last executing test programs: 2m48.112509552s ago: executing program 32 (id=107): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/conf/all/forwarding\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/ipv4/conf/lo/forwarding\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@ipv4_newroute={0x3c, 0x18, 0x401, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x1, 0x1}, [@RTA_DST={0x8, 0x1, @private=0xa010100}, @RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, 0x1}}, @RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, 0x1}}]}, 0x3c}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xd, &(0x7f0000000300)=@raw=[@generic={0xb7, 0x2, 0x0, 0x0, 0x2}, @generic={0x7b, 0xa, 0x2, 0xffc0}, @generic={0xb7, 0x2, 0x0, 0x0, 0x1}, @generic={0x63, 0xa, 0x2, 0xffc8}, @generic={0xb7, 0x2, 0x0, 0x0, 0xa010100}, @generic={0x63, 0xa, 0x2, 0xffd4}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0xb7, 0x0, 0x0, 0x0, 0x2}, @generic={0x95}], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r3, 0x0, 0x22, 0x64, &(0x7f0000000800)="00000000000000000000000008004500003c0000000040013cce0a0101010a010100", &(0x7f0000000900)=""/100, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m24.715757376s ago: executing program 1 (id=199): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='nfsd\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='-3 +4.0\n', 0x8) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='2\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='\\x01000000 2000000000 0 0 0 krb5 \\x01000000ffffff7f000000000000000011000000000102030405060708090a0b0c0d0e0f\n', 0x85) close(r3) r4 = socket$inet(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000500)={0x2, 0x801, @loopback}, 0x10) write(r4, &(0x7f0000000600)="80000070123456780000000000000002000186a300000004000000000000000600000024000000010000000100000001000000020000000401000000000000060000000800000001000000000000000100000020040405ff00000000000000000000000100"/116, 0x74) read(r4, &(0x7f0000000800)=""/100, 0x100) close(r4) 2m13.856132031s ago: executing program 2 (id=262): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) socket$unix(0x1, 0x1, 0x0) write(r0, &(0x7f0000000100)="00000000000000000000000008004500001c0000000040113cce7f0000017f000001003500350008a646", 0x2a) 2m12.820189943s ago: executing program 2 (id=266): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\x00', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000120)='./proc/sys/net/sctp/reconf_enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='1\x00', 0x1) close(r1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180)=0x2, 0x4) setsockopt(r2, 0x84, 0x7a, &(0x7f0000000200)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x7}, 0x8) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000280)=0x2, 0x4) setsockopt(r3, 0x84, 0x7a, &(0x7f00000002c0)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x7}, 0x8) listen(r2, 0x5) connect(r3, &(0x7f0000000380)=@in={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f00000003c0), 0x4) 2m12.633569387s ago: executing program 2 (id=267): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0xc, @local}, 0x10) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x1, 0x0, 0x0, 0x0, 0xc, @remote}, 0x10) syz_emit_ethernet(0x1a, &(0x7f0000000200)={@local, @remote, @void, {@llc={0x4, {@llc={0xc, 0xc, 's'}}}}}, 0x0) syz_emit_ethernet(0x1a, &(0x7f0000000300)={@local, @remote, @void, {@llc={0x4, {@llc={0xc, 0xc, 's'}}}}}, 0x0) 2m11.60418017s ago: executing program 2 (id=272): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="0102030405060708090a0b0c0d0e0f10", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="010001000000000000000000000000010000000000000000400e001c0000001c00"/56, 0x34}], 0x1, &(0x7f0000000500)=[@iv={0x20, 0x117, 0x2, 0xc, "111213140000000000000001"}, @op={0x18, 0x117, 0x1, 0x1}, @assoc={0x18, 0x117, 0x11, 0x18}], 0x50}, 0x0) 2m11.571753334s ago: executing program 2 (id=273): r0 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='addr\x00', &(0x7f0000000100)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='vers\x00', &(0x7f0000000180)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='port\x00', &(0x7f0000000200)='0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 2m11.375290078s ago: executing program 2 (id=275): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x1403, 0x5, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bind(r1, &(0x7f0000000300)=@in={0x2, 0x4e21, @loopback}, 0x10) listen(r1, 0x5) connect$inet(r2, &(0x7f0000000400)={0x2, 0x4e21, @loopback}, 0x10) accept(r1, 0x0, 0x0) close(r2) close(r1) 2m9.909608342s ago: executing program 4 (id=278): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800, 0x0, 0x2}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0xa, 0x0, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r2, &(0x7f0000000500)="01000000", 0x4) read(r1, &(0x7f0000000000), 0x4) write(r2, &(0x7f0000000600)="00001000003300004000000000000000", 0x10) read(r1, &(0x7f0000000140), 0x10) ppoll(&(0x7f0000000800)=[{r0, 0x4}], 0x1, 0x0, 0x0, 0x0) 2m6.686936742s ago: executing program 33 (id=199): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='nfsd\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='-3 +4.0\n', 0x8) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='2\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='\\x01000000 2000000000 0 0 0 krb5 \\x01000000ffffff7f000000000000000011000000000102030405060708090a0b0c0d0e0f\n', 0x85) close(r3) r4 = socket$inet(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000500)={0x2, 0x801, @loopback}, 0x10) write(r4, &(0x7f0000000600)="80000070123456780000000000000002000186a300000004000000000000000600000024000000010000000100000001000000020000000401000000000000060000000800000001000000000000000100000020040405ff00000000000000000000000100"/116, 0x74) read(r4, &(0x7f0000000800)=""/100, 0x100) close(r4) 2m4.811580656s ago: executing program 4 (id=280): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001100)=@newqdisc={0x6c, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}]}}]}, 0x6c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001500)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001680)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001c80)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001ec0)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002280)={0x0, 0x0, &(0x7f00000022c0)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002380)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 2m2.516725226s ago: executing program 4 (id=281): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @loopback}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe00003a4, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) 1m57.688433434s ago: executing program 4 (id=284): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback, @loopback}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000000)={@multicast2, @loopback, @loopback}, 0xc) nanosleep(&(0x7f0000000100)={0x0, 0x5f5e100}, 0x0) 1m56.508358817s ago: executing program 34 (id=120): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={&(0x7f0000000000), 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) 1m55.121306227s ago: executing program 35 (id=275): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x1403, 0x5, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bind(r1, &(0x7f0000000300)=@in={0x2, 0x4e21, @loopback}, 0x10) listen(r1, 0x5) connect$inet(r2, &(0x7f0000000400)={0x2, 0x4e21, @loopback}, 0x10) accept(r1, 0x0, 0x0) close(r2) close(r1) 1m54.688500771s ago: executing program 3 (id=287): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\x00', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000120)='./proc/sys/net/sctp/reconf_enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000140), 0x0) close(r1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt(r2, 0x84, 0x7d, &(0x7f0000000200)="0000000001000000", 0x8) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt(r3, 0x84, 0x7d, &(0x7f0000000300)="0000000001000000", 0x8) bind(r2, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x10) listen(r2, 0x5) connect(r3, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) 1m53.498182773s ago: executing program 4 (id=288): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\x00', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000120)='./proc/sys/net/sctp/reconf_enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='1\x00', 0x1) close(r1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180)=0x2, 0x4) setsockopt(r2, 0x84, 0x7a, &(0x7f0000000200)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x7}, 0x8) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000280)=0x2, 0x4) setsockopt(r3, 0x84, 0x7a, &(0x7f00000002c0)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x7}, 0x8) listen(r2, 0x5) connect(r3, &(0x7f0000000380)=@in={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f00000003c0), 0x4) 1m51.500617562s ago: executing program 3 (id=289): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='none\x00', &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/versions\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='-2 -3\n\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='3\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='1\n\x00', 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000340)={0x2, 0x801, @loopback}, 0x10) write(r4, &(0x7f0000000380)="80000040000000010000000000000002000186a30000000400000001000000010000001400000001000000000000000000000000000000000000000000000000000000000000000100000018", 0x44) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(&(0x7f0000000440)=@filename='none\x00', &(0x7f0000000480)='./proc\x00', &(0x7f00000004c0)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r5, &(0x7f0000000540)='nfsd 127.0.0.1 999999999 anonymous\n\x00', 0x23) 1m49.86926544s ago: executing program 4 (id=290): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./nfsd\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='tcp 2049\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000380)='1\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r2, &(0x7f0000000100)='\\x01000000 2000000000 0 0 0 krb5 \\x00000000ffffffff0000000000000000120000000000000000000000000000000000000000000000000000000000000000000000 client\n', 0x96) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000400)={0x2, 0x801, @loopback}, 0x10) write(r3, &(0x7f0000000500)="80000058000000010000000000000002000186a00000000300000000000000060000002400000001000000000000000100000002000000040100000000000006000000100000000000000000000000000000000018040402ff00"/108, 0x74) 1m35.886566048s ago: executing program 36 (id=289): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='none\x00', &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/versions\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='-2 -3\n\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='3\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='1\n\x00', 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000340)={0x2, 0x801, @loopback}, 0x10) write(r4, &(0x7f0000000380)="80000040000000010000000000000002000186a30000000400000001000000010000001400000001000000000000000000000000000000000000000000000000000000000000000100000018", 0x44) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(&(0x7f0000000440)=@filename='none\x00', &(0x7f0000000480)='./proc\x00', &(0x7f00000004c0)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r5, &(0x7f0000000540)='nfsd 127.0.0.1 999999999 anonymous\n\x00', 0x23) 1m34.79198202s ago: executing program 37 (id=290): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./nfsd\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='tcp 2049\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000380)='1\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r2, &(0x7f0000000100)='\\x01000000 2000000000 0 0 0 krb5 \\x00000000ffffffff0000000000000000120000000000000000000000000000000000000000000000000000000000000000000000 client\n', 0x96) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000400)={0x2, 0x801, @loopback}, 0x10) write(r3, &(0x7f0000000500)="80000058000000010000000000000002000186a00000000300000000000000060000002400000001000000000000000100000002000000040100000000000006000000100000000000000000000000000000000018040402ff00"/108, 0x74) 1m16.37881073s ago: executing program 6 (id=279): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={&(0x7f0000000100), 0x10, &(0x7f0000000200)={&(0x7f0000000300)=@newsa={0x14c, 0x10, 0x5, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {@in6=@loopback, 0x1234, 0x32}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x5c, 0x12, {{'gcm(aes)\x00'}, 0x80, 0x80, "000102030405060708090a0b0c0d0e0f"}}]}, 0x14c}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={&(0x7f0000000100), 0x10, &(0x7f0000000200)={&(0x7f0000000300)=@newpolicy={0xfc, 0x13, 0x5, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x32}, 0xa, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000400)="000102030405060708090a0b0c0d0e0f000102030405060708090a0b0c0d0e0f", 0x20, 0x8000, &(0x7f0000000500)={0xa, 0x1234, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000400)="000102030405060708090a0b0c0d0e0f000102030405060708090a0b0c0d0e0f", 0x20, 0x0, &(0x7f0000000500)={0xa, 0x1234, 0x0, @loopback}, 0x1c) 1m16.163595514s ago: executing program 6 (id=293): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./pipefs\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='-2 -3\x00', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)='udp 2049\x00', 0x9) close(r1) openat(0xffffffffffffff9c, &(0x7f0000000400)='./pipefs/nfsd/cld\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000540)='1\x00', 0x2) close(r2) r3 = socket$inet_udp(0x2, 0x2, 0x11) sendto$inet(r3, &(0x7f0000000600)='hello\x00', 0x5, 0x0, &(0x7f0000000700)={0x2, 0x8008, @loopback}, 0x10) 1m13.014048313s ago: executing program 8 (id=286): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r0, &(0x7f0000000000)=@in={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) bind(r1, &(0x7f0000000100)=@in={0x2, 0x0, @loopback}, 0x10) connect(r1, &(0x7f0000000200)=@in={0x2, 0x4e20, @loopback}, 0x10) accept(r0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000300), 0x14) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000400)={0x0, 0x1, 0x1, 0x1}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e20, @loopback}}, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x9c) nanosleep(&(0x7f0000000600)={0x1}, 0x0) 1m12.303850658s ago: executing program 7 (id=285): r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0xb8}, &(0x7f0000000100)=0xc0) 1m12.027776114s ago: executing program 7 (id=294): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x1001}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', 0x1}) ioctl$sock_ifreq(r1, 0x8943, &(0x7f0000000100)={'syzkaller1\x00', @ifru_ivalue=0x1}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$packet(r1, &(0x7f0000000300)="ffffffffffff00000000000008004500001c00000000401176c301010101010101011234123400080000", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x300, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$packet(r1, &(0x7f0000000300)="ffffffffffff00000000000008004500001c00000000401176c301010101010101011234123400080000", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x300, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) read(r0, &(0x7f0000000400), 0x1000) nanosleep(&(0x7f0000000500)={0x0, 0x989680}, 0x0) sched_yield() 1m11.829496752s ago: executing program 8 (id=295): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x1f90, @loopback}, 0x10) listen(r1, 0x5) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x1f90, @loopback}, 0x10) close(r2) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 1m10.617867081s ago: executing program 7 (id=296): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/portlist\x00', 0x0, 0x0) write(r0, &(0x7f0000000100)='2049\n', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='2049\n', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/portlist\x00', 0x2, 0x0) write(r2, &(0x7f0000000100)='2049\n', 0x5) 1m10.100458315s ago: executing program 7 (id=297): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x44, 0x25, 0x5, 0x0, 0x0, {0x3}, [@generic="300001800c0001006e66736400000000140002003132372e302e302e31000000000000000c000300ffffff7f00000000"]}, 0x44}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)={0x14, 0x25, 0x301, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 1m1.820847645s ago: executing program 0 (id=304): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="0b000200727865300000000008004100727865000a0033006c6f00000000"], 0x1f}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000400), r1) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000700)=ANY=[@ANYBLOB="0800010073797a300a0002006c6f00000000090003007278653000000500040001000000"], 0x24}}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) bind(r2, &(0x7f0000000800)=@in={0x2, 0x1f90, @empty}, 0x10) listen(r2, 0x5) connect(r3, &(0x7f0000000900)=@in={0x2, 0x1f90, @loopback}, 0x10) 1m1.35513812s ago: executing program 0 (id=305): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)=@newtfilter={0x9c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff2, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x68, 0x2, [@TCA_MATCHALL_ACT={0x64, 0x2, [@m_mpls={0x60, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x3}, 0x3}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}, @TCA_MPLS_LABEL={0x8, 0x5, 0x100}]}, {0x5, 0x6, '\x00'}, {0xc}, {0xc}}}]}]}}]}, 0x9c}}, 0x0) write(r1, &(0x7f0000000c00)="00008847000010014500001c00000000401100007f0000017f000001", 0x1c) 1m0.842251795s ago: executing program 38 (id=293): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./pipefs\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='-2 -3\x00', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)='udp 2049\x00', 0x9) close(r1) openat(0xffffffffffffff9c, &(0x7f0000000400)='./pipefs/nfsd/cld\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000540)='1\x00', 0x2) close(r2) r3 = socket$inet_udp(0x2, 0x2, 0x11) sendto$inet(r3, &(0x7f0000000600)='hello\x00', 0x5, 0x0, &(0x7f0000000700)={0x2, 0x8008, @loopback}, 0x10) 1m0.62537853s ago: executing program 0 (id=307): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='127.0.0.1:/export\x00', &(0x7f0000000100), &(0x7f0000000300)='nfs\x00', 0x0, &(0x7f0000000400)='addr=127.0.0.1,proto=udp,mountproto=udp,retry=0\x00') 59.626741131s ago: executing program 8 (id=309): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={&(0x7f0000000200), 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, r3, {0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress]}, 0x30}}, 0x0) 59.525006735s ago: executing program 0 (id=310): syz_emit_ethernet(0x56, &(0x7f0000000840)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x1c, 0x3a, 0x0, @private1, @mcast2, {[], @mlv2_query={0x82, 0x0, 0x0, 0x8, 0x45f8, @empty, 0x0, 0x0, 0xb, 0xf5}}}}}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) 59.198178494s ago: executing program 0 (id=311): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv4/ipfrag_max_dist\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='64\x00', 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x0) sendto$inet(r1, &(0x7f0000000100)="4500001c12342001400100007f000001010101010000000000000000", 0x1c, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000300)="4500001c12352001400100007f000001010101020000000000000000", 0x1c, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000400)="4500001c12362001400100007f000001010101030000000000000000", 0x1c, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 58.728376653s ago: executing program 8 (id=313): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000400)={0x2, 0x4e21, @local}, 0x10) listen(r1, 0x10) r2 = socket$inet_tcp(0x2, 0x801, 0x0) connect$inet(r2, &(0x7f0000000500)={0x2, 0x4e21, @local}, 0x10) accept$inet(r1, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)={0x18, 0x1404, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000b00)={0x18, 0x1404, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000e00)={0x18, 0x1404, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}}, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 58.704486156s ago: executing program 0 (id=314): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./nfsd\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='tcp 2049\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000380)='1\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r2, &(0x7f0000000100)='\\\\x01000000 2000000000 0 0 0 krb5 \\\\x00000000ffffffff0000000000000000120000000000000000000000000000000000000000000000000000000000000000000000 client\n', 0x96) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000400)={0x2, 0x801, @loopback}, 0x10) write(r3, &(0x7f0000000500)="80000058000000010000000000000002000186a00000000300000000000000060000002400000001000000000000000100000002000000040100000000000006000000100000000000000000000000000000000018040402ff00"/108, 0x74) 54.780123087s ago: executing program 39 (id=297): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x44, 0x25, 0x5, 0x0, 0x0, {0x3}, [@generic="300001800c0001006e66736400000000140002003132372e302e302e31000000000000000c000300ffffff7f00000000"]}, 0x44}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)={0x14, 0x25, 0x301, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 54.316879046s ago: executing program 9 (id=324): r0 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) r1 