last executing test programs: 1m33.568174998s ago: executing program 1 (id=9): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@remote, 0x1234, 0x6c}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x49, 0x3, {{'deflate\x00'}, 0x0, '\x00'}}]}, 0x13c}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x6c, 0x0, @remote, @local}, "12345678901234567890"}}}}, 0x0) 1m33.421968962s ago: executing program 1 (id=10): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='nfsd\x00', &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x6) bind(r0, &(0x7f0000000100)=@in={0x2, 0x801, @loopback}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='3\n\x00', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='1\n\x00', 0x2) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000440)='127.0.0.1:/\x00', &(0x7f0000000480)='./mnt\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049,proto=tcp,clientaddr=127.0.0.1\x00']) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/file0\x00', 0x0, 0x0) close(r3) 1m31.293238864s ago: executing program 0 (id=21): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x38, r1, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1001001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1122334455667788}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8877665544332211}]}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x123, 0x234, {0x15}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "000102030405060708090a0b0c0d0e0f10111213"}}]}]}, 0x54}}, 0x0) 1m31.219995275s ago: executing program 0 (id=22): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000300)='127.0.0.1:/\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='addr=127.0.0.1,port=20000,proto=tcp,vers=4.1,noresvport\x00']) 1m30.352089427s ago: executing program 0 (id=23): socket$inet(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc_mnt\x00', 0x1ed) mount(&(0x7f0000000240)=@filename='proc\x00', &(0x7f0000000280)='./proc_mnt\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/24/smp_affinity\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='1', 0x1) write(0xffffffffffffffff, &(0x7f0000000300), 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, &(0x7f0000000300)='1', 0x1) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r3, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/29/smp_affinity\x00', 0x1, 0x0) write(r4, &(0x7f0000000300)='1\x00', 0x2) write(0xffffffffffffffff, &(0x7f0000000300)='1\x00', 0x2) 1m30.314840518s ago: executing program 0 (id=24): mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/ipv4/conf/all/accept_source_route\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='1\x00', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv4/conf/default/accept_source_route\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='1\x00', 0x1) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/conf/syz_tun/accept_source_route\x00', 0x1, 0x0) write(r2, &(0x7f0000000100)='1\x00', 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x0, @private=0xa010101}, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)='syz_tun\x00'}) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x7, 0x4, 0x0, 0x0, 0x28, 0x100, 0x0, 0x40, 0x11, 0x0, @remote, @private=0xa010101, {[@lsrr={0x83, 0x7, 0x4, [@private=0xa010102]}]}}, {0x0, 0x4000, 0xc, 0x0, @opaque="12345678"}}}}}, 0x0) 1m30.273448179s ago: executing program 0 (id=25): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./rpc_pipe\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./rpc_pipe\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, 0x0) mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000380)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=tcp\x00') mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000400)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=tcp,nolock,rsize=1024,wsize=1024\x00') mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000480)='addr=127.0.0.1,vers=2,proto=udp\x00') mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000500)='nfs4\x00', 0x0, &(0x7f0000000540)='addr=127.0.0.1,port=2049,proto=tcp,clientaddr=127.0.0.1\x00') 1m29.406889121s ago: executing program 0 (id=26): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='rpc_pipefs\x00', &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000c00)='sec\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000d00)='krb5\x00', 0x0) r0 = fsopen(&(0x7f0000001000)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x0) nanosleep(&(0x7f0000000e00)={0x0, 0x7a120}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async) nanosleep(&(0x7f0000000e00)={0x0, 0xf4240}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 1m18.365209962s ago: executing program 32 (id=10): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='nfsd\x00', &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x6) bind(r0, &(0x7f0000000100)=@in={0x2, 0x801, @loopback}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='3\n\x00', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='1\n\x00', 0x2) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000440)='127.0.0.1:/\x00', &(0x7f0000000480)='./mnt\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049,proto=tcp,clientaddr=127.0.0.1\x00']) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/file0\x00', 0x0, 0x0) close(r3) 1m17.298688238s ago: executing program 33 (id=16): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='udp 2049\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='2\x00', 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, &(0x7f0000000200)="000000010000000000000001000000010000000100000001", 0x18, 0x0, &(0x7f0000000240)={0x2, 0x801, @loopback}, 0x10) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) 1m17.251102279s ago: executing program 34 (id=11): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='tcp 2049\x00', 0x9) write(r0, &(0x7f0000000180)='-tcp 2049\x00', 0xa) umount2(&(0x7f0000000040)='./nfsd\x00', 0x2) 1m16.183864385s ago: executing program 35 (id=19): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x777) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='3\x00', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000500)='0\x00', 0x2) close(r2) 1m14.157989455s ago: executing program 36 (id=26): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='rpc_pipefs\x00', &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000c00)='sec\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000d00)='krb5\x00', 0x0) r0 = fsopen(&(0x7f0000001000)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x0) nanosleep(&(0x7f0000000e00)={0x0, 0x7a120}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async) nanosleep(&(0x7f0000000e00)={0x0, 0xf4240}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 1m11.840472052s ago: executing program 5 (id=33): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x38, r1, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1001001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1122334455667788}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8877665544332211}]}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x123, 0x234, {0x15}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "000102030405060708090a0b0c0d0e0f10111213"}}]}]}, 0x54}}, 0x0) 1m11.556881049s ago: executing program 5 (id=34): socket$inet(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc_mnt\x00', 0x1ed) mount(&(0x7f0000000240)=@filename='proc\x00', &(0x7f0000000280)='./proc_mnt\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/24/smp_affinity\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='1', 0x1) write(0xffffffffffffffff, &(0x7f0000000300), 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, &(0x7f0000000300)='1', 0x1) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r3, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/29/smp_affinity\x00', 0x1, 0x0) write(r4, &(0x7f0000000300)='1\x00', 0x2) write(0xffffffffffffffff, &(0x7f0000000300)='1\x00', 0x2) 1m11.423887093s ago: executing program 5 (id=35): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, 0x0, &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/ipv4/conf/all/accept_source_route\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='1\x00', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv4/conf/default/accept_source_route\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='1\x00', 0x1) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/conf/syz_tun/accept_source_route\x00', 0x1, 0x0) write(r2, &(0x7f0000000100)='1\x00', 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x0, @private=0xa010101}, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)='syz_tun\x00'}) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x7, 0x4, 0x0, 0x0, 0x28, 0x100, 0x0, 0x40, 0x11, 0x0, @remote, @private=0xa010101, {[@lsrr={0x83, 0x7, 0x4, [@private=0xa010102]}]}}, {0x0, 0x4000, 0xc, 0x0, @opaque="12345678"}}}}}, 0x0) 1m11.264113607s ago: executing program 5 (id=36): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/self/make-it-fail\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='1\n\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='1\n\x00', 0x2) 1m10.869080147s ago: executing program 5 (id=37): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./rpc_pipe\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./rpc_pipe\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, 0x0) mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000380)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=tcp\x00') mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000400)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=tcp,nolock,rsize=1024,wsize=1024\x00') mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000480)='addr=127.0.0.1,vers=2,proto=udp\x00') mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000500)='nfs4\x00', 0x0, &(0x7f0000000540)='addr=127.0.0.1,port=2049,proto=tcp,clientaddr=127.0.0.1\x00') 1m9.89011426s ago: executing program 5 (id=38): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000150)=@setlink={0x3c, 0x13, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syzkaller0\x00'}, @IFLA_NET_NS_FD={0x8, 0x1c, 0xc9}]}, 0x3c}}, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000500)={@val={0x0, 0x805}, @void, @x25={0x0, 0x0, 0x0, "0000010b11123400"}}, 0x10) 1m8.798897198s ago: executing program 6 (id=28): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) r0 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x0) r1 = fsopen(&(0x7f0000000e00)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x0) r2 = fsopen(&(0x7f0000001000)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000e00)={0x0, 0x7a120}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000e00)={0x0, 0xf4240}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 1m8.550948764s ago: executing program 6 (id=39): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00'}) ioctl$sock_ifreq(r0, 0x89a2, &(0x7f0000000100)={'bridge0\x00', @ifru_ivalue=0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={&(0x7f0000000140), 0xc, &(0x7f0000000010)={&(0x7f0000000020)=@bridge_setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x3c}}, 0x0) syz_emit_ethernet(0x1f, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c2000000000000000000001142420300"/33], 0x0) 1m8.536605164s ago: executing program 7 (id=29): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040b90661400001010200010902200001010080320904000002ff0000000705810200020007050202000200"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) r1 = socket(0x8, 0x2, 0x0) setsockopt(r1, 0x108, 0x42020054, &(0x7f0000000100)="000000000000000000000000000000000000000000000000000000000000000000000000000000000500"/84, 0x54) connect(r1, &(0x7f0000000200)=@generic={0x8, '\x00\x00#\x00'}, 0xc) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000350), 0x2, 0x0) ioctl(r2, 0x80047438, &(0x7f0000000380)='\x00\x00\x00\x00') ioctl(r1, 0x400261f2, &(0x7f0000000400)="01000000") syz_usb_ep_write(r0, 0x81, 0x35, &(0x7f0000000500)="0000023200112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677880000000000000028") nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 1m8.29204842s ago: executing program 6 (id=40): r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='vers\x00', &(0x7f0000000280)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000002c0)='proto\x00', &(0x7f0000000300)='udp\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000340)='mountproto\x00', &(0x7f0000000380)='udp\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='soft\x00', &(0x7f00000003e0)='\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='timeo\x00', &(0x7f0000000440)='1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000480)='retrans\x00', &(0x7f00000004c0)='1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 1m7.88413611s ago: executing program 6 (id=41): socket$inet(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc_mnt\x00', 0x1ed) mount(&(0x7f0000000240)=@filename='proc\x00', &(0x7f0000000280)='./proc_mnt\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/24/smp_affinity\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='1', 0x1) write(0xffffffffffffffff, &(0x7f0000000300), 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, &(0x7f0000000300)='1', 0x1) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r3, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/29/smp_affinity\x00', 0x1, 0x0) write(r4, &(0x7f0000000300)='1\x00', 0x2) write(0xffffffffffffffff, &(0x7f0000000300)='1\x00', 0x2) 1m7.86069053s ago: executing program 8 (id=30): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/ignore-gfp-wait\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='N\x00', 0x2) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000600)='hello\x00', 0x6) read(r2, &(0x7f0000000500), 0x100) write$P9_RVERSION(r2, &(0x7f0000000100)={0x14, 0x65, 0xffff, 0x1000, 0x7, '9P2000.L'}, 0x14) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0) write(r3, &(0x7f0000000100)='100\x00', 0x4) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x777) mount$9p_fd(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000300), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) 1m7.747558903s ago: executing program 6 (id=42): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, 0x0, &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/ipv4/conf/all/accept_source_route\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='1\x00', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv4/conf/default/accept_source_route\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='1\x00', 0x1) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/conf/syz_tun/accept_source_route\x00', 0x1, 0x0) write(r2, &(0x7f0000000100)='1\x00', 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x0, @private=0xa010101}, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)='syz_tun\x00'}) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x7, 0x4, 0x0, 0x0, 0x28, 0x100, 0x0, 0x40, 0x11, 0x0, @remote, @private=0xa010101, {[@lsrr={0x83, 0x7, 0x4, [@private=0xa010102]}]}}, {0x0, 0x4000, 0xc, 0x0, @opaque="12345678"}}}}}, 0x0) 1m7.648447826s ago: executing program 6 (id=43): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) syz_usb_connect(0x0, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40950b901700010102030109022700010100a0320904000003ffff0000070581031000080705820200020007050302000200"], 0x0) nanosleep(&(0x7f0000000200)={0x2}, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x20, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_EEE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, 0x2}]}]}, 0x20}}, 0x0) 1m6.945108463s ago: executing program 8 (id=44): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="b7000000020000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x6, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x0, 0xe, 0x0, &(0x7f0000000400)="00112233445566778899aabbccdd", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m6.779558707s ago: executing program 8 (id=45): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./rpc_pipe\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./rpc_pipe\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, 0x0) mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000380)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=tcp\x00') mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000400)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=tcp,nolock,rsize=1024,wsize=1024\x00') mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000480)='addr=127.0.0.1,vers=2,proto=udp\x00') mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000500)='nfs4\x00', 0x0, &(0x7f0000000540)='addr=127.0.0.1,port=2049,proto=tcp,clientaddr=127.0.0.1\x00') 1m6.330888668s ago: executing program 7 (id=46): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) r0 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x0) r1 = fsopen(&(0x7f0000000e00)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x0) r2 = fsopen(&(0x7f0000001000)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000e00)={0x0, 0x7a120}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000e00)={0x0, 0xf4240}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 1m6.150732713s ago: executing program 7 (id=47): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/failslab/probability\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='100', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/failslab/times\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='100', 0x3) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, &(0x7f0000000200)="00112233445566778899aabbccddeeff", 0x10, 0x0, &(0x7f0000000300)={0x2, 0x1234, @loopback}, 0x10) 23.928482081s ago: executing program 37 (id=38): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000150)=@setlink={0x3c, 0x13, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syzkaller0\x00'}, @IFLA_NET_NS_FD={0x8, 0x1c, 0xc9}]}, 0x3c}}, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000500)={@val={0x0, 0x805}, @void, @x25={0x0, 0x0, 0x0, "0000010b11123400"}}, 0x10) 23.672267628s ago: executing program 38 (id=45): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./rpc_pipe\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./rpc_pipe\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, 0x0) mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000380)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=tcp\x00') mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000400)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=tcp,nolock,rsize=1024,wsize=1024\x00') mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000480)='addr=127.0.0.1,vers=2,proto=udp\x00') mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000500)='nfs4\x00', 0x0, &(0x7f0000000540)='addr=127.0.0.1,port=2049,proto=tcp,clientaddr=127.0.0.1\x00') 23.633451878s ago: executing program 39 (id=43): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) syz_usb_connect(0x0, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40950b901700010102030109022700010100a0320904000003ffff0000070581031000080705820200020007050302000200"], 0x0) nanosleep(&(0x7f0000000200)={0x2}, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x20, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_EEE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, 0x2}]}]}, 0x20}}, 0x0) 23.606438239s ago: executing program 40 (id=47): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/failslab/probability\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='100', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/failslab/times\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='100', 0x3) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, &(0x7f0000000200)="00112233445566778899aabbccddeeff", 0x10, 