3c0 [ 74.058282][ C0] handle_mm_fault+0x1e47/0x4440 [ 74.063238][ C0] ? get_page+0xe0/0xe0 [ 74.067409][ C0] ? vmacache_find+0x4e3/0x590 [ 74.072169][ C0] ? vmacache_update+0xa0/0x100 [ 74.077020][ C0] ? find_vma+0x1df/0x230 [ 74.081350][ C0] do_user_addr_fault+0x494/0xc90 [ 74.086388][ C0] exc_page_fault+0x60/0x100 [ 74.090976][ C0] ? clear_bhb_loop+0x30/0x80 [ 74.095655][ C0] asm_exc_page_fault+0x22/0x30 [ 74.100509][ C0] RIP: 0033:0x7fef31ce5e52 [ 74.104936][ C0] Code: 00 00 00 eb 39 0f 1f 00 be 08 00 00 00 48 89 df e8 d3 8b fe ff 48 8b 53 40 48 8d 42 f8 48 89 43 40 8b 43 30 83 c0 08 89 43 30 <4c> 89 62 f8 41 8d 56 01 41 39 ee 0f 83 9d 00 00 00 41 89 d6 48 8b [ 74.124830][ C0] RSP: 002b:00007ffdc77eb8a0 EFLAGS: 00010202 [ 74.130902][ C0] RAX: 0000000000006008 RBX: 00007fef32bc8720 RCX: 0000000000000000 [ 74.138876][ C0] RDX: 0000001b3281e000 RSI: 0000000000000008 RDI: 00007fef32bc8720 [ 74.146847][ C0] RBP: 0000000000000088 R08: 00007fef32083000 R09: 00007fef32099128 [ 74.154824][ C0] R10: 0000000000000003 R11: 0000000000000007 R12: ffffffff819d3ee2 [ 74.162796][ C0] R13: 00007fef32099128 R14: 0000000000000064 R15: ffffffffffffa000 [ 74.170776][ C0] ? trace_user_enter+0x12/0x190 [ 74.175729][ C0] [ 74.178747][ C1] CPU: 1 PID: 20 Comm: ksoftirqd/1 Not tainted syzkaller #0 [ 74.178801][ C0] FAULT_INJECTION: forcing a failure. [ 74.178801][ C0] name failslab, interval 1, probability 100, space 0, times 6 [ 74.186051][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 74.186064][ C1] Call Trace: [ 74.186073][ C1] [ 74.186081][ C1] dump_stack_lvl+0x188/0x250 [ 74.219835][ C1] ? show_regs_print_info+0x20/0x20 [ 74.225039][ C1] ? load_image+0x410/0x410 [ 74.229554][ C1] should_fail+0x383/0x4b0 [ 74.233974][ C1] should_failslab+0x5/0x20 [ 74.238477][ C1] slab_pre_alloc_hook+0x51/0xc0 [ 74.243412][ C1] ? __build_skb+0x26/0x2e0 [ 74.247922][ C1] kmem_cache_alloc+0x3d/0x280 [ 74.252690][ C1] __build_skb+0x26/0x2e0 [ 74.257019][ C1] build_skb+0x1e/0x160 [ 74.261176][ C1] page_to_skb+0x127/0xce0 [ 74.265600][ C1] receive_buf+0x14d0/0x5900 [ 74.270207][ C1] ? virtnet_poll_tx+0x4d0/0x4d0 [ 74.275144][ C1] ? __lock_acquire+0x13dc/0x7b50 [ 74.280168][ C1] ? verify_lock_unused+0x140/0x140 [ 74.285371][ C1] ? detach_buf_split+0x8a6/0xab0 [ 74.290403][ C1] ? __lock_acquire+0x7b50/0x7b50 [ 74.295432][ C1] ? free_old_xmit_skbs+0x252/0x2b0 [ 74.300630][ C1] ? virtqueue_get_buf_ctx+0x6aa/0xe50 [ 74.306096][ C1] virtnet_poll+0x5ce/0xfb0 [ 74.310612][ C1] ? refill_work+0x220/0x220 [ 74.315201][ C1] ? virtqueue_poll+0x169/0x210 [ 74.320055][ C1] ? rcu_is_watching+0x11/0xa0 [ 74.324824][ C1] __napi_poll+0xbb/0x430 [ 74.329153][ C1] net_rx_action+0x522/0xa80 [ 74.333748][ C1] ? net_tx_action+0x880/0x880 [ 74.338509][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 74.344512][ C1] ? lock_chain_count+0x20/0x20 [ 74.349375][ C1] handle_softirqs+0x336/0x830 [ 74.354148][ C1] ? run_ksoftirqd+0xa4/0x100 [ 74.358832][ C1] ? do_softirq+0x210/0x210 [ 74.363335][ C1] ? run_ksoftirqd+0x81/0x100 [ 74.368007][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 74.373204][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 74.378516][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 74.383745][ C1] run_ksoftirqd+0xa4/0x100 [ 74.388271][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 74.393485][ C1] smpboot_thread_fn+0x520/0x990 [ 74.398436][ C1] kthread+0x42e/0x520 [ 74.402504][ C1] ? cpu_report_death+0x180/0x180 [ 74.407531][ C1] ? kthread_blkcg+0xd0/0xd0 [ 74.412500][ C1] ret_from_fork+0x1f/0x30 [ 74.416936][ C1] [ 74.419960][ C0] CPU: 0 PID: 4369 Comm: syz.1.31 Not tainted syzkaller #0 [ 74.420022][ C1] FAULT_INJECTION: forcing a failure. [ 74.420022][ C1] name failslab, interval 1, probability 100, space 0, times 5 [ 74.427176][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 74.427189][ C0] Call Trace: [ 74.427199][ C0] [ 74.427207][ C0] dump_stack_lvl+0x188/0x250 [ 74.460804][ C0] ? show_regs_print_info+0x20/0x20 [ 74.466019][ C0] ? load_image+0x410/0x410 [ 74.470537][ C0] ? prandom_u32+0x217/0x250 [ 74.475142][ C0] should_fail+0x383/0x4b0 [ 74.479566][ C0] should_failslab+0x5/0x20 [ 74.484071][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 74.489023][ C0] kmem_cache_alloc_node+0x47/0x2c0 [ 74.494224][ C0] ? __alloc_skb+0xf4/0x750 [ 74.498733][ C0] __alloc_skb+0xf4/0x750 [ 74.503085][ C0] __netdev_alloc_skb+0x110/0x4c0 [ 74.508115][ C0] ? __alloc_skb+0x750/0x750 [ 74.512704][ C0] ? mark_lock+0x94/0x320 [ 74.517056][ C0] __ieee80211_beacon_get+0xa8f/0x1ff0 [ 74.522523][ C0] ? verify_lock_unused+0x140/0x140 [ 74.527730][ C0] ? ieee80211_beacon_get_template+0x30/0x30 [ 74.533719][ C0] ? verify_lock_unused+0x140/0x140 [ 74.538920][ C0] ? verify_lock_unused+0x140/0x140 [ 74.544149][ C0] ieee80211_beacon_get_tim+0x48/0x840 [ 74.549622][ C0] mac80211_hwsim_beacon_tx+0x104/0x900 [ 74.555178][ C0] __iterate_interfaces+0x225/0x4c0 [ 74.560381][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 74.566626][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 74.572872][ C0] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 74.579905][ C0] mac80211_hwsim_beacon+0x9b/0x180 [ 74.585107][ C0] ? hw_scan_work+0xef0/0xef0 [ 74.589786][ C0] __hrtimer_run_queues+0x4ea/0xb60 [ 74.595007][ C0] ? hrtimer_interrupt+0x8b0/0x8b0 [ 74.600132][ C0] hrtimer_run_softirq+0x176/0x240 [ 74.605254][ C0] handle_softirqs+0x336/0x830 [ 74.610025][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 74.614878][ C0] ? do_softirq+0x210/0x210 [ 74.619385][ C0] ? hrtimer_interrupt+0x6a2/0x8b0 [ 74.624505][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 