last executing test programs:

2m33.960590302s ago: executing program 1 (id=651):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10}}]}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)

2m33.820462119s ago: executing program 1 (id=653):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/sctp/addip_enable\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1\n', 0x2)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/net/sctp/addip_noauth_enable\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='1\n', 0x2)
close(r1)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
listen(r2, 0x5)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000340)=0x1, 0x4)
bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10)
connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e21, @loopback}, 0x10)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000000340)=0x1, 0x4)
bind$inet(r4, &(0x7f0000000380)={0x2, 0x4e22, @rand_addr=0x7f000002}, 0x10)
connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e21, @loopback}, 0x10)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @rand_addr=0x7f000002}], 0x10)

2m33.760761618s ago: executing program 1 (id=654):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='proc\x00', &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/ipv6/conf/syz_tun/accept_dad\x00', 0x1, 0x0)
write(r0, &(0x7f00000001c0)='1', 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/net/ipv6/conf/all/accept_dad\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240)='1', 0x1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv6/conf/syz_tun/disable_ipv6\x00', 0x1, 0x0)
write(r2, &(0x7f00000002c0)='0', 0x1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/net/ipv6/conf/all/disable_ipv6\x00', 0x1, 0x0)
write(r3, &(0x7f0000000340)='0', 0x1)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/net/ipv6/conf/syz_tun/dad_transmits\x00', 0x1, 0x0)
write(r4, &(0x7f00000003c0)='1', 0x1)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/sys/net/ipv6/conf/all/dad_transmits\x00', 0x1, 0x0)
write(r5, &(0x7f0000000440)='1', 0x1)
r6 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_ifreq(r6, 0x8914, &(0x7f00000004c0)={'syz_tun\x00', @ifru_ivalue=0x1})
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000500)={@remote, 0x40})
nanosleep(&(0x7f0000000540)={0x0, 0x5f5e100}, &(0x7f0000000580))
syz_emit_ethernet(0x56, &(0x7f00000005c0)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x20, 0x3a, 0xff, @remote, @mcast1, {[], @ndisc_na={0x88, 0x0, 0x0, 0x40, '\x00', @remote, [{0x2, 0x1, "aaaaaaaaaaaa"}]}}}}}}, 0x0)
nanosleep(&(0x7f0000000640)={0x0, 0x1dcd6500}, &(0x7f0000000680))

2m33.072067087s ago: executing program 1 (id=659):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='udp 2049\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f0000000140)='tcp 2049\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x1, 0x0)
write(r2, &(0x7f00000001c0)='8\x00', 0x2)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r3, &(0x7f0000000200)="000000010000000000000002000186a30000000300"/40, 0x24, 0x0, &(0x7f0000000240)={0x2, 0x801, @loopback}, 0x10)
sendto$inet(r3, &(0x7f0000000200)="000000020000000000000002000186a30000000400"/40, 0x24, 0x0, &(0x7f0000000240)={0x2, 0x801, @loopback}, 0x10)
sendto$inet(r3, &(0x7f0000000200)="000000030000000000000002000186a3000000030000000100"/40, 0x24, 0x0, &(0x7f0000000240)={0x2, 0x801, @loopback}, 0x10)
nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0)

2m19.51895037s ago: executing program 32 (id=639):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/module/nfsd/parameters/cltrack_prog\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='/bin/true\n\x00', 0xa)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x6)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10)
listen(r1, 0x5)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/versions\x00', 0x1, 0x0)
write(r2, &(0x7f0000000100)='-2 -3 +4\n\x00', 0x9)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/portlist\x00', 0x1, 0x0)
write(r3, &(0x7f0000000300)='5\n\x00', 0x2)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/threads\x00', 0x1, 0x0)
write(r4, &(0x7f0000000100)='1\n\x00', 0x2)
r5 = socket$inet_tcp(0x2, 0x1, 0x6)
connect$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10)
write(r5, &(0x7f0000000400)="80000028123456780000000000000002000186a300000003000000000000000700"/44, 0x2c)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)={0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, 0x14}}, 0x0)

2m17.887644895s ago: executing program 33 (id=659):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='udp 2049\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f0000000140)='tcp 2049\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x1, 0x0)
write(r2, &(0x7f00000001c0)='8\x00', 0x2)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r3, &(0x7f0000000200)="000000010000000000000002000186a30000000300"/40, 0x24, 0x0, &(0x7f0000000240)={0x2, 0x801, @loopback}, 0x10)
sendto$inet(r3, &(0x7f0000000200)="000000020000000000000002000186a30000000400"/40, 0x24, 0x0, &(0x7f0000000240)={0x2, 0x801, @loopback}, 0x10)
sendto$inet(r3, &(0x7f0000000200)="000000030000000000000002000186a3000000030000000100"/40, 0x24, 0x0, &(0x7f0000000240)={0x2, 0x801, @loopback}, 0x10)
nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0)

1m56.499791504s ago: executing program 0 (id=910):
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./proc\x00', 0x1ff)
mount(&(0x7f0000000060)=@filename='none\x00', &(0x7f0000000070)='./proc\x00', &(0x7f00000000d0)='proc\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140), 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0)
write(r0, 0x0, 0x0)

1m56.463627024s ago: executing program 0 (id=911):
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(&(0x7f00000000c0)=@filename='proc\x00', &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f00000001c0)='1', 0x1)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv6/conf/syz_tun/disable_ipv6\x00', 0x1, 0x0)
write(r0, &(0x7f00000002c0)='0', 0x1)

1m56.348380202s ago: executing program 0 (id=912):
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000300)={0x2, 0x1f40, @loopback}, 0x10)
listen(r0, 0x5)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r1, &(0x7f0000000300)={0x2, 0x1f40, @loopback}, 0x10)
r2 = accept(r0, 0x0, 0x0)
write(r1, &(0x7f0000000400)="012345", 0x3)
read(r2, 0x0, 0x0)

1m55.52183427s ago: executing program 0 (id=914):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x257, @loopback}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000020)={0x2, 0x257, @loopback}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xe, 0x6, &(0x7f0000000400)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r2}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x34}, @exit], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@map=r2, r3, 0x26, 0x0, 0x0, @void, @value=0x0}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000200)='\x00\x00\x00\x00', &(0x7f0000000240)=@udp=r0}, 0x20)
sendto(r1, &(0x7f0000000700)='hello', 0x5, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a00)=""/8, 0x8}], 0x1}, 0x0)

1m54.653546158s ago: executing program 0 (id=915):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000080)='./nfsd_mnt\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000140)='./sys_mnt\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys_mnt/module/nfsd/parameters/gracetime\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='1\n', 0x2)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys_mnt/module/nfsd/parameters/leasetime\x00', 0x1, 0x0)
write(r1, &(0x7f0000000280)='1\n', 0x2)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000300)='./proc_mnt\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./export_dir\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./nfsd_mnt/versions\x00', 0x1, 0x0)
write(r2, &(0x7f0000000400)='-2 -3 +4\n', 0x9)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
write(r3, &(0x7f0000000480)='tcp 2049\n', 0x9)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0)
write(r4, &(0x7f0000000500)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./proc_mnt/net/rpc/nfsd.export/channel\x00', 0x1, 0x0)
write(r5, &(0x7f0000000580)='localhost / 2147483647 0 0 0 0\n', 0x1f)
close(r5)
r6 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc_mnt/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0)
write(r6, &(0x7f0000000600)='localhost 1 \\x00 2147483647 /\n', 0x1e)
close(r6)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./nfsd_mnt/threads\x00', 0x1, 0x0)
write(r7, &(0x7f0000000680)='1\n', 0x2)
close(r7)
mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./nfs_mnt\x00', 0x1ff)
mount(&(0x7f0000000700)=@filename='127.0.0.1:/\x00', &(0x7f0000000740)='./nfs_mnt\x00', &(0x7f0000000780)='nfs4\x00', 0x0, &(0x7f00000007c0)='addr=127.0.0.1,clientaddr=127.0.0.1\x00')
setxattr(&(0x7f0000000800)='./nfs_mnt\x00', &(0x7f0000000840)=@known='system.posix_acl_access\x00', &(0x7f0000000880)='\x02\x00\x00\x00\x01\x00\a\x00\xff\xff\xff\xff\x04\x00\x05\x00\xff\xff\xff\xff \x00\x05\x00\xff\xff\xff\xff', 0x1c, 0x0)

1m52.442076764s ago: executing program 34 (id=835):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='-3 +4\n', 0x6)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r1, &(0x7f00000002c0)='nfsd 127.0.0.1 2000000000 domain\n', 0x21)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./nfsd/portlist\x00', 0x1, 0x0)
write(r5, &(0x7f0000000400)='udp 2049\n', 0x9)
close(r5)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./nfsd/threads\x00', 0x1, 0x0)
write(r6, &(0x7f0000000480)='1\n', 0x2)
close(r6)
r7 = socket$inet(0x2, 0x2, 0x0)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10)
write(r7, &(0x7f00000004c0)="000000010000000000000002000186a300000004000000010000000000000000000000000000000000000000000000000000000100000027", 0x38)
nanosleep(&(0x7f0000000100)={0x0, 0x5f5e100}, 0x0)
read(r2, &(0x7f0000000200), 0x3e8)
write(r2, &(0x7f0000000500)='4294967295 2000000000 0\n', 0x18)
write(r7, &(0x7f0000000540)="000000020000000000000002000186a300000004000000010000000000000000000000000000000000000000000000000000000100000027", 0x38)
nanosleep(&(0x7f0000000100)={0x0, 0x5f5e100}, 0x0)
read(r3, &(0x7f0000000300), 0x3e8)
read(r4, &(0x7f0000000400), 0x3e8)
read(r2, &(0x7f0000000500), 0x3e8)

1m47.95879002s ago: executing program 35 (id=877):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='-2 -3 +4\n\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='+tcp 2049\n\x00', 0xa)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/threads\x00', 0x1, 0x0)
write(r2, &(0x7f0000000100)='1\n\x00', 0x2)

1m46.931109045s ago: executing program 36 (id=886):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='-2 -3 +4\n\x00', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0)
write(r1, &(0x7f0000000240)='1\n\x00', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0)
write(r2, &(0x7f00000001c0)='tcp 20000\n\x00', 0xa)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0)
write(r3, &(0x7f0000000240)='1\n\x00', 0x2)
close(r3)
r4 = socket$inet(0x2, 0x1, 0x0)
connect$inet(r4, &(0x7f0000000280)={0x2, 0x4e20, @loopback}, 0x10)
write(r4, &(0x7f0000000500)='test', 0x4)
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)
r5 = socket$inet(0x2, 0x1, 0x0)
connect$inet(r5, &(0x7f0000000380)={0x2, 0x4e20, @loopback}, 0x10)
write(r5, &(0x7f0000000500)='test', 0x4)
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)

1m41.532211848s ago: executing program 7 (id=938):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4321, @loopback}, 0x10)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24)
sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)='hello\x00', 0x6}], 0x1, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0)
recvfrom(r0, &(0x7f0000000300)=""/256, 0x100, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000400)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write(r3, &(0x7f0000000300), 0x20)
read(r2, &(0x7f0000000700), 0x20)
write(r3, &(0x7f0000000500)="000000020104", 0x6)
read(r2, &(0x7f0000000310), 0x6)
write(r3, &(0x7f0000000600)='reply\x00', 0x6)
read(r2, &(0x7f000000031c), 0x6)
sendto$inet(r0, &(0x7f0000000300), 0x22, 0x0, &(0x7f0000000080)={0x2, 0x1234, @loopback}, 0x10)
nanosleep(&(0x7f0000000800)={0x0, 0x5000000}, 0x0)
sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)='world\x00', 0x6}], 0x1, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "0200000000000000"}], 0x18}, 0x0)
recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/256, 0x100}], 0x1}, 0x0)
getsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000a00), &(0x7f0000000a20)=0x4)

1m41.242726192s ago: executing program 7 (id=939):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f0000000080)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000090)='./sys\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f0000000190)='1', 0x1)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e21, @loopback}, 0x10)
listen(r0, 0x5)
bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e22, @loopback}, 0x10)
connect$inet(r1, &(0x7f0000000380)={0x2, 0x4e21, @loopback}, 0x10)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000400)=[@in={0x2, 0x4e22, @local}], 0x10)

1m41.13312769s ago: executing program 7 (id=940):
r0 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10)
listen(r0, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./mnt\x00', 0x1ff)
r1 = fsopen(&(0x7f0000000400)='nfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000500)='source\x00', &(0x7f0000000600)='127.0.0.1:/export\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000700)='addr\x00', &(0x7f0000000800)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000900)='nfsvers\x00', &(0x7f0000000a00)='3\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b00)='proto\x00', &(0x7f0000000c00)='tcp\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000d00)='port\x00', &(0x7f0000000e00)='2049\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000f00)='mountport\x00', &(0x7f0000001000)='2049\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000001100)='mountproto\x00', &(0x7f0000001200)='tcp\x00', 0x0)
fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000001300)='ro\x00', 0x0, 0x0)
syz_clone(0x511, 0x0, 0x0, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
mount$nfs(&(0x7f0000000500)='127.0.0.1:/export\x00', &(0x7f0000001400)='./mnt\x00', &(0x7f0000000400), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='addr=127.0.0.1,nfsvers=3,proto=tcp,port=2049,mountport=2049,nolock\x00'])
r2 = accept4$inet(r0, 0x0, 0x0, 0x0)
recvfrom$inet(r2, &(0x7f0000000100)=""/256, 0x100, 0x0, 0x0, 0x0)
getsockopt$sock_int(r2, 0x1, 0x3, &(0x7f0000000108), &(0x7f0000000120)=0x4)
write(r2, &(0x7f0000000100), 0x40)
recvfrom$inet(r2, &(0x7f0000000100)=""/256, 0x100, 0x0, 0x0, 0x0)
getsockopt$sock_int(r2, 0x1, 0x3, &(0x7f0000000108), &(0x7f0000000120)=0x4)
write(r2, &(0x7f0000000100), 0x40)
recvfrom$inet(r2, &(0x7f0000000100)=""/256, 0x100, 0x0, 0x0, 0x0)
getsockopt$sock_int(r2, 0x1, 0x3, &(0x7f0000000108), &(0x7f0000000120)=0x4)
write(r2, &(0x7f0000000100), 0x40)
r3 = fsmount(r1, 0x0, 0x0)
move_mount(r3, &(0x7f0000001500)='\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./mnt\x00', 0x4)
getxattr(&(0x7f0000001400)='./mnt/file\x00', &(0x7f0000001600)=@known='system.posix_acl_access\x00', &(0x7f0000001700)=""/256, 0x100)

1m40.000753287s ago: executing program 37 (id=913):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='udp 2049\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='4\x00', 0x2)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r2, &(0x7f0000000200)="000000010000000000000002000186a300000003000000000000009900"/40, 0x24, 0x0, &(0x7f0000000240)={0x2, 0x801, @loopback}, 0x10)
sendto$inet(r2, &(0x7f0000000200)="000000020000000000000002000186a300000003000000000000000200"/40, 0x24, 0x0, &(0x7f0000000240)={0x2, 0x801, @loopback}, 0x10)
sendto$inet(r2, &(0x7f0000000200)="000000030000000000000002000186a300000003000000000000000700"/40, 0x24, 0x0, &(0x7f0000000240)={0x2, 0x801, @loopback}, 0x10)
nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0)

1m39.955685004s ago: executing program 7 (id=942):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000140)=@filename='nfsd\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0)
r0 = socket(0x2, 0x1, 0x6)
setsockopt(r0, 0x1, 0x2, &(0x7f0000000180)="01000000", 0x4)
bind(r0, &(0x7f0000000200)=@in={0x2, 0x81f, @loopback}, 0x10)
listen(r0, 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='3\n', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='1\n', 0x2)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0)
write(r3, &(0x7f00000003c0)='\\x01000000 2000000000 0 0 0 krb5 \\x01000000ffffff7f000000000000000011000000000102030405060708090a0b0c0d0e0f\n', 0x85)
close(r3)
r4 = socket(0x2, 0x1, 0x6)
connect(r4, &(0x7f0000000500)=@in={0x2, 0x81f, @loopback}, 0x10)
write(r4, &(0x7f0000000600)="80000070123456780000000000000002000186a300000003000000000000000600000024000000010000000100000001000000020000000401000000000000060000000800000001000000000000000100000020040405ff00000000000000000000000100"/116, 0x74)
read(r4, &(0x7f0000000800)=""/100, 0x100)
close(r4)
close(r0)

1m38.875404491s ago: executing program 38 (id=915):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000080)='./nfsd_mnt\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000140)='./sys_mnt\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys_mnt/module/nfsd/parameters/gracetime\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='1\n', 0x2)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys_mnt/module/nfsd/parameters/leasetime\x00', 0x1, 0x0)
write(r1, &(0x7f0000000280)='1\n', 0x2)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000300)='./proc_mnt\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./export_dir\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./nfsd_mnt/versions\x00', 0x1, 0x0)
write(r2, &(0x7f0000000400)='-2 -3 +4\n', 0x9)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
write(r3, &(0x7f0000000480)='tcp 2049\n', 0x9)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0)
write(r4, &(0x7f0000000500)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./proc_mnt/net/rpc/nfsd.export/channel\x00', 0x1, 0x0)
write(r5, &(0x7f0000000580)='localhost / 2147483647 0 0 0 0\n', 0x1f)
close(r5)
r6 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc_mnt/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0)
write(r6, &(0x7f0000000600)='localhost 1 \\x00 2147483647 /\n', 0x1e)
close(r6)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./nfsd_mnt/threads\x00', 0x1, 0x0)
write(r7, &(0x7f0000000680)='1\n', 0x2)
close(r7)
mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./nfs_mnt\x00', 0x1ff)
mount(&(0x7f0000000700)=@filename='127.0.0.1:/\x00', &(0x7f0000000740)='./nfs_mnt\x00', &(0x7f0000000780)='nfs4\x00', 0x0, &(0x7f00000007c0)='addr=127.0.0.1,clientaddr=127.0.0.1\x00')
setxattr(&(0x7f0000000800)='./nfs_mnt\x00', &(0x7f0000000840)=@known='system.posix_acl_access\x00', &(0x7f0000000880)='\x02\x00\x00\x00\x01\x00\a\x00\xff\xff\xff\xff\x04\x00\x05\x00\xff\xff\xff\xff \x00\x05\x00\xff\xff\xff\xff', 0x1c, 0x0)

1m24.904318533s ago: executing program 39 (id=942):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000140)=@filename='nfsd\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0)
r0 = socket(0x2, 0x1, 0x6)
setsockopt(r0, 0x1, 0x2, &(0x7f0000000180)="01000000", 0x4)
bind(r0, &(0x7f0000000200)=@in={0x2, 0x81f, @loopback}, 0x10)
listen(r0, 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='3\n', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='1\n', 0x2)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0)
write(r3, &(0x7f00000003c0)='\\x01000000 2000000000 0 0 0 krb5 \\x01000000ffffff7f000000000000000011000000000102030405060708090a0b0c0d0e0f\n', 0x85)
close(r3)
r4 = socket(0x2, 0x1, 0x6)
connect(r4, &(0x7f0000000500)=@in={0x2, 0x81f, @loopback}, 0x10)
write(r4, &(0x7f0000000600)="80000070123456780000000000000002000186a300000003000000000000000600000024000000010000000100000001000000020000000401000000000000060000000800000001000000000000000100000020040405ff00000000000000000000000100"/116, 0x74)
read(r4, &(0x7f0000000800)=""/100, 0x100)
close(r4)
close(r0)

1m21.418999504s ago: executing program 1 (id=943):
r0 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r0, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00', 0x6, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)

1m21.204668625s ago: executing program 1 (id=979):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f0000000140)='0\x00', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x1, 0x0)
write(r2, &(0x7f00000001c0)='2\x00', 0x2)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r3, &(0x7f0000000200)="000000010000000000000002000186a30000000300000000deadbeef00"/40, 0x24, 0x0, &(0x7f0000000240)={0x2, 0x801, @loopback}, 0x10)
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)

1m16.339451346s ago: executing program 40 (id=953):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='+3 +4\n\x00', 0x6)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240)='udp 2049\n\x00', 0x9)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x1, 0x0)
write(r2, &(0x7f00000002c0)='1\n\x00', 0x2)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
r4 = socket$inet(0x2, 0x2, 0x0)
connect$inet(r4, &(0x7f0000000300)={0x2, 0x8008, @loopback}, 0x10)
write(r4, &(0x7f0000000400)="000000000000000000000002000186a30000000400000001000000010000002000"/56, 0x38)
nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0)
read(r3, &(0x7f0000000600), 0x1000)

1m13.628508415s ago: executing program 4 (id=1001):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
listen(r0, 0x5)
syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x40, @remote, @local, {[], {{0x1234, 0x4e20, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x2, 0x1000}}}}}}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x40, @remote, @local, {[], {{0x1234, 0x4e20, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x2, 0x1000}}}}}}}, 0x0)

1m13.265213852s ago: executing program 4 (id=1004):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='127.0.0.1:/export\x00', &(0x7f0000000100), &(0x7f0000000300)='nfs\x00', 0x0, &(0x7f0000000400)='addr=127.0.0.1,proto=udp,mountproto=udp\x00')

1m12.327302364s ago: executing program 4 (id=1005):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000010000500000000000000000000000100000000000100000001000000"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001800050000000000000000002d00000000000000010100000500010008000800040001000000"], 0x28}}, 0x0)
r1 = socket(0x2d, 0x2, 0x0)
ioctl(r1, 0x89e2, &(0x7f0000000300)="0100000008000000")
sendmsg(r1, &(0x7f0000000400)={&(0x7f0000000500)=@generic={0x2d, "00000100000008011800"}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000700)='\x00', 0x1}], 0x1}, 0x0)

1m12.130274813s ago: executing program 4 (id=1006):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newsa={0x150, 0x10, 0x1, 0x1, 0x0, {{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@loopback, 0x1234, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x34ff, 0xa}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, '000102030405060708090a0b0c0d0e0f00010203'}}]}, 0x150}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newpolicy={0xfc, 0x13, 0x1, 0x2, 0x0, {{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x32}, 0xa, @in6=@empty, 0x34ff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x11)
setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000300)=0x1, 0x4)
connect$inet6(r1, &(0x7f0000000400)={0xa, 0x1234, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f0000000500)="000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f", 0x40, 0x4000000, &(0x7f0000000400)={0xa, 0x1234, 0x0, @loopback}, 0x1c)

1m11.908268243s ago: executing program 4 (id=1007):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', <r2=>0x0})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth0\x00', <r3=>0x0})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1\x00', <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@setlink={0x20, 0x13, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@setlink={0x20, 0x13, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="7c000000130005000000000000000000070000000200000000000000000000005c001a0006000000020000005000040028000100080001000100000008000200030000000800030004000000060004000100000028000600080001000100000008000200e803000008000300030000000800040010270000"], 0x7c}}, 0x0)

1m11.625010459s ago: executing program 4 (id=1008):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x6)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)
listen(r0, 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='3\x00', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/threads\x00', 0x1, 0x0)
write(r2, &(0x7f0000000500)='0\x00', 0x2)
close(r2)

1m11.538237048s ago: executing program 2 (id=1009):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24)
connect$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4321, @loopback}}, 0x24)
sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)='hello\x00', 0x6}], 0x1, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0)
recvfrom(r0, &(0x7f0000000300)=""/256, 0x100, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000400)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write(r3, &(0x7f0000000300), 0x20)
read(r2, &(0x7f0000000700), 0x20)
write(r3, &(0x7f0000000500)="000000020104", 0x6)
read(r2, &(0x7f0000000310), 0x6)
write(r3, &(0x7f0000000600)='reply\x00', 0x6)
read(r2, &(0x7f000000031c), 0x6)
sendto$inet(r0, &(0x7f0000000300), 0x22, 0x0, &(0x7f0000000080)={0x2, 0x1234, @loopback}, 0x10)
nanosleep(&(0x7f0000000800)={0x0, 0x5000000}, 0x0)
sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)='world\x00', 0x6}], 0x1, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "0200000000000000"}], 0x18}, 0x0)
recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/256, 0x100}], 0x1}, 0x0)
getsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000a00), &(0x7f0000000a20)=0x4)

1m11.28986194s ago: executing program 2 (id=1010):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000000), 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newsa={0x150, 0x10, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x1234, 0x1234, 0x0, 0x0, 0xa}, {@in6=@loopback, 0x4d2, 0x33}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x60, 0x14, {{'hmac(sha1)\x00'}, 0xa0, 0xa0, '01234567890123456789'}}]}, 0x150}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={&(0x7f0000000000), 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newpolicy={0xfc, 0x13, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x1234, 0x1234, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x4d2, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$inet6(r1, &(0x7f0000000200)={&(0x7f0000000400)={0xa, 0x1234, 0x0, @loopback}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000300)="00112233445566778899aabbccddeeff", 0x10}], 0x1, &(0x7f0000000500)=[@hoplimit={{0x14, 0x29, 0x34, 0x40}}], 0x18}, 0x0)

1m11.212218431s ago: executing program 2 (id=1011):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/sys/net/sctp/intl_enable\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='1', 0x1)
close(r0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x1388, @empty}, 0x10)
listen(r1, 0x5)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000240)=0x2, 0x4)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7d, &(0x7f0000000280)={0x0, 0x1}, 0x8)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x1}, 0x8)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x7}, 0x8)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @empty}, 0x10)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000380)=0x2, 0x4)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7d, &(0x7f00000003c0)={0x0, 0x1}, 0x8)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x1}, 0x8)
connect$inet(r2, &(0x7f0000000500)={0x2, 0x1388, @loopback}, 0x10)
setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000740), 0x4)

1m11.021513453s ago: executing program 2 (id=1012):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/net/sctp/addip_enable\x00', 0x1, 0x0)
write(r0, &(0x7f00000000c0)='1', 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/addip_noauth_enable\x00', 0x1, 0x0)
write(r1, &(0x7f0000000140)='1', 0x1)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e23, @loopback}, 0x10)
listen(r2, 0x5)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e24, @loopback}, 0x10)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}], 0x10)
connect$inet(r3, &(0x7f0000000400)={0x2, 0x4e23, @loopback}, 0x10)
r4 = accept(r2, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}}}, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}], 0x10)
close(r4)