0x0, &(0x7f0000000300)={0x2, 0x1234, @loopback}, 0x10) 22.670938122s ago: executing program 9 (id=54): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/ignore-gfp-wait\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='N\x00', 0x2) 22.530767616s ago: executing program 9 (id=55): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/ignore-gfp-wait\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='N\x00', 0x2) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000600)='hello\x00', 0x6) read(r2, &(0x7f0000000500), 0x100) write$P9_RVERSION(r2, &(0x7f0000000100)={0x14, 0x65, 0xffff, 0x1000, 0x7, '9P2000.L'}, 0x14) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0) write(r3, &(0x7f0000000100)='100\x00', 0x4) close(r3) 22.33990267s ago: executing program 9 (id=56): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) r0 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x0) r1 = fsopen(&(0x7f0000000e00)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x0) r2 = fsopen(&(0x7f0000001000)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000e00)={0x0, 0x7a120}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000e00)={0x0, 0xf4240}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 21.981363039s ago: executing program 9 (id=57): r0 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='addr\x00', &(0x7f0000000100)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='port\x00', &(0x7f0000000180)='0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 10.065633043s ago: executing program 9 (id=64): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x8008, @loopback}, 0x10) listen(r0, 0x5) r1 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='clientaddr\x00', &(0x7f0000000200)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000220)='vers\x00', &(0x7f0000000230)='4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='minorversion\x00', &(0x7f0000000280)='1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000002a0)='source\x00', &(0x7f00000002b0)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000002c0)='port\x00', &(0x7f00000002d0)='32776\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = accept(r0, 0x0, 0x0) write(r2, &(0x7f0000000300)="80000028000000010000000000000000", 0x10) 9.140168465s ago: executing program 9 (id=60): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='tcp 2049\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='1\n\x00', 0x2) 6.378727073s ago: executing program 3 (id=71): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='100\x00', 0x4) close(r0) 5.847961476s ago: executing program 3 (id=72): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) r0 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000600)='addr\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x0) r1 = fsopen(&(0x7f0000000e00)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x0) r2 = fsopen(&(0x7f0000001000)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000e00)={0x0, 0x7a120}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000e00)={0x0, 0xf4240}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 5.740256689s ago: executing program 1 (id=48): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000240)='./debug\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/kernel/slab/skbuff_head_cache/failslab\x00', 0x1, 0x0) write(r0, &(0x7f0000000450)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/failslab/cache-filter\x00', 0x1, 0x0) write(r1, &(0x7f0000000550)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./debug/failslab/probability\x00', 0x1, 0x0) write(r2, &(0x7f0000000650)='100', 0x3) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r3, &(0x7f0000000700)="00112233445566778899aabbccddeeff", 0x10, 0x0, &(0x7f0000000750)={0x2, 0x1234, @loopback}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/self/fail-nth\x00', 0x1, 0x0) write(r4, &(0x7f0000000850)='2', 0x1) sendto$inet(r3, &(0x7f0000000700)="00112233445566778899aabbccddeeff", 0x10, 0x0, &(0x7f0000000750)={0x2, 0x1234, @loopback}, 0x10) 5.400110737s ago: executing program 3 (id=74): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) r1 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='vers\x00', &(0x7f0000000280)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000002c0)='mountport\x00', &(0x7f0000000300)='2049\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000340)='port\x00', &(0x7f0000000380)='0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = accept4(r0, &(0x7f0000000400)=@in={0x2, 0x0, @loopback}, &(0x7f0000000500)=0x10, 0x0) close(r2) 4.810562621s ago: executing program 1 (id=79): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000380)='N\x00', 0x2) 4.600136217s ago: executing program 1 (id=81): r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='mon_addr\x00', &(0x7f0000000200)='127.0.0.1:6789\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='source\x00', &(0x7f0000000400)='127.0.0.1:6789:/tmp\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 4.46651281s ago: executing program 3 (id=84): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) listen(r0, 0x5) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @local}, "0100001400000000"}}}}, 0x0) 4.263982175s ago: executing program 3 (id=86): socket$inet(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc_mnt\x00', 0x1ed) mount(&(0x7f0000000240)=@filename='proc\x00', &(0x7f0000000280)='./proc_mnt\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/24/smp_affinity\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='1', 0x1) write(0xffffffffffffffff, &(0x7f0000000300), 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, &(0x7f0000000300)='1', 0x1) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r3, &(0x7f0000000300), 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/29/smp_affinity\x00', 0x1, 0x0) write(r4, &(0x7f0000000300)='1\x00', 0x2) write(0xffffffffffffffff, &(0x7f0000000300)='1\x00', 0x2) 4.166807057s ago: executing program 3 (id=88): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={&(0x7f0000000000), 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}}, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000100)={&(0x7f0000000000), 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x18, 0x1401, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) 3.451766035s ago: executing program 1 (id=96): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000640)='-3 +4\n\x00', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='udp 2049\n\x00', 0x9) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000780)='1\n\x00', 0x2) close(r3) r4 = socket$inet(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) write(r4, &(0x7f00000007c0)="000000010000000000000002000186a300000004000000010000000000000000000000000000000000000000000000000000000100000027", 0x38) nanosleep(&(0x7f0000000100)={0x0, 0x5f5e100}, 0x0) read(r1, &(0x7f0000000200)=""/1000, 0x3e8) 1.739384887s ago: executing program 2 (id=110): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000100)='1\x00', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv4/conf/default/accept_source_route\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='1\x00', 0x1) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/conf/syz_tun/accept_source_route\x00', 0x1, 0x0) write(r2, &(0x7f0000000100)='1\x00', 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x0, @private=0xa010101}, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)='syz_tun\x00'}) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x7, 0x4, 0x0, 0x0, 0x28, 0x100, 0x0, 0x40, 0x11, 0x0, @remote, @private=0xa010101, {[@lsrr={0x83, 0x7, 0x4, [@private=0xa010102]}]}}, {0x0, 0x4000, 0xc, 0x0, @opaque="12345678"}}}}}, 0x0) 1.738919287s ago: executing program 4 (id=111): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='dummy0\x00', 0x7) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x1, 0x0, 0x12}, 0x10) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x1, 0x0, 0x1, 0x0, 0x12, @remote}, 0x10) (async) syz_emit_ethernet(0x13, &(0x7f0000000200)={@local, @remote, @void, {@llc={0x4, {@llc={0x12, 0x12, 's\x00\x00'}}}}}, 0x0) syz_emit_ethernet(0x12, &(0x7f0000000300)={@local, @remote, @void, {@llc={0x4, {@llc={0x12, 0x12, "0108"}}}}}, 0x0) 1.576010041s ago: executing program 2 (id=112): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x22}, @in=@dev={0xac, 0x14, 0x14, 0x22}, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@dev={0xac, 0x14, 0x14, 0x22}, 0x1234, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x22}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x1, 0x2}}, 0xf0}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x22}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x88, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x22}, 0x1234, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x22}}, {{@in=@dev={0xac, 0x14, 0x14, 0x22}, 0x5678, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x22}}]}]}, 0xfc}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 1.156959531s ago: executing program 2 (id=113): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) r0 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x0) r1 = fsopen(&(0x7f0000000e00)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x0) r2 = fsopen(&(0x7f0000001000)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000e00)={0x0, 0x7a120}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000e00)={0x0, 0xf4240}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 806.65384ms ago: executing program 4 (id=114): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@loopback, 0x1234, 0x32}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x2, {{'digest_null\x00'}}}, @algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x184}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x0, {{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x14, [{{@in=@loopback, 0x1234, 0x32}, 0x2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x11) sendto$inet(r1, &(0x7f0000000200)='hello', 0x5, 0x0, &(0x7f0000000300)={0x2, 0x1234, @loopback}, 0x10) 544.021597ms ago: executing program 4 (id=115): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/ignore-gfp-wait\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='N\x00', 0x2) 526.994857ms ago: executing program 4 (id=116): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) r1 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='vers\x00', &(0x7f0000000280)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000002c0)='mountport\x00', &(0x7f0000000300)='2049\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000340)='port\x00', &(0x7f0000000380)='0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = accept4(r0, &(0x7f0000000400)=@in={0x2, 0x0, @loopback}, &(0x7f0000000500)=0x10, 0x0) close(r2) close(r0) 420.90744ms ago: executing program 4 (id=117): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/ignore-gfp-wait\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='N\x00', 0x2) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000600)='hello\x00', 0x6) read(r2, &(0x7f0000000500), 0x100) write$P9_RVERSION(r2, &(0x7f0000000100)={0x14, 0x65, 0xffff, 0x1000, 0x7, '9P2000.L'}, 0x14) close(0xffffffffffffffff) 224.034554ms ago: executing program 4 (id=118): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc, 0x0}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000400)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa, 0x0}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x14, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8, 0x0}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x1}, @empty, @empty}}]}, {0x4, 0x0}, {0xc, 0x0}, {0xc, 0x0}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="000008004500001c0001000040017cce0a0000010a0000020800f7ed00000000"], 0x20) 218.551185ms ago: executing program 2 (id=119): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='bridge0\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@setlink={0x50, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x50}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syzkaller0\x00'}, @IFLA_MASTER={0x8, 0xa, 0x1}]}, 0x3c}}, 0x0) syz_emit_ethernet(0x23, &(0x7f0000000400)=ANY=[@ANYBLOB="0180c2000000000000000000002642420300"/40], 0x0) 141.264076ms ago: executing program 2 (id=120): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000017000100"], 0x10}}, 0x0) 0s ago: executing program 2 (id=121): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/module/rdma_rxe/parameters/add\x00', 0x1, 0x0) write(r0, &(0x7f0000000080)='eth0\x00', 0x5) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bind(r1, &(0x7f0000000100)=@in={0x2, 0x4e21, @loopback}, 0x10) listen(r1, 0x5) connect$inet(r2, &(0x7f0000000200)={0x2, 0x4e21, @loopback}, 0x10) accept(r1, 0x0, 0x0) close(r2) close(r1) kernel console output (not intermixed with test programs): x20/0x20 [ 135.256977][ C0] run_ksoftirqd+0xa4/0x100 [ 135.261501][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 135.266724][ C0] smpboot_thread_fn+0x520/0x990 [ 135.271722][ C0] kthread+0x42e/0x520 [ 135.275806][ C0] ? cpu_report_death+0x180/0x180 [ 135.280855][ C0] ? kthread_blkcg+0xd0/0xd0 [ 135.285471][ C0] ret_from_fork+0x1f/0x30 [ 135.289921][ C0] [ 135.292964][ C1] CPU: 1 PID: 3547 Comm: klogd Not tainted syzkaller #0 [ 135.293125][ C0] FAULT_INJECTION: forcing a failure. [ 135.293125][ C0] name failslab, interval 1, probability 100, space 0, times 11 [ 135.299943][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 135.322875][ C1] Call Trace: [ 135.326190][ C1] [ 135.329052][ C1] dump_stack_lvl+0x188/0x250 [ 135.333761][ C1] ? verify_lock_unused+0x140/0x140 [ 135.338981][ C1] ? show_regs_print_info+0x20/0x20 [ 135.344204][ C1] ? load_image+0x410/0x410 [ 135.348738][ C1] ? prandom_u32+0x217/0x250 [ 135.353360][ C1] should_fail+0x383/0x4b0 [ 135.357801][ C1] should_failslab+0x5/0x20 [ 135.362343][ C1] slab_pre_alloc_hook+0x51/0xc0 [ 135.367303][ C1] kmem_cache_alloc_node+0x47/0x2c0 [ 135.372517][ C1] ? __alloc_skb+0xf4/0x750 [ 135.377064][ C1] __alloc_skb+0xf4/0x750 [ 135.381412][ C1] ? wg_expired_zero_key_material+0x250/0x250 [ 135.387496][ C1] wg_packet_send_keepalive+0x61/0x2b0 [ 135.392975][ C1] ? wg_expired_zero_key_material+0x250/0x250 [ 135.399059][ C1] call_timer_fn+0x17b/0x540 [ 135.403691][ C1] ? wg_expired_zero_key_material+0x250/0x250 [ 135.409774][ C1] ? __run_timers+0x810/0x810 [ 135.414473][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 135.419684][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 135.424904][ C1] ? wg_expired_zero_key_material+0x250/0x250 [ 135.431013][ C1] __run_timers+0x56c/0x810 [ 135.435560][ C1] ? detach_timer+0x2b0/0x2b0 [ 135.440290][ C1] run_timer_softirq+0x63/0xf0 [ 135.445096][ C1] handle_softirqs+0x336/0x830 [ 135.449886][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 135.454778][ C1] ? do_softirq+0x210/0x210 [ 135.459299][ C1] ? hrtimer_interrupt+0x6a2/0x8b0 [ 135.464436][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 135.469665][ C1] __irq_exit_rcu+0x13b/0x230 [ 135.474383][ C1] ? irq_exit_rcu+0x20/0x20 [ 135.478915][ C1] irq_exit_rcu+0x5/0x20 [ 135.483177][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 135.488828][ C1] [ 135.491770][ C1] [ 135.494718][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 135.500721][ C1] RIP: 0010:preempt_schedule_irq+0xb6/0x160 [ 135.506646][ C1] Code: 00 00 43 c6 44 37 04 f8 74 0b 0f 0b 48 f7 03 08 00 00 00 74 7f bf 01 00 00 00 e8 f5 e6 89 f7 e8 e0 c7 b6 f7 fb bf 01 00 00 00 d5 b5 ff ff 43 c6 44 37 08 00 48 c7 44 24 40 00 00 00 00 9c 8f [ 135.526272][ C1] RSP: 0018:ffffc90002e5fac0 EFLAGS: 00000282 [ 135.532383][ C1] RAX: 2b623691f269f200 RBX: 0000000000000000 RCX: 2b623691f269f200 [ 135.540390][ C1] RDX: dffffc0000000000 RSI: ffffffff8a2b2be0 RDI: 0000000000000001 [ 135.548378][ C1] RBP: ffffc90002e5fb60 R08: ffffffff8d8b0def R09: 1ffffffff1b161bd [ 135.556364][ C1] R10: dffffc0000000000 R11: fffffbfff1b161be R12: 0000000000000000 [ 135.564353][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff920005cbf58 [ 135.572355][ C1] ? __cond_resched+0xd0/0xd0 [ 135.577060][ C1] ? rcu_irq_exit_check_preempt+0xdb/0x200 [ 135.582884][ C1] irqentry_exit+0x63/0x70 [ 135.587320][ C1] asm_sysvec_reschedule_ipi+0x16/0x20 [ 135.592819][ C1] RIP: 0010:dump_stack_lvl+0x20e/0x250 [ 135.598308][ C1] Code: e8 77 d5 c0 f7 48 bb 00 00 00 00 00 fc ff df 4d 85 ed 75 07 e8 63 d5 c0 f7 eb 06 e8 5c d5 c0 f7 fb 48 c7 44 24 20 0e 36 e0 45 <31> c0 49 89 04 1f 49 89 44 1f 08 65 48 8b 04 25 28 00 00 00 48 3b [ 135.617935][ C1] RSP: 0018:ffffc90002e5fc20 EFLAGS: 00000293 [ 135.624024][ C1] RAX: ffffffff89b82c24 RBX: dffffc0000000000 RCX: ffff88807da69dc0 [ 135.632037][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 135.640026][ C1] RBP: ffffc90002e5fd10 R08: 0000000000000003 R09: 0000000000000004 [ 135.648017][ C1] R10: dffffc0000000000 R11: fffffbfff183f6e0 R12: dffffc0000000004 [ 135.656008][ C1] R13: 0000000000000200 R14: 0000000000000000 R15: 1ffff920005cbf88 [ 135.664008][ C1] ? dump_stack_lvl+0x204/0x250 [ 135.668894][ C1] ? show_regs_print_info+0x20/0x20 [ 135.674132][ C1] ? load_image+0x410/0x410 [ 135.678664][ C1] ? prandom_u32+0x217/0x250 [ 135.683286][ C1] should_fail+0x383/0x4b0 [ 135.687728][ C1] should_failslab+0x5/0x20 [ 135.692246][ C1] slab_pre_alloc_hook+0x51/0xc0 [ 135.697200][ C1] ? sockfs_init_fs_context+0xa0/0xa0 [ 135.702588][ C1] ? sock_alloc_inode+0x17/0xb0 [ 135.707460][ C1] kmem_cache_alloc+0x3d/0x280 [ 135.712254][ C1] ? sockfs_init_fs_context+0xa0/0xa0 [ 135.717663][ C1] sock_alloc_inode+0x17/0xb0 [ 135.722393][ C1] ? sockfs_init_fs_context+0xa0/0xa0 [ 135.727795][ C1] new_inode_pseudo+0x5f/0x210 [ 135.732588][ C1] __sock_create+0x128/0x910 [ 135.737213][ C1] __sys_socket+0xe2/0x170 [ 135.741657][ C1] __x64_sys_socket+0x76/0x80 [ 135.746354][ C1] do_syscall_64+0x4c/0xa0 [ 135.750790][ C1] ? clear_bhb_loop+0x30/0x80 [ 135.755489][ C1] ? clear_bhb_loop+0x30/0x80 [ 135.760191][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 135.766100][ C1] RIP: 0033:0x7f5ee4323707 [ 135.770542][ C1] Code: 54 24 0c e8 6b ac ff ff 83 f8 ff 74 04 8b 44 24 0c 48 83 c4 18 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 e6 0c 00 f7 d8 64 89 01 48 [ 135.790321][ C1] RSP: 002b:00007ffed8fd6818 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 135.798766][ C1] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f5ee4323707 [ 135.806771][ C1] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 135.814763][ C1] RBP: 00007f5ee43af560 R08: 0000000000000073 R09: 0000000000000001 [ 135.822773][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 135.830773][ C1] R13: 00007ffed8fd6940 R14: 000000000000003a R15: 00007ffed8fd6940 [ 135.838791][ C1] [ 135.841832][ C0] CPU: 0 PID: 14 Comm: ksoftirqd/0 Not tainted syzkaller #0 [ 135.841869][ C1] FAULT_INJECTION: forcing a failure. [ 135.841869][ C1] name failslab, interval 1, probability 100, space 0, times 10 [ 135.849166][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 135.872076][ C0] Call Trace: [ 135.875379][ C0] [ 135.878332][ C0] dump_stack_lvl+0x188/0x250 [ 135.883037][ C0] ? show_regs_print_info+0x20/0x20 [ 135.888271][ C0] ? load_image+0x410/0x410 [ 135.892804][ C0] ? prandom_u32+0x217/0x250 [ 135.897425][ C0] should_fail+0x383/0x4b0 [ 135.901865][ C0] should_failslab+0x5/0x20 [ 135.906383][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 135.911612][ C0] kmem_cache_alloc_node+0x47/0x2c0 [ 135.916835][ C0] ? __alloc_skb+0xf4/0x750 [ 135.921362][ C0] __alloc_skb+0xf4/0x750 [ 135.925722][ C0] ndisc_alloc_skb+0xa6/0x420 [ 135.930424][ C0] ndisc_send_rs+0x271/0x700 [ 135.935036][ C0] ? ipv6_get_lladdr+0x33f/0x3b0 [ 135.939999][ C0] addrconf_rs_timer+0x367/0x640 [ 135.944960][ C0] ? detach_timer+0x33/0x2b0 [ 135.949672][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 