74.629715][ C0] __irq_exit_rcu+0x13b/0x230 [ 74.634403][ C0] ? irq_exit_rcu+0x20/0x20 [ 74.638946][ C0] irq_exit_rcu+0x5/0x20 [ 74.643205][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 74.648850][ C0] [ 74.651787][ C0] [ 74.654726][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 74.660719][ C0] RIP: 0010:console_unlock+0xc90/0x10f0 [ 74.666275][ C0] Code: 75 11 e8 13 df 18 00 4d 85 e4 75 16 e8 09 df 18 00 eb 15 e8 02 df 18 00 e8 dd f6 5f 08 4d 85 e4 74 ea e8 f3 de 18 00 fb 31 ff <89> de e8 49 e2 18 00 85 db 0f 94 c0 22 44 24 1f 3c 01 75 1f e8 d7 [ 74.685909][ C0] RSP: 0000:ffffc900032df480 EFLAGS: 00000246 [ 74.691984][ C0] RAX: ffffffff81601dbd RBX: 0000000000000001 RCX: ffff88807a138000 [ 74.700046][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 74.708023][ C0] RBP: ffffc900032df6f0 R08: ffffffff901ee1af R09: 1ffffffff203dc35 [ 74.715998][ C0] R10: dffffc0000000000 R11: fffffbfff203dc36 R12: 0000000000000200 [ 74.723973][ C0] R13: 0000000000000090 R14: 0000000000000000 R15: dffffc0000000000 [ 74.731955][ C0] ? console_unlock+0xc8d/0x10f0 [ 74.736910][ C0] ? console_trylock_spinning+0x370/0x370 [ 74.742637][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 74.747841][ C0] ? read_lock_is_recursive+0x10/0x10 [ 74.753219][ C0] ? console_trylock_spinning+0x2f9/0x370 [ 74.758946][ C0] ? vprintk_emit+0x150/0x150 [ 74.763620][ C0] ? __lock_acquire+0x1305/0x7b50 [ 74.768657][ C0] ? verify_lock_unused+0x140/0x140 [ 74.773863][ C0] vprintk_emit+0xc0/0x150 [ 74.778283][ C0] _printk+0xda/0x130 [ 74.782275][ C0] ? load_image+0x410/0x410 [ 74.786784][ C0] ? prandom_u32+0x217/0x250 [ 74.791386][ C0] should_fail+0x364/0x4b0 [ 74.795812][ C0] should_failslab+0x5/0x20 [ 74.800314][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 74.805251][ C0] ? jbd2__journal_start+0x13c/0x5a0 [ 74.810542][ C0] kmem_cache_alloc+0x3d/0x280 [ 74.815310][ C0] jbd2__journal_start+0x13c/0x5a0 [ 74.820428][ C0] __ext4_journal_start_sb+0x167/0x360 [ 74.825894][ C0] ext4_dirty_inode+0x8b/0x100 [ 74.830659][ C0] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 74.836467][ C0] __mark_inode_dirty+0x2c8/0xc90 [ 74.841503][ C0] generic_update_time+0x1cd/0x1f0 [ 74.846626][ C0] file_update_time+0x3c0/0x440 [ 74.851484][ C0] ? file_remove_privs+0x5d0/0x5d0 [ 74.856609][ C0] ext4_page_mkwrite+0x1bc/0x1250 [ 74.861650][ C0] ? mapping_seek_hole_data+0x1300/0x1300 [ 74.867371][ C0] ? ext4_change_inode_journal_flag+0x710/0x710 [ 74.873617][ C0] ? count_memcg_event_mm+0x324/0x370 [ 74.878990][ C0] ? remove_device_exclusive_entry+0xac0/0xac0 [ 74.885144][ C0] ? verify_lock_unused+0x140/0x140 [ 74.890349][ C0] do_page_mkwrite+0x168/0x3c0 [ 74.895124][ C0] handle_mm_fault+0x1e47/0x4440 [ 74.900076][ C0] ? get_page+0xe0/0xe0 [ 74.904250][ C0] ? vmacache_find+0x4e3/0x590 [ 74.909015][ C0] ? vmacache_update+0xa0/0x100 [ 74.913870][ C0] ? find_vma+0x1df/0x230 [ 74.918205][ C0] do_user_addr_fault+0x494/0xc90 [ 74.923243][ C0] exc_page_fault+0x60/0x100 [ 74.927834][ C0] ? clear_bhb_loop+0x30/0x80 [ 74.932517][ C0] asm_exc_page_fault+0x22/0x30 [ 74.937369][ C0] RIP: 0033:0x7fef31ce5e52 [ 74.941789][ C0] Code: 00 00 00 eb 39 0f 1f 00 be 08 00 00 00 48 89 df e8 d3 8b fe ff 48 8b 53 40 48 8d 42 f8 48 89 43 40 8b 43 30 83 c0 08 89 43 30 <4c> 89 62 f8 41 8d 56 01 41 39 ee 0f 83 9d 00 00 00 41 89 d6 48 8b [ 74.961396][ C0] RSP: 002b:00007ffdc77eb8a0 EFLAGS: 00010202 [ 74.967465][ C0] RAX: 0000000000006008 RBX: 00007fef32bc8720 RCX: 0000000000000000 [ 74.975444][ C0] RDX: 0000001b3281e000 RSI: 0000000000000008 RDI: 00007fef32bc8720 [ 74.983418][ C0] RBP: 0000000000000088 R08: 00007fef32083000 R09: 00007fef32099128 [ 74.991393][ C0] R10: 0000000000000003 R11: 0000000000000007 R12: ffffffff819d3ee2 [ 74.999374][ C0] R13: 00007fef32099128 R14: 0000000000000064 R15: ffffffffffffa000 [ 75.007351][ C0] ? trace_user_enter+0x12/0x190 [ 75.012301][ C0] [ 75.015326][ C1] CPU: 1 PID: 20 Comm: ksoftirqd/1 Not tainted syzkaller #0 [ 75.015380][ C0] FAULT_INJECTION: forcing a failure. [ 75.015380][ C0] name failslab, interval 1, probability 100, space 0, times 4 [ 75.022629][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 75.022641][ C1] Call Trace: [ 75.022651][ C1] [ 75.022659][ C1] dump_stack_lvl+0x188/0x250 [ 75.056306][ C1] ? show_regs_print_info+0x20/0x20 [ 75.061520][ C1] ? load_image+0x410/0x410 [ 75.067204][ C1] should_fail+0x383/0x4b0 [ 75.071642][ C1] should_failslab+0x5/0x20 [ 75.076146][ C1] slab_pre_alloc_hook+0x51/0xc0 [ 75.081087][ C1] ? __build_skb+0x26/0x2e0 [ 75.085600][ C1] kmem_cache_alloc+0x3d/0x280 [ 75.090377][ C1] __build_skb+0x26/0x2e0 [ 75.094714][ C1] build_skb+0x1e/0x160 [ 75.098984][ C1] page_to_skb+0x127/0xce0 [ 75.103413][ C1] receive_buf+0x14d0/0x5900 [ 75.108016][ C1] ? virtnet_poll_tx+0x4d0/0x4d0 [ 75.112949][ C1] ? __lock_acquire+0x13dc/0x7b50 [ 75.117976][ C1] ? verify_lock_unused+0x140/0x140 [ 75.123180][ C1] ? detach_buf_split+0x8a6/0xab0 [ 75.128209][ C1] ? __lock_acquire+0x7b50/0x7b50 [ 75.133233][ C1] ? free_old_xmit_skbs+0x252/0x2b0 [ 75.138437][ C1] ? virtqueue_get_buf_ctx+0x6aa/0xe50 [ 75.143902][ C1] virtnet_poll+0x5ce/0xfb0 [ 75.148411][ C1] ? refill_work+0x220/0x220 [ 75.152998][ C1] ? virtqueue_poll+0x169/0x210 [ 75.157851][ C1] ? rcu_is_watching+0x11/0xa0 [ 75.162617][ C1] __napi_poll+0xbb/0x430 [ 75.166949][ C1] net_rx_action+0x522/0xa80 [ 75.171549][ C1] ? net_tx_action+0x880/0x880 [ 75.176311][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 75.182298][ C1] ? lock_chain_count+0x20/0x20 [ 75.187161][ C1] handle_softirqs+0x336/0x830 [ 75.191928][ C1] ? run_ksoftirqd+0xa4/0x100 [ 75.196608][ C1] ? do_softirq+0x210/0x210 [ 75.201111][ C1] ? run_ksoftirqd+0x81/0x100 [ 75.205790][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 75.211001][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 75.216315][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 75.221529][ C1] run_ksoftirqd+0xa4/0x100 [ 75.226046][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 75.231261][ C1] smpboot_thread_fn+0x520/0x990 [ 75.236215][ C1] kthread+0x42e/0x520 [ 75.240286][ C1] ? cpu_report_death+0x180/0x180 [ 75.245323][ C1] ? kthread_blkcg+0xd0/0xd0 [ 75.249915][ C1] ret_from_fork+0x1f/0x30 [ 75.254345][ C1] [ 75.257366][ C0] CPU: 0 PID: 4369 Comm: syz.1.31 Not tainted syzkaller #0 [ 75.257418][ C1] FAULT_INJECTION: forcing a failure. [ 75.257418][ C1] name failslab, interval 1, probability 100, space 0, times 3 [ 75.264668][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 75.264681][ C0] Call Trace: [ 75.264691][ C0] [ 75.264699][ C0] dump_stack_lvl+0x188/0x250 [ 75.298271][ C0] ? show_regs_print_info+0x20/0x20 [ 75.303479][ C0] ? load_image+0x410/0x410 [ 75.307998][ C0] ? prandom_u32+0x217/0x250 [ 75.312603][ C0] should_fail+0x383/0x4b0 [ 75.317032][ C0] should_failslab+0x5/0x20 [ 75.321541][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 75.326478][ C0] kmem_cache_alloc_node+0x47/0x2c0 [ 75.331672][ C0] ? __alloc_skb+0xf4/0x750 [ 75.336304][ C0] __alloc_skb+0xf4/0x750 [ 75.340731][ C0] __netdev_alloc_skb+0x110/0x4c0 [ 75.345761][ C0] ? __alloc_skb+0x750/0x750 [ 75.350351][ C0] ? mark_lock+0x94/0x320 [ 75.354687][ C0] __ieee80211_beacon_get+0xa8f/0x1ff0 [ 75.360177][ C0] ? verify_lock_unused+0x140/0x140 [ 75.365379][ C0] ? ieee80211_beacon_get_template+0x30/0x30 [ 75.371364][ C0] ? verify_lock_unused+0x140/0x140 [ 75.376561][ C0] ? verify_lock_unused+0x140/0x140 [ 75.381793][ C0] ieee80211_beacon_get_tim+0x48/0x840 [ 75.387260][ C0] mac80211_hwsim_beacon_tx+0x104/0x900 [ 75.392812][ C0] __iterate_interfaces+0x225/0x4c0 [ 75.398013][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 75.404258][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 75.410500][ C0] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 75.417525][ C0] mac80211_hwsim_beacon+0x9b/0x180 [ 75.422724][ C0] ? hw_scan_work+0xef0/0xef0 [ 75.427402][ C0] __hrtimer_run_queues+0x4ea/0xb60 [ 75.432627][ C0] ? hrtimer_interrupt+0x8b0/0x8b0 [ 75.437751][ C0] hrtimer_run_softirq+0x176/0x240 [ 75.442868][ C0] handle_softirqs+0x336/0x830 [ 75.447639][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 75.452490][ C0] ? do_softirq+0x210/0x210 [ 75.456989][ C0] ? hrtimer_interrupt+0x6a2/0x8b0 [ 75.462101][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 75.467304][ C0] __irq_exit_rcu+0x13b/0x230 [ 75.471994][ C0] ? irq_exit_rcu+0x20/0x20 [ 75.476506][ C0] irq_exit_rcu+0x5/0x20 [ 75.480749][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 75.486384][ C0] [ 75.489315][ C0] [ 75.492250][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 75.498233][ C0] RIP: 0010:console_unlock+0xc90/0x10f0 [ 75.503783][ C0] Code: 75 11 e8 13 df 18 00 4d 85 e4 75 16 e8 09 df 18 00 eb 15 e8 02 df 18 00 e8 dd f6 5f 08 4d 85 e4 74 ea e8 f3 de 18 00 fb 31 ff <89> de e8 49 e2 18 00 85 db 0f 94 c0 22 44 24 1f 3c 01 75 1f e8 d7 [ 75.523390][ C0] RSP: 0000:ffffc900032df480 EFLAGS: 00000246 [ 75.529461][ C0] RAX: ffffffff81601dbd RBX: 0000000000000001 RCX: ffff88807a138000 [ 75.537431][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 75.545404][ C0] RBP: ffffc900032df6f0 R08: ffffffff901ee1af R09: 1ffffffff203dc35 [ 75.553377][ C0] R10: dffffc0000000000 R11: fffffbfff203dc36 R12: 0000000000000200 [ 75.561347][ C0] R13: 0000000000000090 R14: 0000000000000000 R15: dffffc0000000000 [ 75.569321][ C0] ? console_unlock+0xc8d/0x10f0 [ 75.574272][ C0] ? console_trylock_spinning+0x370/0x370 [ 75.579998][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 75.585197][ C0] ? read_lock_is_recursive+0x10/0x10 [ 75.590574][ C0] ? console_trylock_spinning+0x2f9/0x370 [ 75.596311][ C0] ? vprintk_emit+0x150/0x150 [ 75.600985][ C0] ? __lock_acquire+0x1305/0x7b50 [ 75.606015][ C0] ? verify_lock_unused+0x140/0x140 [ 75.611219][ C0] vprintk_emit+0xc0/0x150 [ 75.615639][ C0] _printk+0xda/0x130 [ 75.619632][ C0] ? load_image+0x410/0x410 [ 75.624138][ C0] ? prandom_u32+0x217/0x250 [ 75.628740][ C0] should_fail+0x364/0x4b0 [ 75.633161][ C0] should_failslab+0x5/0x20 [ 75.637667][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 75.642637][ C0] ? jbd2__journal_start+0x13c/0x5a0 [ 75.647923][ C0] kmem_cache_alloc+0x3d/0x280 [ 75.652691][ C0] jbd2__journal_start+0x13c/0x5a0 [ 75.657928][ C0] __ext4_journal_start_sb+0x167/0x360 [ 75.663424][ C0] ext4_dirty_inode+0x8b/0x100 [ 75.668219][ C0] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 75.674170][ C0] __mark_inode_dirty+0x2c8/0xc90 [ 75.679249][ C0] generic_update_time+0x1cd/0x1f0 [ 75.684370][ C0] file_update_time+0x3c0/0x440 [ 75.689236][ C0] ? file_remove_privs+0x5d0/0x5d0 [ 75.694359][ C0] ext4_page_mkwrite+0x1bc/0x1250 [ 75.699394][ C0] ? mapping_seek_hole_data+0x1300/0x1300 [ 75.705114][ C0] ? ext4_change_inode_journal_flag+0x710/0x710 [ 75.711363][ C0] ? count_memcg_event_mm+0x324/0x370 [ 75.716733][ C0] ? remove_device_exclusive_entry+0xac0/0xac0 [ 75.722891][ C0] ? verify_lock_unused+0x140/0x140 [ 75.728097][ C0] do_page_mkwrite+0x168/0x3c0 [ 75.732867][ C0] handle_mm_fault+0x1e47/0x4440 [ 75.737817][ C0] ? get_page+0xe0/0xe0 [ 75.741979][ C0] ? vmacache_find+0x4e3/0x590 [ 75.746744][ C0] ? vmacache_update+0xa0/0x100 [ 75.751597][ C0] ? find_vma+0x1df/0x230 [ 75.755929][ C0] do_user_addr_fault+0x494/0xc90 [ 75.760965][ C0] exc_page_fault+0x60/0x100 [ 75.765558][ C0] ? clear_bhb_loop+0x30/0x80 [ 75.770241][ C0] asm_exc_page_fault+0x22/0x30 [ 75.775089][ C0] RIP: 0033:0x7fef31ce5e52 [ 75.779508][ C0] Code: 00 00 00 eb 39 0f 1f 00 be 08 00 00 00 48 89 df e8 d3 8b fe ff 48 8b 53 40 48 8d 42 f8 48 89 43 40 8b 43 30 83 c0 08 89 43 30 <4c> 89 62 f8 41 8d 56 01 41 39 ee 0f 83 9d 00 00 00 41 89 d6 48 8b [ 75.799116][ C0] RSP: 002b:00007ffdc77eb8a0 EFLAGS: 00010202 [ 75.805210][ C0] RAX: 0000000000006008 RBX: 00007fef32bc8720 RCX: 0000000000000000 [ 75.813305][ C0] RDX: 0000001b3281e000 RSI: 0000000000000008 RDI: 00007fef32bc8720 [ 75.821294][ C0] RBP: 0000000000000088 R08: 00007fef32083000 R09: 00007fef32099128 [ 75.829282][ C0] R10: 0000000000000003 R11: 0000000000000007 R12: ffffffff819d3ee2 [ 75.837487][ C0] R13: 00007fef32099128 R14: 0000000000000064 R15: ffffffffffffa000 [ 75.845492][ C0] ? trace_user_enter+0x12/0x190 [ 75.850456][ C0] [ 75.853484][ C1] CPU: 1 PID: 20 Comm: ksoftirqd/1 Not tainted syzkaller #0 [ 75.853559][ C0] FAULT_INJECTION: forcing a failure. [ 75.853559][ C0] name failslab, interval 1, probability 100, space 0, times 2 [ 75.860782][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 75.883790][ C1] Call Trace: [ 75.887108][ C1] [ 75.890060][ C1] dump_stack_lvl+0x188/0x250 [ 75.894749][ C1] ? show_regs_print_info+0x20/0x20 [ 75.899951][ C1] ? load_image+0x410/0x410 [ 75.904471][ C1] should_fail+0x383/0x4b0 [ 75.908898][ C1] should_failslab+0x5/0x20 [ 75.913404][ C1] slab_pre_alloc_hook+0x51/0xc0 [ 75.918343][ C1] ? __build_skb+0x26/0x2e0 [ 75.922936][ C1] kmem_cache_alloc+0x3d/0x280 [ 75.927699][ C1] __build_skb+0x26/0x2e0 [ 75.932030][ C1] build_skb+0x1e/0x160 [ 75.936189][ C1] page_to_skb+0x127/0xce0 [ 75.940613][ C1] receive_buf+0x14d0/0x5900 [ 75.945214][ C1] ? virtnet_poll_tx+0x4d0/0x4d0 [ 75.950150][ C1] ? __lock_acquire+0x13dc/0x7b50 [ 75.955176][ C1] ? verify_lock_unused+0x140/0x140 [ 75.960376][ C1] ? detach_buf_split+0x8a6/0xab0 [ 75.965405][ C1] ? __lock_acquire+0x7b50/0x7b50 [ 75.970424][ C1] ? free_old_xmit_skbs+0x252/0x2b0 [ 75.975621][ C1] ? virtqueue_get_buf_ctx+0x6aa/0xe50 [ 75.981126][ C1] virtnet_poll+0x5ce/0xfb0 [ 75.985636][ C1] ? refill_work+0x220/0x220 [ 75.990231][ C1] ? virtqueue_poll+0x169/0x210 [ 75.995090][ C1] ? rcu_is_watching+0x11/0xa0 [ 75.999856][ C1] __napi_poll+0xbb/0x430 [ 76.004194][ C1] net_rx_action+0x522/0xa80 [ 76.008790][ C1] ? net_tx_action+0x880/0x880 [ 76.013551][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 76.019536][ C1] ? lock_chain_count+0x20/0x20 [ 76.024396][ C1] handle_softirqs+0x336/0x830 [ 76.029172][ C1] ? run_ksoftirqd+0xa4/0x100 [ 76.033852][ C1] ? do_softirq+0x210/0x210 [ 76.038354][ C1] ? run_ksoftirqd+0x81/0x100 [ 76.043033][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 76.048230][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 76.053517][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 76.058727][ C1] run_ksoftirqd+0xa4/0x100 [ 76.063231][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 76.068441][ C1] smpboot_thread_fn+0x520/0x990 [ 76.073393][ C1] kthread+0x42e/0x520 [ 76.077459][ C1] ? cpu_report_death+0x180/0x180 [ 76.082480][ C1] ? kthread_blkcg+0xd0/0xd0 [ 76.087069][ C1] ret_from_fork+0x1f/0x30 [ 76.091496][ C1] [ 76.094513][ C0] CPU: 0 PID: 4369 Comm: syz.1.31 Not tainted syzkaller #0 [ 76.094576][ C1] FAULT_INJECTION: forcing a failure. [ 76.094576][ C1] name failslab, interval 1, probability 100, space 0, times 1 [ 76.101725][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 76.125021][ C0] Call Trace: [ 76.128307][ C0] [ 76.131160][ C0] dump_stack_lvl+0x188/0x250 [ 76.135851][ C0] ? show_regs_print_info+0x20/0x20 [ 76.141055][ C0] ? load_image+0x410/0x410 [ 76.145566][ C0] ? prandom_u32+0x217/0x250 [ 76.150174][ C0] should_fail+0x383/0x4b0 [ 76.154598][ C0] should_failslab+0x5/0x20 [ 76.159103][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 76.164045][ C0] kmem_cache_alloc_node+0x47/0x2c0 [ 76.169245][ C0] ? __alloc_skb+0xf4/0x750 [ 76.173752][ C0] __alloc_skb+0xf4/0x750 [ 76.178087][ C0] __netdev_alloc_skb+0x110/0x4c0 [ 76.183132][ C0] ? __alloc_skb+0x750/0x750 [ 76.187722][ C0] ? mark_lock+0x94/0x320 [ 76.192057][ C0] __ieee80211_beacon_get+0xa8f/0x1ff0 [ 76.197522][ C0] ? verify_lock_unused+0x140/0x140 [ 76.202724][ C0] ? ieee80211_beacon_get_template+0x30/0x30 [ 76.208708][ C0] ? verify_lock_unused+0x140/0x140 [ 76.213910][ C0] ? verify_lock_unused+0x140/0x140 [ 76.219134][ C0] ieee80211_beacon_get_tim+0x48/0x840 [ 76.224598][ C0] mac80211_hwsim_beacon_tx+0x104/0x900 [ 76.230153][ C0] __iterate_interfaces+0x225/0x4c0 [ 76.235355][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 76.241600][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 76.247846][ C0] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 76.254875][ C0] mac80211_hwsim_beacon+0x9b/0x180 [ 76.260074][ C0] ? hw_scan_work+0xef0/0xef0 [ 76.264750][ C0] __hrtimer_run_queues+0x4ea/0xb60 [ 76.269968][ C0] ? hrtimer_interrupt+0x8b0/0x8b0 [ 76.275090][ C0] hrtimer_run_softirq+0x176/0x240 [ 76.280211][ C0] handle_softirqs+0x336/0x830 [ 76.284982][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 76.289834][ C0] ? do_softirq+0x210/0x210 [ 76.294339][ C0] ? hrtimer_interrupt+0x6a2/0x8b0 [ 76.299454][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 76.304660][ C0] __irq_exit_rcu+0x13b/0x230 [ 76.309351][ C0] ? irq_exit_rcu+0x20/0x20 [ 76.313861][ C0] irq_exit_rcu+0x5/0x20 [ 76.318103][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 76.323740][ C0] [ 76.326674][ C0] [ 