last executing test programs: 1m55.078980822s ago: executing program 0 (id=136): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0) write(r0, &(0x7f00000003c0)='ipv4\n\x00', 0x5) 1m54.995051721s ago: executing program 0 (id=138): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='127.0.0.1\n\x00', 0xa) 1m54.927730733s ago: executing program 0 (id=139): r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0) write(r0, &(0x7f0000000340)='4420\n\x00', 0x5) 1m54.687931889s ago: executing program 0 (id=141): r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='tcp\n\x00', 0x4) 1m54.500530436s ago: executing program 0 (id=142): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x3e8}]}}]}, 0x38}}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000300)='\x00'/64, 0x40, 0x0, &(0x7f0000000400)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x38}}, 0x0) 1m54.385379584s ago: executing program 0 (id=143): unshare(0x40000000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') unshare(0x40000000) close(r0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) 1m39.265946492s ago: executing program 32 (id=143): unshare(0x40000000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') unshare(0x40000000) close(r0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) 52.451583729s ago: executing program 1 (id=626): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000000a00010001000000000000000000000a1c000000000a0106020000000000000007000000080001006e6174002c000000030a0106030000000000000007000000080001006e6174000f000200505245524f5554494e47000068000000060a0106040000000000000007000000080001006e6174000f000200505245524f5554494e4700003c800400388001000b0001007461726765740000002880020009000100646e617400000000080002000000000010000300000000000000feffffff0000140000000b00010005000000000000000000000a"], 0xd8}}, 0x0) 52.306323586s ago: executing program 1 (id=627): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 52.214370471s ago: executing program 1 (id=628): r0 = socket(0x8, 0x2, 0x0) ioctl(r0, 0x400261f1, &(0x7f0000000000)="01000000000000006e617330000000000000000000000000dc050000") ioctl(r0, 0x400261f0, &(0x7f0000000100)="01000000010000006e6173300000000000000000000000000100"/44) 52.007929495s ago: executing program 1 (id=630): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x9, 0x3, 0x2d8, 0x0, 0xffffffff, 0xffffffff, 0xf8, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @remote, [0xff, 0xff000000, 0x0, 0xffffff00], [0xff000000, 0xff, 0xff], 'wg2\x00', 'geneve1\x00', {}, {}, 0x29, 0x10, 0x0, 0x1c}, 0x0, 0xd0, 0xf8, 0x60030000, {0x0, 0xff000000}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x2}, {0x1, 0x6}}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0xfffffe01}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0x1, {0xd457}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) nanosleep(&(0x7f0000000300)={0x0, 0x11e1a300}, 0x0) 51.463203411s ago: executing program 1 (id=636): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c0, 0x0, 0x98, 0x130, 0x1c8, 0x290, 0x328, 0x328, 0x328, 0x328, 0x328, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x0, 0xffff], [0x0, 0xffff], 0x0, 0x2, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x420) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind(r1, &(0x7f0000000100)=@in={0x2, 0x1234, @loopback}, 0x10) listen(r1, 0x5) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000200)={0x2, 0x1234, @loopback}, 0x10) 51.326023716s ago: executing program 1 (id=637): unshare(0x40000000) unshare(0x40000000) unshare(0x40000000) unshare(0x40000000) unshare(0x40000000) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x1dcd6500}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x1dcd6500}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x1dcd6500}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x1dcd6500}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x1dcd6500}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x1dcd6500}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x1dcd6500}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x1dcd6500}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x1dcd6500}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x1dcd6500}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x1dcd6500}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x1dcd6500}, 0x0) 35.943943714s ago: executing program 33 (id=637): unshare(0x40000000) unshare(0x40000000) unshare(0x40000000) unshare(0x40000000) unshare(0x40000000) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x1dcd6500}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x1dcd6500}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x1dcd6500}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x1dcd6500}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x1dcd6500}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x1dcd6500}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x1dcd6500}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x1dcd6500}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x1dcd6500}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x1dcd6500}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x1dcd6500}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x1dcd6500}, 0x0) 8.523660399s ago: executing program 5 (id=999): r0 = socket$inet_sctp(0x2, 0x805, 0x84) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_sctp(0x2, 0x805, 0x84) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000080)=0x1, 0x4) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @loopback}, 0x10) listen(r1, 0x5) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @loopback}, 0x10) (async) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x10) 8.362801105s ago: executing program 5 (id=1001): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r1, &(0x7f0000000020)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000100)={0x270f}, 0x20) sendto$inet(r1, &(0x7f0000000200)='test\x00', 0x5, 0x0, 0x0, 0x0) 7.963807002s ago: executing program 5 (id=1007): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='tcp 2049\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='2\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./proc\x00', &(0x7f0000000700)='proc\x00', 0x0, 0x0) r2 = socket(0x2, 0x1, 0x0) connect(r2, &(0x7f0000000800)=@in={0x2, 0x7d08, @loopback}, 0x10) write(r2, &(0x7f0000000900)="80000068123456780000000000000002000100030000000300000000000000060000001c000000010000000000000000000000030000000668616e646c65000000000006000000200000001c040400ffffffffff00000000000000000000001400"/128, 0x6c) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r3, &(0x7f0000000b00)='\\x68\\x61\\x6e\\x64\\x6c\\x65 2147483647 0 0 0 krb5 \\x00\\x00\\x00\\x00\\x7f\\xff\\xff\\xff\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x14\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\n', 0xdc) nanosleep(&(0x7f0000000c00)={0x0, 0x5f5e100}, 0x0) 7.752787917s ago: executing program 2 (id=1010): mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/ports\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/ports/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='tcp\n\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='127.0.0.1\n\x00', 0xa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='4420\n\x00', 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='ipv4\n\x00', 0x5) r4 = syz_socket_connect_nvme_tcp() sendto(r4, &(0x7f0000000200)="17030300050102030405", 0xa, 0x0, 0x0, 0x0) 7.5997159s ago: executing program 2 (id=1012): r0 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}}}, 0x10) sendto(r0, &(0x7f0000000100)="010000000000000064000000ffffffff010000003132333435363738", 0x20, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 7.350688094s ago: executing program 2 (id=1017): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 7.104995886s ago: executing program 2 (id=1018): r0 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000940)=@filter={'filter\x00', 0xe, 0x4, 0x350, 0xffffffff, 0x0, 0xc4, 0x188, 0xffffffff, 0xffffffff, 0x0, 0xc4, 0x188, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x4}}]}, @common=@unspec=@STANDARD={0x28}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x4}}]}, @common=@unspec=@STANDARD={0x28}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x4}}]}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3b0) 6.959449s ago: executing program 2 (id=1019): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/ports\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/ports/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r0, &(0x7f0000000240), 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='127.0.0.1\n\x00', 0xa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='4420\n\x00', 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='ipv4\n\x00', 0x5) r4 = syz_socket_connect_nvme_tcp() sendto(r4, &(0x7f0000000200)="17030300050102030405", 0xa, 0x0, 0x0, 0x0) 6.847100984s ago: executing program 2 (id=1022): r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x5c, 0x10, 0x605, 0x1, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}, @IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}]}, 0x5c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a00)={'veth0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000b00)={'veth1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000300)={'veth0\x00', 0x1}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@ipv6_newaddr={0x34, 0x14, 0x605, 0x1, 0x0, {0xa, 0x40, 0x2, 0x0, r2}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFA_FLAGS={0x8, 0x8, 0x2}]}, 0x34}}, 0x0) unshare(0x40000000) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/net\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@setlink={0x3c, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_IFNAME={0x14, 0x3, 'veth1\x00'}, @IFLA_NET_NS_FD={0x8, 0x1c, r4}]}, 0x3c}}, 0x0) r6 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000400)={'veth1\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c00)={'veth1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=@ipv6_newaddr={0x34, 0x14, 0x605, 0x1, 0x0, {0xa, 0x40, 0x2, 0x0, r7}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFA_FLAGS={0x8, 0x8, 0x2}]}, 0x34}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newneigh={0x3c, 0x1c, 0x605, 0x1, 0x0, {0xa, 0x0, 0x0, r7, 0x80, 0x0, 0x1}, [@NDA_DST_IPV6={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NDA_LLADDR={0xa, 0x2, @random="001122334455"}]}, 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newneigh={0x3c, 0x1c, 0x605, 0x1, 0x0, {0xa, 0x0, 0x0, r2, 0x80, 0x0, 0x1}, [@NDA_DST_IPV6={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NDA_LLADDR={0xa, 0x2, @random="001122334466"}]}, 0x3c}}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000700)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r8, &(0x7f0000000800)={0xa, 0x4001, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) nanosleep(&(0x7f0000000900)={0x0, 0x1dcd6500}, 0x0) 6.455104633s ago: executing program 4 (id=1028): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 6.200061014s ago: executing program 4 (id=1029): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000300)=@newqdisc={0x6c, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}]}}]}, 0x6c}}, 0x0) 5.947415915s ago: executing program 4 (id=1031): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={@null, 0x0, 'vcan0\x00'}) fcntl$setstatus(r0, 0x4, 0x800) connect$x25(r0, &(0x7f0000000400), 0x12) 5.830957419s ago: executing program 4 (id=1032): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/ports\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/ports/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r0, &(0x7f0000000240), 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='127.0.0.1\n\x00', 0xa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='4420\n\x00', 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='ipv4\n\x00', 0x5) r4 = syz_socket_connect_nvme_tcp() sendto(r4, &(0x7f0000000200)="17030300050102030405", 0xa, 0x0, 0x0, 0x0) 5.719542233s ago: executing program 5 (id=1033): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000e0)) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r0, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) 5.688205286s ago: executing program 4 (id=1034): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/ports\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/ports/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='tcp\n\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='127.0.0.1\n\x00', 0xa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='4420\n\x00', 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='ipv4\n\x00', 0x5) r4 = syz_socket_connect_nvme_tcp() sendto(r4, &(0x7f0000000200)="17030300050102030405", 0xa, 0x0, 0x0, 0x0) 5.471193901s ago: executing program 4 (id=1036): unshare(0x40000000) unshare(0x40000000) unshare(0x40000000) unshare(0x40000000) unshare(0x40000000) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) 5.429410127s ago: executing program 5 (id=1037): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x2}, 0x10) getsockname$llc(r0, &(0x7f0000000100), &(0x7f0000000200)=0x10) getpeername$llc(r0, &(0x7f0000000100), &(0x7f0000000200)=0x10) 5.280414565s ago: executing program 5 (id=1038): unshare(0x40000000) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='2\n', 0x2) close(r0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'lo\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x5c, 0x10, 0x605, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'veth0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'veth1\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000300)={'veth0\x00', {0x2, 0x0, @private=0x100000a}}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000300)={'veth1\x00', {0x2, 0x0, @private=0x200000a}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r3) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x24, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x24}}, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000700)={0x2, 0x4e24, @private=0x100000a}, 0x10) listen(r5, 0x5) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000780)={0x2, 0x0, @private=0x200000a}, 0x10) connect$inet(r6, &(0x7f0000000800)={0x2, 0x4e24, @private=0x100000a}, 0x10) r7 = accept4(r5, 0x0, 0x0, 0x0) write(r6, &(0x7f0000000900)='hello', 0x5) read(r7, &(0x7f0000000a00), 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x38, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0x300000a}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}]}, 0x38}}, 0x0) nanosleep(&(0x7f0000000d00)={0x0, 0xbebc200}, 0x0) write(r6, &(0x7f0000000900)='world', 0x5) read(r7, &(0x7f0000000a00), 0x10) nanosleep(&(0x7f0000000d00)={0x0, 0xbebc200}, 0x0) 2.320442548s ago: executing program 3 (id=1046): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/ports\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/ports/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='tcp\n\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='127.0.0.1\n\x00', 0xa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='4420\n\x00', 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='ipv4\n\x00', 0x5) r4 = syz_socket_connect_nvme_tcp() sendto(r4, &(0x7f0000000200)="17030300050102030405", 0xa, 0x0, 0x0, 0x0) 2.103766484s ago: executing program 3 (id=1047): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000e0)) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r0, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) 2.036029809s ago: executing program 3 (id=1048): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='2049\n', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./proc\x00', &(0x7f0000000700)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r2, &(0x7f0000000900)='\\x68\\x61\\x6e\\x64\\x6c\\x65 2147483647 0 0 0 krb5 \\x00\\x00\\x00\\x00\\x7f\\xff\\xff\\xff\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x14\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\n', 0xdc) 682.927779ms ago: executing program 6 (id=1053): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={@null, 0x0, 'vcan0\x00'}) fcntl$setstatus(r0, 0x4, 0x800) connect$x25(r0, &(0x7f0000000400), 0x12) 535.72095ms ago: executing program 