135.955848][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 135.961934][ C0] call_timer_fn+0x17b/0x540 [ 135.966551][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 135.972643][ C0] ? __run_timers+0x810/0x810 [ 135.977352][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 135.982573][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 135.987787][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 135.993960][ C0] __run_timers+0x56c/0x810 [ 135.998486][ C0] ? lock_chain_count+0x20/0x20 [ 136.003369][ C0] ? detach_timer+0x2b0/0x2b0 [ 136.008069][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 136.014079][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 136.018959][ C0] run_timer_softirq+0x63/0xf0 [ 136.023748][ C0] handle_softirqs+0x336/0x830 [ 136.028542][ C0] ? run_ksoftirqd+0xa4/0x100 [ 136.033249][ C0] ? do_softirq+0x210/0x210 [ 136.037789][ C0] ? run_ksoftirqd+0x81/0x100 [ 136.042494][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 136.047718][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 136.053028][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 136.058278][ C0] run_ksoftirqd+0xa4/0x100 [ 136.062811][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 136.068151][ C0] smpboot_thread_fn+0x520/0x990 [ 136.073177][ C0] kthread+0x42e/0x520 [ 136.077273][ C0] ? cpu_report_death+0x180/0x180 [ 136.082319][ C0] ? kthread_blkcg+0xd0/0xd0 [ 136.086931][ C0] ret_from_fork+0x1f/0x30 [ 136.091388][ C0] [ 136.094424][ C1] CPU: 1 PID: 3547 Comm: klogd Not tainted syzkaller #0 [ 136.094581][ C0] FAULT_INJECTION: forcing a failure. [ 136.094581][ C0] name failslab, interval 1, probability 100, space 0, times 9 [ 136.101392][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 136.101408][ C1] Call Trace: [ 136.101419][ C1] [ 136.101428][ C1] dump_stack_lvl+0x188/0x250 [ 136.135110][ C1] ? verify_lock_unused+0x140/0x140 [ 136.140341][ C1] ? show_regs_print_info+0x20/0x20 [ 136.145561][ C1] ? load_image+0x410/0x410 [ 136.150093][ C1] ? prandom_u32+0x217/0x250 [ 136.154716][ C1] should_fail+0x383/0x4b0 [ 136.159159][ C1] should_failslab+0x5/0x20 [ 136.163682][ C1] slab_pre_alloc_hook+0x51/0xc0 [ 136.168641][ C1] kmem_cache_alloc_node+0x47/0x2c0 [ 136.173861][ C1] ? __alloc_skb+0xf4/0x750 [ 136.178390][ C1] __alloc_skb+0xf4/0x750 [ 136.182738][ C1] ? wg_expired_zero_key_material+0x250/0x250 [ 136.188823][ C1] wg_packet_send_keepalive+0x61/0x2b0 [ 136.194302][ C1] ? wg_expired_zero_key_material+0x250/0x250 [ 136.200415][ C1] call_timer_fn+0x17b/0x540 [ 136.205026][ C1] ? wg_expired_zero_key_material+0x250/0x250 [ 136.211115][ C1] ? __run_timers+0x810/0x810 [ 136.215823][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 136.221044][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 136.226270][ C1] ? wg_expired_zero_key_material+0x250/0x250 [ 136.232361][ C1] __run_timers+0x56c/0x810 [ 136.236900][ C1] ? detach_timer+0x2b0/0x2b0 [ 136.241614][ C1] run_timer_softirq+0x63/0xf0 [ 136.246403][ C1] handle_softirqs+0x336/0x830 [ 136.251194][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 136.256068][ C1] ? do_softirq+0x210/0x210 [ 136.260597][ C1] ? hrtimer_interrupt+0x6a2/0x8b0 [ 136.265744][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 136.270963][ C1] __irq_exit_rcu+0x13b/0x230 [ 136.275674][ C1] ? irq_exit_rcu+0x20/0x20 [ 136.280234][ C1] irq_exit_rcu+0x5/0x20 [ 136.284495][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 136.290151][ C1] [ 136.293097][ C1] [ 136.296041][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 136.302063][ C1] RIP: 0010:preempt_schedule_irq+0xb6/0x160 [ 136.307997][ C1] Code: 00 00 43 c6 44 37 04 f8 74 0b 0f 0b 48 f7 03 08 00 00 00 74 7f bf 01 00 00 00 e8 f5 e6 89 f7 e8 e0 c7 b6 f7 fb bf 01 00 00 00 d5 b5 ff ff 43 c6 44 37 08 00 48 c7 44 24 40 00 00 00 00 9c 8f [ 136.327623][ C1] RSP: 0018:ffffc90002e5fac0 EFLAGS: 00000282 [ 136.333713][ C1] RAX: 2b623691f269f200 RBX: 0000000000000000 RCX: 2b623691f269f200 [ 136.341705][ C1] RDX: dffffc0000000000 RSI: ffffffff8a2b2be0 RDI: 0000000000000001 [ 136.349699][ C1] RBP: ffffc90002e5fb60 R08: ffffffff8d8b0def R09: 1ffffffff1b161bd [ 136.357690][ C1] R10: dffffc0000000000 R11: fffffbfff1b161be R12: 0000000000000000 [ 136.365701][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff920005cbf58 [ 136.373713][ C1] ? __cond_resched+0xd0/0xd0 [ 136.378427][ C1] ? rcu_irq_exit_check_preempt+0xdb/0x200 [ 136.384261][ C1] irqentry_exit+0x63/0x70 [ 136.388702][ C1] asm_sysvec_reschedule_ipi+0x16/0x20 [ 136.394203][ C1] RIP: 0010:dump_stack_lvl+0x20e/0x250 [ 136.399689][ C1] Code: e8 77 d5 c0 f7 48 bb 00 00 00 00 00 fc ff df 4d 85 ed 75 07 e8 63 d5 c0 f7 eb 06 e8 5c d5 c0 f7 fb 48 c7 44 24 20 0e 36 e0 45 <31> c0 49 89 04 1f 49 89 44 1f 08 65 48 8b 04 25 28 00 00 00 48 3b [ 136.419833][ C1] RSP: 0018:ffffc90002e5fc20 EFLAGS: 00000293 [ 136.425924][ C1] RAX: ffffffff89b82c24 RBX: dffffc0000000000 RCX: ffff88807da69dc0 [ 136.433914][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 136.441905][ C1] RBP: ffffc90002e5fd10 R08: 0000000000000003 R09: 0000000000000004 [ 136.449897][ C1] R10: dffffc0000000000 R11: fffffbfff183f6e0 R12: dffffc0000000004 [ 136.457895][ C1] R13: 0000000000000200 R14: 0000000000000000 R15: 1ffff920005cbf88 [ 136.466005][ C1] ? dump_stack_lvl+0x204/0x250 [ 136.470886][ C1] ? show_regs_print_info+0x20/0x20 [ 136.476111][ C1] ? load_image+0x410/0x410 [ 136.480728][ C1] ? prandom_u32+0x217/0x250 [ 136.485343][ C1] should_fail+0x383/0x4b0 [ 136.489784][ C1] should_failslab+0x5/0x20 [ 136.494305][ C1] slab_pre_alloc_hook+0x51/0xc0 [ 136.499258][ C1] ? sockfs_init_fs_context+0xa0/0xa0 [ 136.504649][ C1] ? sock_alloc_inode+0x17/0xb0 [ 136.509518][ C1] kmem_cache_alloc+0x3d/0x280 [ 136.514298][ C1] ? sockfs_init_fs_context+0xa0/0xa0 [ 136.519695][ C1] sock_alloc_inode+0x17/0xb0 [ 136.524395][ C1] ? sockfs_init_fs_context+0xa0/0xa0 [ 136.529787][ C1] new_inode_pseudo+0x5f/0x210 [ 136.534573][ C1] __sock_create+0x128/0x910 [ 136.539216][ C1] __sys_socket+0xe2/0x170 [ 136.543660][ C1] __x64_sys_socket+0x76/0x80 [ 136.548355][ C1] do_syscall_64+0x4c/0xa0 [ 136.552795][ C1] ? clear_bhb_loop+0x30/0x80 [ 136.557488][ C1] ? clear_bhb_loop+0x30/0x80 [ 136.562180][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 136.568097][ C1] RIP: 0033:0x7f5ee4323707 [ 136.572547][ C1] Code: 54 24 0c e8 6b ac ff ff 83 f8 ff 74 04 8b 44 24 0c 48 83 c4 18 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 e6 0c 00 f7 d8 64 89 01 48 [ 136.592173][ C1] RSP: 002b:00007ffed8fd6818 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 136.600614][ C1] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f5ee4323707 [ 136.608608][ C1] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 136.616603][ C1] RBP: 00007f5ee43af560 R08: 0000000000000073 R09: 0000000000000001 [ 136.624593][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 136.632593][ C1] R13: 00007ffed8fd6940 R14: 000000000000003a R15: 00007ffed8fd6940 [ 136.640598][ C1] [ 136.643659][ C0] CPU: 0 PID: 14 Comm: ksoftirqd/0 Not tainted syzkaller #0 [ 136.643714][ C1] FAULT_INJECTION: forcing a failure. [ 136.643714][ C1] name failslab, interval 1, probability 100, space 0, times 8 [ 136.650985][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 136.651000][ C0] Call Trace: [ 136.651011][ C0] [ 136.680630][ C0] dump_stack_lvl+0x188/0x250 [ 136.685931][ C0] ? show_regs_print_info+0x20/0x20 [ 136.691207][ C0] ? load_image+0x410/0x410 [ 136.695764][ C0] ? prandom_u32+0x217/0x250 [ 136.700395][ C0] should_fail+0x383/0x4b0 [ 136.704844][ C0] should_failslab+0x5/0x20 [ 136.709376][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 136.714338][ C0] kmem_cache_alloc_node+0x47/0x2c0 [ 136.719561][ C0] ? __alloc_skb+0xf4/0x750 [ 136.724086][ C0] __alloc_skb+0xf4/0x750 [ 136.728459][ C0] ndisc_alloc_skb+0xa6/0x420 [ 136.733167][ C0] ndisc_send_rs+0x271/0x700 [ 136.737785][ C0] ? ipv6_get_lladdr+0x33f/0x3b0 [ 136.742742][ C0] addrconf_rs_timer+0x367/0x640 [ 136.747699][ C0] ? detach_timer+0x33/0x2b0 [ 136.752319][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 136.758413][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 136.764493][ C0] call_timer_fn+0x17b/0x540 [ 136.769104][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 136.775216][ C0] ? __run_timers+0x810/0x810 [ 136.779919][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 136.785174][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 136.790388][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 136.796485][ C0] __run_timers+0x56c/0x810 [ 136.801154][ C0] ? lock_chain_count+0x20/0x20 [ 136.806047][ C0] ? detach_timer+0x2b0/0x2b0 [ 136.810765][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 136.816799][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 136.821692][ C0] run_timer_softirq+0x63/0xf0 [ 136.826486][ C0] handle_softirqs+0x336/0x830 [ 136.831272][ C0] ? run_ksoftirqd+0xa4/0x100 [ 136.835969][ C0] ? do_softirq+0x210/0x210 [ 136.840491][ C0] ? run_ksoftirqd+0x81/0x100 [ 136.845183][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 136.850423][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 136.855732][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 136.860948][ C0] run_ksoftirqd+0xa4/0x100 [ 136.865480][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 136.870708][ C0] smpboot_thread_fn+0x520/0x990 [ 136.875673][ C0] kthread+0x42e/0x520 [ 136.879757][ C0] ? cpu_report_death+0x180/0x180 [ 136.884796][ C0] ? kthread_blkcg+0xd0/0xd0 [ 136.889401][ C0] ret_from_fork+0x1f/0x30 [ 136.893856][ C0] [ 136.896891][ C1] CPU: 1 PID: 3547 Comm: klogd Not tainted syzkaller #0 [ 136.897014][ C0] FAULT_INJECTION: forcing a failure. [ 136.897014][ C0] name failslab, interval 1, probability 100, space 0, times 7 [ 136.903860][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 136.903875][ C1] Call Trace: [ 136.903886][ C1] [ 136.903895][ C1] dump_stack_lvl+0x188/0x250 [ 136.937541][ C1] ? verify_lock_unused+0x140/0x140 [ 136.942768][ C1] ? show_regs_print_info+0x20/0x20 [ 136.947992][ C1] ? load_image+0x410/0x410 [ 136.952519][ C1] ? prandom_u32+0x217/0x250 [ 136.957136][ C1] should_fail+0x383/0x4b0 [ 136.961575][ C1] should_failslab+0x5/0x20 [ 136.966098][ C1] slab_pre_alloc_hook+0x51/0xc0 [ 136.971055][ C1] kmem_cache_alloc_node+0x47/0x2c0 [ 136.976273][ C1] ? __alloc_skb+0xf4/0x750 [ 136.980799][ C1] __alloc_skb+0xf4/0x750 [ 136.985147][ C1] ? wg_expired_zero_key_material+0x250/0x250 [ 136.991246][ C1] wg_packet_send_keepalive+0x61/0x2b0 [ 136.996768][ C1] ? wg_expired_zero_key_material+0x250/0x250 [ 137.002861][ C1] call_timer_fn+0x17b/0x540 [ 137.007484][ C1] ? wg_expired_zero_key_material+0x250/0x250 [ 137.013573][ C1] ? __run_timers+0x810/0x810 [ 137.018291][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 137.023512][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 137.028726][ C1] ? wg_expired_zero_key_material+0x250/0x250 [ 137.034809][ C1] __run_timers+0x56c/0x810 [ 137.039340][ C1] ? detach_timer+0x2b0/0x2b0 [ 137.044164][ C1] run_timer_softirq+0x63/0xf0 [ 137.048951][ C1] handle_softirqs+0x336/0x830 [ 137.053739][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 137.058617][ C1] ? do_softirq+0x210/0x210 [ 137.063139][ C1] ? hrtimer_interrupt+0x6a2/0x8b0 [ 137.068307][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 137.073530][ C1] __irq_exit_rcu+0x13b/0x230 [ 137.078225][ C1] ? irq_exit_rcu+0x20/0x20 [ 137.082762][ C1] irq_exit_rcu+0x5/0x20 [ 137.087029][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 137.092694][ C1] [ 137.095643][ C1] [ 137.098592][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 137.104613][ C1] RIP: 0010:preempt_schedule_irq+0xb6/0x160 [ 137.110526][ C1] Code: 00 00 43 c6 44 37 04 f8 74 0b 0f 0b 48 f7 03 08 00 00 00 74 7f bf 01 00 00 00 e8 f5 e6 89 f7 e8 e0 c7 b6 f7 fb bf 01 00 00 00 d5 b5 ff ff 43 c6 44 37 08 00 48 c7 44 24 40 00 00 00 00 9c 8f [ 137.130168][ C1] RSP: 0018:ffffc90002e5fac0 EFLAGS: 00000282 [ 137.136257][ C1] RAX: 2b623691f269f200 RBX: 0000000000000000 RCX: 2b623691f269f200 [ 137.144246][ C1] RDX: dffffc0000000000 RSI: ffffffff8a2b2be0 RDI: 0000000000000001 [ 137.152228][ C1] RBP: ffffc90002e5fb60 R08: ffffffff8d8b0def R09: 1ffffffff1b161bd [ 137.160212][ C1] R10: dffffc0000000000 R11: fffffbfff1b161be R12: 0000000000000000 [ 137.168196][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff920005cbf58 [ 137.176198][ C1] ? __cond_resched+0xd0/0xd0 [ 137.180912][ C1] ? rcu_irq_exit_check_preempt+0xdb/0x200 [ 137.186746][ C1] irqentry_exit+0x63/0x70 [ 137.191184][ C1] asm_sysvec_reschedule_ipi+0x16/0x20 [ 137.196663][ C1] RIP: 0010:dump_stack_lvl+0x20e/0x250 [ 137.202139][ C1] Code: e8 77 d5 c0 f7 48 bb 00 00 00 00 00 fc ff df 4d 85 ed 75 07 e8 63 d5 c0 f7 eb 06 e8 5c d5 c0 f7 fb 48 c7 44 24 20 0e 36 e0 45 <31> c0 49 89 04 1f 49 89 44 1f 08 65 48 8b 04 25 28 00 00 00 48 3b [ 137.221786][ C1] RSP: 0018:ffffc90002e5fc20 EFLAGS: 00000293 [ 137.227873][ C1] RAX: ffffffff89b82c24 RBX: dffffc0000000000 RCX: ffff88807da69dc0 [ 137.235864][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 137.243855][ C1] RBP: ffffc90002e5fd10 R08: 0000000000000003 R09: 0000000000000004 [ 137.251854][ C1] R10: dffffc0000000000 R11: fffffbfff183f6e0 R12: dffffc0000000004 [ 137.259864][ C1] R13: 0000000000000200 R14: 0000000000000000 R15: 1ffff920005cbf88 [ 137.267859][ C1] ? dump_stack_lvl+0x204/0x250 [ 137.272743][ C1] ? show_regs_print_info+0x20/0x20 [ 137.277973][ C1] ? load_image+0x410/0x410 [ 137.282499][ C1] ? prandom_u32+0x217/0x250 [ 137.287113][ C1] should_fail+0x383/0x4b0 [ 137.291549][ C1] should_failslab+0x5/0x20 [ 137.296064][ C1] slab_pre_alloc_hook+0x51/0xc0 [ 137.301042][ C1] ? sockfs_init_fs_context+0xa0/0xa0 [ 137.306433][ C1] ? sock_alloc_inode+0x17/0xb0 [ 137.311302][ C1] kmem_cache_alloc+0x3d/0x280 [ 137.316082][ C1] ? sockfs_init_fs_context+0xa0/0xa0 [ 137.321476][ C1] sock_alloc_inode+0x17/0xb0 [ 137.326694][ C1] ? sockfs_init_fs_context+0xa0/0xa0 [ 137.332089][ C1] new_inode_pseudo+0x5f/0x210 [ 137.336875][ C1] __sock_create+0x128/0x910 [ 137.341487][ C1] __sys_socket+0xe2/0x170 [ 137.345928][ C1] __x64_sys_socket+0x76/0x80 [ 137.350623][ C1] do_syscall_64+0x4c/0xa0 [ 137.355056][ C1] ? clear_bhb_loop+0x30/0x80 [ 137.359757][ C1] ? clear_bhb_loop+0x30/0x80 [ 137.364457][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 137.370393][ C1] RIP: 0033:0x7f5ee4323707 [ 137.374825][ C1] Code: 54 24 0c e8 6b ac ff ff 83 f8 ff 74 04 8b 44 24 0c 48 83 c4 18 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 e6 0c 00 f7 d8 64 89 01 48 [ 137.394627][ C1] RSP: 002b:00007ffed8fd6818 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 137.403064][ C1] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f5ee4323707 [ 137.411056][ C1] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 137.419043][ C1] RBP: 00007f5ee43af560 R08: 0000000000000073 R09: 0000000000000001 [ 137.427029][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 137.435107][ C1] R13: 00007ffed8fd6940 R14: 000000000000003a R15: 00007ffed8fd6940 [ 137.443111][ C1] [ 137.446152][ C0] CPU: 0 PID: 14 Comm: ksoftirqd/0 Not tainted syzkaller #0 [ 137.446326][ C1] FAULT_INJECTION: forcing a failure. [ 137.446326][ C1] name failslab, interval 1, probability 100, space 0, times 6 [ 137.453464][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 137.453479][ C0] Call Trace: [ 137.453489][ C0] [ 137.453498][ C0] dump_stack_lvl+0x188/0x250 [ 137.487213][ C0] ? show_regs_print_info+0x20/0x20 [ 137.492430][ C0] ? load_image+0x410/0x410 [ 137.496958][ C0] ? prandom_u32+0x217/0x250 [ 137.501570][ C0] should_fail+0x383/0x4b0 [ 137.506008][ C0] should_failslab+0x5/0x20 [ 137.510528][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 137.515490][ C0] kmem_cache_alloc_node+0x47/0x2c0 [ 137.520719][ C0] ? __alloc_skb+0xf4/0x750 [ 137.525248][ C0] __alloc_skb+0xf4/0x750 [ 137.529604][ C0] ndisc_alloc_skb+0xa6/0x420 [ 137.534394][ C0] ndisc_send_rs+0x271/0x700 [ 137.539003][ C0] ? ipv6_get_lladdr+0x33f/0x3b0 [ 137.544010][ C0] addrconf_rs_timer+0x367/0x640 [ 137.548970][ C0] ? detach_timer+0x33/0x2b0 [ 137.553582][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 137.559671][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 137.565767][ C0] call_timer_fn+0x17b/0x540 [ 137.570377][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 137.576465][ C0] ? __run_timers+0x810/0x810 [ 137.581174][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 137.586409][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 137.591627][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 137.597716][ C0] __run_timers+0x56c/0x810 [ 137.602246][ C0] ? lock_chain_count+0x20/0x20 [ 137.607130][ C0] ? detach_timer+0x2b0/0x2b0 [ 137.611854][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 137.617861][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 137.622759][ C0] run_timer_softirq+0x63/0xf0 [ 137.627545][ C0] handle_softirqs+0x336/0x830 [ 137.632330][ C0] ? run_ksoftirqd+0xa4/0x100 [ 137.637024][ C0] ? do_softirq+0x210/0x210 [ 137.641540][ C0] ? run_ksoftirqd+0x81/0x100 [ 137.646256][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 137.651477][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 137.656783][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 137.661997][ C0] run_ksoftirqd+0xa4/0x100 [ 137.666516][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 137.671756][ C0] smpboot_thread_fn+0x520/0x990 [ 137.676725][ C0] kthread+0x42e/0x520 [ 137.680807][ C0] ? cpu_report_death+0x180/0x180 [ 137.685866][ C0] ? kthread_blkcg+0xd0/0xd0 [ 137.690472][ C0] ret_from_fork+0x1f/0x30 [ 137.694918][ C0] [ 137.697969][ C1] CPU: 1 PID: 3547 Comm: klogd Not tainted syzkaller #0 [ 137.698091][ C0] FAULT_INJECTION: forcing a failure. [ 137.698091][ C0] name failslab, interval 1, probability 100, space 0, times 5 [ 137.704947][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 137.704963][ C1] Call Trace: [ 137.704972][ C1] [ 137.704990][ C1] dump_stack_lvl+0x188/0x250 [ 137.738613][ C1] ? show_regs_print_info+0x20/0x20 [ 137.743832][ C1] ? load_image+0x410/0x410 [ 137.748359][ C1] ? prandom_u32+0x217/0x250 [ 137.752984][ C1] should_fail+0x383/0x4b0 [ 137.757421][ C1] should_failslab+0x5/0x20 [ 137.761938][ C1] slab_pre_alloc_hook+0x51/0xc0 [ 137.766897][ C1] kmem_cache_alloc_node+0x47/0x2c0 [ 137.772137][ C1] ? __alloc_skb+0xf4/0x750 [ 137.776665][ C1] __alloc_skb+0xf4/0x750 [ 137.781019][ C1] __netdev_alloc_skb+0x110/0x4c0 [ 137.786068][ C1] ? __alloc_skb+0x750/0x750 [ 137.790680][ C1] hsr_init_skb+0xec/0x5a0 [ 137.795111][ C1] ? read_lock_is_recursive+0x10/0x10 [ 137.800505][ C1] send_hsr_supervision_frame+0x141/0xb90 [ 137.806251][ C1] hsr_announce+0x168/0x310 [ 137.810776][ C1] ? hsr_dev_finalize+0x870/0x870 [ 137.815834][ C1] ? hsr_dev_finalize+0x870/0x870 [ 137.820883][ C1] call_timer_fn+0x17b/0x540 [ 137.825508][ C1] ? hsr_dev_finalize+0x870/0x870 [ 137.830585][ C1] ? __run_timers+0x810/0x810 [ 137.835313][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 137.840559][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 137.845785][ C1] ? hsr_dev_finalize+0x870/0x870 [ 137.850845][ C1] __run_timers+0x56c/0x810 [ 137.855388][ C1] ? detach_timer+0x2b0/0x2b0 [ 137.860104][ C1] run_timer_softirq+0x63/0xf0 [ 137.864900][ C1] handle_softirqs+0x336/0x830 [ 137.869701][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 137.874578][ C1] ? do_softirq+0x210/0x210 [ 137.879098][ C1] ? hrtimer_interrupt+0x6a2/0x8b0 [ 137.884232][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 137.889454][ C1] __irq_exit_rcu+0x13b/0x230 [ 137.894150][ C1] ? irq_exit_rcu+0x20/0x20 [ 137.898683][ C1] irq_exit_rcu+0x5/0x20 [ 137.902947][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 137.908625][ C1] [ 137.911575][ C1] [ 137.914526][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 