last executing test programs: 1m11.135903753s ago: executing program 2 (id=108): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1001001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1122334455667788}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8877665544332211}]}]}, 0x38}}, 0x0) 1m10.728678165s ago: executing program 2 (id=112): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) listen(r0, 0xa) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[{0x10, 0x110, 0x9}], 0x10}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000100)="0000000100000001000000010000000100000001010500000000000168656c6c6f", 0x21, 0x0, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) nanosleep(&(0x7f0000000300)={0x0, 0xbebc200}, 0x0) 1m10.324401114s ago: executing program 2 (id=116): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='-2 -3 -4\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='3\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='1\n\x00', 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000300)={0x2, 0x801, @loopback}, 0x10) 1m8.186223125s ago: executing program 2 (id=124): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ed) mount(&(0x7f0000000200)=@filename='none\x00', 0x0, &(0x7f0000000400)='proc\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000700)="1c000000100001000100000000000000030100000b00020073756e7270630000", 0x1c}], 0x1}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./proc/net/rpc/auth.unix.ip/content\x00', 0x0, 0x0) read(r1, &(0x7f0000000c00)=""/4096, 0x1000) 1m7.972798623s ago: executing program 2 (id=126): r0 = syz_usb_connect(0x0, 0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040b90661400001010200010902200001010080320904000002ff000000070581020002000705020200020012010002000000000000000000"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) r1 = socket(0x8, 0x2, 0x0) setsockopt(r1, 0x108, 0x2, &(0x7f0000000100)="0000000000000000000000000000000000000000000000000000000000000000000000000000000005000000", 0x2c) connect(r1, &(0x7f0000000200)=@generic={0x8, '\x00\x00#\x00'}, 0x10) ioctl(r1, 0x80047437, &(0x7f0000000280)='\x00\x00\x00\x00') r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl(r2, 0x80047438, &(0x7f0000000280)='\x00\x00\x00\x00') ioctl(r1, 0x40046102, &(0x7f0000000400)="0100") syz_usb_ep_write(r0, 0x81, 0x35, &(0x7f0000000500)="0000023200112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677880000000000000028") nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 1m7.556019989s ago: executing program 1 (id=128): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0}}, [@NFT_MSG_NEWTABLE={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0}}}}}, 0x0) 1m7.271512817s ago: executing program 1 (id=130): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="200000003f00010001000000000000000101000000000000080001006f7673300800020000000000"], 0x20}], 0x1}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="440000004100010001000000000000000101000000000000240001001000040001020304050606050403020106000600080000000800030004000100"], 0x44}], 0x1}, 0x0) 1m6.974731086s ago: executing program 1 (id=133): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) listen(r0, 0x5) r1 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000250)}], 0x1, &(0x7f0000000300)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x18, 0x110, 0x2, "01000000"}], 0x30}, 0x0) shutdown(r0, 0x2) close(r0) 1m6.640516022s ago: executing program 1 (id=136): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 1m6.508036346s ago: executing program 1 (id=137): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ed) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000300)='./proc\x00', 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000700)="1c000000100001000100000000000000030100000b00020073756e7270630000", 0x1c}], 0x1}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./proc/net/rpc/auth.unix.ip/content\x00', 0x0, 0x0) read(r1, &(0x7f0000000c00)=""/4096, 0x1000) 1m5.804626609s ago: executing program 1 (id=140): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./export_dir\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd_mnt/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='-2 -3 +4\n', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc_mnt/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='localhost / 2147483647 0 0 0 0\n', 0x1f) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc_mnt/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0) write(r4, &(0x7f0000000440)='localhost 1 \\x00 2147483647 /\n', 0x1e) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./nfsd_mnt/threads\x00', 0x1, 0x0) write(r5, &(0x7f00000004c0)='1\n', 0x2) (async) close(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./nfs_mnt\x00', 0x1ff) mount(&(0x7f0000000540)=@filename='127.0.0.1:/\x00', &(0x7f0000000580)='./nfs_mnt\x00', &(0x7f00000005c0)='nfs4\x00', 0x0, &(0x7f0000000600)='addr=127.0.0.1,clientaddr=127.0.0.1\x00') setxattr(&(0x7f0000000640)='./nfs_mnt\x00', &(0x7f0000000680)=@known='system.posix_acl_access\x00', &(0x7f00000006c0)='\x02\x00\x00\x00\x01\x00\a\x00\xff\xff\xff\xff\x04\x00\x05\x00\xff\xff\xff\xff \x00\x05\x00\xff\xff\xff\xff', 0x1c, 0x0) 1m4.771215928s ago: executing program 2 (id=145): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/ports\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='2049\n', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='1\n', 0x2) 57.148821563s ago: executing program 3 (id=204): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ed) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000300)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r1, &(0x7f0000000900)='nfsd 127.0.0.1 2000000000 test\n', 0x1f) sendmsg(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000c00)="1400000010000103010000000000000002010000", 0x14}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000f00)="1400000011000103010000000000000002010000", 0x14}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000001200)="1400000012000103010000000000000002010000", 0x14}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001500)="1400000013000103010000000000000002010000", 0x14}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000001800)="1400000014000103010000000000000002010000", 0x14}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000001b00)="1400000015000103010000000000000002010000", 0x14}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000001e00)="1400000016000103010000000000000002010000", 0x14}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000002100)="1400000017000103010000000000000002010000", 0x14}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000002400)="1400000018000103010000000000000002010000", 0x14}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000002500)={0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000002700)="1400000019000103010000000000000002010000", 0x14}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000002900)=[{&(0x7f0000002a00)="140000001a000103010000000000000002010000", 0x14}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002d00)="140000001b000103010000000000000002010000", 0x14}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000003000)="140000001c000103010000000000000002010000", 