1m10.910117763s ago: executing program 2 (id=1013):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/net/sctp/addip_enable\x00', 0x1, 0x0)
write(r0, &(0x7f00000000c0)='1', 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/addip_noauth_enable\x00', 0x1, 0x0)
write(r1, &(0x7f0000000140)='1', 0x1)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e23, @loopback}, 0x10)
listen(r2, 0x5)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e24, @loopback}, 0x10)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}], 0x10)
connect$inet(r3, &(0x7f0000000400)={0x2, 0x4e23, @loopback}, 0x10)
accept(r2, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}], 0x10)

1m10.781759905s ago: executing program 2 (id=1014):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./rpc_pipefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./rpc_pipefs\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='1\n\x00', 0x2)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x1ff)
mount$nfs4(&(0x7f0000000340)='127.0.0.1:/\x00', &(0x7f0000000380)='./mnt\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='port=2049,proto=tcp,clientaddr=127.0.0.1\x00'])
r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt/testfile\x00', 0x0, 0x0)
close(r1)

1m6.870424179s ago: executing program 3 (id=1017):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/net/sctp/addip_enable\x00', 0x1, 0x0)
write(r0, &(0x7f00000000c0)='1', 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/addip_noauth_enable\x00', 0x1, 0x0)
write(r1, &(0x7f0000000140)='1', 0x1)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e23, @loopback}, 0x10)
listen(r2, 0x5)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e24, @loopback}, 0x10)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}], 0x10)
connect$inet(r3, &(0x7f0000000400)={0x2, 0x4e23, @loopback}, 0x10)
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}}}, 0x84)

1m6.801577812s ago: executing program 3 (id=1018):
r0 = socket$inet_tcp(0x2, 0x1, 0x6)
bind(r0, &(0x7f0000000000)=@in={0x2, 0x808, @loopback}, 0x10)
listen(r0, 0x5)
r1 = fsopen(&(0x7f0000000100)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='source\x00', &(0x7f0000000300)='127.0.0.1:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='addr\x00', &(0x7f0000000500)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000600)='port\x00', &(0x7f0000000700)='2056\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000800)='proto\x00', &(0x7f0000000900)='tcp\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000a00)='xprtsec\x00', &(0x7f0000000b00)='tls\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
r2 = accept(r0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000c00), 0x4)
setsockopt$inet_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000d00)=@gcm_128={{0x303}, "1122334455667788", "11223344556677889900112233445566", "11223344", "0000000000000001"}, 0x28)
sendto(r2, &(0x7f0000000e00)="15030300020200", 0x7, 0x0, 0x0, 0x0)

1m6.382188128s ago: executing program 41 (id=978):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='-2 -3 +4\n\x00', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f00000001c0)='tcp 20000\n\x00', 0xa)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0)
write(r2, &(0x7f0000000240)='1\n\x00', 0x2)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0)
write(r3, &(0x7f0000000240)='1\n\x00', 0x2)
close(r3)
r4 = socket$inet(0x2, 0x1, 0x0)
connect$inet(r4, &(0x7f0000000280)={0x2, 0x4e20, @loopback}, 0x10)
r5 = socket$inet(0x2, 0x1, 0x0)
connect$inet(r5, &(0x7f0000000380)={0x2, 0x4e20, @loopback}, 0x10)

1m5.858881476s ago: executing program 42 (id=979):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f0000000140)='0\x00', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x1, 0x0)
write(r2, &(0x7f00000001c0)='2\x00', 0x2)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r3, &(0x7f0000000200)="000000010000000000000002000186a30000000300000000deadbeef00"/40, 0x24, 0x0, &(0x7f0000000240)={0x2, 0x801, @loopback}, 0x10)
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)

1m5.816003806s ago: executing program 3 (id=1021):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/sys/net/sctp/intl_enable\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='1\x00', 0x1)
close(r0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r1, 0x0, 0x0)
listen(r1, 0x5)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000240)=0x2, 0x4)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7d, &(0x7f0000000280)={0x0, 0x1}, 0x8)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x1}, 0x8)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x7}, 0x8)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @empty}, 0x10)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000380)=0x2, 0x4)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7d, &(0x7f00000003c0)={0x0, 0x1}, 0x8)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x1}, 0x8)
connect$inet(r2, &(0x7f0000000500)={0x2, 0x1388, @loopback}, 0x10)
setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000740), 0x4)

1m5.717290738s ago: executing program 3 (id=1022):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'\x00', 0x1001})
r1 = socket(0x10, 0x3, 0x0)
sendmsg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000400)="240000001400050000000000000000002d000000020000000500020008000000", 0x24}], 0x1}, 0x0)
r2 = socket(0x2d, 0x2, 0x0)
setsockopt(r2, 0x11d, 0x1, &(0x7f0000000500)="01000000", 0x4)
ioctl(r2, 0x89e2, &(0x7f0000000600)='\x00\x00\b\x00')
sendmsg(r2, &(0x7f0000000700)={&(0x7f0000000800)=@generic={0x2d, "0000000000000800000019000200"}, 0x34, &(0x7f0000000900)=[{&(0x7f0000000a00)="01020304", 0x4}], 0x1}, 0x0)

1m5.241050945s ago: executing program 3 (id=1023):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/net/sctp/addip_enable\x00', 0x1, 0x0)
write(r0, &(0x7f00000000c0)='1', 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/addip_noauth_enable\x00', 0x1, 0x0)
write(r1, &(0x7f0000000140)='1', 0x1)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e23, @loopback}, 0x10)
listen(r2, 0x5)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e24, @loopback}, 0x10)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}], 0x10)
connect$inet(r3, &(0x7f0000000400)={0x2, 0x4e23, @loopback}, 0x10)
r4 = accept(r2, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}}}, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}], 0x10)
close(r4)

1m5.039369505s ago: executing program 3 (id=1024):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000000)=@filename='nfsd\x00', &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x6)
bind(r0, &(0x7f0000000100)=@in={0x2, 0x801, @loopback}, 0x10)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240)='3\n\x00', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='1\n\x00', 0x2)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff)
mount$nfs4(&(0x7f0000000440)='127.0.0.1:/\x00', &(0x7f0000000480)='./mnt\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049,proto=tcp,clientaddr=127.0.0.1\x00'])
r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/file0\x00', 0x0, 0x0)
close(r3)

56.303871009s ago: executing program 43 (id=1008):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x6)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)
listen(r0, 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='3\x00', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/threads\x00', 0x1, 0x0)
write(r2, &(0x7f0000000500)='0\x00', 0x2)
close(r2)

55.140208728s ago: executing program 44 (id=1014):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./rpc_pipefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./rpc_pipefs\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='1\n\x00', 0x2)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x1ff)
mount$nfs4(&(0x7f0000000340)='127.0.0.1:/\x00', &(0x7f0000000380)='./mnt\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='port=2049,proto=tcp,clientaddr=127.0.0.1\x00'])
r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt/testfile\x00', 0x0, 0x0)
close(r1)

49.611749414s ago: executing program 45 (id=1024):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000000)=@filename='nfsd\x00', &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x6)
bind(r0, &(0x7f0000000100)=@in={0x2, 0x801, @loopback}, 0x10)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240)='3\n\x00', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='1\n\x00', 0x2)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff)
mount$nfs4(&(0x7f0000000440)='127.0.0.1:/\x00', &(0x7f0000000480)='./mnt\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049,proto=tcp,clientaddr=127.0.0.1\x00'])
r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/file0\x00', 0x0, 0x0)
close(r3)

41.818453822s ago: executing program 6 (id=1054):
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', 0x1})
mount(&(0x7f0000000240)=@filename='proc\x00', &(0x7f0000000280)='./proc_mnt\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/29/smp_affinity\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='1\x00', 0x2)

41.260052196s ago: executing program 6 (id=1055):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/module/rdma_rxe/parameters/add\x00', 0x1, 0x0)
write(r0, &(0x7f0000000080)='eth0\x00', 0x5)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
bind(r1, &(0x7f0000000100)=@in={0x2, 0x4e21, @loopback}, 0x10)
listen(r1, 0x5)
connect$inet(r2, &(0x7f0000000200)={0x2, 0x4e21, @loopback}, 0x10)
accept(r1, 0x0, 0x0)
close(r2)
close(r1)

40.376127541s ago: executing program 6 (id=1058):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newroute={0x1c, 0x18, 0x401, 0x0, 0x0, {0x2, 0x20}, [@RTA_DST={0x8, 0x1, @rand_addr=0x64010100}]}, 0x38}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x40, 0x1, 0x0, @rand_addr=0x64010101, @local}, @timestamp={0xd, 0x0, 0x0, 0x1, 0x1}}}}}, 0x0)

39.000518574s ago: executing program 6 (id=1061):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0xa, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffffffd8}]}]}, @NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xb, 0x1, 'TPROXY\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x28, 0x3, "000000000000000000000000000000000000000000000000000000000000000012340000"}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0}}}, 0x100}}, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
sendto$inet6(r1, &(0x7f0000000200)="01020304", 0x4, 0x0, &(0x7f0000000300)={0xa, 0x1234, 0x0, @loopback}, 0x1c)

38.615827748s ago: executing program 6 (id=1063):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10}}]}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x138, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104}]}}]}, 0x138}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x10000, 0x100, 0x200, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x10000, 0x100, 0x200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x10000, 0x100, 0x200, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x10000, 0x100, 0x200, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x10000, 0x100, 0x200, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000f00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x10000, 0x100, 0x200, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001100)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x10000, 0x100, 0x200, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001300)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x10000, 0x100, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001500)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x10000, 0x100, 0x200, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001700)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x10000, 0x100, 0x200, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001900)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x10000, 0x100, 0x200, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x10000, 0x100, 0x200, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000002100)=@getqdisc={0x24, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}}, 0x24}}, 0x0)

36.884988428s ago: executing program 6 (id=1066):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x8008, @empty}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f0000000140)='3\n\x00', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x2, 0x0)
write(r2, &(0x7f00000001c0)='1\n\x00', 0x2)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r3, &(0x7f0000000200)={0x2, 0x8008, @loopback}, 0x10)
sendto(r3, &(0x7f0000000240)='12345678\x00', 0x8, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)

21.838227621s ago: executing program 46 (id=1066):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x8008, @empty}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f0000000140)='3\n\x00', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x2, 0x0)
write(r2, &(0x7f00000001c0)='1\n\x00', 0x2)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r3, &(0x7f0000000200)={0x2, 0x8008, @loopback}, 0x10)
sendto(r3, &(0x7f0000000240)='12345678\x00', 0x8, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)

19.668312963s ago: executing program 5 (id=1099):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller0\x00'}}]}]}, 0x2c}}, 0x0)
syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@multicast, @local, @void, {@generic={0x88ca, "0000002c00000000000000000100000200"/44}}}, 0x0)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x2c, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller0\x00'}}]}]}, 0x2c}}, 0x0)

19.27816852s ago: executing program 5 (id=1100):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
add_key(&(0x7f0000000100)='rxrpc_s\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, r0)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000200)='syz\x00', 0x4)
bind$rxrpc(r1, &(0x7f0000000300)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24)
listen(r1, 0x5)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r2, &(0x7f0000000400)="0000000100000004000000010000000100000001010100020000000112345678", 0x20, 0x0, &(0x7f0000000500)={0x2, 0x4e20, @loopback}, 0x10)
nanosleep(&(0x7f0000000600)={0x0, 0xbebc200}, 0x0)
sendto$inet(r2, &(0x7f0000000700)="0000000100000004000000000000000000000002070100020000000100000000", 0x20, 0x0, &(0x7f0000000500)={0x2, 0x4e20, @loopback}, 0x10)
nanosleep(&(0x7f0000000600)={0x0, 0xbebc200}, 0x0)

18.919757028s ago: executing program 5 (id=1101):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4321, @loopback}, 0x10)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r1, 0x0, 0x0)
connect$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4321, @loopback}}, 0x24)
sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)='hello\x00', 0x6}], 0x1, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0)
recvfrom(r0, &(0x7f0000000300)=""/256, 0x100, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000400)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write(r3, &(0x7f0000000300), 0x20)
read(r2, &(0x7f0000000700), 0x20)
write(r3, &(0x7f0000000500)="000000020104", 0x6)
read(r2, &(0x7f0000000310), 0x6)
write(r3, &(0x7f0000000600)='reply\x00', 0x6)
read(r2, &(0x7f000000031c), 0x6)
sendto$inet(r0, &(0x7f0000000300), 0x22, 0x0, &(0x7f0000000080)={0x2, 0x1234, @loopback}, 0x10)
nanosleep(&(0x7f0000000800)={0x0, 0x5000000}, 0x0)
sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)='world\x00', 0x6}], 0x1, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "0200000000000000"}], 0x18}, 0x0)
recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/256, 0x100}], 0x1}, 0x0)
getsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000a00), &(0x7f0000000a20)=0x4)

17.984177535s ago: executing program 5 (id=1102):
mkdirat(0xffffffffffffff9c, 0x0, 0x1ed)
mount(&(0x7f0000000240)=@filename='proc\x00', &(0x7f0000000280)='./proc_mnt\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/29/smp_affinity\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\x00', 0x2)

17.871924631s ago: executing program 5 (id=1103):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={&(0x7f0000000040), 0x10, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={&(0x7f0000000140), 0x10, &(0x7f0000000180)={&(0x7f00000001c0)=@newtclass={0x50, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1, 0x1}, {0x0, 0x1}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x18, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x1}, @TCA_QFQ_LMAX={0x8, 0x2, 0x5dc}]}}]}, 0x50}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000240), 0x10, &(0x7f0000000280)={&(0x7f00000002c0)=@newtclass={0x50, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1, 0x2}, {0x0, 0x1}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x18, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x32}, @TCA_QFQ_LMAX={0x8, 0x2, 0x5dc}]}}]}, 0x50}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={&(0x7f0000000340), 0x10, &(0x7f0000000380)={&(0x7f00000003c0)=@newtclass={0x50, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1, 0x3}, {0x0, 0x1}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x18, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x64}, @TCA_QFQ_LMAX={0x8, 0x2, 0x5dc}]}}]}, 0x50}}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000500)=0x10001, 0x4)
connect$inet(r1, &(0x7f0000000600)={0x2, 0x1234, @loopback}, 0x10)
write(r1, &(0x7f0000000700)='hello11', 0x7)
write(r1, &(0x7f0000000710)='hello12', 0x7)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0xc, &(0x7f0000000800)=0x10002, 0x4)
connect$inet(r2, &(0x7f0000000900)={0x2, 0x1235, @loopback}, 0x10)
write(r2, &(0x7f0000000a00)='world21', 0x7)
write(r2, &(0x7f0000000a10)='world22', 0x7)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r3, &(0x7f0000000c00)={0x2, 0x1236, @loopback}, 0x10)
write(r3, &(0x7f0000000d10)='test32', 0x6)
sendmsg$nl_route_sched(r0, &(0x7f0000000400)={&(0x7f0000000440), 0x10, &(0x7f0000000480)={&(0x7f00000004c0)=@deltclass={0x40, 0x29, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1, 0x1}, {0x0, 0x1}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x8}}]}, 0x40}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000500)={&(0x7f0000000540), 0x10, &(0x7f0000000580)={&(0x7f00000005c0)=@delqdisc={0x34, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x34}}, 0x0)

17.624659008s ago: executing program 5 (id=1104):
r0 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x6f00, @loopback}, 0x10)
listen(r0, 0x5)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
accept4$inet(r0, 0x0, 0x0, 0x800)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='nfsd\x00', &(0x7f0000000300)='./nfsd\x00', &(0x7f0000000400)='nfsd\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f0000000600)='tcp 2049\x00', 0x9)

12.079873466s ago: executing program 0 (id=1025):
mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000700)='./proc\x00', &(0x7f0000000740)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='+3 +4\n\x00', 0x6)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240)='udp 2049\n\x00', 0x9)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x1, 0x0)
write(r2, &(0x7f00000002c0)='1\n\x00', 0x2)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
r4 = socket$inet(0x2, 0x2, 0x0)
connect$inet(r4, &(0x7f0000000300)={0x2, 0x8008, @loopback}, 0x10)
write(r4, &(0x7f0000000400)="000000010000000000000002000186a30000000300000001000000010000001c00"/64, 0x40)
nanosleep(&(0x7f0000000500)={0x0, 0x11e1a300}, 0x0)
read(r3, &(0x7f0000000600), 0x1000)

9.485838256s ago: executing program 7 (id=1026):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./rpc_pipe\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000200)='./rpc_pipe\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, 0x0)
mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000380)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=tcp\x00')
mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000400)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=tcp,nolock,rsize=1024,wsize=1024\x00')
mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000480)='addr=127.0.0.1,vers=2,proto=udp\x00')
mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000500)='nfs4\x00', 0x0, &(0x7f0000000540)='addr=127.0.0.1,port=2049,proto=tcp,clientaddr=127.0.0.1\x00')

8.656078608s ago: executing program 7 (id=1105):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x3c, 0x0, 0x8, 0x105, 0x0, 0x0, {0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1e}]}]}, 0x3c}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5000000041000701010000000000000004010000000000002400010006000600080000001000070000000000000000001100000008000d00000000001400020010000c000900090073797a3000000000"], 0x50}}, 0x0)

6.882216663s ago: executing program 8 (id=1094):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/sys/net/sctp/intl_enable\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='1\x00', 0x1)
close(r0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x1388, @empty}, 0x10)
listen(r1, 0x5)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000240)=0x2, 0x4)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7d, &(0x7f0000000280)={0x0, 0x1}, 0x8)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x1}, 0x8)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x7}, 0x8)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @empty}, 0x10)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000380)=0x2, 0x4)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7d, &(0x7f00000003c0)={0x0, 0x1}, 0x8)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x1}, 0x8)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000440)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000480)=0x1, 0x4)
connect$inet(r2, &(0x7f0000000500)={0x2, 0x1388, @loopback}, 0x10)
r3 = accept(r1, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000540)=0x1, 0x4)
sendmsg$inet_sctp(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)="0123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789", 0x2710}], 0x1}, 0x0)
nanosleep(&(0x7f0000000700)={0x0, 0x2faf080}, 0x0)
setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000740), 0x4)
setsockopt$inet_sctp_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000780), 0x4)
nanosleep(&(0x7f0000000800)={0x0, 0x2faf080}, 0x0)

6.547921653s ago: executing program 8 (id=1109):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x11d8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1234567890abcdef}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfedcba0987654321}]}]}, 0x38}}, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x1127, @loopback}}, {0x14, 0x2, @in={0x2, 0x1127, @loopback}}}}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="0102030405060708090a0b0c0d0e0f10", 0x10)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x10)
r3 = accept$alg(r2, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="010001000000000000000000000000010000000000000000400e001c0000001c00"/56, 0x34}], 0x1, &(0x7f0000000500)=[@iv={0x20, 0x117, 0x2, 0xc, "111213140000000000000001"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x18}], 0x50}, 0x0)
read$alg(r3, &(0x7f0000000600), 0x44)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r4, &(0x7f0000000600), 0x44, 0x0, &(0x7f0000000700)={0x2, 0x1127, @loopback}, 0x10)
sendto$inet(r4, &(0x7f0000000600), 0x44, 0x0, &(0x7f0000000700)={0x2, 0x1127, @loopback}, 0x10)
poll(&(0x7f0000000800)=[{r4, 0x1}], 0x1, 0x64)
nanosleep(&(0x7f0000000900)={0x0, 0x5f5e100}, 0x0)

6.313628187s ago: executing program 8 (id=1110):
r0 = socket$inet6_sctp(0xa, 0x805, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={<r1=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000300)={r1}, &(0x7f0000000340)=0x8)

6.220263754s ago: executing program 8 (id=1111):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0)
write(r0, &(0x7f0000000400)='10 2\n', 0x5) (async)
nanosleep(&(0x7f0000000a00)={0x3}, 0x0)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/netdevsim/devices/netdevsim10/sriov_numvfs\x00', 0x1, 0x0)
write(r1, &(0x7f0000000600)='120\n', 0x4) (async)
nanosleep(&(0x7f0000000a00)={0x3}, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)=ANY=[@ANYBLOB="340000001200010001000000000000000000000000000000000000000000000009000300657468310000000008001d0001000000"], 0x34}}, 0x0)

5.332165656s ago: executing program 8 (id=1114):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffff, 0x2}}]}, 0x28}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={{0x14, 0xa, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x2, 0xa, 0x1, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x2, 0xa, 0x1, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x4c, 0x2, 0xa, 0x1, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}]}], {0x14, 0xb, 0x1, 0x0, 0x0, {0x2}}}, 0xd4}}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r1, &(0x7f0000000000)="12345678", 0x8, 0x0, &(0x7f0000000020)={0x2, 0x1234, @loopback}, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'})

5.233441302s ago: executing program 8 (id=1115):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='-2 -3 +4\n\x00', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f00000001c0)='20000\n\x00', 0x6)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0)
write(r2, &(0x7f0000000240)='1\n\x00', 0x2)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0)
write(r3, &(0x7f0000000240)='1\n\x00', 0x2)
close(r3)

1.99817727s ago: executing program 47 (id=1104):
r0 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x6f00, @loopback}, 0x10)
listen(r0, 0x5)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
accept4$inet(r0, 0x0, 0x0, 0x800)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='nfsd\x00', &(0x7f0000000300)='./nfsd\x00', &(0x7f0000000400)='nfsd\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f0000000600)='tcp 2049\x00', 0x9)

708.476701ms ago: executing program 9 (id=1132):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc_mnt\x00', 0x1ed)
mount(0x0, 0x0, &(0x7f00000002c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/29/smp_affinity\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\x00', 0x2)

650.269133ms ago: executing program 9 (id=1133):
r0 = socket$inet(0x2, 0x1, 0x6)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10)
listen(r0, 0x5)
setsockopt$inet_buf(r0, 0x0, 0x1, &(0x7f0000000300)="80000100000000000000000100"/100, 0x100)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff)
mount$nfs(&(0x7f0000000080)='127.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,soft,timeo=1,retrans=1\x00', 0x5e}]})

463.800392ms ago: executing program 9 (id=1134):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001800010600000000000000002d0100000000000100000000050001000a0000000c000500010000000c000000300000001800010600000000000000002d0100000000000100000000050001000b0000000c000500010000000c000000300000001800010600000000000000002d0100000000000100000000050001000c0000000c000500010000000c000000300000001800010600000000000000002d0100000000000100000000050001000d0000000c000500010000000c000000"], 0xc0}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000000), 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001800010600000000000000002d0100000000000100000000050001000e0000000c000500010000000c000000300000001800010600000000000000002d0100000000000100000000050001000f0000000c000500010000000c000000300000001800010600000000000000002d010000000000010000000005000100100000000c000500010000000c000000300000001800010600000000000000002d010000000000010000000005000100110000000c000500010000000c000000"], 0xc0}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000000), 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="300000001800010600000000000000002d010000000000010000000005000100120000000c000500010000000c000000300000001800010600000000000000002d010000000000010000000005000100130000000c000500010000000c000000300000001800010600000000000000002d010000000000010000000005000100140000000c000500010000000c000000300000001800010600000000000000002d010000000000010000000005000100150000000c000500010000000c000000"], 0xc0}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000480)={&(0x7f0000000000), 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000001800010600000000000000002d010000000000010000000005000100160000000c000500010000000c000000300000001800010600000000000000002d010000000000010000000005000100170000000c000500010000000c000000300000001800010600000000000000002d010000000000010000000005000100180000000c000500010000000c000000300000001800010600000000000000002d010000000000010000000005000100190000000c000500010000000c000000"], 0xc0}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000005c0)={&(0x7f0000000000), 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="300000001800010600000000000000002d0100000000000100000000050001001a0000000c000500010000000c000000300000001800010600000000000000002d0100000000000100000000050001001b0000000c000500010000000c000000300000001800010600000000000000002d0100000000000100000000050001001c0000000c000500010000000c000000300000001800010600000000000000002d0100000000000100000000050001001d0000000c000500010000000c000000"], 0xc0}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000700)={&(0x7f0000000000), 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="300000001800010600000000000000002d0100000000000100000000050001001e0000000c000500010000000c000000300000001800010600000000000000002d0100000000000100000000050001001f0000000c000500010000000c000000300000001800010600000000000000002d010000000000010000000005000100200000000c000500010000000c000000300000001800010600000000000000002d010000000000010000000005000100210000000c000500010000000c000000"], 0xc0}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000000), 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="300000001800010600000000000000002d010000000000010000000005000100220000000c000500010000000c000000300000001800010600000000000000002d010000000000010000000005000100230000000c000500010000000c000000300000001800010600000000000000002d010000000000010000000005000100240000000c000500010000000c000000300000001800010600000000000000002d010000000000010000000005000100250000000c000500010000000c000000"], 0xc0}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000980)={&(0x7f0000000000), 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="300000001800010600000000000000002d010000000000010000000005000100260000000c000500010000000c000000300000001800010600000000000000002d010000000000010000000005000100270000000c000500010000000c000000300000001800010600000000000000002d010000000000010000000005000100280000000c000500010000000c000000300000001800010600000000000000002d010000000000010000000005000100290000000c000500010000000c000000"], 0xc0}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000ac0)={&(0x7f0000000000), 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="300000001800010600000000000000002d0100000000000100000000050001002a0000000c000500010000000c000000300000001800010600000000000000002d0100000000000100000000050001002b0000000c000500010000000c000000300000001800010600000000000000002d0100000000000100000000050001002c0000000c000500010000000c000000300000001800010600000000000000002d0100000000000100000000050001002d0000000c000500010000000c000000"], 0xc0}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000c00)={&(0x7f0000000000), 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=ANY=[@ANYBLOB="300000001800010600000000000000002d0100000000000100000000050001002e0000000c000500010000000c000000300000001800010600000000000000002d0100000000000100000000050001002f0000000c000500010000000c000000300000001800010600000000000000002d010000000000010000000005000100300000000c000500010000000c000000300000001800010600000000000000002d010000000000010000000005000100310000000c000500010000000c000000"], 0xc0}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000e80)={&(0x7f0000000000), 0x0, &(0x7f0000000ec0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800010600000000000000002d010000000000010000000005000100360000000c000500010000000c000000300000001800010600000000000000002d010000000000010000000005000100370000000c000500010000000c000000300000001800010600000000000000002d010000000000010000000005000100380000000c000500010000000c000000300000001800010600000000000000002d010000000000010000000005000100390000000c000500010000000c000000"], 0xc0}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000fc0)={&(0x7f0000000000), 0x0, &(0x7f0000001000)={&(0x7f0000001040)=ANY=[@ANYBLOB="300000001800010600000000000000002d0100000000000100000000050001003a0000000c000500010000000c000000300000001800010600000000000000002d0100000000000100000000050001003b0000000c000500010000000c000000300000001800010600000000000000002d0100000000000100000000050001003c0000000c000500010000000c000000300000001800010600000000000000002d0100000000000100000000050001003d0000000c000500010000000c000000"], 0xc0}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000002000)={&(0x7f0000000000), 0x0, &(0x7f0000002040)={&(0x7f0000002080)=ANY=[@ANYBLOB="1c0000001a00010301000000000000002d00"/28], 0x1c}}, 0x0)