137.921309][ C1] RIP: 0010:preempt_schedule_irq+0xb6/0x160 [ 137.927242][ C1] Code: 00 00 43 c6 44 37 04 f8 74 0b 0f 0b 48 f7 03 08 00 00 00 74 7f bf 01 00 00 00 e8 f5 e6 89 f7 e8 e0 c7 b6 f7 fb bf 01 00 00 00 d5 b5 ff ff 43 c6 44 37 08 00 48 c7 44 24 40 00 00 00 00 9c 8f [ 137.947287][ C1] RSP: 0018:ffffc90002e5fac0 EFLAGS: 00000282 [ 137.953481][ C1] RAX: 2b623691f269f200 RBX: 0000000000000000 RCX: 2b623691f269f200 [ 137.961568][ C1] RDX: dffffc0000000000 RSI: ffffffff8a2b2be0 RDI: 0000000000000001 [ 137.969572][ C1] RBP: ffffc90002e5fb60 R08: ffffffff8d8b0def R09: 1ffffffff1b161bd [ 137.977567][ C1] R10: dffffc0000000000 R11: fffffbfff1b161be R12: 0000000000000000 [ 137.985564][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff920005cbf58 [ 137.993571][ C1] ? __cond_resched+0xd0/0xd0 [ 137.998306][ C1] ? rcu_irq_exit_check_preempt+0xdb/0x200 [ 138.004146][ C1] irqentry_exit+0x63/0x70 [ 138.008672][ C1] asm_sysvec_reschedule_ipi+0x16/0x20 [ 138.014152][ C1] RIP: 0010:dump_stack_lvl+0x20e/0x250 [ 138.019640][ C1] Code: e8 77 d5 c0 f7 48 bb 00 00 00 00 00 fc ff df 4d 85 ed 75 07 e8 63 d5 c0 f7 eb 06 e8 5c d5 c0 f7 fb 48 c7 44 24 20 0e 36 e0 45 <31> c0 49 89 04 1f 49 89 44 1f 08 65 48 8b 04 25 28 00 00 00 48 3b [ 138.039270][ C1] RSP: 0018:ffffc90002e5fc20 EFLAGS: 00000293 [ 138.045361][ C1] RAX: ffffffff89b82c24 RBX: dffffc0000000000 RCX: ffff88807da69dc0 [ 138.053352][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 138.061350][ C1] RBP: ffffc90002e5fd10 R08: 0000000000000003 R09: 0000000000000004 [ 138.069346][ C1] R10: dffffc0000000000 R11: fffffbfff183f6e0 R12: dffffc0000000004 [ 138.077356][ C1] R13: 0000000000000200 R14: 0000000000000000 R15: 1ffff920005cbf88 [ 138.085370][ C1] ? dump_stack_lvl+0x204/0x250 [ 138.090269][ C1] ? show_regs_print_info+0x20/0x20 [ 138.095504][ C1] ? load_image+0x410/0x410 [ 138.100070][ C1] ? prandom_u32+0x217/0x250 [ 138.104696][ C1] should_fail+0x383/0x4b0 [ 138.109145][ C1] should_failslab+0x5/0x20 [ 138.113673][ C1] slab_pre_alloc_hook+0x51/0xc0 [ 138.118631][ C1] ? sockfs_init_fs_context+0xa0/0xa0 [ 138.124051][ C1] ? sock_alloc_inode+0x17/0xb0 [ 138.128949][ C1] kmem_cache_alloc+0x3d/0x280 [ 138.133742][ C1] ? sockfs_init_fs_context+0xa0/0xa0 [ 138.139155][ C1] sock_alloc_inode+0x17/0xb0 [ 138.143871][ C1] ? sockfs_init_fs_context+0xa0/0xa0 [ 138.149282][ C1] new_inode_pseudo+0x5f/0x210 [ 138.154080][ C1] __sock_create+0x128/0x910 [ 138.158700][ C1] __sys_socket+0xe2/0x170 [ 138.163141][ C1] __x64_sys_socket+0x76/0x80 [ 138.167857][ C1] do_syscall_64+0x4c/0xa0 [ 138.172291][ C1] ? clear_bhb_loop+0x30/0x80 [ 138.176996][ C1] ? clear_bhb_loop+0x30/0x80 [ 138.181697][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 138.187644][ C1] RIP: 0033:0x7f5ee4323707 [ 138.192098][ C1] Code: 54 24 0c e8 6b ac ff ff 83 f8 ff 74 04 8b 44 24 0c 48 83 c4 18 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 e6 0c 00 f7 d8 64 89 01 48 [ 138.211727][ C1] RSP: 002b:00007ffed8fd6818 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 138.220172][ C1] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f5ee4323707 [ 138.228163][ C1] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 138.236155][ C1] RBP: 00007f5ee43af560 R08: 0000000000000073 R09: 0000000000000001 [ 138.244151][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 138.252161][ C1] R13: 00007ffed8fd6940 R14: 000000000000003a R15: 00007ffed8fd6940 [ 138.260166][ C1] [ 138.263207][ C0] CPU: 0 PID: 14 Comm: ksoftirqd/0 Not tainted syzkaller #0 [ 138.263342][ C1] FAULT_INJECTION: forcing a failure. [ 138.263342][ C1] name failslab, interval 1, probability 100, space 0, times 4 [ 138.270523][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 138.293432][ C0] Call Trace: [ 138.296741][ C0] [ 138.299691][ C0] dump_stack_lvl+0x188/0x250 [ 138.304392][ C0] ? show_regs_print_info+0x20/0x20 [ 138.309611][ C0] ? load_image+0x410/0x410 [ 138.314139][ C0] ? prandom_u32+0x217/0x250 [ 138.318754][ C0] should_fail+0x383/0x4b0 [ 138.323197][ C0] should_failslab+0x5/0x20 [ 138.327744][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 138.332704][ C0] kmem_cache_alloc_node+0x47/0x2c0 [ 138.337924][ C0] ? __alloc_skb+0xf4/0x750 [ 138.342455][ C0] __alloc_skb+0xf4/0x750 [ 138.346806][ C0] ndisc_alloc_skb+0xa6/0x420 [ 138.351505][ C0] ndisc_send_rs+0x271/0x700 [ 138.356118][ C0] ? ipv6_get_lladdr+0x33f/0x3b0 [ 138.361082][ C0] addrconf_rs_timer+0x367/0x640 [ 138.366044][ C0] ? detach_timer+0x33/0x2b0 [ 138.370657][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 138.376749][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 138.382837][ C0] call_timer_fn+0x17b/0x540 [ 138.387451][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 138.393540][ C0] ? __run_timers+0x810/0x810 [ 138.398253][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 138.403470][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 138.408687][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 138.414768][ C0] __run_timers+0x56c/0x810 [ 138.419292][ C0] ? lock_chain_count+0x20/0x20 [ 138.424187][ C0] ? detach_timer+0x2b0/0x2b0 [ 138.428884][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 138.434885][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 138.439759][ C0] run_timer_softirq+0x63/0xf0 [ 138.444542][ C0] handle_softirqs+0x336/0x830 [ 138.449355][ C0] ? run_ksoftirqd+0xa4/0x100 [ 138.454751][ C0] ? do_softirq+0x210/0x210 [ 138.459268][ C0] ? run_ksoftirqd+0x81/0x100 [ 138.463973][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 138.469186][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 138.474488][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 138.479729][ C0] run_ksoftirqd+0xa4/0x100 [ 138.484250][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 138.489472][ C0] smpboot_thread_fn+0x520/0x990 [ 138.494435][ C0] kthread+0x42e/0x520 [ 138.498520][ C0] ? cpu_report_death+0x180/0x180 [ 138.503595][ C0] ? kthread_blkcg+0xd0/0xd0 [ 138.508207][ C0] ret_from_fork+0x1f/0x30 [ 138.512658][ C0] [ 138.515697][ C1] CPU: 1 PID: 3547 Comm: klogd Not tainted syzkaller #0 [ 138.515866][ C0] FAULT_INJECTION: forcing a failure. [ 138.515866][ C0] name failslab, interval 1, probability 100, space 0, times 3 [ 138.522671][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 138.522688][ C1] Call Trace: [ 138.522698][ C1] [ 138.522708][ C1] dump_stack_lvl+0x188/0x250 [ 138.556390][ C1] ? verify_lock_unused+0x140/0x140 [ 138.561624][ C1] ? show_regs_print_info+0x20/0x20 [ 138.566843][ C1] ? load_image+0x410/0x410 [ 138.571370][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 138.577380][ C1] ? prandom_u32+0x217/0x250 [ 138.581999][ C1] should_fail+0x383/0x4b0 [ 138.586443][ C1] should_failslab+0x5/0x20 [ 138.590969][ C1] slab_pre_alloc_hook+0x51/0xc0 [ 138.595936][ C1] kmem_cache_alloc_node+0x47/0x2c0 [ 138.601159][ C1] ? __alloc_skb+0xf4/0x750 [ 138.605685][ C1] __alloc_skb+0xf4/0x750 [ 138.610037][ C1] ? wg_expired_zero_key_material+0x250/0x250 [ 138.616122][ C1] wg_packet_send_keepalive+0x61/0x2b0 [ 138.621630][ C1] ? wg_expired_zero_key_material+0x250/0x250 [ 138.627716][ C1] call_timer_fn+0x17b/0x540 [ 138.632336][ C1] ? wg_expired_zero_key_material+0x250/0x250 [ 138.638422][ C1] ? __run_timers+0x810/0x810 [ 138.643131][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 138.648353][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 138.653573][ C1] ? wg_expired_zero_key_material+0x250/0x250 [ 138.659660][ C1] __run_timers+0x56c/0x810 [ 138.664206][ C1] ? detach_timer+0x2b0/0x2b0 [ 138.668922][ C1] run_timer_softirq+0x63/0xf0 [ 138.673712][ C1] handle_softirqs+0x336/0x830 [ 138.678506][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 138.683374][ C1] ? do_softirq+0x210/0x210 [ 138.687918][ C1] ? hrtimer_interrupt+0x6a2/0x8b0 [ 138.693053][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 138.698271][ C1] __irq_exit_rcu+0x13b/0x230 [ 138.702969][ C1] ? irq_exit_rcu+0x20/0x20 [ 138.707503][ C1] irq_exit_rcu+0x5/0x20 [ 138.711767][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 138.717430][ C1] [ 138.720461][ C1] [ 138.723405][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 138.729409][ C1] RIP: 0010:preempt_schedule_irq+0xb6/0x160 [ 138.735322][ C1] Code: 00 00 43 c6 44 37 04 f8 74 0b 0f 0b 48 f7 03 08 00 00 00 74 7f bf 01 00 00 00 e8 f5 e6 89 f7 e8 e0 c7 b6 f7 fb bf 01 00 00 00 d5 b5 ff ff 43 c6 44 37 08 00 48 c7 44 24 40 00 00 00 00 9c 8f [ 138.754976][ C1] RSP: 0018:ffffc90002e5fac0 EFLAGS: 00000282 [ 138.761065][ C1] RAX: 2b623691f269f200 RBX: 0000000000000000 RCX: 2b623691f269f200 [ 138.769061][ C1] RDX: dffffc0000000000 RSI: ffffffff8a2b2be0 RDI: 0000000000000001 [ 138.777058][ C1] RBP: ffffc90002e5fb60 R08: ffffffff8d8b0def R09: 1ffffffff1b161bd [ 138.785192][ C1] R10: dffffc0000000000 R11: fffffbfff1b161be R12: 0000000000000000 [ 138.793199][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff920005cbf58 [ 138.801217][ C1] ? __cond_resched+0xd0/0xd0 [ 138.805930][ C1] ? rcu_irq_exit_check_preempt+0xdb/0x200 [ 138.811762][ C1] irqentry_exit+0x63/0x70 [ 138.816262][ C1] asm_sysvec_reschedule_ipi+0x16/0x20 [ 138.821746][ C1] RIP: 0010:dump_stack_lvl+0x20e/0x250 [ 138.827233][ C1] Code: e8 77 d5 c0 f7 48 bb 00 00 00 00 00 fc ff df 4d 85 ed 75 07 e8 63 d5 c0 f7 eb 06 e8 5c d5 c0 f7 fb 48 c7 44 24 20 0e 36 e0 45 <31> c0 49 89 04 1f 49 89 44 1f 08 65 48 8b 04 25 28 00 00 00 48 3b [ 138.846889][ C1] RSP: 0018:ffffc90002e5fc20 EFLAGS: 00000293 [ 138.852975][ C1] RAX: ffffffff89b82c24 RBX: dffffc0000000000 RCX: ffff88807da69dc0 [ 138.860968][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 138.868957][ C1] RBP: ffffc90002e5fd10 R08: 0000000000000003 R09: 0000000000000004 [ 138.876948][ C1] R10: dffffc0000000000 R11: fffffbfff183f6e0 R12: dffffc0000000004 [ 138.884942][ C1] R13: 0000000000000200 R14: 0000000000000000 R15: 1ffff920005cbf88 [ 138.892964][ C1] ? dump_stack_lvl+0x204/0x250 [ 138.897849][ C1] ? show_regs_print_info+0x20/0x20 [ 138.903096][ C1] ? load_image+0x410/0x410 [ 138.909999][ C1] ? prandom_u32+0x217/0x250 [ 138.914644][ C1] should_fail+0x383/0x4b0 [ 138.919106][ C1] should_failslab+0x5/0x20 [ 138.923644][ C1] slab_pre_alloc_hook+0x51/0xc0 [ 138.928603][ C1] ? sockfs_init_fs_context+0xa0/0xa0 [ 138.934004][ C1] ? sock_alloc_inode+0x17/0xb0 [ 138.938898][ C1] kmem_cache_alloc+0x3d/0x280 [ 138.943708][ C1] ? sockfs_init_fs_context+0xa0/0xa0 [ 138.949140][ C1] sock_alloc_inode+0x17/0xb0 [ 138.953844][ C1] ? sockfs_init_fs_context+0xa0/0xa0 [ 138.959246][ C1] new_inode_pseudo+0x5f/0x210 [ 138.964041][ C1] __sock_create+0x128/0x910 [ 138.968660][ C1] __sys_socket+0xe2/0x170 [ 138.973100][ C1] __x64_sys_socket+0x76/0x80 [ 138.977919][ C1] do_syscall_64+0x4c/0xa0 [ 138.982374][ C1] ? clear_bhb_loop+0x30/0x80 [ 138.987074][ C1] ? clear_bhb_loop+0x30/0x80 [ 138.991778][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 138.997717][ C1] RIP: 0033:0x7f5ee4323707 [ 139.002157][ C1] Code: 54 24 0c e8 6b ac ff ff 83 f8 ff 74 04 8b 44 24 0c 48 83 c4 18 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 e6 0c 00 f7 d8 64 89 01 48 [ 139.021793][ C1] RSP: 002b:00007ffed8fd6818 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 139.030532][ C1] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f5ee4323707 [ 139.038677][ C1] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 139.046792][ C1] RBP: 00007f5ee43af560 R08: 0000000000000073 R09: 0000000000000001 [ 139.054798][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 139.062825][ C1] R13: 00007ffed8fd6940 R14: 000000000000003a R15: 00007ffed8fd6940 [ 139.070836][ C1] [ 139.073882][ C0] CPU: 0 PID: 14 Comm: ksoftirqd/0 Not tainted syzkaller #0 [ 139.073972][ C1] FAULT_INJECTION: forcing a failure. [ 139.073972][ C1] name failslab, interval 1, probability 100, space 0, times 2 [ 139.081202][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 139.081217][ C0] Call Trace: [ 139.081228][ C0] [ 139.110474][ C0] dump_stack_lvl+0x188/0x250 [ 139.115190][ C0] ? show_regs_print_info+0x20/0x20 [ 139.120674][ C0] ? load_image+0x410/0x410 [ 139.125201][ C0] ? prandom_u32+0x217/0x250 [ 139.129822][ C0] should_fail+0x383/0x4b0 [ 139.134273][ C0] should_failslab+0x5/0x20 [ 139.138799][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 139.143760][ C0] kmem_cache_alloc_node+0x47/0x2c0 [ 139.148978][ C0] ? __alloc_skb+0xf4/0x750 [ 139.153508][ C0] __alloc_skb+0xf4/0x750 [ 139.157860][ C0] ndisc_alloc_skb+0xa6/0x420 [ 139.162574][ C0] ndisc_send_rs+0x271/0x700 [ 139.167203][ C0] ? ipv6_get_lladdr+0x33f/0x3b0 [ 139.172178][ C0] addrconf_rs_timer+0x367/0x640 [ 139.177142][ C0] ? detach_timer+0x33/0x2b0 [ 139.181764][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 139.187860][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 139.193952][ C0] call_timer_fn+0x17b/0x540 [ 139.198568][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 139.204676][ C0] ? __run_timers+0x810/0x810 [ 139.209385][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 139.214607][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 139.219825][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 139.225917][ C0] __run_timers+0x56c/0x810 [ 139.230470][ C0] ? lock_chain_count+0x20/0x20 [ 139.235356][ C0] ? detach_timer+0x2b0/0x2b0 [ 139.240080][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 139.246100][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 139.250979][ C0] run_timer_softirq+0x63/0xf0 [ 139.255857][ C0] handle_softirqs+0x336/0x830 [ 139.260650][ C0] ? run_ksoftirqd+0xa4/0x100 [ 139.265348][ C0] ? do_softirq+0x210/0x210 [ 139.269870][ C0] ? run_ksoftirqd+0x81/0x100 [ 139.274579][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 139.279802][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 139.285105][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 139.290322][ C0] run_ksoftirqd+0xa4/0x100 [ 139.294858][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 139.300107][ C0] smpboot_thread_fn+0x520/0x990 [ 139.305133][ C0] kthread+0x42e/0x520 [ 139.309249][ C0] ? cpu_report_death+0x180/0x180 [ 139.314313][ C0] ? kthread_blkcg+0xd0/0xd0 [ 139.318934][ C0] ret_from_fork+0x1f/0x30 [ 139.323386][ C0] [ 139.326430][ C1] CPU: 1 PID: 3547 Comm: klogd Not tainted syzkaller #0 [ 139.326569][ C0] FAULT_INJECTION: forcing a failure. [ 139.326569][ C0] name failslab, interval 1, probability 100, space 0, times 1 [ 139.333401][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 139.333416][ C1] Call Trace: [ 139.333427][ C1] [ 139.333436][ C1] dump_stack_lvl+0x188/0x250 [ 139.367094][ C1] ? show_regs_print_info+0x20/0x20 [ 139.372316][ C1] ? load_image+0x410/0x410 [ 139.376843][ C1] ? prandom_u32+0x217/0x250 [ 139.381462][ C1] should_fail+0x383/0x4b0 [ 139.385930][ C1] should_failslab+0x5/0x20 [ 139.390453][ C1] slab_pre_alloc_hook+0x51/0xc0 [ 139.395412][ C1] kmem_cache_alloc_node+0x47/0x2c0 [ 139.400629][ C1] ? __alloc_skb+0xf4/0x750 [ 139.405162][ C1] __alloc_skb+0xf4/0x750 [ 139.409525][ C1] ndisc_alloc_skb+0xa6/0x420 [ 139.414249][ C1] ndisc_send_rs+0x271/0x700 [ 139.418867][ C1] ? ipv6_get_lladdr+0x33f/0x3b0 [ 139.423833][ C1] addrconf_rs_timer+0x367/0x640 [ 139.428802][ C1] ? detach_timer+0x33/0x2b0 [ 139.433422][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 139.439522][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 139.445700][ C1] call_timer_fn+0x17b/0x540 [ 139.450419][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 139.456513][ C1] ? __run_timers+0x810/0x810 [ 139.461221][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 139.466450][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 139.471668][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 139.477755][ C1] __run_timers+0x56c/0x810 [ 139.482304][ C1] ? detach_timer+0x2b0/0x2b0 [ 139.487020][ C1] run_timer_softirq+0x63/0xf0 [ 139.491808][ C1] handle_softirqs+0x336/0x830 [ 139.496605][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 139.501474][ C1] ? do_softirq+0x210/0x210 [ 139.505990][ C1] ? hrtimer_interrupt+0x6a2/0x8b0 [ 139.511130][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 139.516358][ C1] __irq_exit_rcu+0x13b/0x230 [ 139.521063][ C1] ? irq_exit_rcu+0x20/0x20 [ 139.525597][ C1] irq_exit_rcu+0x5/0x20 [ 139.529859][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 139.535512][ C1] [ 139.538463][ C1] [ 139.542012][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 139.548102][ C1] RIP: 0010:preempt_schedule_irq+0xb6/0x160 [ 139.554040][ C1] Code: 00 00 43 c6 44 37 04 f8 74 0b 0f 0b 48 f7 03 08 00 00 00 74 7f bf 01 00 00 00 e8 f5 e6 89 f7 e8 e0 c7 b6 f7 fb bf 01 00 00 00 d5 b5 ff ff 43 c6 44 37 08 00 48 c7 44 24 40 00 00 00 00 9c 8f [ 139.573684][ C1] RSP: 0018:ffffc90002e5fac0 EFLAGS: 00000282 [ 139.579941][ C1] RAX: 2b623691f269f200 RBX: 0000000000000000 RCX: 2b623691f269f200 [ 139.587932][ C1] RDX: dffffc0000000000 RSI: ffffffff8a2b2be0 RDI: 0000000000000001 [ 139.595926][ C1] RBP: ffffc90002e5fb60 R08: ffffffff8d8b0def R09: 1ffffffff1b161bd [ 139.603920][ C1] R10: dffffc0000000000 R11: fffffbfff1b161be R12: 0000000000000000 [ 139.611914][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff920005cbf58 [ 139.619920][ C1] ? __cond_resched+0xd0/0xd0 [ 139.624628][ C1] ? rcu_irq_exit_check_preempt+0xdb/0x200 [ 139.630462][ C1] irqentry_exit+0x63/0x70 [ 139.634913][ C1] asm_sysvec_reschedule_ipi+0x16/0x20 [ 139.640398][ C1] RIP: 0010:dump_stack_lvl+0x20e/0x250 [ 139.645884][ C1] Code: e8 77 d5 c0 f7 48 bb 00 00 00 00 00 fc ff df 4d 85 ed 75 07 e8 63 d5 c0 f7 eb 06 e8 5c d5 c0 f7 fb 48 c7 44 24 20 0e 36 e0 45 <31> c0 49 89 04 1f 49 89 44 1f 08 65 48 8b 04 25 28 00 00 00 48 3b [ 139.665510][ C1] RSP: 0018:ffffc90002e5fc20 EFLAGS: 00000293 [ 139.671600][ C1] RAX: ffffffff89b82c24 RBX: dffffc0000000000 RCX: ffff88807da69dc0 [ 139.679589][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 139.687580][ C1] RBP: ffffc90002e5fd10 R08: 0000000000000003 R09: 0000000000000004 [ 139.695571][ C1] R10: dffffc0000000000 R11: fffffbfff183f6e0 R12: dffffc0000000004 [ 139.703559][ C1] R13: 0000000000000200 R14: 0000000000000000 R15: 1ffff920005cbf88 [ 139.711557][ C1] ? dump_stack_lvl+0x204/0x250 [ 139.716441][ C1] ? show_regs_print_info+0x20/0x20 [ 139.721665][ C1] ? load_image+0x410/0x410 [ 139.726188][ C1] ? prandom_u32+0x217/0x250 [ 139.730805][ C1] should_fail+0x383/0x4b0 [ 139.735377][ C1] should_failslab+0x5/0x20 [ 139.739898][ C1] slab_pre_alloc_hook+0x51/0xc0 [ 139.744849][ C1] ? sockfs_init_fs_context+0xa0/0xa0 [ 139.750242][ C1] ? sock_alloc_inode+0x17/0xb0 [ 139.755136][ C1] kmem_cache_alloc+0x3d/0x280 [ 139.759925][ C1] ? sockfs_init_fs_context+0xa0/0xa0 [ 139.765322][ C1] sock_alloc_inode+0x17/0xb0 [ 139.770015][ C1] ? sockfs_init_fs_context+0xa0/0xa0 [ 139.775405][ C1] new_inode_pseudo+0x5f/0x210 [ 139.780192][ C1] __sock_create+0x128/0x910 [ 139.784808][ C1] __sys_socket+0xe2/0x170 [ 139.789250][ C1] __x64_sys_socket+0x76/0x80 [ 139.793987][ C1] do_syscall_64+0x4c/0xa0 [ 139.798421][ C1] ? clear_bhb_loop+0x30/0x80 [ 139.803120][ C1] ? clear_bhb_loop+0x30/0x80 [ 139.807839][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 139.813809][ C1] RIP: 0033:0x7f5ee4323707 [ 139.818283][ C1] Code: 54 24 0c e8 6b ac ff ff 83 f8 ff 74 04 8b 44 24 0c 48 83 c4 18 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 e6 0c 00 f7 d8 64 89 01 48 [ 139.837913][ C1] RSP: 002b:00007ffed8fd6818 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 139.846378][ C1] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f5ee4323707 [ 139.854369][ C1] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 139.862361][ C1] RBP: 00007f5ee43af560 R08: 0000000000000073 R09: 0000000000000001 [ 139.870566][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 139.878563][ C1] R13: 00007ffed8fd6940 R14: 000000000000003a R15: 00007ffed8fd6940 [ 139.886568][ C1] [ 139.889607][ C0] CPU: 0 PID: 14 Comm: ksoftirqd/0 Not tainted syzkaller #0 [ 139.896930][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 139.907054][ C0] Call Trace: [ 139.910362][ C0] [ 139.913325][ C0] dump_stack_lvl+0x188/0x250 [ 139.918048][ C0] ? show_regs_print_info+0x20/0x20 [ 139.923307][ C0] ? load_image+0x410/0x410 [ 139.927850][ C0] ? prandom_u32+0x217/0x250 [ 139.932493][ C0] should_fail+0x383/0x4b0 [ 139.936956][ C0] should_failslab+0x5/0x20 [ 139.941502][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 139.946478][ C0] kmem_cache_alloc_node+0x47/0x2c0 [ 139.951715][ C0] ? __alloc_skb+0xf4/0x750 [ 139.956261][ C0] __alloc_skb+0xf4/0x750 [ 139.960634][ C0] ndisc_alloc_skb+0xa6/0x420 [ 139.965362][ C0] ndisc_send_rs+0x271/0x700 [ 139.970005][ C0] ? ipv6_get_lladdr+0x33f/0x3b0 [ 139.975004][ C0] addrconf_rs_timer+0x367/0x640 [ 139.979981][ C0] ? detach_timer+0x33/0x2b0 [ 139.984617][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 139.990727][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 139.996947][ C0] call_timer_fn+0x17b/0x540 [ 140.001584][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 140.007704][ C0] ? __run_timers+0x810/0x810 [ 140.012423][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 140.017676][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 140.022908][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 140.029020][ C0] __run_timers+0x56c/0x810 [ 140.033565][ C0] ? lock_chain_count+0x20/0x20 [ 140.038474][ C0] ? detach_timer+0x2b0/0x2b0 [ 140.043188][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 140.049215][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 140.054114][ C0] run_timer_softirq+0x63/0xf0 [ 140.058923][ C0] handle_softirqs+0x336/0x830 [ 140.063736][ C0] ? run_ksoftirqd+0xa4/0x100 [ 140.068447][ C0] ? do_softirq+0x210/0x210 [ 140.072988][ C0] ? run_ksoftirqd+0x81/0x100 [ 140.077697][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 140.082932][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 140.088349][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 140.093585][ C0] run_ksoftirqd+0xa4/0x100 [ 140.097172][ T9] rpcbind: server 127.0.0.1 not responding, timed out [ 140.098151][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 140.106986][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 140.110145][ C0] smpboot_thread_fn+0x520/0x990 [ 140.121346][ C0] kthread+0x42e/0x520 [ 140.125449][ C0] ? cpu_report_death+0x180/0x180 [ 140.129629][ T144] rpcbind: server 127.0.0.1 not responding, timed out [ 140.130531][ C0] ? kthread_blkcg+0xd0/0xd0 [ 140.139181][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 140.141927][ C0] ret_from_fork+0x1f/0x30 [ 140.141970][ C0] [ 140.155686][ T4395] CPU: 1 PID: 4395 Comm: syz-executor Not tainted syzkaller #0 [ 140.163265][ T4395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 140.173375][ T4395] Call Trace: [ 140.176715][ T4395] [ 140.179677][ T4395] dump_stack_lvl+0x188/0x250 [ 140.184416][ T4395] ? show_regs_print_info+0x20/0x20 [ 140.189657][ T4395] ? load_image+0x410/0x410 [ 140.194209][ T4395] should_fail+0x383/0x4b0 [ 140.198670][ T4395] should_failslab+0x5/0x20 [ 140.203207][ T4395] slab_pre_alloc_hook+0x51/0xc0 [ 140.208180][ T4395] ? getname_flags+0xb7/0x4f0 [ 140.212893][ T4395] kmem_cache_alloc+0x3d/0x280 [ 140.217702][ T4395] getname_flags+0xb7/0x4f0 [ 140.222253][ T4395] do_sys_openat2+0xdd/0x500 [ 140.226876][ T4395] ? __lock_acquire+0x7b50/0x7b50 [ 140.231941][ T4395] ? do_sys_open+0xe0/0xe0 [ 140.236391][ T4395] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 140.242419][ T4395] ? lock_chain_count+0x20/0x20 [ 140.247309][ T4395] __x64_sys_openat+0x135/0x160 [ 140.252200][ T4395] do_syscall_64+0x4c/0xa0 [ 140.256656][ T4395] ? clear_bhb_loop+0x30/0x80 [ 140.261361][ T4395] ? clear_bhb_loop+0x30/0x80 [ 140.266080][ T4395] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 140.272012][ T4395] RIP: 0033:0x7faa00cbd6ce [ 140.276498][ T4395] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 140.296145][ T4395] RSP: 002b:00007ffe060496a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 140.304604][ T4395] RAX: ffffffffffffffda RBX: 000055557a9bb500 RCX: 00007faa00cbd6ce [ 140.312718][ T4395] RDX: 0000000000080001 RSI: 00007ffe06049cf0 RDI: ffffffffffffff9c [ 140.320777][ T4395] RBP: 00007ffe06049cf0 R08: 0000000000000000 R09: 0000000000000000 [ 140.328792][ T4395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 140.336802][ T4395] R13: 00007ffe06049780 R14: 00007ffe06049cb0 R15: 00007ffe06049cf0 [ 140.344836][ T4395] [ 140.368290][ T1324] CPU: 0 PID: 1324 Comm: kworker/0:2 Not tainted syzkaller #0 [ 140.375826][ T1324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 140.385931][ T1324] Workqueue: mld mld_ifc_work [ 140.390657][ T1324] Call Trace: [ 140.393970][ T1324] [ 140.396932][ T1324] dump_stack_lvl+0x188/0x250 [ 140.401657][ T1324] ? show_regs_print_info+0x20/0x20 [ 140.406897][ T1324] ? load_image+0x410/0x410 [ 140.411452][ T1324] ? prandom_u32+0x217/0x250 [ 140.416105][ T1324] should_fail+0x383/0x4b0 [ 140.420574][ T1324] should_failslab+0x5/0x20 [ 140.425114][ T1324] slab_pre_alloc_hook+0x51/0xc0 [ 140.430089][ T1324] kmem_cache_alloc_node+0x47/0x2c0 [ 140.435323][ T1324] ? __alloc_skb+0xf4/0x750 [ 140.439863][ T1324] __alloc_skb+0xf4/0x750 [ 140.444240][ T1324] mld_newpack+0x12f/0xba0 [ 140.448752][ T1324] ? mld_sendpack+0xc40/0xc40 [ 140.453468][ T1324] add_grec+0x1364/0x1840 [ 140.457849][ T1324] mld_ifc_work+0x6f2/0xd60 [ 140.462397][ T1324] process_one_work+0x867/0xff0 [ 140.467303][ T1324] ? worker_detach_from_pool+0x240/0x240 [ 140.472975][ T1324] ? lockdep_hardirqs_off+0x70/0x100 [ 140.478305][ T1324] ? _raw_spin_lock_irq+0xb7/0xf0 [ 140.483373][ T1324] ? _raw_spin_lock_irqsave+0x100/0x100 [ 140.488957][ T1324] ? wq_worker_running+0x97/0x170 [ 140.494023][ T1324] worker_thread+0xad7/0x12a0 [ 140.498775][ T1324] kthread+0x42e/0x520 [ 140.502878][ T1324] ? rcu_lock_release+0x20/0x20 [ 140.507759][ T1324] ? kthread_blkcg+0xd0/0xd0 [ 140.512390][ T1324] ret_from_fork+0x1f/0x30 [ 140.516856][ T1324] [ 140.520801][ T4492] CPU: 1 PID: 4492 Comm: syz.7.47 Not tainted syzkaller #0 [ 140.528060][ T4492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 140.533468][ T1324] Bluetooth: hci9: command 0x0419 tx timeout [ 140.538187][ T4492] Call Trace: [ 140.538199][ T4492] [ 140.550443][ T4492] dump_stack_lvl+0x188/0x250 [ 140.555171][ T4492] ? show_regs_print_info+0x20/0x20 [ 140.560425][ T4492] ? load_image+0x410/0x410 [ 140.565010][ T4492] ? prandom_u32+0x217/0x250 [ 140.569646][ T4492] should_fail+0x383/0x4b0 [ 140.574142][ T4492] should_failslab+0x5/0x20 [ 140.578686][ T4492] slab_pre_alloc_hook+0x51/0xc0 [ 140.583670][ T4492] ? sockfs_init_fs_context+0xa0/0xa0 [ 140.589088][ T4492] ? sock_alloc_inode+0x17/0xb0 [ 140.593979][ T4492] kmem_cache_alloc+0x3d/0x280 [ 140.598786][ T4492] ? sockfs_init_fs_context+0xa0/0xa0 [ 140.604209][ T4492] sock_alloc_inode+0x17/0xb0 [ 140.608968][ T4492] ? sockfs_init_fs_context+0xa0/0xa0 [ 140.614387][ T4492] new_inode_pseudo+0x5f/0x210 [ 140.619202][ T4492] __sock_create+0x128/0x910 [ 140.623844][ T4492] __sys_socket+0xe2/0x170 [ 140.628341][ T4492] __x64_sys_socket+0x76/0x80 [ 140.633064][ T4492] do_syscall_64+0x4c/0xa0 [ 140.637520][ T4492] ? clear_bhb_loop+0x30/0x80 [ 140.642233][ T4492] ? clear_bhb_loop+0x30/0x80 [ 140.646947][ T4492] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 140.652880][ T4492] RIP: 0033:0x7f2fb92d7e99 [ 140.657329][ T4492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.676972][ T4492] RSP: 002b:00007f2fb7530028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 140.685438][ T4492] RAX: ffffffffffffffda RBX: 00007f2fb955ffa0 RCX: 00007f2fb92d7e99 [ 140.693454][ T4492] RDX: 0000000000000300 RSI: 0000000000000003 RDI: 0000000000000011 [ 140.701466][ T4492] RBP: 00007f2fb936deaf R08: 0000000000000000 R09: 0000000000000000 [ 140.709754][ T4492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.717789][ T4492] R13: 00007f2fb9560038 R14: 00007f2fb955ffa0 R15: 00007ffe7950ee88 [ 140.725994][ T4492] [ 140.740320][ T4235] CPU: 1 PID: 4235 Comm: kworker/1:5 Not tainted syzkaller #0 [ 140.747897][ T4235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 140.757998][ T4235] Workqueue: events nsim_fib_event_work [ 140.763599][ T4235] Call Trace: [ 140.766799][ T7] ax88179_178a 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 140.767017][ T4235] [ 140.767031][ T4235] dump_stack_lvl+0x188/0x250 [ 140.784996][ T4492] socket: no more sockets [ 140.785362][ T4235] ? show_regs_print_info+0x20/0x20 [ 140.794913][ T4235] ? load_image+0x410/0x410 [ 140.799459][ T4235] ? prandom_u32+0x217/0x250 [ 140.804103][ T4235] should_fail+0x383/0x4b0 [ 140.808557][ T4235] should_failslab+0x5/0x20 [ 140.813091][ T4235] slab_pre_alloc_hook+0x51/0xc0 [ 140.818066][ T4235] kmem_cache_alloc_trace+0x47/0x290 [ 140.823386][ T4235] ? nsim_fib_event_work+0x1171/0x3380 [ 140.828903][ T4235] nsim_fib_event_work+0x1171/0x3380 [ 140.834380][ T4235] ? nsim_fib_create+0xac0/0xac0 [ 140.839351][ T4235] ? verify_lock_unused+0x140/0x140 [ 140.844605][ T4235] ? __mutex_trylock_common+0x15c/0x260 [ 140.850239][ T4235] ? verify_lock_unused+0x140/0x140 [ 140.855554][ T4235] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 140.861593][ T4235] ? __lock_acquire+0x7b50/0x7b50 [ 140.863709][ T7] ax88179_178a 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 140.866677][ T4235] ? _raw_spin_unlock+0x40/0x40 [ 140.882234][ T4235] ? _raw_spin_unlock_irq+0x1f/0x40 [ 140.887483][ T4235] process_one_work+0x867/0xff0 [ 140.892394][ T4235] ? worker_detach_from_pool+0x240/0x240 [ 140.898099][ T4235] ? lockdep_hardirqs_off+0x70/0x100 [ 140.903432][ T4235] ? _raw_spin_lock_irq+0xb7/0xf0 [ 140.908492][ T4235] ? _raw_spin_lock_irqsave+0x100/0x100 [ 140.914081][ T4235] ? wq_worker_running+0x97/0x170 [ 140.919144][ T4235] worker_thread+0xd93/0x12a0 [ 140.923869][ T4235] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 140.929802][ T4235] kthread+0x42e/0x520 [ 140.933891][ T4235] ? rcu_lock_release+0x20/0x20 [ 140.938779][ T4235] ? kthread_blkcg+0xd0/0xd0 [ 140.943407][ T4235] ret_from_fork+0x1f/0x30 [ 140.947884][ T4235] [ 141.441909][ T7] ax88179_178a 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 141.569009][ T3547] socket: no more sockets [ 141.711333][ T7] ax88179_178a 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 141.751358][ T7] ax88179_178a 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -71 [ 141.771268][ T7] ax88179_178a 7-1:1.0 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 141.827386][ T7] ax88179_178a 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71 [ 141.881257][ T7] ax88179_178a 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 141.901331][ T1462] rpcbind: server 127.0.0.1 not responding, timed out [ 141.913507][ T7] ax88179_178a 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 141.991277][ T7] ax88179_178a 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 142.043518][ T7] ax88179_178a 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 142.091253][ T7] ax88179_178a 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 142.121258][ T7] ax88179_178a 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 142.140522][ T155] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.171346][ T7] ax88179_178a 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 142.219339][ T7] ax88179_178a 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 142.261296][ T7] ax88179_178a 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 142.303971][ T7] ax88179_178a 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 142.328606][ T155] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.341305][ T7] ax88179_178a 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 142.381314][ T7] ax88179_178a 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 142.414247][ T7] ax88179_178a 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 142.463640][ T155] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.474244][ T7] ax88179_178a 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 142.524027][ T7] ax88179_178a 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 142.585856][ T155] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.591629][ T7] ax88179_178a 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 142.651162][ T7] ax88179_178a 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 142.676832][ T4506] chnl_net:caif_netlink_parms(): no params data found [ 142.711202][ T7] ax88179_178a 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 142.761663][ T7] ax88179_178a 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 142.811340][ T7] ax88179_178a 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 142.851270][ T7] ax88179_178a 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 142.891240][ T7] ax88179_178a 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 142.971227][ T7] ax88179_178a 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 143.085576][ T7] ax88179_178a 7-1:1.0 eth2: register 'ax88179_178a' at usb-dummy_hcd.6-1, ASIX AX88179 USB 3.0 Gigabit Ethernet, 5a:03:ce:aa:33:71 [ 143.129228][ T7] usb 7-1: USB disconnect, device number 2 [ 143.139837][ T7] ax88179_178a 7-1:1.0 eth2: unregister 'ax88179_178a' usb-dummy_hcd.6-1, ASIX AX88179 USB 3.0 Gigabit Ethernet [ 143.155894][ T4506] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.165083][ T4506] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.192648][ T4506] device bridge_slave_0 entered promiscuous mode [ 143.225835][ T4515] chnl_net:caif_netlink_parms(): no params data found [ 143.245225][ T4513] chnl_net:caif_netlink_parms(): no params data found [ 143.276933][ T4506] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.285684][ T4506] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.307064][ T4506] device bridge_slave_1 entered promiscuous mode [ 143.361220][ T4233] Bluetooth: hci10: command 0x0409 tx timeout [ 143.400750][ T4512] chnl_net:caif_netlink_parms(): no params data found [ 143.569834][ T4506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.677732][ T4506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.685330][ T4233] Bluetooth: hci7: command 0x0409 tx timeout [ 143.701309][ T4273] Bluetooth: hci11: command 0x0409 tx timeout [ 143.713473][ T4273] Bluetooth: hci12: command 0x0409 tx timeout [ 143.771361][ T4515] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.779274][ T4515] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.795795][ T4515] device bridge_slave_0 entered promiscuous mode [ 143.847223][ T4513] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.855654][ T4513] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.864508][ T4513] device bridge_slave_0 entered promiscuous mode [ 143.873437][ T4515] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.880536][ T4515] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.893256][ T4515] device bridge_slave_1 entered promiscuous mode [ 143.925425][ T4512] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.932702][ T4512] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.944280][ T4512] device bridge_slave_0 entered promiscuous mode [ 143.956859][ T4506] team0: Port device team_slave_0 added [ 143.975626][ T4513] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.983166][ T4513] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.994036][ T4513] device bridge_slave_1 entered promiscuous mode [ 144.017718][ T4512] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.024986][ T4512] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.037268][ T4512] device bridge_slave_1 entered promiscuous mode [ 144.054065][ T4506] team0: Port device team_slave_1 added [ 144.115706][ T4515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.128278][ T4513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.142213][ T4513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.158033][ T4512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.168078][ T4506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.176227][ T4506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.204850][ T4506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.218907][ T4515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.252944][ T4512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.265755][ T4506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.273328][ T4506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.301495][ T4506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.364157][ T4515] team0: Port device team_slave_0 added [ 144.377465][ T4512] team0: Port device team_slave_0 added [ 144.387704][ T4513] team0: Port device team_slave_0 added [ 144.411168][ T4515] team0: Port device team_slave_1 added [ 144.453421][ T4513] team0: Port device team_slave_1 added [ 144.478152][ T4512] team0: Port device team_slave_1 added [ 144.511208][ T4506] device hsr_slave_0 entered promiscuous mode [ 144.518487][ T4506] device hsr_slave_1 entered promiscuous mode [ 144.541460][ T4506] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 144.549074][ T4506] Cannot create hsr debugfs directory [ 144.648332][ T4515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.666192][ T4515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.696160][ T4515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.733417][ T4513] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.740430][ T4513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.766991][ T4513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.779306][ T4515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.787524][ T4515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.819049][ T4515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.831517][ T4512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.838504][ T4512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.864851][ T4512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.901427][ T4513] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.909356][ T4513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.946499][ T4513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.965220][ T4512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.973033][ T4512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.999184][ T4512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.073904][ T4515] device hsr_slave_0 entered promiscuous mode [ 145.081693][ T4515] device hsr_slave_1 entered promiscuous mode [ 145.088596][ T4515] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 145.096350][ T4515] Cannot create hsr debugfs directory [ 145.254851][ T4512] device hsr_slave_0 entered promiscuous mode [ 145.263376][ T4512] device hsr_slave_1 entered promiscuous mode [ 145.271472][ T4512] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 145.279433][ T4512] Cannot create hsr debugfs directory [ 145.301954][ T4513] device hsr_slave_0 entered promiscuous mode [ 145.309055][ T4513] device hsr_slave_1 entered promiscuous mode [ 145.316517][ T4513] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 145.326174][ T4513] Cannot create hsr debugfs directory [ 145.452274][ T4273] Bluetooth: hci10: command 0x041b tx timeout [ 145.482376][ T4506] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.600557][ T4506] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.620240][ T155] device hsr_slave_0 left promiscuous mode [ 145.629176][ T155] device hsr_slave_1 left promiscuous mode [ 145.640141][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.648142][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.658786][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.666550][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.674927][ T155] device bridge_slave_1 left promiscuous mode [ 