0x14}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000003100)={0x0, 0x0, &(0x7f0000003200)=[{&(0x7f0000003300)="140000001d000103010000000000000002010000", 0x14}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000003400)={0x0, 0x0, &(0x7f0000003500)=[{&(0x7f0000003600)="140000001e000103010000000000000002010000", 0x14}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000003800)=[{&(0x7f0000003900)="140000001f000103010000000000000002010000", 0x14}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000003a00)={0x0, 0x0, &(0x7f0000003b00)=[{&(0x7f0000003c00)="1400000020000103010000000000000002010000", 0x14}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000003d00)={0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000003f00)="1400000021000103010000000000000002010000", 0x14}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000004000)={0x0, 0x0, &(0x7f0000004100)=[{&(0x7f0000004200)="1400000022000103010000000000000002010000", 0x14}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000004300)={0x0, 0x0, &(0x7f0000004400)=[{&(0x7f0000004500)="1400000023000103010000000000000002010000", 0x14}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000004600)={0x0, 0x0, &(0x7f0000004700)=[{&(0x7f0000004800)="1400000024000103010000000000000002010000", 0x14}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000004900)={0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000004b00)="1400000025000103010000000000000002010000", 0x14}], 0x1}, 0x0) recvfrom(r0, &(0x7f0000004c00)=""/4096, 0x1000, 0x40, 0x0, 0x0) 53.303461053s ago: executing program 4 (id=207): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x10, 0x2, [@TCA_GRED_DPS={0xc, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x13c, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x118, 0x2, [@TCA_GRED_PARMS={0x2c, 0x1, {0x1000, 0xa, 0x64}}, @TCA_GRED_STAB={0x104}, @TCA_GRED_DPS={0xc, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x13c}}, 0x0) 49.438896959s ago: executing program 32 (id=140): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./export_dir\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd_mnt/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='-2 -3 +4\n', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc_mnt/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='localhost / 2147483647 0 0 0 0\n', 0x1f) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc_mnt/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0) write(r4, &(0x7f0000000440)='localhost 1 \\x00 2147483647 /\n', 0x1e) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./nfsd_mnt/threads\x00', 0x1, 0x0) write(r5, &(0x7f00000004c0)='1\n', 0x2) (async) close(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./nfs_mnt\x00', 0x1ff) mount(&(0x7f0000000540)=@filename='127.0.0.1:/\x00', &(0x7f0000000580)='./nfs_mnt\x00', &(0x7f00000005c0)='nfs4\x00', 0x0, &(0x7f0000000600)='addr=127.0.0.1,clientaddr=127.0.0.1\x00') setxattr(&(0x7f0000000640)='./nfs_mnt\x00', &(0x7f0000000680)=@known='system.posix_acl_access\x00', &(0x7f00000006c0)='\x02\x00\x00\x00\x01\x00\a\x00\xff\xff\xff\xff\x04\x00\x05\x00\xff\xff\xff\xff \x00\x05\x00\xff\xff\xff\xff', 0x1c, 0x0) 47.895445703s ago: executing program 33 (id=145): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/ports\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='2049\n', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='1\n', 0x2) 47.33024152s ago: executing program 3 (id=211): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}}, 0x0) 47.19966601s ago: executing program 4 (id=212): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x1001}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r2, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x1, 0x1000001}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x34, r2, 0x1, 0x0, 0x0, {{}, {0x0, 0x8041}, {0x1c, 0x1, {0x1, 0x0, @l2={'eth', 0x3a, 'syz_tun\x00'}}}}}, 0x34}}, 0x0) socket$packet(0x11, 0x3, 0xca88) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000300)=@nameseq={0x1e, 0x2, 0x0, {0x3e8, 0x1, 0x1}}, 0x10) sendmsg$tipc(r3, &(0x7f0000000400)={&(0x7f0000000300)=@nameseq={0x1e, 0x2, 0x0, {0x3e8, 0x1, 0x1}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000480)='hello world', 0xb}], 0x1}, 0x0) write(r0, &(0x7f0000000500)="ffffffffffff00000000000188ca2000002800000001010000010100000200"/50, 0x32) write(r0, &(0x7f0000000600)="ffffffffffff00000000000188ca2000002800000002010000010100000200"/50, 0x32) sendmsg$tipc(r3, &(0x7f0000000400)={&(0x7f0000000300)=@nameseq={0x1e, 0x2, 0x0, {0x3e8, 0x1, 0x1}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000480)='hello world', 0xb}], 0x1}, 0x0) nanosleep(&(0x7f0000000700)={0x0, 0x989680}, 0x0) write(r0, &(0x7f0000000800)="ffffffffffff00000000000188ca200000280000000001000001010000020000000000000000000000000000000100010000", 0x32) 44.89684572s ago: executing program 3 (id=213): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, r2, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000) write(0xffffffffffffffff, &(0x7f0000000500)="01000000", 0x4) read(0xffffffffffffffff, &(0x7f0000000000), 0x4) write(0xffffffffffffffff, &(0x7f0000000600)='\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00', 0x10) read(0xffffffffffffffff, &(0x7f0000000140), 0x10) sendmsg$xdp(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x40) ppoll(&(0x7f0000000800)=[{r0, 0x4}], 0x1, 0x0, 0x0, 0x0) 40.377123322s ago: executing program 4 (id=215): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newaddr={0x28, 0x14, 0x601, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0x1}, [@IFA_LOCAL={0x8, 0x2, @rand_addr=0x1010101}, @IFA_ADDRESS={0x8, 0x1, @rand_addr=0x1010101}]}, 0x28}}, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000400)=0x2, 0x4) bind$rds(r1, &(0x7f0000000500)={0x2, 0x1234, @rand_addr=0x1010101}, 0x10) sendmsg$rds(r1, &(0x7f0000000600)={&(0x7f0000000700)={0x2, 0x1234, @rand_addr=0x1010202}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000900)=""/4, 0x8}], 0x1}, 0x0) nanosleep(&(0x7f0000000a00)={0x1}, 0x0) sendmsg$rds(r1, &(0x7f0000000600)={&(0x7f0000000700)={0x2, 0x1234, @rand_addr=0x1010202}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000900)=""/4, 0x8}], 0x1}, 0x0) nanosleep(&(0x7f0000000a00)={0x1}, 0x0) 39.436762559s ago: executing program 3 (id=216): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x12, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x10) listen(r0, 0x5) syz_emit_ethernet(0x11, &(0x7f0000000200)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @remote, @void, {@llc={0x4, {@llc={0x12, 0x12, 'o'}}}}}, 0x0) syz_emit_ethernet(0x12, &(0x7f0000000300)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @remote, @void, {@llc={0x4, {@llc={0x12, 0x12, "0108"}}}}}, 0x0) 35.797415191s ago: executing program 4 (id=217): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4321, @loopback}, 0x10) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) connect$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4321, @loopback}}, 0x24) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)='hello\x00', 0x6}], 0x1, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) recvfrom(r0, &(0x7f0000000300), 0x100, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r3, &(0x7f0000000500)="0200", 