331.646377ms ago: executing program 9 (id=1135):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={&(0x7f0000000140), 0x10, &(0x7f0000000180)={&(0x7f00000001c0)=@newtclass={0x50, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1, 0x1}, {0x0, 0x1}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x18, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x1}, @TCA_QFQ_LMAX={0x8, 0x2, 0x5dc}]}}]}, 0x50}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000240), 0x10, &(0x7f0000000280)={&(0x7f00000002c0)=@newtclass={0x50, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1, 0x2}, {0x0, 0x1}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x18, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x32}, @TCA_QFQ_LMAX={0x8, 0x2, 0x5dc}]}}]}, 0x50}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={&(0x7f0000000340), 0x10, &(0x7f0000000380)={&(0x7f00000003c0)=@newtclass={0x50, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1, 0x3}, {0x0, 0x1}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x18, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x64}, @TCA_QFQ_LMAX={0x8, 0x2, 0x5dc}]}}]}, 0x50}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000400)={&(0x7f0000000440), 0x10, &(0x7f0000000480)={&(0x7f00000004c0)=@deltclass={0x40, 0x29, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1, 0x1}, {0x0, 0x1}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x8}}]}, 0x40}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000500)={&(0x7f0000000540), 0x10, &(0x7f0000000580)={&(0x7f00000005c0)=@delqdisc={0x34, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x34}}, 0x0)

202.432679ms ago: executing program 9 (id=1136):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/net/sctp/addip_enable\x00', 0x1, 0x0)
write(r0, &(0x7f00000000c0)='1', 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/addip_noauth_enable\x00', 0x1, 0x0)
write(r1, &(0x7f0000000140)='1', 0x1)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e23, @loopback}, 0x10)
listen(r2, 0x5)
bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e24, @loopback}, 0x10)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}], 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4e23, @loopback}, 0x10)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}], 0x10)

0s ago: executing program 9 (id=1137):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/net/sctp/addip_enable\x00', 0x1, 0x0)
write(r0, &(0x7f00000000c0)='1', 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/addip_noauth_enable\x00', 0x1, 0x0)
write(r1, &(0x7f0000000140)='1', 0x1)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e23, @loopback}, 0x10)
listen(r2, 0x5)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e24, @loopback}, 0x10)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}], 0x10)
r4 = accept(r2, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}}}, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}], 0x10)
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @loopback}}}, 0x84)
close(r4)

kernel console output (not intermixed with test programs):