6 (id=1054): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x68, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="000000002600010000112233445566778899aabb0800450000140000000001170000010203040506070800000c0002000600060008000000100003000c00170004000100"]}, 0x68}}, 0x0) 484.609289ms ago: executing program 3 (id=1055): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/ports\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/ports/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='tcp', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='127.0.0.1\n\x00', 0xa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='4420\n\x00', 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='ipv4\n\x00', 0x5) r4 = syz_socket_connect_nvme_tcp() sendto(r4, &(0x7f0000000200)="17030300050102030405", 0xa, 0x0, 0x0, 0x0) 436.231828ms ago: executing program 6 (id=1056): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./proc\x00', &(0x7f0000000700)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r0, &(0x7f0000000e00)='testhandle 2000000000 0 0 0 krb5 \\x00000000ffffff7f00000000', 0x3b) 362.776278ms ago: executing program 6 (id=1057): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/ports\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/ports/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='tcp\n\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='127.0.0.1\n\x00', 0xa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='4420\n\x00', 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='ipv4\n\x00', 0x5) r4 = syz_socket_connect_nvme_tcp() sendto(r4, &(0x7f0000000200)="17030300050102030405", 0xa, 0x0, 0x0, 0x0) 212.969442ms ago: executing program 3 (id=1058): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000e0)) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r0, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) 147.93191ms ago: executing program 6 (id=1059): r0 = socket$inet(0x2, 0x2, 0x11) bind$inet(r0, &(0x7f0000000000)={0x2, 0x115c, @loopback}, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x115c, @loopback}, 0x1, 0x1, 0x1, 0x1}}, 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/net/pppol2tp\x00', 0x0, 0x0) read(r2, &(0x7f0000000200), 0x10) lseek(r2, 0x1, 0x0) read(r2, &(0x7f0000000300), 0x1000) 55.647449ms ago: executing program 6 (id=1060): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a85, @loopback}, 0x10) listen(r0, 0x5) r1 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = accept$inet(r0, &(0x7f0000000200), &(0x7f0000000210)=0x10) nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0) write(r2, &(0x7f0000000300)='ceph v027\x00'/278, 0x119) nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0) write(r2, &(0x7f0000000800)="01ffffffffffffffffffffffffffffffff00"/30, 0x1e) nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0) write(r2, &(0x7f0000000c00)="070100000000000000000000000000000030000000000000000000000000000000000000000100000000000000000000000000000028d7b3ad00"/74, 0x48) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) 0s ago: executing program 3 (id=1061): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.157' (ED25519) to the list of known hosts. [ 92.107713][ T31] cfg80211: failed to load regulatory.db [ 92.413204][ T5582] cgroup: Unknown subsys name 'net' [ 92.656031][ T5582] cgroup: Unknown subsys name 'cpuset' [ 92.728738][ T5582] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 94.736340][ T5582] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.454549][ T5601] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.477574][ T5601] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.504860][ T5601] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.505682][ T5601] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.506227][ T5601] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.524845][ T5601] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.531750][ T5601] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.542385][ T5601] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.548395][ T5601] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.549097][ T5601] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.587211][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.612845][ T5607] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.669122][ T4911] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.679270][ T4911] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.697024][ T5607] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 97.715620][ T5607] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.743307][ T5607] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.743592][ T5607] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.744061][ T5607] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 97.745999][ T4911] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 97.753931][ T5601] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.757080][ T5611] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 97.759891][ T5601] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 97.766537][ T5611] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.776545][ T5605] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 99.659029][ T5605] Bluetooth: hci0: command tx timeout [ 99.748686][ T5605] Bluetooth: hci1: command tx timeout [ 99.898009][ T5605] Bluetooth: hci2: command tx timeout [ 100.058024][ T5605] Bluetooth: hci4: command tx timeout [ 100.058194][ T5605] Bluetooth: hci3: command tx timeout [ 100.790637][ T5595] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.791950][ T5595] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.792111][ T5595] bridge_slave_0: entered allmulticast mode [ 100.794580][ T5595] bridge_slave_0: entered promiscuous mode [ 100.835715][ T5598] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.835841][ T5598] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.835978][ T5598] bridge_slave_0: entered allmulticast mode [ 100.839420][ T5598] bridge_slave_0: entered promiscuous mode [ 100.845181][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.845544][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.845977][ T5596] bridge_slave_0: entered allmulticast mode [ 100.874993][ T5596] bridge_slave_0: entered promiscuous mode [ 100.900589][ T5594] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.900704][ T5594] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.900917][ T5594] bridge_slave_0: entered allmulticast mode [ 100.903512][ T5594] bridge_slave_0: entered promiscuous mode [ 100.905056][ T5595] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.905188][ T5595] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.905365][ T5595] bridge_slave_1: entered allmulticast mode [ 100.909966][ T5595] bridge_slave_1: entered promiscuous mode [ 100.971626][ T5598] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.971780][ T5598] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.971966][ T5598] bridge_slave_1: entered allmulticast mode [ 100.974470][ T5598] bridge_slave_1: entered promiscuous mode [ 100.977059][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.977202][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.977395][ T5596] bridge_slave_1: entered allmulticast mode [ 101.027089][ T5596] bridge_slave_1: entered promiscuous mode [ 101.035614][ T5594] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.035749][ T5594] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.036371][ T5594] bridge_slave_1: entered allmulticast mode [ 101.041488][ T5594] bridge_slave_1: entered promiscuous mode [ 101.079586][ T5597] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.079672][ T5597] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.080034][ T5597] bridge_slave_0: entered allmulticast mode [ 101.081896][ T5597] bridge_slave_0: entered promiscuous mode [ 101.168427][ T5597] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.168539][ T5597] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.168674][ T5597] bridge_slave_1: entered allmulticast mode [ 101.170580][ T5597] bridge_slave_1: entered promiscuous mode [ 101.238654][ T5595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.264029][ T5598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.267377][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.289334][ T5594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.292127][ T5595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.328715][ T5598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.331251][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.333731][ T5594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.376582][ T5597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.449069][ T5597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.503454][ T5595] team0: Port device team_slave_0 added [ 101.524190][ T5598] team0: Port device team_slave_0 added [ 101.526765][ T5596] team0: Port device team_slave_0 added [ 101.533684][ T5594] team0: Port device team_slave_0 added [ 101.546770][ T5595] team0: Port device team_slave_1 added [ 101.568647][ T5598] team0: Port device team_slave_1 added [ 101.570779][ T5596] team0: Port device team_slave_1 added [ 101.573029][ T5594] team0: Port device team_slave_1 added [ 101.607329][ T5597] team0: Port device team_slave_0 added [ 101.680930][ T5597] team0: Port device team_slave_1 added [ 101.733616][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.733636][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.733657][ T5595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.739457][ T4911] Bluetooth: hci0: command tx timeout [ 101.790643][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.790658][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.790681][ T5598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.793631][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.793654][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.793687][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.796105][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.796123][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.796154][ T5594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.800917][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.800965][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.801047][ T5595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.819908][ T4911] Bluetooth: hci1: command tx timeout [ 101.893646][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.893702][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.893785][ T5598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.905094][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.905154][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.906644][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.923690][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.923742][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.923825][ T5594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.978102][ T4911] Bluetooth: hci2: command tx timeout [ 102.018266][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.018325][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.018399][ T5597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.139371][ T4911] Bluetooth: hci3: command tx timeout [ 102.139440][ T4911] Bluetooth: hci4: command tx timeout [ 102.179221][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.179234][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.179254][ T5597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.822559][ T5595] hsr_slave_0: entered promiscuous mode [ 102.823902][ T5595] hsr_slave_1: entered promiscuous mode [ 102.856830][ T5598] hsr_slave_0: entered promiscuous mode [ 102.865165][ T5598] hsr_slave_1: entered promiscuous mode [ 102.865979][ T5598] debugfs: 'hsr0' already exists in 'hsr' [ 102.866057][ T5598] Cannot create hsr debugfs directory [ 102.888129][ T5596] hsr_slave_0: entered promiscuous mode [ 102.890092][ T5596] hsr_slave_1: entered promiscuous mode [ 102.890902][ T5596] debugfs: 'hsr0' already exists in 'hsr' [ 102.890919][ T5596] Cannot create hsr debugfs directory [ 102.903437][ T5594] hsr_slave_0: entered promiscuous mode [ 102.906966][ T5594] hsr_slave_1: entered promiscuous mode [ 102.912990][ T5594] debugfs: 'hsr0' already exists in 'hsr' [ 102.913054][ T5594] Cannot create hsr debugfs directory [ 102.967778][ T5597] hsr_slave_0: entered promiscuous mode [ 102.972471][ T5597] hsr_slave_1: entered promiscuous mode [ 102.975118][ T5597] debugfs: 'hsr0' already exists in 'hsr' [ 102.975188][ T5597] Cannot create hsr debugfs directory [ 103.818017][ T5605] Bluetooth: hci0: command tx timeout [ 103.898041][ T5605] Bluetooth: hci1: command tx timeout [ 104.066084][ T5595] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 104.068759][ T5605] Bluetooth: hci2: command tx timeout [ 104.121708][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.135070][ T5595] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 104.172174][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.174482][ T5595] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 104.212403][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.219135][ T5605] Bluetooth: hci4: command tx timeout [ 104.219170][ T5605] Bluetooth: hci3: command tx timeout [ 104.246509][ T5595] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 104.273516][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.384147][ T5596] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 104.413230][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.426694][ T5596] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 104.453527][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.475735][ T5596] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 104.512748][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.538381][ T5596] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 104.572987][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.721676][ T5594] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 104.753421][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.771988][ T5594] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 104.812303][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.836664][ T5594] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 104.871685][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.898251][ T5594] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 104.944203][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.113860][ T5597] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 105.144068][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.165991][ T5597] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 105.201978][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.218996][ T5597] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 105.256845][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.295619][ T5597] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 105.331461][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.454760][ T5595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.561352][ T5598] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.603334][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.617281][ T5598] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.642300][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.656778][ T5598] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.691968][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.709246][ T5598] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.753672][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.796355][ T5595] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.839040][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.874562][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.874733][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.910451][ T4911] Bluetooth: hci0: command tx timeout [ 105.954187][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.954306][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.978923][ T4911] Bluetooth: hci1: command tx timeout [ 106.032017][ T5596] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.086190][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.086340][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.128050][ T5594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.138902][ T4911] Bluetooth: hci2: command tx timeout [ 106.191210][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.191355][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.265173][ T5594] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.308687][ T4911] Bluetooth: hci3: command tx timeout [ 106.308722][ T4911] Bluetooth: hci4: command tx timeout [ 106.338101][ T1308] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.338285][ T1308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.382439][ T5597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.427546][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.427770][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.560735][ T5597] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.623563][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.623778][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.636026][ T5598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.715532][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.715691][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.830765][ T5598] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.937513][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.937645][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.087693][ T1182] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.088239][ T1182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.720546][ T5595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.146055][ T5595] veth0_vlan: entered promiscuous mode [ 108.242521][ T5595] veth1_vlan: entered promiscuous mode [ 108.265556][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.379912][ T5594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.534700][ T5595] veth0_macvtap: entered promiscuous mode [ 108.575691][ T5595] veth1_macvtap: entered promiscuous mode [ 108.686070][ T5596] veth0_vlan: entered promiscuous mode [ 108.737699][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.813279][ T5594] veth0_vlan: entered promiscuous mode [ 108.829170][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.833526][ T5597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.853233][ T5596] veth1_vlan: entered promiscuous mode [ 108.920619][ T5598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.945685][ T5594] veth1_vlan: entered promiscuous mode [ 109.377248][ T5596] veth0_macvtap: entered promiscuous mode [ 109.427255][ T5596] veth1_macvtap: entered promiscuous mode [ 109.435359][ T5594] veth0_macvtap: entered promiscuous mode [ 109.514960][ T5594] veth1_macvtap: entered promiscuous mode [ 109.582909][ T1182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.582937][ T1182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.611917][ T5598] veth0_vlan: entered promiscuous mode [ 109.645780][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.701836][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.703816][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.730477][ T5598] veth1_vlan: entered promiscuous mode [ 109.760352][ T2153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.760374][ T2153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.766748][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.826082][ T5597] veth0_vlan: entered promiscuous mode [ 110.088092][ T5597] veth1_vlan: entered promiscuous mode [ 110.716679][ T5598] veth0_macvtap: entered promiscuous mode [ 110.784262][ T5598] veth1_macvtap: entered promiscuous mode [ 110.863780][ T1182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.863801][ T1182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.964502][ T1133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.964524][ T1133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.004601][ T5597] veth0_macvtap: entered promiscuous mode [ 111.030726][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.076083][ T5597] veth1_macvtap: entered promiscuous mode [ 111.096421][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.112574][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.112596][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.192237][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.192259][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.235897][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.360600][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.823531][ T5788] Zero length message leads to an empty skb [ 111.824069][ T5788] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6'. [ 112.271883][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.271905][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.634560][ T1133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.634580][ T1133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.901169][ T1133] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.953710][ T1133] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.953905][ T1133] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.954360][ T1133] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.954532][ T1133] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.189414][ T1182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.189436][ T1182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.972958][ T1182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.972980][ T1182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.095569][ T5810] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1'. [ 114.182935][ T43] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.183112][ T43] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.637367][ T5818] netlink: 92 bytes leftover after parsing attributes in process `syz.0.8'. [ 114.789169][ T43] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.854003][ T5821] netlink: 'syz.4.5': attribute type 2 has an invalid length. [ 115.199505][ T1076] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.248579][ T1076] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.248786][ T1076] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.249263][ T1076] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.249422][ T1076] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.249610][ T1076] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.249790][ T1076] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.249949][ T1076] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.608679][ T1076] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.637320][ T1076] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.637612][ T1076] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.734068][ T10] IPVS: starting estimator thread 0... [ 115.928142][ T5838] IPVS: using max 8 ests per chain, 19200 per kthread [ 116.005098][ T1182] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.081901][ T10] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 117.138301][ T5849] ceph: No mds server is up or the cluster is laggy [ 118.025367][ T5872] netlink: 'syz.4.24': attribute type 3 has an invalid length. [ 119.222642][ T5799] svc: failed to register nfsdv3 RPC service (errno 512). [ 119.222889][ T5799] svc: failed to register nfsaclv3 RPC service (errno 512). [ 119.222906][ T5799] failed to unregister tcp with rpcbind [ 119.271186][ T5799] svc: failed to register nfsdv3 RPC service (errno 97). [ 119.271215][ T5799] svc: failed to register nfsaclv3 RPC service (errno 97). [ 119.271239][ T5799] failed to unregister tcp with rpcbind [ 119.435574][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 119.525793][ T5892] bridge0: port 3(syz_tun) entered blocking state [ 119.525986][ T5892] bridge0: port 3(syz_tun) entered disabled state [ 119.526868][ T5892] syz_tun: entered allmulticast mode [ 119.595463][ T5892] syz_tun: entered promiscuous mode [ 119.696402][ T5892] bridge0: port 3(syz_tun) entered blocking state [ 119.696569][ T5892] bridge0: port 3(syz_tun) entered forwarding state [ 119.816415][ T9] usb 5-1: config 1 has an invalid descriptor of length 7, skipping remainder of the config [ 119.836038][ T9] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 119.854996][ T9] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 0.00 [ 119.855029][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 119.855050][ T9] usb 5-1: Product: syz [ 119.855065][ T9] usb 5-1: Manufacturer: syz [ 121.292472][ T9] speedtch 5-1:1.0: speedtch_bind: setting interface to 1 failed (-71)! [ 121.292659][ T9] speedtch 5-1:1.0: usbatm_usb_probe: bind failed: -71! [ 121.292730][ T9] speedtch 5-1:1.0: probe with driver speedtch failed with error -71 [ 121.424590][ T9] speedtch 5-1:1.1: speedtch_bind: setting interface to 1 failed (-71)! [ 121.558825][ T9] speedtch 5-1:1.1: usbatm_usb_probe: bind failed: -71! [ 121.558900][ T9] speedtch 5-1:1.1: probe with driver speedtch failed with error -71 [ 121.694194][ T9] usb 5-1: USB disconnect, device number 2 [ 122.181871][ T5906] nvme nvme0: failed to connect socket: -512 [ 122.363471][ T5934] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 123.272823][ T5948] tipc: Enabling not permitted [ 123.272858][ T5948] tipc: Enabling of bearer rejected, failed to enable media [ 123.963777][ T5968] netlink: 12 bytes leftover after parsing attributes in process `syz.0.51'. [ 124.523342][ T36] libceph: mon0 (2)127.0.0.1:6789 socket closed (con state V2_BANNER_PREFIX) [ 124.559496][ T5965] ceph: No mds server is up or the cluster is laggy [ 124.806086][ T36] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 124.889827][ T5961] NFSD: Unable to initialize client recovery tracking! (-110) [ 124.889846][ T5961] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 124.889858][ T5961] NFSD: starting 90-second grace period (net f00003c0) [ 125.090235][ T5990] netlink: 28 bytes leftover after parsing attributes in process `syz.2.56'. [ 125.090405][ T5990] netlink: 28 bytes leftover after parsing attributes in process `syz.2.56'. [ 125.622819][ T5981] ceph: No mds server is up or the cluster is laggy [ 125.641667][ T5328] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 125.718684][ T5988] ceph: No mds server is up or the cluster is laggy [ 125.721006][ T9] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 126.898367][ T6040] tipc: Started in network mode [ 126.898405][ T6040] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 126.898781][ T6040] tipc: Enabled bearer , priority 0 [ 126.964097][ T6047] netlink: 'syz.4.76': attribute type 1 has an invalid length. [ 126.964142][ T6047] netlink: 'syz.4.76': attribute type 1 has an invalid length. [ 128.513434][ T6055] syz.3.79 (6055) used greatest stack depth: 17824 bytes left [ 128.898629][ T5328] tipc: Node number set to 43690 [ 129.674446][ T6080] lo speed is unknown, defaulting to 1000 [ 129.690839][ T6080] lo speed is unknown, defaulting to 1000 [ 129.705471][ T6078] rdma_rxe: rxe_newlink: failed to add lo [ 129.769169][ T6080] lo speed is unknown, defaulting to 1000 [ 129.771877][ T6080] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 129.771913][ T6080] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 129.771954][ T6080] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 129.839390][ T6078] rdma_op ffff888038752a70 conn xmit_rdma 0000000000000000 [ 129.845493][ T6080] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 129.885628][ T6080] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 130.271420][ T6080] lo speed is unknown, defaulting to 1000 [ 130.294626][ T6080] lo speed is unknown, defaulting to 1000 [ 130.307306][ T6080] lo speed is unknown, defaulting to 1000 [ 130.317506][ T6080] lo speed is unknown, defaulting to 1000 [ 130.331580][ T6080] lo speed is unknown, defaulting to 1000 [ 130.350953][ T6071] infiniband syz0: set active [ 130.350977][ T6071] infiniband syz0: added veth0 [ 130.385725][ T6071] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 130.395893][ T6071] infiniband syz0: Couldn't open port 1 [ 130.396425][ T6071] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 130.396467][ T6071] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 130.396517][ T6071] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 130.596054][ T6071] RDS/IB: syz0: added [ 130.603256][ T6071] smc: adding ib device syz0 with port count 1 [ 130.603540][ T6071] smc: ib device syz0 port 1 has no pnetid [ 130.709876][ T6037] NFSD: Unable to initialize client recovery tracking! (-110) [ 130.709897][ T6037] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 130.709910][ T6037] NFSD: starting 90-second grace period (net f00003f1) [ 130.992848][ T6088] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.605378][ T6088] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.027990][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 132.146884][ T6088] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.261043][ T9] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 0.00 [ 132.261076][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 132.261097][ T9] usb 2-1: Product: syz [ 132.261112][ T9] usb 2-1: Manufacturer: syz [ 132.669573][ T6088] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.818001][ T6084] NFSD: Unable to initialize client recovery tracking! (-110) [ 132.818022][ T6084] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 132.818034][ T6084] NFSD: starting 90-second grace period (net f00003da) [ 133.023435][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.023549][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.582187][ T9] speedtch 2-1:1.0: speedtch_bind: setting interface to 1 failed (-71)! [ 133.582278][ T9] speedtch 2-1:1.0: usbatm_usb_probe: bind failed: -71! [ 133.582340][ T9] speedtch 2-1:1.0: probe with driver speedtch failed with error -71 [ 133.629531][ T9] speedtch 2-1:1.1: speedtch_bind: setting interface to 1 failed (-71)! [ 133.653163][ T9] speedtch 2-1:1.1: usbatm_usb_probe: bind failed: -71! [ 133.653249][ T9] speedtch 2-1:1.1: probe with driver speedtch failed with error -71 [ 133.692108][ T9] usb 2-1: USB disconnect, device number 2 [ 134.158066][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 134.161221][ T1182] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.205031][ T6111] netlink: 4 bytes leftover after parsing attributes in process `syz.0.94'. [ 134.229412][ T6113] netlink: 'syz.3.95': attribute type 3 has an invalid length. [ 134.286584][ T6119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.96'. [ 134.326369][ T10] usb 3-1: config 2 has an invalid interface number: 1 but max is 0 [ 134.326400][ T10] usb 3-1: config 2 has 2 interfaces, different from the descriptor's value: 1 [ 134.365972][ T10] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 0.00 [ 134.366007][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.366030][ T10] usb 3-1: Product: syz [ 134.366045][ T10] usb 3-1: Manufacturer: syz [ 134.366061][ T10] usb 3-1: SerialNumber: syz [ 134.750009][ T6125] netlink: 40 bytes leftover after parsing attributes in process `syz.4.97'. [ 134.814482][ T10] usb 3-1: selecting invalid altsetting 1 [ 134.814514][ T10] speedtch 3-1:2.0: speedtch_bind: setting interface to 1 failed (-22)! [ 134.814646][ T10] speedtch 3-1:2.0: usbatm_usb_probe: bind failed: -22! [ 134.814713][ T10] speedtch 3-1:2.0: probe with driver speedtch failed with error -22 [ 134.882996][ T10] usb 3-1: selecting invalid altsetting 1 [ 134.883023][ T10] speedtch 3-1:2.1: speedtch_bind: setting interface to 1 failed (-22)! [ 134.910107][ T10] speedtch 3-1:2.1: usbatm_usb_probe: bind failed: -22! [ 134.910178][ T10] speedtch 3-1:2.1: probe with driver speedtch failed with error -22 [ 134.935688][ T6125] netlink: 8 bytes leftover after parsing attributes in process `syz.4.97'. [ 134.963453][ T10] usb 3-1: USB disconnect, device number 2 [ 136.257949][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 136.444119][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.459585][ T9] usb 4-1: New USB device found, idVendor=1110, idProduct=9000, bcdDevice= 1.00 [ 136.459611][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 136.459629][ T9] usb 4-1: Product: syz [ 136.459642][ T9] usb 4-1: Manufacturer: syz [ 136.640423][ T199] libceph: connect (1)127.0.0.1:6789 error -101 [ 136.640667][ T199] libceph: mon0 (1)127.0.0.1:6789 connect error [ 136.832172][ T9] usb 4-1: reset high-speed USB device number 2 using dummy_hcd [ 136.904059][ T10] libceph: connect (1)127.0.0.1:6789 error -101 [ 136.904279][ T10] libceph: mon0 (1)127.0.0.1:6789 connect error [ 137.261007][ T6163] ceph: No mds server is up or the cluster is laggy [ 138.101221][ T9] usb 4-1: Direct firmware load for ueagle-atm/930-fpga.bin failed with error -2 [ 138.101246][ T9] usb 4-1: Falling back to sysfs fallback for: ueagle-atm/930-fpga.bin [ 147.653898][ T6161] netlink: 44 bytes leftover after parsing attributes in process `syz.1.108'. [ 147.654685][ T6191] netlink: 64 bytes leftover after parsing attributes in process `syz.2.120'. [ 148.052834][ T6201] netlink: 56 bytes leftover after parsing attributes in process `syz.4.124'. [ 148.232887][ T6196] svc: failed to register lockdv1 RPC service (errno 111). [ 148.233406][ T6196] lockd_up: makesock failed, error=-111 [ 148.617080][ T6218] tipc: Started in network mode [ 148.617111][ T6218] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 148.617311][ T6218] tipc: Enabled bearer , priority 0 [ 149.120051][ T6196] svc: failed to register nfsdv3 RPC service (errno 512). [ 149.120363][ T6196] svc: failed to register nfsaclv3 RPC service (errno 512). [ 149.120381][ T6196] failed to unregister tcp with rpcbind [ 149.120640][ T6196] svc: failed to register nfsdv3 RPC service (errno 97). [ 149.120659][ T6196] svc: failed to register nfsaclv3 RPC service (errno 97). [ 149.120672][ T6196] failed to unregister tcp with rpcbind [ 149.640437][ T31] tipc: Node number set to 43690 [ 155.654031][ T6236] NFSD: Failed to start, no listeners configured. [ 157.022989][ T5842] IPVS: starting estimator thread 0... [ 157.132457][ T6279] IPVS: using max 11 ests per chain, 26400 per kthread [ 161.860437][ T2153] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.954416][ T6296] bridge0: port 3(veth0) entered blocking state [ 161.957057][ T6296] bridge0: port 3(veth0) entered disabled state [ 161.977264][ T6296] veth0: entered allmulticast mode [ 162.014280][ T6296] veth0: entered promiscuous mode [ 162.015100][ T6296] bridge0: port 3(veth0) entered blocking state [ 162.015242][ T6296] bridge0: port 3(veth0) entered forwarding state [ 162.766782][ T6245] lo speed is unknown, defaulting to 1000 [ 163.434379][ T6244] lo speed is unknown, defaulting to 1000 [ 164.034311][ T5842] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 164.061064][ T5842] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 164.262795][ T6319] lo speed is unknown, defaulting to 1000 [ 164.264640][ T6287] rdma_rxe: rxe_newlink: failed to add lo [ 164.319650][ T5842] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 164.721984][ T6335] ceph: No mds server is up or the cluster is laggy [ 164.886086][ T5842] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 164.991888][ T4911] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 165.028926][ T4911] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 165.061366][ T4911] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 165.103590][ T4911] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 165.123930][ T4911] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 165.678811][ T5842] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 165.892036][ T5842] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x7 has invalid maxpacket 64 [ 165.892072][ T5842] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x87 has invalid maxpacket 64 [ 165.893947][ T5842] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 0.00 [ 165.893976][ T5842] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 165.893998][ T5842] usb 3-1: Product: syz [ 165.894013][ T5842] usb 3-1: Manufacturer: syz [ 166.323240][ T6373] netlink: 8 bytes leftover after parsing attributes in process `syz.3.184'. [ 167.268443][ T5605] Bluetooth: hci5: command tx timeout [ 167.489135][ T5842] speedtch 3-1:1.0: speedtch_bind: setting interface to 1 failed (-71)! [ 167.490122][ T5842] speedtch 3-1:1.0: usbatm_usb_probe: bind failed: -71! [ 167.490196][ T5842] speedtch 3-1:1.0: probe with driver speedtch failed with error -71 [ 167.706377][ T5842] speedtch 3-1:1.1: speedtch_bind: setting interface to 1 failed (-71)! [ 167.748687][ T5842] speedtch 3-1:1.1: usbatm_usb_probe: bind failed: -71! [ 167.748760][ T5842] speedtch 3-1:1.1: probe with driver speedtch failed with error -71 [ 167.902271][ T5842] usb 3-1: USB disconnect, device number 3 [ 168.439653][ T1182] netdevsim netdevsim100 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.879848][ T5842] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 169.040053][ T5842] usb 3-1: Invalid ep0 maxpacket: 64 [ 169.208021][ T5842] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 169.337905][ T5605] Bluetooth: hci5: command tx timeout [ 169.358657][ T5842] usb 3-1: Invalid ep0 maxpacket: 64 [ 169.382645][ T5842] usb usb3-port1: attempt power cycle [ 169.847978][ T5842] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 169.870143][ T5842] usb 3-1: Invalid ep0 maxpacket: 64 [ 169.998252][ T5842] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 170.039990][ T5842] usb 3-1: Invalid ep0 maxpacket: 64 [ 170.040366][ T5842] usb usb3-port1: unable to enumerate USB device [ 170.172898][ T6346] lo speed is unknown, defaulting to 1000 [ 171.418750][ T5605] Bluetooth: hci5: command tx timeout [ 171.630555][ T6465] netlink: 'syz.4.210': attribute type 2 has an invalid length. [ 171.888181][ T6346] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.888299][ T6346] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.888514][ T6346] bridge_slave_0: entered allmulticast mode [ 171.940829][ T6346] bridge_slave_0: entered promiscuous mode [ 172.068180][ T6346] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.068308][ T6346] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.068531][ T6346] bridge_slave_1: entered allmulticast mode [ 172.098477][ T6346] bridge_slave_1: entered promiscuous mode [ 172.389660][ T6245] tipc: Resetting bearer [ 172.733651][ T6245] tipc: Disabling bearer [ 173.140580][ T6346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.164561][ T6346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.403157][ T6346] team0: Port device team_slave_0 added [ 173.497955][ T5605] Bluetooth: hci5: command tx timeout [ 173.576200][ T6346] team0: Port device team_slave_1 added [ 173.959180][ T6346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.959198][ T6346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.959232][ T6346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.039708][ T6346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.039727][ T6346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.039757][ T6346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.790790][ T6558] bridge0: port 4(veth0) entered blocking state [ 174.791105][ T6558] bridge0: port 4(veth0) entered disabled state [ 174.791306][ T6558] veth0: entered allmulticast mode [ 174.794618][ T6558] veth0: entered promiscuous mode [ 174.795618][ T6558] bridge0: port 4(veth0) entered blocking state [ 174.795765][ T6558] bridge0: port 4(veth0) entered forwarding state [ 174.853578][ T6346] hsr_slave_0: entered promiscuous mode [ 174.855270][ T6346] hsr_slave_1: entered promiscuous mode [ 174.856311][ T6346] debugfs: 'hsr0' already exists in 'hsr' [ 174.856351][ T6346] Cannot create hsr debugfs directory [ 176.185029][ T6346] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 176.362448][ T6346] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 176.528775][ T6346] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 176.716081][ T6346] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 176.717767][ T6346] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 176.789251][ T6346] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 176.792678][ T6346] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 176.850462][ T31] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 176.876154][ T6346] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 176.889063][ T31] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 177.143517][ T6346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.159627][ T5855] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 177.203464][ T6346] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.238064][ T1133] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.238247][ T1133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.311606][ T2153] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.311782][ T2153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.360857][ T6591] NFSD: Unable to initialize client recovery tracking! (-110) [ 177.360877][ T6591] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 177.360890][ T6591] NFSD: starting 90-second grace period (net f00003e2) [ 177.570491][ T6615] ceph: No mds server is up or the cluster is laggy [ 177.684846][ T5855] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 178.551283][ T6656] netlink: 4 bytes leftover after parsing attributes in process `syz.2.276'. [ 179.271203][ T6346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.271977][ T6676] netlink: 4 bytes leftover after parsing attributes in process `syz.3.283'. [ 179.301486][ T6683] netlink: 40 bytes leftover after parsing attributes in process `syz.4.287'. [ 179.320044][ T6677] netlink: 32 bytes leftover after parsing attributes in process `syz.3.283'. [ 179.397875][ T6683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.287'. [ 180.120936][ T6708] IPVS: Unknown mcast interface: syzkaller0 [ 180.137129][ T10] IPVS: starting estimator thread 0... [ 180.228013][ T6710] IPVS: using max 8 ests per chain, 19200 per kthread [ 180.723076][ T5842] libceph: mon0 (2)127.0.0.1:20000 socket error on write [ 180.757394][ T5842] libceph: mon0 (2)127.0.0.1:20000 socket error on write [ 181.029824][ T5842] libceph: mon0 (2)127.0.0.1:20000 socket error on write [ 181.230863][ T6346] veth0_vlan: entered promiscuous mode [ 181.280524][ T6346] veth1_vlan: entered promiscuous mode [ 181.500879][ T6346] veth0_macvtap: entered promiscuous mode [ 181.506112][ T6729] ceph: No mds server is up or the cluster is laggy [ 181.529234][ T6346] veth1_macvtap: entered promiscuous mode [ 181.619620][ T5842] libceph: mon0 (2)127.0.0.1:20000 socket error on write [ 181.684837][ T6346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.733631][ T6346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.771236][ T6756] rdma_rxe: rxe_newlink: failed to add eth0 [ 181.820212][ T1133] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.820262][ T1133] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.823950][ T1133] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.878268][ T43] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.479356][ T6773] netlink: 92 bytes leftover after parsing attributes in process `syz.4.318'. [ 182.822707][ T6785] netlink: 'syz.1.319': attribute type 1 has an invalid length. [ 182.823545][ T6785] netlink: 'syz.1.319': attribute type 1 has an invalid length. [ 183.126780][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.126803][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.444453][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.444475][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.688042][ T6810] netlink: 'syz.1.331': attribute type 1 has an invalid length. [ 183.732049][ T6810] netlink: 12 bytes leftover after parsing attributes in process `syz.1.331'. [ 183.732623][ T6810] netlink: 12 bytes leftover after parsing attributes in process `syz.1.331'. [ 183.739395][ T6810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.331'. [ 185.562961][ T5855] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 185.592386][ T6842] ceph: No mds server is up or the cluster is laggy [ 185.828479][ T6875] netlink: 16 bytes leftover after parsing attributes in process `syz.4.355'. [ 187.279763][ T6919] NFSD: Failed to start, no listeners configured. [ 187.545407][ T6931] x_tables: ip_tables: IDLETIMER.1 target: invalid size 48 (kernel) != (user) 56 [ 187.615408][ T6934] smc: net device veth0 applied user defined pnetid SYZ0 [ 188.755324][ T6971] x_tables: ip_tables: IDLETIMER.1 target: invalid size 48 (kernel) != (user) 56 [ 189.486844][ T6989] netlink: 16 bytes leftover after parsing attributes in process `syz.2.403'. [ 189.581647][ T6995] netlink: 48 bytes leftover after parsing attributes in process `syz.2.403'. [ 189.586769][ T6989] netlink: 4 bytes leftover after parsing attributes in process `syz.2.403'. [ 190.285289][ T7023] netlink: 4 bytes leftover after parsing attributes in process `syz.5.416'. [ 190.709857][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.458114][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.752913][ T5328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.908427][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.066581][ T7078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.067541][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.541731][ T5328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.782492][ T5328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.223584][ T7115] netlink: 32 bytes leftover after parsing attributes in process `syz.4.451'. [ 193.237061][ T7115] netlink: 40 bytes leftover after parsing attributes in process `syz.4.451'. [ 193.827107][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.253948][ T7143] netlink: 40 bytes leftover after parsing attributes in process `syz.4.464'. [ 194.473606][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.473681][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.874751][ T5855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.429254][ T5842] libceph: mon0 (2)127.0.0.1:20000 socket error on write [ 195.436361][ T5842] libceph: mon0 (2)127.0.0.1:20000 socket error on write [ 195.720589][ T10] libceph: mon0 (2)127.0.0.1:20000 socket error on write [ 195.908398][ C1] net_ratelimit: 1 callbacks suppressed [ 195.908418][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.909536][ T5855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.208878][ T7184] ceph: No mds server is up or the cluster is laggy [ 196.229227][ T5842] libceph: mon0 (2)127.0.0.1:20000 socket error on write [ 196.616993][ T7227] netlink: 16 bytes leftover after parsing attributes in process `syz.2.492'. [ 196.631058][ T7227] netlink: 48 bytes leftover after parsing attributes in process `syz.2.492'. [ 196.687044][ T7230] siw: device registration error -23 [ 196.939751][ T5328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.991360][ T5328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.085165][ T7243] lo speed is unknown, defaulting to 1000 [ 198.619648][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.846096][ T7298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.859287][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.918591][ T7289] netlink: 20 bytes leftover after parsing attributes in process `syz.3.514'. [ 199.030953][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.976875][ T9] usb 4-1: [UEAGLE-ATM] firmware ueagle-atm/930-fpga.bin is not available [ 199.977003][ T9] usb 4-1: [UEAGLE-ATM] urb submission failed with error -19 [ 199.977117][ T9] ueagle-atm 4-1:1.0: usbatm_usb_probe: bind failed: -19! [ 200.058758][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.151765][ T9] usb 4-1: USB disconnect, device number 2 [ 200.795744][ T7343] netlink: 20 bytes leftover after parsing attributes in process `syz.2.535'. [ 201.109947][ T7331] ceph: No mds server is up or the cluster is laggy [ 201.116724][ T5328] libceph: mon0 (2)127.0.0.1:20000 socket closed (con state V2_BANNER_PREFIX) [ 201.117158][ T5328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.281231][ T7358] bridge0: port 5(erspan0) entered blocking state [ 201.290320][ T7358] bridge0: port 5(erspan0) entered disabled state [ 201.387259][ T7358] erspan0: entered allmulticast mode [ 201.445212][ T7358] erspan0: entered promiscuous mode [ 201.446912][ T7358] bridge0: port 5(erspan0) entered blocking state [ 201.447074][ T7358] bridge0: port 