0x2) read(r2, &(0x7f0000000314), 0x2) write(r3, &(0x7f0000000600)="00020000000000010000000000000001010101", 0x13) read(r2, &(0x7f000000031c), 0x13) sendto(r0, &(0x7f0000000300), 0x2f, 0x0, &(0x7f0000000700)=@in={0x2, 0x1234, @loopback}, 0x10) recvfrom$rxrpc(r1, &(0x7f0000000900), 0x100, 0x0, 0x0, 0x0) (async) nanosleep(&(0x7f0000000800)={0x0, 0x1dcd6500}, 0x0) 34.956644482s ago: executing program 3 (id=218): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='-2 -3 +4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='udp 2049\x00', 0x9) write(r1, &(0x7f00000001c0)='tcp 2049\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='1\x00', 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r3, &(0x7f0000000280)="0000000100"/32, 0x20, 0x0, &(0x7f00000002c0)={0x2, 0x801, @loopback}, 0x10) 34.910215297s ago: executing program 0 (id=219): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='proc\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='proc\x00', &(0x7f00000000c0)='proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='proc/sys/net/ipv4/conf/all/accept_source_route\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='proc/sys/net/ipv4/conf/default/accept_source_route\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='1\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='proc/sys/net/ipv4/conf/all/forwarding\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='1\n', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='proc/sys/net/ipv4/conf/default/forwarding\x00', 0x1, 0x0) write(r4, &(0x7f0000000380)='1\n', 0x2) syz_emit_ethernet(0x2a, &(0x7f00000003c0)={@local, @empty, @void, {@ipv4={0x800, @generic={{0x7, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x40, 0x0, 0x0, @private=0xa0000001, @private=0xa0000002, {[@lsrr={0x83, 0x7, 0x4, [@private=0xa0000003]}]}}}}}}, 0x0) 32.149109027s ago: executing program 4 (id=220): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0xc0, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x90, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x4]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3e8}]}]}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0xc0}}, 0x0) nanosleep(&(0x7f0000000600)={0x0, 0x5f5e100}, 0x0) 30.676819243s ago: executing program 3 (id=221): r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000200)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='ms_mode\x00', &(0x7f0000000400)='secure\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) nanosleep(&(0x7f0000000500)={0x1}, 0x0) 29.983638841s ago: executing program 0 (id=222): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001800010600000000000000002d0100000000000100000000050001000a0000000c000500010000000c000000300000001800010600000000000000002d0100000000000100000000050001000b0000000c000500010000000c000000300000001800010600000000000000002d0100000000000100000000050001000c0000000c000500010000000c000000300000001800010600000000000000002d0100000000000100000000050001000d0000000c000500010000000c000000"], 0xc0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000000), 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001800010600000000000000002d0100000000000100000000050001000e0000000c000500010000000c000000300000001800010600000000000000002d0100000000000100000000050001000f0000000c000500010000000c000000300000001800010600000000000000002d010000000000010000000005000100100000000c000500010000000c000000300000001800010600000000000000002d010000000000010000000005000100110000000c000500010000000c000000"], 0xc0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000000), 0xc, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="300000001800010600000000000000002d010000000000010000000005000100220000000c000500010000000c000000300000001800010600000000000000002d010000000000010000000005000100230000000c0005000100"], 0xc0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c00)={&(0x7f0000000000), 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=ANY=[@ANYBLOB="300000001800010600000000000000002d0100000000000100000000050001002e0000000c000500010000000c000000300000001800010600000000000000002d0100000000000100000000050001002f0000000c000500010000000c000000300000001800010600000000000000002d010000000000010000000005000100300000000c000500010000000c000000300000001800010600000000000000002d010000000000010000000005000100310000000c000500010000000c000000"], 0xc0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000d40)={&(0x7f0000000000), 0x0, &(0x7f0000000d80)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="300000001800010600000000000000002d010000000000010000000005000100320000000c000500010000000c000000300000001800010600000000000000002d010000000000010000000005000100330000000c000500010000000c000000300000001800010600000000000000002d010000000000010000000005000100340000000c000500010000000c000000300000001800010600000000000000002d010000000000010000000005000100350000000c000500010000000c000000"], 0xc0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000e80)={&(0x7f0000000000), 0x0, &(0x7f0000000ec0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800010600000000000000002d010000000000010000000005000100360000000c000500010000000c000000300000001800010600000000000000002d010000000000010000000005000100370000000c000500010000000c000000300000001800010600000000000000002d010000000000010000000005000100380000000c000500010000000c000000300000001800010600000000000000002d010000000000010000000005000100390000000c000500010000000c000000"], 0xc0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000fc0)={&(0x7f0000000000), 0x0, &(0x7f0000001000)={&(0x7f0000001040)=ANY=[@ANYBLOB="300000001800010600000000000000002d0100000000000100000000050001003a0000000c000500010000000c000000300000001800010600000000000000002d0100000000000100000000050001003b0000000c000500010000000c000000300000001800010600000000000000002d0100000000000100000000050001003c0000000c000500010000000c000000300000001800010600000000000000002d0100000000000100000000050001003d0000000c000500010000000c000000"], 0xc0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000002000)={&(0x7f0000000000), 0x0, &(0x7f0000002040)={&(0x7f0000002080)=ANY=[@ANYBLOB="1c0000001a00010301000000000000002d00"/28], 0x1c}}, 0x0) 28.975621282s ago: executing program 4 (id=223): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='udp 2049\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='tcp 2049\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='4\x00', 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r3, &(0x7f0000000200)="000000010000000000000002000186a30000000300"/40, 0x24, 0x0, &(0x7f0000000240)={0x2, 0x801, @loopback}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000240)={0x2, 0x801, @loopback}, 0x10) sendto$inet(r4, &(0x7f0000000200)="80000024000000010000000000000002000186a30000000300"/44, 0x28, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0xbebc200}, 0x0) 27.013471327s ago: executing program 0 (id=224): setns(0xc9, 0x0) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r1 = openat(r0, &(0x7f0000001040)='root\x00', 0x0, 0x0) r2 = openat(r1, &(0x7f0000001080)='proc/1/net/atm/vc\x00', 0x0, 0x0) read(r2, &(0x7f00000010c0)=""/4096, 0x1000) r3 = openat(r1, &(0x7f00000020c0)='proc/1/net/atm/pvc\x00', 0x0, 0x0) read(r3, &(0x7f0000002100)=""/4096, 0x1000) 25.670975814s ago: executing program 0 (id=225): r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='mon_addr\x00', &(0x7f0000000200)='127.0.0.1:6789\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='source\x00', &(0x7f0000000400)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000500)='mount_timeout\x00', &(0x7f0000000600)='0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 22.3372717s ago: executing program 0 (id=226): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='A', 0x10}], 0x1}, 0x0) 22.273123806s ago: executing program 0 (id=227): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='nfsd\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='-3 +4.0\n', 0x8) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='2\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='\\x01000000 2000000000 0 0 0 krb5 \\x01000000ffffff7f000000000000000011000000000102030405060708090a0b0c0d0e0f\n', 0x85) (async) close(r3) r4 = socket$inet(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000500)={0x2, 0x801, @loopback}, 0x10) write(r4, &(0x7f0000000600)="80000070123456780000000000000002000186a300000004000000000000000600000024000000010000000100000001000000020000000401000000000000060000000800000001000000000000000100000020040405ff00000000000000000000000100"/116, 0x74) read(r4, &(0x7f0000000800)=""/100, 0x100) close(r4) 15.32790334s ago: executing program 34 (id=221): r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000200)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='ms_mode\x00', &(0x7f0000000400)='secure\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) nanosleep(&(0x7f0000000500)={0x1}, 0x0) 14.555044891s ago: executing program 6 (id=210): mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/sctp/addip_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='1', 0x1) close(r0) write(0xffffffffffffffff, &(0x7f0000000180)='1', 0x1) close(0xffffffffffffffff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e21, @loopback}, 0x10) listen(r1, 0x5) bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e22, @loopback}, 0x10) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @loopback}, 0x10) r3 = accept(r1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x4e22, @local}], 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000340)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e22, @loopback}}}, 0x84) nanosleep(&(0x7f0000000400)={0x0, 0x1dcd6500}, 0x0) 13.923213511s ago: executing program 6 (id=233): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) 13.863757805s ago: executing program 35 (id=223): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='udp 2049\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='tcp 2049\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='4\x00', 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r3, &(0x7f0000000200)="000000010000000000000002000186a30000000300"/40, 0x24, 0x0, &(0x7f0000000240)={0x2, 0x801, @loopback}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000240)={0x2, 0x801, @loopback}, 0x10) sendto$inet(r4, &(0x7f0000000200)="80000024000000010000000000000002000186a30000000300"/44, 0x28, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0xbebc200}, 0x0) 13.367296639s ago: executing program 6 (id=236): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @empty}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) 12.910620382s ago: executing program 6 (id=237): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x38, 0x1403, 0x5, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x38, 0x1403, 0x5, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000200), r1) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x48, r2, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x48}}, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x48, r2, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'lo\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x48}}, 0x0) nanosleep(&(0x7f0000000600)={0x0, 0x5f5e100}, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) bind(r3, &(0x7f0000000700)=@in={0x2, 0x2382, @local}, 0x10) listen(r3, 0x5) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000800)={0x2, 0x2382, @local}, 0x10) r5 = accept(r3, 0x0, 0x0) shutdown(r4, 0x2) shutdown(r5, 0x2) close(r5) close(r4) close(r3) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x18, 0x1404, 0x5, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x18, 0x1404, 0x5, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}}, 0x0) nanosleep(&(0x7f0000000600)={0x0, 0xbebc200}, 0x0) 11.302585024s ago: executing program 5 (id=240): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={&(0x7f0000000040), 0x10, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={&(0x7f0000000140), 0x10, &(0x7f0000000180)={&(0x7f00000001c0)=@newtclass={0x50, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1, 0x1}, {0x0, 0x1}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x18, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x64}, @TCA_QFQ_LMAX={0x8, 0x2, 0x5dc}]}}]}, 0x50}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000500)=0x10001, 0x4) connect$inet(r1, &(0x7f0000000600)={0x2, 0x1234, @loopback}, 0x10) write(r1, &(0x7f0000000700)='hello', 0x5) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000240), 0x10, &(0x7f0000000280)={&(0x7f00000002c0)=@deltclass={0x40, 0x29, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1, 0x1}, {0x0, 0x1}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x8}}]}, 0x40}}, 0x0) 10.860347853s ago: executing program 5 (id=241): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000300)) bind$x25(r2, &(0x7f0000000400), 0x12) connect$x25(r2, &(0x7f0000000500), 0x12) write$tun(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="0101010101"], 0x5) sendto$x25(r2, &(0x7f0000000700)="1234567890", 0x5, 0x4, 0x0, 0x0) 9.988590743s ago: executing program 5 (id=242): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/sctp/addip_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='1', 0x1) close(r0) write(0xffffffffffffffff, &(0x7f0000000180)='1', 0x1) close(0xffffffffffffffff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e21, @loopback}, 0x10) listen(r1, 0x5) bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e22, @loopback}, 0x10) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @loopback}, 0x10) r3 = accept(r1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x4e22, @local}], 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000340)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e22, @loopback}}}, 0x84) nanosleep(&(0x7f0000000400)={0x0, 0x1dcd6500}, 0x0) 9.076389352s ago: executing program 5 (id=243): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x0, 0x10, 0x5, 0x0, 0x0, {{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {@in=@loopback, 0x1234, 0x6c}, @in=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x0, 0x81, {{'deflate\x00'}}}]}, 0x138}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newpolicy={0x0, 0x13, 0x5, 0x0, 0x0, {{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x0, 0x8c, [{{@in=@loopback, 0x1234, 0x6c}, 0x2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000500)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x1234, 0x6c}, 0x2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}}, 