con+0xb2/0x2b0
[  266.863438][    C0]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  266.863461][    C0]  __hrtimer_run_queues+0x3eb/0xaf0
[  266.863507][    C0]  hrtimer_run_softirq+0x18f/0x260
[  266.863542][    C0]  handle_softirqs+0x1d9/0x6c0
[  266.863576][    C0]  run_ktimerd+0x69/0x100
[  266.863602][    C0]  smpboot_thread_fn+0x57c/0xa80
[  266.863631][    C0]  ? smpboot_thread_fn+0x4e/0xa80
[  266.863665][    C0]  kthread+0x388/0x470
[  266.863694][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  266.863718][    C0]  ? __pfx_kthread+0x10/0x10
[  266.863748][    C0]  ret_from_fork+0x514/0xb70
[  266.863781][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  266.863811][    C0]  ? __switch_to+0xc89/0x1420
[  266.863840][    C0]  ? __pfx_kthread+0x10/0x10
[  266.863870][    C0]  ret_from_fork_asm+0x1a/0x30
[  266.863910][    C0]  </TASK>
[  266.863921][    C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  266.863943][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  266.863940][    C0] FAULT_INJECTION: forcing a failure.
[  266.863940][    C0] name failslab, interval 1, probability 100, space 0, times 33
[  266.863955][    C1] Call Trace:
[  266.863963][    C1]  <TASK>
[  266.863970][    C1]  dump_stack_lvl+0xe8/0x150
[  266.863999][    C1]  should_fail_ex+0x467/0x600
[  266.864034][    C1]  should_failslab+0xa8/0x100
[  266.864058][    C1]  kmem_cache_alloc_node_noprof+0xae/0x670
[  266.864079][    C1]  ? __alloc_skb+0x1d7/0x7a0
[  266.864097][    C1]  ? __alloc_skb+0x1d7/0x7a0
[  266.864124][    C1]  __alloc_skb+0x1d7/0x7a0
[  266.864148][    C1]  __netdev_alloc_skb+0xc0/0x4b0
[  266.864174][    C1]  __ieee80211_beacon_get+0xc97/0x1820
[  266.864201][    C1]  ? __lock_acquire+0x683/0x2ce0
[  266.864221][    C1]  ? __ieee80211_beacon_get+0x34/0x1820
[  266.864246][    C1]  ieee80211_beacon_get_tim+0xbd/0x2c0
[  266.864272][    C1]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  266.864296][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  266.864333][    C1]  mac80211_hwsim_beacon_tx+0x378/0x820
[  266.864378][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  266.864409][    C1]  __iterate_interfaces+0x2af/0x5a0
[  266.864429][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  266.864455][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  266.864477][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  266.864502][    C1]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  266.864528][    C1]  mac80211_hwsim_beacon+0xb2/0x2b0
[  266.864548][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  266.864571][    C1]  __hrtimer_run_queues+0x3eb/0xaf0
[  266.864618][    C1]  hrtimer_run_softirq+0x18f/0x260
[  266.864652][    C1]  handle_softirqs+0x1d9/0x6c0
[  266.864686][    C1]  run_ktimerd+0x69/0x100
[  266.864712][    C1]  smpboot_thread_fn+0x57c/0xa80
[  266.864740][    C1]  ? smpboot_thread_fn+0x4e/0xa80
[  266.864775][    C1]  kthread+0x388/0x470
[  266.864804][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  266.864828][    C1]  ? __pfx_kthread+0x10/0x10
[  266.864858][    C1]  ret_from_fork+0x514/0xb70
[  266.864891][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  266.864921][    C1]  ? __switch_to+0xc89/0x1420
[  266.864950][    C1]  ? __pfx_kthread+0x10/0x10
[  266.864980][    C1]  ret_from_fork_asm+0x1a/0x30
[  266.865015][    C1]  </TASK>
[  266.865026][    C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  266.865049][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  266.865045][    C1] FAULT_INJECTION: forcing a failure.
[  266.865045][    C1] name failslab, interval 1, probability 100, space 0, times 32
[  266.865061][    C0] Call Trace:
[  266.865069][    C0]  <TASK>
[  266.865076][    C0]  dump_stack_lvl+0xe8/0x150
[  266.865106][    C0]  should_fail_ex+0x467/0x600
[  266.865140][    C0]  should_failslab+0xa8/0x100
[  266.865165][    C0]  kmem_cache_alloc_node_noprof+0xae/0x670
[  266.865186][    C0]  ? __alloc_skb+0x1d7/0x7a0
[  266.865204][    C0]  ? __alloc_skb+0x1d7/0x7a0
[  266.865230][    C0]  __alloc_skb+0x1d7/0x7a0
[  266.865255][    C0]  __netdev_alloc_skb+0xc0/0x4b0
[  266.865280][    C0]  __ieee80211_beacon_get+0xc97/0x1820
[  266.865307][    C0]  ? __lock_acquire+0x683/0x2ce0
[  266.865327][    C0]  ? __ieee80211_beacon_get+0x34/0x1820
[  266.865352][    C0]  ieee80211_beacon_get_tim+0xbd/0x2c0
[  266.865379][    C0]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  266.865403][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  266.865441][    C0]  mac80211_hwsim_beacon_tx+0x378/0x820
[  266.865467][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  266.865493][    C0]  __iterate_interfaces+0x2af/0x5a0
[  266.865513][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  266.865539][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  266.865561][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  266.865587][    C0]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  266.865611][    C0]  mac80211_hwsim_beacon+0xb2/0x2b0
[  266.865632][    C0]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  266.865654][    C0]  __hrtimer_run_queues+0x3eb/0xaf0
[  266.865701][    C0]  hrtimer_run_softirq+0x18f/0x260
[  266.865734][    C0]  handle_softirqs+0x1d9/0x6c0
[  266.865768][    C0]  run_ktimerd+0x69/0x100
[  266.865795][    C0]  smpboot_thread_fn+0x57c/0xa80
[  266.865823][    C0]  ? smpboot_thread_fn+0x4e/0xa80
[  266.865858][    C0]  kthread+0x388/0x470
[  266.865886][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  266.865916][    C0]  ? __pfx_kthread+0x10/0x10
[  266.865946][    C0]  ret_from_fork+0x514/0xb70
[  266.865978][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  266.866008][    C0]  ? __switch_to+0xc89/0x1420
[  266.866037][    C0]  ? __pfx_kthread+0x10/0x10
[  266.866067][    C0]  ret_from_fork_asm+0x1a/0x30
[  266.866102][    C0]  </TASK>
[  266.866113][    C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  266.866135][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  266.866132][    C0] FAULT_INJECTION: forcing a failure.
[  266.866132][    C0] name failslab, interval 1, probability 100, space 0, times 31
[  266.866147][    C1] Call Trace:
[  266.866154][    C1]  <TASK>
[  266.866161][    C1]  dump_stack_lvl+0xe8/0x150
[  266.866191][    C1]  should_fail_ex+0x467/0x600
[  266.866224][    C1]  should_failslab+0xa8/0x100
[  266.866248][    C1]  kmem_cache_alloc_node_noprof+0xae/0x670
[  266.866269][    C1]  ? __alloc_skb+0x1d7/0x7a0
[  266.866287][    C1]  ? __alloc_skb+0x1d7/0x7a0
[  266.866313][    C1]  __alloc_skb+0x1d7/0x7a0
[  266.866338][    C1]  __netdev_alloc_skb+0xc0/0x4b0
[  266.866363][    C1]  __ieee80211_beacon_get+0xc97/0x1820
[  266.866390][    C1]  ? __lock_acquire+0x683/0x2ce0
[  266.866415][    C1]  ? __ieee80211_beacon_get+0x34/0x1820
[  266.866440][    C1]  ieee80211_beacon_get_tim+0xbd/0x2c0
[  266.866466][    C1]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  266.866491][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  266.866527][    C1]  mac80211_hwsim_beacon_tx+0x378/0x820
[  266.866554][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  266.866579][    C1]  __iterate_interfaces+0x2af/0x5a0
[  266.866599][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  266.866625][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  266.866646][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  266.866672][    C1]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  266.866696][    C1]  mac80211_hwsim_beacon+0xb2/0x2b0
[  266.866716][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  266.866739][    C1]  __hrtimer_run_queues+0x3eb/0xaf0
[  266.866785][    C1]  hrtimer_run_softirq+0x18f/0x260
[  266.866819][    C1]  handle_softirqs+0x1d9/0x6c0
[  266.866852][    C1]  run_ktimerd+0x69/0x100
[  266.866878][    C1]  smpboot_thread_fn+0x57c/0xa80
[  266.866908][    C1]  ? smpboot_thread_fn+0x4e/0xa80
[  266.866942][    C1]  kthread+0x388/0x470
[  266.866971][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  266.866996][    C1]  ? __pfx_kthread+0x10/0x10
[  266.867026][    C1]  ret_from_fork+0x514/0xb70
[  266.867058][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  266.867087][    C1]  ? __switch_to+0xc89/0x1420
[  266.867115][    C1]  ? __pfx_kthread+0x10/0x10
[  266.867145][    C1]  ret_from_fork_asm+0x1a/0x30
[  266.867180][    C1]  </TASK>
[  266.867191][    C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  266.867213][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  266.867209][    C1] FAULT_INJECTION: forcing a failure.
[  266.867209][    C1] name failslab, interval 1, probability 100, space 0, times 30
[  266.867225][    C0] Call Trace:
[  266.867234][    C0]  <TASK>
[  266.867240][    C0]  dump_stack_lvl+0xe8/0x150
[  266.867270][    C0]  should_fail_ex+0x467/0x600
[  266.867303][    C0]  should_failslab+0xa8/0x100
[  266.867327][    C0]  kmem_cache_alloc_node_noprof+0xae/0x670
[  266.867349][    C0]  ? __alloc_skb+0x1d7/0x7a0
[  266.867367][    C0]  ? __alloc_skb+0x1d7/0x7a0
[  266.867393][    C0]  __alloc_skb+0x1d7/0x7a0
[  266.867419][    C0]  __netdev_alloc_skb+0xc0/0x4b0
[  266.867445][    C0]  __ieee80211_beacon_get+0xc97/0x1820
[  266.867471][    C0]  ? __lock_acquire+0x683/0x2ce0
[  266.867491][    C0]  ? __ieee80211_beacon_get+0x34/0x1820
[  266.867516][    C0]  ieee80211_beacon_get_tim+0xbd/0x2c0
[  266.867542][    C0]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  266.867566][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  266.867603][    C0]  mac80211_hwsim_beacon_tx+0x378/0x820
[  266.867629][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  266.867655][    C0]  __iterate_interfaces+0x2af/0x5a0
[  266.867675][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  266.867704][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  266.867727][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  266.867753][    C0]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  266.867778][    C0]  mac80211_hwsim_beacon+0xb2/0x2b0
[  266.867798][    C0]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  266.867821][    C0]  __hrtimer_run_queues+0x3eb/0xaf0
[  266.867868][    C0]  hrtimer_run_softirq+0x18f/0x260
[  266.867908][    C0]  handle_softirqs+0x1d9/0x6c0
[  266.867942][    C0]  run_ktimerd+0x69/0x100
[  266.867968][    C0]  smpboot_thread_fn+0x57c/0xa80
[  266.867996][    C0]  ? smpboot_thread_fn+0x4e/0xa80
[  266.868030][    C0]  kthread+0x388/0x470
[  266.868058][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  266.868082][    C0]  ? __pfx_kthread+0x10/0x10
[  266.868113][    C0]  ret_from_fork+0x514/0xb70
[  266.868145][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  266.868175][    C0]  ? __switch_to+0xc89/0x1420
[  266.868203][    C0]  ? __pfx_kthread+0x10/0x10
[  266.868233][    C0]  ret_from_fork_asm+0x1a/0x30
[  266.868268][    C0]  </TASK>
[  266.868279][    C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  266.868302][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  266.868312][    C1] Call Trace:
[  266.868320][    C1]  <TASK>
[  266.868318][    C0] FAULT_INJECTION: forcing a failure.
[  266.868318][    C0] name failslab, interval 1, probability 100, space 0, times 29
[  266.868328][    C1]  dump_stack_lvl+0xe8/0x150
[  266.868360][    C1]  should_fail_ex+0x467/0x600
[  266.868393][    C1]  should_failslab+0xa8/0x100
[  266.868423][    C1]  kmem_cache_alloc_node_noprof+0xae/0x670
[  266.868443][    C1]  ? __alloc_skb+0x1d7/0x7a0
[  266.868461][    C1]  ? __alloc_skb+0x1d7/0x7a0
[  266.868487][    C1]  __alloc_skb+0x1d7/0x7a0
[  266.868512][    C1]  __netdev_alloc_skb+0xc0/0x4b0
[  266.868537][    C1]  __ieee80211_beacon_get+0xc97/0x1820
[  266.868564][    C1]  ? __lock_acquire+0x683/0x2ce0
[  266.868584][    C1]  ? __ieee80211_beacon_get+0x34/0x1820
[  266.868608][    C1]  ieee80211_beacon_get_tim+0xbd/0x2c0
[  266.868635][    C1]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  266.868659][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  266.868695][    C1]  mac80211_hwsim_beacon_tx+0x378/0x820
[  266.868722][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  266.868747][    C1]  __iterate_interfaces+0x2af/0x5a0
[  266.868766][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  266.868792][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  266.868814][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  266.868839][    C1]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  266.868863][    C1]  mac80211_hwsim_beacon+0xb2/0x2b0
[  266.868884][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  266.868907][    C1]  __hrtimer_run_queues+0x3eb/0xaf0
[  266.868954][    C1]  hrtimer_run_softirq+0x18f/0x260
[  266.868987][    C1]  handle_softirqs+0x1d9/0x6c0
[  266.869021][    C1]  run_ktimerd+0x69/0x100
[  266.869047][    C1]  smpboot_thread_fn+0x57c/0xa80
[  266.869075][    C1]  ? smpboot_thread_fn+0x4e/0xa80
[  266.869109][    C1]  kthread+0x388/0x470
[  266.869138][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  266.869162][    C1]  ? __pfx_kthread+0x10/0x10
[  266.869193][    C1]  ret_from_fork+0x514/0xb70
[  266.869225][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  266.869254][    C1]  ? __switch_to+0xc89/0x1420
[  266.869283][    C1]  ? __pfx_kthread+0x10/0x10
[  266.869313][    C1]  ret_from_fork_asm+0x1a/0x30
[  266.869349][    C1]  </TASK>
[  266.869359][    C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  266.869377][    C1] FAULT_INJECTION: forcing a failure.
[  266.869377][    C1] name failslab, interval 1, probability 100, space 0, times 28
[  266.869382][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  266.869395][    C0] Call Trace:
[  266.869401][    C0]  <TASK>
[  266.869410][    C0]  dump_stack_lvl+0xe8/0x150
[  266.869440][    C0]  should_fail_ex+0x467/0x600
[  266.869474][    C0]  should_failslab+0xa8/0x100
[  266.869498][    C0]  kmem_cache_alloc_node_noprof+0xae/0x670
[  266.869519][    C0]  ? __alloc_skb+0x1d7/0x7a0
[  266.869537][    C0]  ? __alloc_skb+0x1d7/0x7a0
[  266.869564][    C0]  __alloc_skb+0x1d7/0x7a0
[  266.869589][    C0]  __netdev_alloc_skb+0xc0/0x4b0
[  266.869614][    C0]  __ieee80211_beacon_get+0xc97/0x1820
[  266.869642][    C0]  ? __lock_acquire+0x683/0x2ce0
[  266.869662][    C0]  ? __ieee80211_beacon_get+0x34/0x1820
[  266.869686][    C0]  ieee80211_beacon_get_tim+0xbd/0x2c0
[  266.869713][    C0]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  266.869737][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  266.869774][    C0]  mac80211_hwsim_beacon_tx+0x378/0x820
[  266.869801][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  266.869826][    C0]  __iterate_interfaces+0x2af/0x5a0
[  266.869846][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  266.869872][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  266.869894][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  266.869926][    C0]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  266.869951][    C0]  mac80211_hwsim_beacon+0xb2/0x2b0
[  266.869971][    C0]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  266.869994][    C0]  __hrtimer_run_queues+0x3eb/0xaf0
[  266.870041][    C0]  hrtimer_run_softirq+0x18f/0x260
[  266.870075][    C0]  handle_softirqs+0x1d9/0x6c0
[  266.870109][    C0]  run_ktimerd+0x69/0x100
[  266.870135][    C0]  smpboot_thread_fn+0x57c/0xa80
[  266.870164][    C0]  ? smpboot_thread_fn+0x4e/0xa80
[  266.870198][    C0]  kthread+0x388/0x470
[  266.870227][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  266.870251][    C0]  ? __pfx_kthread+0x10/0x10
[  266.870281][    C0]  ret_from_fork+0x514/0xb70
[  266.870314][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  266.870344][    C0]  ? __switch_to+0xc89/0x1420
[  266.870373][    C0]  ? __pfx_kthread+0x10/0x10
[  266.870404][    C0]  ret_from_fork_asm+0x1a/0x30
[  266.870440][    C0]  </TASK>
[  266.870450][    C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  266.870468][    C0] FAULT_INJECTION: forcing a failure.
[  266.870468][    C0] name failslab, interval 1, probability 100, space 0, times 27
[  266.870474][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  266.870486][    C1] Call Trace:
[  266.870493][    C1]  <TASK>
[  266.870500][    C1]  dump_stack_lvl+0xe8/0x150
[  266.870530][    C1]  should_fail_ex+0x467/0x600
[  266.870564][    C1]  should_failslab+0xa8/0x100
[  266.870588][    C1]  kmem_cache_alloc_node_noprof+0xae/0x670
[  266.870610][    C1]  ? __alloc_skb+0x1d7/0x7a0
[  266.870628][    C1]  ? __alloc_skb+0x1d7/0x7a0
[  266.870654][    C1]  __alloc_skb+0x1d7/0x7a0
[  266.870679][    C1]  __netdev_alloc_skb+0xc0/0x4b0
[  266.870704][    C1]  __ieee80211_beacon_get+0xc97/0x1820
[  266.870732][    C1]  ? __lock_acquire+0x683/0x2ce0
[  266.870752][    C1]  ? __ieee80211_beacon_get+0x34/0x1820
[  266.870776][    C1]  ieee80211_beacon_get_tim+0xbd/0x2c0
[  266.870803][    C1]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  266.870827][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  266.870864][    C1]  mac80211_hwsim_beacon_tx+0x378/0x820
[  266.870890][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  266.870916][    C1]  __iterate_interfaces+0x2af/0x5a0
[  266.870936][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  266.870962][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  266.870984][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  266.871010][    C1]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  266.871034][    C1]  mac80211_hwsim_beacon+0xb2/0x2b0
[  266.871054][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  266.871077][    C1]  __hrtimer_run_queues+0x3eb/0xaf0
[  266.871124][    C1]  hrtimer_run_softirq+0x18f/0x260
[  266.871158][    C1]  handle_softirqs+0x1d9/0x6c0
[  266.871192][    C1]  run_ktimerd+0x69/0x100
[  266.871218][    C1]  smpboot_thread_fn+0x57c/0xa80
[  266.871246][    C1]  ? smpboot_thread_fn+0x4e/0xa80
[  266.871280][    C1]  kthread+0x388/0x470
[  266.871309][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  266.871333][    C1]  ? __pfx_kthread+0x10/0x10
[  266.871363][    C1]  ret_from_fork+0x514/0xb70
[  266.871401][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  266.871431][    C1]  ? __switch_to+0xc89/0x1420
[  266.871459][    C1]  ? __pfx_kthread+0x10/0x10
[  266.871489][    C1]  ret_from_fork_asm+0x1a/0x30
[  266.871524][    C1]  </TASK>
[  266.871534][    C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  266.871552][    C1] FAULT_INJECTION: forcing a failure.
[  266.871552][    C1] name failslab, interval 1, probability 100, space 0, times 26
[  266.871557][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  266.871570][    C0] Call Trace:
[  266.871577][    C0]  <TASK>
[  266.871584][    C0]  dump_stack_lvl+0xe8/0x150
[  266.871613][    C0]  should_fail_ex+0x467/0x600
[  266.871647][    C0]  should_failslab+0xa8/0x100
[  266.871671][    C0]  kmem_cache_alloc_node_noprof+0xae/0x670
[  266.871692][    C0]  ? __alloc_skb+0x1d7/0x7a0
[  266.871710][    C0]  ? __alloc_skb+0x1d7/0x7a0
[  266.871737][    C0]  __alloc_skb+0x1d7/0x7a0
[  266.871762][    C0]  __netdev_alloc_skb+0xc0/0x4b0
[  266.871787][    C0]  __ieee80211_beacon_get+0xc97/0x1820
[  266.871814][    C0]  ? __lock_acquire+0x683/0x2ce0
[  266.871834][    C0]  ? __ieee80211_beacon_get+0x34/0x1820
[  266.871859][    C0]  ieee80211_beacon_get_tim+0xbd/0x2c0
[  266.871885][    C0]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  266.871916][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  266.871952][    C0]  mac80211_hwsim_beacon_tx+0x378/0x820
[  266.871979][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  266.872004][    C0]  __iterate_interfaces+0x2af/0x5a0
[  266.872024][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  266.872051][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  266.872073][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  266.872098][    C0]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  266.872122][    C0]  mac80211_hwsim_beacon+0xb2/0x2b0
[  266.872143][    C0]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  266.872166][    C0]  __hrtimer_run_queues+0x3eb/0xaf0
[  266.872212][    C0]  hrtimer_run_softirq+0x18f/0x260
[  266.872246][    C0]  handle_softirqs+0x1d9/0x6c0
[  266.872280][    C0]  run_ktimerd+0x69/0x100
[  266.872306][    C0]  smpboot_thread_fn+0x57c/0xa80
[  266.872334][    C0]  ? smpboot_thread_fn+0x4e/0xa80
[  266.872369][    C0]  kthread+0x388/0x470
[  266.872397][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  266.872422][    C0]  ? __pfx_kthread+0x10/0x10
[  266.872453][    C0]  ret_from_fork+0x514/0xb70
[  266.872485][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  266.872515][    C0]  ? __switch_to+0xc89/0x1420
[  266.872543][    C0]  ? __pfx_kthread+0x10/0x10
[  266.872573][    C0]  ret_from_fork_asm+0x1a/0x30
[  266.872609][    C0]  </TASK>
[  266.872618][    C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  266.872636][    C0] FAULT_INJECTION: forcing a failure.
[  266.872636][    C0] name failslab, interval 1, probability 100, space 0, times 25
[  266.872642][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  266.872654][    C1] Call Trace:
[  266.872661][    C1]  <TASK>
[  266.872668][    C1]  dump_stack_lvl+0xe8/0x150
[  266.872697][    C1]  should_fail_ex+0x467/0x600
[  266.872731][    C1]  should_failslab+0xa8/0x100
[  266.872755][    C1]  kmem_cache_alloc_node_noprof+0xae/0x670
[  266.872776][    C1]  ? __alloc_skb+0x1d7/0x7a0
[  266.872795][    C1]  ? __alloc_skb+0x1d7/0x7a0
[  266.872821][    C1]  __alloc_skb+0x1d7/0x7a0
[  266.872846][    C1]  __netdev_alloc_skb+0xc0/0x4b0
[  266.872871][    C1]  __ieee80211_beacon_get+0xc97/0x1820
[  266.872898][    C1]  ? __lock_acquire+0x683/0x2ce0
[  266.872918][    C1]  ? __ieee80211_beacon_get+0x34/0x1820
[  266.872943][    C1]  ieee80211_beacon_get_tim+0xbd/0x2c0
[  266.872970][    C1]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  266.872994][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  266.873030][    C1]  mac80211_hwsim_beacon_tx+0x378/0x820
[  266.873056][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  266.873082][    C1]  __iterate_interfaces+0x2af/0x5a0
[  266.873101][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  266.873127][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  266.873149][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  266.873174][    C1]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  266.873199][    C1]  mac80211_hwsim_beacon+0xb2/0x2b0
[  266.873219][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  266.873241][    C1]  __hrtimer_run_queues+0x3eb/0xaf0
[  266.873288][    C1]  hrtimer_run_softirq+0x18f/0x260
[  266.873321][    C1]  handle_softirqs+0x1d9/0x6c0
[  266.873355][    C1]  run_ktimerd+0x69/0x100
[  266.873381][    C1]  smpboot_thread_fn+0x57c/0xa80
[  266.873415][    C1]  ? smpboot_thread_fn+0x4e/0xa80
[  266.873449][    C1]  kthread+0x388/0x470
[  266.873478][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  266.873502][    C1]  ? __pfx_kthread+0x10/0x10
[  266.873532][    C1]  ret_from_fork+0x514/0xb70
[  266.873565][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  266.873594][    C1]  ? __switch_to+0xc89/0x1420
[  266.873622][    C1]  ? __pfx_kthread+0x10/0x10
[  266.873653][    C1]  ret_from_fork_asm+0x1a/0x30
[  266.873688][    C1]  </TASK>
[  266.873698][    C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  266.873720][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  266.873716][    C1] FAULT_INJECTION: forcing a failure.
[  266.873716][    C1] name failslab, interval 1, probability 100, space 0, times 24
[  266.873733][    C0] Call Trace:
[  266.873740][    C0]  <TASK>
[  266.873747][    C0]  dump_stack_lvl+0xe8/0x150
[  266.873777][    C0]  should_fail_ex+0x467/0x600
[  266.873811][    C0]  should_failslab+0xa8/0x100
[  266.873835][    C0]  kmem_cache_alloc_node_noprof+0xae/0x670
[  266.873856][    C0]  ? __alloc_skb+0x1d7/0x7a0
[  266.873874][    C0]  ? __alloc_skb+0x1d7/0x7a0
[  266.873905][    C0]  __alloc_skb+0x1d7/0x7a0
[  266.873930][    C0]  __netdev_alloc_skb+0xc0/0x4b0
[  266.873955][    C0]  __ieee80211_beacon_get+0xc97/0x1820
[  266.873982][    C0]  ? __lock_acquire+0x683/0x2ce0
[  266.874002][    C0]  ? __ieee80211_beacon_get+0x34/0x1820
[  266.874027][    C0]  ieee80211_beacon_get_tim+0xbd/0x2c0
[  266.874053][    C0]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  266.874078][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  266.874114][    C0]  mac80211_hwsim_beacon_tx+0x378/0x820
[  266.874141][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  266.874167][    C0]  __iterate_interfaces+0x2af/0x5a0
[  266.874187][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  266.874212][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  266.874234][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  266.874260][    C0]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  266.874285][    C0]  mac80211_hwsim_beacon+0xb2/0x2b0
[  266.874306][    C0]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  266.874329][    C0]  __hrtimer_run_queues+0x3eb/0xaf0
[  266.874375][    C0]  hrtimer_run_softirq+0x18f/0x260
[  266.874410][    C0]  handle_softirqs+0x1d9/0x6c0
[  266.874443][    C0]  run_ktimerd+0x69/0x100
[  266.874470][    C0]  smpboot_thread_fn+0x57c/0xa80
[  266.874498][    C0]  ? smpboot_thread_fn+0x4e/0xa80
[  266.874532][    C0]  kthread+0x388/0x470
[  266.874561][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  266.874585][    C0]  ? __pfx_kthread+0x10/0x10
[  266.874615][    C0]  ret_from_fork+0x514/0xb70
[  266.874647][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  266.874677][    C0]  ? __switch_to+0xc89/0x1420
[  266.874705][    C0]  ? __pfx_kthread+0x10/0x10
[  266.874736][    C0]  ret_from_fork_asm+0x1a/0x30
[  266.874771][    C0]  </TASK>
[  266.874781][    C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  266.874798][    C0] FAULT_INJECTION: forcing a failure.
[  266.874798][    C0] name failslab, interval 1, probability 100, space 0, times 23
[  266.874804][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  266.874816][    C1] Call Trace:
[  266.874824][    C1]  <TASK>
[  266.874830][    C1]  dump_stack_lvl+0xe8/0x150
[  266.874860][    C1]  should_fail_ex+0x467/0x600
[  266.874893][    C1]  should_failslab+0xa8/0x100
[  266.874917][    C1]  kmem_cache_alloc_node_noprof+0xae/0x670
[  266.874939][    C1]  ? __alloc_skb+0x1d7/0x7a0
[  266.874957][    C1]  ? __alloc_skb+0x1d7/0x7a0
[  266.874983][    C1]  __alloc_skb+0x1d7/0x7a0
[  266.875008][    C1]  __netdev_alloc_skb+0xc0/0x4b0
[  266.875034][    C1]  __ieee80211_beacon_get+0xc97/0x1820
[  266.875061][    C1]  ? __lock_acquire+0x683/0x2ce0
[  266.875080][    C1]  ? __ieee80211_beacon_get+0x34/0x1820
[  266.875105][    C1]  ieee80211_beacon_get_tim+0xbd/0x2c0
[  266.875131][    C1]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  266.875155][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  266.875192][    C1]  mac80211_hwsim_beacon_tx+0x378/0x820
[  266.875218][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  266.875243][    C1]  __iterate_interfaces+0x2af/0x5a0
[  266.875263][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  266.875289][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  266.875311][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  266.875336][    C1]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  266.875361][    C1]  mac80211_hwsim_beacon+0xb2/0x2b0
[  266.875381][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  266.875409][    C1]  __hrtimer_run_queues+0x3eb/0xaf0
[  266.875456][    C1]  hrtimer_run_softirq+0x18f/0x260
[  266.875489][    C1]  handle_softirqs+0x1d9/0x6c0
[  266.875523][    C1]  run_ktimerd+0x69/0x100
[  266.875549][    C1]  smpboot_thread_fn+0x57c/0xa80
[  266.875578][    C1]  ? smpboot_thread_fn+0x4e/0xa80
[  266.875613][    C1]  kthread+0x388/0x470
[  266.875641][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  266.875666][    C1]  ? __pfx_kthread+0x10/0x10
[  266.875696][    C1]  ret_from_fork+0x514/0xb70
[  266.875728][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  266.875758][    C1]  ? __switch_to+0xc89/0x1420
[  266.875786][    C1]  ? __pfx_kthread+0x10/0x10
[  266.875816][    C1]  ret_from_fork_asm+0x1a/0x30
[  266.875852][    C1]  </TASK>
[  266.875862][    C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  266.875880][    C1] FAULT_INJECTION: forcing a failure.
[  266.875880][    C1] name failslab, interval 1, probability 100, space 0, times 22
[  266.875885][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  266.875904][    C0] Call Trace:
[  266.875910][    C0]  <TASK>
[  266.875917][    C0]  dump_stack_lvl+0xe8/0x150
[  266.875947][    C0]  should_fail_ex+0x467/0x600
[  266.875980][    C0]  should_failslab+0xa8/0x100
[  266.876004][    C0]  kmem_cache_alloc_node_noprof+0xae/0x670
[  266.876026][    C0]  ? __alloc_skb+0x1d7/0x7a0
[  266.876044][    C0]  ? __alloc_skb+0x1d7/0x7a0
[  266.876070][    C0]  __alloc_skb+0x1d7/0x7a0
[  266.876095][    C0]  __netdev_alloc_skb+0xc0/0x4b0
[  266.876121][    C0]  __ieee80211_beacon_get+0xc97/0x1820
[  266.876148][    C0]  ? __lock_acquire+0x683/0x2ce0
[  266.876168][    C0]  ? __ieee80211_beacon_get+0x34/0x1820
[  266.876193][    C0]  ieee80211_beacon_get_tim+0xbd/0x2c0
[  266.876219][    C0]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  266.876243][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  266.876280][    C0]  mac80211_hwsim_beacon_tx+0x378/0x820
[  266.876307][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  266.876332][    C0]  __iterate_interfaces+0x2af/0x5a0
[  266.876352][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  266.876378][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  266.876401][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  266.876427][    C0]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  266.876451][    C0]  mac80211_hwsim_beacon+0xb2/0x2b0
[  266.876472][    C0]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  266.876494][    C0]  __hrtimer_run_queues+0x3eb/0xaf0
[  266.876541][    C0]  hrtimer_run_softirq+0x18f/0x260
[  266.876575][    C0]  handle_softirqs+0x1d9/0x6c0
[  266.876609][    C0]  run_ktimerd+0x69/0x100
[  266.876635][    C0]  smpboot_thread_fn+0x57c/0xa80
[  266.876663][    C0]  ? smpboot_thread_fn+0x4e/0xa80
[  266.876697][    C0]  kthread+0x388/0x470
[  266.876726][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  266.876750][    C0]  ? __pfx_kthread+0x10/0x10
[  266.876780][    C0]  ret_from_fork+0x514/0xb70
[  266.876812][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  266.876842][    C0]  ? __switch_to+0xc89/0x1420
[  266.876870][    C0]  ? __pfx_kthread+0x10/0x10
[  266.876906][    C0]  ret_from_fork_asm+0x1a/0x30
[  266.876941][    C0]  </TASK>
[  266.876952][    C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  266.876969][    C0] FAULT_INJECTION: forcing a failure.
[  266.876969][    C0] name failslab, interval 1, probability 100, space 0, times 21
[  266.876975][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  266.876986][    C1] Call Trace:
[  266.876994][    C1]  <TASK>
[  266.877001][    C1]  dump_stack_lvl+0xe8/0x150
[  266.877030][    C1]  should_fail_ex+0x467/0x600
[  266.877064][    C1]  should_failslab+0xa8/0x100