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='addr\x00', &(0x7f0000000200)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='port\x00', &(0x7f0000000280)='2049\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000002c0)='vers\x00', &(0x7f0000000300)='4.0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = accept(r0, 0x0, 0x0) read(r2, &(0x7f0000000400)=""/256, 0x100) write(r2, &(0x7f0000000400)='\x00'/256, 0x100) nanosleep(&(0x7f0000000600)={0x0, 0x5f5e100}, 0x0) 53.154378199s ago: executing program 9 (id=325): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x70, 0x0, 0x1, 0x1, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'ftp-20000\x00'}}]}, 0x70}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r1, &(0x7f0000000300)={0x2, 0x1500, @loopback}, 0x10) listen(r1, 0x5) r2 = socket$inet_tcp(0x2, 0x1, 0x6) connect$inet(r2, &(0x7f0000000400)={0x2, 0x1500, @loopback}, 0x10) 52.911711016s ago: executing program 9 (id=326): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x20, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_MODE={0xa, 0x2, {0xffff, 0x2}}]}, 0x20}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000200)="00112233445566778899", 0xa, 0x0, &(0x7f0000000300)={0x2, 0x1234, @loopback}, 0x10) 52.616566827s ago: executing program 9 (id=327): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0xa, r2, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r4, &(0x7f0000000500)="01000000", 0x4) read(r3, &(0x7f0000000000), 0x4) write(r4, &(0x7f0000000600)="00001000003300004000000000000000", 0x10) read(r3, &(0x7f0000000140), 0x10) ppoll(&(0x7f0000000800)=[{r0, 0x4}], 0x1, 0x0, 0x0, 0x0) 51.602163153s ago: executing program 9 (id=328): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./rpc_pipe\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./rpc_pipe\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, 0x0) mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000380)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=tcp\x00') mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000400)='addr=127.0.0.1,port=2049,proto=rdma,vers=3,mountport=2049,mountproto=rdma\x00') mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000480)='addr=127.0.0.1,vers=2,proto=udp\x00') mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000500)='nfs4\x00', 0x0, &(0x7f0000000540)='addr=127.0.0.1,port=2049,proto=tcp,clientaddr=127.0.0.1\x00') 51.05529654s ago: executing program 9 (id=329): r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6f, @loopback}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='127.0.0.1:/export\x00', &(0x7f0000000100), &(0x7f0000000300)='nfs\x00', 0x0, &(0x7f0000000400)='addr=127.0.0.1,proto=udp,mountproto=udp\x00') (async) nanosleep(&(0x7f0000000500)={0x0, 0x2faf080}, 0x0) recvfrom$inet(r0, &(0x7f0000000600)=""/28, 0x4, 0x0, &(0x7f0000000700)={0x2, 0x0, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000600), 0x1c, 0x0, &(0x7f0000000700), 0x10) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) 43.302002333s ago: executing program 40 (id=313): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000400)={0x2, 0x4e21, @local}, 0x10) listen(r1, 0x10) r2 = socket$inet_tcp(0x2, 0x801, 0x0) connect$inet(r2, &(0x7f0000000500)={0x2, 0x4e21, @local}, 0x10) accept$inet(r1, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)={0x18, 0x1404, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000b00)={0x18, 0x1404, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000e00)={0x18, 0x1404, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}}, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 43.19673423s ago: executing program 41 (id=314): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./nfsd\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='tcp 2049\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000380)='1\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r2, &(0x7f0000000100)='\\\\x01000000 2000000000 0 0 0 krb5 \\\\x00000000ffffffff0000000000000000120000000000000000000000000000000000000000000000000000000000000000000000 client\n', 0x96) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000400)={0x2, 0x801, @loopback}, 0x10) write(r3, &(0x7f0000000500)="80000058000000010000000000000002000186a00000000300000000000000060000002400000001000000000000000100000002000000040100000000000006000000100000000000000000000000000000000018040402ff00"/108, 0x74) 35.763420645s ago: executing program 42 (id=329): r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6f, @loopback}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='127.0.0.1:/export\x00', &(0x7f0000000100), &(0x7f0000000300)='nfs\x00', 0x0, &(0x7f0000000400)='addr=127.0.0.1,proto=udp,mountproto=udp\x00') (async) nanosleep(&(0x7f0000000500)={0x0, 0x2faf080}, 0x0) recvfrom$inet(r0, &(0x7f0000000600)=""/28, 0x4, 0x0, &(0x7f0000000700)={0x2, 0x0, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000600), 0x1c, 0x0, &(0x7f0000000700), 0x10) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) 24.492034243s ago: executing program 1 (id=306): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x38, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1001001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1122334455667788}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8877665544332211}]}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x50, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x3c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x38, 0x4, {'gcm(aes)\x00', 0x10, "000102030405060708090a0b0c0d0e0f"}}]}]}, 0x50}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @loopback}}}}]}]}, 0x54}}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r3, &(0x7f0000000500)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000000)='hello_tipc_crypto_world', 0x18}], 0x1}, 0x0) 24.070753179s ago: executing program 1 (id=333): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x1, 0x0, @rand_addr=0x1c101001, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @loopback}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c101001, @empty=0xe00003a4, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x1, 0x0, @rand_addr=0x1c101002, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @loopback}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c101002, @empty=0xe00003a4, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x1, 0x0, @rand_addr=0x1c101003, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @loopback}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c101003, @empty=0xe00003a4, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) syz_emit_ethernet(0x3e, &(0x7f0000000300)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x1, 0x0, @rand_addr=0x1c101004, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @loopback}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c101004, @empty=0xe00003a4, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) syz_emit_ethernet(0x3e, &(0x7f0000000400)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x1, 0x0, @rand_addr=0x1c101005, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @loopback}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c101005, @empty=0xe00003a4, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x1, 0x0, @rand_addr=0x1c101006, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @loopback}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c101006, @empty=0xe00003a4, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) syz_emit_ethernet(0x3e, &(0x7f0000000600)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x1, 0x0, @rand_addr=0x1c101007, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @loopback}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c101007, @empty=0xe00003a4, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) syz_emit_ethernet(0x3e, &(0x7f0000000700)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x1, 0x0, @rand_addr=0x1c101008, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @loopback}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c101008, @empty=0xe00003a4, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) 22.981040965s ago: executing program 1 (id=334): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='1\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='file net/sctp/* +p\n\x00', 0x14) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000600)=0x2, 0x4) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000600)=0x2, 0x4) setsockopt(r2, 0x84, 0x7d, &(0x7f0000000700)="0000000001000000", 0x8) setsockopt(r3, 0x84, 0x7d, &(0x7f0000000700)="0000000001000000", 0x8) bind(r2, &(0x7f0000000800)=@in={0x2, 0x2389, @loopback}, 0x10) bind(r3, &(0x7f0000000900)=@in={0x2, 0x238a, @loopback}, 0x10) listen(r2, 0x5) connect(r3, &(0x7f0000000800)=@in={0x2, 0x2389, @loopback}, 0x10) sendto(r3, &(0x7f0000000a00)='hello world\x00', 0xb, 0x0, 0x0, 0x0) 22.395420599s ago: executing program 1 (id=335): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./rpc_pipe\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./rpc_pipe\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, 0x0) mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000380)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=tcp\x00') mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000400)='addr=127.0.0.1,port=2049,proto=udp,vers=3,mountport=2049,mountproto=udp\x00') mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000480)='addr=127.0.0.1,vers=2,proto=udp\x00') mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000500)='nfs4\x00', 0x0, &(0x7f0000000540)='addr=127.0.0.1,port=2049,proto=tcp,clientaddr=127.0.0.1\x00') 21.315693099s ago: executing program 1 (id=336): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0xa, r2, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r4, &(0x7f0000000500)="01000000", 0x4) read(r3, &(0x7f0000000000), 0x4) write(r4, &(0x7f0000000600)="00001000003300004000000000000000", 0x10) read(r3, &(0x7f0000000140), 0x10) ppoll(&(0x7f0000000800)=[{r0, 0x4}], 0x1, 0x0, 0x0, 0x0) 17.211975342s ago: executing program 5 (id=338): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) listen(r1, 0x5) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ed) mount$9p_rdma(&(0x7f0000000100), &(0x7f0000000200)='./mnt\x00', &(0x7f0000000300), 0x0, &(0x7f0000000400)={'trans=rdma,', {'port', 0x3d, 0x4e20}}) 14.80239442s ago: executing program 5 (id=339): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x2382, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000040)={0x2, 0x2383, @loopback}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x2383, @loopback}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x2, &(0x7f0000000500)=ANY=[@ANYBLOB="b701000000000000b702000000000000b70300000000000085000000330000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@map=r2, r3, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r2, &(0x7f0000000240)='\x00\x00\x00\x00', &(0x7f0000000280)=@udp=r0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r2, &(0x7f0000000340)="01000000", &(0x7f0000000380)=@tcp=r1}, 0x20) write(r1, &(0x7f0000000700)='hello world\x00', 0xc) recvmsg(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000880)=""/128, 0x80}], 0x1}, 0x0) 13.672677391s ago: executing program 5 (id=340): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x1001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f8, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000120)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x1020304, @rand_addr=0x1020305}}}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'sit0\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'syzkaller1\x00', {0x2, 0x0, @rand_addr=0x1020304}}) write$tun(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="4500003c00000000400472b2010203050102030445000028000000004001b2ca01020305010203040800f71100000000"], 0x3c) 12.519758086s ago: executing program 5 (id=341): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/failslab/probability\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/failslab/times\x00', 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r2 = socket$inet_udp(0x2, 0x2, 0x0) write(r1, &(0x7f0000000180)='100', 0x3) write(r0, &(0x7f0000000100)='100', 0x3) sendto$inet(r2, &(0x7f0000000200)="00112233445566778899aabbccddeeff", 0x10, 0x0, &(0x7f0000000300)={0x2, 0x1234, @loopback}, 0x10) 12.492322777s ago: executing program 3 (id=331): r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6f, @loopback}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='127.0.0.1:/export\x00', &(0x7f0000000100), &(0x7f0000000300)='nfs\x00', 0x0, &(0x7f0000000400)='addr=127.0.0.1,proto=udp,mountproto=udp\x00') (async) recvfrom$inet(r0, &(0x7f0000000600)=""/4, 0x4, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000700)={0x2, 0x0, @empty}, 0x10) write(r0, &(0x7f0000000600)="00000000000000010000000000000000000000000000000000000801", 0x1c) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) 10.132317699s ago: executing program 5 (id=342): r0 = fsopen(&(0x7f0000000000)='nfsd\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) fsmount(r0, 0x0, 0x0) mount(&(0x7f0000000200)=@filename='nfsd\x00', &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000000)='nfsd\x00', 0x0, 0x0) 8.541950448s ago: executing program 3 (id=343): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x18) connect$rxrpc(r0, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x18) sendto$rxrpc(r0, &(0x7f0000000200)='A', 0x1, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000300)="00000000000000000000000000000000000000000600000000000001", 0x1c, 0x0, &(0x7f0000000400)={0x2, 0x1234, @loopback}, 0x10) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) 4.193628072s ago: executing program 43 (id=336): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0xa, r2, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r4, &(0x7f0000000500)="01000000", 0x4) read(r3, &(0x7f0000000000), 0x4) write(r4, &(0x7f0000000600)="00001000003300004000000000000000", 0x10) read(r3, &(0x7f0000000140), 0x10) ppoll(&(0x7f0000000800)=[{r0, 0x4}], 0x1, 0x0, 0x0, 0x0) 3.119487532s ago: executing program 3 (id=345): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4321, @loopback}, 0x10) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) connect$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4321, @loopback}}, 0x24) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "01"}], 0x18}, 0x0) recvfrom(r0, &(0x7f0000000300)=""/256, 0x100, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r3, &(0x7f0000000300), 0x20) read(r2, &(0x7f0000000700), 0x20) write(r3, &(0x7f0000000500)="0100", 0x2) read(r2, &(0x7f0000000314), 0x2) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x1234, @loopback}, 0x10) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/256, 0x100}], 0x1}, 0x0) 1.587594059s ago: executing program 5 (id=346): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/self/make-it-fail\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='1\n\x00', 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'veth0\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r2, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000100)='6\n\x00', 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r3, r2, 0x25, 0x0, @void}, 0x10) 0s ago: executing program 3 (id=347): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00', 0x1}) bind$inet(r1, &(0x7f0000000400)={0x2, 0x4e21, @loopback}, 0x10) listen(r1, 0x10) r2 = socket$inet_smc(0x2b, 0x801, 0x0) connect$inet(r2, &(0x7f0000000500)={0x2, 0x4e21, @loopback}, 0x10) accept$inet(r1, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)={0x18, 0x1404, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000b00)={0x18, 0x1404, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000e00)={0x18, 0x1404, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) kernel console output (not intermixed with test programs): ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 313.805720][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 313.805748][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 313.805775][ C1] mac80211_hwsim_beacon+0xb2/0x2b0 [ 313.805797][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 313.805822][ C1] __hrtimer_run_queues+0x3eb/0xaf0 [ 313.805872][ C1] hrtimer_run_softirq+0x18f/0x260 [ 313.805909][ C1] handle_softirqs+0x1d9/0x6c0 [ 313.805946][ C1] run_ktimerd+0x69/0x100 [ 313.805974][ C1] smpboot_thread_fn+0x57c/0xa80 [ 313.806005][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 313.806042][ C1] kthread+0x388/0x470 [ 313.806073][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 313.806100][ C1] ? __pfx_kthread+0x10/0x10 [ 313.806133][ C1] ret_from_fork+0x514/0xb70 [ 313.806168][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 313.806200][ C1] ? __switch_to+0xc89/0x1420 [ 313.806231][ C1] ? __pfx_kthread+0x10/0x10 [ 313.806264][ C1] ret_from_fork_asm+0x1a/0x30 [ 313.806301][ C1] [ 313.806313][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 313.806333][ C1] FAULT_INJECTION: forcing a failure. [ 313.806333][ C1] name failslab, interval 1, probability 100, space 0, times 57 [ 313.806340][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 313.806354][ C0] Call Trace: [ 313.806363][ C0] [ 313.806371][ C0] dump_stack_lvl+0xe8/0x150 [ 313.806404][ C0] should_fail_ex+0x467/0x600 [ 313.806441][ C0] should_failslab+0xa8/0x100 [ 313.806468][ C0] kmem_cache_alloc_node_noprof+0xae/0x670 [ 313.806491][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 313.806511][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 313.806540][ C0] __alloc_skb+0x1d7/0x7a0 [ 313.806566][ C0] __netdev_alloc_skb+0xc0/0x4b0 [ 313.806593][ C0] __ieee80211_beacon_get+0xc97/0x1820 [ 313.806622][ C0] ? __lock_acquire+0x683/0x2ce0 [ 313.806643][ C0] ? __ieee80211_beacon_get+0x34/0x1820 [ 313.806670][ C0] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 313.806698][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 313.806725][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 313.806764][ C0] mac80211_hwsim_beacon_tx+0x378/0x820 [ 313.806794][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 313.806821][ C0] __iterate_interfaces+0x2af/0x5a0 [ 313.806843][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 313.806871][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 313.806895][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 313.806923][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 313.806956][ C0] mac80211_hwsim_beacon+0xb2/0x2b0 [ 313.806979][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 313.807003][ C0] __hrtimer_run_queues+0x3eb/0xaf0 [ 313.807053][ C0] hrtimer_run_softirq+0x18f/0x260 [ 313.807089][ C0] handle_softirqs+0x1d9/0x6c0 [ 313.807125][ C0] run_ktimerd+0x69/0x100 [ 313.807153][ C0] smpboot_thread_fn+0x57c/0xa80 [ 313.807184][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 313.807221][ C0] kthread+0x388/0x470 [ 313.807252][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 313.807278][ C0] ? __pfx_kthread+0x10/0x10 [ 313.807310][ C0] ret_from_fork+0x514/0xb70 [ 313.807345][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 313.807377][ C0] ? __switch_to+0xc89/0x1420 [ 313.807408][ C0] ? __pfx_kthread+0x10/0x10 [ 313.807442][ C0] ret_from_fork_asm+0x1a/0x30 [ 313.807480][ C0] [ 313.807491][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 313.807512][ C0] FAULT_INJECTION: forcing a failure. [ 313.807512][ C0] name failslab, interval 1, probability 100, space 0, times 56 [ 313.807518][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 313.807534][ C1] Call Trace: [ 313.807542][ C1] [ 313.807550][ C1] dump_stack_lvl+0xe8/0x150 [ 313.807583][ C1] should_fail_ex+0x467/0x600 [ 313.807620][ C1] should_failslab+0xa8/0x100 [ 313.807645][ C1] kmem_cache_alloc_node_noprof+0xae/0x670 [ 313.807668][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 313.807688][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 313.807717][ C1] __alloc_skb+0x1d7/0x7a0 [ 313.807743][ C1] __netdev_alloc_skb+0xc0/0x4b0 [ 313.807771][ C1] __ieee80211_beacon_get+0xc97/0x1820 [ 313.807800][ C1] ? __lock_acquire+0x683/0x2ce0 [ 313.807821][ C1] ? __ieee80211_beacon_get+0x34/0x1820 [ 313.807847][ C1] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 313.807876][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 313.807903][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 313.807944][ C1] mac80211_hwsim_beacon_tx+0x378/0x820 [ 313.807974][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 313.808001][ C1] __iterate_interfaces+0x2af/0x5a0 [ 313.808022][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 313.808050][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 313.808074][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 313.808102][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 313.808129][ C1] mac80211_hwsim_beacon+0xb2/0x2b0 [ 313.808151][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 313.808175][ C1] __hrtimer_run_queues+0x3eb/0xaf0 [ 313.808225][ C1] hrtimer_run_softirq+0x18f/0x260 [ 313.808261][ C1] handle_softirqs+0x1d9/0x6c0 [ 313.808297][ C1] run_ktimerd+0x69/0x100 [ 313.808326][ C1] smpboot_thread_fn+0x57c/0xa80 [ 313.808356][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 313.808393][ C1] kthread+0x388/0x470 [ 313.808425][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 313.808457][ C1] ? __pfx_kthread+0x10/0x10 [ 313.808490][ C1] ret_from_fork+0x514/0xb70 [ 313.808524][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 313.808556][ C1] ? __switch_to+0xc89/0x1420 [ 313.808586][ C1] ? __pfx_kthread+0x10/0x10 [ 313.808619][ C1] ret_from_fork_asm+0x1a/0x30 [ 313.808656][ C1] [ 313.808668][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 313.808687][ C1] FAULT_INJECTION: forcing a failure. [ 313.808687][ C1] name failslab, interval 1, probability 100, space 0, times 