5(erspan0) entered forwarding state [ 201.697731][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.758126][ T7357] syz.4.541 (7357) used greatest stack depth: 16256 bytes left [ 202.155259][ T5855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.016235][ T7399] netlink: 'syz.1.555': attribute type 1 has an invalid length. [ 203.180582][ T5328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.627638][ T7377] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.714911][ T7390] netlink: 12 bytes leftover after parsing attributes in process `syz.4.552'. [ 203.716752][ T7374] lo speed is unknown, defaulting to 1000 [ 204.220039][ T5328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.561332][ T7377] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.565201][ T7441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.598786][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.599256][ T7441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.601381][ T7438] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.601883][ T7438] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.795523][ T7446] FAULT_INJECTION: forcing a failure. [ 204.795523][ T7446] name failslab, interval 1, probability 100, space 0, times 1 [ 204.795605][ T7446] CPU: 0 UID: 0 PID: 7446 Comm: syz.2.577 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 204.795641][ T7446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 204.795664][ T7446] Call Trace: [ 204.795675][ T7446] [ 204.795686][ T7446] dump_stack_lvl+0xe8/0x150 [ 204.795744][ T7446] should_fail_ex+0x467/0x600 [ 204.795792][ T7446] should_failslab+0xa8/0x100 [ 204.795824][ T7446] kmem_cache_alloc_noprof+0xa4/0x650 [ 204.795851][ T7446] ? do_getname+0x2e/0x250 [ 204.795887][ T7446] ? do_getname+0x2e/0x250 [ 204.795933][ T7446] do_getname+0x2e/0x250 [ 204.795969][ T7446] ? getname_flags+0x11/0x20 [ 204.796010][ T7446] do_sys_openat2+0xcc/0x200 [ 204.796036][ T7446] ? __se_sys_futex+0x3a8/0x450 [ 204.796070][ T7446] ? __pfx_do_sys_openat2+0x10/0x10 [ 204.796103][ T7446] ? rcu_is_watching+0x15/0xb0 [ 204.796141][ T7446] __x64_sys_openat+0x138/0x170 [ 204.796176][ T7446] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.796202][ T7446] do_syscall_64+0x174/0x580 [ 204.796236][ T7446] ? trace_irq_disable+0x3b/0x140 [ 204.796261][ T7446] ? clear_bhb_loop+0x40/0x90 [ 204.796291][ T7446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.796316][ T7446] RIP: 0033:0x7f6deb66e019 [ 204.796345][ T7446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.796365][ T7446] RSP: 002b:00007f6de98c6028 EFLAGS: 00000246 [ 204.796379][ T4962] FAULT_INJECTION: forcing a failure. [ 204.796379][ T4962] name failslab, interval 1, probability 100, space 0, times 1 [ 204.796379][ T7446] ORIG_RAX: 0000000000000101 [ 204.796403][ T7446] RAX: ffffffffffffffda RBX: 00007f6deb8f5fa0 RCX: 00007f6deb66e019 [ 204.796420][ T7446] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 204.796435][ T7446] RBP: 00007f6deb70500c R08: 0000000000000000 R09: 0000000000000000 [ 204.796448][ T7446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 204.796461][ T7446] R13: 00007f6deb8f6038 R14: 00007f6deb8f5fa0 R15: 00007ffdcc8fbc08 [ 204.796493][ T7446] [ 204.796507][ T4962] CPU: 1 UID: 0 PID: 4962 Comm: udevd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 204.796536][ T4962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 204.796550][ T4962] Call Trace: [ 204.796559][ T4962] [ 204.796569][ T4962] dump_stack_lvl+0xe8/0x150 [ 204.796610][ T4962] should_fail_ex+0x467/0x600 [ 204.796653][ T4962] should_failslab+0xa8/0x100 [ 204.796685][ T4962] __kmalloc_cache_noprof+0xa0/0x6b0 [ 204.796716][ T4962] ? kernfs_iop_get_link+0x66/0x6c0 [ 204.796748][ T4962] ? kernfs_iop_get_link+0x66/0x6c0 [ 204.796791][ T4962] kernfs_iop_get_link+0x66/0x6c0 [ 204.796836][ T4962] vfs_readlink+0x24a/0x540 [ 204.796863][ T4962] ? __pfx_vfs_readlink+0x10/0x10 [ 204.796888][ T4962] ? touch_atime+0xf1/0x670 [ 204.796919][ T4962] ? do_getname+0x151/0x250 [ 204.796959][ T4962] do_readlinkat+0x218/0x510 [ 204.796988][ T4962] ? __pfx_do_readlinkat+0x10/0x10 [ 204.797014][ T4962] ? __pfx_ksys_read+0x10/0x10 [ 204.797057][ T4962] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.797084][ T4962] __x64_sys_readlink+0x7f/0x90 [ 204.797112][ T4962] do_syscall_64+0x174/0x580 [ 204.797148][ T4962] ? clear_bhb_loop+0x40/0x90 [ 204.797179][ T4962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.797204][ T4962] RIP: 0033:0x7f56a89253a7 [ 204.797226][ T4962] Code: 00 00 90 48 83 ec 10 48 63 ff 45 31 c9 45 31 c0 6a 00 31 c9 e8 8a 20 f9 ff 48 83 c4 18 c3 0f 1f 44 00 00 b8 59 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 21 ba 0d 00 f7 d8 64 89 02 48 [ 204.797244][ T4962] RSP: 002b:00007ffc729e3a98 EFLAGS: 00000246 ORIG_RAX: 0000000000000059 [ 204.797268][ T4962] RAX: ffffffffffffffda RBX: 00007ffc729e3f70 RCX: 00007f56a89253a7 [ 204.797286][ T4962] RDX: 0000000000000400 RSI: 00007ffc729e3aa0 RDI: 00007ffc729e3f70 [ 204.797301][ T4962] RBP: 00007ffc729e3aa0 R08: 0000000000000075 R09: 0000000000000000 [ 204.797317][ T4962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000400 [ 204.797331][ T4962] R13: 000055fc1bfcd100 R14: 0000000000000001 R15: 00007ffc729e5870 [ 204.797368][ T4962] [ 206.077513][ T7377] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.753085][ T7377] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.774521][ T7459] lo speed is unknown, defaulting to 1000 [ 207.947939][ T1182] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.088074][ T7483] NFSD: Unable to initialize client recovery tracking! (-110) [ 208.088094][ T7483] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 208.088107][ T7483] NFSD: starting 90-second grace period (net f00003c0) [ 208.128151][ T148] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.129574][ T1182] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.129620][ T1182] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.619663][ T7470] lo speed is unknown, defaulting to 1000 [ 209.605040][ T7520] veth0: left allmulticast mode [ 209.605086][ T7520] veth0: left promiscuous mode [ 209.623584][ T7520] bridge0: port 4(veth0) entered disabled state [ 209.802574][ T7536] netlink: 48 bytes leftover after parsing attributes in process `syz.3.609'. [ 211.061370][ T7565] netlink: 12 bytes leftover after parsing attributes in process `syz.2.620'. [ 211.113827][ T7560] netlink: 48 bytes leftover after parsing attributes in process `syz.3.622'. [ 211.414912][ T7575] netlink: 'syz.1.626': attribute type 2 has an invalid length. [ 211.415024][ T7575] netlink: 60 bytes leftover after parsing attributes in process `syz.1.626'. [ 213.257507][ T7636] netlink: 116 bytes leftover after parsing attributes in process `syz.3.644'. [ 214.003259][ T7612] lo speed is unknown, defaulting to 1000 [ 214.719952][ T7661] netlink: 84 bytes leftover after parsing attributes in process `syz.2.653'. [ 214.723605][ T7661] netlink: 84 bytes leftover after parsing attributes in process `syz.2.653'. [ 214.734309][ T7661] netlink: 84 bytes leftover after parsing attributes in process `syz.2.653'. [ 214.737188][ T7661] netlink: 84 bytes leftover after parsing attributes in process `syz.2.653'. [ 214.742431][ T7661] netlink: 84 bytes leftover after parsing attributes in process `syz.2.653'. [ 214.743263][ T7661] ksmbd: Unknown IPC event: 3, ignore. [ 214.744061][ T7661] nbd: must specify a device to reconfigure [ 214.954519][ T7664] __nla_validate_parse: 4 callbacks suppressed [ 214.954541][ T7664] netlink: 84 bytes leftover after parsing attributes in process `syz.2.653'. [ 214.954587][ T7668] netlink: 76 bytes leftover after parsing attributes in process `syz.3.655'. [ 214.954610][ T7668] netlink: 76 bytes leftover after parsing attributes in process `syz.3.655'. [ 214.954621][ T7666] netlink: 84 bytes leftover after parsing attributes in process `syz.2.653'. [ 215.287613][ T7613] lo speed is unknown, defaulting to 1000 [ 216.826570][ T5594] svc: failed to register nfsdv3 RPC service (errno 111). [ 216.841653][ T5594] svc: failed to register nfsaclv3 RPC service (errno 111). [ 216.841675][ T5594] failed to unregister tcp with rpcbind [ 217.011346][ T5594] svc: failed to register nfsdv3 RPC service (errno 97). [ 217.011371][ T5594] svc: failed to register nfsaclv3 RPC service (errno 97). [ 217.011385][ T5594] failed to unregister tcp with rpcbind [ 217.626580][ T7717] netlink: 28 bytes leftover after parsing attributes in process `syz.3.676'. [ 217.626614][ T7717] netlink: 28 bytes leftover after parsing attributes in process `syz.3.676'. [ 218.184730][ T7620] lo speed is unknown, defaulting to 1000 [ 218.326386][ T7616] lo speed is unknown, defaulting to 1000 [ 218.569696][ T7631] lo speed is unknown, defaulting to 1000 [ 219.413795][ T7626] lo speed is unknown, defaulting to 1000 [ 220.308328][ T7733] NFSD: Unable to initialize client recovery tracking! (-110) [ 220.308352][ T7733] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 220.308365][ T7733] NFSD: starting 90-second grace period (net f00003bf) [ 220.786991][ T7773] netlink: 'syz.2.696': attribute type 3 has an invalid length. [ 221.293791][ T7781] nvmet: Invalid value 'ipv' for adrfam [ 221.854188][ T7792] netlink: 76 bytes leftover after parsing attributes in process `syz.3.705'. [ 222.101137][ T7806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.707'. [ 222.148662][ T5601] Bluetooth: hci1: command 0x0406 tx timeout [ 222.149294][ T5601] Bluetooth: hci4: command 0x0406 tx timeout [ 222.149422][ T5601] Bluetooth: hci0: command 0x0406 tx timeout [ 222.149448][ T5601] Bluetooth: hci2: command 0x0406 tx timeout [ 223.275250][ T7821] nvmet: Invalid value 'ipv' for adrfam [ 224.335063][ T5586] FAULT_INJECTION: forcing a failure. [ 224.335063][ T5586] name failslab, interval 1, probability 100, space 0, times 10 [ 224.335104][ T5586] CPU: 1 UID: 0 PID: 5586 Comm: udevd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 224.335144][ T5586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 224.335159][ T5586] Call Trace: [ 224.335167][ T5586] [ 224.335177][ T5586] dump_stack_lvl+0xe8/0x150 [ 224.335216][ T5586] should_fail_ex+0x467/0x600 [ 224.335260][ T5586] should_failslab+0xa8/0x100 [ 224.335300][ T5586] kmem_cache_alloc_noprof+0xa4/0x650 [ 224.335323][ T5586] ? do_getname+0x2e/0x250 [ 224.335354][ T5586] ? do_getname+0x2e/0x250 [ 224.335390][ T7850] FAULT_INJECTION: forcing a failure. [ 224.335390][ T7850] name failslab, interval 1, probability 100, space 0, times 10 [ 224.335394][ T5586] do_getname+0x2e/0x250 [ 224.335425][ T5586] ? getname_flags+0x11/0x20 [ 224.335456][ T5586] vfs_fstatat+0x45/0x170 [ 224.335487][ T5586] __x64_sys_newfstatat+0x151/0x200 [ 224.335508][ T5586] ? __pfx___x64_sys_newfstatat+0x10/0x10 [ 224.335543][ T5586] ? rcu_is_watching+0x15/0xb0 [ 224.335575][ T5586] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.335595][ T5586] do_syscall_64+0x174/0x580 [ 224.335623][ T5586] ? clear_bhb_loop+0x40/0x90 [ 224.335646][ T5586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.335664][ T5586] RIP: 0033:0x7f56a8921b0a [ 224.335681][ T5586] Code: 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 8b 15 b9 f2 0d 00 f7 [ 224.335696][ T5586] RSP: 002b:00007ffc729e31a8 EFLAGS: 00000206 ORIG_RAX: 0000000000000106 [ 224.335715][ T5586] RAX: ffffffffffffffda RBX: 000055fc47661ae0 RCX: 00007f56a8921b0a [ 224.335729][ T5586] RDX: 00007ffc729e31d0 RSI: 000055fc47661ae0 RDI: 00000000ffffff9c [ 224.335742][ T5586] RBP: 000055fc47661af8 R08: 0000000000001c60 R09: 0000000000000000 [ 224.335754][ T5586] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffc729e42f5 [ 224.335766][ T5586] R13: 00007ffc729e3260 R14: 000055fc1bfb26d7 R15: 00007ffc729e42f0 [ 224.335798][ T5586] [ 224.335848][ T7850] CPU: 0 UID: 0 PID: 7850 Comm: syz.2.725 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 224.335873][ T7850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 224.335886][ T7850] Call Trace: [ 224.335894][ T7850] [ 224.335903][ T7850] dump_stack_lvl+0xe8/0x150 [ 224.335917][ T5586] FAULT_INJECTION: forcing a failure. [ 224.335917][ T5586] name failslab, interval 1, probability 100, space 0, times 9 [ 224.335939][ T7850] should_fail_ex+0x467/0x600 [ 224.335973][ T7850] should_failslab+0xa8/0x100 [ 224.335996][ T7850] kmem_cache_alloc_noprof+0xa4/0x650 [ 224.336021][ T7850] ? __pmd_alloc+0xa4/0x5e0 [ 224.336039][ T7850] ? __pmd_alloc+0xa4/0x5e0 [ 224.336062][ T7850] __pmd_alloc+0xa4/0x5e0 [ 224.336084][ T7850] handle_mm_fault+0xeb1/0x13f0 [ 224.336110][ T7850] ? handle_mm_fault+0xe8/0x13f0 [ 224.336134][ T7850] ? __pfx_handle_mm_fault+0x10/0x10 [ 224.336151][ T7850] ? lock_vma_under_rcu+0x45a/0x500 [ 224.336173][ T7850] ? __pfx_do_futex+0x10/0x10 [ 224.336217][ T7850] do_user_addr_fault+0xa4d/0x1340 [ 224.336245][ T7850] ? trace_page_fault_user+0x84/0x1e0 [ 224.336265][ T7850] exc_page_fault+0x6a/0xc0 [ 224.336292][ T7850] asm_exc_page_fault+0x26/0x30 [ 224.336309][ T7850] RIP: 0033:0x7f6deb542850 [ 224.336325][ T7850] Code: 01 00 48 83 c0 01 48 39 f0 72 ef e9 89 fe ff ff 66 2e 0f 1f 84 00 00 00 00 00 48 8b 0d 31 f8 3a 00 31 c0 48 81 ce ff ff ff 3f <48> 3b 34 c1 74 14 48 83 c0 01 48 83 f8 04 0f 84 39 fe ff ff 48 3b [ 224.336339][ T7850] RSP: 002b:00007ffdcc8fbc50 EFLAGS: 00010286 [ 224.336354][ T7850] RAX: 0000000000000000 RBX: ffffffff890db717 RCX: 000000110c230000 [ 224.336367][ T7850] RDX: 0000000000001717 RSI: ffffffffbfffffff RDI: 0000000000000000 [ 224.336378][ T7850] RBP: 0000000000000000 R08: 00007f6deb8e0000 R09: 00007f6deb8e2000 [ 224.336390][ T7850] R10: 00000000890db71b R11: 0000000000000000 R12: 00007f6deb8f6038 [ 224.336402][ T7850] R13: 0000000000000000 R14: ffffffff890dbe7d R15: 00007f6dec425720 [ 224.336415][ T7850] ? __x64_sys_socket+0x1d/0x90 [ 224.336437][ T7850] ? __sock_create+0x797/0x9d0 [ 224.336465][ T7850] [ 224.336476][ T5586] CPU: 1 UID: 0 PID: 5586 Comm: udevd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 224.336500][ T5586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 224.336512][ T5586] Call Trace: [ 224.336520][ T5586] [ 224.336513][ T7849] FAULT_INJECTION: forcing a failure. [ 224.336513][ T7849] name failslab, interval 1, probability 100, space 0, times 9 [ 224.336529][ T5586] dump_stack_lvl+0xe8/0x150 [ 224.336568][ T5586] should_fail_ex+0x467/0x600 [ 224.336604][ T5586] should_failslab+0xa8/0x100 [ 224.336608][ C0] FAULT_INJECTION: forcing a failure. [ 224.336608][ C0] name failslab, interval 1, probability 100, space 0, times 9 [ 224.336632][ T5586] kmem_cache_alloc_noprof+0xa4/0x650 [ 224.336652][ T5586] ? do_getname+0x2e/0x250 [ 224.336679][ T5586] ? do_getname+0x2e/0x250 [ 224.336712][ T5586] do_getname+0x2e/0x250 [ 224.336738][ T5586] ? getname_flags+0x11/0x20 [ 224.336768][ T5586] vfs_fstatat+0x45/0x170 [ 224.336800][ T5586] __x64_sys_newfstatat+0x151/0x200 [ 224.336822][ T5586] ? __pfx___x64_sys_newfstatat+0x10/0x10 [ 224.336856][ T5586] ? rcu_is_watching+0x15/0xb0 [ 224.336888][ T5586] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.336908][ T5586] do_syscall_64+0x174/0x580 [ 224.336934][ T5586] ? clear_bhb_loop+0x40/0x90 [ 224.336962][ T5586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.336981][ T5586] RIP: 0033:0x7f56a8921b0a [ 224.336996][ T5586] Code: 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 8b 15 b9 f2 0d 00 f7 [ 224.337011][ T5586] RSP: 002b:00007ffc729e2088 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 224.337029][ T5586] RAX: ffffffffffffffda RBX: 0000000000000014 RCX: 00007f56a8921b0a [ 224.337041][ T5586] RDX: 00007ffc729e2090 RSI: 00007ffc729e2160 RDI: 00000000ffffff9c [ 224.337054][ T5586] RBP: 00007ffc729e31a0 R08: 0000000000001c60 R09: 0000000000000000 [ 224.337065][ T5586] R10: 0000000000000000 R11: 0000000000000246 R12: 000055fc47661ae0 [ 224.337076][ T5586] R13: 0000000000000000 R14: 000055fc1bfb26d7 R15: 00007ffc729e42f0 [ 224.337103][ T5586] [ 224.337115][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 224.337142][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 224.337153][ C0] Call Trace: [ 224.337162][ C0] [ 224.337155][ C1] FAULT_INJECTION: forcing a failure. [ 224.337155][ C1] name failslab, interval 1, probability 100, space 0, times 9 [ 224.337171][ C0] dump_stack_lvl+0xe8/0x150 [ 224.337204][ C0] should_fail_ex+0x467/0x600 [ 224.337238][ C0] should_failslab+0xa8/0x100 [ 224.337262][ C0] kmem_cache_alloc_node_noprof+0xae/0x670 [ 224.337284][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 224.337305][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 224.337333][ C0] __alloc_skb+0x1d7/0x7a0 [ 224.337362][ C0] __netdev_alloc_skb+0xc0/0x4b0 [ 224.337390][ C0] __ieee80211_beacon_get+0xc97/0x1820 [ 224.337422][ C0] ? __lock_acquire+0x683/0x2ce0 [ 224.337442][ C0] ? __ieee80211_beacon_get+0x34/0x1820 [ 224.337469][ C0] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 224.337498][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 224.337540][ C0] mac80211_hwsim_beacon_tx+0x378/0x820 [ 224.337569][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 224.337597][ C0] __iterate_interfaces+0x2af/0x5a0 [ 224.337620][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 224.337647][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 224.337671][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 224.337698][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 224.337725][ C0] mac80211_hwsim_beacon+0xb2/0x2b0 [ 224.337746][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 224.337783][ C0] __hrtimer_run_queues+0x3eb/0xaf0 [ 224.337832][ C0] hrtimer_run_softirq+0x18f/0x260 [ 224.337867][ C0] handle_softirqs+0x1d9/0x6c0 [ 224.337901][ C0] run_ktimerd+0x69/0x100 [ 224.337928][ C0] smpboot_thread_fn+0x57c/0xa80 [ 224.337958][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 224.337992][ C0] kthread+0x388/0x470 [ 224.338022][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 224.338046][ C0] ? __pfx_kthread+0x10/0x10 [ 224.338077][ C0] ret_from_fork+0x514/0xb70 [ 224.338110][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 224.338140][ C0] ? __switch_to+0xc89/0x1420 [ 224.338168][ C0] ? __pfx_kthread+0x10/0x10 [ 224.338199][ C0] ret_from_fork_asm+0x1a/0x30 [ 224.338234][ C0] [ 224.338246][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 224.338270][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 224.338290][ C1] Call Trace: [ 224.338298][ C1] [ 224.338306][ C1] dump_stack_lvl+0xe8/0x150 [ 224.338326][ C0] FAULT_INJECTION: forcing a failure. [ 224.338326][ C0] name failslab, interval 1, probability 100, space 0, times 8 [ 224.338342][ C1] should_fail_ex+0x467/0x600 [ 224.338378][ C1] should_failslab+0xa8/0x100 [ 224.338402][ C1] kmem_cache_alloc_node_noprof+0xae/0x670 [ 224.338424][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 224.338443][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 224.338471][ C1] __alloc_skb+0x1d7/0x7a0 [ 224.338497][ C1] __netdev_alloc_skb+0xc0/0x4b0 [ 224.338523][ C1] __ieee80211_beacon_get+0xc97/0x1820 [ 224.338553][ C1] ? __lock_acquire+0x683/0x2ce0 [ 224.338573][ C1] ? __ieee80211_beacon_get+0x34/0x1820 [ 224.338600][ C1] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 224.338629][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 224.338666][ C1] mac80211_hwsim_beacon_tx+0x378/0x820 [ 224.338694][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 224.338721][ C1] __iterate_interfaces+0x2af/0x5a0 [ 224.338744][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 224.338771][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 224.338796][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 224.338822][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 224.338849][ C1] mac80211_hwsim_beacon+0xb2/0x2b0 [ 224.338871][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 224.338894][ C1] __hrtimer_run_queues+0x3eb/0xaf0 [ 224.338940][ C1] hrtimer_run_softirq+0x18f/0x260 [ 224.338973][ C1] handle_softirqs+0x1d9/0x6c0 [ 224.339007][ C1] run_ktimerd+0x69/0x100 [ 224.339033][ C1] smpboot_thread_fn+0x57c/0xa80 [ 224.339061][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 224.339095][ C1] kthread+0x388/0x470 [ 224.339123][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 224.339148][ C1] ? __pfx_kthread+0x10/0x10 [ 224.339177][ C1] ret_from_fork+0x514/0xb70 [ 224.339209][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 224.339239][ C1] ? __switch_to+0xc89/0x1420 [ 224.339267][ C1] ? __pfx_kthread+0x10/0x10 [ 224.339304][ C1] ret_from_fork_asm+0x1a/0x30 [ 224.339339][ C1] [ 224.339350][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 224.339375][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 224.339372][ C1] FAULT_INJECTION: forcing a failure. [ 224.339372][ C1] name failslab, interval 1, probability 100, space 0, times 7 [ 224.339388][ C0] Call Trace: [ 224.339396][ C0] [ 224.339404][ C0] dump_stack_lvl+0xe8/0x150 [ 224.339434][ C0] should_fail_ex+0x467/0x600 [ 224.339468][ C0] should_failslab+0xa8/0x100 [ 224.339492][ C0] kmem_cache_alloc_node_noprof+0xae/0x670 [ 224.339513][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 224.339533][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 224.339561][ C0] __alloc_skb+0x1d7/0x7a0 [ 224.339586][ C0] __netdev_alloc_skb+0xc0/0x4b0 [ 224.339613][ C0] __ieee80211_beacon_get+0xc97/0x1820 [ 224.339643][ C0] ? __lock_acquire+0x683/0x2ce0 [ 224.339662][ C0] ? __ieee80211_beacon_get+0x34/0x1820 [ 224.339689][ C0] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 224.339718][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 224.339745][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 224.339788][ C0] mac80211_hwsim_beacon_tx+0x378/0x820 [ 224.339815][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 224.339843][ C0] __iterate_interfaces+0x2af/0x5a0 [ 224.339865][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 224.339892][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 224.339916][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 224.339942][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 224.339969][ C0] mac80211_hwsim_beacon+0xb2/0x2b0 [ 224.339996][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 224.340020][ C0] __hrtimer_run_queues+0x3eb/0xaf0 [ 224.340066][ C0] hrtimer_run_softirq+0x18f/0x260 [ 224.340100][ C0] handle_softirqs+0x1d9/0x6c0 [ 224.340134][ C0] run_ktimerd+0x69/0x100 [ 224.340160][ C0] smpboot_thread_fn+0x57c/0xa80 [ 224.340188][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 224.340222][ C0] kthread+0x388/0x470 [ 224.340251][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 224.340275][ C0] ? __pfx_kthread+0x10/0x10 [ 224.340307][ C0] ret_from_fork+0x514/0xb70 [ 224.340339][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 224.340369][ C0] ? __switch_to+0xc89/0x1420 [ 224.340397][ C0] ? __pfx_kthread+0x10/0x10 [ 224.340427][ C0] ret_from_fork_asm+0x1a/0x30 [ 224.340462][ C0] [ 224.340473][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 224.340492][ C0] FAULT_INJECTION: forcing a failure. [ 224.340492][ C0] name failslab, interval 1, probability 100, space 0, times 6 [ 224.340498][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 224.340510][ C1] Call Trace: [ 224.340518][ C1] [ 224.340525][ C1] dump_stack_lvl+0xe8/0x150 [ 224.340554][ C1] should_fail_ex+0x467/0x600 [ 224.340589][ C1] should_failslab+0xa8/0x100 [ 224.340613][ C1] kmem_cache_alloc_node_noprof+0xae/0x670 [ 224.340634][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 224.340653][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 224.340681][ C1] __alloc_skb+0x1d7/0x7a0 [ 224.340707][ C1] __netdev_alloc_skb+0xc0/0x4b0 [ 224.340733][ C1] __ieee80211_beacon_get+0xc97/0x1820 [ 224.340763][ C1] ? __lock_acquire+0x683/0x2ce0 [ 224.340783][ C1] ? __ieee80211_beacon_get+0x34/0x1820 [ 224.340816][ C1] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 224.340845][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 224.340872][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 224.340908][ C1] mac80211_hwsim_beacon_tx+0x378/0x820 [ 224.340935][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 224.340963][ C1] __iterate_interfaces+0x2af/0x5a0 [ 224.340986][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 224.341012][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 224.341036][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 224.341062][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 224.341089][ C1] mac80211_hwsim_beacon+0xb2/0x2b0 [ 224.341110][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 224.341134][ C1] __hrtimer_run_queues+0x3eb/0xaf0 [ 224.341180][ C1] hrtimer_run_softirq+0x18f/0x260 [ 224.341214][ C1] handle_softirqs+0x1d9/0x6c0 [ 224.341248][ C1] run_ktimerd+0x69/0x100 [ 224.341280][ C1] smpboot_thread_fn+0x57c/0xa80 [ 224.341309][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 224.341342][ C1] kthread+0x388/0x470 [ 224.341371][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 224.341395][ C1] ? __pfx_kthread+0x10/0x10 [ 224.341425][ C1] ret_from_fork+0x514/0xb70 [ 224.341458][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 224.341487][ C1] ? __switch_to+0xc89/0x1420 [ 224.341515][ C1] ? __pfx_kthread+0x10/0x10 [ 224.341545][ C1] ret_from_fork_asm+0x1a/0x30 [ 224.341580][ C1] [ 224.341591][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 224.341609][ C1] FAULT_INJECTION: forcing a failure. [ 224.341609][ C1] name failslab, interval 1, probability 100, space 0, times 5 [ 224.341615][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 224.341627][ C0] Call Trace: [ 224.341640][ C0] [ 224.341648][ C0] dump_stack_lvl+0xe8/0x150 [ 224.341682][ C0] should_fail_ex+0x467/0x600 [ 224.341717][ C0] should_failslab+0xa8/0x100 [ 224.341740][ C0] kmem_cache_alloc_node_noprof+0xae/0x670 [ 224.341761][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 224.341787][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 224.341814][ C0] __alloc_skb+0x1d7/0x7a0 [ 224.341840][ C0] __netdev_alloc_skb+0xc0/0x4b0 [ 224.341867][ C0] __ieee80211_beacon_get+0xc97/0x1820 [ 224.341896][ C0] ? __lock_acquire+0x683/0x2ce0 [ 224.341916][ C0] ? __ieee80211_beacon_get+0x34/0x1820 [ 224.341943][ C0] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 224.341972][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 224.341998][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 224.342034][ C0] mac80211_hwsim_beacon_tx+0x378/0x820 [ 224.342062][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 224.342089][ C0] __iterate_interfaces+0x2af/0x5a0 [ 224.342112][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 224.342139][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 224.342163][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 224.342189][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 224.342216][ C0] mac80211_hwsim_beacon+0xb2/0x2b0 [ 224.342237][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 224.342261][ C0] __hrtimer_run_queues+0x3eb/0xaf0 [ 224.342308][ C0] hrtimer_run_softirq+0x18f/0x260 [ 224.342342][ C0] handle_softirqs+0x1d9/0x6c0 [ 224.342376][ C0] run_ktimerd+0x69/0x100 [ 224.342402][ C0] smpboot_thread_fn+0x57c/0xa80 [ 224.342430][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 224.342464][ C0] kthread+0x388/0x470 [ 224.342492][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 224.342517][ C0] ? __pfx_kthread+0x10/0x10 [ 224.342547][ C0] ret_from_fork+0x514/0xb70 [ 224.342579][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 224.342608][ C0] ? __switch_to+0xc89/0x1420 [ 224.342636][ C0] ? __pfx_kthread+0x10/0x10 [ 224.342684][ C0] ret_from_fork_asm+0x1a/0x30 [ 224.342719][ C0] [ 224.342731][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 224.342749][ C0] FAULT_INJECTION: forcing a failure. [ 224.342749][ C0] name failslab, interval 1, probability 100, space 0, times 4 [ 224.342756][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 224.342768][ C1] Call Trace: [ 224.342776][ C1] [ 224.342783][ C1] dump_stack_lvl+0xe8/0x150 [ 224.342813][ C1] should_fail_ex+0x467/0x600 [ 224.342848][ C1] should_failslab+0xa8/0x100 [ 224.342872][ C1] kmem_cache_alloc_node_noprof+0xae/0x670 [ 224.342893][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 224.342913][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 224.342940][ C1] __alloc_skb+0x1d7/0x7a0 [ 224.342966][ C1] __netdev_alloc_skb+0xc0/0x4b0 [ 224.342998][ C1] __ieee80211_beacon_get+0xc97/0x1820 [ 224.343027][ C1] ? __lock_acquire+0x683/0x2ce0 [ 224.343047][ C1] ? __ieee80211_beacon_get+0x34/0x1820 [ 224.343074][ C1] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 224.343103][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 224.343129][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 224.343166][ C1] mac80211_hwsim_beacon_tx+0x378/0x820 [ 224.343193][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 224.343221][ C1] __iterate_interfaces+0x2af/0x5a0 [ 224.343243][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 224.343270][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 224.343300][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 224.343326][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 224.343353][ C1] mac80211_hwsim_beacon+0xb2/0x2b0 [ 224.343374][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 224.343397][ C1] __hrtimer_run_queues+0x3eb/0xaf0 [ 224.343443][ C1] hrtimer_run_softirq+0x18f/0x260 [ 224.343477][ C1] handle_softirqs+0x1d9/0x6c0 [ 224.343510][ C1] run_ktimerd+0x69/0x100 [ 224.343536][ C1] smpboot_thread_fn+0x57c/0xa80 [ 224.343569][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 224.343613][ C1] kthread+0x388/0x470 [ 224.343641][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 224.343665][ C1] ? __pfx_kthread+0x10/0x10 [ 224.343695][ C1] ret_from_fork+0x514/0xb70 [ 224.343727][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 224.343757][ C1] ? __switch_to+0xc89/0x1420 [ 224.343786][ C1] ? __pfx_kthread+0x10/0x10 [ 224.343816][ C1] ret_from_fork_asm+0x1a/0x30 [ 224.343852][ C1] [ 224.343862][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 224.343882][ C1] FAULT_INJECTION: forcing a failure. [ 224.343882][ C1] name failslab, interval 1, probability 100, space 0, times 3 [ 224.343888][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 224.343900][ C0] Call Trace: [ 224.343909][ C0] [ 224.343916][ C0] dump_stack_lvl+0xe8/0x150 [ 224.343946][ C0] should_fail_ex+0x467/0x600 [ 224.343981][ C0] should_failslab+0xa8/0x100 [ 224.344005][ C0] kmem_cache_alloc_node_noprof+0xae/0x670 [ 224.344026][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 224.344046][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 224.344073][ C0] __alloc_skb+0x1d7/0x7a0 [ 224.344099][ C0] __netdev_alloc_skb+0xc0/0x4b0 [ 224.344126][ C0] __ieee80211_beacon_get+0xc97/0x1820 [ 224.344155][ C0] ? __lock_acquire+0x683/0x2ce0 [ 224.344175][ C0] ? __ieee80211_beacon_get+0x34/0x1820 [ 224.344202][ C0] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 224.344230][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 224.344257][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 224.344294][ C0] mac80211_hwsim_beacon_tx+0x378/0x820 [ 224.344321][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 224.344349][ C0] __iterate_interfaces+0x2af/0x5a0 [ 224.344371][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 224.344398][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 224.344422][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 224.344448][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 224.344475][ C0] mac80211_hwsim_beacon+0xb2/0x2b0 [ 224.344496][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 224.344520][ C0] __hrtimer_run_queues+0x3eb/0xaf0 [ 224.344567][ C0] hrtimer_run_softirq+0x18f/0x260 [ 224.344600][ C0] handle_softirqs+0x1d9/0x6c0 [ 224.344634][ C0] run_ktimerd+0x69/0x100 [ 224.344660][ C0] smpboot_thread_fn+0x57c/0xa80 [ 224.344688][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 224.344722][ C0] kthread+0x388/0x470 [ 224.344751][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 224.344781][ C0] ? __pfx_kthread+0x10/0x10 [ 224.344811][ C0] ret_from_fork+0x514/0xb70 [ 224.344843][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 224.344873][ C0] ? __switch_to+0xc89/0x1420 [ 224.344901][ C0] ? __pfx_kthread+0x10/0x10 [ 224.344931][ C0] ret_from_fork_asm+0x1a/0x30 [ 224.344966][ C0] [ 224.344977][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 224.345001][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 224.344997][ C0] FAULT_INJECTION: forcing