76.329609][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 76.335595][ C0] RIP: 0010:console_unlock+0xc90/0x10f0 [ 76.341142][ C0] Code: 75 11 e8 13 df 18 00 4d 85 e4 75 16 e8 09 df 18 00 eb 15 e8 02 df 18 00 e8 dd f6 5f 08 4d 85 e4 74 ea e8 f3 de 18 00 fb 31 ff <89> de e8 49 e2 18 00 85 db 0f 94 c0 22 44 24 1f 3c 01 75 1f e8 d7 [ 76.360835][ C0] RSP: 0000:ffffc900032df480 EFLAGS: 00000246 [ 76.366908][ C0] RAX: ffffffff81601dbd RBX: 0000000000000001 RCX: ffff88807a138000 [ 76.374883][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 76.382857][ C0] RBP: ffffc900032df6f0 R08: ffffffff901ee1af R09: 1ffffffff203dc35 [ 76.390829][ C0] R10: dffffc0000000000 R11: fffffbfff203dc36 R12: 0000000000000200 [ 76.398802][ C0] R13: 0000000000000090 R14: 0000000000000000 R15: dffffc0000000000 [ 76.406873][ C0] ? console_unlock+0xc8d/0x10f0 [ 76.411832][ C0] ? console_trylock_spinning+0x370/0x370 [ 76.417646][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 76.422855][ C0] ? read_lock_is_recursive+0x10/0x10 [ 76.428253][ C0] ? console_trylock_spinning+0x2f9/0x370 [ 76.434001][ C0] ? vprintk_emit+0x150/0x150 [ 76.438689][ C0] ? __lock_acquire+0x1305/0x7b50 [ 76.443733][ C0] ? verify_lock_unused+0x140/0x140 [ 76.448959][ C0] vprintk_emit+0xc0/0x150 [ 76.453391][ C0] _printk+0xda/0x130 [ 76.457396][ C0] ? load_image+0x410/0x410 [ 76.461903][ C0] ? prandom_u32+0x217/0x250 [ 76.466525][ C0] should_fail+0x364/0x4b0 [ 76.470952][ C0] should_failslab+0x5/0x20 [ 76.475456][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 76.480396][ C0] ? jbd2__journal_start+0x13c/0x5a0 [ 76.485681][ C0] kmem_cache_alloc+0x3d/0x280 [ 76.490459][ C0] jbd2__journal_start+0x13c/0x5a0 [ 76.495922][ C0] __ext4_journal_start_sb+0x167/0x360 [ 76.501388][ C0] ext4_dirty_inode+0x8b/0x100 [ 76.506150][ C0] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 76.511955][ C0] __mark_inode_dirty+0x2c8/0xc90 [ 76.516985][ C0] generic_update_time+0x1cd/0x1f0 [ 76.522108][ C0] file_update_time+0x3c0/0x440 [ 76.526973][ C0] ? file_remove_privs+0x5d0/0x5d0 [ 76.532094][ C0] ext4_page_mkwrite+0x1bc/0x1250 [ 76.537137][ C0] ? mapping_seek_hole_data+0x1300/0x1300 [ 76.542874][ C0] ? ext4_change_inode_journal_flag+0x710/0x710 [ 76.549124][ C0] ? count_memcg_event_mm+0x324/0x370 [ 76.554500][ C0] ? remove_device_exclusive_entry+0xac0/0xac0 [ 76.560656][ C0] ? verify_lock_unused+0x140/0x140 [ 76.565858][ C0] do_page_mkwrite+0x168/0x3c0 [ 76.570630][ C0] handle_mm_fault+0x1e47/0x4440 [ 76.575577][ C0] ? get_page+0xe0/0xe0 [ 76.579744][ C0] ? vmacache_find+0x4e3/0x590 [ 76.584510][ C0] ? vmacache_update+0xa0/0x100 [ 76.589374][ C0] ? find_vma+0x1df/0x230 [ 76.593723][ C0] do_user_addr_fault+0x494/0xc90 [ 76.598768][ C0] exc_page_fault+0x60/0x100 [ 76.603358][ C0] ? clear_bhb_loop+0x30/0x80 [ 76.608046][ C0] asm_exc_page_fault+0x22/0x30 [ 76.612908][ C0] RIP: 0033:0x7fef31ce5e52 [ 76.617354][ C0] Code: 00 00 00 eb 39 0f 1f 00 be 08 00 00 00 48 89 df e8 d3 8b fe ff 48 8b 53 40 48 8d 42 f8 48 89 43 40 8b 43 30 83 c0 08 89 43 30 <4c> 89 62 f8 41 8d 56 01 41 39 ee 0f 83 9d 00 00 00 41 89 d6 48 8b [ 76.636979][ C0] RSP: 002b:00007ffdc77eb8a0 EFLAGS: 00010202 [ 76.643066][ C0] RAX: 0000000000006008 RBX: 00007fef32bc8720 RCX: 0000000000000000 [ 76.651483][ C0] RDX: 0000001b3281e000 RSI: 0000000000000008 RDI: 00007fef32bc8720 [ 76.659476][ C0] RBP: 0000000000000088 R08: 00007fef32083000 R09: 00007fef32099128 [ 76.667459][ C0] R10: 0000000000000003 R11: 0000000000000007 R12: ffffffff819d3ee2 [ 76.675488][ C0] R13: 00007fef32099128 R14: 0000000000000064 R15: ffffffffffffa000 [ 76.683468][ C0] ? trace_user_enter+0x12/0x190 [ 76.688429][ C0] [ 76.691469][ C1] CPU: 1 PID: 20 Comm: ksoftirqd/1 Not tainted syzkaller #0 [ 76.698784][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 76.708865][ C1] Call Trace: [ 76.712168][ C1] [ 76.715124][ C1] dump_stack_lvl+0x188/0x250 [ 76.719834][ C1] ? show_regs_print_info+0x20/0x20 [ 76.725058][ C1] ? load_image+0x410/0x410 [ 76.729589][ C1] ? prandom_u32+0x217/0x250 [ 76.734242][ C1] should_fail+0x383/0x4b0 [ 76.737756][ T4229] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 76.738688][ C1] should_failslab+0x5/0x20 [ 76.750116][ C1] slab_pre_alloc_hook+0x51/0xc0 [ 76.755081][ C1] __kmalloc_node_track_caller+0x68/0x3a0 [ 76.760829][ C1] ? __napi_alloc_skb+0x151/0x2d0 [ 76.765875][ C1] ? __napi_alloc_skb+0x151/0x2d0 [ 76.770928][ C1] __alloc_skb+0x22c/0x750 [ 76.775371][ C1] __napi_alloc_skb+0x151/0x2d0 [ 76.780249][ C1] page_to_skb+0x279/0xce0 [ 76.784693][ C1] receive_buf+0x14d0/0x5900 [ 76.789331][ C1] ? virtnet_poll_tx+0x4d0/0x4d0 [ 76.794289][ C1] ? __lock_acquire+0x13dc/0x7b50 [ 76.799322][ C1] ? verify_lock_unused+0x140/0x140 [ 76.804535][ C1] ? detach_buf_split+0x8a6/0xab0 [ 76.809594][ C1] ? __lock_acquire+0x7b50/0x7b50 [ 76.814651][ C1] ? free_old_xmit_skbs+0x252/0x2b0 [ 76.819887][ C1] ? virtqueue_get_buf_ctx+0x6aa/0xe50 [ 76.825396][ C1] virtnet_poll+0x5ce/0xfb0 [ 76.829941][ C1] ? refill_work+0x220/0x220 [ 76.834558][ C1] ? virtqueue_poll+0x169/0x210 [ 76.839437][ C1] ? rcu_is_watching+0x11/0xa0 [ 76.844233][ C1] __napi_poll+0xbb/0x430 [ 76.848586][ C1] net_rx_action+0x522/0xa80 [ 76.853204][ C1] ? net_tx_action+0x880/0x880 [ 76.857998][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 76.864000][ C1] ? lock_chain_count+0x20/0x20 [ 76.868873][ C1] handle_softirqs+0x336/0x830 [ 76.873651][ C1] ? run_ksoftirqd+0xa4/0x100 [ 76.878338][ C1] ? do_softirq+0x210/0x210 [ 76.882866][ C1] ? run_ksoftirqd+0x81/0x100 [ 76.887576][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 76.892794][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 