55 [ 313.808695][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 313.808709][ C0] Call Trace: [ 313.808717][ C0] [ 313.808725][ C0] dump_stack_lvl+0xe8/0x150 [ 313.808757][ C0] should_fail_ex+0x467/0x600 [ 313.808794][ C0] should_failslab+0xa8/0x100 [ 313.808820][ C0] kmem_cache_alloc_node_noprof+0xae/0x670 [ 313.808843][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 313.808863][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 313.808891][ C0] __alloc_skb+0x1d7/0x7a0 [ 313.808918][ C0] __netdev_alloc_skb+0xc0/0x4b0 [ 313.808951][ C0] __ieee80211_beacon_get+0xc97/0x1820 [ 313.808980][ C0] ? __lock_acquire+0x683/0x2ce0 [ 313.809002][ C0] ? __ieee80211_beacon_get+0x34/0x1820 [ 313.809029][ C0] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 313.809057][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 313.809083][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 313.809124][ C0] mac80211_hwsim_beacon_tx+0x378/0x820 [ 313.809153][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 313.809180][ C0] __iterate_interfaces+0x2af/0x5a0 [ 313.809202][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 313.809230][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 313.809254][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 313.809281][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 313.809308][ C0] mac80211_hwsim_beacon+0xb2/0x2b0 [ 313.809330][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 313.809354][ C0] __hrtimer_run_queues+0x3eb/0xaf0 [ 313.809403][ C0] hrtimer_run_softirq+0x18f/0x260 [ 313.809442][ C0] handle_softirqs+0x1d9/0x6c0 [ 313.809478][ C0] run_ktimerd+0x69/0x100 [ 313.809507][ C0] smpboot_thread_fn+0x57c/0xa80 [ 313.809538][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 313.809574][ C0] kthread+0x388/0x470 [ 313.809605][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 313.809632][ C0] ? __pfx_kthread+0x10/0x10 [ 313.809664][ C0] ret_from_fork+0x514/0xb70 [ 313.809699][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 313.809731][ C0] ? __switch_to+0xc89/0x1420 [ 313.809762][ C0] ? __pfx_kthread+0x10/0x10 [ 313.809795][ C0] ret_from_fork_asm+0x1a/0x30 [ 313.809832][ C0] [ 313.809844][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 313.809863][ C0] FAULT_INJECTION: forcing a failure. [ 313.809863][ C0] name failslab, interval 1, probability 100, space 0, times 54 [ 313.809870][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 313.809884][ C1] Call Trace: [ 313.809893][ C1] [ 313.809901][ C1] dump_stack_lvl+0xe8/0x150 [ 313.809935][ C1] should_fail_ex+0x467/0x600 [ 313.809972][ C1] should_failslab+0xa8/0x100 [ 313.809998][ C1] kmem_cache_alloc_node_noprof+0xae/0x670 [ 313.810020][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 313.810040][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 313.810068][ C1] __alloc_skb+0x1d7/0x7a0 [ 313.810094][ C1] __netdev_alloc_skb+0xc0/0x4b0 [ 313.810122][ C1] __ieee80211_beacon_get+0xc97/0x1820 [ 313.810151][ C1] ? __lock_acquire+0x683/0x2ce0 [ 313.810173][ C1] ? __ieee80211_beacon_get+0x34/0x1820 [ 313.810199][ C1] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 313.810228][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 313.810254][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 313.810294][ C1] mac80211_hwsim_beacon_tx+0x378/0x820 [ 313.810323][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 313.810350][ C1] __iterate_interfaces+0x2af/0x5a0 [ 313.810372][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 313.810401][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 313.810425][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 313.810458][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 313.810485][ C1] mac80211_hwsim_beacon+0xb2/0x2b0 [ 313.810508][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 313.810532][ C1] __hrtimer_run_queues+0x3eb/0xaf0 [ 313.810582][ C1] hrtimer_run_softirq+0x18f/0x260 [ 313.810619][ C1] handle_softirqs+0x1d9/0x6c0 [ 313.810655][ C1] run_ktimerd+0x69/0x100 [ 313.810683][ C1] smpboot_thread_fn+0x57c/0xa80 [ 313.810714][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 313.810751][ C1] kthread+0x388/0x470 [ 313.810782][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 313.810809][ C1] ? __pfx_kthread+0x10/0x10 [ 313.810846][ C1] ret_from_fork+0x514/0xb70 [ 313.810880][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 313.810912][ C1] ? __switch_to+0xc89/0x1420 [ 313.810943][ C1] ? __pfx_kthread+0x10/0x10 [ 313.810976][ C1] ret_from_fork_asm+0x1a/0x30 [ 313.811013][ C1] [ 313.811025][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 313.811045][ C1] FAULT_INJECTION: forcing a failure. [ 313.811045][ C1] name failslab, interval 1, probability 100, space 0, times 53 [ 313.811051][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 313.811066][ C0] Call Trace: [ 313.811075][ C0] [ 313.811083][ C0] dump_stack_lvl+0xe8/0x150 [ 313.811115][ C0] should_fail_ex+0x467/0x600 [ 313.811152][ C0] should_failslab+0xa8/0x100 [ 313.811178][ C0] kmem_cache_alloc_node_noprof+0xae/0x670 [ 313.811201][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 313.811221][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 313.811250][ C0] __alloc_skb+0x1d7/0x7a0 [ 313.811276][ C0] __netdev_alloc_skb+0xc0/0x4b0 [ 313.811304][ C0] __ieee80211_beacon_get+0xc97/0x1820 [ 313.811333][ C0] ? __lock_acquire+0x683/0x2ce0 [ 313.811354][ C0] ? __ieee80211_beacon_get+0x34/0x1820 [ 313.811381][ C0] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 313.811410][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 313.811437][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 313.811477][ C0] mac80211_hwsim_beacon_tx+0x378/0x820 [ 313.811506][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 313.811534][ C0] __iterate_interfaces+0x2af/0x5a0 [ 313.811555][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 313.811583][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 313.811607][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 313.811635][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 313.811662][ C0] mac80211_hwsim_beacon+0xb2/0x2b0 [ 313.811684][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 313.811709][ C0] __hrtimer_run_queues+0x3eb/0xaf0 [ 313.811758][ C0] hrtimer_run_softirq+0x18f/0x260 [ 313.811795][ C0] handle_softirqs+0x1d9/0x6c0 [ 313.811831][ C0] run_ktimerd+0x69/0x100 [ 313.811860][ C0] smpboot_thread_fn+0x57c/0xa80 [ 313.811891][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 313.811927][ C0] kthread+0x388/0x470 [ 313.811965][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 313.811992][ C0] ? __pfx_kthread+0x10/0x10 [ 313.812024][ C0] ret_from_fork+0x514/0xb70 [ 313.812059][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 313.812091][ C0] ? __switch_to+0xc89/0x1420 [ 313.812121][ C0] ? __pfx_kthread+0x10/0x10 [ 313.812154][ C0] ret_from_fork_asm+0x1a/0x30 [ 313.812191][ C0] [ 313.812203][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 313.812222][ C0] FAULT_INJECTION: forcing a failure. [ 313.812222][ C0] name failslab, interval 1, probability 100, space 0, times 52 [ 313.812230][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 313.812244][ C1] Call Trace: [ 313.812252][ C1] [ 313.812260][ C1] dump_stack_lvl+0xe8/0x150 [ 313.812292][ C1] should_fail_ex+0x467/0x600 [ 313.812329][ C1] should_failslab+0xa8/0x100 [ 313.812355][ C1] kmem_cache_alloc_node_noprof+0xae/0x670 [ 313.812378][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 313.812398][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 313.812426][ C1] __alloc_skb+0x1d7/0x7a0 [ 313.812458][ C1] __netdev_alloc_skb+0xc0/0x4b0 [ 313.812486][ C1] __ieee80211_beacon_get+0xc97/0x1820 [ 313.812514][ C1] ? __lock_acquire+0x683/0x2ce0 [ 313.812535][ C1] ? __ieee80211_beacon_get+0x34/0x1820 [ 313.812562][ C1] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 313.812590][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 313.812616][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 313.812655][ C1] mac80211_hwsim_beacon_tx+0x378/0x820 [ 313.812684][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 313.812712][ C1] __iterate_interfaces+0x2af/0x5a0 [ 313.812733][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 313.812761][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 313.812785][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 313.812812][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 313.812839][ C1] mac80211_hwsim_beacon+0xb2/0x2b0 [ 313.812861][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 313.812885][ C1] __hrtimer_run_queues+0x3eb/0xaf0 [ 313.812937][ C1] hrtimer_run_softirq+0x18f/0x260 [ 313.812973][ C1] handle_softirqs+0x1d9/0x6c0 [ 313.813010][ C1] run_ktimerd+0x69/0x100 [ 313.813037][ C1] smpboot_thread_fn+0x57c/0xa80 [ 313.813068][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 313.813105][ C1] kthread+0x388/0x470 [ 313.813136][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 313.813162][ C1] ? __pfx_kthread+0x10/0x10 [ 313.813195][ C1] ret_from_fork+0x514/0xb70 [ 313.813230][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 313.813262][ C1] ? __switch_to+0xc89/0x1420 [ 313.813293][ C1] ? __pfx_kthread+0x10/0x10 [ 313.813330][ C1] ret_from_fork_asm+0x1a/0x30 [ 313.813372][ C1] [ 313.813384][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 313.813412][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 313.813425][ C0] Call Trace: [ 313.813435][ C0] [ 313.813427][ C1] FAULT_INJECTION: forcing a failure. [ 313.813427][ C1] name failslab, interval 1, probability 100, space 0, times 51 [ 313.813444][ C0] dump_stack_lvl+0xe8/0x150 [ 313.813480][ C0] should_fail_ex+0x467/0x600 [ 313.813516][ C0] should_failslab+0xa8/0x100 [ 313.813542][ C0] kmem_cache_alloc_node_noprof+0xae/0x670 [ 313.813565][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 313.813585][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 313.813613][ C0] __alloc_skb+0x1d7/0x7a0 [ 313.813640][ C0] __netdev_alloc_skb+0xc0/0x4b0 [ 313.813667][ C0] __ieee80211_beacon_get+0xc97/0x1820 [ 313.813696][ C0] ? __lock_acquire+0x683/0x2ce0 [ 313.813718][ C0] ? __ieee80211_beacon_get+0x34/0x1820 [ 313.813744][ C0] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 313.813772][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 313.813799][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 313.813838][ C0] mac80211_hwsim_beacon_tx+0x378/0x820 [ 313.813866][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 313.813894][ C0] __iterate_interfaces+0x2af/0x5a0 [ 313.813916][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 313.813950][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 313.813974][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 313.814003][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 313.814029][ C0] mac80211_hwsim_beacon+0xb2/0x2b0 [ 313.814051][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 313.814076][ C0] __hrtimer_run_queues+0x3eb/0xaf0 [ 313.814126][ C0] hrtimer_run_softirq+0x18f/0x260 [ 313.814162][ C0] handle_softirqs+0x1d9/0x6c0 [ 313.814199][ C0] run_ktimerd+0x69/0x100 [ 313.814227][ C0] smpboot_thread_fn+0x57c/0xa80 [ 313.814258][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 313.814294][ C0] kthread+0x388/0x470 [ 313.814326][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 313.814353][ C0] ? __pfx_kthread+0x10/0x10 [ 313.814386][ C0] ret_from_fork+0x514/0xb70 [ 313.814421][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 313.814454][ C0] ? __switch_to+0xc89/0x1420 [ 313.814485][ C0] ? __pfx_kthread+0x10/0x10 [ 313.814518][ C0] ret_from_fork_asm+0x1a/0x30 [ 313.814555][ C0] [ 313.814567][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 313.814587][ C0] FAULT_INJECTION: forcing a failure. [ 313.814587][ C0] name failslab, interval 1, probability 100, space 0, times 50 [ 313.814593][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 313.814607][ C1] Call Trace: [ 313.814615][ C1] [ 313.814624][ C1] dump_stack_lvl+0xe8/0x150 [ 313.814656][ C1] should_fail_ex+0x467/0x600 [ 313.814692][ C1] should_failslab+0xa8/0x100 [ 313.814718][ C1] kmem_cache_alloc_node_noprof+0xae/0x670 [ 313.814741][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 313.814761][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 313.814789][ C1] __alloc_skb+0x1d7/0x7a0 [ 313.814816][ C1] __netdev_alloc_skb+0xc0/0x4b0 [ 313.814844][ C1] __ieee80211_beacon_get+0xc97/0x1820 [ 313.814873][ C1] ? __lock_acquire+0x683/0x2ce0 [ 313.814894][ C1] ? __ieee80211_beacon_get+0x34/0x1820 [ 313.814921][ C1] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 313.814951][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 313.814977][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 313.815017][ C1] mac80211_hwsim_beacon_tx+0x378/0x820 [ 313.815046][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 313.815074][ C1] __iterate_interfaces+0x2af/0x5a0 [ 313.815096][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 313.815124][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 313.815149][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 313.815176][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 313.815203][ C1] mac80211_hwsim_beacon+0xb2/0x2b0 [ 313.815225][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 313.815250][ C1] __hrtimer_run_queues+0x3eb/0xaf0 [ 313.815300][ C1] hrtimer_run_softirq+0x18f/0x260 [ 313.815336][ C1] handle_softirqs+0x1d9/0x6c0 [ 313.815373][ C1] run_ktimerd+0x69/0x100 [ 313.815401][ C1] smpboot_thread_fn+0x57c/0xa80 [ 313.815438][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 313.815475][ C1] kthread+0x388/0x470 [ 313.815506][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 313.815533][ C1] ? __pfx_kthread+0x10/0x10 [ 313.815566][ C1] ret_from_fork+0x514/0xb70 [ 313.815600][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 313.815632][ C1] ? __switch_to+0xc89/0x1420 [ 313.815663][ C1] ? __pfx_kthread+0x10/0x10 [ 313.815696][ C1] ret_from_fork_asm+0x1a/0x30 [ 313.815734][ C1] [ 313.815746][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 313.815766][ C1] FAULT_INJECTION: forcing a failure. [ 313.815766][ C1] name failslab, interval 1, probability 100, space 0, times 49 [ 313.815772][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 313.815787][ C0] Call Trace: [ 313.815796][ C0] [ 313.815804][ C0] dump_stack_lvl+0xe8/0x150 [ 313.815836][ C0] should_fail_ex+0x467/0x600 [ 313.815872][ C0] should_failslab+0xa8/0x100 [ 313.815899][ C0] kmem_cache_alloc_node_noprof+0xae/0x670 [ 313.815922][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 313.815949][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 313.815978][ C0] __alloc_skb+0x1d7/0x7a0 [ 313.816004][ C0] __netdev_alloc_skb+0xc0/0x4b0 [ 313.816031][ C0] __ieee80211_beacon_get+0xc97/0x1820 [ 313.816060][ C0] ? __lock_acquire+0x683/0x2ce0 [ 313.816081][ C0] ? __ieee80211_beacon_get+0x34/0x1820 [ 313.816107][ C0] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 313.816135][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 313.816161][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 313.816200][ C0] mac80211_hwsim_beacon_tx+0x378/0x820 [ 313.816230][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 313.816257][ C0] __iterate_interfaces+0x2af/0x5a0 [ 313.816278][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 313.816306][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 313.816330][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 313.816357][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 313.816384][ C0] mac80211_hwsim_beacon+0xb2/0x2b0 [ 313.816407][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 313.816431][ C0] __hrtimer_run_queues+0x3eb/0xaf0 [ 313.816482][ C0] hrtimer_run_softirq+0x18f/0x260 [ 313.816519][ C0] handle_softirqs+0x1d9/0x6c0 [ 313.816556][ C0] run_ktimerd+0x69/0x100 [ 313.816585][ C0] smpboot_thread_fn+0x57c/0xa80 [ 313.816616][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 313.816653][ C0] kthread+0x388/0x470 [ 313.816685][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 313.816712][ C0] ? __pfx_kthread+0x10/0x10 [ 313.816744][ C0] ret_from_fork+0x514/0xb70 [ 313.816779][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 313.816812][ C0] ? __switch_to+0xc89/0x1420 [ 313.816842][ C0] ? __pfx_kthread+0x10/0x10 [ 313.816875][ C0] ret_from_fork_asm+0x1a/0x30 [ 313.816913][ C0] [ 313.816925][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 313.816950][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 313.816962][ C1] Call Trace: [ 313.816970][ C1] [ 313.816979][ C1] dump_stack_lvl+0xe8/0x150 [ 313.817015][ C1] should_fail_ex+0x467/0x600 [ 313.817057][ C1] should_failslab+0xa8/0x100 [ 313.817087][ C1] kmem_cache_alloc_node_noprof+0xae/0x670 [ 313.817113][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 313.817137][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 313.817170][ C1] __alloc_skb+0x1d7/0x7a0 [ 313.817198][ C1] __netdev_alloc_skb+0xc0/0x4b0 [ 313.817231][ C1] __ieee80211_beacon_get+0xc97/0x1820 [ 313.817264][ C1] ? __lock_acquire+0x683/0x2ce0 [ 313.817289][ C1] ? __ieee80211_beacon_get+0x34/0x1820 [ 313.817306][ T6187] FAULT_INJECTION: forcing a failure. [ 313.817306][ T6187] name failslab, interval 1, probability 100, space 0, times 47 [ 313.817322][ C1] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 313.817355][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 313.817381][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 313.817421][ C1] mac80211_hwsim_beacon_tx+0x378/0x820 [ 313.817459][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 313.817487][ C1] __iterate_interfaces+0x2af/0x5a0 [ 313.817509][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 313.817538][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 313.817562][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 313.817590][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 313.817617][ C1] mac80211_hwsim_beacon+0xb2/0x2b0 [ 313.817639][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 313.817663][ C1] __hrtimer_run_queues+0x3eb/0xaf0 [ 313.817712][ C1] hrtimer_run_softirq+0x18f/0x260 [ 313.817749][ C1] handle_softirqs+0x1d9/0x6c0 [ 313.817786][ C1] run_ktimerd+0x69/0x100 [ 313.817815][ C1] smpboot_thread_fn+0x57c/0xa80 [ 313.817846][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 313.817882][ C1] kthread+0x388/0x470 [ 313.817914][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 313.817942][ C1] ? __pfx_kthread+0x10/0x10 [ 313.817975][ C1] ret_from_fork+0x514/0xb70 [ 313.818010][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 313.818042][ C1] ? __switch_to+0xc89/0x1420 [ 313.818073][ C1] ? __pfx_kthread+0x10/0x10 [ 313.818105][ C1] ret_from_fork_asm+0x1a/0x30 [ 313.818142][ C1] [ 313.818156][ T6187] CPU: 0 UID: 0 PID: 6187 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 313.818181][ T6187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 313.818180][ C1] FAULT_INJECTION: forcing a failure. [ 313.818180][ C1] name failslab, interval 1, probability 100, space 0, times 46 [ 313.818197][ T6187] Workqueue: events_unbound nsim_dev_trap_report_work [ 313.818231][ T6187] Call Trace: [ 313.818238][ T6187] [ 313.818247][ T6187] dump_stack_lvl+0xe8/0x150 [ 313.818279][ T6187] should_fail_ex+0x467/0x600 [ 313.818315][ T6187] should_failslab+0xa8/0x100 [ 313.818340][ T6187] kmem_cache_alloc_node_noprof+0xae/0x670 [ 313.818362][ T6187] ? __alloc_skb+0x1d7/0x7a0 [ 313.818382][ T6187] ? __alloc_skb+0x1d7/0x7a0 [ 313.818409][ T6187] __alloc_skb+0x1d7/0x7a0 [ 313.818437][ T6187] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 313.818478][ T6187] ? process_scheduled_works+0xa20/0x14e0 [ 313.818503][ T6187] process_scheduled_works+0xa8e/0x14e0 [ 313.818557][ T6187] ? __pfx_process_scheduled_works+0x10/0x10 [ 313.818589][ T6187] ? assign_work+0x3cf/0x5d0 [ 313.818618][ T6187] worker_thread+0xa47/0xfb0 [ 313.818671][ T6187] kthread+0x388/0x470 [ 313.818702][ T6187] ? __pfx_worker_thread+0x10/0x10 [ 313.818725][ T6187] ? __pfx_kthread+0x10/0x10 [ 313.818757][ T6187] ret_from_fork+0x514/0xb70 [ 313.818791][ T6187] ? __pfx_ret_from_fork+0x10/0x10 [ 313.818823][ T6187] ? __switch_to+0xc89/0x1420 [ 313.818853][ T6187] ? __pfx_kthread+0x10/0x10 [ 313.818885][ T6187] ret_from_fork_asm+0x1a/0x30 [ 313.818922][ T6187] [ 313.818941][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 313.818962][ T6187] FAULT_INJECTION: forcing a failure. [ 313.818962][ T6187] name failslab, interval 1, probability 100, space 0, times 45 [ 313.818968][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 313.818984][ C1] Call Trace: [ 313.818993][ C1] [ 313.819001][ C1] dump_stack_lvl+0xe8/0x150 [ 313.819035][ C1] should_fail_ex+0x467/0x600 [ 313.819074][ C1] should_failslab+0xa8/0x100 [ 313.819101][ C1] kmem_cache_alloc_node_noprof+0xae/0x670 [ 313.819124][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 313.819144][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 313.819172][ C1] __alloc_skb+0x1d7/0x7a0 [ 313.819198][ C1] __netdev_alloc_skb+0xc0/0x4b0 [ 313.819226][ C1] __ieee80211_beacon_get+0xc97/0x1820 [ 313.819260][ C1] ? __lock_acquire+0x683/0x2ce0 [ 313.819282][ C1] ? __ieee80211_beacon_get+0x34/0x1820 [ 313.819309][ C1] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 313.819337][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 313.819363][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 313.819402][ C1] mac80211_hwsim_beacon_tx+0x378/0x820 [ 313.819438][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 313.819466][ C1] __iterate_interfaces+0x2af/0x5a0 [ 313.819487][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 313.819515][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 