0xe8) sendmsg$inet(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000900)="12345678901234567890123456789012345678901234567890123456789012345678901234567890", 0x50}], 0x1}, 0x4000000) 8.976081363s ago: executing program 5 (id=244): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}}, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x5f5e100}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind(r1, &(0x7f0000000300)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xaa}}, 0x10) listen(r1, 0x5) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000400)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xaa}}, 0x10) 6.3972807s ago: executing program 36 (id=227): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='nfsd\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='-3 +4.0\n', 0x8) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='2\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='\\x01000000 2000000000 0 0 0 krb5 \\x01000000ffffff7f000000000000000011000000000102030405060708090a0b0c0d0e0f\n', 0x85) (async) close(r3) r4 = socket$inet(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000500)={0x2, 0x801, @loopback}, 0x10) write(r4, &(0x7f0000000600)="80000070123456780000000000000002000186a300000004000000000000000600000024000000010000000100000001000000020000000401000000000000060000000800000001000000000000000100000020040405ff00000000000000000000000100"/116, 0x74) read(r4, &(0x7f0000000800)=""/100, 0x100) close(r4) 0s ago: executing program 5 (id=246): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newsa={0x150, 0x10, 0x1, 0x0, 0x0, {{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {@in=@loopback, 0xbe3412, 0x32}, @in=@loopback, {}, {}, {}, 0x0, 0x1, 0x2}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x150}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="940000002900010000000000000000007f00000100000000000000000000000000be3412020032007f0000020000000000000000000000007f00000100000000000000000000000000000000000000007f0000010000000000000000000000007f000001000000000000000000000000000000000000000002002020000000000000000000000000010000000000000002000000"], 0x94}}, 0x0) kernel console output (not intermixed with test programs): BIOS Google 07/16/2026 [ 152.683651][ C1] Call Trace: [ 152.683673][ C1] [ 152.683694][ C1] dump_stack_lvl+0xe8/0x150 [ 152.683815][ C1] should_fail_ex+0x467/0x600 [ 152.683934][ C1] should_failslab+0xa8/0x100 [ 152.684015][ C1] kmem_cache_alloc_node_noprof+0xae/0x670 [ 152.684079][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 152.684139][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 152.684223][ C1] __alloc_skb+0x1d7/0x7a0 [ 152.684303][ C1] __netdev_alloc_skb+0xc0/0x4b0 [ 152.684379][ C1] __ieee80211_beacon_get+0xc97/0x1820 [ 152.684462][ C1] ? __lock_acquire+0x683/0x2ce0 [ 152.684525][ C1] ? __ieee80211_beacon_get+0x34/0x1820 [ 152.684602][ C1] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 152.684688][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 152.684770][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 152.684889][ C1] mac80211_hwsim_beacon_tx+0x378/0x820 [ 152.684971][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 152.685053][ C1] __iterate_interfaces+0x2af/0x5a0 [ 152.685122][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 152.685202][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 152.685274][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 152.685355][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 152.685429][ C1] mac80211_hwsim_beacon+0xb2/0x2b0 [ 152.685492][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 152.685559][ C1] __hrtimer_run_queues+0x3eb/0xaf0 [ 152.685718][ C1] hrtimer_run_softirq+0x18f/0x260 [ 152.685842][ C1] handle_softirqs+0x1d9/0x6c0 [ 152.685954][ C1] run_ktimerd+0x69/0x100 [ 152.686035][ C1] smpboot_thread_fn+0x57c/0xa80 [ 152.686126][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 152.686230][ C1] kthread+0x388/0x470 [ 152.686315][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 152.686382][ C1] ? __pfx_kthread+0x10/0x10 [ 152.686476][ C1] ret_from_fork+0x514/0xb70 [ 152.686578][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 152.686664][ C1] ? __switch_to+0xc89/0x1420 [ 152.686748][ C1] ? __pfx_kthread+0x10/0x10 [ 152.686842][ C1] ret_from_fork_asm+0x1a/0x30 [ 152.686953][ C1] [ 152.687046][ C1] FAULT_INJECTION: forcing a failure. [ 152.687046][ C1] name failslab, interval 1, probability 100, space 0, times 92 [ 152.687143][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 152.687206][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 152.687245][ C1] Call Trace: [ 152.687265][ C1] [ 152.687286][ C1] dump_stack_lvl+0xe8/0x150 [ 152.687383][ C1] should_fail_ex+0x467/0x600 [ 152.687487][ C1] should_failslab+0xa8/0x100 [ 152.687561][ C1] kmem_cache_alloc_node_noprof+0xae/0x670 [ 152.687634][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 152.687690][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 152.687780][ C1] __alloc_skb+0x1d7/0x7a0 [ 152.687864][ C1] __netdev_alloc_skb+0xc0/0x4b0 [ 152.687945][ C1] __ieee80211_beacon_get+0xc97/0x1820 [ 152.688027][ C1] ? __lock_acquire+0x683/0x2ce0 [ 152.688090][ C1] ? __ieee80211_beacon_get+0x34/0x1820 [ 152.688170][ C1] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 152.688241][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 152.688322][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 152.688442][ C1] mac80211_hwsim_beacon_tx+0x378/0x820 [ 152.688550][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 152.688631][ C1] __iterate_interfaces+0x2af/0x5a0 [ 152.688693][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 152.688775][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 152.688846][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 152.688929][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 152.689003][ C1] mac80211_hwsim_beacon+0xb2/0x2b0 [ 152.689073][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 152.689144][ C1] __hrtimer_run_queues+0x3eb/0xaf0 [ 152.689287][ C1] hrtimer_run_softirq+0x18f/0x260 [ 152.689392][ C1] handle_softirqs+0x1d9/0x6c0 [ 152.689480][ C1] run_ktimerd+0x69/0x100 [ 152.689512][ C1] smpboot_thread_fn+0x57c/0xa80 [ 152.689547][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 152.689604][ C1] kthread+0x388/0x470 [ 152.689705][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 152.689778][ C1] ? __pfx_kthread+0x10/0x10 [ 152.689904][ C1] ret_from_fork+0x514/0xb70 [ 152.690004][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 152.690097][ C1] ? __switch_to+0xc89/0x1420 [ 152.690188][ C1] ? __pfx_kthread+0x10/0x10 [ 152.690281][ C1] ret_from_fork_asm+0x1a/0x30 [ 152.690385][ C1] [ 152.690544][ C1] FAULT_INJECTION: forcing a failure. [ 152.690544][ C1] name failslab, interval 1, probability 100, space 0, times 91 [ 152.690619][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 152.690685][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 152.690718][ C1] Call Trace: [ 152.690748][ C1] [ 152.690763][ C1] dump_stack_lvl+0xe8/0x150 [ 152.690873][ C1] should_fail_ex+0x467/0x600 [ 152.690971][ C1] should_failslab+0xa8/0x100 [ 152.691053][ C1] kmem_cache_alloc_node_noprof+0xae/0x670 [ 152.691112][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 