[  266.877088][    C1]  kmem_cache_alloc_node_noprof+0xae/0x670
[  266.877109][    C1]  ? __alloc_skb+0x1d7/0x7a0
[  266.877127][    C1]  ? __alloc_skb+0x1d7/0x7a0
[  266.877154][    C1]  __alloc_skb+0x1d7/0x7a0
[  266.877178][    C1]  __netdev_alloc_skb+0xc0/0x4b0
[  266.877204][    C1]  __ieee80211_beacon_get+0xc97/0x1820
[  266.877231][    C1]  ? __lock_acquire+0x683/0x2ce0
[  266.877251][    C1]  ? __ieee80211_beacon_get+0x34/0x1820
[  266.877275][    C1]  ieee80211_beacon_get_tim+0xbd/0x2c0
[  266.877301][    C1]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  266.877325][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  266.877363][    C1]  mac80211_hwsim_beacon_tx+0x378/0x820
[  266.877389][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  266.877423][    C1]  __iterate_interfaces+0x2af/0x5a0
[  266.877443][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  266.877468][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  266.877490][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  266.877515][    C1]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  266.877540][    C1]  mac80211_hwsim_beacon+0xb2/0x2b0
[  266.877560][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  266.877583][    C1]  __hrtimer_run_queues+0x3eb/0xaf0
[  266.877629][    C1]  hrtimer_run_softirq+0x18f/0x260
[  266.877663][    C1]  handle_softirqs+0x1d9/0x6c0
[  266.877697][    C1]  run_ktimerd+0x69/0x100
[  266.877727][    C1]  smpboot_thread_fn+0x57c/0xa80
[  266.877756][    C1]  ? smpboot_thread_fn+0x4e/0xa80
[  266.877791][    C1]  kthread+0x388/0x470
[  266.877819][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  266.877843][    C1]  ? __pfx_kthread+0x10/0x10
[  266.877873][    C1]  ret_from_fork+0x514/0xb70
[  266.877907][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  266.877936][    C1]  ? __switch_to+0xc89/0x1420
[  266.877964][    C1]  ? __pfx_kthread+0x10/0x10
[  266.877994][    C1]  ret_from_fork_asm+0x1a/0x30
[  266.878029][    C1]  </TASK>
[  266.878040][    C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  266.878063][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  266.878075][    C0] Call Trace:
[  266.878082][    C0]  <TASK>
[  266.878084][    C1] FAULT_INJECTION: forcing a failure.
[  266.878084][    C1] name failslab, interval 1, probability 100, space 0, times 20
[  266.878090][    C0]  dump_stack_lvl+0xe8/0x150
[  266.878122][    C0]  should_fail_ex+0x467/0x600
[  266.878156][    C0]  should_failslab+0xa8/0x100
[  266.878179][    C0]  kmem_cache_alloc_node_noprof+0xae/0x670
[  266.878200][    C0]  ? __alloc_skb+0x1d7/0x7a0
[  266.878218][    C0]  ? __alloc_skb+0x1d7/0x7a0
[  266.878245][    C0]  __alloc_skb+0x1d7/0x7a0
[  266.878269][    C0]  __netdev_alloc_skb+0xc0/0x4b0
[  266.878295][    C0]  __ieee80211_beacon_get+0xc97/0x1820
[  266.878323][    C0]  ? __lock_acquire+0x683/0x2ce0
[  266.878343][    C0]  ? __ieee80211_beacon_get+0x34/0x1820
[  266.878367][    C0]  ieee80211_beacon_get_tim+0xbd/0x2c0
[  266.878394][    C0]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  266.878419][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  266.878455][    C0]  mac80211_hwsim_beacon_tx+0x378/0x820
[  266.878482][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  266.878507][    C0]  __iterate_interfaces+0x2af/0x5a0
[  266.878527][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  266.878553][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  266.878576][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  266.878601][    C0]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  266.878626][    C0]  mac80211_hwsim_beacon+0xb2/0x2b0
[  266.878647][    C0]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  266.878669][    C0]  __hrtimer_run_queues+0x3eb/0xaf0
[  266.878716][    C0]  hrtimer_run_softirq+0x18f/0x260
[  266.878750][    C0]  handle_softirqs+0x1d9/0x6c0
[  266.878783][    C0]  run_ktimerd+0x69/0x100
[  266.878810][    C0]  smpboot_thread_fn+0x57c/0xa80
[  266.878838][    C0]  ? smpboot_thread_fn+0x4e/0xa80
[  266.878872][    C0]  kthread+0x388/0x470
[  266.878908][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  266.878933][    C0]  ? __pfx_kthread+0x10/0x10
[  266.878963][    C0]  ret_from_fork+0x514/0xb70
[  266.878996][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  266.879025][    C0]  ? __switch_to+0xc89/0x1420
[  266.879054][    C0]  ? __pfx_kthread+0x10/0x10
[  266.879084][    C0]  ret_from_fork_asm+0x1a/0x30
[  266.879119][    C0]  </TASK>
[  266.879130][    C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  266.879148][    C0] FAULT_INJECTION: forcing a failure.
[  266.879148][    C0] name failslab, interval 1, probability 100, space 0, times 19
[  266.879153][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  266.879165][    C1] Call Trace:
[  266.879172][    C1]  <TASK>
[  266.879180][    C1]  dump_stack_lvl+0xe8/0x150
[  266.879210][    C1]  should_fail_ex+0x467/0x600
[  266.879244][    C1]  should_failslab+0xa8/0x100
[  266.879268][    C1]  kmem_cache_alloc_node_noprof+0xae/0x670
[  266.879289][    C1]  ? __alloc_skb+0x1d7/0x7a0
[  266.879307][    C1]  ? __alloc_skb+0x1d7/0x7a0
[  266.879334][    C1]  __alloc_skb+0x1d7/0x7a0
[  266.879358][    C1]  __netdev_alloc_skb+0xc0/0x4b0
[  266.879384][    C1]  __ieee80211_beacon_get+0xc97/0x1820
[  266.879417][    C1]  ? __lock_acquire+0x683/0x2ce0
[  266.879436][    C1]  ? __ieee80211_beacon_get+0x34/0x1820
[  266.879461][    C1]  ieee80211_beacon_get_tim+0xbd/0x2c0
[  266.879487][    C1]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  266.879512][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  266.879548][    C1]  mac80211_hwsim_beacon_tx+0x378/0x820
[  266.879575][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  266.879600][    C1]  __iterate_interfaces+0x2af/0x5a0
[  266.879620][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  266.879645][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  266.879667][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  266.879692][    C1]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  266.879717][    C1]  mac80211_hwsim_beacon+0xb2/0x2b0
[  266.879737][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  266.879760][    C1]  __hrtimer_run_queues+0x3eb/0xaf0
[  266.879808][    C1]  hrtimer_run_softirq+0x18f/0x260
[  266.879842][    C1]  handle_softirqs+0x1d9/0x6c0
[  266.879876][    C1]  run_ktimerd+0x69/0x100
[  266.879902][    C1]  smpboot_thread_fn+0x57c/0xa80
[  266.879931][    C1]  ? smpboot_thread_fn+0x4e/0xa80
[  266.879965][    C1]  kthread+0x388/0x470
[  266.879993][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  266.880018][    C1]  ? __pfx_kthread+0x10/0x10
[  266.880048][    C1]  ret_from_fork+0x514/0xb70
[  266.880080][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  266.880109][    C1]  ? __switch_to+0xc89/0x1420
[  266.880138][    C1]  ? __pfx_kthread+0x10/0x10
[  266.880169][    C1]  ret_from_fork_asm+0x1a/0x30
[  266.880204][    C1]  </TASK>
[  266.880214][    C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  266.880232][    C1] FAULT_INJECTION: forcing a failure.
[  266.880232][    C1] name failslab, interval 1, probability 100, space 0, times 18
[  266.880237][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  266.880251][    C0] Call Trace:
[  266.880258][    C0]  <TASK>
[  266.880265][    C0]  dump_stack_lvl+0xe8/0x150
[  266.880295][    C0]  should_fail_ex+0x467/0x600
[  266.880329][    C0]  should_failslab+0xa8/0x100
[  266.880353][    C0]  kmem_cache_alloc_node_noprof+0xae/0x670
[  266.880375][    C0]  ? __alloc_skb+0x1d7/0x7a0
[  266.880393][    C0]  ? __alloc_skb+0x1d7/0x7a0
[  266.880421][    C0]  __alloc_skb+0x1d7/0x7a0
[  266.880446][    C0]  __netdev_alloc_skb+0xc0/0x4b0
[  266.880471][    C0]  __ieee80211_beacon_get+0xc97/0x1820
[  266.880498][    C0]  ? __lock_acquire+0x683/0x2ce0
[  266.880518][    C0]  ? __ieee80211_beacon_get+0x34/0x1820
[  266.880543][    C0]  ieee80211_beacon_get_tim+0xbd/0x2c0
[  266.880569][    C0]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  266.880593][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  266.880629][    C0]  mac80211_hwsim_beacon_tx+0x378/0x820
[  266.880656][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  266.880681][    C0]  __iterate_interfaces+0x2af/0x5a0
[  266.880701][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  266.880727][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  266.880749][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  266.880775][    C0]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  266.880799][    C0]  mac80211_hwsim_beacon+0xb2/0x2b0
[  266.880820][    C0]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  266.880843][    C0]  __hrtimer_run_queues+0x3eb/0xaf0
[  266.880890][    C0]  hrtimer_run_softirq+0x18f/0x260
[  266.880929][    C0]  handle_softirqs+0x1d9/0x6c0
[  266.880963][    C0]  run_ktimerd+0x69/0x100
[  266.880990][    C0]  smpboot_thread_fn+0x57c/0xa80
[  266.881018][    C0]  ? smpboot_thread_fn+0x4e/0xa80
[  266.881052][    C0]  kthread+0x388/0x470
[  266.881081][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  266.881106][    C0]  ? __pfx_kthread+0x10/0x10
[  266.881137][    C0]  ret_from_fork+0x514/0xb70
[  266.881169][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  266.881199][    C0]  ? __switch_to+0xc89/0x1420
[  266.881227][    C0]  ? __pfx_kthread+0x10/0x10
[  266.881257][    C0]  ret_from_fork_asm+0x1a/0x30
[  266.881293][    C0]  </TASK>
[  266.881303][    C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  266.881321][    C0] FAULT_INJECTION: forcing a failure.
[  266.881321][    C0] name failslab, interval 1, probability 100, space 0, times 17
[  266.881326][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  266.881339][    C1] Call Trace:
[  266.881346][    C1]  <TASK>
[  266.881353][    C1]  dump_stack_lvl+0xe8/0x150
[  266.881383][    C1]  should_fail_ex+0x467/0x600
[  266.881422][    C1]  should_failslab+0xa8/0x100
[  266.881446][    C1]  kmem_cache_alloc_node_noprof+0xae/0x670
[  266.881467][    C1]  ? __alloc_skb+0x1d7/0x7a0
[  266.881485][    C1]  ? __alloc_skb+0x1d7/0x7a0
[  266.881512][    C1]  __alloc_skb+0x1d7/0x7a0
[  266.881536][    C1]  __netdev_alloc_skb+0xc0/0x4b0
[  266.881562][    C1]  __ieee80211_beacon_get+0xc97/0x1820
[  266.881588][    C1]  ? __lock_acquire+0x683/0x2ce0
[  266.881608][    C1]  ? __ieee80211_beacon_get+0x34/0x1820
[  266.881633][    C1]  ieee80211_beacon_get_tim+0xbd/0x2c0
[  266.881659][    C1]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  266.881683][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  266.881720][    C1]  mac80211_hwsim_beacon_tx+0x378/0x820
[  266.881746][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  266.881771][    C1]  __iterate_interfaces+0x2af/0x5a0
[  266.881791][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  266.881817][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  266.881838][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  266.881864][    C1]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  266.881888][    C1]  mac80211_hwsim_beacon+0xb2/0x2b0
[  266.881909][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  266.881932][    C1]  __hrtimer_run_queues+0x3eb/0xaf0
[  266.881979][    C1]  hrtimer_run_softirq+0x18f/0x260
[  266.882012][    C1]  handle_softirqs+0x1d9/0x6c0
[  266.882046][    C1]  run_ktimerd+0x69/0x100
[  266.882073][    C1]  smpboot_thread_fn+0x57c/0xa80
[  266.882101][    C1]  ? smpboot_thread_fn+0x4e/0xa80
[  266.882135][    C1]  kthread+0x388/0x470
[  266.882164][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  266.882189][    C1]  ? __pfx_kthread+0x10/0x10
[  266.882219][    C1]  ret_from_fork+0x514/0xb70
[  266.882251][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  266.882281][    C1]  ? __switch_to+0xc89/0x1420
[  266.882309][    C1]  ? __pfx_kthread+0x10/0x10
[  266.882340][    C1]  ret_from_fork_asm+0x1a/0x30
[  266.882375][    C1]  </TASK>
[  266.882385][    C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  266.882408][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  266.882408][    C1] FAULT_INJECTION: forcing a failure.
[  266.882408][    C1] name failslab, interval 1, probability 100, space 0, times 16
[  266.882420][    C0] Call Trace:
[  266.882427][    C0]  <TASK>
[  266.882434][    C0]  dump_stack_lvl+0xe8/0x150
[  266.882464][    C0]  should_fail_ex+0x467/0x600
[  266.882498][    C0]  should_failslab+0xa8/0x100
[  266.882522][    C0]  kmem_cache_alloc_node_noprof+0xae/0x670
[  266.882543][    C0]  ? __alloc_skb+0x1d7/0x7a0
[  266.882561][    C0]  ? __alloc_skb+0x1d7/0x7a0
[  266.882588][    C0]  __alloc_skb+0x1d7/0x7a0
[  266.882612][    C0]  __netdev_alloc_skb+0xc0/0x4b0
[  266.882638][    C0]  __ieee80211_beacon_get+0xc97/0x1820
[  266.882665][    C0]  ? __lock_acquire+0x683/0x2ce0
[  266.882685][    C0]  ? __ieee80211_beacon_get+0x34/0x1820
[  266.882709][    C0]  ieee80211_beacon_get_tim+0xbd/0x2c0
[  266.882736][    C0]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  266.882760][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  266.882797][    C0]  mac80211_hwsim_beacon_tx+0x378/0x820
[  266.882823][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  266.882849][    C0]  __iterate_interfaces+0x2af/0x5a0
[  266.882869][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  266.882899][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  266.882922][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  266.882947][    C0]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  266.882972][    C0]  mac80211_hwsim_beacon+0xb2/0x2b0
[  266.882992][    C0]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  266.883015][    C0]  __hrtimer_run_queues+0x3eb/0xaf0
[  266.883062][    C0]  hrtimer_run_softirq+0x18f/0x260
[  266.883095][    C0]  handle_softirqs+0x1d9/0x6c0
[  266.883129][    C0]  run_ktimerd+0x69/0x100
[  266.883155][    C0]  smpboot_thread_fn+0x57c/0xa80
[  266.883183][    C0]  ? smpboot_thread_fn+0x4e/0xa80
[  266.883217][    C0]  kthread+0x388/0x470
[  266.883246][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  266.883271][    C0]  ? __pfx_kthread+0x10/0x10
[  266.883300][    C0]  ret_from_fork+0x514/0xb70
[  266.883333][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  266.883363][    C0]  ? __switch_to+0xc89/0x1420
[  266.883391][    C0]  ? __pfx_kthread+0x10/0x10
[  266.883422][    C0]  ret_from_fork_asm+0x1a/0x30
[  266.883457][    C0]  </TASK>
[  266.883467][    C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  266.883485][    C0] FAULT_INJECTION: forcing a failure.
[  266.883485][    C0] name failslab, interval 1, probability 100, space 0, times 15
[  266.883490][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  266.883502][    C1] Call Trace:
[  266.883509][    C1]  <TASK>
[  266.883516][    C1]  dump_stack_lvl+0xe8/0x150
[  266.883545][    C1]  should_fail_ex+0x467/0x600
[  266.883579][    C1]  should_failslab+0xa8/0x100
[  266.883602][    C1]  kmem_cache_alloc_node_noprof+0xae/0x670
[  266.883623][    C1]  ? __alloc_skb+0x1d7/0x7a0
[  266.883641][    C1]  ? __alloc_skb+0x1d7/0x7a0
[  266.883668][    C1]  __alloc_skb+0x1d7/0x7a0
[  266.883692][    C1]  __netdev_alloc_skb+0xc0/0x4b0
[  266.883718][    C1]  __ieee80211_beacon_get+0xc97/0x1820
[  266.883744][    C1]  ? __lock_acquire+0x683/0x2ce0
[  266.883765][    C1]  ? __ieee80211_beacon_get+0x34/0x1820
[  266.883790][    C1]  ieee80211_beacon_get_tim+0xbd/0x2c0
[  266.883817][    C1]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  266.883840][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  266.883879][    C1]  mac80211_hwsim_beacon_tx+0x378/0x820
[  266.883907][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  266.883934][    C1]  __iterate_interfaces+0x2af/0x5a0
[  266.883954][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  266.883982][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  266.884005][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  266.884030][    C1]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  266.884054][    C1]  mac80211_hwsim_beacon+0xb2/0x2b0
[  266.884075][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  266.884097][    C1]  __hrtimer_run_queues+0x3eb/0xaf0
[  266.884144][    C1]  hrtimer_run_softirq+0x18f/0x260
[  266.884178][    C1]  handle_softirqs+0x1d9/0x6c0
[  266.884212][    C1]  run_ktimerd+0x69/0x100
[  266.884239][    C1]  smpboot_thread_fn+0x57c/0xa80
[  266.884267][    C1]  ? smpboot_thread_fn+0x4e/0xa80
[  266.884301][    C1]  kthread+0x388/0x470
[  266.884330][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  266.884372][    C1]  ? __pfx_kthread+0x10/0x10
[  266.884408][    C1]  ret_from_fork+0x514/0xb70
[  266.884442][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  266.884473][    C1]  ? __switch_to+0xc89/0x1420
[  266.884501][    C1]  ? __pfx_kthread+0x10/0x10
[  266.884531][    C1]  ret_from_fork_asm+0x1a/0x30
[  266.884566][    C1]  </TASK>
[  266.884577][    C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  266.884595][    C1] FAULT_INJECTION: forcing a failure.
[  266.884595][    C1] name failslab, interval 1, probability 100, space 0, times 14
[  266.884600][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  266.884612][    C0] Call Trace:
[  266.884620][    C0]  <TASK>
[  266.884627][    C0]  dump_stack_lvl+0xe8/0x150
[  266.884657][    C0]  should_fail_ex+0x467/0x600
[  266.884691][    C0]  should_failslab+0xa8/0x100
[  266.884714][    C0]  kmem_cache_alloc_node_noprof+0xae/0x670
[  266.884736][    C0]  ? __alloc_skb+0x1d7/0x7a0
[  266.884754][    C0]  ? __alloc_skb+0x1d7/0x7a0
[  266.884781][    C0]  __alloc_skb+0x1d7/0x7a0
[  266.884805][    C0]  __netdev_alloc_skb+0xc0/0x4b0
[  266.884831][    C0]  __ieee80211_beacon_get+0xc97/0x1820
[  266.884859][    C0]  ? __lock_acquire+0x683/0x2ce0
[  266.884879][    C0]  ? __ieee80211_beacon_get+0x34/0x1820
[  266.884910][    C0]  ieee80211_beacon_get_tim+0xbd/0x2c0
[  266.884948][    C0]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  266.884974][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  266.885010][    C0]  mac80211_hwsim_beacon_tx+0x378/0x820
[  266.885037][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  266.885062][    C0]  __iterate_interfaces+0x2af/0x5a0
[  266.885082][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  266.885108][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  266.885130][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  266.885155][    C0]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  266.885180][    C0]  mac80211_hwsim_beacon+0xb2/0x2b0
[  266.885200][    C0]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  266.885223][    C0]  __hrtimer_run_queues+0x3eb/0xaf0
[  266.885269][    C0]  hrtimer_run_softirq+0x18f/0x260
[  266.885303][    C0]  handle_softirqs+0x1d9/0x6c0
[  266.885337][    C0]  run_ktimerd+0x69/0x100
[  266.885364][    C0]  smpboot_thread_fn+0x57c/0xa80
[  266.885392][    C0]  ? smpboot_thread_fn+0x4e/0xa80
[  266.885427][    C0]  kthread+0x388/0x470
[  266.885456][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  266.885480][    C0]  ? __pfx_kthread+0x10/0x10
[  266.885511][    C0]  ret_from_fork+0x514/0xb70
[  266.885543][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  266.885573][    C0]  ? __switch_to+0xc89/0x1420
[  266.885602][    C0]  ? __pfx_kthread+0x10/0x10
[  266.885632][    C0]  ret_from_fork_asm+0x1a/0x30
[  266.885667][    C0]  </TASK>
[  266.885678][    C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  266.885699][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  266.885710][    C1] Call Trace:
[  266.885716][    C1]  <TASK>
[  266.885723][    C1]  dump_stack_lvl+0xe8/0x150
[  266.885753][    C1]  should_fail_ex+0x467/0x600
[  266.885790][    C1]  should_failslab+0xa8/0x100
[  266.885816][    C1]  kmem_cache_alloc_node_noprof+0xae/0x670
[  266.885840][    C1]  ? __alloc_skb+0x1d7/0x7a0
[  266.885860][    C1]  ? __alloc_skb+0x1d7/0x7a0
[  266.885888][    C1]  __alloc_skb+0x1d7/0x7a0
[  266.885908][    C0] FAULT_INJECTION: forcing a failure.
[  266.885908][    C0] name failslab, interval 1, probability 100, space 0, times 13
[  266.885914][    C1]  __netdev_alloc_skb+0xc0/0x4b0
[  266.885942][    C1]  __ieee80211_beacon_get+0xc97/0x1820
[  266.885969][    C1]  ? __lock_acquire+0x683/0x2ce0
[  266.885989][    C1]  ? __ieee80211_beacon_get+0x34/0x1820
[  266.886014][    C1]  ieee80211_beacon_get_tim+0xbd/0x2c0
[  266.886040][    C1]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  266.886064][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  266.886100][    C1]  mac80211_hwsim_beacon_tx+0x378/0x820
[  266.886127][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  266.886152][    C1]  __iterate_interfaces+0x2af/0x5a0
[  266.886172][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  266.886198][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  266.886220][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  266.886245][    C1]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  266.886270][    C1]  mac80211_hwsim_beacon+0xb2/0x2b0
[  266.886291][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  266.886313][    C1]  __hrtimer_run_queues+0x3eb/0xaf0
[  266.886360][    C1]  hrtimer_run_softirq+0x18f/0x260
[  266.886399][    C1]  handle_softirqs+0x1d9/0x6c0
[  266.886433][    C1]  run_ktimerd+0x69/0x100
[  266.886460][    C1]  smpboot_thread_fn+0x57c/0xa80
[  266.886488][    C1]  ? smpboot_thread_fn+0x4e/0xa80
[  266.886522][    C1]  kthread+0x388/0x470
[  266.886551][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  266.886575][    C1]  ? __pfx_kthread+0x10/0x10
[  266.886606][    C1]  ret_from_fork+0x514/0xb70
[  266.886638][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  266.886668][    C1]  ? __switch_to+0xc89/0x1420
[  266.886696][    C1]  ? __pfx_kthread+0x10/0x10
[  266.886725][    C1]  ret_from_fork_asm+0x1a/0x30
[  266.886761][    C1]  </TASK>
[  266.886771][    C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  266.886793][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  266.886792][    C1] FAULT_INJECTION: forcing a failure.
[  266.886792][    C1] name failslab, interval 1, probability 100, space 0, times 12
[  266.886805][    C0] Call Trace:
[  266.886812][    C0]  <TASK>
[  266.886819][    C0]  dump_stack_lvl+0xe8/0x150
[  266.886849][    C0]  should_fail_ex+0x467/0x600
[  266.886882][    C0]  should_failslab+0xa8/0x100
[  266.886911][    C0]  kmem_cache_alloc_node_noprof+0xae/0x670
[  266.886932][    C0]  ? __alloc_skb+0x1d7/0x7a0
[  266.886951][    C0]  ? __alloc_skb+0x1d7/0x7a0
[  266.886977][    C0]  __alloc_skb+0x1d7/0x7a0
[  266.887001][    C0]  ndisc_alloc_skb+0xa0/0x480
[  266.887031][    C0]  ndisc_send_rs+0x28e/0x6b0
[  266.887059][    C0]  ? ipv6_get_lladdr+0x2b/0x400
[  266.887087][    C0]  addrconf_rs_timer+0x2d2/0x6c0
[  266.887111][    C0]  ? call_timer_fn+0xd4/0x5e0
[  266.887139][    C0]  ? __pfx_addrconf_rs_timer+0x10/0x10
[  266.887162][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  266.887198][    C0]  call_timer_fn+0x192/0x5e0
[  266.887221][    C0]  ? __pfx_addrconf_rs_timer+0x10/0x10
[  266.887242][    C0]  ? call_timer_fn+0xd4/0x5e0
[  266.887265][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  266.887298][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  266.887322][    C0]  ? __pfx_addrconf_rs_timer+0x10/0x10
[  266.887346][    C0]  __run_timer_base+0x67b/0x9b0
[  266.887381][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  266.887408][    C0]  ? __local_bh_disable_ip+0x3c/0x420
[  266.887434][    C0]  ? __local_bh_disable_ip+0x3c/0x420
[  266.887463][    C0]  run_timer_softirq+0xb7/0x170
[  266.887485][    C0]  handle_softirqs+0x1d9/0x6c0
[  266.887519][    C0]  run_ktimerd+0x69/0x100
[  266.887545][    C0]  smpboot_thread_fn+0x57c/0xa80
[  266.887573][    C0]  ? smpboot_thread_fn+0x4e/0xa80
[  266.887607][    C0]  kthread+0x388/0x470
[  266.887636][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  266.887660][    C0]  ? __pfx_kthread+0x10/0x10
[  266.887691][    C0]  ret_from_fork+0x514/0xb70
[  266.887727][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  266.887758][    C0]  ? __switch_to+0xc89/0x1420
[  266.887786][    C0]  ? __pfx_kthread+0x10/0x10
[  266.887821][    C0]  ret_from_fork_asm+0x1a/0x30
[  266.887856][    C0]  </TASK>
[  266.887866][    C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  266.887889][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  266.887901][    C1] Call Trace:
[  266.887908][    C1]  <TASK>
[  266.887916][    C1]  dump_stack_lvl+0xe8/0x150
[  266.887949][    C1]  should_fail_ex+0x467/0x600
[  266.887982][    C1]  should_failslab+0xa8/0x100
[  266.888005][    C1]  kmem_cache_alloc_node_noprof+0xae/0x670
[  266.888026][    C1]  ? __alloc_skb+0x1d7/0x7a0
[  266.888046][    C1]  ? __alloc_skb+0x1d7/0x7a0
[  266.888073][    C1]  __alloc_skb+0x1d7/0x7a0
[  266.888100][    C1]  __netdev_alloc_skb+0xc0/0x4b0
[  266.888127][    C1]  __ieee80211_beacon_get+0xc97/0x1820
[  266.888155][    C1]  ? __lock_acquire+0x683/0x2ce0
[  266.888172][    C1]  ? __ieee80211_beacon_get+0x34/0x1820
[  266.888194][    C1]  ieee80211_beacon_get_tim+0xbd/0x2c0
[  266.888224][    C1]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  266.888251][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  266.888290][    C1]  mac80211_hwsim_beacon_tx+0x378/0x820
[  266.888318][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  266.888346][    C1]  __iterate_interfaces+0x2af/0x5a0
[  266.888369][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  266.888406][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  266.888431][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  266.888459][    C1]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  266.888486][    C1]  mac80211_hwsim_beacon+0xb2/0x2b0
[  266.888509][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  266.888535][    C1]  __hrtimer_run_queues+0x3eb/0xaf0
[  266.888587][    C1]  hrtimer_run_softirq+0x18f/0x260
[  266.888625][    C1]  handle_softirqs+0x1d9/0x6c0
[  266.888664][    C1]  run_ktimerd+0x69/0x100
[  266.888692][    C1]  smpboot_thread_fn+0x57c/0xa80
[  266.888725][    C1]  ? smpboot_thread_fn+0x4e/0xa80
[  266.888763][    C1]  kthread+0x388/0x470
[  266.888795][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  266.888822][    C1]  ? __pfx_kthread+0x10/0x10
[  266.888857][    C1]  ret_from_fork+0x514/0xb70
[  266.888893][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  266.888926][    C1]  ? __switch_to+0xc89/0x1420
[  266.888958][    C1]  ? __pfx_kthread+0x10/0x10
[  266.888992][    C1]  ret_from_fork_asm+0x1a/0x30
[  266.889031][    C1]  </TASK>
[  266.889066][    C1] FAULT_INJECTION: forcing a failure.
[  266.889066][    C1] name failslab, interval 1, probability 100, space 0, times 10
[  266.889093][    C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  266.889115][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  266.889127][    C1] Call Trace:
[  266.889134][    C1]  <TASK>
[  266.889142][    C1]  dump_stack_lvl+0xe8/0x150
[  266.889176][    C1]  should_fail_ex+0x467/0x600
[  266.889214][    C1]  should_failslab+0xa8/0x100
[  266.889241][    C1]  kmem_cache_alloc_node_noprof+0xae/0x670
[  266.889265][    C1]  ? __alloc_skb+0x1d7/0x7a0
[  266.889286][    C1]  ? __alloc_skb+0x1d7/0x7a0
[  266.889316][    C1]  __alloc_skb+0x1d7/0x7a0
[  266.889344][    C1]  __netdev_alloc_skb+0xc0/0x4b0
[  266.889373][    C1]  __ieee80211_beacon_get+0xc97/0x1820
[  266.889410][    C1]  ? __lock_acquire+0x683/0x2ce0
[  266.889433][    C1]  ? __ieee80211_beacon_get+0x34/0x1820
[  266.889461][    C1]  ieee80211_beacon_get_tim+0xbd/0x2c0
[  266.889490][    C1]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  266.889517][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  266.889558][    C1]  mac80211_hwsim_beacon_tx+0x378/0x820
[  266.889589][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  266.889617][    C1]  __iterate_interfaces+0x2af/0x5a0
[  266.889639][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  266.889668][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  266.889693][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  266.889721][    C1]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  266.889748][    C1]  mac80211_hwsim_beacon+0xb2/0x2b0
[  266.889771][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  266.889797][    C1]  __hrtimer_run_queues+0x3eb/0xaf0
[  266.889849][    C1]  hrtimer_run_softirq+0x18f/0x260
[  266.889887][    C1]  handle_softirqs+0x1d9/0x6c0
[  266.889924][    C1]  run_ktimerd+0x69/0x100
[  266.889953][    C1]  smpboot_thread_fn+0x57c/0xa80
[  266.889984][    C1]  ? smpboot_thread_fn+0x4e/0xa80
[  266.890023][    C1]  kthread+0x388/0x470
[  266.890054][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  266.890082][    C1]  ? __pfx_kthread+0x10/0x10
[  266.890116][    C1]  ret_from_fork+0x514/0xb70
[  266.890152][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  266.890185][    C1]  ? __switch_to+0xc89/0x1420
[  266.890217][    C1]  ? __pfx_kthread+0x10/0x10
[  266.890250][    C1]  ret_from_fork_asm+0x1a/0x30
[  266.890290][    C1]  </TASK>
[  266.890319][    C1] FAULT_INJECTION: forcing a failure.
[  266.890319][    C1] name failslab, interval 1, probability 100, space 0, times 9
[  266.890342][    C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  266.890365][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  266.890377][    C1] Call Trace:
[  266.890384][    C1]  <TASK>
[  266.890392][    C1]  dump_stack_lvl+0xe8/0x150
[  266.890437][    C1]  should_fail_ex+0x467/0x600
[  266.890474][    C1]  should_failslab+0xa8/0x100
[  266.890501][    C1]  kmem_cache_alloc_node_noprof+0xae/0x670
[  266.890525][    C1]  ? __alloc_skb+0x1d7/0x7a0
[  266.890545][    C1]  ? __alloc_skb+0x1d7/0x7a0
[  266.890575][    C1]  __alloc_skb+0x1d7/0x7a0
[  266.890602][    C1]  __netdev_alloc_skb+0xc0/0x4b0
[  266.890631][    C1]  __ieee80211_beacon_get+0xc97/0x1820
[  266.890660][    C1]  ? __lock_acquire+0x683/0x2ce0
[  266.890683][    C1]  ? __ieee80211_beacon_get+0x34/0x1820
[  266.890711][    C1]  ieee80211_beacon_get_tim+0xbd/0x2c0
[  266.890741][    C1]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  266.890767][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  266.890808][    C1]  mac80211_hwsim_beacon_tx+0x378/0x820
[  266.890838][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  266.890865][    C1]  __iterate_interfaces+0x2af/0x5a0
[  266.890888][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  266.890912][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  266.890934][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  266.890963][    C1]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  266.890991][    C1]  mac80211_hwsim_beacon+0xb2/0x2b0
[  266.891013][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  266.891039][    C1]  __hrtimer_run_queues+0x3eb/0xaf0
[  266.891091][    C1]  hrtimer_run_softirq+0x18f/0x260
[  266.891128][    C1]  handle_softirqs+0x1d9/0x6c0
[  266.891166][    C1]  run_ktimerd+0x69/0x100
[  266.891195][    C1]  smpboot_thread_fn+0x57c/0xa80
[  266.891226][    C1]  ? smpboot_thread_fn+0x4e/0xa80
[  266.891265][    C1]  kthread+0x388/0x470
[  266.891297][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  266.891323][    C1]  ? __pfx_kthread+0x10/0x10