313.819539][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 313.819567][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 313.819594][ C1] mac80211_hwsim_beacon+0xb2/0x2b0 [ 313.819616][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 313.819640][ C1] __hrtimer_run_queues+0x3eb/0xaf0 [ 313.819690][ C1] hrtimer_run_softirq+0x18f/0x260 [ 313.819726][ C1] handle_softirqs+0x1d9/0x6c0 [ 313.819762][ C1] run_ktimerd+0x69/0x100 [ 313.819790][ C1] smpboot_thread_fn+0x57c/0xa80 [ 313.819821][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 313.819857][ C1] kthread+0x388/0x470 [ 313.819887][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 313.819914][ C1] ? __pfx_kthread+0x10/0x10 [ 313.819948][ C1] ret_from_fork+0x514/0xb70 [ 313.819983][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 313.820015][ C1] ? __switch_to+0xc89/0x1420 [ 313.820047][ C1] ? __pfx_kthread+0x10/0x10 [ 313.820080][ C1] ret_from_fork_asm+0x1a/0x30 [ 313.820117][ C1] [ 313.820131][ T6187] CPU: 0 UID: 0 PID: 6187 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 313.820157][ T6187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 313.820152][ C1] FAULT_INJECTION: forcing a failure. [ 313.820152][ C1] name failslab, interval 1, probability 100, space 0, times 44 [ 313.820172][ T6187] Workqueue: events_unbound nsim_dev_trap_report_work [ 313.820201][ T6187] Call Trace: [ 313.820208][ T6187] [ 313.820216][ T6187] dump_stack_lvl+0xe8/0x150 [ 313.820248][ T6187] should_fail_ex+0x467/0x600 [ 313.820283][ T6187] should_failslab+0xa8/0x100 [ 313.820309][ T6187] kmem_cache_alloc_node_noprof+0xae/0x670 [ 313.820331][ T6187] ? __alloc_skb+0x1d7/0x7a0 [ 313.820350][ T6187] ? __alloc_skb+0x1d7/0x7a0 [ 313.820377][ T6187] __alloc_skb+0x1d7/0x7a0 [ 313.820403][ T6187] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 313.820446][ T6187] ? process_scheduled_works+0xa20/0x14e0 [ 313.820471][ T6187] process_scheduled_works+0xa8e/0x14e0 [ 313.820524][ T6187] ? __pfx_process_scheduled_works+0x10/0x10 [ 313.820556][ T6187] ? assign_work+0x3cf/0x5d0 [ 313.820586][ T6187] worker_thread+0xa47/0xfb0 [ 313.820639][ T6187] kthread+0x388/0x470 [ 313.820670][ T6187] ? __pfx_worker_thread+0x10/0x10 [ 313.820694][ T6187] ? __pfx_kthread+0x10/0x10 [ 313.820726][ T6187] ret_from_fork+0x514/0xb70 [ 313.820760][ T6187] ? __pfx_ret_from_fork+0x10/0x10 [ 313.820791][ T6187] ? __switch_to+0xc89/0x1420 [ 313.820821][ T6187] ? __pfx_kthread+0x10/0x10 [ 313.820854][ T6187] ret_from_fork_asm+0x1a/0x30 [ 313.820890][ T6187] [ 313.820905][ T6187] FAULT_INJECTION: forcing a failure. [ 313.820905][ T6187] name failslab, interval 1, probability 100, space 0, times 43 [ 313.820903][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 313.820933][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 313.820947][ C1] Call Trace: [ 313.820954][ C1] [ 313.820962][ C1] dump_stack_lvl+0xe8/0x150 [ 313.820995][ C1] should_fail_ex+0x467/0x600 [ 313.821031][ C1] should_failslab+0xa8/0x100 [ 313.821058][ C1] kmem_cache_alloc_node_noprof+0xae/0x670 [ 313.821081][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 313.821100][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 313.821129][ C1] __alloc_skb+0x1d7/0x7a0 [ 313.821156][ C1] __netdev_alloc_skb+0xc0/0x4b0 [ 313.821184][ C1] __ieee80211_beacon_get+0xc97/0x1820 [ 313.821213][ C1] ? __lock_acquire+0x683/0x2ce0 [ 313.821235][ C1] ? __ieee80211_beacon_get+0x34/0x1820 [ 313.821263][ C1] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 313.821295][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 313.821322][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 313.821362][ C1] mac80211_hwsim_beacon_tx+0x378/0x820 [ 313.821391][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 313.821419][ C1] __iterate_interfaces+0x2af/0x5a0 [ 313.821447][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 313.821475][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 313.821499][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 313.821526][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 313.821552][ C1] mac80211_hwsim_beacon+0xb2/0x2b0 [ 313.821574][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 313.821599][ C1] __hrtimer_run_queues+0x3eb/0xaf0 [ 313.821648][ C1] hrtimer_run_softirq+0x18f/0x260 [ 313.821684][ C1] handle_softirqs+0x1d9/0x6c0 [ 313.821721][ C1] run_ktimerd+0x69/0x100 [ 313.821749][ C1] smpboot_thread_fn+0x57c/0xa80 [ 313.821779][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 313.821815][ C1] kthread+0x388/0x470 [ 313.821846][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 313.821872][ C1] ? __pfx_kthread+0x10/0x10 [ 313.821905][ C1] ret_from_fork+0x514/0xb70 [ 313.821940][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 313.821972][ C1] ? __switch_to+0xc89/0x1420 [ 313.822002][ C1] ? __pfx_kthread+0x10/0x10 [ 313.822035][ C1] ret_from_fork_asm+0x1a/0x30 [ 313.822072][ C1] [ 313.822085][ T6187] CPU: 0 UID: 0 PID: 6187 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 313.822111][ T6187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 313.822106][ C1] FAULT_INJECTION: forcing a failure. [ 313.822106][ C1] name failslab, interval 1, probability 100, space 0, times 42 [ 313.822126][ T6187] Workqueue: events_unbound nsim_dev_trap_report_work [ 313.822155][ T6187] Call Trace: [ 313.822162][ T6187] [ 313.822170][ T6187] dump_stack_lvl+0xe8/0x150 [ 313.822201][ T6187] should_fail_ex+0x467/0x600 [ 313.822237][ T6187] should_failslab+0xa8/0x100 [ 313.822262][ T6187] kmem_cache_alloc_node_noprof+0xae/0x670 [ 313.822285][ T6187] ? __alloc_skb+0x1d7/0x7a0 [ 313.822304][ T6187] ? __alloc_skb+0x1d7/0x7a0 [ 313.822332][ T6187] __alloc_skb+0x1d7/0x7a0 [ 313.822357][ T6187] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 313.822400][ T6187] ? process_scheduled_works+0xa20/0x14e0 [ 313.822424][ T6187] process_scheduled_works+0xa8e/0x14e0 [ 313.822479][ T6187] ? __pfx_process_scheduled_works+0x10/0x10 [ 313.822511][ T6187] ? assign_work+0x3cf/0x5d0 [ 313.822541][ T6187] worker_thread+0xa47/0xfb0 [ 313.822593][ T6187] kthread+0x388/0x470 [ 313.822623][ T6187] ? __pfx_worker_thread+0x10/0x10 [ 313.822647][ T6187] ? __pfx_kthread+0x10/0x10 [ 313.822679][ T6187] ret_from_fork+0x514/0xb70 [ 313.822713][ T6187] ? __pfx_ret_from_fork+0x10/0x10 [ 313.822745][ T6187] ? __switch_to+0xc89/0x1420 [ 313.822775][ T6187] ? __pfx_kthread+0x10/0x10 [ 313.822807][ T6187] ret_from_fork_asm+0x1a/0x30 [ 313.822843][ T6187] [ 313.822856][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 313.822858][ T6187] FAULT_INJECTION: forcing a failure. [ 313.822858][ T6187] name failslab, interval 1, probability 100, space 0, times 41 [ 313.822884][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 313.822897][ C1] Call Trace: [ 313.822904][ C1] [ 313.822913][ C1] dump_stack_lvl+0xe8/0x150 [ 313.822946][ C1] should_fail_ex+0x467/0x600 [ 313.822983][ C1] should_failslab+0xa8/0x100 [ 313.823009][ C1] kmem_cache_alloc_node_noprof+0xae/0x670 [ 313.823032][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 313.823052][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 313.823080][ C1] __alloc_skb+0x1d7/0x7a0 [ 313.823107][ C1] __netdev_alloc_skb+0xc0/0x4b0 [ 313.823134][ C1] __ieee80211_beacon_get+0xc97/0x1820 [ 313.823163][ C1] ? __lock_acquire+0x683/0x2ce0 [ 313.823184][ C1] ? __ieee80211_beacon_get+0x34/0x1820 [ 313.823211][ C1] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 313.823239][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 313.823265][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 313.823305][ C1] mac80211_hwsim_beacon_tx+0x378/0x820 [ 313.823339][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 313.823372][ C1] __iterate_interfaces+0x2af/0x5a0 [ 313.823399][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 313.823440][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 313.823469][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 313.823487][ T1455] FAULT_INJECTION: forcing a failure. [ 313.823487][ T1455] name failslab, interval 1, probability 100, space 0, times 40 [ 313.823504][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 313.823534][ C1] mac80211_hwsim_beacon+0xb2/0x2b0 [ 313.823556][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 313.823583][ C1] __hrtimer_run_queues+0x3eb/0xaf0 [ 313.823617][ T56] FAULT_INJECTION: forcing a failure. [ 313.823617][ T56] name failslab, interval 1, probability 100, space 0, times 39 [ 313.823643][ C1] hrtimer_run_softirq+0x18f/0x260 [ 313.823680][ C1] handle_softirqs+0x1d9/0x6c0 [ 313.823717][ C1] run_ktimerd+0x69/0x100 [ 313.823746][ C1] smpboot_thread_fn+0x57c/0xa80 [ 313.823776][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 313.823813][ C1] kthread+0x388/0x470 [ 313.823844][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 313.823871][ C1] ? __pfx_kthread+0x10/0x10 [ 313.823904][ C1] ret_from_fork+0x514/0xb70 [ 313.823940][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 313.823971][ C1] ? __switch_to+0xc89/0x1420 [ 313.824003][ C1] ? __pfx_kthread+0x10/0x10 [ 313.824036][ C1] ret_from_fork_asm+0x1a/0x30 [ 313.824074][ C1] [ 313.824086][ T56] CPU: 0 UID: 0 PID: 56 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 313.824112][ T56] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 313.824127][ T56] Workqueue: events_unbound nsim_dev_trap_report_work [ 313.824140][ C1] FAULT_INJECTION: forcing a failure. [ 313.824140][ C1] name failslab, interval 1, probability 100, space 0, times 38 [ 313.824156][ T56] [ 313.824163][ T56] Call Trace: [ 313.824172][ T56] [ 313.824180][ T56] dump_stack_lvl+0xe8/0x150 [ 313.824211][ T56] should_fail_ex+0x467/0x600 [ 313.824246][ T56] should_failslab+0xa8/0x100 [ 313.824271][ T56] kmem_cache_alloc_node_noprof+0xae/0x670 [ 313.824294][ T56] ? __alloc_skb+0x1d7/0x7a0 [ 313.824314][ T56] ? __alloc_skb+0x1d7/0x7a0 [ 313.824342][ T56] __alloc_skb+0x1d7/0x7a0 [ 313.824367][ T56] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 313.824410][ T56] ? process_scheduled_works+0xa20/0x14e0 [ 313.824435][ T56] process_scheduled_works+0xa8e/0x14e0 [ 313.824489][ T56] ? __pfx_process_scheduled_works+0x10/0x10 [ 313.824520][ T56] ? assign_work+0x3cf/0x5d0 [ 313.824550][ T56] worker_thread+0xa47/0xfb0 [ 313.824603][ T56] kthread+0x388/0x470 [ 313.824634][ T56] ? __pfx_worker_thread+0x10/0x10 [ 313.824657][ T56] ? __pfx_kthread+0x10/0x10 [ 313.824689][ T56] ret_from_fork+0x514/0xb70 [ 313.824723][ T56] ? __pfx_ret_from_fork+0x10/0x10 [ 313.824754][ T56] ? __switch_to+0xc89/0x1420 [ 313.824784][ T56] ? __pfx_kthread+0x10/0x10 [ 313.824816][ T56] ret_from_fork_asm+0x1a/0x30 [ 313.824853][ T56] [ 313.824867][ T56] FAULT_INJECTION: forcing a failure. [ 313.824867][ T56] name failslab, interval 1, probability 100, space 0, times 37 [ 313.824865][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 313.824895][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 313.824907][ C1] Call Trace: [ 313.824915][ C1] [ 313.824923][ C1] dump_stack_lvl+0xe8/0x150 [ 313.824957][ C1] should_fail_ex+0x467/0x600 [ 313.824994][ C1] should_failslab+0xa8/0x100 [ 313.825020][ C1] kmem_cache_alloc_node_noprof+0xae/0x670 [ 313.825042][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 313.825062][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 313.825090][ C1] __alloc_skb+0x1d7/0x7a0 [ 313.825117][ C1] __netdev_alloc_skb+0xc0/0x4b0 [ 313.825145][ C1] __ieee80211_beacon_get+0xc97/0x1820 [ 313.825174][ C1] ? __lock_acquire+0x683/0x2ce0 [ 313.825196][ C1] ? __ieee80211_beacon_get+0x34/0x1820 [ 313.825223][ C1] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 313.825251][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 313.825277][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 313.825317][ C1] mac80211_hwsim_beacon_tx+0x378/0x820 [ 313.825346][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 313.825374][ C1] __iterate_interfaces+0x2af/0x5a0 [ 313.825395][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 313.825423][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 313.825454][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 313.825482][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 313.825508][ C1] mac80211_hwsim_beacon+0xb2/0x2b0 [ 313.825531][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 313.825555][ C1] __hrtimer_run_queues+0x3eb/0xaf0 [ 313.825604][ C1] hrtimer_run_softirq+0x18f/0x260 [ 313.825658][ C1] handle_softirqs+0x1d9/0x6c0 [ 313.825700][ C1] run_ktimerd+0x69/0x100 [ 313.825733][ C1] smpboot_thread_fn+0x57c/0xa80 [ 313.825768][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 313.825791][ T7691] FAULT_INJECTION: forcing a failure. [ 313.825791][ T7691] name failslab, interval 1, probability 100, space 0, times 36 [ 313.825811][ C1] kthread+0x388/0x470 [ 313.825845][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 313.825871][ C1] ? __pfx_kthread+0x10/0x10 [ 313.825904][ C1] ret_from_fork+0x514/0xb70 [ 313.825941][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 313.825973][ C1] ? __switch_to+0xc89/0x1420 [ 313.826004][ C1] ? __pfx_kthread+0x10/0x10 [ 313.826037][ C1] ret_from_fork_asm+0x1a/0x30 [ 313.826075][ C1] [ 313.826088][ T7691] CPU: 0 UID: 0 PID: 7691 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 313.826113][ T7691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 313.826110][ C1] FAULT_INJECTION: forcing a failure. [ 313.826110][ C1] name failslab, interval 1, probability 100, space 0, times 35 [ 313.826126][ T7691] Call Trace: [ 313.826134][ T7691] [ 313.826143][ T7691] dump_stack_lvl+0xe8/0x150 [ 313.826175][ T7691] should_fail_ex+0x467/0x600 [ 313.826209][ T7691] should_failslab+0xa8/0x100 [ 313.826233][ T7691] kmem_cache_alloc_node_noprof+0xae/0x670 [ 313.826256][ T7691] ? __alloc_skb+0x1d7/0x7a0 [ 313.826275][ T7691] ? __alloc_skb+0x1d7/0x7a0 [ 313.826302][ T7691] __alloc_skb+0x1d7/0x7a0 [ 313.826328][ T7691] netlink_ack+0x136/0xb30 [ 313.826349][ T7691] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 313.826369][ T7691] ? ref_tracker_free+0x668/0x820 [ 313.826393][ T7691] ? __pfx_ref_tracker_free+0x10/0x10 [ 313.826413][ T7691] ? __asan_memcpy+0x40/0x70 [ 313.826452][ T7691] netlink_rcv_skb+0x2a4/0x4a0 [ 313.826478][ T7691] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 313.826501][ T7691] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 313.826537][ T7691] ? netlink_deliver_tap+0x2e/0x1b0 [ 313.826562][ T7691] ? netlink_deliver_tap+0x2e/0x1b0 [ 313.826592][ T7691] netlink_unicast+0x7f5/0x990 [ 313.826623][ T7691] netlink_sendmsg+0x813/0xb40 [ 313.826657][ T7691] ? __pfx_netlink_sendmsg+0x10/0x10 [ 313.826685][ T7691] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 313.826722][ T7691] ? __pfx_netlink_sendmsg+0x10/0x10 [ 313.826747][ T7691] sock_sendmsg_nosec+0x13a/0x180 [ 313.826781][ T7691] __sys_sendto+0x41e/0x5d0 [ 313.826808][ T7691] ? __pfx___sys_sendto+0x10/0x10 [ 313.826829][ T7691] ? lockdep_hardirqs_on+0x7a/0x110 [ 313.826864][ T7691] ? fput_close_sync+0x11f/0x240 [ 313.826885][ T7691] ? kmem_cache_free+0x526/0x6c0 [ 313.826915][ T7691] ? __pfx_fput_close_sync+0x10/0x10 [ 313.826952][ T7691] __x64_sys_sendto+0xde/0x100 [ 313.826975][ T7691] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.826997][ T7691] do_syscall_64+0x174/0x580 [ 313.827023][ T7691] ? clear_bhb_loop+0x40/0x90 [ 313.827048][ T7691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.827068][ T7691] RIP: 0033:0x7f6da239e6ce [ 313.827087][ T7691] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 313.827105][ T7691] RSP: 002b:00007ffe942649d8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 313.827125][ T7691] RAX: ffffffffffffffda RBX: 000055557d53e500 RCX: 00007f6da239e6ce [ 313.827141][ T7691] RDX: 0000000000000040 RSI: 00007f6da3194670 RDI: 0000000000000003 [ 313.827153][ T7691] RBP: 0000000000000001 R08: 00007ffe94264a54 R09: 000000000000000c [ 313.827165][ T7691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 313.827177][ T7691] R13: 0000000000000000 R14: 00007f6da3194670 R15: 0000000000000000 [ 313.827206][ T7691] [ 313.827218][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 313.827246][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 313.827260][ C1] Call Trace: [ 313.827269][ C1] [ 313.827279][ C1] dump_stack_lvl+0xe8/0x150 [ 313.827317][ C1] should_fail_ex+0x467/0x600 [ 313.827353][ T6240] FAULT_INJECTION: forcing a failure. [ 313.827353][ T6240] name failslab, interval 1, probability 100, space 0, times 33 [ 313.827360][ C1] should_failslab+0xa8/0x100 [ 313.827392][ C1] kmem_cache_alloc_node_noprof+0xae/0x670 [ 313.827415][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 313.827442][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 313.827471][ C1] __alloc_skb+0x1d7/0x7a0 [ 313.827497][ C1] __netdev_alloc_skb+0xc0/0x4b0 [ 313.827525][ C1] __ieee80211_beacon_get+0xc97/0x1820 [ 313.827559][ C1] ? __lock_acquire+0x683/0x2ce0 [ 313.827581][ C1] ? __ieee80211_beacon_get+0x34/0x1820 [ 313.827607][ C1] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 313.827636][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 313.827662][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 313.827701][ C1] mac80211_hwsim_beacon_tx+0x378/0x820 [ 313.827730][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 313.827757][ C1] __iterate_interfaces+0x2af/0x5a0 [ 313.827779][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 313.827807][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 313.827831][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 313.827858][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 313.827885][ C1] mac80211_hwsim_beacon+0xb2/0x2b0 [ 313.827907][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 313.827933][ C1] __hrtimer_run_queues+0x3eb/0xaf0 [ 313.827983][ C1] hrtimer_run_softirq+0x18f/0x260 [ 313.828019][ C1] handle_softirqs+0x1d9/0x6c0 [ 313.828056][ C1] run_ktimerd+0x69/0x100 [ 313.828085][ C1] smpboot_thread_fn+0x57c/0xa80 [ 313.828115][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 313.828152][ C1] kthread+0x388/0x470 [ 313.828183][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 313.828209][ C1] ? __pfx_kthread+0x10/0x10 [ 313.828242][ C1] ret_from_fork+0x514/0xb70 [ 313.828305][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 313.828338][ C1] ? __switch_to+0xc89/0x1420 [ 313.828368][ C1] ? __pfx_kthread+0x10/0x10 [ 313.828400][ C1] ret_from_fork_asm+0x1a/0x30 [ 313.828445][ C1] [ 313.828458][ T6240] CPU: 0 UID: 0 PID: 6240 Comm: kworker/u8:16 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 313.828484][ T6240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 313.828498][ T6240] Workqueue: events_unbound nsim_dev_trap_report_work [ 313.828515][ C1] FAULT_INJECTION: forcing a failure. [ 313.828515][ C1] name failslab, interval 1, probability 100, space 0, times 32 [ 313.828532][ T6240] Call Trace: [ 313.828540][ T6240] [ 313.828549][ T6240] dump_stack_lvl+0xe8/0x150 [ 313.828581][ T6240] should_fail_ex+0x467/0x600 [ 313.828617][ T6240] should_failslab+0xa8/0x100 [ 313.828643][ T6240] kmem_cache_alloc_node_noprof+0xae/0x670 [ 313.828665][ T6240] ? __alloc_skb+0x1d7/0x7a0 [ 313.828684][ T6240] ? __alloc_skb+0x1d7/0x7a0 [ 313.828712][ T6240] __alloc_skb+0x1d7/0x7a0 [ 313.828737][ T6240] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 313.828780][ T6240] ? process_scheduled_works+0xa20/0x14e0 [ 313.828805][ T6240] process_scheduled_works+0xa8e/0x14e0 [ 313.828858][ T6240] ? __pfx_process_scheduled_works+0x10/0x10 [ 313.828889][ T6240] ? assign_work+0x3cf/0x5d0 [ 313.828919][ T6240] worker_thread+0xa47/0xfb0 [ 313.828966][ T6240] ? __kthread_parkme+0x71/0x1f0 [ 313.829004][ T6240] kthread+0x388/0x470 [ 313.829034][ T6240] ? __pfx_worker_thread+0x10/0x10 [ 313.829057][ T6240] ? __pfx_kthread+0x10/0x10 [ 313.829088][ T6240] ret_from_fork+0x514/0xb70 [ 313.829122][ T6240] ? __pfx_ret_from_fork+0x10/0x10 [ 313.829154][ T6240] ? __switch_to+0xc89/0x1420 [ 313.829183][ T6240] ? __pfx_kthread+0x10/0x10 [ 313.829215][ T6240] ret_from_fork_asm+0x1a/0x30 [ 313.829252][ T6240] [ 313.829264][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 313.829291][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 313.829304][ C1] Call Trace: [ 313.829312][ C1] [ 313.829323][ C1] dump_stack_lvl+0xe8/0x150 [ 313.829360][ C1] should_fail_ex+0x467/0x600 [ 313.829404][ C1] should_failslab+0xa8/0x100 [ 313.829442][ C1] kmem_cache_alloc_node_noprof+0xae/0x670 [ 313.829470][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 313.829494][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 313.829527][ C1] __alloc_skb+0x1d7/0x7a0 [ 313.829558][ C1] wg_packet_send_keepalive+0x65/0x2c0 [ 313.829592][ C1] call_timer_fn+0x192/0x5e0 [ 313.829623][ C1] ? __pfx_wg_expired_send_persistent_keepalive+0x10/0x10 [ 313.829649][ C1] ? call_timer_fn+0xd4/0x5e0 [ 313.829678][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 313.829721][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 313.829752][ C1] ? __pfx_wg_expired_send_persistent_keepalive+0x10/0x10 [ 313.829778][ C1] __run_timer_base+0x67b/0x9b0 [ 313.829824][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 313.829859][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 313.829890][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 313.829928][ C1] run_timer_softirq+0xb7/0x170 [ 313.829957][ C1] handle_softirqs+0x1d9/0x6c0 [ 313.829997][ C1] run_ktimerd+0x69/0x100 [ 313.830031][ C1] smpboot_thread_fn+0x57c/0xa80 [ 313.830070][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 313.830114][ C1] kthread+0x388/0x470 [ 313.830151][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 313.830184][ C1] ? __pfx_kthread+0x10/0x10 [ 313.830223][ C1] ret_from_fork+0x514/0xb70 [ 