76.898101][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 76.903309][ C1] run_ksoftirqd+0xa4/0x100 [ 76.907825][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 76.913040][ C1] smpboot_thread_fn+0x520/0x990 [ 76.917999][ C1] kthread+0x42e/0x520 [ 76.922194][ C1] ? cpu_report_death+0x180/0x180 [ 76.927563][ C1] ? kthread_blkcg+0xd0/0xd0 [ 76.932169][ C1] ret_from_fork+0x1f/0x30 [ 76.936608][ C1] [ 77.004402][ T1353] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 77.032833][ T4369] CPU: 0 PID: 4369 Comm: syz.1.31 Not tainted syzkaller #0 [ 77.040082][ T4369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 77.050172][ T4369] Call Trace: [ 77.053466][ T4369] [ 77.056403][ T4369] dump_stack_lvl+0x188/0x250 [ 77.061092][ T4369] ? show_regs_print_info+0x20/0x20 [ 77.066313][ T4369] ? load_image+0x410/0x410 [ 77.070830][ T4369] should_fail+0x383/0x4b0 [ 77.075257][ T4369] should_failslab+0x5/0x20 [ 77.079763][ T4369] slab_pre_alloc_hook+0x51/0xc0 [ 77.084700][ T4369] ? jbd2__journal_start+0x13c/0x5a0 [ 77.089988][ T4369] kmem_cache_alloc+0x3d/0x280 [ 77.094762][ T4369] jbd2__journal_start+0x13c/0x5a0 [ 77.099892][ T4369] __ext4_journal_start_sb+0x167/0x360 [ 77.105379][ T4369] ext4_dirty_inode+0x8b/0x100 [ 77.110143][ T4369] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 77.115958][ T4369] __mark_inode_dirty+0x2c8/0xc90 [ 77.120991][ T4369] generic_update_time+0x1cd/0x1f0 [ 77.126112][ T4369] file_update_time+0x3c0/0x440 [ 77.130979][ T4369] ? file_remove_privs+0x5d0/0x5d0 [ 77.136101][ T4369] ext4_page_mkwrite+0x1bc/0x1250 [ 77.141142][ T4369] ? mapping_seek_hole_data+0x1300/0x1300 [ 77.146870][ T4369] ? ext4_change_inode_journal_flag+0x710/0x710 [ 77.153121][ T4369] ? count_memcg_event_mm+0x324/0x370 [ 77.158506][ T4369] ? remove_device_exclusive_entry+0xac0/0xac0 [ 77.164669][ T4369] ? verify_lock_unused+0x140/0x140 [ 77.169877][ T4369] do_page_mkwrite+0x168/0x3c0 [ 77.174654][ T4369] handle_mm_fault+0x1e47/0x4440 [ 77.179606][ T4369] ? get_page+0xe0/0xe0 [ 77.183781][ T4369] ? vmacache_find+0x4e3/0x590 [ 77.188570][ T4369] ? vmacache_update+0xa0/0x100 [ 77.193452][ T4369] ? find_vma+0x1df/0x230 [ 77.197810][ T4369] do_user_addr_fault+0x494/0xc90 [ 77.202871][ T4369] exc_page_fault+0x60/0x100 [ 77.207483][ T4369] ? clear_bhb_loop+0x30/0x80 [ 77.212189][ T4369] asm_exc_page_fault+0x22/0x30 [ 77.217058][ T4369] RIP: 0033:0x7fef31ce5e52 [ 77.221486][ T4369] Code: 00 00 00 eb 39 0f 1f 00 be 08 00 00 00 48 89 df e8 d3 8b fe ff 48 8b 53 40 48 8d 42 f8 48 89 43 40 8b 43 30 83 c0 08 89 43 30 <4c> 89 62 f8 41 8d 56 01 41 39 ee 0f 83 9d 00 00 00 41 89 d6 48 8b [ 77.241107][ T4369] RSP: 002b:00007ffdc77eb8a0 EFLAGS: 00010202 [ 77.247301][ T4369] RAX: 0000000000006008 RBX: 00007fef32bc8720 RCX: 0000000000000000 [ 77.255302][ T4369] RDX: 0000001b3281e000 RSI: 0000000000000008 RDI: 00007fef32bc8720 [ 77.263297][ T4369] RBP: 0000000000000088 R08: 00007fef32083000 R09: 00007fef32099128 [ 77.271288][ T4369] R10: 0000000000000003 R11: 0000000000000007 R12: ffffffff819d3ee2 [ 77.279282][ T4369] R13: 00007fef32099128 R14: 0000000000000064 R15: ffffffffffffa000 [ 77.287291][ T4369] ? trace_user_enter+0x12/0x190 [ 77.292264][ T4369] [ 77.341627][ T4199] CPU: 1 PID: 4199 Comm: syz-executor Not tainted syzkaller #0 [ 77.349229][ T4199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 77.359306][ T4199] Call Trace: [ 77.362613][ T4199] [ 77.365566][ T4199] dump_stack_lvl+0x188/0x250 [ 77.370286][ T4199] ? show_regs_print_info+0x20/0x20 [ 77.375522][ T4199] ? load_image+0x410/0x410 [ 77.380052][ T4199] ? prandom_u32+0x217/0x250 [ 77.384680][ T4199] should_fail+0x383/0x4b0 [ 77.389136][ T4199] should_failslab+0x5/0x20 [ 77.393684][ T4199] slab_pre_alloc_hook+0x51/0xc0 [ 77.398654][ T4199] ? getname_flags+0xb7/0x4f0 [ 77.403368][ T4199] kmem_cache_alloc+0x3d/0x280 [ 77.408159][ T4199] ? __context_tracking_exit+0x4c/0x80 [ 77.413660][ T4199] getname_flags+0xb7/0x4f0 [ 77.418210][ T4199] user_path_at_empty+0x2a/0x190 [ 77.423197][ T4199] __x64_sys_umount+0xf9/0x170 [ 77.427998][ T4199] ? path_umount+0xfe0/0xfe0 [ 77.432619][ T4199] ? lockdep_hardirqs_on+0x94/0x140 [ 77.437847][ T4199] do_syscall_64+0x4c/0xa0 [ 77.442283][ T4199] ? clear_bhb_loop+0x30/0x80 [ 77.446983][ T4199] ? clear_bhb_loop+0x30/0x80 [ 77.452628][ T4199] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.458618][ T4199] RIP: 0033:0x7fe64207c257 [ 77.463062][ T4199] Code: a2 c7 05 9c 44 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 77.484294][ T4199] RSP: 002b:00007ffee7fc50c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 77.492742][ T4199] RAX: ffffffffffffffda RBX: 00007fe64211145c RCX: 00007fe64207c257 [ 77.500747][ T4199] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffee7fc5180 [ 77.508752][ T4199] RBP: 00007ffee7fc5180 R08: 00007ffee7fc6180 R09: 00000000ffffffff [ 77.516754][ T4199] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffee7fc6210 [ 77.525101][ T4199] R13: 00007fe64211145c R14: 0000000000011aa9 R15: 00007ffee7fc6250 [ 77.533110][ T4199] [ 77.818330][ T4229] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 78.161288][ T4407] netlink: 32 bytes leftover after parsing attributes in process `syz.2.43'. [ 78.542496][ T4229] libceph: mon0 (2)127.0.0.1:20000 socket closed (con state V2_BANNER_PREFIX) [ 78.552213][ T4389] ceph: No mds server is up or the cluster is laggy [ 78.791377][ T4431] ip_tables: iptables: counters copy to user failed while replacing table [ 78.823869][ T4430] netlink: 40 bytes leftover after parsing attributes in process `syz.0.53'. [ 78.863302][ T4430] netlink: 44 bytes leftover after parsing