[  266.891357][    C1]  ret_from_fork+0x514/0xb70
[  266.891400][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  266.891433][    C1]  ? __switch_to+0xc89/0x1420
[  266.891464][    C1]  ? __pfx_kthread+0x10/0x10
[  266.891499][    C1]  ret_from_fork_asm+0x1a/0x30
[  266.891537][    C1]  </TASK>
[  266.891568][    C1] FAULT_INJECTION: forcing a failure.
[  266.891568][    C1] name failslab, interval 1, probability 100, space 0, times 8
[  266.891593][    C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  266.891614][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  266.891626][    C1] Call Trace:
[  266.891633][    C1]  <TASK>
[  266.891641][    C1]  dump_stack_lvl+0xe8/0x150
[  266.891674][    C1]  should_fail_ex+0x467/0x600
[  266.891711][    C1]  should_failslab+0xa8/0x100
[  266.891738][    C1]  kmem_cache_alloc_node_noprof+0xae/0x670
[  266.891762][    C1]  ? __alloc_skb+0x1d7/0x7a0
[  266.891782][    C1]  ? __alloc_skb+0x1d7/0x7a0
[  266.891813][    C1]  __alloc_skb+0x1d7/0x7a0
[  266.891840][    C1]  __netdev_alloc_skb+0xc0/0x4b0
[  266.891869][    C1]  __ieee80211_beacon_get+0xc97/0x1820
[  266.891898][    C1]  ? __lock_acquire+0x683/0x2ce0
[  266.891920][    C1]  ? __ieee80211_beacon_get+0x34/0x1820
[  266.891946][    C1]  ieee80211_beacon_get_tim+0xbd/0x2c0
[  266.891976][    C1]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  266.892004][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  266.892044][    C1]  mac80211_hwsim_beacon_tx+0x378/0x820
[  266.892074][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  266.892103][    C1]  __iterate_interfaces+0x2af/0x5a0
[  266.892125][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  266.892153][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  266.892178][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  266.892207][    C1]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  266.892235][    C1]  mac80211_hwsim_beacon+0xb2/0x2b0
[  266.892257][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  266.892282][    C1]  __hrtimer_run_queues+0x3eb/0xaf0
[  266.892334][    C1]  hrtimer_run_softirq+0x18f/0x260
[  266.892371][    C1]  handle_softirqs+0x1d9/0x6c0
[  266.892415][    C1]  run_ktimerd+0x69/0x100
[  266.892445][    C1]  smpboot_thread_fn+0x57c/0xa80
[  266.892476][    C1]  ? smpboot_thread_fn+0x4e/0xa80
[  266.892514][    C1]  kthread+0x388/0x470
[  266.892546][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  266.892573][    C1]  ? __pfx_kthread+0x10/0x10
[  266.892607][    C1]  ret_from_fork+0x514/0xb70
[  266.892643][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  266.892675][    C1]  ? __switch_to+0xc89/0x1420
[  266.892701][    C1]  ? __pfx_kthread+0x10/0x10
[  266.892731][    C1]  ret_from_fork_asm+0x1a/0x30
[  266.892769][    C1]  </TASK>
[  266.892799][    C1] FAULT_INJECTION: forcing a failure.
[  266.892799][    C1] name failslab, interval 1, probability 100, space 0, times 7
[  266.892823][    C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  266.892845][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  266.892856][    C1] Call Trace:
[  266.892863][    C1]  <TASK>
[  266.892871][    C1]  dump_stack_lvl+0xe8/0x150
[  266.892903][    C1]  should_fail_ex+0x467/0x600
[  266.892940][    C1]  should_failslab+0xa8/0x100
[  266.892967][    C1]  kmem_cache_alloc_node_noprof+0xae/0x670
[  266.892991][    C1]  ? __alloc_skb+0x1d7/0x7a0
[  266.893011][    C1]  ? __alloc_skb+0x1d7/0x7a0
[  266.893039][    C1]  __alloc_skb+0x1d7/0x7a0
[  266.893065][    C1]  __netdev_alloc_skb+0xc0/0x4b0
[  266.893094][    C1]  __ieee80211_beacon_get+0xc97/0x1820
[  266.893124][    C1]  ? __lock_acquire+0x683/0x2ce0
[  266.893147][    C1]  ? __ieee80211_beacon_get+0x34/0x1820
[  266.893173][    C1]  ieee80211_beacon_get_tim+0xbd/0x2c0
[  266.893203][    C1]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  266.893230][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  266.893269][    C1]  mac80211_hwsim_beacon_tx+0x378/0x820
[  266.893299][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  266.893328][    C1]  __iterate_interfaces+0x2af/0x5a0
[  266.893350][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  266.893379][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  266.893411][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  266.893439][    C1]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  266.893466][    C1]  mac80211_hwsim_beacon+0xb2/0x2b0
[  266.893489][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  266.893515][    C1]  __hrtimer_run_queues+0x3eb/0xaf0
[  266.893567][    C1]  hrtimer_run_softirq+0x18f/0x260
[  266.893604][    C1]  handle_softirqs+0x1d9/0x6c0
[  266.893642][    C1]  run_ktimerd+0x69/0x100
[  266.893671][    C1]  smpboot_thread_fn+0x57c/0xa80
[  266.893703][    C1]  ? smpboot_thread_fn+0x4e/0xa80
[  266.893741][    C1]  kthread+0x388/0x470
[  266.893774][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  266.893801][    C1]  ? __pfx_kthread+0x10/0x10
[  266.893836][    C1]  ret_from_fork+0x514/0xb70
[  266.893872][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  266.893904][    C1]  ? __switch_to+0xc89/0x1420
[  266.893936][    C1]  ? __pfx_kthread+0x10/0x10
[  266.893970][    C1]  ret_from_fork_asm+0x1a/0x30
[  266.894009][    C1]  </TASK>
[  266.894307][    C1] FAULT_INJECTION: forcing a failure.
[  266.894307][    C1] name failslab, interval 1, probability 100, space 0, times 6
[  266.894333][    C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  266.894356][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  266.894369][    C1] Call Trace:
[  266.894376][    C1]  <TASK>
[  266.894383][    C1]  dump_stack_lvl+0xe8/0x150
[  266.894423][    C1]  should_fail_ex+0x467/0x600
[  266.894462][    C1]  should_failslab+0xa8/0x100
[  266.894489][    C1]  kmem_cache_alloc_node_noprof+0xae/0x670
[  266.894514][    C1]  ? __alloc_skb+0x1d7/0x7a0
[  266.894534][    C1]  ? __alloc_skb+0x1d7/0x7a0
[  266.894565][    C1]  __alloc_skb+0x1d7/0x7a0
[  266.894592][    C1]  lapb_send_control+0x38/0x3e0
[  266.894619][    C1]  ? lapb_t1timer_expiry+0x33/0xaf0
[  266.894643][    C1]  ? lapb_t1timer_expiry+0x33/0xaf0
[  266.894671][    C1]  lapb_t1timer_expiry+0x694/0xaf0
[  266.894707][    C1]  call_timer_fn+0x192/0x5e0
[  266.894733][    C1]  ? __pfx_lapb_t1timer_expiry+0x10/0x10
[  266.894757][    C1]  ? call_timer_fn+0xd4/0x5e0
[  266.894783][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  266.894821][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  266.894848][    C1]  ? __pfx_lapb_t1timer_expiry+0x10/0x10
[  266.894876][    C1]  __run_timer_base+0x67b/0x9b0
[  266.894917][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  266.894947][    C1]  ? __local_bh_disable_ip+0x3c/0x420
[  266.894976][    C1]  ? __local_bh_disable_ip+0x3c/0x420
[  266.895008][    C1]  run_timer_softirq+0xb7/0x170
[  266.895033][    C1]  handle_softirqs+0x1d9/0x6c0
[  266.895071][    C1]  run_ktimerd+0x69/0x100
[  266.895100][    C1]  smpboot_thread_fn+0x57c/0xa80
[  266.895132][    C1]  ? smpboot_thread_fn+0x4e/0xa80
[  266.895172][    C1]  kthread+0x388/0x470
[  266.895203][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  266.895231][    C1]  ? __pfx_kthread+0x10/0x10
[  266.895266][    C1]  ret_from_fork+0x514/0xb70
[  266.895302][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  266.895334][    C1]  ? __switch_to+0xc89/0x1420
[  266.895367][    C1]  ? __pfx_kthread+0x10/0x10
[  266.895406][    C1]  ret_from_fork_asm+0x1a/0x30
[  266.895445][    C1]  </TASK>
[  266.895755][ T1512] FAULT_INJECTION: forcing a failure.
[  266.895755][ T1512] name failslab, interval 1, probability 100, space 0, times 4
[  266.895781][ T1512] CPU: 1 UID: 0 PID: 1512 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  266.895802][ T1512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  266.895815][ T1512] Workqueue: events_unbound nsim_dev_trap_report_work
[  266.895844][ T1512] Call Trace:
[  266.895851][ T1512]  <TASK>
[  266.895858][ T1512]  dump_stack_lvl+0xe8/0x150
[  266.895888][ T1512]  should_fail_ex+0x467/0x600
[  266.895921][ T1512]  should_failslab+0xa8/0x100
[  266.895945][ T1512]  kmem_cache_alloc_node_noprof+0xae/0x670
[  266.895966][ T1512]  ? __alloc_skb+0x1d7/0x7a0
[  266.895984][ T1512]  ? __alloc_skb+0x1d7/0x7a0
[  266.896010][ T1512]  __alloc_skb+0x1d7/0x7a0
[  266.896036][ T1512]  nsim_dev_trap_report_work+0x2b1/0xcb0
[  266.896077][ T1512]  ? process_scheduled_works+0xa20/0x14e0
[  266.896101][ T1512]  process_scheduled_works+0xa8e/0x14e0
[  266.896154][ T1512]  ? __pfx_process_scheduled_works+0x10/0x10
[  266.896184][ T1512]  ? assign_work+0x3cf/0x5d0
[  266.896213][ T1512]  worker_thread+0xa47/0xfb0
[  266.896266][ T1512]  kthread+0x388/0x470
[  266.896295][ T1512]  ? __pfx_worker_thread+0x10/0x10
[  266.896316][ T1512]  ? __pfx_kthread+0x10/0x10
[  266.896346][ T1512]  ret_from_fork+0x514/0xb70
[  266.896378][ T1512]  ? __pfx_ret_from_fork+0x10/0x10
[  266.896413][ T1512]  ? __switch_to+0xc89/0x1420
[  266.896441][ T1512]  ? __pfx_kthread+0x10/0x10
[  266.896471][ T1512]  ret_from_fork_asm+0x1a/0x30
[  266.896508][ T1512]  </TASK>
[  266.896538][ T1512] FAULT_INJECTION: forcing a failure.
[  266.896538][ T1512] name failslab, interval 1, probability 100, space 0, times 3
[  266.896560][ T1512] CPU: 1 UID: 0 PID: 1512 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  266.896580][ T1512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  266.896592][ T1512] Workqueue: events_unbound nsim_dev_trap_report_work
[  266.896617][ T1512] Call Trace:
[  266.896623][ T1512]  <TASK>
[  266.896630][ T1512]  dump_stack_lvl+0xe8/0x150
[  266.896658][ T1512]  should_fail_ex+0x467/0x600
[  266.896692][ T1512]  should_failslab+0xa8/0x100
[  266.896716][ T1512]  kmem_cache_alloc_node_noprof+0xae/0x670
[  266.896737][ T1512]  ? __alloc_skb+0x1d7/0x7a0
[  266.896755][ T1512]  ? __alloc_skb+0x1d7/0x7a0
[  266.896782][ T1512]  __alloc_skb+0x1d7/0x7a0
[  266.896807][ T1512]  nsim_dev_trap_report_work+0x2b1/0xcb0
[  266.896847][ T1512]  ? process_scheduled_works+0xa20/0x14e0
[  266.896871][ T1512]  process_scheduled_works+0xa8e/0x14e0
[  266.896922][ T1512]  ? __pfx_process_scheduled_works+0x10/0x10
[  266.896952][ T1512]  ? assign_work+0x3cf/0x5d0
[  266.896981][ T1512]  worker_thread+0xa47/0xfb0
[  266.897034][ T1512]  kthread+0x388/0x470
[  266.897062][ T1512]  ? __pfx_worker_thread+0x10/0x10
[  266.897084][ T1512]  ? __pfx_kthread+0x10/0x10
[  266.897113][ T1512]  ret_from_fork+0x514/0xb70
[  266.897145][ T1512]  ? __pfx_ret_from_fork+0x10/0x10
[  266.897174][ T1512]  ? __switch_to+0xc89/0x1420
[  266.897202][ T1512]  ? __pfx_kthread+0x10/0x10
[  266.897232][ T1512]  ret_from_fork_asm+0x1a/0x30
[  266.897267][ T1512]  </TASK>
[  266.897279][ T1512] FAULT_INJECTION: forcing a failure.
[  266.897279][ T1512] name failslab, interval 1, probability 100, space 0, times 2
[  266.897300][ T1512] CPU: 1 UID: 0 PID: 1512 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  266.897320][ T1512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  266.897331][ T1512] Workqueue: events_unbound nsim_dev_trap_report_work
[  266.897355][ T1512] Call Trace:
[  266.897361][ T1512]  <TASK>
[  266.897368][ T1512]  dump_stack_lvl+0xe8/0x150
[  266.897403][ T1512]  should_fail_ex+0x467/0x600
[  266.897437][ T1512]  should_failslab+0xa8/0x100
[  266.897460][ T1512]  kmem_cache_alloc_node_noprof+0xae/0x670
[  266.897481][ T1512]  ? __alloc_skb+0x1d7/0x7a0
[  266.897499][ T1512]  ? __alloc_skb+0x1d7/0x7a0
[  266.897526][ T1512]  __alloc_skb+0x1d7/0x7a0
[  266.897551][ T1512]  nsim_dev_trap_report_work+0x2b1/0xcb0
[  266.897591][ T1512]  ? process_scheduled_works+0xa20/0x14e0
[  266.897614][ T1512]  process_scheduled_works+0xa8e/0x14e0
[  266.897664][ T1512]  ? __pfx_process_scheduled_works+0x10/0x10
[  266.897694][ T1512]  ? assign_work+0x3cf/0x5d0
[  266.897723][ T1512]  worker_thread+0xa47/0xfb0
[  266.897771][ T1512]  kthread+0x388/0x470
[  266.897799][ T1512]  ? __pfx_worker_thread+0x10/0x10
[  266.897821][ T1512]  ? __pfx_kthread+0x10/0x10
[  266.897850][ T1512]  ret_from_fork+0x514/0xb70
[  266.897883][ T1512]  ? __pfx_ret_from_fork+0x10/0x10
[  266.897911][ T1512]  ? __switch_to+0xc89/0x1420
[  266.897940][ T1512]  ? __pfx_kthread+0x10/0x10
[  266.897969][ T1512]  ret_from_fork_asm+0x1a/0x30
[  266.898005][ T1512]  </TASK>
[  266.901659][ T1512] FAULT_INJECTION: forcing a failure.
[  266.901659][ T1512] name failslab, interval 1, probability 100, space 0, times 1
[  266.901687][ T1512] CPU: 1 UID: 0 PID: 1512 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  266.901708][ T1512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  266.901720][ T1512] Workqueue: events_unbound nsim_dev_trap_report_work
[  266.901749][ T1512] Call Trace:
[  266.901756][ T1512]  <TASK>
[  266.901763][ T1512]  dump_stack_lvl+0xe8/0x150
[  266.901793][ T1512]  should_fail_ex+0x467/0x600
[  266.901829][ T1512]  should_failslab+0xa8/0x100
[  266.901853][ T1512]  kmem_cache_alloc_node_noprof+0xae/0x670
[  266.901875][ T1512]  ? __alloc_skb+0x1d7/0x7a0
[  266.901893][ T1512]  ? __alloc_skb+0x1d7/0x7a0
[  266.901920][ T1512]  __alloc_skb+0x1d7/0x7a0
[  266.901945][ T1512]  nsim_dev_trap_report_work+0x2b1/0xcb0
[  266.901986][ T1512]  ? process_scheduled_works+0xa20/0x14e0
[  266.902010][ T1512]  process_scheduled_works+0xa8e/0x14e0
[  266.902058][ T1512]  ? __pfx_process_scheduled_works+0x10/0x10
[  266.902089][ T1512]  ? assign_work+0x3cf/0x5d0
[  266.902118][ T1512]  worker_thread+0xa47/0xfb0
[  266.902171][ T1512]  kthread+0x388/0x470
[  266.902199][ T1512]  ? __pfx_worker_thread+0x10/0x10
[  266.902221][ T1512]  ? __pfx_kthread+0x10/0x10
[  266.902250][ T1512]  ret_from_fork+0x514/0xb70
[  266.902283][ T1512]  ? __pfx_ret_from_fork+0x10/0x10
[  266.902313][ T1512]  ? __switch_to+0xc89/0x1420
[  266.902341][ T1512]  ? __pfx_kthread+0x10/0x10
[  266.902371][ T1512]  ret_from_fork_asm+0x1a/0x30
[  266.902414][ T1512]  </TASK>
[  266.928774][ T4962] udevd[4962]: worker [9134] did not accept message -105 (No buffer space available), kill it
[  267.124426][ T4962] udevd[4962]: worker [9133] terminated by signal 9 (Killed)
[  267.145835][ T4962] udevd[4962]: worker [9134] terminated by signal 9 (Killed)
[  267.146246][ T4962] udevd[4962]: worker [9219] terminated by signal 9 (Killed)
[  267.146598][ T4962] udevd[4962]: worker [9220] terminated by signal 9 (Killed)
[  267.146900][ T4962] udevd[4962]: worker [9221] terminated by signal 9 (Killed)
[  267.227162][ T5706] usb 7-1: config 1 interface 1 has no altsetting 0
[  267.306310][ T5602] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  267.308719][ T5706] usb 7-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00
[  267.308748][ T5706] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  267.308767][ T5706] usb 7-1: Product: syz
[  267.308780][ T5706] usb 7-1: Manufacturer: syz
[  267.454658][  T897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  267.598199][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  267.598346][ T5601] Bluetooth: hci17: command tx timeout
[  267.999882][ T5601] Bluetooth: hci16: command tx timeout
[  268.325674][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  268.479967][ T5602] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  269.401297][ T5602] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  269.525756][  T897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  269.678528][ T5601] Bluetooth: hci17: command tx timeout
[  270.080182][ T5601] Bluetooth: hci16: command tx timeout
[  271.350293][ T5611] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1
[  271.404598][ T5611] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9
[  271.408245][ T5611] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9
[  271.411066][ T5611] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4
[  271.415500][ T5611] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2
[  271.678765][ T5602] net_ratelimit: 5 callbacks suppressed
[  271.678782][ T5602] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  271.678894][ T5602] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  271.762037][ T5601] Bluetooth: hci17: command tx timeout
[  272.154974][ T5602] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  272.158014][ T5601] Bluetooth: hci16: command tx timeout
[  272.724370][ T5602] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  272.724534][ T5602] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  272.809556][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  272.809709][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  273.425268][ T5583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  273.425314][ T5583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  273.641250][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  273.680947][ T5601] Bluetooth: hci18: command tx timeout
[  273.839383][ T5601] Bluetooth: hci17: command tx timeout
[  274.944700][ T9295] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1050'.
[  275.080236][ T9295] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1050'.
[  275.080264][ T9295] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1050'.
[  275.080830][ T9296] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1050'.
[  275.081022][ T9297] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1050'.
[  275.249470][ T9295] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1050'.
[  275.757883][ T5601] Bluetooth: hci18: command tx timeout
[  276.057058][ T5706] speedtch 7-1:1.0: speedtch_bind: setting interface to  1 failed (-71)!
[  276.057431][ T5706] usb 7-1: selecting invalid altsetting 0
[  276.057482][ T5706] speedtch 7-1:1.0: usbatm_usb_probe: bind failed: -71!
[  276.057540][ T5706] speedtch 7-1:1.0: probe with driver speedtch failed with error -71
[  276.949886][ T9296] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1050'.
[  277.789846][ T9310] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1053'.
[  277.790574][ T9310] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1053'.
[  277.805517][ T9310] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1053'.
[  277.837943][ T5601] Bluetooth: hci18: command tx timeout
[  278.108688][    T9] net_ratelimit: 33 callbacks suppressed
[  278.108709][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  278.109303][  T897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  278.109443][  T897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  278.109562][  T897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  278.799124][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  279.000312][ T5583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  279.000444][ T5583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  279.011127][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  279.011906][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  279.011971][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  279.918120][ T5601] Bluetooth: hci18: command tx timeout
[  280.336710][ T9332] __nla_validate_parse: 10 callbacks suppressed
[  280.336731][ T9332] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1060'.
[  280.337046][ T9334] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1060'.
[  280.349963][ T9335] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1060'.
[  280.519844][ T9332] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1060'.
[  280.578726][ T9335] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1060'.
[  280.608278][ T9332] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1060'.
[  280.877320][ T5706] usb 7-1: selecting invalid altsetting 0
[  280.877360][ T5706] usbtest 7-1:1.1: probe with driver usbtest failed with error -22
[  280.914110][ T9345] netlink: 84 bytes leftover after parsing attributes in process `syz.6.1061'.
[  281.076446][ T5706] usb 7-1: selecting invalid altsetting 0
[  281.076482][ T5706] speedtch 7-1:1.1: probe with driver speedtch failed with error -22
[  283.261771][ T9375] net_ratelimit: 36 callbacks suppressed
[  283.261789][ T9375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  283.284006][  T897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  283.355471][ T5583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  283.356215][ T5583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  283.356250][  T897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  283.356560][ T5583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  283.390159][ T5601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  283.397087][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  283.424222][ T9378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  283.424458][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  284.223817][ T9180] bridge0: port 1(bridge_slave_0) entered blocking state
[  284.224005][ T9180] bridge0: port 1(bridge_slave_0) entered disabled state
[  284.224388][ T9180] bridge_slave_0: entered allmulticast mode
[  284.227368][ T9180] bridge_slave_0: entered promiscuous mode
[  284.336847][ T9180] bridge0: port 2(bridge_slave_1) entered blocking state
[  284.336963][ T9180] bridge0: port 2(bridge_slave_1) entered disabled state
[  284.337643][ T9180] bridge_slave_1: entered allmulticast mode
[  284.350340][ T9180] bridge_slave_1: entered promiscuous mode
[  284.522349][ T5706] usb 7-1: USB disconnect, device number 2
[  286.161618][ T9396] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1070'.
[  286.162073][ T9397] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1070'.
[  286.162425][ T9398] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1070'.
[  286.162787][ T9399] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1070'.
[  286.163190][ T9400] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1070'.
[  286.163742][ T9401] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1070'.
[  286.203143][ T9180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  286.284333][ T9180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  286.646838][ T9195] bridge0: port 1(bridge_slave_0) entered blocking state
[  286.647048][ T9195] bridge0: port 1(bridge_slave_0) entered disabled state
[  286.647260][ T9195] bridge_slave_0: entered allmulticast mode
[  286.652014][ T9195] bridge_slave_0: entered promiscuous mode
[  286.676423][ T9180] team0: Port device team_slave_0 added
[  286.676661][ T9195] bridge0: port 2(bridge_slave_1) entered blocking state
[  286.677991][ T9195] bridge0: port 2(bridge_slave_1) entered disabled state
[  286.678621][ T9195] bridge_slave_1: entered allmulticast mode
[  286.686094][ T9195] bridge_slave_1: entered promiscuous mode
[  286.704633][ T9180] team0: Port device team_slave_1 added
[  286.883350][ T9195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  286.916244][ T9180] batman_adv: batadv0: Adding interface: batadv_slave_0
[  286.916261][ T9180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  286.916286][ T9180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  286.925422][ T9195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  286.925791][ T9256] bridge0: port 1(bridge_slave_0) entered blocking state
[  286.926102][ T9256] bridge0: port 1(bridge_slave_0) entered disabled state
[  286.926326][ T9256] bridge_slave_0: entered allmulticast mode
[  286.942436][ T9256] bridge_slave_0: entered promiscuous mode
[  286.946404][ T9180] batman_adv: batadv0: Adding interface: batadv_slave_1
[  286.946421][ T9180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  286.946446][ T9180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  286.972604][ T9256] bridge0: port 2(bridge_slave_1) entered blocking state
[  286.972744][ T9256] bridge0: port 2(bridge_slave_1) entered disabled state
[  286.972970][ T9256] bridge_slave_1: entered allmulticast mode
[  286.975770][ T9256] bridge_slave_1: entered promiscuous mode
[  287.865049][ T9195] team0: Port device team_slave_0 added
[  288.087554][ T9195] team0: Port device team_slave_1 added
[  288.176411][ T9256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  288.290667][ T9256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  288.354654][ T9180] hsr_slave_0: entered promiscuous mode
[  288.356498][ T9180] hsr_slave_1: entered promiscuous mode
[  288.358391][ T9180] debugfs: 'hsr0' already exists in 'hsr'
[  288.358417][ T9180] Cannot create hsr debugfs directory
[  288.422667][ T9195] batman_adv: batadv0: Adding interface: batadv_slave_0
[  288.422684][ T9195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  288.422708][ T9195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  288.477663][ T9195] batman_adv: batadv0: Adding interface: batadv_slave_1
[  288.477680][ T9195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  288.478610][  T897] net_ratelimit: 38 callbacks suppressed
[  288.478625][  T897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  288.479952][ T9195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  288.512470][ T9256] team0: Port device team_slave_0 added
[  288.557109][ T9256] team0: Port device team_slave_1 added
[  288.559792][  T897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  288.767325][ T9256] batman_adv: batadv0: Adding interface: batadv_slave_0
[  288.767341][ T9256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  288.767366][ T9256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  288.846974][ T9195] hsr_slave_0: entered promiscuous mode
[  288.851698][ T9195] hsr_slave_1: entered promiscuous mode
[  288.854857][ T9195] debugfs: 'hsr0' already exists in 'hsr'
[  288.854881][ T9195] Cannot create hsr debugfs directory
[  288.856728][ T9256] batman_adv: batadv0: Adding interface: batadv_slave_1
[  288.856740][ T9256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  288.856765][ T9256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  289.135726][ T5602] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  289.185614][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  289.193197][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  289.201033][ T5603] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  289.442870][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  289.443015][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  289.527180][ T5603] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  289.626229][ T5603] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  290.735889][ T9426] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1074'.
[  290.762521][ T9427] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1074'.
[  290.775042][ T9426] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1074'.
[  290.809607][ T9256] hsr_slave_0: entered promiscuous mode
[  290.811250][ T9256] hsr_slave_1: entered promiscuous mode
[  290.812391][ T9256] debugfs: 'hsr0' already exists in 'hsr'
[  290.812415][ T9256] Cannot create hsr debugfs directory
[  290.844277][ T9426] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1074'.
[  292.554855][ T9180] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  292.791743][ T9441] __nla_validate_parse: 2 callbacks suppressed
[  292.791763][ T9441] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1078'.
[  292.791981][ T9442] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1078'.
[  292.792145][ T9443] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1078'.
[  292.792307][ T9444] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1078'.
[  292.792556][ T9445] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1078'.
[  292.793879][ T9441] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1078'.
[  293.403147][ T9180] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  293.526051][ T5706] net_ratelimit: 22 callbacks suppressed
[  293.526070][ T5706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  293.526081][ T5603] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  293.580338][ T9451] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  293.851365][ T9180] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  293.935125][ T9460] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1084'.
[  294.242789][ T9180] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  294.319310][  T897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  294.479961][ T5603] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  294.480076][ T5603] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  294.638456][ T5706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  294.798313][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  294.982377][ T9195] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  295.376022][ T5603] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  295.441299][ T5706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  295.462606][ T9195] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  295.498225][ T9475] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1088'.
[  295.498290][ T9476] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1088'.
[  295.498827][ T9475] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1088'.
[  295.528168][ T5603] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  295.688321][  T198] libceph: connect (2)127.0.0.1:6789 error -101
[  295.688448][  T198] libceph: ceph_tcp_connect failed: -101
[  295.688457][  T198] libceph: mon0 (2)127.0.0.1:6789 connect error
[  295.884617][ T9195] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  295.958460][  T198] libceph: connect (2)127.0.0.1:6789 error -101
[  295.958642][  T198] libceph: ceph_tcp_connect failed: -101
[  295.958658][  T198] libceph: mon0 (2)127.0.0.1:6789 connect error
[  296.155120][ T9195] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  296.462689][ T9480] ceph: No mds server is up or the cluster is laggy
[  296.478525][  T198] libceph: connect (2)127.0.0.1:6789 error -101
[  296.478713][  T198] libceph: ceph_tcp_connect failed: -101
[  296.478728][  T198] libceph: mon0 (2)127.0.0.1:6789 connect error
[  296.805014][ T9256] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  296.871673][ T9486] tipc: Started in network mode
[  296.871760][ T9486] tipc: Node identity 78563412785634122143658721436587, cluster identity 4711
[  297.201275][ T9256] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  297.492827][ T9256] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  297.743272][ T9256] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  298.032870][ T9500] __nla_validate_parse: 4 callbacks suppressed
[  298.032891][ T9500] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1096'.
[  298.034187][ T9500] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1096'.
[  298.035531][ T9500] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1096'.
[  298.035832][ T9500] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1096'.
[  298.071386][ T9500] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1096'.
[  298.071684][ T9500] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1096'.
[  298.182435][ T5611] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1
[  298.215963][ T5611] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9
[  298.222787][ T5611] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9
[  298.281815][ T5611] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4
[  298.286448][ T5611] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2