313.830264][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 313.830302][ C1] ? __switch_to+0xc89/0x1420 [ 313.830338][ C1] ? __pfx_kthread+0x10/0x10 [ 313.830376][ C1] ret_from_fork_asm+0x1a/0x30 [ 313.830419][ C1] [ 313.830448][ C1] FAULT_INJECTION: forcing a failure. [ 313.830448][ C1] name failslab, interval 1, probability 100, space 0, times 30 [ 313.830477][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 313.830504][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 313.830518][ C1] Call Trace: [ 313.830527][ C1] [ 313.830536][ C1] dump_stack_lvl+0xe8/0x150 [ 313.830572][ C1] should_fail_ex+0x467/0x600 [ 313.830617][ C1] should_failslab+0xa8/0x100 [ 313.830649][ C1] kmem_cache_alloc_node_noprof+0xae/0x670 [ 313.830677][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 313.830701][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 313.830735][ C1] __alloc_skb+0x1d7/0x7a0 [ 313.830766][ C1] wg_packet_send_keepalive+0x65/0x2c0 [ 313.830799][ C1] call_timer_fn+0x192/0x5e0 [ 313.830828][ C1] ? __pfx_wg_expired_send_persistent_keepalive+0x10/0x10 [ 313.830858][ C1] ? call_timer_fn+0xd4/0x5e0 [ 313.830884][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 313.830925][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 313.830956][ C1] ? __pfx_wg_expired_send_persistent_keepalive+0x10/0x10 [ 313.830985][ C1] __run_timer_base+0x67b/0x9b0 [ 313.831031][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 313.831066][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 313.831099][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 313.831136][ C1] run_timer_softirq+0xb7/0x170 [ 313.831166][ C1] handle_softirqs+0x1d9/0x6c0 [ 313.831210][ C1] run_ktimerd+0x69/0x100 [ 313.831244][ C1] smpboot_thread_fn+0x57c/0xa80 [ 313.831280][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 313.831320][ C1] kthread+0x388/0x470 [ 313.831357][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 313.831388][ C1] ? __pfx_kthread+0x10/0x10 [ 313.831425][ C1] ret_from_fork+0x514/0xb70 [ 313.831475][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 313.831510][ C1] ? __switch_to+0xc89/0x1420 [ 313.831543][ C1] ? __pfx_kthread+0x10/0x10 [ 313.831581][ C1] ret_from_fork_asm+0x1a/0x30 [ 313.831623][ C1] [ 313.831690][ T68] FAULT_INJECTION: forcing a failure. [ 313.831690][ T68] name failslab, interval 1, probability 100, space 0, times 28 [ 313.831690][ C1] FAULT_INJECTION: forcing a failure. [ 313.831690][ C1] name failslab, interval 1, probability 100, space 0, times 28 [ 313.831723][ T68] CPU: 0 UID: 0 PID: 68 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 313.831745][ T68] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 313.831758][ T68] Workqueue: events_unbound nsim_dev_trap_report_work [ 313.831788][ T68] Call Trace: [ 313.831796][ T68] [ 313.831804][ T68] dump_stack_lvl+0xe8/0x150 [ 313.831835][ T68] should_fail_ex+0x467/0x600 [ 313.831871][ T68] should_failslab+0xa8/0x100 [ 313.831897][ T68] kmem_cache_alloc_node_noprof+0xae/0x670 [ 313.831920][ T68] ? __alloc_skb+0x1d7/0x7a0 [ 313.831947][ T68] ? __alloc_skb+0x1d7/0x7a0 [ 313.831975][ T68] __alloc_skb+0x1d7/0x7a0 [ 313.832001][ T68] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 313.832043][ T68] ? process_scheduled_works+0xa20/0x14e0 [ 313.832068][ T68] process_scheduled_works+0xa8e/0x14e0 [ 313.832121][ T68] ? __pfx_process_scheduled_works+0x10/0x10 [ 313.832153][ T68] ? assign_work+0x3cf/0x5d0 [ 313.832183][ T68] worker_thread+0xa47/0xfb0 [ 313.832223][ T68] ? __kthread_parkme+0x71/0x1f0 [ 313.832260][ T68] kthread+0x388/0x470 [ 313.832290][ T68] ? __pfx_worker_thread+0x10/0x10 [ 313.832314][ T68] ? __pfx_kthread+0x10/0x10 [ 313.832346][ T68] ret_from_fork+0x514/0xb70 [ 313.832380][ T68] ? __pfx_ret_from_fork+0x10/0x10 [ 313.832411][ T68] ? __switch_to+0xc89/0x1420 [ 313.832442][ T68] ? __pfx_kthread+0x10/0x10 [ 313.832474][ T68] ret_from_fork_asm+0x1a/0x30 [ 313.832511][ T68] [ 313.832526][ T68] FAULT_INJECTION: forcing a failure. [ 313.832526][ T68] name failslab, interval 1, probability 100, space 0, times 27 [ 313.832524][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 313.832554][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 313.832566][ C1] Call Trace: [ 313.832574][ C1] [ 313.832582][ C1] dump_stack_lvl+0xe8/0x150 [ 313.832615][ C1] should_fail_ex+0x467/0x600 [ 313.832651][ C1] should_failslab+0xa8/0x100 [ 313.832677][ C1] kmem_cache_alloc_node_noprof+0xae/0x670 [ 313.832700][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 313.832720][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 313.832748][ C1] __alloc_skb+0x1d7/0x7a0 [ 313.832774][ C1] ndisc_alloc_skb+0xa0/0x480 [ 313.832808][ C1] ndisc_send_rs+0x28e/0x6b0 [ 313.832836][ C1] ? ipv6_get_lladdr+0x392/0x400 [ 313.832863][ C1] ? ipv6_get_lladdr+0x2b/0x400 [ 313.832894][ C1] addrconf_rs_timer+0x2d2/0x6c0 [ 313.832919][ C1] ? call_timer_fn+0xd4/0x5e0 [ 313.832951][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 313.832977][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 313.833017][ C1] call_timer_fn+0x192/0x5e0 [ 313.833042][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 313.833065][ C1] ? call_timer_fn+0xd4/0x5e0 [ 313.833090][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 313.833128][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 313.833153][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 313.833179][ C1] __run_timer_base+0x67b/0x9b0 [ 313.833217][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 313.833246][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 313.833274][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 313.833305][ C1] run_timer_softirq+0xb7/0x170 [ 313.833334][ C1] handle_softirqs+0x1d9/0x6c0 [ 313.833375][ C1] run_ktimerd+0x69/0x100 [ 313.833409][ C1] smpboot_thread_fn+0x57c/0xa80 [ 313.833452][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 313.833495][ C1] kthread+0x388/0x470 [ 313.833532][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 313.833564][ C1] ? __pfx_kthread+0x10/0x10 [ 313.833602][ C1] ret_from_fork+0x514/0xb70 [ 313.833645][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 313.833683][ C1] ? __switch_to+0xc89/0x1420 [ 313.833717][ C1] ? __pfx_kthread+0x10/0x10 [ 313.833753][ C1] ret_from_fork_asm+0x1a/0x30 [ 313.833794][ C1] [ 313.835744][ T13] FAULT_INJECTION: forcing a failure. [ 313.835744][ T13] name failslab, interval 1, probability 100, space 0, times 25 [ 313.835834][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 313.835903][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 313.835956][ T13] Workqueue: events_unbound nsim_dev_trap_report_work [ 313.836047][ T13] Call Trace: [ 313.836076][ T13] [ 313.836099][ T13] dump_stack_lvl+0xe8/0x150 [ 313.836158][ T13] should_fail_ex+0x467/0x600 [ 313.836267][ T13] should_failslab+0xa8/0x100 [ 313.836345][ T13] kmem_cache_alloc_node_noprof+0xae/0x670 [ 313.836419][ T13] ? __alloc_skb+0x1d7/0x7a0 [ 313.836470][ T13] ? __alloc_skb+0x1d7/0x7a0 [ 313.836557][ T13] __alloc_skb+0x1d7/0x7a0 [ 313.836641][ T13] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 313.836771][ T13] ? process_scheduled_works+0xa20/0x14e0 [ 313.836862][ T13] process_scheduled_works+0xa8e/0x14e0 [ 313.837097][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 313.837196][ T13] ? assign_work+0x3cf/0x5d0 [ 313.837293][ T13] worker_thread+0xa47/0xfb0 [ 313.837477][ T13] kthread+0x388/0x470 [ 313.837566][ T13] ? __pfx_worker_thread+0x10/0x10 [ 313.837647][ T13] ? __pfx_kthread+0x10/0x10 [ 313.837744][ T13] ret_from_fork+0x514/0xb70 [ 313.837850][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 313.837955][ T13] ? __switch_to+0xc89/0x1420 [ 313.838045][ T13] ? __pfx_kthread+0x10/0x10 [ 313.838149][ T13] ret_from_fork_asm+0x1a/0x30 [ 313.838267][ T13] [ 313.840590][ T150] FAULT_INJECTION: forcing a failure. [ 313.840590][ T150] name failslab, interval 1, probability 100, space 0, times 24 [ 313.840678][ T150] CPU: 0 UID: 0 PID: 150 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 313.840744][ T150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 313.840786][ T150] Workqueue: events_unbound nsim_dev_trap_report_work [ 313.840884][ T150] Call Trace: [ 313.840908][ T150] [ 313.840948][ T150] dump_stack_lvl+0xe8/0x150 [ 313.841056][ T150] should_fail_ex+0x467/0x600 [ 313.841163][ T150] should_failslab+0xa8/0x100 [ 313.841241][ T150] kmem_cache_alloc_node_noprof+0xae/0x670 [ 313.841316][ T150] ? __alloc_skb+0x1d7/0x7a0 [ 313.841395][ T150] ? __alloc_skb+0x1d7/0x7a0 [ 313.841509][ T150] __alloc_skb+0x1d7/0x7a0 [ 313.841590][ T150] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 313.841724][ T150] ? process_scheduled_works+0xa20/0x14e0 [ 313.841802][ T150] process_scheduled_works+0xa8e/0x14e0 [ 313.841972][ T150] ? __pfx_process_scheduled_works+0x10/0x10 [ 313.842074][ T150] ? assign_work+0x3cf/0x5d0 [ 313.842145][ T150] worker_thread+0xa47/0xfb0 [ 313.842274][ T150] ? __kthread_parkme+0x71/0x1f0 [ 313.842396][ T150] kthread+0x388/0x470 [ 313.842479][ T150] ? __pfx_worker_thread+0x10/0x10 [ 313.842553][ T150] ? __pfx_kthread+0x10/0x10 [ 313.842648][ T150] ret_from_fork+0x514/0xb70 [ 313.842775][ T150] ? __pfx_ret_from_fork+0x10/0x10 [ 313.842884][ T150] ? __switch_to+0xc89/0x1420 [ 313.842982][ T150] ? __pfx_kthread+0x10/0x10 [ 313.843080][ T150] ret_from_fork_asm+0x1a/0x30 [ 313.843199][ T150] [ 313.845768][ T1455] CPU: 0 UID: 0 PID: 1455 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 313.845845][ T1455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 313.845888][ T1455] Workqueue: events_unbound nsim_dev_trap_report_work [ 313.845995][ T1455] Call Trace: [ 313.846024][ T1455] [ 313.846047][ T1455] dump_stack_lvl+0xe8/0x150 [ 313.846151][ T1455] should_fail_ex+0x467/0x600 [ 313.846260][ T1455] should_failslab+0xa8/0x100 [ 313.846344][ T1455] kmem_cache_alloc_node_noprof+0xae/0x670 [ 313.846411][ T1455] ? __alloc_skb+0x1d7/0x7a0 [ 313.846460][ T1455] ? __alloc_skb+0x1d7/0x7a0 [ 313.846529][ T1455] __alloc_skb+0x1d7/0x7a0 [ 313.846613][ T1455] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 313.846795][ T1455] ? process_scheduled_works+0xa20/0x14e0 [ 313.846877][ T1455] process_scheduled_works+0xa8e/0x14e0 [ 313.847059][ T1455] ? __pfx_process_scheduled_works+0x10/0x10 [ 313.847158][ T1455] ? assign_work+0x3cf/0x5d0 [ 313.847248][ T1455] worker_thread+0xa47/0xfb0 [ 313.847416][ T1455] kthread+0x388/0x470 [ 313.847507][ T1455] ? __pfx_worker_thread+0x10/0x10 [ 313.847584][ T1455] ? __pfx_kthread+0x10/0x10 [ 313.847688][ T1455] ret_from_fork+0x514/0xb70 [ 313.847797][ T1455] ? __pfx_ret_from_fork+0x10/0x10 [ 313.847895][ T1455] ? __switch_to+0xc89/0x1420 [ 313.847993][ T1455] ? __pfx_kthread+0x10/0x10 [ 313.848118][ T1455] ret_from_fork_asm+0x1a/0x30 [ 313.848269][ T1455] [ 313.848520][ T6191] FAULT_INJECTION: forcing a failure. [ 313.848520][ T6191] name failslab, interval 1, probability 100, space 0, times 22 [ 313.848949][ T6191] CPU: 0 UID: 0 PID: 6191 Comm: kworker/u8:14 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 313.849021][ T6191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 313.849062][ T6191] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 313.849145][ T6191] Call Trace: [ 313.849167][ T6191] [ 313.849197][ T6191] dump_stack_lvl+0xe8/0x150 [ 313.849288][ T6191] should_fail_ex+0x467/0x600 [ 313.849378][ T6191] should_failslab+0xa8/0x100 [ 313.849407][ T6191] kmem_cache_alloc_noprof+0xa4/0x650 [ 313.849466][ T6191] ? skb_clone+0x212/0x3a0 [ 313.849554][ T6191] ? skb_clone+0x212/0x3a0 [ 313.849666][ T6191] skb_clone+0x212/0x3a0 [ 313.849761][ T6191] batadv_iv_send_outstanding_bat_ogm_packet+0x571/0x790 [ 313.849872][ T6191] ? process_scheduled_works+0xa20/0x14e0 [ 313.849960][ T6191] process_scheduled_works+0xa8e/0x14e0 [ 313.850135][ T6191] ? __pfx_process_scheduled_works+0x10/0x10 [ 313.850232][ T6191] ? assign_work+0x3cf/0x5d0 [ 313.850320][ T6191] worker_thread+0xa47/0xfb0 [ 313.850479][ T6191] kthread+0x388/0x470 [ 313.850583][ T6191] ? __pfx_worker_thread+0x10/0x10 [ 313.850660][ T6191] ? __pfx_kthread+0x10/0x10 [ 313.850757][ T6191] ret_from_fork+0x514/0xb70 [ 313.850855][ T6191] ? __pfx_ret_from_fork+0x10/0x10 [ 313.850987][ T6191] ? __switch_to+0xc89/0x1420 [ 313.851084][ T6191] ? __pfx_kthread+0x10/0x10 [ 313.851180][ T6191] ret_from_fork_asm+0x1a/0x30 [ 313.851295][ T6191] [ 313.851431][ T1177] FAULT_INJECTION: forcing a failure. [ 313.851431][ T1177] name failslab, interval 1, probability 100, space 0, times 21 [ 313.851515][ T1177] CPU: 0 UID: 0 PID: 1177 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 313.851580][ T1177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 313.851614][ T1177] Workqueue: events_unbound nsim_dev_trap_report_work [ 313.851699][ T1177] Call Trace: [ 313.851722][ T1177] [ 313.851763][ T1177] dump_stack_lvl+0xe8/0x150 [ 313.851859][ T1177] should_fail_ex+0x467/0x600 [ 313.851900][ T1177] should_failslab+0xa8/0x100 [ 313.851975][ T1177] kmem_cache_alloc_node_noprof+0xae/0x670 [ 313.852042][ T1177] ? __alloc_skb+0x1d7/0x7a0 [ 313.852106][ T1177] ? __alloc_skb+0x1d7/0x7a0 [ 313.852193][ T1177] __alloc_skb+0x1d7/0x7a0 [ 313.852278][ T1177] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 313.852448][ T1177] ? process_scheduled_works+0xa20/0x14e0 [ 313.852525][ T1177] process_scheduled_works+0xa8e/0x14e0 [ 313.852691][ T1177] ? __pfx_process_scheduled_works+0x10/0x10 [ 313.852793][ T1177] ? assign_work+0x3cf/0x5d0 [ 313.852889][ T1177] worker_thread+0xa47/0xfb0 [ 313.853051][ T1177] ? __kthread_parkme+0x71/0x1f0 [ 313.853175][ T1177] kthread+0x388/0x470 [ 313.853270][ T1177] ? __pfx_worker_thread+0x10/0x10 [ 313.853325][ T1177] ? __pfx_kthread+0x10/0x10 [ 313.853376][ T1177] ret_from_fork+0x514/0xb70 [ 313.853487][ T1177] ? __pfx_ret_from_fork+0x10/0x10 [ 313.853586][ T1177] ? __switch_to+0xc89/0x1420 [ 313.853696][ T1177] ? __pfx_kthread+0x10/0x10 [ 313.853803][ T1177] ret_from_fork_asm+0x1a/0x30 [ 313.853920][ T1177] [ 313.854597][ T1174] FAULT_INJECTION: forcing a failure. [ 313.854597][ T1174] name failslab, interval 1, probability 100, space 0, times 20 [ 313.854681][ T1174] CPU: 0 UID: 0 PID: 1174 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 313.854753][ T1174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 313.854791][ T1174] Workqueue: events_unbound nsim_dev_trap_report_work [ 313.854825][ T1174] Call Trace: [ 313.854834][ T1174] [ 313.854859][ T1174] dump_stack_lvl+0xe8/0x150 [ 313.854994][ T1174] should_fail_ex+0x467/0x600 [ 313.855109][ T1174] should_failslab+0xa8/0x100 [ 313.855186][ T1174] kmem_cache_alloc_node_noprof+0xae/0x670 [ 313.855260][ T1174] ? __alloc_skb+0x1d7/0x7a0 [ 313.855322][ T1174] ? __alloc_skb+0x1d7/0x7a0 [ 313.855409][ T1174] __alloc_skb+0x1d7/0x7a0 [ 313.855491][ T1174] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 313.855621][ T1174] ? process_scheduled_works+0xa20/0x14e0 [ 313.855703][ T1174] process_scheduled_works+0xa8e/0x14e0 [ 313.855863][ T1174] ? __pfx_process_scheduled_works+0x10/0x10 [ 313.855975][ T1174] ? assign_work+0x3cf/0x5d0 [ 313.856063][ T1174] worker_thread+0xa47/0xfb0 [ 313.856238][ T1174] kthread+0x388/0x470 [ 313.856346][ T1174] ? __pfx_worker_thread+0x10/0x10 [ 313.856427][ T1174] ? __pfx_kthread+0x10/0x10 [ 313.856524][ T1174] ret_from_fork+0x514/0xb70 [ 313.856632][ T1174] ? __pfx_ret_from_fork+0x10/0x10 [ 313.856728][ T1174] ? __switch_to+0xc89/0x1420 [ 313.856823][ T1174] ? __pfx_kthread+0x10/0x10 [ 313.856933][ T1174] ret_from_fork_asm+0x1a/0x30 [ 313.857043][ T1174] [ 313.861031][ T5326] FAULT_INJECTION: forcing a failure. [ 313.861031][ T5326] name failslab, interval 1, probability 100, space 0, times 18 [ 313.861121][ T5326] CPU: 0 UID: 0 PID: 5326 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 313.861154][ T5326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 313.861198][ T5326] Workqueue: mld mld_dad_work [ 313.861265][ T5326] Call Trace: [ 313.861295][ T5326] [ 313.861317][ T5326] dump_stack_lvl+0xe8/0x150 [ 313.861424][ T5326] should_fail_ex+0x467/0x600 [ 313.861525][ T5326] should_failslab+0xa8/0x100 [ 313.861601][ T5326] kmem_cache_alloc_node_noprof+0xae/0x670 [ 313.861674][ T5326] ? __alloc_skb+0x1d7/0x7a0 [ 313.861730][ T5326] ? __alloc_skb+0x1d7/0x7a0 [ 313.861824][ T5326] __alloc_skb+0x1d7/0x7a0 [ 313.861902][ T5326] mld_newpack+0x165/0xcb0 [ 313.861999][ T5326] ? __lock_acquire+0x683/0x2ce0 [ 313.862115][ T5326] ? __pfx_mld_newpack+0x10/0x10 [ 313.862192][ T5326] ? __lock_acquire+0x683/0x2ce0 [ 313.862288][ T5326] add_grec+0x119f/0x19d0 [ 313.862418][ T5326] mld_send_initial_cr+0x288/0x550 [ 313.862481][ T5326] mld_dad_work+0x3d/0x480 [ 313.862558][ T5326] ? process_scheduled_works+0xa20/0x14e0 [ 313.862635][ T5326] process_scheduled_works+0xa8e/0x14e0 [ 313.862794][ T5326] ? __pfx_process_scheduled_works+0x10/0x10 [ 313.862891][ T5326] ? assign_work+0x3cf/0x5d0 [ 313.862987][ T5326] worker_thread+0xa47/0xfb0 [ 313.863099][ T5326] ? __kthread_parkme+0x71/0x1f0 [ 313.863217][ T5326] kthread+0x388/0x470 [ 313.863314][ T5326] ? __pfx_worker_thread+0x10/0x10 [ 313.863346][ T5326] ? __pfx_kthread+0x10/0x10 [ 313.863383][ T5326] ret_from_fork+0x514/0xb70 [ 313.863435][ T5326] ? __pfx_ret_from_fork+0x10/0x10 [ 313.863533][ T5326] ? __switch_to+0xc89/0x1420 [ 313.863619][ T5326] ? __pfx_kthread+0x10/0x10 [ 313.863722][ T5326] ret_from_fork_asm+0x1a/0x30 [ 313.863830][ T5326] [ 313.864298][ T56] CPU: 0 UID: 0 PID: 56 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 313.864373][ T56] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 313.864414][ T56] Workqueue: events_unbound nsim_dev_trap_report_work [ 313.864496][ T56] Call Trace: [ 313.864518][ T56] [ 313.864541][ T56] dump_stack_lvl+0xe8/0x150 [ 313.864639][ T56] should_fail_ex+0x467/0x600 [ 313.864747][ T56] should_failslab+0xa8/0x100 [ 313.864830][ T56] kmem_cache_alloc_node_noprof+0xae/0x670 [ 313.864900][ T56] ? __alloc_skb+0x1d7/0x7a0 [ 313.864967][ T56] ? __alloc_skb+0x1d7/0x7a0 [ 313.865053][ T56] __alloc_skb+0x1d7/0x7a0 [ 313.865138][ T56] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 313.865268][ T56] ? process_scheduled_works+0xa20/0x14e0 [ 313.865352][ T56] process_scheduled_works+0xa8e/0x14e0 [ 313.865506][ T56] ? __pfx_process_scheduled_works+0x10/0x10 [ 313.865578][ T56] ? assign_work+0x3cf/0x5d0 [ 313.865684][ T56] worker_thread+0xa47/0xfb0 [ 313.865850][ T56] kthread+0x388/0x470 [ 313.865960][ T56] ? __pfx_worker_thread+0x10/0x10 [ 313.866043][ T56] ? __pfx_kthread+0x10/0x10 [ 313.866140][ T56] ret_from_fork+0x514/0xb70 [ 313.866247][ T56] ? __pfx_ret_from_fork+0x10/0x10 [ 313.866337][ T56] ? __switch_to+0xc89/0x1420 [ 313.866444][ T56] ? __pfx_kthread+0x10/0x10 [ 313.866545][ T56] ret_from_fork_asm+0x1a/0x30 [ 313.866656][ T56] [ 313.866828][ T6240] FAULT_INJECTION: forcing a failure. [ 313.866828][ T6240] name failslab, interval 1, probability 100, space 0, times 18 [ 313.866942][ T6240] CPU: 0 UID: 0 PID: 6240 Comm: kworker/u8:16 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 313.867008][ T6240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 313.867049][ T6240] Workqueue: events_unbound nsim_dev_trap_report_work [ 313.867134][ T6240] Call Trace: [ 313.867156][ T6240] [ 313.867186][ T6240] dump_stack_lvl+0xe8/0x150 [ 313.867284][ T6240] should_fail_ex+0x467/0x600 [ 313.867394][ T6240] should_failslab+0xa8/0x100 [ 313.867464][ T6240] kmem_cache_alloc_node_noprof+0xae/0x670 [ 313.867537][ T6240] ? __alloc_skb+0x1d7/0x7a0 [ 313.867575][ T6240] ? __alloc_skb+0x1d7/0x7a0 [ 313.867649][ T6240] __alloc_skb+0x1d7/0x7a0 [ 313.867734][ T6240] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 313.867864][ T6240] ? process_scheduled_works+0xa20/0x14e0 [ 313.867989][ T6240] process_scheduled_works+0xa8e/0x14e0 [ 313.868162][ T6240] ? __pfx_process_scheduled_works+0x10/0x10 [ 313.868267][ T6240] ? assign_work+0x3cf/0x5d0 [ 313.868358][ T6240] worker_thread+0xa47/0xfb0 [ 313.868466][ T6240] ? __kthread_parkme+0x71/0x1f0 [ 313.868588][ T6240] kthread+0x388/0x470 [ 313.868680][ T6240] ? __pfx_worker_thread+0x10/0x10 [ 313.868708][ T6240] ? __pfx_kthread+0x10/0x10 [ 313.868813][ T6240] ret_from_fork+0x514/0xb70 [ 313.868953][ T6240] ? __pfx_ret_from_fork+0x10/0x10 [ 313.869050][ T6240] ? __switch_to+0xc89/0x1420 [ 313.869126][ T6240] ? __pfx_kthread+0x10/0x10 [ 313.869192][ T6240] ret_from_fork_asm+0x1a/0x30 [ 313.869308][ T6240] [ 313.871810][ T68] CPU: 0 UID: 0 PID: 68 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 313.871878][ T68] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 313.871932][ T68] Workqueue: events_unbound nsim_dev_trap_report_work [ 313.872026][ T68] Call Trace: [ 313.872055][ T68] [ 313.872079][ T68] dump_stack_lvl+0xe8/0x150 [ 313.872184][ T68] should_fail_ex+0x467/0x600 [ 313.872295][ T68] should_failslab+0xa8/0x100 [ 313.872373][ T68] kmem_cache_alloc_node_noprof+0xae/0x670 [ 313.872434][ T68] ? __alloc_skb+0x1d7/0x7a0 [ 313.872500][ T68] ? __alloc_skb+0x1d7/0x7a0 [ 313.872585][ T68] __alloc_skb+0x1d7/0x7a0 [ 313.872661][ T68] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 313.872798][ T68] ? process_scheduled_works+0xa20/0x14e0 [ 313.872876][ T68] process_scheduled_works+0xa8e/0x14e0 [ 313.873055][ T68] ? __pfx_process_scheduled_works+0x10/0x10 [ 313.873142][ T68] ? assign_work+0x3cf/0x5d0 [ 313.873185][ T68] worker_thread+0xa47/0xfb0 [ 313.873322][ T68] ? __kthread_parkme+0x71/0x1f0 [ 313.873373][ T68] kthread+0x388/0x470 [ 313.873468][ T68] ? __pfx_worker_thread+0x10/0x10 [ 313.873543][ T68] ? __pfx_kthread+0x10/0x10 [ 313.873642][ T68] ret_from_fork+0x514/0xb70 [ 313.873753][ T68] ? __pfx_ret_from_fork+0x10/0x10 [ 313.873851][ T68] ? __switch_to+0xc89/0x1420 [ 313.873955][ T68] ? __pfx_kthread+0x10/0x10 [ 313.874052][ T68] ret_from_fork_asm+0x1a/0x30 [ 313.874169][ T68] [ 313.875699][ T6187] CPU: 0 UID: 0 PID: 6187 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 313.875775][ T6187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 313.875816][ T6187] Workqueue: events_unbound nsim_dev_trap_report_work [ 313.875904][ T6187] Call Trace: [ 313.875944][ T6187] [ 313.875967][ T6187] dump_stack_lvl+0xe8/0x150 [ 313.876084][ T6187] should_fail_ex+0x467/0x600 [ 313.876221][ T6187] should_failslab+0xa8/0x100 [ 313.876297][ T6187] kmem_cache_alloc_node_noprof+0xae/0x670 [ 313.876372][ T6187] ? __alloc_skb+0x1d7/0x7a0 [ 313.876431][ T6187] ? __alloc_skb+0x1d7/0x7a0 [ 313.876520][ T6187] __alloc_skb+0x1d7/0x7a0 [ 313.876599][ T6187] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 313.876730][ T6187] ? process_scheduled_works+0xa20/0x14e0 [ 313.876811][ T6187] process_scheduled_works+0xa8e/0x14e0 [ 313.876973][ T6187] ? __pfx_process_scheduled_works+0x10/0x10 [ 313.877078][ T6187] ? assign_work+0x3cf/0x5d0 [ 313.877167][ T6187] worker_thread+0xa47/0xfb0 [ 313.877327][ T6187] kthread+0x388/0x470 [ 313.877427][ T6187] ? __pfx_worker_thread+0x10/0x10 [ 313.877515][ T6187] ? __pfx_kthread+0x10/0x10 [ 313.877611][ T6187] ret_from_fork+0x514/0xb70 [ 313.877716][ T6187] ? __pfx_ret_from_fork+0x10/0x10 [ 313.877814][ T6187] ? __switch_to+0xc89/0x1420 [ 313.877905][ T6187] ? __pfx_kthread+0x10/0x10 [ 313.878014][ T6187] ret_from_fork_asm+0x1a/0x30 [ 313.878131][ T6187] [ 313.882864][ T4960] FAULT_INJECTION: forcing a failure. [ 313.882864][ T4960] name failslab, interval 1, probability 100, space 0, times 18 [ 313.882968][ T4960] CPU: 0 UID: 0 PID: 4960 Comm: udevd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 313.883059][ T4960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 313.883100][ T4960] Call Trace: [ 313.883122][ T4960] [ 313.883145][ T4960] dump_stack_lvl+0xe8/0x150 [ 313.883249][ T4960] should_fail_ex+0x467/0x600 [ 313.883330][ T4960] should_failslab+0xa8/0x100 [ 313.883366][ T4960] kmem_cache_alloc_node_noprof+0xae/0x670 [ 313.883429][ T4960] ? __alloc_skb+0x1d7/0x7a0 [ 313.883493][ T4960] ? __alloc_skb+0x1d7/0x7a0 [ 313.883577][ T4960] __alloc_skb+0x1d7/0x7a0 [ 313.883654][ T4960] alloc_uevent_skb+0x7d/0x230 [ 313.883715][ T4960] kobject_uevent_net_broadcast+0x2fd/0x560 [ 313.883754][ T4960] kobject_uevent_env+0x569/0x9e0 [ 313.883911][ T4960] kobject_synth_uevent+0x45e/0x950 [ 313.883982][ T4960] ? __pfx_kobject_synth_uevent+0x10/0x10 [ 313.884080][ T4960] ? sysfs_file_kobj+0x1a/0x230 [ 313.884177][ T4960] ? sysfs_file_kobj+0x1e4/0x230 [ 313.884282][ T4960] ? __pfx_sysfs_kf_write+0x10/0x10 [ 313.884335][ T4960] uevent_store+0x26/0x70 [ 313.884399][ T4960] ? __pfx_sysfs_kf_write+0x10/0x10 [ 313.884457][ T4960] kernfs_fop_write_iter+0x3a5/0x540 [ 313.884563][ T4960] vfs_write+0x61e/0xbb0 [ 313.884671][ T4960] ? __pfx_vfs_write+0x10/0x10 [ 313.884766][ T4960] ? do_sys_openat2+0x14e/0x200 [ 313.884878][ T4960] ksys_write+0x156/0x270 [ 313.884977][ T4960] ? __pfx_ksys_write+0x10/0x10 [ 313.885082][ T4960] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.885154][ T4960] do_syscall_64+0x174/0x580 [ 313.885249][ T4960] ? clear_bhb_loop+0x40/0x90 [ 313.885352][ T4960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.885408][ T4960] RIP: 0033:0x7fc0ef52f407 [ 313.885473][ T4960] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 313.885526][ T4960] RSP: 002b:00007fff44ab9b10 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 313.885590][ T4960] RAX: ffffffffffffffda RBX: 00007fc0ef441880 RCX: 00007fc0ef52f407 [ 313.885646][ T4960] RDX: 0000000000000007 RSI: 000055d71465d560 RDI: 000000000000000c [ 313.885681][ T4960] RBP: 000055d71465d560 R08: 0000000000000000 R09: 0000000000000000 [ 313.885723][ T4960] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000007 [ 313.885757][ T4960] R13: 000055d7146588a0 R14: 00007fc0ef677ea0 R15: 00007fff44ab9e50 [ 313.885822][ T4960] [ 313.886658][ T4949] FAULT_INJECTION: forcing a failure. [ 313.886658][ T4949] name failslab, interval 1, probability 100, space 0, times 18 [ 313.886762][ T4949] CPU: 0 UID: 0 PID: 4949 Comm: klogd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 313.886827][ T4949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 313.886868][ T4949] Call Trace: [ 313.886889][ T4949] [ 313.886919][ T4949] dump_stack_lvl+0xe8/0x150 [ 313.887019][ T4949] should_fail_ex+0x467/0x600 [ 313.887126][ T4949] should_failslab+0xa8/0x100 [ 313.887210][ T4949] kmem_cache_alloc_node_noprof+0xae/0x670 [ 313.887275][ T4949] ? __alloc_skb+0x1d7/0x7a0 [ 313.887337][ T4949] ? __alloc_skb+0x1d7/0x7a0 [ 313.887421][ T4949] __alloc_skb+0x1d7/0x7a0 [ 313.887492][ T4949] alloc_skb_with_frags+0xc6/0x760 [ 313.887595][ T4949] sock_alloc_send_pskb+0x884/0x9a0 [ 313.887735][ T4949] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 313.887822][ T4949] ? register_lock_class+0x31/0x2e0 [ 313.887905][ T4949] ? smack_socket_getpeersec_dgram+0x320/0x430 [ 313.888040][ T4949] unix_dgram_sendmsg+0x4da/0x17b0 [ 313.888177][ T4949] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 313.888292][ T4949] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 313.888369][ T4949] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 313.888493][ T4949] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 313.888588][ T4949] sock_sendmsg_nosec+0x13a/0x180 [ 313.888691][ T4949] __sys_sendto+0x41e/0x5d0 [ 313.888760][ T4949] ? rt_spin_unlock+0x163/0x200 [ 313.888864][ T4949] ? __pfx___sys_sendto+0x10/0x10 [ 313.888936][ T4949] ? unix_dgram_connect+0x276/0xba0 [ 313.889064][ T4949] ? __pfx___sys_connect+0x10/0x10 [ 313.889191][ T4949] __x64_sys_sendto+0xde/0x100 [ 313.889259][ T4949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.889331][ T4949] do_syscall_64+0x174/0x580 [ 313.889386][ T4949] ? clear_bhb_loop+0x40/0x90 [ 313.889415][ T4949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.889496][ T4949] RIP: 0033:0x7fb6428e2407 [ 313.889558][ T4949] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 313.889623][ T4949] RSP: 002b:00007ffcf251f320 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 313.889686][ T4949] RAX: ffffffffffffffda RBX: 00007fb642792c80 RCX: 00007fb6428e2407 [ 313.889730][ T4949] RDX: 0000000000000070 RSI: 00007ffcf251f460 RDI: 0000000000000003 [ 313.889771][ T4949] RBP: 00007ffcf251f890 R08: 0000000000000000 R09: 0000000000000000 [ 313.889814][ T4949] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffcf251f8a8 [ 313.889856][ T4949] R13: 00007ffcf251f460 R14: 0000000000000055 R15: 00007ffcf251f460 [ 313.889950][ T4949] [ 313.892984][ T43] FAULT_INJECTION: forcing a failure. [ 313.892984][ T43] name failslab, interval 1, probability 100, space 0, times 18 [ 313.893018][ T43] CPU: 1 UID: 0 PID: 43 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 313.893043][ T43] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 313.893059][ T43] Workqueue: ipv6_addrconf addrconf_dad_work [ 313.893083][ T43] Call Trace: [ 313.893092][ T43] [ 313.893102][ T43] dump_stack_lvl+0xe8/0x150 [ 313.893140][ T43] should_fail_ex+0x467/0x600 [ 313.893182][ T43] should_failslab+0xa8/0x100 [ 313.893211][ T43] kmem_cache_alloc_node_noprof+0xae/0x670 [ 313.893238][ T43] ? __alloc_skb+0x1d7/0x7a0 [ 313.893261][ T43] ? __alloc_skb+0x1d7/0x7a0 [ 313.893293][ T43] __alloc_skb+0x1d7/0x7a0 [ 313.893325][ T43] ndisc_alloc_skb+0xa0/0x480 [ 313.893362][ T43] ndisc_ns_create+0x21c/0x650 [ 313.893399][ T43] ? __pfx_ndisc_ns_create+0x10/0x10 [ 313.893444][ T43] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 313.893492][ T43] ndisc_send_ns+0xba/0x160 [ 313.893522][ T43] ? __local_bh_enable+0x1e1/0x2f0 [ 313.893555][ T43] ? __pfx_ndisc_send_ns+0x10/0x10 [ 313.893587][ T43] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 313.893616][ T43] ? lockdep_hardirqs_on+0x7a/0x110 [ 313.893649][ T43] addrconf_dad_work+0xc37/0x16e0 [ 313.893676][ T43] ? addrconf_dad_work+0x131/0x16e0 [ 313.893700][ T43] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 313.893740][ T43] ? __pfx_addrconf_dad_work+0x10/0x10 [ 313.893763][ T43] ? process_scheduled_works+0xa20/0x14e0 [ 313.893800][ T43] ? rcu_is_watching+0x15/0xb0 [ 313.893829][ T43] ? process_scheduled_works+0xa20/0x14e0 [ 313.893852][ T43] process_scheduled_works+0xa8e/0x14e0 [ 313.893900][ T43] ? __pfx_process_scheduled_works+0x10/0x10 [ 313.893931][ T43] ? assign_work+0x3cf/0x5d0 [ 313.893959][ T43] worker_thread+0xa47/0xfb0 [ 313.894006][ T43] kthread+0x388/0x470 [ 313.894035][ T43] ? __pfx_worker_thread+0x10/0x10 [ 313.894058][ T43] ? __pfx_kthread+0x10/0x10 [ 313.894087][ T43] ret_from_fork+0x514/0xb70 [ 313.894120][ T43] ? __pfx_ret_from_fork+0x10/0x10 [ 313.894149][ T43] ? __switch_to+0xc89/0x1420 [ 313.894177][ T43] ? __pfx_kthread+0x10/0x10 [ 313.894207][ T43] ret_from_fork_asm+0x1a/0x30 [ 313.894240][ T43] [ 313.894546][ T13] FAULT_INJECTION: forcing a failure. [ 313.894546][ T13] name failslab, interval 1, probability 100, space 0, times 17 [ 313.894578][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 313.894602][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 313.894632][ T13] Workqueue: events_unbound nsim_dev_trap_report_work [ 313.894720][ T13] Call Trace: [ 313.894746][ T13] [ 313.894770][ T13] dump_stack_lvl+0xe8/0x150 [ 313.894877][ T13] should_fail_ex+0x467/0x600 [ 313.894985][ T13] should_failslab+0xa8/0x100 [ 313.895039][ T13] kmem_cache_alloc_node_noprof+0xae/0x670 [ 313.895110][ T13] ? __alloc_skb+0x1d7/0x7a0 [ 313.895190][ T13] ? __alloc_skb+0x1d7/0x7a0 [ 313.895289][ T13] __alloc_skb+0x1d7/0x7a0 [ 313.895372][ T13] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 313.895507][ T13] ? process_scheduled_works+0xa20/0x14e0 [ 313.895587][ T13] process_scheduled_works+0xa8e/0x14e0 [ 313.895752][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 313.895851][ T13] ? assign_work+0x3cf/0x5d0 [ 313.895950][ T13] worker_thread+0xa47/0xfb0 [ 313.896114][ T13] kthread+0x388/0x470 [ 313.896210][ T13] ? __pfx_worker_thread+0x10/0x10 [ 313.896285][ T13] ? __pfx_kthread+0x10/0x10 [ 313.896344][ T13] ret_from_fork+0x514/0xb70 [ 313.896426][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 313.896537][ T13] ? __switch_to+0xc89/0x1420 [ 313.896656][ T13] ? __pfx_kthread+0x10/0x10 [ 313.896761][ T13] ret_from_fork_asm+0x1a/0x30 [ 313.896871][ T13] [ 313.899702][ T1455] FAULT_INJECTION: forcing a failure. [ 313.899702][ T1455] name failslab, interval 1, probability 100, space 0, times 16 [ 313.899789][ T1455] CPU: 0 UID: 0 PID: 1455 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 313.899854][ T1455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 313.899897][ T1455] Workqueue: events_unbound nsim_dev_trap_report_work [ 313.899994][ T1455] Call Trace: [ 313.900024][ T1455] [ 313.900046][ T1455] dump_stack_lvl+0xe8/0x150 [ 313.900145][ T1455] should_fail_ex+0x467/0x600 [ 313.900252][ T1455] should_failslab+0xa8/0x100 [ 313.900283][ T1455] kmem_cache_alloc_node_noprof+0xae/0x670 [ 313.900363][ T1455] ? __alloc_skb+0x1d7/0x7a0 [ 313.900430][ T1455] ? __alloc_skb+0x1d7/0x7a0 [ 313.900530][ T1455] __alloc_skb+0x1d7/0x7a0 [ 313.900615][ T1455] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 313.900748][ T1455] ? process_scheduled_works+0xa20/0x14e0 [ 313.900840][ T1455] process_scheduled_works+0xa8e/0x14e0 [ 313.901008][ T1455] ? __pfx_process_scheduled_works+0x10/0x10 [ 313.901112][ T1455] ? assign_work+0x3cf/0x5d0 [ 313.901209][ T1455] worker_thread+0xa47/0xfb0 [ 313.901370][ T1455] kthread+0x388/0x470 [ 313.901453][ T1455] ? __pfx_worker_thread+0x10/0x10 [ 313.901527][ T1455] ? __pfx_kthread+0x10/0x10 [ 313.901631][ T1455] ret_from_fork+0x514/0xb70 [ 313.901741][ T1455] ? __pfx_ret_from_fork+0x10/0x10 [ 313.901873][ T1455] ? __switch_to+0xc89/0x1420 [ 313.901946][ T1455] ? __pfx_kthread+0x10/0x10 [ 313.902012][ T1455] ret_from_fork_asm+0x1a/0x30 [ 313.902125][ T1455] [ 313.902173][ C1] FAULT_INJECTION: forcing a failure. [ 313.902173][ C1] name failslab, interval 1, probability 100, space 0, times 16 [ 313.902199][ C0] FAULT_INJECTION: forcing a failure. [ 313.902199][ C0] name failslab, interval 1, probability 100, space 0, times 16 [ 313.902205][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 313.902231][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 313.902244][ C1] Call Trace: [ 313.902252][ C1] [ 313.902260][ C1] dump_stack_lvl+0xe8/0x150 [ 313.902294][ C1] should_fail_ex+0x467/0x600 [ 313.902331][ C1] should_failslab+0xa8/0x100 [ 313.902357][ C1] kmem_cache_alloc_node_noprof+0xae/0x670 [ 313.902380][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 313.902400][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 313.902436][ C1] __alloc_skb+0x1d7/0x7a0 [ 313.902464][ C1] __netdev_alloc_skb+0xc0/0x4b0 [ 313.902492][ C1] __ieee80211_beacon_get+0xc97/0x1820 [ 313.902522][ C1] ? __lock_acquire+0x683/0x2ce0 [ 313.902545][ C1] ? __ieee80211_beacon_get+0x34/0x1820 [ 313.902571][ C1] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 313.902600][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 313.902638][ C1] mac80211_hwsim_beacon_tx+0x378/0x820 [ 313.902668][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 313.902696][ C1] __iterate_interfaces+0x2af/0x5a0 [ 313.902719][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 313.902747][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 313.902771][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 313.902799][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 313.902826][ C1] mac80211_hwsim_beacon+0xb2/0x2b0 [ 313.902849][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 313.902873][ C1] __hrtimer_run_queues+0x3eb/0xaf0 [ 313.902925][ C1] hrtimer_run_softirq+0x18f/0x260 [ 313.902963][ C1] handle_softirqs+0x1d9/0x6c0 [ 313.903000][ C1] run_ktimerd+0x69/0x100 [ 313.903029][ C1] smpboot_thread_fn+0x57c/0xa80 [ 313.903061][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 313.903097][ C1] kthread+0x388/0x470 [ 313.903128][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 313.903155][ C1] ? __pfx_kthread+0x10/0x10 [ 313.903188][ C1] ret_from_fork+0x514/0xb70 [ 313.903223][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 313.903254][ C1] ? __switch_to+0xc89/0x1420 [ 313.903285][ C1] ? __pfx_kthread+0x10/0x10 [ 313.903323][ C1] ret_from_fork_asm+0x1a/0x30 [ 313.903366][ C1] [ 313.903379][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 313.903407][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 313.903420][ C0] Call Trace: [ 313.903429][ C0] [ 313.903438][ C1] FAULT_INJECTION: forcing a failure. [ 313.903438][ C1] name failslab, interval 1, probability 100, space 0, times 15 [ 313.903439][ C0] dump_stack_lvl+0xe8/0x150 [ 313.903476][ C0] should_fail_ex+0x467/0x600 [ 313.903512][ C0] should_failslab+0xa8/0x100 [ 313.903539][ C0] kmem_cache_alloc_node_noprof+0xae/0x670 [ 313.903562][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 313.903582][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 313.903611][ C0] __alloc_skb+0x1d7/0x7a0 [ 313.903640][ C0] __netdev_alloc_skb+0xc0/0x4b0 [ 313.903668][ C0] __ieee80211_beacon_get+0xc97/0x1820 [ 313.903697][ C0] ? __lock_acquire+0x683/0x2ce0 [ 313.903719][ C0] ? __ieee80211_beacon_get+0x34/0x1820 [ 313.903747][ C0] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 313.903775][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 313.903813][ C0] mac80211_hwsim_beacon_tx+0x378/0x820 [ 313.903842][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 313.903870][ C0] __iterate_interfaces+0x2af/0x5a0 [ 313.903892][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 313.903928][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 313.903952][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 313.903981][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 313.904008][ C0] mac80211_hwsim_beacon+0xb2/0x2b0 [ 313.904030][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 313.904055][ C0] __hrtimer_run_queues+0x3eb/0xaf0 [ 313.904104][ C0] hrtimer_run_softirq+0x18f/0x260 [ 313.904141][ C0] handle_softirqs+0x1d9/0x6c0 [ 313.904177][ C0] run_ktimerd+0x69/0x100 [ 313.904205][ C0] smpboot_thread_fn+0x57c/0xa80 [ 313.904236][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 313.904272][ C0] kthread+0x388/0x470 [ 313.904304][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 313.904330][ C0] ? __pfx_kthread+0x10/0x10 [ 313.904363][ C0] ret_from_fork+0x514/0xb70 [ 313.904398][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 313.904432][ C0] ? __switch_to+0xc89/0x1420 [ 313.904462][ C0] ? __pfx_kthread+0x10/0x10 [ 313.904495][ C0] ret_from_fork_asm+0x1a/0x30 [ 313.904533][ C0] [ 313.904545][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 313.904566][ C0] FAULT_INJECTION: forcing a failure. [ 313.904566][ C0] name failslab, interval 1, probability 100, space 0, times 14 [ 313.904572][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 313.904588][ C1] Call Trace: [ 313.904596][ C1] [ 313.904605][ C1] dump_stack_lvl+0xe8/0x150 [ 313.904637][ C1] should_fail_ex+0x467/0x600 [ 313.904673][ C1] should_failslab+0xa8/0x100 [ 313.904700][ C1] kmem_cache_alloc_node_noprof+0xae/0x670 [ 313.904723][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 313.904743][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 313.904772][ C1] __alloc_skb+0x1d7/0x7a0 [ 313.904798][ C1] __netdev_alloc_skb+0xc0/0x4b0 [ 313.904826][ C1] __ieee80211_beacon_get+0xc97/0x1820 [ 313.904855][ C1] ? __lock_acquire+0x683/0x2ce0 [ 313.904877][ C1] ? __ieee80211_beacon_get+0x34/0x1820 [ 313.904904][ C1] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 313.904933][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 313.904960][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 313.905000][ C1] mac80211_hwsim_beacon_tx+0x378/0x820 [ 313.905029][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 313.905056][ C1] __iterate_interfaces+0x2af/0x5a0 [ 313.905078][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 313.905106][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 313.905130][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 313.905158][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 313.905185][ C1] mac80211_hwsim_beacon+0xb2/0x2b0 [ 313.905207][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 313.905231][ C1] __hrtimer_run_queues+0x3eb/0xaf0 [ 313.905281][ C1] hrtimer_run_softirq+0x18f/0x260 [ 313.905318][ C1] handle_softirqs+0x1d9/0x6c0 [ 313.905354][ C1] run_ktimerd+0x69/0x100 [ 313.905382][ C1] smpboot_thread_fn+0x57c/0xa80 [ 313.905413][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 313.905456][ C1] kthread+0x388/0x470 [ 313.905487][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 313.905514][ C1] ? __pfx_kthread+0x10/0x10 [ 313.905546][ C1] ret_from_fork+0x514/0xb70 [ 313.905581][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 313.905626][ C1] ? __switch_to+0xc89/0x1420 [ 313.905657][ C1] ? __pfx_kthread+0x10/0x10 [ 313.905689][ C1] ret_from_fork_asm+0x1a/0x30 [ 313.905726][ C1] [ 313.905739][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 313.905759][ C1] FAULT_INJECTION: forcing a failure. [ 313.905759][ C1] name failslab, interval 1, probability 100, space 0, times 13 [ 313.905766][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 313.905780][ C0] Call Trace: [ 313.905788][ C0] [ 313.905796][ C0] dump_stack_lvl+0xe8/0x150 [ 313.905828][ C0] should_fail_ex+0x467/0x600 [ 313.905865][ C0] should_failslab+0xa8/0x100 [ 313.905891][ C0] kmem_cache_alloc_node_noprof+0xae/0x670 [ 313.905914][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 313.905941][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 313.905969][ C0] __alloc_skb+0x1d7/0x7a0 [ 313.905996][ C0] __netdev_alloc_skb+0xc0/0x4b0 [ 313.906023][ C0] __ieee80211_beacon_get+0xc97/0x1820 [ 313.906053][ C0] ? __lock_acquire+0x683/0x2ce0 [ 313.906074][ C0] ? __ieee80211_beacon_get+0x34/0x1820 [ 313.906101][ C0] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 313.906130][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 313.906156][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 313.906195][ C0] mac80211_hwsim_beacon_tx+0x378/0x820 [ 313.906224][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 313.906252][ C0] __iterate_interfaces+0x2af/0x5a0 [ 313.906273][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 313.906301][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 313.906325][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 313.906353][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 313.906380][ C0] mac80211_hwsim_beacon+0xb2/0x2b0 [ 313.906402][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 313.906427][ C0] __hrtimer_run_queues+0x3eb/0xaf0 [ 313.906477][ C0] hrtimer_run_softirq+0x18f/0x260 [ 313.906513][ C0] handle_softirqs+0x1d9/0x6c0 [ 313.906550][ C0] run_ktimerd+0x69/0x100 [ 313.906578][ C0] smpboot_thread_fn+0x57c/0xa80 [ 313.906608][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 313.906645][ C0] kthread+0x388/0x470 [ 313.906676][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 313.906703][ C0] ? __pfx_kthread+0x10/0x10 [ 313.906736][ C0] ret_from_fork+0x514/0xb70 [ 313.906771][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 313.906803][ C0] ? __switch_to+0xc89/0x1420 [ 313.906833][ C0] ? __pfx_kthread+0x10/0x10 [ 313.906866][ C0] ret_from_fork_asm+0x1a/0x30 [ 313.906950][ C0] [ 313.906962][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 313.906984][ C0] FAULT_INJECTION: forcing a failure. [ 313.906984][ C0] name failslab, interval 1, probability 100, space 0, times 12 [ 313.906990][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 313.907003][ C1] Call Trace: [ 313.907012][ C1] [ 313.907020][ C1] dump_stack_lvl+0xe8/0x150 [ 313.907052][ C1] should_fail_ex+0x467/0x600 [ 