145.682754][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.702667][ T155] device bridge_slave_0 left promiscuous mode [ 145.708929][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.735157][ T155] device veth1_macvtap left promiscuous mode [ 145.744795][ T155] device veth0_macvtap left promiscuous mode [ 145.750906][ T155] device veth1_vlan left promiscuous mode [ 145.758445][ T155] device veth0_vlan left promiscuous mode [ 145.764575][ T1108] Bluetooth: hci12: command 0x041b tx timeout [ 145.770781][ T1108] Bluetooth: hci11: command 0x041b tx timeout [ 145.779439][ T1108] Bluetooth: hci7: command 0x041b tx timeout [ 146.046384][ T155] team0 (unregistering): Port device team_slave_1 removed [ 146.066693][ T155] team0 (unregistering): Port device team_slave_0 removed [ 146.084627][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.106484][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.198841][ T155] bond0 (unregistering): Released all slaves [ 146.336763][ T4506] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.510749][ T4506] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.723240][ T4515] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.855567][ T4515] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.965602][ T4515] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.085531][ T4515] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.245419][ T4512] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.373211][ T4512] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.521561][ T4235] Bluetooth: hci10: command 0x040f tx timeout [ 147.544044][ T4512] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.695749][ T4512] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.851158][ T4236] Bluetooth: hci7: command 0x040f tx timeout [ 147.871074][ T4236] Bluetooth: hci11: command 0x040f tx timeout [ 147.889972][ T4512] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 147.896894][ T4236] Bluetooth: hci12: command 0x040f tx timeout [ 147.956561][ T4513] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.988641][ T4512] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 148.033906][ T4512] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 148.074752][ T4512] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 148.244155][ T4513] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.473728][ T4513] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.657099][ T4513] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.713269][ T4512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.775653][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 148.793923][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 148.826485][ T4512] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.854069][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 148.891826][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 148.921202][ T4217] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.928321][ T4217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.961539][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 148.984979][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 149.032379][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 149.061275][ T1462] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.068389][ T1462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.103196][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 149.160302][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 149.172995][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 149.197827][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 149.222192][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 149.257173][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 149.289719][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 149.302663][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 149.329440][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 149.343736][ T4513] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 149.379717][ T4512] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 149.408339][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 149.432741][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 149.442392][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 149.466269][ T4513] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 149.506787][ T4513] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 149.541568][ T4513] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 149.601472][ T4241] Bluetooth: hci10: command 0x0419 tx timeout [ 149.612959][ T4506] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 149.664428][ T4506] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 149.706597][ T4506] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 149.735358][ T4506] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 149.842572][ T4515] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 149.882275][ T4515] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 149.914470][ T4515] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 149.921610][ T4232] Bluetooth: hci12: command 0x0419 tx timeout [ 149.929667][ T4232] Bluetooth: hci11: command 0x0419 tx timeout [ 149.951386][ T4232] Bluetooth: hci7: command 0x0419 tx timeout [ 149.953588][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 149.981518][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 150.013308][ T4513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.038711][ T4515] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 150.092757][ T4512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.128365][ T4506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.164026][ T4513] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.174703][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 150.184141][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 150.227178][ T155] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.244697][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 150.255843][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 150.265578][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 150.274736][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 150.284299][ T1462] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.291430][ T1462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.300666][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 150.340245][ T155] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.357707][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 150.369709][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 150.379365][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 150.388524][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 150.397919][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.405071][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.418260][ T4506] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.452845][ T155] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.476139][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 150.490025][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 150.509304][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 150.520092][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 150.532304][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 150.543907][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 150.567006][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 150.593879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 150.633574][ T4512] device veth0_vlan entered promiscuous mode [ 150.663625][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 150.682461][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 150.705884][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 150.731812][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.738956][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.755750][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 150.765009][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 150.774140][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.781407][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.790744][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 150.800074][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 150.809821][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 150.821566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 150.833088][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 150.869717][ T155] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.904977][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 150.925466][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 150.967696][ T4515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.990073][ T4513] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 151.004708][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 151.018754][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 151.028493][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 151.054184][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 151.072017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 151.092962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 151.111645][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 151.132913][ T4512] device veth1_vlan entered promiscuous mode [ 151.182305][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 151.201605][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 151.217567][ T4506] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 151.260220][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 151.290406][ T4515] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.313078][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 151.331755][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 151.340243][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 151.350218][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 151.414380][ T4512] device veth0_macvtap entered promiscuous mode [ 151.437899][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 151.463815][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 151.481984][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 151.513934][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 151.533675][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.541519][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.550527][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 151.559746][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 151.570625][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.577756][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.610425][ T4512] device veth1_macvtap entered promiscuous mode [ 151.641116][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 151.651892][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 151.669534][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 151.701994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 151.709669][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 151.718629][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 151.749244][ T4513] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.796841][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 151.837718][ T4506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.874257][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 151.886819][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 151.896543][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 151.904538][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 151.913882][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 151.924380][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 151.933384][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 151.953072][ T4512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.971140][ T4512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.990952][ T4512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.002829][ T4512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.013081][ T4512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.025308][ T4512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.035876][ T4512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.046747][ T4512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.057090][ T4512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.068503][ T4512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.080463][ T4512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.095678][ T4512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.105883][ T4512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.117059][ T4512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.127379][ T4512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.151606][ T4512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.171026][ T4512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.197219][ T4512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.219168][ T4512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.272361][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 152.283360][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 152.293543][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 152.303344][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 152.313661][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 152.325209][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 152.346733][ T4512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.359795][ T4512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.371123][ T4512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.382114][ T4512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.412123][ T4512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.438065][ T4512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.457480][ T4512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.478210][ T4512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.499960][ T4512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.517527][ T4512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.535497][ T4512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.551148][ T4512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.561628][ T4512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.572692][ T4512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.591181][ T4512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.617332][ T4512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.628898][ T4512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.639713][ T4512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.653088][ T4512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.664365][ T4515] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 152.677088][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 152.711997][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 152.737868][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 152.747056][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 152.756132][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 152.765591][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 152.776244][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 152.788469][ T4512] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.801611][ T4512] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.810357][ T4512] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.823736][ T4512] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.893473][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 152.906674][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 152.936281][ T4513] device veth0_vlan entered promiscuous mode [ 152.974164][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 152.986422][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 152.995882][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 153.006660][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 153.019458][ T4506] device veth0_vlan entered promiscuous mode [ 153.043719][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 153.064720][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 153.180013][ T4513] device veth1_vlan entered promiscuous mode [ 153.209365][ T4506] device veth1_vlan entered promiscuous mode [ 153.239641][ T4515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.288104][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 153.297328][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 153.310485][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 153.318907][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 153.348066][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 153.357171][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 153.383547][ T4513] device veth0_macvtap entered promiscuous mode [ 153.400607][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.418134][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.437060][ T4513] device veth1_macvtap entered promiscuous mode [ 153.462514][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 153.481696][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 153.492593][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 153.506347][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 153.517220][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 153.540925][ T4506] device veth0_macvtap entered promiscuous mode [ 153.580466][ T4513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.621189][ T4513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.641118][ T4513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.661085][ T4513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.670948][ T4513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.707247][ T4513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.724289][ T4513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.735143][ T4513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.745394][ T4513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.756207][ T4513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.768236][ T4513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.779047][ T4513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.789332][ T4513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.803045][ T4513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.831806][ T4513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.851079][ T4513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.861318][ T4513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.885999][ T4513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.910571][ T4513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.941907][ T4513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.963695][ T4513] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.991991][ T4506] device veth1_macvtap entered promiscuous mode [ 154.004786][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 154.031898][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 154.060739][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 154.081936][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 154.112757][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.116689][ T4513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.120646][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.141833][ T4513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.152025][ T4513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.163148][ T4513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.173417][ T4513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.185556][ T4513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.195709][ T4513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.208448][ T4513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.218633][ T4513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.233134][ T4513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.244124][ T4513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.254773][ T4513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.264856][ T4513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.275402][ T4513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.285463][ T4513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.297443][ T4513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.307421][ T4513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.321223][ T4513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.333824][ T4513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.344377][ T4513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.356249][ T4513] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.391415][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 154.399524][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 154.427487][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 154.451826][ T4513] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.460579][ T4513] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.491063][ T4513] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.499836][ T4513] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.574908][ T4506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.611572][ T4506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.638349][ T4506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.649639][ T4506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.660255][ T4506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.671342][ T4506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.686528][ T4721] netlink: 20 bytes leftover after parsing attributes in process `syz.3.49'. [ 154.695957][ T4506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.709600][ T4721] netlink: 20 bytes leftover after parsing attributes in process `syz.3.49'. [ 154.719529][ T4506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.731440][ T4721] netlink: 'syz.3.49': attribute type 1 has an invalid length. [ 154.742066][ T4506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.754490][ T4721] netlink: 52 bytes leftover after parsing attributes in process `syz.3.49'. [ 154.763703][ T4506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.774717][ T4721] netlink: 52 bytes leftover after parsing attributes in process `syz.3.49'. [ 154.783868][ T4506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.795348][ T4721] netlink: 'syz.3.49': attribute type 1 has an invalid length. [ 154.803689][ T4506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.815800][ T4721] netlink: 16 bytes leftover after parsing attributes in process `syz.3.49'. [ 154.825741][ T4506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.843406][ T4506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.871082][ T4506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.888312][ T4506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.912400][ T4506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.934627][ T4506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.946682][ T4506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.958336][ T4506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.969625][ T4506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.982256][ T4506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.994904][ T4506] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.043434][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 155.063218][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 155.093314][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 155.120271][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 155.190705][ T4506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.207461][ T4506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.219086][ T4506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.229983][ T4506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.240301][ T4506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.255760][ T4506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.266081][ T4506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.278094][ T4506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.290007][ T4506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.301414][ T4506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.311725][ T4506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.322645][ T4506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.332941][ T4506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.343935][ T4506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.369712][ T4506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.394259][ T4506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.415775][ T4506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.437896][ T4506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.466548][ T4506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.481373][ T4506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.491392][ T4506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.501957][ T4506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.513534][ T4506] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.529177][ T4506] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.543527][ T4506] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.562695][ T4506] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.591136][ T4506] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.646949][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 155.670720][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 155.695931][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 155.722522][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 155.741988][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 155.766257][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 155.835676][ T4515] device veth0_vlan entered promiscuous mode [ 155.917808][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.955946][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.023323][ T4515] device veth1_vlan entered promiscuous mode [ 156.083195][ T155] device hsr_slave_0 left promiscuous mode [ 156.099298][ T155] device hsr_slave_1 left promiscuous mode [ 156.106447][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.114806][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.129576][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.141532][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.149517][ T155] device bridge_slave_1 left promiscuous mode [ 156.156283][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.166395][ T155] device bridge_slave_0 left promiscuous mode [ 156.176080][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.195614][ T155] device veth1_macvtap left promiscuous mode [ 156.212253][ T155] device veth0_macvtap left promiscuous mode [ 156.218352][ T155] device veth1_vlan left promiscuous mode [ 156.224864][ T155] device veth0_vlan left promiscuous mode [ 156.510109][ T155] team0 (unregistering): Port device team_slave_1 removed [ 156.533614][ T155] team0 (unregistering): Port device team_slave_0 removed [ 156.549218][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.569987][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.666250][ T155] bond0 (unregistering): Released all slaves [ 156.717731][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 156.726945][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 156.735775][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 156.788071][ T4217] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.841473][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 156.851341][ T4217] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.856336][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 156.879010][ T4515] device veth0_macvtap entered promiscuous mode [ 156.897657][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 156.906857][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 156.930306][ T4217] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.938191][ T4515] device veth1_macvtap entered promiscuous mode [ 156.987815][ T4217] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.011828][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 157.052032][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 157.072696][ T4515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.083412][ T4515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.096047][ T4515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.107016][ T4515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.117175][ T4515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.129035][ T4515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.151056][ T4515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.171453][ T4515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.193404][ T4515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.206257][ T4515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.216566][ T4515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.227448][ T4515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.237763][ T4515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.249236][ T4515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.259522][ T4515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.270481][ T4515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.280823][ T4515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.297079][ T4515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.308627][ T4515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.319543][ T4515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.329789][ T4515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.340681][ T4515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.352795][ T4515] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.422808][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 157.438946][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 157.454052][ T4764] FAULT_INJECTION: forcing a failure. [ 157.454052][ T4764] name fail_futex, interval 1, probability 0, space 0, times 1 [ 157.470054][ T4764] CPU: 0 PID: 4764 Comm: syz.2.67 Not tainted syzkaller #0 [ 157.477308][ T4764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 157.487404][ T4764] Call Trace: [ 157.490716][ T4764] [ 157.493677][ T4764] dump_stack_lvl+0x188/0x250 [ 157.498405][ T4764] ? __rwlock_init+0x140/0x140 [ 157.501742][ T4515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.503215][ T4764] ? show_regs_print_info+0x20/0x20 [ 157.503247][ T4764] ? load_image+0x410/0x410 [ 157.503269][ T4764] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 157.503295][ T4764] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 157.503317][ T4764] ? _raw_spin_unlock+0x40/0x40 [ 157.503342][ T4764] should_fail+0x383/0x4b0 [ 157.503370][ T4764] get_futex_key+0x1a1/0x12d0 [ 157.503399][ T4764] ? mark_lock+0x94/0x320 [ 157.503419][ T4764] ? futex_wait_restart+0x250/0x250 [ 157.503445][ T4764] ? __lock_acquire+0x13dc/0x7b50 [ 157.503476][ T4764] futex_wait_setup+0x4b/0x520 [ 157.503503][ T4764] ? memset+0x1e/0x40 [ 157.503529][ T4764] ? __hrtimer_init_sleeper+0xff/0x260 [ 157.503558][ T4764] futex_wait+0x22f/0x680 [ 157.503582][ T4764] ? verify_lock_unused+0x140/0x140 [ 157.503613][ T4764] ? do_futex+0x12b0/0x12b0 [ 157.503638][ T4764] ? __remove_hrtimer+0x3a0/0x3a0 [ 157.503677][ T4764] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 157.503707][ T4764] do_futex+0xdc2/0x12b0 [ 157.503729][ T4764] ? __lock_acquire+0x7b50/0x7b50 [ 157.503758][ T4764] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 157.503782][ T4764] ? lockdep_hardirqs_on+0x94/0x140 [ 157.503805][ T4764] ? ktime_get+0x7b/0x270 [ 157.503824][ T4764] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 157.503846][ T4764] ? ktime_get_real_ts64+0x440/0x440 [ 157.503871][ T4764] ? futex_exit_release+0x1c0/0x1c0 [ 157.503894][ T4764] ? get_timespec64+0x116/0x1b0 [ 157.503925][ T4764] ? timespec64_add_safe+0x1f0/0x1f0 [ 157.503952][ T4764] ? ktime_get+0x247/0x270 [ 157.503974][ T4764] __se_sys_futex+0x389/0x420 [ 157.504004][ T4764] ? __x64_sys_futex+0xf0/0xf0 [ 157.504034][ T4764] ? __x64_sys_futex+0x1d/0xf0 [ 157.504061][ T4764] do_syscall_64+0x4c/0xa0 [ 157.504081][ T4764] ? clear_bhb_loop+0x30/0x80 [ 157.504102][ T4764] ? clear_bhb_loop+0x30/0x80 [ 157.504124][ T4764] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 157.504145][ T4764] RIP: 0033:0x7f367607ce99 [ 157.504165][ T4764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.504185][ T4764] RSP: 002b:00007ffd90a17988 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 157.504211][ T4764] RAX: ffffffffffffffda RBX: 00000000000266e5 RCX: 00007f367607ce99 [ 157.504228][ T4764] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3676304fac [ 157.504242][ T4764] RBP: 0000000000000032 R08: 0018456c2692c002 R09: 0000000000000000 [ 157.504258][ T4764] R10: 00007ffd90a17a90 R11: 0000000000000246 R12: 00007ffd90a17ab0 [ 157.504273][ T4764] R13: 00007f3676304fac R14: 0000000000026717 R15: 00007ffd90a17a90 [ 157.504302][ T4764] [ 157.741731][ T4764] FAULT_INJECTION: forcing a failure. [ 157.741731][ T4764] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 157.785365][ T4764] CPU: 0 PID: 4764 Comm: syz.2.67 Not tainted syzkaller #0 [ 157.792607][ T4764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 157.802966][ T4764] Call Trace: [ 157.806283][ T4764] [ 157.809244][ T4764] dump_stack_lvl+0x188/0x250 [ 157.813972][ T4764] ? show_regs_print_info+0x20/0x20 [ 157.819217][ T4764] ? load_image+0x410/0x410 [ 157.823767][ T4764] should_fail+0x383/0x4b0 [ 157.828222][ T4764] prepare_alloc_pages+0x1e3/0x5b0 [ 157.833383][ T4764] __alloc_pages+0x11b/0x480 [ 157.838032][ T4764] ? zone_statistics+0x170/0x170 [ 157.843017][ T4764] ? rcu_lock_acquire+0x30/0x30 [ 157.847915][ T4764] ? alloc_pages+0x452/0x560 [ 157.852549][ T4764] __get_free_pages+0x8/0x30 [ 157.857177][ T4764] __tlb_remove_page_size+0x1f2/0x3f0 [ 157.862594][ T4764] unmap_page_range+0xfcf/0x2410 [ 157.867611][ T4764] unmap_vmas+0x131/0x250 [ 157.871980][ T4764] ? unmap_page_range+0x2410/0x2410 [ 157.877216][ T4764] ? __mutex_lock_common+0x435/0x2400 [ 157.882631][ T4764] ? exit_mm_release+0x16/0x30 [ 157.887442][ T4764] exit_mmap+0x3b9/0x640 [ 157.891728][ T4764] ? vm_brk+0x20/0x20 [ 157.895760][ T4764] ? uprobe_clear_state+0x2f6/0x460 [ 157.901000][ T4764] __mmput+0x115/0x390 [ 157.905122][ T4764] exit_mm+0x632/0x7b0 [ 157.909221][ T4764] ? perf_pmu_migrate_context+0xb70/0xb70 [ 157.914978][ T4764] ? acct_collect+0x547/0x710 [ 157.919700][ T4764] ? do_exit+0x2110/0x2110 [ 157.924153][ T4764] ? taskstats_exit+0x451/0xae0 [ 157.929045][ T4764] do_exit+0x5b8/0x2110 [ 157.933234][ T4764] ? preempt_schedule+0xbc/0xd0 [ 157.938131][ T4764] ? preempt_schedule+0xbc/0xd0 [ 157.943015][ T4764] ? put_task_struct+0x80/0x80 [ 157.947819][ T4764] ? lock_chain_count+0x20/0x20 [ 157.952727][ T4764] do_group_exit+0x12c/0x2f0 [ 157.957359][ T4764] __x64_sys_exit_group+0x3b/0x40 [ 157.962411][ T4764] do_syscall_64+0x4c/0xa0 [ 157.966866][ T4764] ? clear_bhb_loop+0x30/0x80 [ 157.971580][ T4764] ? clear_bhb_loop+0x30/0x80 [ 157.976293][ T4764] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 157.982232][ T4764] RIP: 0033:0x7f367607ce99 [ 157.986685][ T4764] Code: Unable to access opcode bytes at RIP 0x7f367607ce6f. [ 157.994090][ T4764] RSP: 002b:00007ffd90a17b68 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 158.002539][ T4764] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f367607ce99 [ 158.010639][ T4764] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 158.018643][ T4764] RBP: 00007ffd90a17bcc R08: 0000000000000000 R09: 00000000000927c0 [ 158.026659][ T4764] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 158.034668][ T4764] R13: 00000000000927c0 R14: 00000000000265b2 R15: 00007ffd90a17c20 [ 158.040818][ T4515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.042692][ T4764] [ 158.087216][ T4515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.107106][ T4515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.127544][ T4515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.149574][ T4515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.169943][ T4515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.223277][ T4515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.243702][ T4515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.306467][ T4515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.324652][ T4515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.351171][ T4515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.371042][ T4515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.391026][ T4515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.407897][ T4515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.429233][ T4515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.450300][ T4515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.471093][ T4515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.480962][ T4515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.518576][ T4515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.538326][ T4515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.554977][ T4515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.595538][ T4515] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.648205][ T4217] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.662200][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 158.673965][ T4217] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.682393][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 158.749177][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 158.774740][ T4515] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.818677][ T4515] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.838523][ T4515] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.850917][ T4515] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.045655][ T4794] FAULT_INJECTION: forcing a failure. [ 159.045655][ T4794] name fail_futex, interval 1, probability 0, space 0, times 0 [ 159.062874][ T4794] CPU: 0 PID: 4794 Comm: syz.1.48 Not tainted syzkaller #0 [ 159.070140][ T4794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 159.080223][ T4794] Call Trace: [ 159.083537][ T4794] [ 159.086497][ T4794] dump_stack_lvl+0x188/0x250 [ 159.091210][ T4794] ? show_regs_print_info+0x20/0x20 [ 159.096438][ T4794] ? load_image+0x410/0x410 [ 159.101011][ T4794] should_fail+0x383/0x4b0 [ 159.105464][ T4794] __se_sys_futex+0x1a8/0x420 [ 159.110175][ T4794] ? __x64_sys_futex+0xf0/0xf0 [ 159.114975][ T4794] ? __x64_sys_futex+0x1d/0xf0 [ 159.119774][ T4794] do_syscall_64+0x4c/0xa0 [ 159.124228][ T4794] ? clear_bhb_loop+0x30/0x80 [ 159.128942][ T4794] ? clear_bhb_loop+0x30/0x80 [ 159.133660][ T4794] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 159.139594][ T4794] RIP: 0033:0x7ffb5c5a8e99 [ 159.144046][ T4794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.163689][ T4794] RSP: 002b:00007ffe64efb248 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 159.172153][ T4794] RAX: ffffffffffffffda RBX: 0000000000026d1c RCX: 00007ffb5c5a8e99 [ 159.180164][ T4794] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ffb5c830fac [ 159.188169][ T4794] RBP: 0000000000000032 R08: 003b701bc401b7fc R09: 0000000000000000 [ 159.196175][ T4794] R10: 00007ffe64efb350 R11: 0000000000000246 R12: 00007ffe64efb370 [ 159.204182][ T4794] R13: 00007ffb5c830fac R14: 0000000000026d4e R15: 00007ffe64efb350 [ 159.212204][ T4794] [ 159.219074][ T4798] syz.2.73 uses obsolete (PF_INET,SOCK_PACKET) [ 159.257348][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.288153][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.312891][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 159.371169][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.388936][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.410946][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 159.805407][ T4823] netlink: 12 bytes leftover after parsing attributes in process `syz.4.77'. [ 159.842179][ T4823] netlink: 60 bytes leftover after parsing attributes in process `syz.4.77'. [ 160.215813][ T4190] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 160.408314][ T4849] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 160.554793][ T4234] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 160.963371][ T4838] ceph: No mds server is up or the cluster is laggy [ 161.113993][ T4856] infiniband syz0: set active [ 161.120709][ T4856] infiniband syz0: added veth0 [ 161.277793][ T4856] RDS/IB: syz0: added [ 161.284956][ T4856] smc: adding ib device syz0 with port count 1 [ 161.291909][ T4856] smc: ib device syz0 port 1 has pnetid [ 161.833961][ T4906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.101'. [ 162.547224][ T4928] netlink: 20 bytes leftover after parsing attributes in process `syz.4.106'. [ 162.592723][ T4928] netlink: 244 bytes leftover after parsing attributes in process `syz.4.106'. [ 162.621694][ T4928] netlink: 244 bytes leftover after parsing attributes in process `syz.4.106'. [ 163.121845][ T4948] netlink: 68 bytes leftover after parsing attributes in process `syz.2.112'. [ 164.684557][ T5005] [ 164.686975][ T5005] ====================================================== [ 164.694014][ T5005] WARNING: possible circular locking dependency detected [ 164.701063][ T5005] syzkaller #0 Not tainted [ 164.705504][ T5005] ------------------------------------------------------ [ 164.712564][ T5005] syz.2.121/5005 is trying to acquire lock: [ 164.718594][ T5005] ffffffff8d232ad0 (devices_rwsem){++++}-{3:3}, at: ib_register_device+0xcb/0x12e0 [ 164.727952][ T5005] [ 164.727952][ T5005] but task is already holding lock: [ 164.735340][ T5005] ffffffff8c1d4a08 (param_lock){+.