[  298.497487][ T9503] FAULT_INJECTION: forcing a failure.
[  298.497487][ T9503] name fail_futex, interval 1, probability 0, space 0, times 0
[  298.497521][ T9503] CPU: 1 UID: 0 PID: 9503 Comm: syz.5.1097 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  298.497538][ T9503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  298.497548][ T9503] Call Trace:
[  298.497555][ T9503]  <TASK>
[  298.497564][ T9503]  dump_stack_lvl+0xe8/0x150
[  298.497598][ T9503]  should_fail_ex+0x467/0x600
[  298.497633][ T9503]  get_futex_key+0x1b3/0x1580
[  298.497667][ T9503]  ? __pfx_get_futex_key+0x10/0x10
[  298.497690][ T9503]  ? debug_object_free+0x29c/0x340
[  298.497720][ T9503]  futex_wake+0x119/0x600
[  298.497747][ T9503]  ? __pfx_futex_wait+0x10/0x10
[  298.497773][ T9503]  ? __pfx_futex_wake+0x10/0x10
[  298.497800][ T9503]  ? __pfx_hrtimer_wakeup+0x10/0x10
[  298.497833][ T9503]  ? ktime_get+0x45/0x220
[  298.497854][ T9503]  do_futex+0x458/0x4e0
[  298.497883][ T9503]  ? __pfx_do_futex+0x10/0x10
[  298.497906][ T9503]  ? lockdep_hardirqs_on+0x7a/0x110
[  298.497928][ T9503]  ? ktime_get+0x45/0x220
[  298.497947][ T9503]  __se_sys_futex+0x3a8/0x450
[  298.497970][ T9503]  ? __pfx___se_sys_futex+0x10/0x10
[  298.497987][ T9503]  ? rcu_is_watching+0x15/0xb0
[  298.498010][ T9503]  ? __x64_sys_futex+0x21/0xf0
[  298.498027][ T9503]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  298.498044][ T9503]  do_syscall_64+0x174/0x580
[  298.498061][ T9503]  ? trace_irq_disable+0x3b/0x140
[  298.498077][ T9503]  ? clear_bhb_loop+0x40/0x90
[  298.498095][ T9503]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  298.498111][ T9503] RIP: 0033:0x7f616038de99
[  298.498127][ T9503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  298.498141][ T9503] RSP: 002b:00007ffe20b1d9f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  298.498158][ T9503] RAX: ffffffffffffffda RBX: 00007f6160616090 RCX: 00007f616038de99
[  298.498171][ T9503] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f616061609c
[  298.498182][ T9503] RBP: 00007f6160616090 R08: 0000000000000001 R09: 00007f6160615fb0
[  298.498194][ T9503] R10: 00007f6160615fa0 R11: 0000000000000246 R12: 0000000000000001
[  298.498204][ T9503] R13: 0000000000000001 R14: 0000000000000000 R15: 00007f6160615fa0
[  298.498226][ T9503]  </TASK>
[  298.558566][ T5716] net_ratelimit: 13 callbacks suppressed
[  298.558584][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  298.600014][ T9503] FAULT_INJECTION: forcing a failure.
[  298.600014][ T9503] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  298.600048][ T9503] CPU: 0 UID: 0 PID: 9503 Comm: syz.5.1097 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  298.600070][ T9503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  298.600083][ T9503] Call Trace:
[  298.600092][ T9503]  <TASK>
[  298.600101][ T9503]  dump_stack_lvl+0xe8/0x150
[  298.600136][ T9503]  should_fail_ex+0x467/0x600
[  298.600172][ T9503]  _copy_from_user+0x2d/0xb0
[  298.600197][ T9503]  get_timespec64+0x96/0x1b0
[  298.600222][ T9503]  ? __pfx_get_timespec64+0x10/0x10
[  298.600246][ T9503]  ? ktime_get+0x45/0x220
[  298.600271][ T9503]  __se_sys_futex+0x19a/0x450
[  298.600302][ T9503]  ? __pfx___se_sys_futex+0x10/0x10
[  298.600327][ T9503]  ? rcu_is_watching+0x15/0xb0
[  298.600358][ T9503]  ? __x64_sys_futex+0x21/0xf0
[  298.600382][ T9503]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  298.600403][ T9503]  do_syscall_64+0x174/0x580
[  298.600427][ T9503]  ? trace_irq_disable+0x3b/0x140
[  298.600447][ T9503]  ? clear_bhb_loop+0x40/0x90
[  298.600470][ T9503]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  298.600491][ T9503] RIP: 0033:0x7f616038de99
[  298.600509][ T9503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  298.600526][ T9503] RSP: 002b:00007ffe20b1da78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  298.600547][ T9503] RAX: ffffffffffffffda RBX: 0000000000048d66 RCX: 00007f616038de99
[  298.600562][ T9503] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f616061609c
[  298.600574][ T9503] RBP: 0000000000000032 R08: 3fffffffffffffff R09: 0000000000000000
[  298.600587][ T9503] R10: 00007ffe20b1db80 R11: 0000000000000246 R12: 00007ffe20b1dba0
[  298.600601][ T9503] R13: 00007f616061609c R14: 0000000000048d98 R15: 00007ffe20b1db80
[  298.600632][ T9503]  </TASK>
[  298.615250][ T9503] FAULT_INJECTION: forcing a failure.
[  298.615250][ T9503] name fail_futex, interval 1, probability 0, space 0, times 0
[  298.615283][ T9503] CPU: 0 UID: 0 PID: 9503 Comm: syz.5.1097 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  298.615306][ T9503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  298.615318][ T9503] Call Trace:
[  298.615326][ T9503]  <TASK>
[  298.615334][ T9503]  dump_stack_lvl+0xe8/0x150
[  298.615370][ T9503]  should_fail_ex+0x467/0x600
[  298.615406][ T9503]  get_futex_key+0x1b3/0x1580
[  298.615440][ T9503]  ? __pfx_get_futex_key+0x10/0x10
[  298.615475][ T9503]  futex_wait_setup+0x4a/0x590
[  298.615509][ T9503]  ? __futex_wait+0xe1/0x410
[  298.615541][ T9503]  __futex_wait+0x161/0x410
[  298.615575][ T9503]  ? __pfx___futex_wait+0x10/0x10
[  298.615607][ T9503]  ? __pfx_futex_wake_mark+0x10/0x10
[  298.615642][ T9503]  ? __pfx_hrtimer_wakeup+0x10/0x10
[  298.615676][ T9503]  ? hrtimer_setup_sleeper_on_stack+0xb5/0x110
[  298.615707][ T9503]  ? ktime_add_safe+0x38/0x70
[  298.615735][ T9503]  futex_wait+0x121/0x390
[  298.615766][ T9503]  ? __pfx_futex_wait+0x10/0x10
[  298.615800][ T9503]  ? __pfx_hrtimer_wakeup+0x10/0x10
[  298.615833][ T9503]  ? ktime_get+0x45/0x220
[  298.615855][ T9503]  do_futex+0x3e7/0x4e0
[  298.615885][ T9503]  ? __pfx_do_futex+0x10/0x10
[  298.615943][ T9503]  ? lockdep_hardirqs_on+0x7a/0x110
[  298.615966][ T9503]  ? ktime_get+0x45/0x220
[  298.615990][ T9503]  __se_sys_futex+0x3a8/0x450
[  298.616022][ T9503]  ? __pfx___se_sys_futex+0x10/0x10
[  298.616056][ T9503]  ? rcu_is_watching+0x15/0xb0
[  298.616087][ T9503]  ? __x64_sys_futex+0x21/0xf0
[  298.616112][ T9503]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  298.616134][ T9503]  do_syscall_64+0x174/0x580
[  298.616157][ T9503]  ? trace_irq_disable+0x3b/0x140
[  298.616177][ T9503]  ? clear_bhb_loop+0x40/0x90
[  298.616201][ T9503]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  298.616221][ T9503] RIP: 0033:0x7f616038de99
[  298.616239][ T9503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  298.616255][ T9503] RSP: 002b:00007ffe20b1da78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  298.616276][ T9503] RAX: ffffffffffffffda RBX: 0000000000048da7 RCX: 00007f616038de99
[  298.616291][ T9503] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f616061618c
[  298.616304][ T9503] RBP: 0000000000000032 R08: 3fffffffffffffff R09: 0000000000000000
[  298.616318][ T9503] R10: 00007ffe20b1db80 R11: 0000000000000246 R12: 00007ffe20b1dba0
[  298.616331][ T9503] R13: 00007f616061618c R14: 0000000000048dd9 R15: 00007ffe20b1db80
[  298.616361][ T9503]  </TASK>
[  298.658201][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  298.756700][ T9503] FAULT_INJECTION: forcing a failure.
[  298.756700][ T9503] name fail_futex, interval 1, probability 0, space 0, times 0
[  298.756735][ T9503] CPU: 0 UID: 0 PID: 9503 Comm: syz.5.1097 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  298.756759][ T9503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  298.756772][ T9503] Call Trace:
[  298.756780][ T9503]  <TASK>
[  298.756788][ T9503]  dump_stack_lvl+0xe8/0x150
[  298.756824][ T9503]  should_fail_ex+0x467/0x600
[  298.756863][ T9503]  get_futex_key+0x1b3/0x1580
[  298.756898][ T9503]  ? __pfx_get_futex_key+0x10/0x10
[  298.756925][ T9503]  ? do_raw_spin_lock+0x12b/0x2f0
[  298.756970][ T9503]  futex_wake+0x119/0x600
[  298.757002][ T9503]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  298.757029][ T9503]  ? __pfx_futex_wake+0x10/0x10
[  298.757055][ T9503]  ? userfaultfd_unmap_complete+0x292/0x310
[  298.757083][ T9503]  ? rt_mutex_slowunlock+0x4ee/0xa20
[  298.757110][ T9503]  ? __pfx_userfaultfd_unmap_complete+0x10/0x10
[  298.757139][ T9503]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  298.757170][ T9503]  do_futex+0x458/0x4e0
[  298.757194][ T9503]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  298.757223][ T9503]  ? __pfx_do_futex+0x10/0x10
[  298.757246][ T9503]  ? vm_mmap_pgoff+0x35d/0x4e0
[  298.757283][ T9503]  __se_sys_futex+0x3a8/0x450
[  298.757314][ T9503]  ? __pfx___se_sys_futex+0x10/0x10
[  298.757339][ T9503]  ? rcu_is_watching+0x15/0xb0
[  298.757370][ T9503]  ? __x64_sys_futex+0x21/0xf0
[  298.757396][ T9503]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  298.757418][ T9503]  do_syscall_64+0x174/0x580
[  298.757441][ T9503]  ? trace_irq_disable+0x3b/0x140
[  298.757462][ T9503]  ? clear_bhb_loop+0x40/0x90
[  298.757486][ T9503]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  298.757506][ T9503] RIP: 0033:0x7f616038de99
[  298.757526][ T9503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  298.757543][ T9503] RSP: 002b:00007ffe20b1d9f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  298.757564][ T9503] RAX: ffffffffffffffda RBX: 00007f6160616360 RCX: 00007f616038de99
[  298.757581][ T9503] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f616061636c
[  298.757595][ T9503] RBP: 00007f6160616360 R08: 0000000000000000 R09: 00007f6160616280
[  298.757608][ T9503] R10: 00000000000000dc R11: 0000000000000246 R12: 0000000000000004
[  298.757621][ T9503] R13: 0000000000000001 R14: 0000000000000000 R15: 00007f6160615fa0
[  298.757655][ T9503]  </TASK>
[  299.279003][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  299.566394][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  299.566539][ T5603] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  299.608206][  T198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  299.685019][  T897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  299.686748][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  299.937325][  T198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  300.029696][ T9180] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  300.072813][ T9180] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  300.093808][ T9180] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  300.166720][ T9180] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  300.179549][ T9180] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  300.253334][ T9180] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  300.288143][ T9520] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  300.289663][ T9180] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  300.347260][ T9180] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  300.360724][ T9520] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  300.572315][ T5611] Bluetooth: hci19: command tx timeout
[  300.639178][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  300.774977][ T9195] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  300.884723][ T9195] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  300.904582][ T9195] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  300.946347][ T9195] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  300.978856][ T9195] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  301.035045][ T9195] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  301.053627][ T9195] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  301.101937][ T9195] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  301.549289][ T9256] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  301.591122][ T9256] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  301.609306][ T9256] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  301.657148][ T9256] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  301.698886][ T9256] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  301.757060][ T9256] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  301.787216][ T9256] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  301.901986][ T9256] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  301.941180][ T9546] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1103'.
[  301.945712][ T9180] 8021q: adding VLAN 0 to HW filter on device bond0
[  301.946120][ T9546] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1103'.
[  301.972825][ T9546] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1103'.
[  301.994506][ T9546] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1103'.
[  302.171939][ T9180] 8021q: adding VLAN 0 to HW filter on device team0
[  302.221350][ T4418] bridge0: port 1(bridge_slave_0) entered blocking state
[  302.221519][ T4418] bridge0: port 1(bridge_slave_0) entered forwarding state
[  302.265927][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state
[  302.266023][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state
[  302.438672][ T9195] 8021q: adding VLAN 0 to HW filter on device bond0
[  302.605687][ T9501] bridge0: port 1(bridge_slave_0) entered blocking state
[  302.605883][ T9501] bridge0: port 1(bridge_slave_0) entered disabled state
[  302.606219][ T9501] bridge_slave_0: entered allmulticast mode
[  302.631506][ T9501] bridge_slave_0: entered promiscuous mode
[  302.637419][ T9195] 8021q: adding VLAN 0 to HW filter on device team0
[  302.638092][ T5611] Bluetooth: hci19: command tx timeout
[  302.639567][ T9501] bridge0: port 2(bridge_slave_1) entered blocking state
[  302.639784][ T9501] bridge0: port 2(bridge_slave_1) entered disabled state
[  302.640040][ T9501] bridge_slave_1: entered allmulticast mode
[  302.643346][ T9501] bridge_slave_1: entered promiscuous mode
[  302.742592][ T9501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  302.768787][ T9501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  302.851683][ T9340] bridge0: port 1(bridge_slave_0) entered blocking state
[  302.851825][ T9340] bridge0: port 1(bridge_slave_0) entered forwarding state
[  302.951030][ T9501] team0: Port device team_slave_0 added
[  303.015674][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  303.015752][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  303.043432][ T9501] team0: Port device team_slave_1 added
[  303.077018][ T9256] 8021q: adding VLAN 0 to HW filter on device bond0
[  303.162969][ T9501] batman_adv: batadv0: Adding interface: batadv_slave_0
[  303.162980][ T9501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  303.162994][ T9501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  303.170496][ T9501] batman_adv: batadv0: Adding interface: batadv_slave_1
[  303.170513][ T9501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  303.170539][ T9501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  303.334416][ T9501] hsr_slave_0: entered promiscuous mode
[  303.336119][ T9501] hsr_slave_1: entered promiscuous mode
[  303.337345][ T9501] debugfs: 'hsr0' already exists in 'hsr'
[  303.337369][ T9501] Cannot create hsr debugfs directory
[  303.343035][ T9256] 8021q: adding VLAN 0 to HW filter on device team0
[  303.490431][ T9340] bridge0: port 1(bridge_slave_0) entered blocking state
[  303.490566][ T9340] bridge0: port 1(bridge_slave_0) entered forwarding state
[  303.600225][  T164] bridge0: port 2(bridge_slave_1) entered blocking state
[  303.600367][  T164] bridge0: port 2(bridge_slave_1) entered forwarding state
[  303.783696][ T5603] net_ratelimit: 13 callbacks suppressed
[  303.783713][ T5603] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  303.783737][ T5603] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  303.894096][ T9180] 8021q: adding VLAN 0 to HW filter on device batadv0
[  303.924087][ T5603] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  303.924294][ T5603] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  303.947975][ T5611] Bluetooth: hci5: command 0x0406 tx timeout
[  304.290165][ T9501] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  304.586164][ T9180] veth0_vlan: entered promiscuous mode
[  304.647335][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  304.718645][ T5601] Bluetooth: hci19: command tx timeout
[  304.808235][ T5603] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  304.832650][ T9501] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  304.869345][ T9180] veth1_vlan: entered promiscuous mode
[  304.878056][  T198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  304.958779][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  304.959416][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  305.038217][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  305.242003][ T9501] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.291284][ T9180] veth0_macvtap: entered promiscuous mode
[  305.310885][ T9195] 8021q: adding VLAN 0 to HW filter on device batadv0
[  305.314431][ T9180] veth1_macvtap: entered promiscuous mode
[  305.426905][ T9180] batman_adv: batadv0: Interface activated: batadv_slave_0
[  305.634368][ T9501] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.663906][ T9180] batman_adv: batadv0: Interface activated: batadv_slave_1
[  305.719303][ T9340] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  305.740747][ T9340] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  305.743817][ T9340] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  305.746803][ T9340] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  306.223468][ T9256] 8021q: adding VLAN 0 to HW filter on device batadv0
[  306.815733][ T5601] Bluetooth: hci19: command tx timeout
[  307.093099][ T4418] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  307.093121][ T4418] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  307.330902][ T9342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  307.330923][ T9342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  307.333939][ T9501] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  307.394041][ T9501] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  307.412490][ T9501] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  307.452695][ T9501] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  307.458238][ T9501] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  307.495815][ T9501] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  307.531977][ T9501] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  307.562387][ T9501] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  307.562885][ T9195] veth0_vlan: entered promiscuous mode
[  307.670598][ T9195] veth1_vlan: entered promiscuous mode
[  307.737399][ T9256] veth0_vlan: entered promiscuous mode
[  307.775666][ T9256] veth1_vlan: entered promiscuous mode
[  307.828407][ T9195] veth0_macvtap: entered promiscuous mode
[  307.857692][ T9195] veth1_macvtap: entered promiscuous mode
[  307.939035][ T9256] veth0_macvtap: entered promiscuous mode
[  307.942590][ T9195] batman_adv: batadv0: Interface activated: batadv_slave_0
[  307.971225][ T9256] veth1_macvtap: entered promiscuous mode
[  307.974163][ T9195] batman_adv: batadv0: Interface activated: batadv_slave_1
[  308.005582][  T164] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  308.011717][  T164] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  308.017672][  T164] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  308.043137][  T164] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  308.051709][ T9501] 8021q: adding VLAN 0 to HW filter on device bond0
[  308.071065][ T9256] batman_adv: batadv0: Interface activated: batadv_slave_0
[  308.181150][ T9256] batman_adv: batadv0: Interface activated: batadv_slave_1
[  308.468499][ T1177] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  308.477355][ T1177] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  308.480358][ T9501] 8021q: adding VLAN 0 to HW filter on device team0
[  308.508037][ T1177] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  308.544419][  T302] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  308.812787][ T5981] net_ratelimit: 13 callbacks suppressed
[  308.812806][ T5981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  308.869740][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  308.869840][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  308.896135][ T5706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  308.960058][  T897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  309.040903][ T5611] Bluetooth: hci6: command 0x0406 tx timeout
[  309.125624][ T5602] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  309.127525][ T5602] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  309.202733][  T164] bridge0: port 2(bridge_slave_1) entered blocking state
[  309.220656][  T164] bridge0: port 2(bridge_slave_1) entered forwarding state
[  309.391686][ T9341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  309.391706][ T9341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  309.588825][ T5706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  309.804796][ T9342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  309.804816][ T9342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  309.924043][  T164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  309.924065][  T164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  310.002759][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  310.131623][  T164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  310.131644][  T164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  310.162123][ T5602] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  310.163166][  T897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  310.170539][  T198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  311.149903][ T9501] 8021q: adding VLAN 0 to HW filter on device batadv0
[  311.417526][ T9501] veth0_vlan: entered promiscuous mode
[  311.431458][ T9501] veth1_vlan: entered promiscuous mode
[  311.473580][ T9501] veth0_macvtap: entered promiscuous mode
[  311.485153][ T9501] veth1_macvtap: entered promiscuous mode
[  311.514663][ T9501] batman_adv: batadv0: Interface activated: batadv_slave_0
[  311.533760][ T9501] batman_adv: batadv0: Interface activated: batadv_slave_1
[  311.550910][   T67] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  311.551151][   T67] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  311.551190][   T67] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  311.551223][   T67] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  312.129652][  T164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  312.129672][  T164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  312.524979][ T4418] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  312.525001][ T4418] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  313.184704][ T9658] tipc: Started in network mode
[  313.184735][ T9658] tipc: Node identity efcdab90785634122143658709badcfe, cluster identity 4568
[  313.185248][ T9658] tipc: New replicast peer: 127.0.0.1
[  313.185479][ T9658] tipc: Enabled bearer <udp:syz0>, priority 10
[  314.002282][ T5706] net_ratelimit: 15 callbacks suppressed
[  314.002304][ T5706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  314.297968][ T5602] tipc: Node number set to 3210880763
[  314.319402][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  314.319796][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  314.321918][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  314.410394][ T9679] netlink: 'syz.8.1114': attribute type 4 has an invalid length.
[  314.410496][ T9679] netlink: 'syz.8.1114': attribute type 2 has an invalid length.
[  314.744012][ T5735] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER)
[  314.761396][ T9674] ceph: No mds server is up or the cluster is laggy
[  314.798348][ T5706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  314.799830][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  315.358874][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  315.359504][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  315.373349][ T5602] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  315.919295][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  316.153625][ T9698] tipc: Started in network mode
[  316.153645][ T9698] tipc: Node identity efcdab90785634122143658709badcfe, cluster identity 4568
[  316.154142][ T9698] tipc: New replicast peer: 127.0.0.1
[  316.154368][ T9698] tipc: Enabled bearer <udp:syz0>, priority 10
[  316.513109][ T9706] __nla_validate_parse: 2 callbacks suppressed
[  316.513121][ T9706] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1123'.
[  316.513446][ T9706] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1123'.
[  316.513768][ T9706] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1123'.
[  316.514049][ T9706] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1123'.
[  316.514328][ T9706] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1123'.
[  317.204229][ T1337] ieee802154 phy0 wpan0: encryption failed: -22
[  317.204300][ T1337] ieee802154 phy1 wpan1: encryption failed: -22
[  317.267941][ T5735] tipc: Node number set to 3210880763
[  317.884558][ T5611] Bluetooth: hci20: unexpected cc 0x0c03 length: 249 > 1
[  317.929797][ T5611] Bluetooth: hci20: unexpected cc 0x1003 length: 249 > 9
[  317.933850][ T5611] Bluetooth: hci20: unexpected cc 0x1001 length: 249 > 9
[  317.935042][ T5611] Bluetooth: hci20: unexpected cc 0x0c23 length: 249 > 4
[  317.937685][ T5611] Bluetooth: hci20: unexpected cc 0x0c38 length: 249 > 2
[  318.727457][ T9734] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  319.441148][ T9748] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1135'.
[  319.441506][ T9748] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1135'.
[  319.442082][ T9748] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1135'.
[  319.442396][ T9748] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1135'.
[  319.442766][ T9748] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1135'.
[  319.521683][ T5735] net_ratelimit: 15 callbacks suppressed
[  319.521698][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  319.522034][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  319.522078][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  319.668994][ T9718] bridge0: port 1(bridge_slave_0) entered blocking state
[  319.669189][ T9718] bridge0: port 1(bridge_slave_0) entered disabled state
[  319.669777][ T9718] bridge_slave_0: entered allmulticast mode
[  319.671917][ T9718] bridge_slave_0: entered promiscuous mode
[  319.675434][ T9718] bridge0: port 2(bridge_slave_1) entered blocking state
[  319.675597][ T9718] bridge0: port 2(bridge_slave_1) entered disabled state
[  319.675825][ T9718] bridge_slave_1: entered allmulticast mode
[  319.681115][ T9718] bridge_slave_1: entered promiscuous mode
[  319.760504][ T5981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  319.760909][   T37] INFO: task syz.2.639:7641 blocked for more than 143 seconds.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  319.760929][   T37]       Not tainted syzkaller #0
[  319.760940][   T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  319.760949][   T37] task:syz.2.639       state:D stack:28424 pid:7641  tgid:7639  ppid:5598   task_flags:0x400040 flags:0x00080002
[  319.761003][   T37] Call Trace:
[  319.761011][   T37]  <TASK>
[  319.761025][   T37]  __schedule+0x16dc/0x5500
[  319.761072][   T37]  ? __pfx___schedule+0x10/0x10
[  319.761095][   T37]  ? irqentry_exit+0x218/0x8f0
[  319.761117][   T37]  ? trace_irq_disable+0x3b/0x140
[  319.761139][   T37]  ? __pfx___schedule+0x10/0x10
[  319.761157][   T37]  ? rt_mutex_slowlock_block+0x33a/0x680
[  319.761199][   T37]  rt_mutex_schedule+0x76/0xf0
[  319.761221][   T37]  rt_mutex_slowlock_block+0x55c/0x680
[  319.761257][   T37]  ? rt_mutex_slowlock_block+0x33a/0x680
[  319.761288][   T37]  rt_mutex_slowlock+0x2d4/0x780
[  319.761321][   T37]  ? rt_mutex_slowlock+0x1f2/0x780
[  319.761351][   T37]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[  319.761391][   T37]  ? write_threads+0x3a0/0x5a0
[  319.761424][   T37]  ? write_threads+0x3a0/0x5a0
[  319.761457][   T37]  ? write_threads+0x3a0/0x5a0
[  319.761484][   T37]  mutex_lock_nested+0x168/0x1d0
[  319.761519][   T37]  write_threads+0x3a0/0x5a0
[  319.761547][   T37]  ? __might_fault+0xaf/0x130
[  319.761571][   T37]  ? __pfx_write_threads+0x10/0x10
[  319.761619][   T37]  ? _copy_from_user+0x94/0xb0
[  319.761645][   T37]  ? simple_transaction_get+0x130/0x170
[  319.761671][   T37]  nfsctl_transaction_write+0x112/0x160
[  319.761703][   T37]  ? __pfx_nfsctl_transaction_write+0x10/0x10
[  319.761733][   T37]  vfs_write+0x29f/0xbb0
[  319.761769][   T37]  ? __pfx_vfs_write+0x10/0x10
[  319.761805][   T37]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  319.761830][   T37]  ? lockdep_hardirqs_on+0x7a/0x110
[  319.761854][   T37]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  319.761876][   T37]  ? mutex_lock_nested+0x152/0x1d0
[  319.761905][   T37]  ? fdget_pos+0x252/0x320
[  319.761936][   T37]  ksys_write+0x156/0x270
[  319.761981][   T37]  ? __pfx_ksys_write+0x10/0x10
[  319.762015][   T37]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  319.762039][   T37]  do_syscall_64+0x174/0x580
[  319.762063][   T37]  ? trace_irq_disable+0x3b/0x140
[  319.762082][   T37]  ? clear_bhb_loop+0x40/0x90
[  319.762106][   T37]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  319.762127][   T37] RIP: 0033:0x7f70ef2bde99
[  319.762144][   T37] RSP: 002b:00007f70ed4f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  319.762165][   T37] RAX: ffffffffffffffda RBX: 00007f70ef546090 RCX: 00007f70ef2bde99
[  319.762178][   T37] RDX: 0000000000000002 RSI: 0000200000000100 RDI: 0000000000000006
[  319.762191][   T37] RBP: 00007f70ef353eaf R08: 0000000000000000 R09: 0000000000000000
[  319.762204][   T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  319.762217][   T37] R13: 00007f70ef546128 R14: 00007f70ef546090 R15: 00007ffd4b657788
[  319.762248][   T37]  </TASK>
[  319.762257][   T37] INFO: task syz.1.659:7693 blocked for more than 143 seconds.
[  319.762270][   T37]       Not tainted syzkaller #0
[  319.762280][   T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  319.762289][   T37] task:syz.1.659       state:D stack:28000 pid:7693  tgid:7691  ppid:5595   task_flags:0x400140 flags:0x00080002
[  319.762370][   T37] Call Trace:
[  319.762376][   T37]  <TASK>
[  319.762388][   T37]  __schedule+0x16dc/0x5500
[  319.762441][   T37]  ? __pfx___schedule+0x10/0x10
[  319.762478][   T37]  rt_mutex_schedule+0x76/0xf0
[  319.762502][   T37]  rt_mutex_slowlock_block+0x55c/0x680
[  319.762548][   T37]  rt_mutex_slowlock+0x2d4/0x780
[  319.762581][   T37]  ? rt_mutex_slowlock+0x1f2/0x780
[  319.762613][   T37]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[  319.762655][   T37]  ? write_ports+0xb5/0xd20
[  319.762689][   T37]  ? write_ports+0xb5/0xd20
[  319.762724][   T37]  ? write_ports+0xb5/0xd20
[  319.762750][   T37]  mutex_lock_nested+0x168/0x1d0
[  319.762789][   T37]  write_ports+0xb5/0xd20
[  319.762819][   T37]  ? __pfx_write_ports+0x10/0x10
[  319.762845][   T37]  ? __might_fault+0xaf/0x130
[  319.762880][   T37]  ? _copy_from_user+0x94/0xb0
[  319.762903][   T37]  ? simple_transaction_get+0x130/0x170
[  319.762928][   T37]  nfsctl_transaction_write+0x112/0x160
[  319.762959][   T37]  ? __pfx_nfsctl_transaction_write+0x10/0x10