313.907089][ C1] should_failslab+0xa8/0x100 [ 313.907115][ C1] kmem_cache_alloc_node_noprof+0xae/0x670 [ 313.907139][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 313.907158][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 313.907187][ C1] __alloc_skb+0x1d7/0x7a0 [ 313.907213][ C1] __netdev_alloc_skb+0xc0/0x4b0 [ 313.907241][ C1] __ieee80211_beacon_get+0xc97/0x1820 [ 313.907271][ C1] ? __lock_acquire+0x683/0x2ce0 [ 313.907292][ C1] ? __ieee80211_beacon_get+0x34/0x1820 [ 313.907319][ C1] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 313.907348][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 313.907374][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 313.907414][ C1] mac80211_hwsim_beacon_tx+0x378/0x820 [ 313.907450][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 313.907477][ C1] __iterate_interfaces+0x2af/0x5a0 [ 313.907499][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 313.907527][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 313.907551][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 313.907579][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 313.907606][ C1] mac80211_hwsim_beacon+0xb2/0x2b0 [ 313.907628][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 313.907653][ C1] __hrtimer_run_queues+0x3eb/0xaf0 [ 313.907703][ C1] hrtimer_run_softirq+0x18f/0x260 [ 313.907740][ C1] handle_softirqs+0x1d9/0x6c0 [ 313.907776][ C1] run_ktimerd+0x69/0x100 [ 313.907804][ C1] smpboot_thread_fn+0x57c/0xa80 [ 313.907835][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 313.907872][ C1] kthread+0x388/0x470 [ 313.907904][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 313.907932][ C1] ? __pfx_kthread+0x10/0x10 [ 313.907965][ C1] ret_from_fork+0x514/0xb70 [ 313.907999][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 313.908032][ C1] ? __switch_to+0xc89/0x1420 [ 313.908062][ C1] ? __pfx_kthread+0x10/0x10 [ 313.908094][ C1] ret_from_fork_asm+0x1a/0x30 [ 313.908132][ C1] [ 313.908144][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 313.908163][ C1] FAULT_INJECTION: forcing a failure. [ 313.908163][ C1] name failslab, interval 1, probability 100, space 0, times 11 [ 313.908171][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 313.908185][ C0] Call Trace: [ 313.908193][ C0] [ 313.908201][ C0] dump_stack_lvl+0xe8/0x150 [ 313.908234][ C0] should_fail_ex+0x467/0x600 [ 313.908270][ C0] should_failslab+0xa8/0x100 [ 313.908296][ C0] kmem_cache_alloc_node_noprof+0xae/0x670 [ 313.908318][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 313.908338][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 313.908373][ C0] __alloc_skb+0x1d7/0x7a0 [ 313.908400][ C0] __netdev_alloc_skb+0xc0/0x4b0 [ 313.908428][ C0] __ieee80211_beacon_get+0xc97/0x1820 [ 313.908457][ C0] ? __lock_acquire+0x683/0x2ce0 [ 313.908479][ C0] ? __ieee80211_beacon_get+0x34/0x1820 [ 313.908506][ C0] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 313.908534][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 313.908560][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 313.908600][ C0] mac80211_hwsim_beacon_tx+0x378/0x820 [ 313.908629][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 313.908656][ C0] __iterate_interfaces+0x2af/0x5a0 [ 313.908678][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 313.908706][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 313.908730][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 313.908758][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 313.908785][ C0] mac80211_hwsim_beacon+0xb2/0x2b0 [ 313.908807][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 313.908831][ C0] __hrtimer_run_queues+0x3eb/0xaf0 [ 313.908881][ C0] hrtimer_run_softirq+0x18f/0x260 [ 313.908918][ C0] handle_softirqs+0x1d9/0x6c0 [ 313.908918][ C0] handle_softirqs+0x1d9/0x6c0 [ 313.908962][ C0] run_ktimerd+0x69/0x100 [ 313.908990][ C0] smpboot_thread_fn+0x57c/0xa80 [ 313.909021][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 313.909057][ C0] kthread+0x388/0x470 [ 313.909088][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 313.909114][ C0] ? __pfx_kthread+0x10/0x10 [ 313.909147][ C0] ret_from_fork+0x514/0xb70 [ 313.909182][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 313.909214][ C0] ? __switch_to+0xc89/0x1420 [ 313.909244][ C0] ? __pfx_kthread+0x10/0x10 [ 313.909277][ C0] ret_from_fork_asm+0x1a/0x30 [ 313.909315][ C0] [ 313.909326][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 313.909345][ C0] FAULT_INJECTION: forcing a failure. [ 313.909345][ C0] name failslab, interval 1, probability 100, space 0, times 10 [ 313.909352][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 313.909366][ C1] Call Trace: [ 313.909375][ C1] [ 313.909383][ C1] dump_stack_lvl+0xe8/0x150 [ 313.909415][ C1] should_fail_ex+0x467/0x600 [ 313.909457][ C1] should_failslab+0xa8/0x100 [ 313.909483][ C1] kmem_cache_alloc_node_noprof+0xae/0x670 [ 313.909506][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 313.909526][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 313.909554][ C1] __alloc_skb+0x1d7/0x7a0 [ 313.909581][ C1] __netdev_alloc_skb+0xc0/0x4b0 [ 313.909609][ C1] __ieee80211_beacon_get+0xc97/0x1820 [ 313.909638][ C1] ? __lock_acquire+0x683/0x2ce0 [ 313.909659][ C1] ? __ieee80211_beacon_get+0x34/0x1820 [ 313.909686][ C1] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 313.909714][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 313.909740][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 313.909779][ C1] mac80211_hwsim_beacon_tx+0x378/0x820 [ 313.909808][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 313.909836][ C1] __iterate_interfaces+0x2af/0x5a0 [ 313.909857][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 313.909885][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 313.909909][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 313.909938][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 313.909965][ C1] mac80211_hwsim_beacon+0xb2/0x2b0 [ 313.909987][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 313.910012][ C1] __hrtimer_run_queues+0x3eb/0xaf0 [ 313.910062][ C1] hrtimer_run_softirq+0x18f/0x260 [ 313.910098][ C1] handle_softirqs+0x1d9/0x6c0 [ 313.910135][ C1] run_ktimerd+0x69/0x100 [ 313.910163][ C1] smpboot_thread_fn+0x57c/0xa80 [ 313.910193][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 313.910230][ C1] kthread+0x388/0x470 [ 313.910261][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 313.910288][ C1] ? __pfx_kthread+0x10/0x10 [ 313.910320][ C1] ret_from_fork+0x514/0xb70 [ 313.910355][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 313.910387][ C1] ? __switch_to+0xc89/0x1420 [ 313.910418][ C1] ? __pfx_kthread+0x10/0x10 [ 313.910457][ C1] ret_from_fork_asm+0x1a/0x30 [ 313.910495][ C1] [ 313.910506][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 313.910525][ C1] FAULT_INJECTION: forcing a failure. [ 313.910525][ C1] name failslab, interval 1, probability 100, space 0, times 9 [ 313.910533][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 313.910548][ C0] Call Trace: [ 313.910556][ C0] [ 313.910564][ C0] dump_stack_lvl+0xe8/0x150 [ 313.910596][ C0] should_fail_ex+0x467/0x600 [ 313.910632][ C0] should_failslab+0xa8/0x100 [ 313.910659][ C0] kmem_cache_alloc_node_noprof+0xae/0x670 [ 313.910682][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 313.910701][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 313.910730][ C0] __alloc_skb+0x1d7/0x7a0 [ 313.910756][ C0] __netdev_alloc_skb+0xc0/0x4b0 [ 313.910783][ C0] __ieee80211_beacon_get+0xc97/0x1820 [ 313.910813][ C0] ? __lock_acquire+0x683/0x2ce0 [ 313.910834][ C0] ? __ieee80211_beacon_get+0x34/0x1820 [ 313.910861][ C0] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 313.910890][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 313.910916][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 313.910962][ C0] mac80211_hwsim_beacon_tx+0x378/0x820 [ 313.910990][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 313.911018][ C0] __iterate_interfaces+0x2af/0x5a0 [ 313.911039][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 313.911067][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 313.911091][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 313.911119][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 313.911146][ C0] mac80211_hwsim_beacon+0xb2/0x2b0 [ 313.911167][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 313.911192][ C0] __hrtimer_run_queues+0x3eb/0xaf0 [ 313.911242][ C0] hrtimer_run_softirq+0x18f/0x260 [ 313.911278][ C0] handle_softirqs+0x1d9/0x6c0 [ 313.911314][ C0] run_ktimerd+0x69/0x100 [ 313.911342][ C0] smpboot_thread_fn+0x57c/0xa80 [ 313.911373][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 313.911410][ C0] kthread+0x388/0x470 [ 313.911443][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 313.911469][ C0] ? __pfx_kthread+0x10/0x10 [ 313.911501][ C0] ret_from_fork+0x514/0xb70 [ 313.911536][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 313.911568][ C0] ? __switch_to+0xc89/0x1420 [ 313.911599][ C0] ? __pfx_kthread+0x10/0x10 [ 313.911631][ C0] ret_from_fork_asm+0x1a/0x30 [ 313.911669][ C0] [ 313.911680][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 313.911701][ C0] FAULT_INJECTION: forcing a failure. [ 313.911701][ C0] name failslab, interval 1, probability 100, space 0, times 8 [ 313.911707][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 313.911721][ C1] Call Trace: [ 313.911729][ C1] [ 313.911737][ C1] dump_stack_lvl+0xe8/0x150 [ 313.911769][ C1] should_fail_ex+0x467/0x600 [ 313.911805][ C1] should_failslab+0xa8/0x100 [ 313.911831][ C1] kmem_cache_alloc_node_noprof+0xae/0x670 [ 313.911854][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 313.911874][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 313.911903][ C1] __alloc_skb+0x1d7/0x7a0 [ 313.911930][ C1] __netdev_alloc_skb+0xc0/0x4b0 [ 313.911957][ C1] __ieee80211_beacon_get+0xc97/0x1820 [ 313.911987][ C1] ? __lock_acquire+0x683/0x2ce0 [ 313.912008][ C1] ? __ieee80211_beacon_get+0x34/0x1820 [ 313.912035][ C1] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 313.912064][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 313.912090][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 313.912129][ C1] mac80211_hwsim_beacon_tx+0x378/0x820 [ 313.912158][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 313.912185][ C1] __iterate_interfaces+0x2af/0x5a0 [ 313.912208][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 313.912235][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 313.912259][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 313.912287][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 313.912314][ C1] mac80211_hwsim_beacon+0xb2/0x2b0 [ 313.912336][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 313.912360][ C1] __hrtimer_run_queues+0x3eb/0xaf0 [ 313.912410][ C1] hrtimer_run_softirq+0x18f/0x260 [ 313.912453][ C1] handle_softirqs+0x1d9/0x6c0 [ 313.912489][ C1] run_ktimerd+0x69/0x100 [ 313.912517][ C1] smpboot_thread_fn+0x57c/0xa80 [ 313.912548][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 313.912584][ C1] kthread+0x388/0x470 [ 313.912615][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 313.912641][ C1] ? __pfx_kthread+0x10/0x10 [ 313.912673][ C1] ret_from_fork+0x514/0xb70 [ 313.912708][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 313.912740][ C1] ? __switch_to+0xc89/0x1420 [ 313.912770][ C1] ? __pfx_kthread+0x10/0x10 [ 313.912803][ C1] ret_from_fork_asm+0x1a/0x30 [ 313.912840][ C1] [ 313.912852][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 313.912871][ C1] FAULT_INJECTION: forcing a failure. [ 313.912871][ C1] name failslab, interval 1, probability 100, space 0, times 7 [ 313.912878][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 313.912892][ C0] Call Trace: [ 313.912900][ C0] [ 313.912908][ C0] dump_stack_lvl+0xe8/0x150 [ 313.912947][ C0] should_fail_ex+0x467/0x600 [ 313.912983][ C0] should_failslab+0xa8/0x100 [ 313.913009][ C0] kmem_cache_alloc_node_noprof+0xae/0x670 [ 313.913032][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 313.913051][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 313.913079][ C0] __alloc_skb+0x1d7/0x7a0 [ 313.913105][ C0] __netdev_alloc_skb+0xc0/0x4b0 [ 313.913132][ C0] __ieee80211_beacon_get+0xc97/0x1820 [ 313.913161][ C0] ? __lock_acquire+0x683/0x2ce0 [ 313.913182][ C0] ? __ieee80211_beacon_get+0x34/0x1820 [ 313.913208][ C0] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 313.913236][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 313.913262][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 313.913302][ C0] mac80211_hwsim_beacon_tx+0x378/0x820 [ 313.913337][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 313.913366][ C0] __iterate_interfaces+0x2af/0x5a0 [ 313.913387][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 313.913416][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 313.913441][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 313.913469][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 313.913496][ C0] mac80211_hwsim_beacon+0xb2/0x2b0 [ 313.913517][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 313.913542][ C0] __hrtimer_run_queues+0x3eb/0xaf0 [ 313.913592][ C0] hrtimer_run_softirq+0x18f/0x260 [ 313.913627][ C0] handle_softirqs+0x1d9/0x6c0 [ 313.913664][ C0] run_ktimerd+0x69/0x100 [ 313.913692][ C0] smpboot_thread_fn+0x57c/0xa80 [ 313.913723][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 313.913759][ C0] kthread+0x388/0x470 [ 313.913790][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 313.913817][ C0] ? __pfx_kthread+0x10/0x10 [ 313.913849][ C0] ret_from_fork+0x514/0xb70 [ 313.913883][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 313.913915][ C0] ? __switch_to+0xc89/0x1420 [ 313.913951][ C0] ? __pfx_kthread+0x10/0x10 [ 313.913984][ C0] ret_from_fork_asm+0x1a/0x30 [ 313.914022][ C0] [ 313.914033][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 313.914061][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 313.914075][ C1] Call Trace: [ 313.914083][ C1] [ 313.914087][ C0] FAULT_INJECTION: forcing a failure. [ 313.914087][ C0] name failslab, interval 1, probability 100, space 0, times 6 [ 313.914093][ C1] dump_stack_lvl+0xe8/0x150 [ 313.914129][ C1] should_fail_ex+0x467/0x600 [ 313.914166][ C1] should_failslab+0xa8/0x100 [ 313.914192][ C1] kmem_cache_alloc_node_noprof+0xae/0x670 [ 313.914215][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 313.914235][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 313.914264][ C1] __alloc_skb+0x1d7/0x7a0 [ 313.914290][ C1] __netdev_alloc_skb+0xc0/0x4b0 [ 313.914318][ C1] __ieee80211_beacon_get+0xc97/0x1820 [ 313.914347][ C1] ? __lock_acquire+0x683/0x2ce0 [ 313.914368][ C1] ? __ieee80211_beacon_get+0x34/0x1820 [ 313.914396][ C1] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 313.914431][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 313.914457][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 313.914496][ C1] mac80211_hwsim_beacon_tx+0x378/0x820 [ 313.914526][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 313.914553][ C1] __iterate_interfaces+0x2af/0x5a0 [ 313.914575][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 313.914603][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 313.914627][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 313.914655][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 313.914682][ C1] mac80211_hwsim_beacon+0xb2/0x2b0 [ 313.914704][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 313.914729][ C1] __hrtimer_run_queues+0x3eb/0xaf0 [ 313.914778][ C1] hrtimer_run_softirq+0x18f/0x260 [ 313.914815][ C1] handle_softirqs+0x1d9/0x6c0 [ 313.914852][ C1] run_ktimerd+0x69/0x100 [ 313.914880][ C1] smpboot_thread_fn+0x57c/0xa80 [ 313.914911][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 313.914949][ C1] kthread+0x388/0x470 [ 313.914980][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 313.915007][ C1] ? __pfx_kthread+0x10/0x10 [ 313.915040][ C1] ret_from_fork+0x514/0xb70 [ 313.915075][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 313.915107][ C1] ? __switch_to+0xc89/0x1420 [ 313.915138][ C1] ? __pfx_kthread+0x10/0x10 [ 313.915171][ C1] ret_from_fork_asm+0x1a/0x30 [ 313.915209][ C1] [ 313.915221][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 313.915241][ C1] FAULT_INJECTION: forcing a failure. [ 313.915241][ C1] name failslab, interval 1, probability 100, space 0, times 5 [ 313.915247][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 313.915262][ C0] Call Trace: [ 313.915270][ C0] [ 313.915278][ C0] dump_stack_lvl+0xe8/0x150 [ 313.915311][ C0] should_fail_ex+0x467/0x600 [ 313.915347][ C0] should_failslab+0xa8/0x100 [ 313.915373][ C0] kmem_cache_alloc_node_noprof+0xae/0x670 [ 313.915396][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 313.915415][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 313.915445][ C0] __alloc_skb+0x1d7/0x7a0 [ 313.915472][ C0] __netdev_alloc_skb+0xc0/0x4b0 [ 313.915499][ C0] __ieee80211_beacon_get+0xc97/0x1820 [ 313.915528][ C0] ? __lock_acquire+0x683/0x2ce0 [ 313.915549][ C0] ? __ieee80211_beacon_get+0x34/0x1820 [ 313.915577][ C0] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 313.915605][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 313.915630][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 313.915669][ C0] mac80211_hwsim_beacon_tx+0x378/0x820 [ 313.915698][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 313.915725][ C0] __iterate_interfaces+0x2af/0x5a0 [ 313.915746][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 313.915774][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 313.915797][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 313.915825][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 313.915852][ C0] mac80211_hwsim_beacon+0xb2/0x2b0 [ 313.915873][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 313.915897][ C0] __hrtimer_run_queues+0x3eb/0xaf0 [ 313.915953][ C0] hrtimer_run_softirq+0x18f/0x260 [ 313.915989][ C0] handle_softirqs+0x1d9/0x6c0 [ 313.916025][ C0] run_ktimerd+0x69/0x100 [ 313.916053][ C0] smpboot_thread_fn+0x57c/0xa80 [ 313.916083][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 313.916119][ C0] kthread+0x388/0x470 [ 313.916151][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 313.916177][ C0] ? __pfx_kthread+0x10/0x10 [ 313.916209][ C0] ret_from_fork+0x514/0xb70 [ 313.916244][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 313.916275][ C0] ? __switch_to+0xc89/0x1420 [ 313.916305][ C0] ? __pfx_kthread+0x10/0x10 [ 313.916338][ C0] ret_from_fork_asm+0x1a/0x30 [ 313.916375][ C0] [ 313.916387][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 313.916405][ C0] FAULT_INJECTION: forcing a failure. [ 313.916405][ C0] name failslab, interval 1, probability 100, space 0, times 4 [ 313.916413][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 313.916434][ C1] Call Trace: [ 313.916441][ C1] [ 313.916449][ C1] dump_stack_lvl+0xe8/0x150 [ 313.916481][ C1] should_fail_ex+0x467/0x600 [ 313.916517][ C1] should_failslab+0xa8/0x100 [ 313.916543][ C1] kmem_cache_alloc_node_noprof+0xae/0x670 [ 313.916566][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 313.916586][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 313.916614][ C1] __alloc_skb+0x1d7/0x7a0 [ 313.916641][ C1] __netdev_alloc_skb+0xc0/0x4b0 [ 313.916669][ C1] __ieee80211_beacon_get+0xc97/0x1820 [ 313.916698][ C1] ? __lock_acquire+0x683/0x2ce0 [ 313.916719][ C1] ? __ieee80211_beacon_get+0x34/0x1820 [ 313.916746][ C1] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 313.916775][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 313.916802][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 313.916842][ C1] mac80211_hwsim_beacon_tx+0x378/0x820 [ 313.916871][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 313.916898][ C1] __iterate_interfaces+0x2af/0x5a0 [ 313.916920][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 313.917063][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 313.917091][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 313.917120][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 313.917156][ C1] mac80211_hwsim_beacon+0xb2/0x2b0 [ 313.917183][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 313.917208][ C1] __hrtimer_run_queues+0x3eb/0xaf0 [ 313.917259][ C1] hrtimer_run_softirq+0x18f/0x260 [ 313.917295][ C1] handle_softirqs+0x1d9/0x6c0 [ 313.917334][ C1] run_ktimerd+0x69/0x100 [ 313.917362][ C1] smpboot_thread_fn+0x57c/0xa80 [ 313.917394][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 313.917431][ C1] kthread+0x388/0x470 [ 313.917469][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 313.917496][ C1] ? __pfx_kthread+0x10/0x10 [ 313.917528][ C1] ret_from_fork+0x514/0xb70 [ 313.917565][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 313.917596][ C1] ? __switch_to+0xc89/0x1420 [ 313.917628][ C1] ? __pfx_kthread+0x10/0x10 [ 313.917661][ C1] ret_from_fork_asm+0x1a/0x30 [ 313.917699][ C1] [ 313.917714][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 313.917741][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 313.917756][ C0] Call Trace: [ 313.917749][ C1] FAULT_INJECTION: forcing a failure. [ 313.917749][ C1] name failslab, interval 1, probability 100, space 0, times 3 [ 313.917766][ C0] [ 313.917778][ C0] dump_stack_lvl+0xe8/0x150 [ 313.917812][ C0] should_fail_ex+0x467/0x600 [ 313.917850][ C0] should_failslab+0xa8/0x100 [ 313.917877][ C0] kmem_cache_alloc_node_noprof+0xae/0x670 [ 313.917900][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 313.917921][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 313.917950][ C0] __alloc_skb+0x1d7/0x7a0 [ 313.917986][ C0] __netdev_alloc_skb+0xc0/0x4b0 [ 