attributes in process `syz.0.53'. [ 79.276558][ T7] cfg80211: failed to load regulatory.db [ 79.770256][ T4473] netlink: 4 bytes leftover after parsing attributes in process `syz.3.72'. [ 80.035722][ T4486] IPVS: sync thread started: state = BACKUP, mcast_ifn = syz_tun, syncid = 0, id = 0 [ 80.374403][ T4498] netlink: 'syz.1.83': attribute type 4 has an invalid length. [ 80.824907][ T4518] x_tables: duplicate underflow at hook 3 [ 81.661179][ T4528] syz.0.93 (4528) used greatest stack depth: 18640 bytes left [ 82.341978][ T4565] svc: failed to register nfsdv3 RPC service (errno 111). [ 82.385084][ T4565] svc: failed to register nfsaclv3 RPC service (errno 111). [ 82.571326][ T4583] netlink: 36 bytes leftover after parsing attributes in process `syz.0.110'. [ 82.644691][ T4574] ================================================================== [ 82.653003][ T4574] BUG: KASAN: use-after-free in nfsd_create_serv+0x11b/0x700 [ 82.660414][ T4574] Write of size 4 at addr ffff888062201050 by task syz.4.106/4574 [ 82.668253][ T4574] [ 82.670601][ T4574] CPU: 1 PID: 4574 Comm: syz.4.106 Not tainted syzkaller #0 [ 82.677912][ T4574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 82.687990][ T4574] Call Trace: [ 82.691294][ T4574] [ 82.694248][ T4574] dump_stack_lvl+0x188/0x250 [ 82.698967][ T4574] ? show_regs_print_info+0x20/0x20 [ 82.704203][ T4574] ? _printk+0xda/0x130 [ 82.708393][ T4574] ? nfsd_create_serv+0x11b/0x700 [ 82.713448][ T4574] ? load_image+0x410/0x410 [ 82.717980][ T4574] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 82.723480][ T4574] print_address_description+0x60/0x2d0 [ 82.729067][ T4574] ? nfsd_create_serv+0x11b/0x700 [ 82.734122][ T4574] kasan_report+0xdf/0x130 [ 82.738578][ T4574] ? nfsd_create_serv+0x11b/0x700 [ 82.743643][ T4574] kasan_check_range+0x235/0x290 [ 82.748626][ T4574] nfsd_create_serv+0x11b/0x700 [ 82.753516][ T4574] ? _parse_integer_limit+0x195/0x1d0 [ 82.758922][ T4574] ? nfsd+0x2d0/0x2d0 [ 82.762941][ T4574] ? simple_strntoull+0x10e/0x180 [ 82.768008][ T4574] ? simple_strtoull+0x30/0x30 [ 82.772808][ T4574] ? qword_get+0x5a5/0x640 [ 82.777263][ T4574] write_ports+0x526/0xb80 [ 82.781713][ T4574] ? write_versions+0xbb0/0xbb0 [ 82.786608][ T4574] ? __might_fault+0xb3/0x110 [ 82.791319][ T4574] ? _copy_from_user+0x111/0x170 [ 82.796296][ T4574] ? simple_transaction_get+0x119/0x140 [ 82.801889][ T4574] nfsctl_transaction_write+0x105/0x150 [ 82.807473][ T4574] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 82.813138][ T4574] vfs_write+0x304/0xd70 [ 82.817420][ T4574] ? file_end_write+0x250/0x250 [ 82.822327][ T4574] ? mutex_lock_nested+0x17/0x20 [ 82.827296][ T4574] ? __fdget_pos+0x2bf/0x370 [ 82.831911][ T4574] ? ksys_write+0x70/0x260 [ 82.836359][ T4574] ksys_write+0x153/0x260 [ 82.840716][ T4574] ? __ia32_sys_read+0x80/0x80 [ 82.845507][ T4574] ? lockdep_hardirqs_on+0x94/0x140 [ 82.850741][ T4574] do_syscall_64+0x4c/0xa0 [ 82.855179][ T4574] ? clear_bhb_loop+0x30/0x80 [ 82.859881][ T4574] ? clear_bhb_loop+0x30/0x80 [ 82.864591][ T4574] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 82.870511][ T4574] RIP: 0033:0x7f45ca44a019 [ 82.874968][ T4574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.894738][ T4574] RSP: 002b:00007f45c8681028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 82.903191][ T4574] RAX: ffffffffffffffda RBX: 00007f45ca6d2090 RCX: 00007f45ca44a019 [ 82.911196][ T4574] RDX: 0000000000000002 RSI: 0000200000000540 RDI: 0000000000000006 [ 82.919201][ T4574] RBP: 00007f45ca4e100c R08: 0000000000000000 R09: 0000000000000000 [ 82.927204][ T4574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.935214][ T4574] R13: 00007f45ca6d2128 R14: 00007f45ca6d2090 R15: 00007ffeae5d3de8 [ 82.943235][ T4574] [ 82.946285][ T4574] [ 82.948626][ T4574] Allocated by task 4565: [ 82.952968][ T4574] __kasan_kmalloc+0xaf/0xe0 [ 82.957639][ T4574] __svc_create+0x60/0x9d0 [ 82.962087][ T4574] svc_create_pooled+0x62f/0x810 [ 82.967056][ T4574] nfsd_create_serv+0x2f9/0x700 [ 82.972036][ T4574] nfsd_svc+0x132/0x9e0 [ 82.976223][ T4574] write_threads+0x2ea/0x350 [ 82.980835][ T4574] nfsctl_transaction_write+0x105/0x150 [ 82.986405][ T4574] vfs_write+0x304/0xd70 [ 82.990677][ T4574] ksys_write+0x153/0x260 [ 82.995037][ T4574] do_syscall_64+0x4c/0xa0 [ 82.999484][ T4574] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 83.005401][ T4574] [ 83.007737][ T4574] Freed by task 4565: [ 83.011726][ T4574] kasan_set_track+0x4b/0x70 [ 83.016340][ T4574] kasan_set_free_info+0x1f/0x40 [ 83.021304][ T4574] ____kasan_slab_free+0xd5/0x110 [ 83.026348][ T4574] slab_free_freelist_hook+0xec/0x170 [ 83.031745][ T4574] kfree+0xef/0x2a0 [ 83.035584][ T4574] nfsd_svc+0x7cf/0x9e0 [ 83.039761][ T4574] write_threads+0x2ea/0x350 [ 83.044376][ T4574] nfsctl_transaction_write+0x105/0x150 [ 83.049954][ T4574] vfs_write+0x304/0xd70 [ 83.054232][ T4574] ksys_write+0x153/0x260 [ 83.058588][ T4574] do_syscall_64+0x4c/0xa0 [ 83.063063][ T4574] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 83.068981][ T4574] [ 83.071328][ T4574] The buggy address belongs to the object at ffff888062201000 [ 83.071328][ T4574] which belongs to the cache kmalloc-512 of size 512 [ 83.085490][ T4574] The buggy address is located 80 bytes inside of [ 83.085490][ T4574] 512-byte region [ffff888062201000, ffff888062201200) [ 83.098712][ T4574] The buggy address belongs to the page: [ 83.104369][ T4574] page:ffffea0001888000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x62200 [ 83.114665][ T4574] head:ffffea0001888000 order:2 compound_mapcount:0 compound_pincount:0 [ 83.123297][ T4574] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 83.131583][ T4574] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888016c41c80 [ 83.140400][ T4574] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 83.149006][ T4574] page dumped because: kasan: bad access detected [ 83.155996][ T4574] page_owner tracks the page as allocated [ 83.161731][ T4574] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4199, ts 63277231823, free_ts 22012139315 [ 83.180865][ T4574] get_page_from_freelist+0x24f6/0x2670 [ 83.186465][ T4574] __alloc_pages+0x1ee/0x480 [ 83.191106][ T4574] new_slab+0xc0/0x4b0 [ 83.195194][ T4574] ___slab_alloc+0x807/0xdd0 [ 83.199807][ T4574] kmem_cache_alloc_trace+0xf9/0x290 [ 83.205119][ T4574] device_add+0xb2/0x1050 [ 83.209482][ T4574] netdev_register_kobject+0x184/0x320 [ 83.214963][ T4574] register_netdevice+0x10e8/0x1720 [ 83.220190][ T4574] vxcan_newlink+0x53f/0x650 [ 83.224804][ T4574] rtnl_newlink+0x139e/0x1920 [ 83.229506][ T4574] rtnetlink_rcv_msg+0x7f1/0xf10 [ 83.234471][ T4574] netlink_rcv_skb+0x1e9/0x430 [ 83.239275][ T4574] netlink_unicast+0x78f/0x940 [ 83.244069][ T4574] netlink_sendmsg+0x8ba/0xbe0 [ 83.248866][ T4574] __sys_sendto+0x46d/0x620 [ 83.253393][ T4574] __x64_sys_sendto+0xda/0xf0 [ 83.258099][ T4574] page last free stack trace: [ 83.262794][ T4574] free_unref_page_prepare+0x637/0x6c0 [ 83.268278][ T4574] free_unref_page+0x8f/0x2a0 [ 83.272979][ T4574] free_contig_range+0x96/0xf0 [ 83.277774][ T4574] destroy_args+0xef/0xa00 [ 83.282224][ T4574] debug_vm_pgtable+0x321/0x380 [ 83.287101][ T4574] do_one_initcall+0x272/0x730 [ 83.290665][ T4605] x_tables: duplicate underflow at hook 2 [ 83.291888][ T4574] do_initcall_level+0x13d/0x1f0 [ 83.291943][ T4574] do_initcalls+0x4b/0x90 [ 83.306936][ T4574] kernel_init_freeable+0x3d5/0x560 [ 83.312160][ T4574] kernel_init+0x19/0x1b0 [ 83.316514][ T4574] ret_from_fork+0x1f/0x30 [ 83.320950][ T4574] [ 83.323299][ T4574] Memory state around the buggy address: [ 83.328954][ T4574] ffff888062200f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 83.337042][ T4574] ffff888062200f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 83.345126][ T4574] >ffff888062201000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 83.353208][ T4574] ^ [ 83.359901][ T4574] ffff888062201080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 83.368241][ T4574] ffff888062201100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 83.376556][ T4574] ================================================================== [ 83.384627][ T4574] Disabling lock debugging due to kernel taint [ 83.456899][ T4574] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 83.464142][ T4574] CPU: 1 PID: 4574 Comm: syz.4.106 Tainted: G B syzkaller #0 [ 83.472820][ T4574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 83.483006][ T4574] Call Trace: [ 83.486299][ T4574] [ 83.489234][ T4574] dump_stack_lvl+0x188/0x250 [ 83.493919][ T4574] ? show_regs_print_info+0x20/0x20 [ 83.499120][ T4574] ? load_image+0x410/0x410 [ 83.503630][ T4574] panic+0x2f8/0x850 [ 83.507526][ T4574] ? asm_common_interrupt+0x22/0x40 [ 83.512725][ T4574] ? bpf_jit_dump+0xd0/0xd0 [ 83.517229][ T4574] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 83.523207][ T4574] ? _raw_spin_unlock+0x40/0x40 [ 83.528069][ T4574] ? nfsd_create_serv+0x11b/0x700 [ 83.533090][ T4574] check_panic_on_warn+0x80/0xa0 [ 83.538025][ T4574] ? nfsd_create_serv+0x11b/0x700 [ 83.543050][ T4574] end_report+0x6d/0xf0 [ 83.547215][ T4574] kasan_report+0x102/0x130 [ 83.551719][ T4574] ? nfsd_create_serv+0x11b/0x700 [ 83.556747][ T4574] kasan_check_range+0x235/0x290 [ 83.561684][ T4574] nfsd_create_serv+0x11b/0x700 [ 83.566531][ T4574] ? _parse_integer_limit+0x195/0x1d0 [ 83.571901][ T4574] ? nfsd+0x2d0/0x2d0 [ 83.575879][ T4574] ? simple_strntoull+0x10e/0x180 [ 83.580902][ T4574] ? simple_strtoull+0x30/0x30 [ 83.585662][ T4574] ? qword_get+0x5a5/0x640 [ 83.590080][ T4574] write_ports+0x526/0xb80 [ 83.594493][ T4574] ? write_versions+0xbb0/0xbb0 [ 83.599345][ T4574] ? __might_fault+0xb3/0x110 [ 83.604020][ T4574] ? _copy_from_user+0x111/0x170 [ 83.608957][ T4574] ? simple_transaction_get+0x119/0x140 [ 83.614500][ T4574] nfsctl_transaction_write+0x105/0x150 [ 83.620129][ T4574] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 83.625760][ T4574] vfs_write+0x304/0xd70 [ 83.630003][ T4574] ? file_end_write+0x250/0x250 [ 83.634873][ T4574] ? mutex_lock_nested+0x17/0x20 [ 83.639829][ T4574] ? __fdget_pos+0x2bf/0x370 [ 83.644414][ T4574] ? ksys_write+0x70/0x260 [ 83.648826][ T4574] ksys_write+0x153/0x260 [ 83.653152][ T4574] ? __ia32_sys_read+0x80/0x80 [ 83.657930][ T4574] ? lockdep_hardirqs_on+0x94/0x140 [ 83.663146][ T4574] do_syscall_64+0x4c/0xa0 [ 83.667572][ T4574] ? clear_bhb_loop+0x30/0x80 [ 83.672265][ T4574] ? clear_bhb_loop+0x30/0x80 [ 83.676948][ T4574] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 83.682939][ T4574] RIP: 0033:0x7f45ca44a019 [ 83.687358][ T4574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.706961][ T4574] RSP: 002b:00007f45c8681028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 83.715377][ T4574] RAX: ffffffffffffffda RBX: 00007f45ca6d2090 RCX: 00007f45ca44a019 [ 83.723345][ T4574] RDX: 0000000000000002 RSI: 0000200000000540 RDI: 0000000000000006 [ 83.731312][ T4574] RBP: 00007f45ca4e100c R08: 0000000000000000 R09: 0000000000000000 [ 83.739284][ T4574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.747254][ T4574] R13: 00007f45ca6d2128 R14: 00007f45ca6d2090 R15: 00007ffeae5d3de8 [ 83.755228][ T4574] [ 83.758322][ T4574] Kernel Offset: disabled [ 83.762643][ T4574] Rebooting in 86400 seconds..