[  319.762990][   T37]  vfs_write+0x29f/0xbb0
[  319.763024][   T37]  ? __pfx_vfs_write+0x10/0x10
[  319.763053][   T37]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  319.763079][   T37]  ? lockdep_hardirqs_on+0x7a/0x110
[  319.763103][   T37]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  319.763127][   T37]  ? mutex_lock_nested+0x152/0x1d0
[  319.763156][   T37]  ? fdget_pos+0x252/0x320
[  319.763187][   T37]  ksys_write+0x156/0x270
[  319.763215][   T37]  ? __pfx_ksys_write+0x10/0x10
[  319.763249][   T37]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  319.763272][   T37]  do_syscall_64+0x174/0x580
[  319.763296][   T37]  ? trace_irq_disable+0x3b/0x140
[  319.763316][   T37]  ? clear_bhb_loop+0x40/0x90
[  319.763341][   T37]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  319.763362][   T37] RIP: 0033:0x7ff430cbde99
[  319.763379][   T37] RSP: 002b:00007ff42ef16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  319.763400][   T37] RAX: ffffffffffffffda RBX: 00007ff430f45fa0 RCX: 00007ff430cbde99
[  319.763415][   T37] RDX: 0000000000000009 RSI: 0000200000000140 RDI: 0000000000000003
[  319.763429][   T37] RBP: 00007ff430d53eaf R08: 0000000000000000 R09: 0000000000000000
[  319.763442][   T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  319.763454][   T37] R13: 00007ff430f46038 R14: 00007ff430f45fa0 R15: 00007ffdcdd8cff8
[  319.763488][   T37]  </TASK>
[  319.763496][   T37] INFO: task syz.1.659:7694 blocked for more than 143 seconds.
[  319.763510][   T37]       Not tainted syzkaller #0
[  319.763520][   T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  319.763528][   T37] task:syz.1.659       state:D stack:27496 pid:7694  tgid:7691  ppid:5595   task_flags:0x40[  319.763528][   T37] task:syz.1.659       state:D stack:27496 pid:7694  tgid:7691  ppid:5595   task_flags:0x400040 flags:0x00080002
[  319.763581][   T37] Call Trace:
[  319.763588][   T37]  <TASK>
[  319.763600][   T37]  __schedule+0x16dc/0x5500
[  319.763651][   T37]  ? __pfx___schedule+0x10/0x10
[  319.763688][   T37]  rt_mutex_schedule+0x76/0xf0
[  319.763712][   T37]  rt_mutex_slowlock_block+0x55c/0x680
[  319.763757][   T37]  rt_mutex_slowlock+0x2d4/0x780
[  319.763796][   T37]  ? rt_mutex_slowlock+0x1f2/0x780
[  319.763827][   T37]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[  319.763869][   T37]  ? write_ports+0xb5/0xd20
[  319.763903][   T37]  ? write_ports+0xb5/0xd20
[  319.763937][   T37]  ? write_ports+0xb5/0xd20
[  319.763964][   T37]  mutex_lock_nested+0x168/0x1d0
[  319.764000][   T37]  write_ports+0xb5/0xd20
[  319.764032][   T37]  ? __pfx_write_ports+0x10/0x10
[  319.764061][   T37]  ? __might_fault+0xaf/0x130
[  319.764102][   T37]  ? _copy_from_user+0x94/0xb0
[  319.764125][   T37]  ? simple_transaction_get+0x130/0x170
[  319.764150][   T37]  nfsctl_transaction_write+0x112/0x160
[  319.764182][   T37]  ? __pfx_nfsctl_transaction_write+0x10/0x10
[  319.764212][   T37]  vfs_write+0x29f/0xbb0
[  319.764246][   T37]  ? __pfx_vfs_write+0x10/0x10
[  319.764274][   T37]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  319.764299][   T37]  ? lockdep_hardirqs_on+0x7a/0x110
[  319.764323][   T37]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  319.764347][   T37]  ? mutex_lock_nested+0x152/0x1d0
[  319.764376][   T37]  ? fdget_pos+0x252/0x320
[  319.764407][   T37]  ksys_write+0x156/0x270
[  319.764435][   T37]  ? __pfx_ksys_write+0x10/0x10
[  319.764469][   T37]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  319.764492][   T37]  do_syscall_64+0x174/0x580
[  319.764515][   T37]  ? trace_irq_disable+0x3b/0x140
[  319.764535][   T37]  ? clear_bhb_loop+0x40/0x90
[  319.764560][   T37]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  319.764580][   T37] RIP: 0033:0x7ff430cbde99
[  319.764597][   T37] RSP: 002b:00007ff42eef5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  319.764617][   T37] RAX: ffffffffffffffda RBX: 00007ff430f46090 RCX: 00007ff430cbde99
[  319.764632][   T37] RDX: 0000000000000009 RSI: 0000200000000140 RDI: 0000000000000004
[  319.764645][   T37] RBP: 00007ff430d53eaf R08: 0000000000000000 R09: 0000000000000000
[  319.764658][   T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  319.764671][   T37] R13: 00007ff430f46128 R14: 00007ff430f46090 R15: 00007ffdcdd8cff8
[  319.764704][   T37]  </TASK>
[  319.764712][   T37] INFO: task syz.1.659:7695 blocked for more than 143 seconds.
[  319.764726][   T37]       Not tainted syzkaller #0
[  319.764736][   T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  319.764745][   T37] task:syz.1.659       state:D stack:28424 pid:7695  tgid:7691  ppid:5595   task_flags:0x400040 flags:0x00080002
[  319.764804][   T37] Call Trace:
[  319.764811][   T37]  <TASK>
[  319.764823][   T37]  __schedule+0x16dc/0x5500
[  319.764874][   T37]  ? __pfx___schedule+0x10/0x10
[  319.764912][   T37]  rt_mutex_schedule+0x76/0xf0
[  319.764935][   T37]  rt_mutex_slowlock_block+0x55c/0x680
[  319.764980][   T37]  rt_mutex_slowlock+0x2d4/0x780
[  319.765014][   T37]  ? rt_mutex_slowlock+0x1f2/0x780
[  319.765045][   T37]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[  319.765087][   T37]  ? write_threads+0x3a0/0x5a0
[  319.765121][   T37]  ? write_threads+0x3a0/0x5a0
[  319.765156][   T37]  ? write_threads+0x3a0/0x5a0
[  319.765182][   T37]  mutex_lock_nested+0x168/0x1d0
[  319.765218][   T37]  write_threads+0x3a0/0x5a0
[  319.765245][   T37]  ? __might_fault+0xaf/0x130
[  319.765269][   T37]  ? __pfx_write_threads+0x10/0x10
[  319.765316][   T37]  ? _copy_from_user+0x94/0xb0
[  319.765341][   T37]  ? simple_transaction_get+0x130/0x170
[  319.765367][   T37]  nfsctl_transaction_write+0x112/0x160
[  319.765398][   T37]  ? __pfx_nfsctl_transaction_write+0x10/0x10
[  319.765428][   T37]  vfs_write+0x29f/0xbb0
[  319.765463][   T37]  ? __pfx_vfs_write+0x10/0x10
[  319.765491][   T37]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  319.765516][   T37]  ? lockdep_hardirqs_on+0x7a/0x110
[  319.765540][   T37]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  319.765565][   T37]  ? mutex_lock_nested+0x152/0x1d0
[  319.765594][   T37]  ? fdget_pos+0x252/0x320
[  319.765624][   T37]  ksys_write+0x156/0x270
[  319.765652][   T37]  ? __pfx_ksys_write+0x10/0x10
[  319.765686][   T37]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  319.765708][   T37]  do_syscall_64+0x174/0x580
[  319.765732][   T37]  ? trace_irq_disable+0x3b/0x140
[  319.765752][   T37]  ? clear_bhb_loop+0x40/0x90
[  319.765784][   T37]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  319.765804][   T37] RIP: 0033:0x7ff430cbde99
[  319.765821][   T37] RSP: 002b:00007ff42eed4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  319.765840][   T37] RAX: ffffffffffffffda RBX: 00007ff430f46180 RCX: 00007ff430cbde99
[  319.765856][   T37] RDX: 0000000000000002 RSI: 00002000000001c0 RDI: 0000000000000005
[  319.765870][   T37] RBP: 00007ff430d53eaf R08: 0000000000000000 R09: 0000000000000000
[  319.765883][   T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  319.765896][   T37] R13: 00007ff430f46218 R14: 00007ff430f46180 R15: 00007ffdcdd8cff8
[  319.765928][   T37]  </TASK>
[  319.766071][   T37] 
[  319.766071][   T37] Showing all locks held in the system:
[  319.766087][   T37] 1 lock held by khungtaskd/37:
[  319.766098][   T37]  #0: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  319.766155][   T37] 9 locks held by kworker/u8:4/67:
[  319.766170][   T37] 9 locks held by kworker/u8:6/164:
[  319.766181][   T37]  #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  319.766234][   T37]  #1: ffffc90003a9fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  319.766285][   T37]  #2: ffff8880643308d8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420
[  319.766344][   T37]  #3: ffffffff8e059220 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[  319.766396][   T37]  #4: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[  319.766445][   T37]  #5: ffff888064330228 (&rdev->bss_lock){+...}-{3:3}, at: cfg80211_inform_single_bss_data+0xc22/0x1bf0
[  319.766501][   T37]  #6: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400
[  319.766557][   T37]  #7: ffffffff8e9b5240 (fill_pool_map-wait-type-override){+.+.}-{3:3}, at: debug_objects_fill_pool+0x3b/0x80
[  319.766604][   T37]  #8: ffff88813ffbc758 (&n->list_lock){+.+.}-{3:3}, at: get_from_partial_node+0x58/0x460
[  319.766660][   T37] 5 locks held by kworker/u8:7/302:
[  319.766672][   T37]  #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  319.766722][   T37]  #1: ffffc90003bdfc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  319.766773][   T37]  #2: ffff8880610308d8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420
[  319.766836][   T37]  #3: ffffffff8e9b5240 (fill_pool_map-wait-type-override){+.+.}-{3:3}, at: debug_objects_fill_pool+0x3b/0x80
[  319.766883][   T37]  #4: ffff88813ffbc758 (&n->list_lock){+.+.}-{3:3}, at: get_from_partial_node+0x58/0x460
[  319.766942][   T37] 9 locks held by kworker/u8:9/1177:
[  319.766953][   T37]  #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  319.767015][   T37]  #1: ffffc90005ef7c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  319.767065][   T37]  #2: ffff88805feb08d8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420
[  319.767120][   T37]  #3: ffffffff8e059220 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[  319.767170][   T37]  #4: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[  319.767220][   T37]  #5: ffff88805feb0228 (&rdev->bss_lock){+...}-{3:3}, at: cfg80211_inform_single_bss_data+0xc22/0x1bf0
[  319.767275][   T37]  #6: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400
[  319.767329][   T37]  #7: ffffffff8e9b5240 (fill_pool_map-wait-type-override){+.+.}-{3:3}, at: debug_objects_fill_pool+0x3b/0x80
[  319.767376][   T37]  #8: ffff88813ffbc758 (&n->list_lock){+.+.}-{3:3}, at: get_from_partial_node+0x58/0x460
[  319.767446][   T37] 2 locks held by getty/5350:
[  319.767457][   T37]  #0: ffff88803674d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  319.767507][   T37]  #1: ffffc90003cc62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360
[  319.767574][   T37] 3 locks held by syz.2.639/7640:
[  319.767585][   T37]  #0: ffff888035c8e528 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  319.767633][   T37]  #1: ffff88803d146500 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  319.767688][   T37]  #2: ffffffff8e4e9538 (
[  319.873160][ T9718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  319.951306][ T9718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  320.078453][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  320.162065][ T5611] Bluetooth: hci20: command tx timeout
[  320.289968][   T37] nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20
[  320.290022][   T37] 3 locks held by syz.2.639/7641:
[  320.290034][   T37]  #0: ffff88803619cb28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  320.290084][   T37]  #1: ffff88803d146500 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  320.290137][   T37]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3a0/0x5a0
[  320.290190][   T37] 3 locks held by syz.1.659/7693:
[  320.290201][   T37]  #0: ffff88802585d528 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  320.290254][   T37]  #1: ffff88802c388500 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  320.290306][   T37]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20
[  320.290358][   T37] 3 locks held by syz.1.659/7694:
[  320.290370][   T37]  #0: ffff88802585d728 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  320.290415][   T37]  #1: ffff88802c388500 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  320.290466][   T37]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20
[  320.290518][   T37] 3 locks held by syz.1.659/7695:
[  320.290529][   T37]  #0: ffff888037383528 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  320.290574][   T37]  #1: ffff88802c388500 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  320.290625][   T37]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3a0/0x5a0
[  320.290681][   T37] 3 locks held by syz.4.835/8254:
[  320.290692][   T37]  #0: ffff888035a60728 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  320.290736][   T37]  #1: ffff888062e8c500 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  320.290788][   T37]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30
[  320.290840][   T37] 3 locks held by syz.4.835/8257:
[  320.290852][   T37]  #0: ffff88802f64af28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  320.290897][   T37]  #1: ffff888062e8c500 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  320.290948][   T37]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20
[  320.291000][   T37] 3 locks held by syz.4.835/8260:
[  320.291011][   T37]  #0: ffff888034cc3d28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  320.291068][   T37]  #1: ffff888062e8c500 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  320.291120][   T37]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3a0/0x5a0
[  320.291172][   T37] 3 locks held by syz.3.877/8377:
[  320.291184][   T37]  #0: ffff88805bef3328 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  320.291256][   T37]  #1: ffff888063e06500 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  320.291308][   T37]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30
[  320.291360][   T37] 3 locks held by syz.3.877/8382:
[  320.291371][   T37]  #0: ffff8880265f8528 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  320.291416][   T37]  #1: ffff888063e06500 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  320.307338][   T37]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20
[  320.307399][   T37] 3 locks held by syz.3.877/8385:
[  320.307411][   T37]  #0: ffff88805bd02528 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  320.307459][   T37]  #1: ffff888063e06500 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  320.307511][   T37]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3a0/0x5a0
[  320.307563][   T37] 3 locks held by syz.5.886/8398:
[  320.307574][   T37]  #0: ffff8880265d3d28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  320.307620][   T37]  #1: ffff8880381a4500 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  320.307668][   T37]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30
[  320.307928][   T37] 3 locks held by syz.5.886/8399:
[  320.307941][   T37]  #0: ffff888022797b28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  320.307990][   T37]  #1: ffff8880381a4500 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  320.308039][   T37]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3a0/0x5a0
[  320.308092][   T37] 3 locks held by syz.5.886/8400:
[  320.308103][   T37]  #0: ffff8880265d2728 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  320.308149][   T37]  #1: ffff8880381a4500 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  320.308200][   T37]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20
[  320.308260][   T37] 3 locks held by syz.5.886/8401:
[  320.308271][   T37]  #0: ffff8880265d2b28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  320.308316][   T37]  #1: ffff8880381a4500 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  320.308368][   T37]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3a0/0x5a0
[  320.308420][   T37] 3 locks held by syz.6.913/8485:
[  320.308431][   T37]  #0: ffff88802b4b5928 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  320.308477][   T37]  #1: ffff88805c88a500 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  320.308528][   T37]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20
[  320.308580][   T37] 3 locks held by syz.6.913/8486:
[  320.308591][   T37]  #0: ffff88803e405528 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  320.308636][   T37]  #1: ffff88805c88a500 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  320.308688][   T37]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3a0/0x5a0
[  320.308739][   T37] 3 locks held by syz.0.915/8491:
[  320.308749][   T37]  #0: ffff888034b26b28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  320.308808][   T37]  #1: ffff88803cf3c500 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  320.308859][   T37]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30
[  320.332793][   T37] 3 locks held by syz.0.915/8492:
[  320.332811][   T37]  #0: ffff88802b4b4b28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  320.332867][   T37]  #1: ffff88803cf3c500 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  320.332921][   T37]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20
[  320.332976][   T37] 3 locks held by syz.0.915/8493:
[  320.332988][   T37]  #0: ffff888031b83928 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  320.333033][   T37]  #1: ffff88803cf3c500 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  320.333086][   T37]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3a0/0x5a0
[  320.333143][   T37] 3 locks held by syz.7.942/8679:
[  320.333155][   T37]  #0: ffff88805a648728 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  320.333201][   T37]  #1: ffff888041030500 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  320.333259][   T37]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20
[  320.333310][   T37] 3 locks held by syz.7.942/8682:
[  320.333321][   T37]  #0: ffff88802b50bf28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  320.333366][   T37]  #1: ffff888041030500 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  320.333418][   T37]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3a0/0x5a0
[  320.333471][   T37] 3 locks held by syz.9.953/8762:
[  320.333484][   T37]  #0: ffff88803d151b28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  320.333534][   T37]  #1: ffff88802f0e6500 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  320.333589][   T37]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30
[  320.333644][   T37] 3 locks held by syz.9.953/8763:
[  320.333655][   T37]  #0: ffff8880385e0f28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  320.333701][   T37]  #1: ffff88802f0e6500 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  320.333753][   T37]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20
[  320.333804][   T37] 3 locks held by syz.9.953/8764:
[  320.333816][   T37]  #0: ffff8880385e1728 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  320.333860][   T37]  #1: ffff88802f0e6500 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  320.333912][   T37]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3a0/0x5a0
[  320.333966][   T37] 3 locks held by syz.8.978/8893:
[  320.333977][   T37]  #0: ffff88806245d728 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  320.334023][   T37]  #1: ffff888063ed0500 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  320.334074][   T37]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30
[  320.334126][   T37] 3 locks held by syz.8.978/8894:
[  320.334137][   T37]  #0: ffff88805a61a328 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  320.334182][   T37]  #1: ffff888063ed0500 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  320.334241][   T37]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20
[  320.334292][   T37] 3 locks held by syz.8.978/8899:
[  320.334304][   T37]  #0: ffff88803e543128 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  320.334349][   T37]  #1: ffff888063ed0500 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  320.334400][   T37]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3a0/0x5a0
[  320.351422][   T37] 3 locks held by syz.8.978/8902:
[  320.351435][   T37]  #0: ffff88806b085928 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  320.351483][   T37]  #1: ffff888063ed0500 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  320.351537][   T37]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3a0/0x5a0
[  320.351589][   T37] 3 locks held by syz.1.979/8898:
[  320.351600][   T37]  #0: ffff88806b085b28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  320.351646][   T37]  #1: ffff888063254500 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  320.351698][   T37]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20
[  320.351750][   T37] 3 locks held by syz.1.979/8901:
[  320.351762][   T37]  #0: ffff88805a620728 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  320.351806][   T37]  #1: ffff888063254500 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  320.351858][   T37]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3a0/0x5a0
[  320.351915][   T37] 3 locks held by syz.4.1008/9039:
[  320.351927][   T37]  #0: ffff88803a625128 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  320.351972][   T37]  #1: ffff888026592500 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  320.352024][   T37]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20
[  320.352076][   T37] 3 locks held by syz.4.1008/9043:
[  320.352087][   T37]  #0: ffff88803e6d4b28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  320.352131][   T37]  #1: ffff888026592500 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  320.352183][   T37]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3a0/0x5a0
[  320.352242][   T37] 3 locks held by syz.2.1014/9056:
[  320.352253][   T37]  #0: ffff8880207d2128 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  320.352298][   T37]  #1: ffff88807e032500 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  320.352350][   T37]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3a0/0x5a0
[  320.352402][   T37] 3 locks held by syz.3.1024/9112:
[  320.352414][   T37]  #0: ffff888034cbfb28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  320.352458][   T37]  #1: ffff88808b768500 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  320.352507][   T37]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20
[  320.352557][   T37] 3 locks held by syz.3.1024/9113:
[  320.352568][   T37]  #0: ffff888034cc2128 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  320.352614][   T37]  #1: ffff88808b768500 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  320.352664][   T37]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3a0/0x5a0
[  320.352720][   T37] 2 locks held by syz-executor/9195:
[  320.352731][   T37]  #0: ffff88803b8ae0d0 (&type->s_umount_key#54){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0
[  320.352782][   T37]  #1: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x4e/0xd0
[  320.352831][   T37] 1 lock held by syz-executor/9256:
[  320.352844][   T37] 3 locks held by kworker/u8:21/9364:
[  320.352855][   T37]  #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  320.363707][   T37]  #1: ffffc900418e7c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  320.363773][   T37]  #2: ffffffff8f5b1df8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  320.363842][   T37] 3 locks held by syz.6.1066/9371:
[  320.363854][   T37]  #0: ffff8880265f9928 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  320.363902][   T37]  #1: ffff8880349de500 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  320.363955][   T37]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20
[  320.364009][   T37] 3 locks held by syz.6.1066/9374:
[  320.364021][   T37]  #0: ffff88803575cb28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  320.364066][   T37]  #1: ffff8880349de500 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  320.364118][   T37]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3a0/0x5a0
[  320.364174][   T37] 3 locks held by syz.5.1104/9558:
[  320.364186][   T37]  #0: ffff88803d0c1728 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  320.364237][   T37]  #1: ffff88803f5b0500 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  320.364289][   T37]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20
[  320.364342][   T37] 3 locks held by syz.0.1025/9612:
[  320.364353][   T37]  #0: ffff88803bd97328 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  320.364398][   T37]  #1: ffff888061af4500 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  320.364450][   T37]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30
[  320.364502][   T37] 3 locks held by syz.0.1025/9615:
[  320.364513][   T37]  #0: ffff88803a4b3328 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  320.364558][   T37]  #1: ffff888061af4500 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  320.364610][   T37]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20
[  320.364663][   T37] 3 locks held by syz.0.1025/9616:
[  320.364673][   T37]  #0: ffff888028ef9d28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  320.364718][   T37]  #1: ffff888061af4500 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  320.364770][   T37]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3a0/0x5a0
[  320.364821][   T37] 3 locks held by syz.8.1115/9681:
[  320.364833][   T37]  #0: ffff8880277ed128 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  320.364878][   T37]  #1: ffff88806b91e500 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  320.364929][   T37]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30
[  320.364981][   T37] 3 locks held by syz.8.1115/9682:
[  320.364992][   T37]  #0: ffff8880277ed528 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  320.365038][   T37]  #1: ffff88806b91e500 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  320.365089][   T37]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20
[  320.365141][   T37] 3 locks held by syz.8.1115/9683:
[  320.365153][   T37]  #0: ffff88803ec63528 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  320.365197][   T37]  #1: ffff88806b91e500 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  320.376227][   T37]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3a0/0x5a0
[  320.376287][   T37] 3 locks held by syz.8.1115/9684:
[  320.376298][   T37]  #0: ffff8880277ec928 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  320.376346][   T37]  #1: ffff88806b91e500 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  320.376399][   T37]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3a0/0x5a0
[  320.376450][   T37] 1 lock held by syz-executor/9718:
[  320.376477][   T37] 
[  320.376482][   T37] =============================================
[  320.376482][   T37] 
[  320.376492][   T37] NMI backtrace for cpu 1
[  320.376507][   T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  320.376528][   T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  320.376541][   T37] Call Trace:
[  320.376548][   T37]  <TASK>
[  320.376556][   T37]  dump_stack_lvl+0xe8/0x150
[  320.376588][   T37]  nmi_cpu_backtrace+0x274/0x2d0
[  320.376608][   T37]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  320.376640][   T37]  nmi_trigger_cpumask_backtrace+0x17a/0x380
[  320.376674][   T37]  sys_info+0x135/0x170
[  320.376701][   T37]  watchdog+0xfd7/0x1030
[  320.376726][   T37]  ? watchdog+0x1c7/0x1030
[  320.376750][   T37]  kthread+0x388/0x470
[  320.376780][   T37]  ? __pfx_watchdog+0x10/0x10
[  320.376795][   T37]  ? __pfx_kthread+0x10/0x10
[  320.376825][   T37]  ret_from_fork+0x514/0xb70
[  320.376858][   T37]  ? __pfx_ret_from_fork+0x10/0x10
[  320.376887][   T37]  ? __switch_to+0xc89/0x1420
[  320.376916][   T37]  ? __pfx_kthread+0x10/0x10
[  320.376943][   T37]  ret_from_fork_asm+0x1a/0x30
[  320.376975][   T37]  </TASK>
[  320.376998][   T37] Sending NMI from CPU 1 to CPUs 0:
[  320.377027][    C0] NMI backtrace for cpu 0
[  320.377042][    C0] CPU: 0 UID: 0 PID: 17 Comm: pr/legacy Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  320.377062][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  320.377081][    C0] RIP: 0010:io_serial_out+0x7c/0xc0
[  320.377110][    C0] Code: bc 6f fc 44 89 f9 d3 e5 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 2c 2f d9 fc 41 03 2e 89 d8 89 ea ee <5b> 41 5c 41 5e 41 5f 5d e9 97 70 f1 05 cc 44 89 f9 80 e1 07 38 c1
[  320.377126][    C0] RSP: 0018:ffffc90000167a70 EFLAGS: 00000202
[  320.377141][    C0] RAX: 0000000000000036 RBX: 0000000000000036 RCX: 0000000000000000
[  320.377153][    C0] RDX: 00000000000003f8 RSI: 0000000000000000 RDI: 0000000000000000
[  320.377164][    C0] RBP: 00000000000003f8 R08: 0000000000000000 R09: 0000000000000000
[  320.377175][    C0] R10: dffffc0000000000 R11: ffffffff85560dc0 R12: dffffc0000000000
[  320.377190][    C0] R13: ffffffff99e4acc0 R14: ffffffff99e4ad40 R15: 0000000000000000
[  320.377203][    C0] FS:  0000000000000000(0000) GS:ffff888125c41000(0000) knlGS:0000000000000000
[  320.377218][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  320.377231][    C0] CR2: 00005555695d1a78 CR3: 000000000dfb0000 CR4: 00000000003526f0
[  320.377247][    C0] Call Trace:
[  320.377254][    C0]  <TASK>
[  320.377263][    C0]  serial8250_console_write+0x1201/0x1b40
[  320.377296][    C0]  ? __pfx_serial8250_console_write+0x10/0x10
[  320.377321][    C0]  ? console_flush_one_record+0xfa/0xb50
[  320.377342][    C0]  ? console_flush_one_record+0x472/0xb50
[  320.377362][    C0]  console_flush_one_record+0x642/0xb50
[  320.377383][    C0]  ? console_flush_one_record+0xfa/0xb50
[  320.377402][    C0]  ? __pfx_console_flush_one_record+0x10/0x10
[  320.377421][    C0]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  320.377445][    C0]  legacy_kthread_func+0x1b6/0x250
[  320.377464][    C0]  ? __pfx_legacy_kthread_func+0x10/0x10
[  320.377481][    C0]  ? __pfx_autoremove_wake_function+0x10/0x10
[  320.377508][    C0]  ? __kthread_parkme+0x71/0x1f0
[  320.377532][    C0]  ? __kthread_parkme+0x196/0x1f0
[  320.377558][    C0]  kthread+0x388/0x470
[  320.377584][    C0]  ? __pfx_legacy_kthread_func+0x10/0x10
[  320.377600][    C0]  ? __pfx_kthread+0x10/0x10
[  320.377626][    C0]  ret_from_fork+0x514/0xb70
[  320.377655][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  320.377682][    C0]  ? __switch_to+0xc89/0x1420
[  320.377715][    C0]  ? __pfx_kthread+0x10/0x10
[  320.377739][    C0]  ret_from_fork_asm+0x1a/0x30
[  320.377765][    C0]  </TASK>
[  320.385413][   T37] Kernel panic - not syncing: hung_task: blocked tasks
[  320.385434][   T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  320.385457][   T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  320.385469][   T37] Call Trace:
[  320.385478][   T37]  <TASK>
[  320.385486][   T37]  vpanic+0x56c/0xa60
[  320.385510][   T37]  ? __pfx___schedule+0x10/0x10
[  320.385534][   T37]  ? __pfx_vpanic+0x10/0x10
[  320.385562][   T37]  panic+0xc5/0xd0
[  320.385579][   T37]  ? __pfx_panic+0x10/0x10
[  320.385596][   T37]  ? preempt_schedule_common+0x82/0xd0
[  320.385618][   T37]  ? preempt_schedule_thunk+0x16/0x40
[  320.385644][   T37]  ? nmi_trigger_cpumask_backtrace+0x314/0x380
[  320.385678][   T37]  ? nmi_trigger_cpumask_backtrace+0x319/0x380
[  320.385712][   T37]  watchdog+0x1030/0x1030
[  320.385739][   T37]  ? watchdog+0x1c7/0x1030
[  320.385763][   T37]  kthread+0x388/0x470
[  320.385792][   T37]  ? __pfx_watchdog+0x10/0x10
[  320.385809][   T37]  ? __pfx_kthread+0x10/0x10
[  320.385838][   T37]  ret_from_fork+0x514/0xb70
[  320.385871][   T37]  ? __pfx_ret_from_fork+0x10/0x10
[  320.385900][   T37]  ? __switch_to+0xc89/0x1420
[  320.385928][   T37]  ? __pfx_kthread+0x10/0x10
[  320.385958][   T37]  ret_from_fork_asm+0x1a/0x30
[  320.385991][   T37]  </TASK>
[  320.386263][   T37] Kernel Offset: disabled