313.918015][ C0] __ieee80211_beacon_get+0xc97/0x1820 [ 313.918046][ C0] ? __lock_acquire+0x683/0x2ce0 [ 313.918068][ C0] ? __ieee80211_beacon_get+0x34/0x1820 [ 313.918095][ C0] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 313.918124][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 313.918152][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 313.918193][ C0] mac80211_hwsim_beacon_tx+0x378/0x820 [ 313.918225][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 313.918254][ C0] __iterate_interfaces+0x2af/0x5a0 [ 313.918277][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 313.918307][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 313.918333][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 313.918362][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 313.918389][ C0] mac80211_hwsim_beacon+0xb2/0x2b0 [ 313.918412][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 313.918437][ C0] __hrtimer_run_queues+0x3eb/0xaf0 [ 313.918489][ C0] hrtimer_run_softirq+0x18f/0x260 [ 313.918526][ C0] handle_softirqs+0x1d9/0x6c0 [ 313.918564][ C0] run_ktimerd+0x69/0x100 [ 313.918593][ C0] smpboot_thread_fn+0x57c/0xa80 [ 313.918626][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 313.918662][ C0] kthread+0x388/0x470 [ 313.918695][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 313.918723][ C0] ? __pfx_kthread+0x10/0x10 [ 313.918757][ C0] ret_from_fork+0x514/0xb70 [ 313.918794][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 313.918827][ C0] ? __switch_to+0xc89/0x1420 [ 313.918859][ C0] ? __pfx_kthread+0x10/0x10 [ 313.918893][ C0] ret_from_fork_asm+0x1a/0x30 [ 313.918932][ C0] [ 313.918946][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 313.918972][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 313.918987][ C1] Call Trace: [ 313.918996][ C1] [ 313.919005][ C1] dump_stack_lvl+0xe8/0x150 [ 313.919043][ C1] should_fail_ex+0x467/0x600 [ 313.919085][ C1] should_failslab+0xa8/0x100 [ 313.919115][ C1] kmem_cache_alloc_node_noprof+0xae/0x670 [ 313.919142][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 313.919167][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 313.919200][ C1] __alloc_skb+0x1d7/0x7a0 [ 313.919229][ C1] __netdev_alloc_skb+0xc0/0x4b0 [ 313.919262][ C1] __ieee80211_beacon_get+0xc97/0x1820 [ 313.919276][ T150] FAULT_INJECTION: forcing a failure. [ 313.919276][ T150] name failslab, interval 1, probability 100, space 0, times 1 [ 313.919300][ C1] ? __lock_acquire+0x683/0x2ce0 [ 313.919325][ C1] ? __ieee80211_beacon_get+0x34/0x1820 [ 313.919352][ C1] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 313.919382][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 313.919409][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 313.919449][ C1] mac80211_hwsim_beacon_tx+0x378/0x820 [ 313.919488][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 313.919517][ C1] __iterate_interfaces+0x2af/0x5a0 [ 313.919539][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 313.919568][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 313.919592][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 313.919620][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 313.919646][ C1] mac80211_hwsim_beacon+0xb2/0x2b0 [ 313.919668][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 313.919693][ C1] __hrtimer_run_queues+0x3eb/0xaf0 [ 313.919743][ C1] hrtimer_run_softirq+0x18f/0x260 [ 313.919780][ C1] handle_softirqs+0x1d9/0x6c0 [ 313.919817][ C1] run_ktimerd+0x69/0x100 [ 313.919846][ C1] smpboot_thread_fn+0x57c/0xa80 [ 313.919878][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 313.919915][ C1] kthread+0x388/0x470 [ 313.919946][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 313.919974][ C1] ? __pfx_kthread+0x10/0x10 [ 313.920007][ C1] ret_from_fork+0x514/0xb70 [ 313.920042][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 313.920073][ C1] ? __switch_to+0xc89/0x1420 [ 313.920103][ C1] ? __pfx_kthread+0x10/0x10 [ 313.920136][ C1] ret_from_fork_asm+0x1a/0x30 [ 313.920174][ C1] [ 313.920188][ T150] CPU: 0 UID: 0 PID: 150 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 313.920214][ T150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 313.920229][ T150] Workqueue: events_unbound nsim_dev_trap_report_work [ 313.920264][ T150] Call Trace: [ 313.920273][ T150] [ 313.920282][ T150] dump_stack_lvl+0xe8/0x150 [ 313.920318][ T150] should_fail_ex+0x467/0x600 [ 313.920359][ T150] should_failslab+0xa8/0x100 [ 313.920389][ T150] kmem_cache_alloc_node_noprof+0xae/0x670 [ 313.920417][ T150] ? __alloc_skb+0x1d7/0x7a0 [ 313.920440][ T150] ? __alloc_skb+0x1d7/0x7a0 [ 313.920475][ T150] __alloc_skb+0x1d7/0x7a0 [ 313.920505][ T150] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 313.920556][ T150] ? process_scheduled_works+0xa20/0x14e0 [ 313.920585][ T150] process_scheduled_works+0xa8e/0x14e0 [ 313.920651][ T150] ? __pfx_process_scheduled_works+0x10/0x10 [ 313.920689][ T150] ? assign_work+0x3cf/0x5d0 [ 313.920724][ T150] worker_thread+0xa47/0xfb0 [ 313.920770][ T150] ? __kthread_parkme+0x71/0x1f0 [ 313.920813][ T150] kthread+0x388/0x470 [ 313.920848][ T150] ? __pfx_worker_thread+0x10/0x10 [ 313.920876][ T150] ? __pfx_kthread+0x10/0x10 [ 313.920913][ T150] ret_from_fork+0x514/0xb70 [ 313.920962][ T150] ? __pfx_ret_from_fork+0x10/0x10 [ 313.920999][ T150] ? __switch_to+0xc89/0x1420 [ 313.921034][ T150] ? __pfx_kthread+0x10/0x10 [ 313.921075][ T150] ret_from_fork_asm+0x1a/0x30 [ 313.921118][ T150] [ 317.207471][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.207532][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 330.841814][ T8215] rdma_rxe: rxe_newlink: failed to add lo [ 334.671382][ T5606] Bluetooth: hci5: command 0x0406 tx timeout [ 335.268838][ T5601] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 335.394447][ T5601] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 335.441647][ T5601] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 335.470541][ T5601] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 335.522725][ T5601] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 337.014544][ T38] INFO: task syz.1.199:6571 blocked for more than 143 seconds. [ 337.014569][ T38] Not tainted syzkaller #0 [ 337.014582][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 337.014593][ T38] task:syz.1.199 state:D stack:28424 pid:6571 tgid:6562 ppid:5598 task_flags:0x400040 flags:0x00080002 [ 337.014672][ T38] Call Trace: [ 337.014681][ T38] [ 337.014696][ T38] __schedule+0x16dc/0x5500 [ 337.014735][ T38] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 337.014783][ T38] ? __pfx_sched_clock_cpu+0x10/0x10 [ 337.014824][ T38] ? __pfx___schedule+0x10/0x10 [ 337.014847][ T38] ? rt_mutex_slowlock_block+0x33a/0x680 [ 337.014901][ T38] rt_mutex_schedule+0x76/0xf0 [ 337.014930][ T38] rt_mutex_slowlock_block+0x55c/0x680 [ 337.014976][ T38] ? rt_mutex_slowlock_block+0x33a/0x680 [ 337.015017][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 337.015054][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 337.015090][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 337.015139][ T38] ? write_threads+0x3a0/0x5a0 [ 337.015177][ T38] ? write_threads+0x3a0/0x5a0 [ 337.015218][ T38] ? write_threads+0x3a0/0x5a0 [ 337.015250][ T38] mutex_lock_nested+0x168/0x1d0 [ 337.015292][ T38] write_threads+0x3a0/0x5a0 [ 337.015373][ T38] ? __might_fault+0xaf/0x130 [ 337.015495][ T38] ? __pfx_write_threads+0x10/0x10 [ 337.015643][ T38] ? _copy_from_user+0x94/0xb0 [ 337.015720][ T38] ? simple_transaction_get+0x130/0x170 [ 337.015804][ T38] nfsctl_transaction_write+0x112/0x160 [ 337.015964][ T38] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 337.016059][ T38] vfs_write+0x29f/0xbb0 [ 337.016164][ T38] ? __pfx_vfs_write+0x10/0x10 [ 337.016231][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 337.016309][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 337.016383][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 337.016439][ T38] ? mutex_lock_nested+0x152/0x1d0 [ 337.016535][ T38] ? fdget_pos+0x252/0x320 [ 337.016623][ T38] ksys_write+0x156/0x270 [ 337.016715][ T38] ? __pfx_ksys_write+0x10/0x10 [ 337.016819][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.016892][ T38] do_syscall_64+0x174/0x580 [ 337.016968][ T38] ? trace_irq_disable+0x3b/0x140 [ 337.017032][ T38] ? clear_bhb_loop+0x40/0x90 [ 337.017109][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.017134][ T38] RIP: 0033:0x7fc4fae5de99 [ 337.017156][ T38] RSP: 002b:00007fc4f9095028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 337.017246][ T38] RAX: ffffffffffffffda RBX: 00007fc4fb0e6090 RCX: 00007fc4fae5de99 [ 337.017308][ T38] RDX: 0000000000000002 RSI: 0000200000000340 RDI: 0000000000000003 [ 337.017365][ T38] RBP: 00007fc4faef3eaf R08: 0000000000000000 R09: 0000000000000000 [ 337.017408][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 337.017451][ T38] R13: 00007fc4fb0e6128 R14: 00007fc4fb0e6090 R15: 00007ffd91e55698 [ 337.017547][ T38] [ 337.017781][ T38] [ 337.017781][ T38] Showing all locks held in the system: [ 337.017813][ T38] 4 locks held by pr/legacy/17: [ 337.017865][ T38] 1 lock held by khungtaskd/38: [ 337.017898][ T38] #0: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 337.018064][ T38] 6 locks held by kworker/u8:5/150: [ 337.018105][ T38] 3 locks held by kworker/0:2/198: [ 337.018137][ T38] #0: ffff88823bf8c138 ((wq_completion)mm_percpu_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 337.018301][ T38] #1: ffffc90003ac7c40 ((work_completion)(&(({ do { const void *__vpp_verify = (typeof((&vmstat_work) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((&vmstat_work))) *)(( unsigned long)((&vmstat_work)))))((unsigned long)((__typeof_unqual__(*((&vmstat_work))) *)(( unsigned long)((&vmstat_work)))) + (((__per_cpu_offset[(cpu)]))))); }))->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 337.018517][ T38] #2: ffff8880b8642d98 (&pcp->lock){+.+.}-{3:3}, at: decay_pcp_high+0x118/0x280 [ 337.018634][ T38] 3 locks held by kworker/u8:8/1141: [ 337.018656][ T38] #0: ffff888031720138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 337.018852][ T38] #1: ffffc9000636fc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 337.018998][ T38] #2: ffffffff8f5b1df8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x123/0x16e0 [ 337.019146][ T38] 6 locks held by kworker/u8:12/1455: [ 337.019220][ T38] 1 lock held by klogd/4949: [ 337.019253][ T38] 4 locks held by kworker/0:3/5326: [ 337.019287][ T38] #0: ffff888032b12138 ((wq_completion)smc_hs_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 337.019448][ T38] #1: ffffc90004157c40 ((work_completion)(&smc->connect_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 337.019606][ T38] #2: ffff88804d8a0358 (sk_lock-AF_SMC){+.+.}-{0:0}, at: smc_connect_work+0x1e2/0x810 [ 337.019745][ T38] #3: ffffffff8f5b1df8 (rtnl_mutex){+.+.}-{4:4}, at: pnet_find_base_ndev+0x6c/0x1b0 [ 337.019906][ T38] 2 locks held by getty/5351: [ 337.019933][ T38] #0: ffff888035fa30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 337.020117][ T38] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 337.020286][ T38] 3 locks held by kworker/u8:13/6187: [ 337.020320][ T38] #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 337.020481][ T38] #1: ffffc9000631fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 337.020639][ T38] #2: ffffffff8f5b1df8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 337.020799][ T38] 5 locks held by kworker/u8:15/6194: [ 337.020832][ T38] 3 locks held by kworker/u8:19/6289: [ 337.020873][ T38] 3 locks held by syz.1.199/6563: [ 337.020904][ T38] #0: ffff88802ac0a328 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 337.021058][ T38] #1: ffff8880373de500 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 337.021230][ T38] #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20 [ 337.021406][ T38] 3 locks held by syz.1.199/6571: [ 337.021454][ T38] #0: ffff888022304928 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 337.021602][ T38] #1: ffff8880373de500 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 337.021768][ T38] #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3a0/0x5a0 [ 337.021920][ T38] 3 locks held by syz.3.289/6898: [ 337.021934][ T38] #0: ffff88803c1fcd28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 337.022080][ T38] #1: ffff88803bcbe500 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 337.022257][ T38] #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20 [ 337.022419][ T38] 3 locks held by syz.3.289/6899: [ 337.022460][ T38] #0: ffff88803b705328 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 337.022608][ T38] #1: ffff88803bcbe500 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 337.022772][ T38] #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3a0/0x5a0 [ 337.022936][ T38] 2 locks held by syz-executor/6900: [ 337.022970][ T38] #0: ffff888070e260d0 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 337.023123][ T38] #1: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x4e/0xd0 [ 337.023272][ T38] 3 locks held by syz.4.290/6905: [ 337.120986][ T38] #0: ffff888031855d28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 337.121186][ T38] #1: ffff88806db3c500 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 337.121368][ T38] #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20 [ 337.121556][ T38] 3 locks held by syz.4.290/6909: [ 337.121589][ T38] #0: ffff888029f5c728 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 337.121726][ T38] #1: ffff88806db3c500 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 337.121913][ T38] #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3a0/0x5a0 [ 337.122090][ T38] 2 locks held by syz-executor/7029: [ 337.122130][ T38] #0: ffff8880633ec0d0 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 337.122295][ T38] #1: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x4e/0xd0 [ 337.136353][ T38] 3 locks held by syz.6.293/7239: [ 337.136406][ T38] #0: ffff888066923928 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 337.136579][ T38] #1: ffff88803c160500 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 337.136754][ T38] #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 337.136924][ T38] 3 locks held by syz.6.293/7241: [ 337.136952][ T38] #0: ffff888037a52728 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 337.137100][ T38] #1: ffff88803c160500 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 337.137262][ T38] #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20 [ 337.137434][ T38] 3 locks held by syz.6.293/7244: [ 337.137476][ T38] #0: ffff888037a52f28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 337.137567][ T38] #1: ffff88803c160500 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 337.137769][ T38] #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3a0/0x5a0 [ 337.149289][ T38] 2 locks held by syz-executor/7469: [ 337.149305][ T38] #0: ffff88806f2a40d0 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 337.149370][ T38] #1: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x4e/0xd0 [ 337.149438][ T38] 3 locks held by syz.0.314/7509: [ 337.149452][ T38] #0: ffff8880353c6728 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 337.149508][ T38] #1: ffff888071346500 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 337.149573][ T38] #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20 [ 337.149638][ T38] 3 locks held by syz.0.314/7513: [ 337.149651][ T38] #0: ffff88803591ff28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 337.149707][ T38] #1: ffff888071346500 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 337.149771][ T38] #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3a0/0x5a0 [ 337.149837][ T38] 2 locks held by syz-executor/7590: [ 337.149851][ T38] #0: ffff8880757dc0d0 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 337.149912][ T38] #1: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x4e/0xd0 [ 337.149973][ T38] 1 lock held by syz-executor/7691: [ 337.149986][ T38] #0: ffffffff8f5b1df8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 337.150055][ T38] 1 lock held by syz-executor/7834: [ 337.150067][ T38] #0: ffffffff8f5b1df8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 337.150135][ T38] 2 locks held by dhcpcd-run-hook/8176: [ 337.150149][ T38] 2 locks held by kworker/u8:21/8203: [ 337.150162][ T38] #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 337.150222][ T38] #1: ffffc90004447c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 337.150284][ T38] 5 locks held by kworker/u8:23/8205: [ 337.150298][ T38] 1 lock held by syz.3.347/8214: [ 337.150312][ T38] #0: ffff88803fdd1db8 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: sock_close+0x82/0x220 [ 337.150382][ T38] 1 lock held by syz.3.347/8216: [ 337.150395][ T38] #0: ffffffff8f5b1df8 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 337.150457][ T38] 2 locks held by modprobe/8225: [ 337.150487][ T38] [ 337.150494][ T38] ============================================= [ 337.150494][ T38] [ 337.150521][ T38] NMI backtrace for cpu 0 [ 337.150540][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 337.150578][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 337.150593][ T38] Call Trace: [ 337.150601][ T38] [ 337.150612][ T38] dump_stack_lvl+0xe8/0x150 [ 337.150648][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 337.150671][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 337.150714][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 337.150755][ T38] sys_info+0x135/0x170 [ 337.150787][ T38] watchdog+0xfd7/0x1030 [ 337.150818][ T38] ? watchdog+0x1c7/0x1030 [ 337.150851][ T38] kthread+0x388/0x470 [ 337.150926][ T38] ? __pfx_watchdog+0x10/0x10 [ 337.150951][ T38] ? __pfx_kthread+0x10/0x10 [ 337.151055][ T38] ret_from_fork+0x514/0xb70 [ 337.151168][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 337.151262][ T38] ? __switch_to+0xc89/0x1420 [ 337.151345][ T38] ? __pfx_kthread+0x10/0x10 [ 337.151452][ T38] ret_from_fork_asm+0x1a/0x30 [ 337.151559][ T38] [ 337.151646][ T38] Sending NMI from CPU 0 to CPUs 1: [ 337.151724][ C1] NMI backtrace for cpu 1 [ 337.151741][ C1] CPU: 1 UID: 0 PID: 17 Comm: pr/legacy Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 337.151763][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 337.151774][ C1] RIP: 0010:io_serial_out+0x7c/0xc0 [ 337.151806][ C1] Code: bc 6f fc 44 89 f9 d3 e5 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 2c 2f d9 fc 41 03 2e 89 d8 89 ea ee <5b> 41 5c 41 5e 41 5f 5d e9 97 70 f1 05 cc 44 89 f9 80 e1 07 38 c1 [ 337.151823][ C1] RSP: 0018:ffffc90000167a70 EFLAGS: 00000202 [ 337.151840][ C1] RAX: 0000000000000065 RBX: 0000000000000065 RCX: 0000000000000000 [ 337.151853][ C1] RDX: 00000000000003f8 RSI: 0000000000000000 RDI: 0000000000000000 [ 337.151865][ C1] RBP: 00000000000003f8 R08: 0000000000000000 R09: 0000000000000000 [ 337.151876][ C1] R10: dffffc0000000000 R11: ffffffff85560dc0 R12: dffffc0000000000 [ 337.151891][ C1] R13: ffffffff99e4acc0 R14: ffffffff99e4ad40 R15: 0000000000000000 [ 337.151906][ C1] FS: 0000000000000000(0000) GS:ffff888125d41000(0000) knlGS:0000000000000000 [ 337.151928][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 337.151941][ C1] CR2: 00007f74862944e8 CR3: 0000000011678000 CR4: 00000000003526f0 [ 337.151958][ C1] Call Trace: [ 337.151965][ C1] [ 337.151975][ C1] serial8250_console_write+0x1201/0x1b40 [ 337.152011][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 337.152039][ C1] ? console_flush_one_record+0xfa/0xb50 [ 337.152062][ C1] ? console_flush_one_record+0x472/0xb50 [ 337.152084][ C1] console_flush_one_record+0x642/0xb50 [ 337.152106][ C1] ? console_flush_one_record+0xfa/0xb50 [ 337.152129][ C1] ? __pfx_console_flush_one_record+0x10/0x10 [ 337.152150][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 337.152177][ C1] legacy_kthread_func+0x1b6/0x250 [ 337.152202][ C1] ? __pfx_legacy_kthread_func+0x10/0x10 [ 337.152221][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 337.152252][ C1] ? __kthread_parkme+0x71/0x1f0 [ 337.152278][ C1] ? __kthread_parkme+0x196/0x1f0 [ 337.152306][ C1] kthread+0x388/0x470 [ 337.152335][ C1] ? __pfx_legacy_kthread_func+0x10/0x10 [ 337.152352][ C1] ? __pfx_kthread+0x10/0x10 [ 337.152382][ C1] ret_from_fork+0x514/0xb70 [ 337.152412][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 337.152443][ C1] ? __switch_to+0xc89/0x1420 [ 337.152469][ C1] ? __pfx_kthread+0x10/0x10 [ 337.152499][ C1] ret_from_fork_asm+0x1a/0x30 [ 337.152527][ C1] [ 337.213941][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 337.214024][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 337.214120][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 337.214169][ T38] Call Trace: [ 337.214200][ T38] [ 337.214225][ T38] vpanic+0x56c/0xa60 [ 337.214290][ T38] ? __pfx___schedule+0x10/0x10 [ 337.214338][ T38] ? __pfx_vpanic+0x10/0x10 [ 337.214433][ T38] panic+0xc5/0xd0 [ 337.214495][ T38] ? __pfx_panic+0x10/0x10 [ 337.214550][ T38] ? preempt_schedule_common+0x82/0xd0 [ 337.214623][ T38] ? preempt_schedule_thunk+0x16/0x40 [ 337.214700][ T38] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 337.214807][ T38] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 337.214914][ T38] watchdog+0x1030/0x1030 [ 337.214993][ T38] ? watchdog+0x1c7/0x1030 [ 337.215067][ T38] kthread+0x388/0x470 [ 337.215156][ T38] ? __pfx_watchdog+0x10/0x10 [ 337.215209][ T38] ? __pfx_kthread+0x10/0x10 [ 337.215324][ T38] ret_from_fork+0x514/0xb70 [ 337.215455][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 337.215552][ T38] ? __switch_to+0xc89/0x1420 [ 337.215640][ T38] ? __pfx_kthread+0x10/0x10 [ 337.215730][ T38] ret_from_fork_asm+0x1a/0x30 [ 337.215838][ T38] [ 337.216464][ T38] Kernel Offset: disabled