a failure. [ 224.344997][ C0] name failslab, interval 1, probability 100, space 0, times 2 [ 224.345014][ C1] Call Trace: [ 224.345023][ C1] [ 224.345030][ C1] dump_stack_lvl+0xe8/0x150 [ 224.345059][ C1] should_fail_ex+0x467/0x600 [ 224.345094][ C1] should_failslab+0xa8/0x100 [ 224.345118][ C1] kmem_cache_alloc_node_noprof+0xae/0x670 [ 224.345139][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 224.345158][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 224.345186][ C1] __alloc_skb+0x1d7/0x7a0 [ 224.345212][ C1] __netdev_alloc_skb+0xc0/0x4b0 [ 224.345239][ C1] __ieee80211_beacon_get+0xc97/0x1820 [ 224.345268][ C1] ? __lock_acquire+0x683/0x2ce0 [ 224.345294][ C1] ? __ieee80211_beacon_get+0x34/0x1820 [ 224.345321][ C1] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 224.345350][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 224.345376][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 224.345412][ C1] mac80211_hwsim_beacon_tx+0x378/0x820 [ 224.345440][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 224.345467][ C1] __iterate_interfaces+0x2af/0x5a0 [ 224.345489][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 224.345516][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 224.345540][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 224.345567][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 224.345594][ C1] mac80211_hwsim_beacon+0xb2/0x2b0 [ 224.345615][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 224.345638][ C1] __hrtimer_run_queues+0x3eb/0xaf0 [ 224.345684][ C1] hrtimer_run_softirq+0x18f/0x260 [ 224.345718][ C1] handle_softirqs+0x1d9/0x6c0 [ 224.345751][ C1] run_ktimerd+0x69/0x100 [ 224.345779][ C1] smpboot_thread_fn+0x57c/0xa80 [ 224.345807][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 224.345840][ C1] kthread+0x388/0x470 [ 224.345869][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 224.345893][ C1] ? __pfx_kthread+0x10/0x10 [ 224.345922][ C1] ret_from_fork+0x514/0xb70 [ 224.345954][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 224.345989][ C1] ? __switch_to+0xc89/0x1420 [ 224.346017][ C1] ? __pfx_kthread+0x10/0x10 [ 224.346047][ C1] ret_from_fork_asm+0x1a/0x30 [ 224.346082][ C1] [ 224.346093][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 224.346111][ C1] FAULT_INJECTION: forcing a failure. [ 224.346111][ C1] name failslab, interval 1, probability 100, space 0, times 1 [ 224.346118][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 224.346130][ C0] Call Trace: [ 224.346137][ C0] [ 224.346144][ C0] dump_stack_lvl+0xe8/0x150 [ 224.346174][ C0] should_fail_ex+0x467/0x600 [ 224.346208][ C0] should_failslab+0xa8/0x100 [ 224.346232][ C0] kmem_cache_alloc_node_noprof+0xae/0x670 [ 224.346253][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 224.346273][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 224.346302][ C0] __alloc_skb+0x1d7/0x7a0 [ 224.346328][ C0] __netdev_alloc_skb+0xc0/0x4b0 [ 224.346355][ C0] __ieee80211_beacon_get+0xc97/0x1820 [ 224.346384][ C0] ? __lock_acquire+0x683/0x2ce0 [ 224.346404][ C0] ? __ieee80211_beacon_get+0x34/0x1820 [ 224.346431][ C0] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 224.346460][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 224.346486][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 224.346522][ C0] mac80211_hwsim_beacon_tx+0x378/0x820 [ 224.346550][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 224.346577][ C0] __iterate_interfaces+0x2af/0x5a0 [ 224.346599][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 224.346626][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 224.346650][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 224.346676][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 224.346703][ C0] mac80211_hwsim_beacon+0xb2/0x2b0 [ 224.346724][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 224.346747][ C0] __hrtimer_run_queues+0x3eb/0xaf0 [ 224.346800][ C0] hrtimer_run_softirq+0x18f/0x260 [ 224.346834][ C0] handle_softirqs+0x1d9/0x6c0 [ 224.346867][ C0] run_ktimerd+0x69/0x100 [ 224.346893][ C0] smpboot_thread_fn+0x57c/0xa80 [ 224.346921][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 224.346960][ C0] kthread+0x388/0x470 [ 224.346995][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 224.347019][ C0] ? __pfx_kthread+0x10/0x10 [ 224.347049][ C0] ret_from_fork+0x514/0xb70 [ 224.347081][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 224.347110][ C0] ? __switch_to+0xc89/0x1420 [ 224.347138][ C0] ? __pfx_kthread+0x10/0x10 [ 224.347168][ C0] ret_from_fork_asm+0x1a/0x30 [ 224.347203][ C0] [ 224.347214][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 224.347239][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 224.347250][ C1] Call Trace: [ 224.347257][ C1] [ 224.347264][ C1] dump_stack_lvl+0xe8/0x150 [ 224.347305][ C1] should_fail_ex+0x467/0x600 [ 224.347344][ C1] should_failslab+0xa8/0x100 [ 224.347373][ C1] kmem_cache_alloc_node_noprof+0xae/0x670 [ 224.347397][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 224.347419][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 224.347451][ C1] __alloc_skb+0x1d7/0x7a0 [ 224.347480][ C1] __netdev_alloc_skb+0xc0/0x4b0 [ 224.347518][ C1] __ieee80211_beacon_get+0xc97/0x1820 [ 224.347553][ C1] ? __lock_acquire+0x683/0x2ce0 [ 224.347577][ C1] ? __ieee80211_beacon_get+0x34/0x1820 [ 224.347609][ C1] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 224.347645][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 224.347677][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 224.347720][ C1] mac80211_hwsim_beacon_tx+0x378/0x820 [ 224.347757][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 224.347789][ C1] __iterate_interfaces+0x2af/0x5a0 [ 224.347816][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 224.347849][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 224.347879][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 224.347912][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 224.347944][ C1] mac80211_hwsim_beacon+0xb2/0x2b0 [ 224.347970][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 224.347998][ C1] __hrtimer_run_queues+0x3eb/0xaf0 [ 224.348054][ C1] hrtimer_run_softirq+0x18f/0x260 [ 224.348096][ C1] handle_softirqs+0x1d9/0x6c0 [ 224.348137][ C1] run_ktimerd+0x69/0x100 [ 224.348169][ C1] smpboot_thread_fn+0x57c/0xa80 [ 224.348204][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 224.348246][ C1] kthread+0x388/0x470 [ 224.348288][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 224.348317][ C1] ? __pfx_kthread+0x10/0x10 [ 224.348353][ C1] ret_from_fork+0x514/0xb70 [ 224.348392][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 224.348428][ C1] ? __switch_to+0xc89/0x1420 [ 224.348462][ C1] ? __pfx_kthread+0x10/0x10 [ 224.348499][ C1] ret_from_fork_asm+0x1a/0x30 [ 224.348542][ C1] [ 224.364317][ T7849] CPU: 0 UID: 0 PID: 7849 Comm: syz.4.724 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 224.364412][ T7849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 224.364445][ T7849] Call Trace: [ 224.364467][ T7849] [ 224.364497][ T7849] dump_stack_lvl+0xe8/0x150 [ 224.364606][ T7849] should_fail_ex+0x467/0x600 [ 224.364700][ T7849] ? __pfx_sock_alloc_inode+0x10/0x10 [ 224.364755][ T7849] should_failslab+0xa8/0x100 [ 224.364825][ T7849] ? __pfx_sock_alloc_inode+0x10/0x10 [ 224.364879][ T7849] kmem_cache_alloc_lru_noprof+0xa7/0x650 [ 224.364951][ T7849] ? sock_alloc_inode+0x2c/0x1a0 [ 224.365003][ T7849] ? sock_alloc_inode+0x2c/0x1a0 [ 224.365069][ T7849] ? __pfx_sock_alloc_inode+0x10/0x10 [ 224.365143][ T7849] sock_alloc_inode+0x2c/0x1a0 [ 224.365228][ T7849] ? __pfx_sock_alloc_inode+0x10/0x10 [ 224.365274][ T7849] alloc_inode+0x6a/0x1b0 [ 224.365339][ T7849] __sock_create+0x12d/0x9d0 [ 224.365428][ T7849] __sys_socket+0xd6/0x1b0 [ 224.365493][ T7849] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.365563][ T7849] __x64_sys_socket+0x7a/0x90 [ 224.365628][ T7849] do_syscall_64+0x174/0x580 [ 224.365722][ T7849] ? trace_irq_disable+0x3b/0x140 [ 224.365786][ T7849] ? clear_bhb_loop+0x40/0x90 [ 224.365854][ T7849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.365908][ T7849] RIP: 0033:0x7fd82be6e019 [ 224.365987][ T7849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.366032][ T7849] RSP: 002b:00007fd82a0c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 224.366094][ T7849] RAX: ffffffffffffffda RBX: 00007fd82c0f5fa0 RCX: 00007fd82be6e019 [ 224.366136][ T7849] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 224.366174][ T7849] RBP: 00007fd82bf0500c R08: 0000000000000000 R09: 0000000000000000 [ 224.366218][ T7849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 224.366258][ T7849] R13: 00007fd82c0f6038 R14: 00007fd82c0f5fa0 R15: 00007fff481ecff8 [ 224.366345][ T7849] [ 224.368495][ T7850] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 224.392644][ T7849] net_ratelimit: 8 callbacks suppressed [ 224.392711][ T7849] socket: no more sockets [ 227.741021][ T7856] nvmet: Invalid value 'ipv' for adrfam [ 228.507459][ T4911] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 228.545214][ T4911] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 228.550705][ T4911] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 228.568578][ T4911] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 228.591095][ T4911] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 228.749623][ T7881] bridge0: port 3(erspan0) entered blocking state [ 228.749761][ T7881] bridge0: port 3(erspan0) entered disabled state [ 228.750011][ T7881] erspan0: entered allmulticast mode [ 228.831987][ T7881] erspan0: entered promiscuous mode [ 228.854621][ T7881] bridge0: port 3(erspan0) entered blocking state [ 228.854765][ T7881] bridge0: port 3(erspan0) entered forwarding state [ 229.279116][ T7905] netlink: 24 bytes leftover after parsing attributes in process `syz.4.743'. [ 229.279140][ T7905] netlink: 4 bytes leftover after parsing attributes in process `syz.4.743'. [ 229.520588][ T7908] netlink: 4 bytes leftover after parsing attributes in process `syz.2.742'. [ 230.120765][ T7931] netlink: 16 bytes leftover after parsing attributes in process `syz.3.752'. [ 230.122478][ T7931] netlink: 112 bytes leftover after parsing attributes in process `syz.3.752'. [ 230.618242][ T7875] lo speed is unknown, defaulting to 1000 [ 230.658132][ T7946] netlink: 4 bytes leftover after parsing attributes in process `syz.5.758'. [ 230.698234][ T5604] Bluetooth: hci3: command tx timeout [ 231.746702][ T7981] netlink: 276 bytes leftover after parsing attributes in process `syz.4.773'. [ 231.842142][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.401703][ T8002] netlink: 12 bytes leftover after parsing attributes in process `syz.4.781'. [ 232.778276][ T5604] Bluetooth: hci3: command tx timeout [ 232.843870][ T7875] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.843998][ T7875] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.844211][ T7875] bridge_slave_0: entered allmulticast mode [ 232.871917][ T7875] bridge_slave_0: entered promiscuous mode [ 232.898111][ T8016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.898157][ T8016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.898429][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.898785][ T8016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.949056][ T8020] netlink: 56 bytes leftover after parsing attributes in process `syz.5.786'. [ 232.954956][ T7875] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.955050][ T7875] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.955235][ T7875] bridge_slave_1: entered allmulticast mode [ 232.989311][ T7875] bridge_slave_1: entered promiscuous mode [ 233.057651][ T8016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.060107][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.062184][ T8015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.165013][ T8015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.165273][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.390184][ T8030] netlink: 92 bytes leftover after parsing attributes in process `syz.4.789'. [ 233.587321][ T7875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.621336][ T7875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.735826][ T7875] team0: Port device team_slave_0 added [ 233.750830][ T7875] team0: Port device team_slave_1 added [ 234.108010][ T7875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.108028][ T7875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 234.108057][ T7875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.115111][ T7875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.115128][ T7875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 234.115157][ T7875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.766176][ T8058] tipc: Resetting bearer [ 234.857887][ T5604] Bluetooth: hci3: command tx timeout [ 235.061759][ T7875] hsr_slave_0: entered promiscuous mode [ 235.064186][ T7875] hsr_slave_1: entered promiscuous mode [ 235.066841][ T7875] debugfs: 'hsr0' already exists in 'hsr' [ 235.066867][ T7875] Cannot create hsr debugfs directory [ 236.311711][ T8102] NFSD: Failed to start, no listeners configured. [ 236.937988][ T5604] Bluetooth: hci3: command tx timeout [ 237.114246][ T5328] net_ratelimit: 14 callbacks suppressed [ 237.114264][ T5328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.256091][ T7875] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 237.297142][ T7875] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 237.308038][ T7875] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 237.415036][ T7875] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 237.432334][ T7875] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 237.622007][ T7875] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 237.639377][ T7875] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 237.639888][ T8101] lo speed is unknown, defaulting to 1000 [ 237.733160][ T7875] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 238.152455][ T5855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.381100][ T8156] __nla_validate_parse: 1 callbacks suppressed [ 238.381120][ T8156] netlink: 68 bytes leftover after parsing attributes in process `syz.3.830'. [ 238.625685][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.179144][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.224440][ T7875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.342836][ T7875] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.434609][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.434838][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.464374][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.464592][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.498295][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.498630][ T1308] netdevsim netdevsim99 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.056185][ T8184] NFSD: Failed to start, no listeners configured. [ 240.239024][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.550216][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.270435][ T5855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.426583][ T8235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.478915][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.591199][ T7875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.906178][ T8245] netlink: 32 bytes leftover after parsing attributes in process `syz.4.858'. [ 242.195107][ T8257] net_ratelimit: 4 callbacks suppressed [ 242.195126][ T8257] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.195324][ T8256] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.196090][ T8254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.196234][ T8256] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.267504][ T8258] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.308743][ T5328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.541625][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.595911][ T8266] netlink: 52 bytes leftover after parsing attributes in process `syz.4.864'. [ 242.595940][ T8266] netlink: 52 bytes leftover after parsing attributes in process `syz.4.864'. [ 242.711431][ T7875] veth0_vlan: entered promiscuous mode [ 242.751999][ T7875] veth1_vlan: entered promiscuous mode [ 242.861775][ T8274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.862028][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.212234][ T7875] veth0_macvtap: entered promiscuous mode [ 243.227315][ T7875] veth1_macvtap: entered promiscuous mode [ 243.278746][ T7875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.338819][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.365278][ T7875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.476420][ T1308] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.476502][ T1308] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.476544][ T1308] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.476583][ T1308] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.333454][ T8306] netlink: 20 bytes leftover after parsing attributes in process `syz.4.879'. [ 244.881188][ T1038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.881211][ T1038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.244103][ T1133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.244126][ T1133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.399159][ T8329] veth0: left allmulticast mode [ 245.399194][ T8329] veth0: left promiscuous mode [ 245.399471][ T8329] bridge0: port 3(veth0) entered disabled state [ 246.400957][ T8356] netlink: 12 bytes leftover after parsing attributes in process `syz.3.899'. [ 246.443375][ T8356] hsr_slave_0: left promiscuous mode [ 246.506190][ T8356] hsr_slave_1: left promiscuous mode [ 247.531295][ T822] net_ratelimit: 26 callbacks suppressed [ 247.531315][ T822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.003253][ T8394] NFSD: Failed to start, no listeners configured. [ 248.554289][ T5328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.623000][ T199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.215152][ T8406] lo speed is unknown, defaulting to 1000 [ 249.328116][ T8440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.931'. [ 249.573919][ T8444] netlink: 4 bytes leftover after parsing attributes in process `syz.2.934'. [ 249.583321][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.153171][ T8456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.153431][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.618732][ T5328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.736834][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.737205][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.760938][ T5708] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 250.761771][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.764555][ T5708] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 251.030419][ T5708] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 251.122397][ T5328] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 251.156045][ T5328] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 251.168886][ T5328] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 251.180070][ T5708] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 251.206045][ T5708] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 251.378982][ T5855] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 251.439087][ T5328] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 251.455374][ T8474] ceph: No mds server is up or the cluster is laggy [ 251.486746][ T5708] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 251.570559][ T199] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 251.817389][ T8480] ceph: No mds server is up or the cluster is laggy [ 251.817577][ T8483] ceph: No mds server is up or the cluster is laggy [ 251.820894][ T8481] ceph: No mds server is up or the cluster is laggy [ 251.926030][ T5855] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 251.989533][ T5708] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 251.993099][ T5328] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 252.569679][ T8493] NFSD: Unable to initialize client recovery tracking! (-110) [ 252.569700][ T8493] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 252.569712][ T8493] NFSD: starting 90-second grace period (net f00003a6) [ 252.694153][ T8514] net_ratelimit: 12 callbacks suppressed [ 252.748100][ T8514] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.800495][ T8514] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.809064][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.859182][ T8514] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.879937][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.163887][ T8524] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 253.738415][ T5328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.974019][ T8546] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.974354][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.974688][ T8546] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.766966][ T8577] netlink: 16 bytes leftover after parsing attributes in process `syz.4.990'. [ 254.770055][ T8577] netlink: 132 bytes leftover after parsing attributes in process `syz.4.990'. [ 255.936497][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.936607][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.339517][ T8587] NFSD: Unable to initialize client recovery tracking! (-110) [ 256.339538][ T8587] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 256.339548][ T8587] NFSD: starting 90-second grace period (net f00003a6) [ 257.391925][ T8619] NFSD: Failed to start, no listeners configured. [ 257.793300][ T8654] lo speed is unknown, defaulting to 1000 [ 257.901085][ T5328] net_ratelimit: 20 callbacks suppressed [ 257.901108][ T5328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.605170][ T8670] ceph: No mds server is up or the cluster is laggy [ 258.607344][ T199] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 258.938524][ T5855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.957544][ T199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.877935][ T8695] NFSD: Unable to initialize client recovery tracking! (-110) [ 259.877951][ T8695] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 259.877960][ T8695] NFSD: starting 90-second grace period (net f00003a6) [ 259.978724][ T5855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.378848][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.854762][ T5600] libceph: mon0 (1)127.0.0.1:6666 socket closed (con state V1_BANNER) [ 260.856112][ T8716] ceph: No mds server is up or the cluster is laggy [ 261.032833][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.035058][ T5328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.466341][ T8687] lo speed is unknown, defaulting to 1000 [ 261.542636][ T8692] lo speed is unknown, defaulting to 1000 [ 261.653161][ T8700] lo speed is unknown, defaulting to 1000 [ 261.780060][ T8696] lo speed is unknown, defaulting to 1000 [ 261.845765][ T5600] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 261.870611][ T8727] ceph: No mds server is up or the cluster is laggy [ 261.981351][ T5600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.059461][ T5328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.212885][ T8693] lo speed is unknown, defaulting to 1000 [ 262.629500][ T8743] NFSD: Failed to start, no listeners configured. [ 262.654709][ T8699] lo speed is unknown, defaulting to 1000 [ 263.098421][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.290704][ T8757] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1054'. [ 263.290838][ T8757] openvswitch: netlink: Message has 4 unknown bytes. [ 263.998633][ T5328] ------------[ cut here ]------------ [ 263.998645][ T5328] con->v1.connect_seq != le32_to_cpu(con->v1.in_reply.connect_seq) [ 263.998658][ T5328] WARNING: net/ceph/messenger_v1.c:902 at ceph_con_v1_try_read+0x3335/0x6eb0, CPU#1: kworker/1:3/5328 [ 263.998699][ T5328] Modules linked in: [ 263.998717][ T5328] CPU: 1 UID: 0 PID: 5328 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 263.998739][ T5328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 263.998750][ T5328] Workqueue: ceph-msgr ceph_con_workfn [ 263.998772][ T5328] RIP: 0010:ceph_con_v1_try_read+0x3335/0x6eb0 [ 263.998798][ T5328] Code: 45 31 e4 e9 3f d1 ff ff e8 68 a6 be f6 90 0f 0b 90 e9 cd d3 ff ff e8 5a a6 be f6 90 0f 0b 90 e9 dd e6 ff ff e8 4c a6 be f6 90 <0f> 0b 90 e9 f4 e7 ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 30 d1 [ 263.998811][ T5328] RSP: 0018:ffffc900041e7180 EFLAGS: 00010293 [ 263.998824][ T5328] RAX: ffffffff8b073574 RBX: 0000000000000001 RCX: ffff888025ea5d00 [ 263.998835][ T5328] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 263.998844][ T5328] RBP: ffffc900041e7a78 R08: 0000000000000000 R09: 0000000000000000 [ 263.998854][ T5328] R10: 0000000000000100 R11: 000000000000000d R12: ffff88805e918488 [ 263.998864][ T5328] R13: fffff5200083ce70 R14: dffffc0000000000 R15: 00000000ffffffff [ 263.998876][ T5328] FS: 0000000000000000(0000) GS:ffff888125d3e000(0000) knlGS:0000000000000000 [ 263.998888][ T5328] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 263.998899][ T5328] CR2: 00007f051ac03ff8 CR3: 000000005f8d2000 CR4: 00000000003526f0 [ 263.998926][ T5328] Call Trace: [ 263.998933][ T5328] [ 263.998955][ T5328] ? __lock_acquire+0x683/0x2ce0 [ 263.998994][ T5328] ? __pfx_ceph_con_v1_try_read+0x10/0x10 [ 263.999022][ T5328] ? __lock_acquire+0x683/0x2ce0 [ 263.999047][ T5328] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 263.999092][ T5328] ? lockdep_hardirqs_on+0x7a/0x110 [ 263.999114][ T5328] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 263.999135][ T5328] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 263.999160][ T5328] ? __local_bh_enable+0x1e1/0x2f0 [ 263.999185][ T5328] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 263.999205][ T5328] ? lockdep_hardirqs_on+0x7a/0x110 [ 263.999232][ T5328] ? __lock_acquire+0x683/0x2ce0 [ 263.999254][ T5328] ? wg_packet_decrypt_worker+0xe1/0xd90 [ 263.999278][ T5328] ? __pfx_wg_packet_decrypt_worker+0x10/0x10 [ 263.999303][ T5328] ? ktime_get+0x45/0x220 [ 263.999316][ T5328] ? lock_acquire+0x106/0x350 [ 263.999348][ T5328] ? __lock_acquire+0x683/0x2ce0 [ 263.999369][ T5328] ? __lock_acquire+0x683/0x2ce0 [ 263.999386][ T5328] ? look_up_lock_class+0x57/0x110 [ 263.999408][ T5328] ? register_lock_class+0x31/0x2e0 [ 263.999428][ T5328] ? __lock_acquire+0x683/0x2ce0 [ 263.999458][ T5328] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 263.999515][ T5328] ? lockdep_hardirqs_on+0x7a/0x110 [ 263.999544][ T5328] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 263.999578][ T5328] ? mutex_lock_nested+0x152/0x1d0 [ 263.999602][ T5328] ? ceph_con_workfn+0x3b/0x14a0 [ 263.999626][ T5328] ceph_con_workfn+0x208/0x14a0 [ 263.999649][ T5328] ? rcu_is_watching+0x15/0xb0 [ 263.999672][ T5328] ? process_scheduled_works+0xa20/0x14e0 [ 263.999692][ T5328] process_scheduled_works+0xa8e/0x14e0 [ 263.999733][ T5328] ? __pfx_process_scheduled_works+0x10/0x10 [ 263.999757][ T5328] ? assign_work+0x3cf/0x5d0 [ 263.999781][ T5328] worker_thread+0xa47/0xfb0 [ 263.999811][ T5328] ? __kthread_parkme+0x71/0x1f0 [ 263.999841][ T5328] kthread+0x388/0x470 [ 263.999866][ T5328] ? __pfx_worker_thread+0x10/0x10 [ 263.999885][ T5328] ? __pfx_kthread+0x10/0x10 [ 263.999910][ T5328] ret_from_fork+0x514/0xb70 [ 263.999938][ T5328] ? __pfx_ret_from_fork+0x10/0x10 [ 263.999963][ T5328] ? __switch_to+0xc89/0x1420 [ 263.999987][ T5328] ? __pfx_kthread+0x10/0x10 [ 264.000012][ T5328] ret_from_fork_asm+0x1a/0x30 [ 264.000041][ T5328] [ 264.000048][ T5328] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 264.000062][ T5328] CPU: 1 UID: 0 PID: 5328 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 264.000080][ T5328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 264.000091][ T5328] Workqueue: ceph-msgr ceph_con_workfn [ 264.000112][ T5328] Call Trace: [ 264.000118][ T5328] [ 264.000124][ T5328] vpanic+0x56c/0xa60 [ 264.000140][ T5328] ? __pfx__printk+0x10/0x10 [ 264.000159][ T5328] ? __pfx_vpanic+0x10/0x10 [ 264.000173][ T5328] ? is_bpf_text_address+0x292/0x2b0 [ 264.000192][ T5328] ? is_bpf_text_address+0x26/0x2b0 [ 264.000217][ T5328] panic+0xc5/0xd0 [ 264.000232][ T5328] ? __pfx_panic+0x10/0x10 [ 264.000254][ T5328] ? ret_from_fork_asm+0x1a/0x30 [ 264.000273][ T5328] __warn+0x315/0x4c0 [ 264.000288][ T5328] ? ceph_con_v1_try_read+0x3335/0x6eb0 [ 264.000315][ T5328] ? ceph_con_v1_try_read+0x3335/0x6eb0 [ 264.000339][ T5328] __report_bug+0x276/0x570 [ 264.000364][ T5328] ? ceph_con_v1_try_read+0x3335/0x6eb0 [ 264.000391][ T5328] ? __pfx___report_bug+0x10/0x10 [ 264.000412][ T5328] ? __local_bh_enable+0x1e1/0x2f0 [ 264.000436][ T5328] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 264.000456][ T5328] ? lockdep_hardirqs_on+0x7a/0x110 [ 264.000482][ T5328] ? ceph_con_v1_try_read+0x3335/0x6eb0 [ 264.000506][ T5328] report_bug+0x16a/0x220 [ 264.000528][ T5328] ? ceph_con_v1_try_read+0x3335/0x6eb0 [ 264.000551][ T5328] ? ceph_con_v1_try_read+0x3337/0x6eb0 [ 264.000580][ T5328] handle_bug+0x9c/0x200 [ 264.000605][ T5328] exc_invalid_op+0x1a/0x50 [ 264.000629][ T5328] asm_exc_invalid_op+0x1a/0x20 [ 264.000645][ T5328] RIP: 0010:ceph_con_v1_try_read+0x3335/0x6eb0 [ 264.000671][ T5328] Code: 45 31 e4 e9 3f d1 ff ff e8 68 a6 be f6 90 0f 0b 90 e9 cd d3 ff ff e8 5a a6 be f6 90 0f 0b 90 e9 dd e6 ff ff e8 4c a6 be f6 90 <0f> 0b 90 e9 f4 e7 ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 30 d1 [ 264.000684][ T5328] RSP: 0018:ffffc900041e7180 EFLAGS: 00010293 [ 264.000697][ T5328] RAX: ffffffff8b073574 RBX: 0000000000000001 RCX: ffff888025ea5d00 [ 264.000709][ T5328] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 264.000718][ T5328] RBP: ffffc900041e7a78 R08: 0000000000000000 R09: 0000000000000000 [ 264.000728][ T5328] R10: 0000000000000100 R11: 000000000000000d R12: ffff88805e918488 [ 264.000739][ T5328] R13: fffff5200083ce70 R14: dffffc0000000000 R15: 00000000ffffffff [ 264.000757][ T5328] ? ceph_con_v1_try_read+0x3334/0x6eb0 [ 264.000802][ T5328] ? __lock_acquire+0x683/0x2ce0 [ 264.000839][ T5328] ? __pfx_ceph_con_v1_try_read+0x10/0x10 [ 264.000867][ T5328] ? __lock_acquire+0x683/0x2ce0 [ 264.000893][ T5328] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 264.000915][ T5328] ? lockdep_hardirqs_on+0x7a/0x110 [ 264.000936][ T5328] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 264.000958][ T5328] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 264.000983][ T5328] ? __local_bh_enable+0x1e1/0x2f0 [ 264.001007][ T5328] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 264.001028][ T5328] ? lockdep_hardirqs_on+0x7a/0x110 [ 264.001055][ T5328] ? __lock_acquire+0x683/0x2ce0 [ 264.001078][ T5328] ? wg_packet_decrypt_worker+0xe1/0xd90 [ 264.001101][ T5328] ? __pfx_wg_packet_decrypt_worker+0x10/0x10 [ 264.001126][ T5328] ? ktime_get+0x45/0x220 [ 264.001139][ T5328] ? lock_acquire+0x106/0x350 [ 264.001171][ T5328] ? __lock_acquire+0x683/0x2ce0 [ 264.001192][ T5328] ? __lock_acquire+0x683/0x2ce0 [ 264.001210][ T5328] ? look_up_lock_class+0x57/0x110 [ 264.001232][ T5328] ? register_lock_class+0x31/0x2e0 [ 264.001252][ T5328] ? __lock_acquire+0x683/0x2ce0 [ 264.001282][ T5328] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 264.001304][ T5328] ? lockdep_hardirqs_on+0x7a/0x110 [ 264.001325][ T5328] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 264.001347][ T5328] ? mutex_lock_nested+0x152/0x1d0 [ 264.001363][ T5328] ? ceph_con_workfn+0x3b/0x14a0 [ 264.001387][ T5328] ceph_con_workfn+0x208/0x14a0 [ 264.001410][ T5328] ? rcu_is_watching+0x15/0xb0 [ 264.001432][ T5328] ? process_scheduled_works+0xa20/0x14e0 [ 264.001452][ T5328] process_scheduled_works+0xa8e/0x14e0 [ 264.001493][ T5328] ? __pfx_process_scheduled_works+0x10/0x10 [ 264.001518][ T5328] ? assign_work+0x3cf/0x5d0 [ 264.001541][ T5328] worker_thread+0xa47/0xfb0 [ 264.001576][ T5328] ? __kthread_parkme+0x71/0x1f0 [ 264.001606][ T5328] kthread+0x388/0x470 [ 264.001630][ T5328] ? __pfx_worker_thread+0x10/0x10 [ 264.001649][ T5328] ? __pfx_kthread+0x10/0x10 [ 264.001674][ T5328] ret_from_fork+0x514/0xb70 [ 264.001701][ T5328] ? __pfx_ret_from_fork+0x10/0x10 [ 264.001726][ T5328] ? __switch_to+0xc89/0x1420 [ 264.001749][ T5328] ? __pfx_kthread+0x10/0x10 [ 264.001774][ T5328] ret_from_fork_asm+0x1a/0x30 [ 264.001802][ T5328] [ 264.002448][ T5328] Kernel Offset: disabled