+.}-{3:3}, at: param_attr_store+0xcb/0x300 [ 164.744181][ T5005] [ 164.744181][ T5005] which lock already depends on the new lock. [ 164.744181][ T5005] [ 164.755046][ T5005] [ 164.755046][ T5005] the existing dependency chain (in reverse order) is: [ 164.764086][ T5005] [ 164.764086][ T5005] -> #5 (param_lock){+.+.}-{3:3}: [ 164.771335][ T5005] __mutex_lock_common+0x1e5/0x2400 [ 164.777114][ T5005] mutex_lock_nested+0x17/0x20 [ 164.782435][ T5005] ieee80211_init_rate_ctrl_alg+0x171/0x5e0 [ 164.788910][ T5005] ieee80211_register_hw+0x23c6/0x3a60 [ 164.794937][ T5005] mac80211_hwsim_new_radio+0x209d/0x4050 [ 164.801212][ T5005] init_mac80211_hwsim+0x581/0x720 [ 164.806894][ T5005] do_one_initcall+0x272/0x730 [ 164.812210][ T5005] do_initcall_level+0x13d/0x1f0 [ 164.817814][ T5005] do_initcalls+0x4b/0x90 [ 164.822705][ T5005] kernel_init_freeable+0x3d5/0x560 [ 164.828487][ T5005] kernel_init+0x19/0x1b0 [ 164.833394][ T5005] ret_from_fork+0x1f/0x30 [ 164.838366][ T5005] [ 164.838366][ T5005] -> #4 (rtnl_mutex){+.+.}-{3:3}: [ 164.845615][ T5005] __mutex_lock_common+0x1e5/0x2400 [ 164.851372][ T5005] mutex_lock_nested+0x17/0x20 [ 164.856699][ T5005] ib_get_eth_speed+0x16b/0x500 [ 164.862141][ T5005] rxe_query_port+0x58/0x190 [ 164.867306][ T5005] ib_query_port+0x15e/0x7e0 [ 164.872447][ T5005] rxe_port_immutable+0xe0/0x240 [ 164.877957][ T5005] ib_register_device+0xd42/0x12e0 [ 164.883623][ T5005] rxe_register_device+0x256/0x360 [ 164.889298][ T5005] rxe_net_add+0x77/0xe0 [ 164.894105][ T5005] rxe_newlink+0x66/0x100 [ 164.899020][ T5005] nldev_newlink+0x524/0x580 [ 164.904169][ T5005] rdma_nl_rcv+0x6d8/0xa00 [ 164.909147][ T5005] netlink_unicast+0x78f/0x940 [ 164.914495][ T5005] netlink_sendmsg+0x8ba/0xbe0 [ 164.919825][ T5005] ____sys_sendmsg+0x5be/0x8f0 [ 164.925184][ T5005] ___sys_sendmsg+0x236/0x2e0 [ 164.930418][ T5005] __se_sys_sendmsg+0x1b7/0x2a0 [ 164.935848][ T5005] do_syscall_64+0x4c/0xa0 [ 164.940816][ T5005] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 164.947481][ T5005] [ 164.947481][ T5005] -> #3 (&rxe->usdev_lock){+.+.}-{3:3}: [ 164.955280][ T5005] __mutex_lock_common+0x1e5/0x2400 [ 164.961046][ T5005] mutex_lock_nested+0x17/0x20 [ 164.966365][ T5005] rxe_query_port+0x46/0x190 [ 164.971504][ T5005] ib_query_port+0x15e/0x7e0 [ 164.976655][ T5005] ib_setup_port_attrs+0x27b/0x2140 [ 164.982406][ T5005] add_one_compat_dev+0x3da/0x5c0 [ 164.987996][ T5005] enable_device_and_get+0x2ac/0x3d0 [ 164.993867][ T5005] ib_register_device+0x1039/0x12e0 [ 164.999621][ T5005] rxe_register_device+0x256/0x360 [ 165.005294][ T5005] rxe_net_add+0x77/0xe0 [ 165.010092][ T5005] rxe_newlink+0x66/0x100 [ 165.014978][ T5005] nldev_newlink+0x524/0x580 [ 165.020120][ T5005] rdma_nl_rcv+0x6d8/0xa00 [ 165.025092][ T5005] netlink_unicast+0x78f/0x940 [ 165.030416][ T5005] netlink_sendmsg+0x8ba/0xbe0 [ 165.035733][ T5005] ____sys_sendmsg+0x5be/0x8f0 [ 165.041055][ T5005] ___sys_sendmsg+0x236/0x2e0 [ 165.046279][ T5005] __se_sys_sendmsg+0x1b7/0x2a0 [ 165.051685][ T5005] do_syscall_64+0x4c/0xa0 [ 165.060018][ T5005] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 165.066474][ T5005] [ 165.066474][ T5005] -> #2 (&device->compat_devs_mutex){+.+.}-{3:3}: [ 165.075131][ T5005] __mutex_lock_common+0x1e5/0x2400 [ 165.080900][ T5005] mutex_lock_nested+0x17/0x20 [ 165.086221][ T5005] add_one_compat_dev+0xee/0x5c0 [ 165.091717][ T5005] enable_device_and_get+0x2ac/0x3d0 [ 165.097560][ T5005] ib_register_device+0x1039/0x12e0 [ 165.103319][ T5005] rxe_register_device+0x256/0x360 [ 165.108985][ T5005] rxe_net_add+0x77/0xe0 [ 165.113795][ T5005] rxe_newlink+0x66/0x100 [ 165.118679][ T5005] nldev_newlink+0x524/0x580 [ 165.123813][ T5005] rdma_nl_rcv+0x6d8/0xa00 [ 165.128781][ T5005] netlink_unicast+0x78f/0x940 [ 165.134128][ T5005] netlink_sendmsg+0x8ba/0xbe0 [ 165.140756][ T5005] ____sys_sendmsg+0x5be/0x8f0 [ 165.146091][ T5005] ___sys_sendmsg+0x236/0x2e0 [ 165.151324][ T5005] __se_sys_sendmsg+0x1b7/0x2a0 [ 165.156729][ T5005] do_syscall_64+0x4c/0xa0 [ 165.161699][ T5005] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 165.168163][ T5005] [ 165.168163][ T5005] -> #1 (rdma_nets_rwsem){++++}-{3:3}: [ 165.175875][ T5005] down_read+0x44/0x2e0 [ 165.180615][ T5005] enable_device_and_get+0x275/0x3d0 [ 165.186619][ T5005] ib_register_device+0x1039/0x12e0 [ 165.192390][ T5005] rxe_register_device+0x256/0x360 [ 165.198079][ T5005] rxe_net_add+0x77/0xe0 [ 165.202885][ T5005] rxe_newlink+0x66/0x100 [ 165.207788][ T5005] nldev_newlink+0x524/0x580 [ 165.212943][ T5005] rdma_nl_rcv+0x6d8/0xa00 [ 165.217927][ T5005] netlink_unicast+0x78f/0x940 [ 165.223374][ T5005] netlink_sendmsg+0x8ba/0xbe0 [ 165.228698][ T5005] ____sys_sendmsg+0x5be/0x8f0 [ 165.234026][ T5005] ___sys_sendmsg+0x236/0x2e0 [ 165.239261][ T5005] __se_sys_sendmsg+0x1b7/0x2a0 [ 165.244670][ T5005] do_syscall_64+0x4c/0xa0 [ 165.249637][ T5005] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 165.256087][ T5005] [ 165.256087][ T5005] -> #0 (devices_rwsem){++++}-{3:3}: [ 165.263695][ T5005] __lock_acquire+0x2c66/0x7b50 [ 165.269115][ T5005] lock_acquire+0x19e/0x400 [ 165.274352][ T5005] down_write+0x38/0x60 [ 165.279083][ T5005] ib_register_device+0xcb/0x12e0 [ 165.284671][ T5005] rxe_register_device+0x256/0x360 [ 165.290336][ T5005] rxe_net_add+0x77/0xe0 [ 165.295182][ T5005] rxe_param_set_add+0x395/0x590 [ 165.300672][ T5005] param_attr_store+0x20a/0x300 [ 165.306103][ T5005] module_attr_store+0x5b/0x80 [ 165.311426][ T5005] kernfs_fop_write_iter+0x3a8/0x500 [ 165.317263][ T5005] vfs_write+0x748/0xd70 [ 165.322063][ T5005] ksys_write+0x153/0x260 [ 165.326945][ T5005] do_syscall_64+0x4c/0xa0 [ 165.331915][ T5005] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 165.338362][ T5005] [ 165.338362][ T5005] other info that might help us debug this: [ 165.338362][ T5005] [ 165.348706][ T5005] Chain exists of: [ 165.348706][ T5005] devices_rwsem --> rtnl_mutex --> param_lock [ 165.348706][ T5005] [ 165.360830][ T5005] Possible unsafe locking scenario: [ 165.360830][ T5005] [ 165.368312][ T5005] CPU0 CPU1 [ 165.373712][ T5005] ---- ---- [ 165.379117][ T5005] lock(param_lock); [ 165.383132][ T5005] lock(rtnl_mutex); [ 165.389667][ T5005] lock(param_lock); [ 165.396205][ T5005] lock(devices_rwsem); [ 165.400475][ T5005] [ 165.400475][ T5005] *** DEADLOCK *** [ 165.400475][ T5005] [ 165.408642][ T5005] 5 locks held by syz.2.121/5005: [ 165.413694][ T5005] #0: ffff88807770c870 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2bf/0x370 [ 165.423053][ T5005] #1: ffff88807f6f8460 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x296/0xd70 [ 165.432072][ T5005] #2: ffff888025519c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1dc/0x500 [ 165.441885][ T5005] #3: ffff888142b95578 (kn->active){++++}-{0:0}, at: kernfs_fop_write_iter+0x1fd/0x500 [ 165.451685][ T5005] #4: ffffffff8c1d4a08 (param_lock){+.+.}-{3:3}, at: param_attr_store+0xcb/0x300 [ 165.460959][ T5005] [ 165.460959][ T5005] stack backtrace: [ 165.466870][ T5005] CPU: 1 PID: 5005 Comm: syz.2.121 Not tainted syzkaller #0 [ 165.474184][ T5005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 165.484268][ T5005] Call Trace: [ 165.487573][ T5005] [ 165.490524][ T5005] dump_stack_lvl+0x188/0x250 [ 165.495238][ T5005] ? load_image+0x410/0x410 [ 165.499783][ T5005] ? show_regs_print_info+0x20/0x20 [ 165.505022][ T5005] ? print_circular_bug+0x12b/0x1a0 [ 165.510272][ T5005] check_noncircular+0x296/0x330 [ 165.515246][ T5005] ? add_chain_block+0x9b0/0x9b0 [ 165.520339][ T5005] ? lockdep_lock+0xf1/0x1f0 [ 165.524975][ T5005] ? mark_lock+0x94/0x320 [ 165.529339][ T5005] ? _find_first_zero_bit+0xd1/0xf0 [ 165.534573][ T5005] __lock_acquire+0x2c66/0x7b50 [ 165.539471][ T5005] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 165.545534][ T5005] ? verify_lock_unused+0x140/0x140 [ 165.550769][ T5005] ? lock_chain_count+0x20/0x20 [ 165.555660][ T5005] ? __rwlock_init+0x140/0x140 [ 165.560455][ T5005] ? __kernel_text_address+0x9a/0x100 [ 165.565899][ T5005] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 165.572188][ T5005] ? lockdep_hardirqs_on+0x94/0x140 [ 165.577459][ T5005] lock_acquire+0x19e/0x400 [ 165.582014][ T5005] ? ib_register_device+0xcb/0x12e0 [ 165.587271][ T5005] ? __might_sleep+0xf0/0xf0 [ 165.592141][ T5005] ? read_lock_is_recursive+0x10/0x10 [ 165.597566][ T5005] ? __kasan_kmalloc+0xc6/0xe0 [ 165.602374][ T5005] ? __kasan_kmalloc+0xaf/0xe0 [ 165.607177][ T5005] ? crypto_create_tfm_node+0x72/0x340 [ 165.612848][ T5005] ? crypto_alloc_tfm_node+0x177/0x360 [ 165.618344][ T5005] ? rxe_icrc_init+0x1b/0x80 [ 165.622962][ T5005] ? rxe_net_add+0x77/0xe0 [ 165.627414][ T5005] ? rxe_param_set_add+0x395/0x590 [ 165.632559][ T5005] ? param_attr_store+0x20a/0x300 [ 165.637707][ T5005] ? kernfs_fop_write_iter+0x3a8/0x500 [ 165.643198][ T5005] ? vfs_write+0x748/0xd70 [ 165.647657][ T5005] ? ksys_write+0x153/0x260 [ 165.652540][ T5005] ? do_syscall_64+0x4c/0xa0 [ 165.657165][ T5005] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 165.663355][ T5005] down_write+0x38/0x60 [ 165.667562][ T5005] ? ib_register_device+0xcb/0x12e0 [ 165.672809][ T5005] ib_register_device+0xcb/0x12e0 [ 165.677872][ T5005] ? remove_all_compat_devs+0x260/0x260 [ 165.683465][ T5005] ? crypto_shash_init_tfm+0x1d0/0x310 [ 165.688963][ T5005] ? crc32_pclmul_cra_init+0x9/0x50 [ 165.694203][ T5005] ? crypto_create_tfm_node+0x2ad/0x340 [ 165.699791][ T5005] ? crypto_alloc_tfm_node+0x339/0x360 [ 165.705390][ T5005] rxe_register_device+0x256/0x360 [ 165.710570][ T5005] rxe_net_add+0x77/0xe0 [ 165.714851][ T5005] rxe_param_set_add+0x395/0x590 [ 165.719867][ T5005] ? mutex_lock_io_nested+0x60/0x60 [ 165.725137][ T5005] ? rxe_udp_encap_recv+0x310/0x310 [ 165.730381][ T5005] ? read_lock_is_recursive+0x10/0x10 [ 165.735828][ T5005] param_attr_store+0x20a/0x300 [ 165.740722][ T5005] ? param_attr_show+0x170/0x170 [ 165.745691][ T5005] ? sysfs_kf_read+0x350/0x350 [ 165.750490][ T5005] module_attr_store+0x5b/0x80 [ 165.755285][ T5005] kernfs_fop_write_iter+0x3a8/0x500 [ 165.760607][ T5005] vfs_write+0x748/0xd70 [ 165.764884][ T5005] ? file_end_write+0x250/0x250 [ 165.769783][ T5005] ? mutex_lock_nested+0x17/0x20 [ 165.774760][ T5005] ? __fdget_pos+0x2bf/0x370 [ 165.779387][ T5005] ? ksys_write+0x70/0x260 [ 165.783834][ T5005] ksys_write+0x153/0x260 [ 165.788200][ T5005] ? __ia32_sys_read+0x80/0x80 [ 165.793000][ T5005] ? lockdep_hardirqs_on+0x94/0x140 [ 165.798240][ T5005] do_syscall_64+0x4c/0xa0 [ 165.802692][ T5005] ? clear_bhb_loop+0x30/0x80 [ 165.807404][ T5005] ? clear_bhb_loop+0x30/0x80 [ 165.812122][ T5005] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 165.818053][ T5005] RIP: 0033:0x7f367607ce99 [ 165.822507][ T5005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.842150][ T5005] RSP: 002b:00007f36742d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 165.850600][ T5005] RAX: ffffffffffffffda RBX: 00007f3676304fa0 RCX: 00007f367607ce99 [ 165.858606][ T5005] RDX: 0000000000000005 RSI: 0000200000000080 RDI: 0000000000000003 [ 165.866610][ T5005] RBP: 00007f3676112eaf R08: 0000000000000000 R09: 0000000000000000 [ 165.874617][ T5005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 165.882615][ T5005] R13: 00007f3676305038 R14: 00007f3676304fa0 R15: 00007ffd90a17828 [ 165.890625][ T5005] [ 165.987900][ T5015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.124'. [ 166.191314][ T5005] eth0 speed is unknown, defaulting to 1000 [ 166.253780][ T5005] eth0 speed is unknown, defaulting to 1000 [ 166.260056][ T5005] eth0 speed is unknown, defaulting to 1000 [ 166.286951][ T154] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.355760][ T4190] eth0 speed is unknown, defaulting to 1000 [ 166.355734][ T5005] infiniband rxe0: set active [ 166.367941][ T5005] infiniband rxe0: added eth0 [ 166.377802][ T154] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.389108][ T5005] infiniband rxe0: Couldn't open port 1 [ 166.414894][ T5005] RDS/IB: rxe0: added [ 166.419357][ T5005] smc: adding ib device rxe0 with port count 1 [ 166.427083][ T5005] smc: ib device rxe0 port 1 has pnetid [ 166.433412][ T1108] eth0 speed is unknown, defaulting to 1000 [ 166.439816][ T5005] eth0 speed is unknown, defaulting to 1000 [ 166.450544][ T154] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.529608][ T5005] eth0 speed is unknown, defaulting to 1000 [ 166.544793][ T154] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.628856][ T5005] eth0 speed is unknown, defaulting to 1000 [ 166.754495][ T5005] eth0 speed is unknown, defaulting to 1000 [ 166.845056][ T5005] eth0 speed is unknown, defaulting to 1000 [ 166.987971][ T5005] eth0 speed is unknown, defaulting to 1000 [ 167.119524][ T5005] eth0 speed is unknown, defaulting to 1000 [ 167.216326][ T5005] eth0 speed is unknown, defaulting to 1000 [ 167.295973][ T5005] eth0 speed is unknown, defaulting to 1000 [ 167.377674][ T5005] eth0 speed is unknown, defaulting to 1000 [ 167.491943][ T5005] eth0 speed is unknown, defaulting to 1000 [ 167.583287][ T5005] eth0 speed is unknown, defaulting to 1000 [ 167.893066][ T154] device hsr_slave_0 left promiscuous mode [ 167.899640][ T154] device hsr_slave_1 left promiscuous mode [ 167.907092][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.914700][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.924141][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.933972][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.942348][ T154] device bridge_slave_1 left promiscuous mode [ 167.949403][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.958091][ T154] device bridge_slave_0 left promiscuous mode [ 167.964628][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.975782][ T154] rdma_rxe: ignoring netdev event = 10 for veth0 [ 167.983697][ T154] device veth1_macvtap left promiscuous mode [ 167.989785][ T154] device veth0_macvtap left promiscuous mode [ 167.996199][ T154] device veth1_vlan left promiscuous mode [ 168.006925][ T154] device veth0_vlan left promiscuous mode [ 168.068044][ T154] infiniband syz0: set down [ 168.134854][ T154] team0 (unregistering): Port device team_slave_1 removed [ 168.147321][ T154] team0 (unregistering): Port device team_slave_0 removed [ 168.164787][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.178530][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.207053][ T4539] smc: removing ib device syz0 [ 168.238242][ T154] bond0 (unregistering): Released all slaves [ 168.296065][ T4190] infiniband syz0: ib_query_port failed (-19) [ 169.887499][ T154] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.932014][ T154] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.987167][ T154] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.035902][ T154] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.148654][ T154] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.210004][ T154] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.255214][ T154] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.296190][ T154] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.334967][ T154] device hsr_slave_0 left promiscuous mode [ 171.341671][ T154] device hsr_slave_1 left promiscuous mode [ 171.348056][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.355962][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.364082][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.372352][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.380161][ T154] device bridge_slave_1 left promiscuous mode [ 171.386713][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.395734][ T154] device bridge_slave_0 left promiscuous mode [ 171.402182][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.414101][ T154] device hsr_slave_0 left promiscuous mode [ 171.420761][ T154] device hsr_slave_1 left promiscuous mode [ 171.428505][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.438443][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.451625][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.459204][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.472045][ T154] device bridge_slave_1 left promiscuous mode [ 171.478277][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.491762][ T154] device bridge_slave_0 left promiscuous mode [ 171.497992][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.516830][ T154] device veth1_macvtap left promiscuous mode [ 171.533959][ T154] device veth0_macvtap left promiscuous mode [ 171.540070][ T154] device veth1_vlan left promiscuous mode [ 171.547313][ T154] device veth0_vlan left promiscuous mode [ 171.554012][ T154] device veth1_macvtap left promiscuous mode [ 171.560055][ T154] device veth0_macvtap left promiscuous mode [ 171.566680][ T154] device veth1_vlan left promiscuous mode [ 171.572634][ T154] device veth0_vlan left promiscuous mode [ 171.769230][ T154] team0 (unregistering): Port device team_slave_1 removed [ 171.785332][ T154] team0 (unregistering): Port device team_slave_0 removed [ 171.797323][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.815398][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.867248][ T154] bond0 (unregistering): Released all slaves [ 171.976861][ T154] team0 (unregistering): Port device team_slave_1 removed [ 171.993652][ T154] team0 (unregistering): Port device team_slave_0 removed [ 172.007346][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.020506][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.075506][ T154] bond0 (unregistering): Released all slaves