152.691174][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 152.691288][ C1] __alloc_skb+0x1d7/0x7a0 [ 152.691370][ C1] __netdev_alloc_skb+0xc0/0x4b0 [ 152.691452][ C1] __ieee80211_beacon_get+0xc97/0x1820 [ 152.691536][ C1] ? __lock_acquire+0x683/0x2ce0 [ 152.691601][ C1] ? __ieee80211_beacon_get+0x34/0x1820 [ 152.691686][ C1] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 152.691772][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 152.691849][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 152.691971][ C1] mac80211_hwsim_beacon_tx+0x378/0x820 [ 152.692055][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 152.692139][ C1] __iterate_interfaces+0x2af/0x5a0 [ 152.692206][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 152.692284][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 152.692362][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 152.692446][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 152.692529][ C1] mac80211_hwsim_beacon+0xb2/0x2b0 [ 152.692602][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 152.692705][ C1] __hrtimer_run_queues+0x3eb/0xaf0 [ 152.692879][ C1] hrtimer_run_softirq+0x18f/0x260 [ 152.692985][ C1] handle_softirqs+0x1d9/0x6c0 [ 152.693099][ C1] run_ktimerd+0x69/0x100 [ 152.693182][ C1] smpboot_thread_fn+0x57c/0xa80 [ 152.693284][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 152.693388][ C1] kthread+0x388/0x470 [ 152.693480][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 152.693553][ C1] ? __pfx_kthread+0x10/0x10 [ 152.693645][ C1] ret_from_fork+0x514/0xb70 [ 152.693747][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 152.693840][ C1] ? __switch_to+0xc89/0x1420 [ 152.693930][ C1] ? __pfx_kthread+0x10/0x10 [ 152.694042][ C1] ret_from_fork_asm+0x1a/0x30 [ 152.694167][ C1] [ 152.695041][ T2873] FAULT_INJECTION: forcing a failure. [ 152.695041][ T2873] name failslab, interval 1, probability 100, space 0, times 90 [ 152.695130][ T2873] CPU: 1 UID: 0 PID: 2873 Comm: kworker/u8:14 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 152.695185][ T2873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 152.695225][ T2873] Workqueue: events_unbound nsim_dev_trap_report_work [ 152.695317][ T2873] Call Trace: [ 152.695337][ T2873] [ 152.695369][ T2873] dump_stack_lvl+0xe8/0x150 [ 152.695493][ T2873] should_fail_ex+0x467/0x600 [ 152.695596][ T2873] should_failslab+0xa8/0x100 [ 152.695670][ T2873] kmem_cache_alloc_node_noprof+0xae/0x670 [ 152.695740][ T2873] ? __alloc_skb+0x1d7/0x7a0 [ 152.695793][ T2873] ? __alloc_skb+0x1d7/0x7a0 [ 152.695884][ T2873] __alloc_skb+0x1d7/0x7a0 [ 152.695965][ T2873] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 152.696087][ T2873] ? process_scheduled_works+0xa20/0x14e0 [ 152.696167][ T2873] process_scheduled_works+0xa8e/0x14e0 [ 152.696321][ T2873] ? __pfx_process_scheduled_works+0x10/0x10 [ 152.696400][ T2873] ? assign_work+0x3cf/0x5d0 [ 152.696490][ T2873] worker_thread+0xa47/0xfb0 [ 152.696652][ T2873] kthread+0x388/0x470 [ 152.696749][ T2873] ? __pfx_worker_thread+0x10/0x10 [ 152.696847][ T2873] ? __pfx_kthread+0x10/0x10 [ 152.696952][ T2873] ret_from_fork+0x514/0xb70 [ 152.697053][ T2873] ? __pfx_ret_from_fork+0x10/0x10 [ 152.697144][ T2873] ? __switch_to+0xc89/0x1420 [ 152.697227][ T2873] ? __pfx_kthread+0x10/0x10 [ 152.697320][ T2873] ret_from_fork_asm+0x1a/0x30 [ 152.697425][ T2873] [ 152.699561][ T13] FAULT_INJECTION: forcing a failure. [ 152.699561][ T13] name failslab, interval 1, probability 100, space 0, times 89 [ 152.699634][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 152.699702][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 152.699736][ T13] Workqueue: events_unbound nsim_dev_trap_report_work [ 152.699825][ T13] Call Trace: [ 152.699846][ T13] [ 152.699883][ T13] dump_stack_lvl+0xe8/0x150 [ 152.700010][ T13] should_fail_ex+0x467/0x600 [ 152.700121][ T13] should_failslab+0xa8/0x100 [ 152.700200][ T13] kmem_cache_alloc_node_noprof+0xae/0x670 [ 152.700263][ T13] ? __alloc_skb+0x1d7/0x7a0 [ 152.700323][ T13] ? __alloc_skb+0x1d7/0x7a0 [ 152.700393][ T13] __alloc_skb+0x1d7/0x7a0 [ 152.700468][ T13] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 152.700591][ T13] ? process_scheduled_works+0xa20/0x14e0 [ 152.700670][ T13] process_scheduled_works+0xa8e/0x14e0 [ 152.700822][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 152.700923][ T13] ? assign_work+0x3cf/0x5d0 [ 152.701007][ T13] worker_thread+0xa47/0xfb0 [ 152.701157][ T13] kthread+0x388/0x470 [ 152.701248][ T13] ? __pfx_worker_thread+0x10/0x10 [ 152.701318][ T13] ? __pfx_kthread+0x10/0x10 [ 152.701393][ T13] ret_from_fork+0x514/0xb70 [ 152.701488][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 152.701610][ T13] ? __switch_to+0xc89/0x1420 [ 152.701701][ T13] ? __pfx_kthread+0x10/0x10 [ 152.701793][ T13] ret_from_fork_asm+0x1a/0x30 [ 152.701940][ T13] [ 152.704313][ T2881] FAULT_INJECTION: forcing a failure. [ 152.704313][ T2881] name failslab, interval 1, probability 100, space 0, times 88 [ 152.704401][ T2881] CPU: 1 UID: 0 PID: 2881 Comm: kworker/u8:19 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 152.704472][ T2881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 152.704514][ T2881] Workqueue: events_unbound nsim_dev_trap_report_work [ 152.704609][ T2881] Call Trace: [ 152.704630][ T2881] [ 152.704651][ T2881] dump_stack_lvl+0xe8/0x150 [ 152.704741][ T2881] should_fail_ex+0x467/0x600 [ 152.704864][ T2881] should_failslab+0xa8/0x100 [ 152.704939][ T2881] kmem_cache_alloc_node_noprof+0xae/0x670 [ 152.705009][ T2881] ? __alloc_skb+0x1d7/0x7a0 [ 152.705066][ T2881] ? __alloc_skb+0x1d7/0x7a0 [ 152.705144][ T2881] __alloc_skb+0x1d7/0x7a0 [ 152.705229][ T2881] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 152.705361][ T2881] ? process_scheduled_works+0xa20/0x14e0 [ 152.705441][ T2881] process_scheduled_works+0xa8e/0x14e0 [ 152.705600][ T2881] ? __pfx_process_scheduled_works+0x10/0x10 [ 152.705704][ T2881] ? assign_work+0x3cf/0x5d0 [ 152.705792][ T2881] worker_thread+0xa47/0xfb0 [ 152.705913][ T2881] ? __kthread_parkme+0x71/0x1f0 [ 152.706004][ T2881] kthread+0x388/0x470 [ 152.706119][ T2881] ? __pfx_worker_thread+0x10/0x10 [ 152.706204][ T2881] ? __pfx_kthread+0x10/0x10 [ 152.706299][ T2881] ret_from_fork+0x514/0xb70 [ 152.706403][ T2881] ? __pfx_ret_from_fork+0x10/0x10 [ 152.706495][ T2881] ? __switch_to+0xc89/0x1420 [ 152.706587][ T2881] ? __pfx_kthread+0x10/0x10 [ 152.706679][ T2881] ret_from_fork_asm+0x1a/0x30 [ 152.706783][ T2881] [ 152.706982][ T1025] FAULT_INJECTION: forcing a failure. [ 152.706982][ T1025] name failslab, interval 1, probability 100, space 0, times 87 [ 152.707054][ T1025] CPU: 1 UID: 0 PID: 1025 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 152.707122][ T1025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 152.707155][ T1025] Workqueue: events_unbound nsim_dev_trap_report_work [ 152.707238][ T1025] Call Trace: [ 152.707258][ T1025] [ 152.707280][ T1025] dump_stack_lvl+0xe8/0x150 [ 152.707371][ T1025] should_fail_ex+0x467/0x600 [ 152.707481][ T1025] should_failslab+0xa8/0x100 [ 152.707588][ T1025] kmem_cache_alloc_node_noprof+0xae/0x670 [ 152.707658][ T1025] ? __alloc_skb+0x1d7/0x7a0 [ 152.707711][ T1025] ? __alloc_skb+0x1d7/0x7a0 [ 152.707793][ T1025] __alloc_skb+0x1d7/0x7a0 [ 152.707884][ T1025] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 152.708007][ T1025] ? process_scheduled_works+0xa20/0x14e0 [ 152.708079][ T1025] process_scheduled_works+0xa8e/0x14e0 [ 152.708232][ T1025] ? __pfx_process_scheduled_works+0x10/0x10 [ 152.708324][ T1025] ? assign_work+0x3cf/0x5d0 [ 152.708408][ T1025] worker_thread+0xa47/0xfb0 [ 152.708560][ T1025] kthread+0x388/0x470 [ 152.708652][ T1025] ? __pfx_worker_thread+0x10/0x10 [ 152.708716][ T1025] ? __pfx_kthread+0x10/0x10 [ 152.708809][ T1025] ret_from_fork+0x514/0xb70 [ 152.708951][ T1025] ? __pfx_ret_from_fork+0x10/0x10 [ 152.709051][ T1025] ? __switch_to+0xc89/0x1420 [ 152.709137][ T1025] ? __pfx_kthread+0x10/0x10 [ 152.709227][ T1025] ret_from_fork_asm+0x1a/0x30 [ 152.709341][ T1025] [ 152.710039][ T1482] FAULT_INJECTION: forcing a failure. [ 152.710039][ T1482] name failslab, interval 1, probability 100, space 0, times 87 [ 152.710117][ T1482] CPU: 1 UID: 0 PID: 1482 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 152.710182][ T1482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 152.710217][ T1482] Workqueue: events_unbound nsim_dev_trap_report_work [ 152.710317][ T1482] Call Trace: [ 152.710337][ T1482] [ 152.710353][ T1482] dump_stack_lvl+0xe8/0x150 [ 152.710450][ T1482] should_fail_ex+0x467/0x600 [ 152.710556][ T1482] should_failslab+0xa8/0x100 [ 152.710639][ T1482] kmem_cache_alloc_node_noprof+0xae/0x670 [ 152.710689][ T1482] ? __alloc_skb+0x1d7/0x7a0 [ 152.710730][ T1482] ? __alloc_skb+0x1d7/0x7a0 [ 152.710849][ T1482] __alloc_skb+0x1d7/0x7a0 [ 152.710943][ T1482] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 152.711058][ T1482] ? process_scheduled_works+0xa20/0x14e0 [ 152.711137][ T1482] process_scheduled_works+0xa8e/0x14e0 [ 152.711282][ T1482] ? __pfx_process_scheduled_works+0x10/0x10 [ 152.711368][ T1482] ? assign_work+0x3cf/0x5d0 [ 152.711461][ T1482] worker_thread+0xa47/0xfb0 [ 152.711581][ T1482] ? __kthread_parkme+0x71/0x1f0 [ 152.711687][ T1482] kthread+0x388/0x470 [ 152.711778][ T1482] ? __pfx_worker_thread+0x10/0x10 [ 152.711858][ T1482] ? __pfx_kthread+0x10/0x10 [ 152.711952][ T1482] ret_from_fork+0x514/0xb70 [ 152.712047][ T1482] ? __pfx_ret_from_fork+0x10/0x10 [ 152.712139][ T1482] ? __switch_to+0xc89/0x1420 [ 152.712258][ T1482] ? __pfx_kthread+0x10/0x10 [ 152.712358][ T1482] ret_from_fork_asm+0x1a/0x30 [ 152.712470][ T1482] [ 152.715016][ T2873] FAULT_INJECTION: forcing a failure. [ 152.715016][ T2873] name failslab, interval 1, probability 100, space 0, times 86 [ 152.715095][ T2873] CPU: 1 UID: 0 PID: 2873 Comm: kworker/u8:14 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 152.715160][ T2873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 152.715199][ T2873] Workqueue: events_unbound nsim_dev_trap_report_work [ 152.715282][ T2873] Call Trace: [ 152.715309][ T2873] [ 152.715330][ T2873] dump_stack_lvl+0xe8/0x150 [ 152.715395][ T2873] should_fail_ex+0x467/0x600 [ 152.715524][ T2873] should_failslab+0xa8/0x100 [ 152.715610][ T2873] kmem_cache_alloc_node_noprof+0xae/0x670 [ 152.715680][ T2873] ? __alloc_skb+0x1d7/0x7a0 [ 152.715735][ T2873] ? __alloc_skb+0x1d7/0x7a0 [ 152.715818][ T2873] __alloc_skb+0x1d7/0x7a0 [ 152.715900][ T2873] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 152.716023][ T2873] ? process_scheduled_works+0xa20/0x14e0 [ 152.716095][ T2873] process_scheduled_works+0xa8e/0x14e0 [ 152.716250][ T2873] ? __pfx_process_scheduled_works+0x10/0x10 [ 152.716342][ T2873] ? assign_work+0x3cf/0x5d0 [ 152.716427][ T2873] worker_thread+0xa47/0xfb0 [ 152.716597][ T2873] kthread+0x388/0x470 [ 152.716689][ T2873] ? __pfx_worker_thread+0x10/0x10 [ 152.716760][ T2873] ? __pfx_kthread+0x10/0x10 [ 152.716868][ T2873] ret_from_fork+0x514/0xb70 [ 152.717002][ T2873] ? __pfx_ret_from_fork+0x10/0x10 [ 152.717082][ T2873] ? __switch_to+0xc89/0x1420 [ 152.717167][ T2873] ? __pfx_kthread+0x10/0x10 [ 152.717261][ T2873] ret_from_fork_asm+0x1a/0x30 [ 152.717358][ T2873] [ 152.718467][ T4968] FAULT_INJECTION: forcing a failure. [ 152.718467][ T4968] name failslab, interval 1, probability 100, space 0, times 86 [ 152.718539][ T4968] CPU: 1 UID: 0 PID: 4968 Comm: udevd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 152.718601][ T4968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 152.718639][ T4968] Call Trace: [ 152.718660][ T4968] [ 152.718681][ T4968] dump_stack_lvl+0xe8/0x150 [ 152.718775][ T4968] should_fail_ex+0x467/0x600 [ 152.718892][ T4968] should_failslab+0xa8/0x100 [ 152.718965][ T4968] kmem_cache_alloc_node_noprof+0xae/0x670 [ 152.719029][ T4968] ? __alloc_skb+0x1d7/0x7a0 [ 152.719088][ T4968] ? __alloc_skb+0x1d7/0x7a0 [ 152.719169][ T4968] __alloc_skb+0x1d7/0x7a0 [ 152.719244][ T4968] alloc_uevent_skb+0x7d/0x230 [ 152.719315][ T4968] kobject_uevent_net_broadcast+0x2fd/0x560 [ 152.719404][ T4968] kobject_uevent_env+0x569/0x9e0 [ 152.719490][ T4968] kobject_synth_uevent+0x45e/0x950 [ 152.719545][ T4968] ? __pfx_kobject_synth_uevent+0x10/0x10 [ 152.719643][ T4968] ? sysfs_file_kobj+0x1a/0x230 [ 152.719782][ T4968] ? sysfs_file_kobj+0x1e4/0x230 [ 152.719880][ T4968] ? __pfx_sysfs_kf_write+0x10/0x10 [ 152.719933][ T4968] uevent_store+0x26/0x70 [ 152.719982][ T4968] ? __pfx_sysfs_kf_write+0x10/0x10 [ 152.720033][ T4968] kernfs_fop_write_iter+0x3a5/0x540 [ 152.720132][ T4968] vfs_write+0x61e/0xbb0 [ 152.720238][ T4968] ? __pfx_vfs_write+0x10/0x10 [ 152.720322][ T4968] ? do_sys_openat2+0x14e/0x200 [ 152.720416][ T4968] ksys_write+0x156/0x270 [ 152.720499][ T4968] ? __pfx_ksys_write+0x10/0x10 [ 152.720603][ T4968] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.720660][ T4968] do_syscall_64+0x174/0x580 [ 152.720733][ T4968] ? clear_bhb_loop+0x40/0x90 [ 152.720805][ T4968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.720874][ T4968] RIP: 0033:0x7f3b17d4e407 [ 152.720926][ T4968] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 152.720983][ T4968] RSP: 002b:00007ffc3ccb4420 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 152.721043][ T4968] RAX: ffffffffffffffda RBX: 00007f3b17c60880 RCX: 00007f3b17d4e407 [ 152.721085][ T4968] RDX: 0000000000000007 RSI: 0000562a640c4a00 RDI: 000000000000000c [ 152.721124][ T4968] RBP: 0000562a640c4a00 R08: 0000000000000000 R09: 0000000000000000 [ 152.721163][ T4968] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000007 [ 152.721198][ T4968] R13: 0000562a640cf9e0 R14: 00007f3b17e96ea0 R15: 00007ffc3ccb4760 [ 152.721242][ T4968] [ 152.721650][ C1] FAULT_INJECTION: forcing a failure. [ 152.721650][ C1] name failslab, interval 1, probability 100, space 0, times 86 [ 152.721733][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 152.721797][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 152.721829][ C1] Call Trace: [ 152.721857][ C1] [ 152.721878][ C1] dump_stack_lvl+0xe8/0x150 [ 152.721982][ C1] should_fail_ex+0x467/0x600 [ 152.722085][ C1] should_failslab+0xa8/0x100 [ 152.722166][ C1] kmem_cache_alloc_node_noprof+0xae/0x670 [ 152.722237][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 152.722291][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 152.722368][ C1] __alloc_skb+0x1d7/0x7a0 [ 152.722449][ C1] ndisc_alloc_skb+0xa0/0x480 [ 152.722550][ C1] ndisc_send_rs+0x28e/0x6b0 [ 152.722635][ C1] ? ipv6_get_lladdr+0x2b/0x400 [ 152.722765][ C1] addrconf_rs_timer+0x2d2/0x6c0 [ 152.722858][ C1] ? call_timer_fn+0xd4/0x5e0 [ 152.722948][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 152.723021][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 152.723132][ C1] call_timer_fn+0x192/0x5e0 [ 152.723206][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 152.723278][ C1] ? call_timer_fn+0xd4/0x5e0 [ 152.723349][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 152.723447][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 152.723528][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 152.723600][ C1] __run_timer_base+0x67b/0x9b0 [ 152.723711][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 152.723794][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 152.723895][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 152.723987][ C1] run_timer_softirq+0xb7/0x170 [ 152.724059][ C1] handle_softirqs+0x1d9/0x6c0 [ 152.724196][ C1] run_ktimerd+0x69/0x100 [ 152.724273][ C1] smpboot_thread_fn+0x57c/0xa80 [ 152.724368][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 152.724472][ C1] kthread+0x388/0x470 [ 152.724563][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 152.724645][ C1] ? __pfx_kthread+0x10/0x10 [ 152.724738][ C1] ret_from_fork+0x514/0xb70 [ 152.724839][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 152.724940][ C1] ? __switch_to+0xc89/0x1420 [ 152.725031][ C1] ? __pfx_kthread+0x10/0x10 [ 152.725123][ C1] ret_from_fork_asm+0x1a/0x30 [ 152.725239][ C1] [ 152.725355][ C1] FAULT_INJECTION: forcing a failure. [ 152.725355][ C1] name failslab, interval 1, probability 100, space 0, times 85 [ 152.725423][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 152.725500][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 152.725533][ C1] Call Trace: [ 152.725555][ C1] [ 152.725577][ C1] dump_stack_lvl+0xe8/0x150 [ 152.725674][ C1] should_fail_ex+0x467/0x600 [ 152.725783][ C1] should_failslab+0xa8/0x100 [ 152.725835][ C1] kmem_cache_alloc_node_noprof+0xae/0x670 [ 152.725933][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 152.726009][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 152.726092][ C1] __alloc_skb+0x1d7/0x7a0 [ 152.726175][ C1] ndisc_alloc_skb+0xa0/0x480 [ 152.726270][ C1] ndisc_send_rs+0x28e/0x6b0 [ 152.726357][ C1] ? ipv6_get_lladdr+0x2b/0x400 [ 152.726450][ C1] addrconf_rs_timer+0x2d2/0x6c0 [ 152.726524][ C1] ? call_timer_fn+0xd4/0x5e0 [ 152.726603][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 152.726687][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 152.726794][ C1] call_timer_fn+0x192/0x5e0 [ 152.726880][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 152.726945][ C1] ? call_timer_fn+0xd4/0x5e0 [ 152.727016][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 152.727120][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 152.727193][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 152.727265][ C1] __run_timer_base+0x67b/0x9b0 [ 152.727413][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 152.727502][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 152.727585][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 152.727677][ C1] run_timer_softirq+0xb7/0x170 [ 152.727748][ C1] handle_softirqs+0x1d9/0x6c0 [ 152.727859][ C1] run_ktimerd+0x69/0x100 [ 152.727941][ C1] smpboot_thread_fn+0x57c/0xa80 [ 152.728031][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 152.728135][ C1] kthread+0x388/0x470 [ 152.728226][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 152.728299][ C1] ? __pfx_kthread+0x10/0x10 [ 152.728391][ C1] ret_from_fork+0x514/0xb70 [ 152.728493][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 152.728577][ C1] ? __switch_to+0xc89/0x1420 [ 152.728676][ C1] ? __pfx_kthread+0x10/0x10 [ 152.728801][ C1] ret_from_fork_asm+0x1a/0x30 [ 152.728906][ C1] [ 152.729016][ C1] FAULT_INJECTION: forcing a failure. [ 152.729016][ C1] name failslab, interval 1, probability 100, space 0, times 84 [ 152.729081][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 152.729150][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 152.729181][ C1] Call Trace: [ 152.729202][ C1] [ 152.729223][ C1] dump_stack_lvl+0xe8/0x150 [ 152.729308][ C1] should_fail_ex+0x467/0x600 [ 152.729412][ C1] should_failslab+0xa8/0x100 [ 152.729482][ C1] kmem_cache_alloc_node_noprof+0xae/0x670 [ 152.729507][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 152.729529][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 152.729561][ C1] __alloc_skb+0x1d7/0x7a0 [ 152.729567][ C0] FAULT_INJECTION: forcing a failure. [ 152.729567][ C0] name failslab, interval 1, probability 100, space 0, times 84 [ 152.729591][ C1] ndisc_alloc_skb+0xa0/0x480 [ 152.729623][ C1] ndisc_send_rs+0x28e/0x6b0 [ 152.729651][ C1] ? ipv6_get_lladdr+0x2b/0x400 [ 152.729681][ C1] addrconf_rs_timer+0x2d2/0x6c0 [ 152.729704][ C1] ? call_timer_fn+0xd4/0x5e0 [ 152.729732][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 152.729757][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 152.729794][ C1] call_timer_fn+0x192/0x5e0 [ 152.729819][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 152.729841][ C1] ? call_timer_fn+0xd4/0x5e0 [ 152.729871][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 152.729906][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 152.729930][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 152.729954][ C1] __run_timer_base+0x67b/0x9b0 [ 152.729990][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 152.730017][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 152.730044][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 152.730073][ C1] run_timer_softirq+0xb7/0x170 [ 152.730096][ C1] handle_softirqs+0x1d9/0x6c0 [ 152.730131][ C1] run_ktimerd+0x69/0x100 [ 152.730159][ C1] smpboot_thread_fn+0x57c/0xa80 [ 152.730188][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 152.730223][ C1] kthread+0x388/0x470 [ 152.730253][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 152.730279][ C1] ? __pfx_kthread+0x10/0x10 [ 152.730310][ C1] ret_from_fork+0x514/0xb70 [ 152.730343][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 152.730376][ C1] ? __switch_to+0xc89/0x1420 [ 152.730406][ C1] ? __pfx_kthread+0x10/0x10 [ 152.730438][ C1] ret_from_fork_asm+0x1a/0x30 [ 152.730474][ C1] [ 152.730485][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 152.730511][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 152.730525][ C0] Call Trace: [ 152.730533][ C0] [ 152.730542][ C0] dump_stack_lvl+0xe8/0x150 [ 152.730556][ C1] FAULT_INJECTION: forcing a failure. [ 152.730556][ C1] name failslab, interval 1, probability 100, space 0, times 83 [ 152.730580][ C0] should_fail_ex+0x467/0x600 [ 152.730616][ C0] should_failslab+0xa8/0x100 [ 152.730641][ C0] kmem_cache_alloc_node_noprof+0xae/0x670 [ 152.730663][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 152.730682][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 152.730708][ C0] __alloc_skb+0x1d7/0x7a0 [ 152.730733][ C0] ndisc_alloc_skb+0xa0/0x480 [ 152.730764][ C0] ndisc_send_rs+0x28e/0x6b0 [ 152.730793][ C0] ? ipv6_get_lladdr+0x2b/0x400 [ 152.730823][ C0] addrconf_rs_timer+0x2d2/0x6c0 [ 152.730847][ C0] ? call_timer_fn+0xd4/0x5e0 [ 152.730876][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 152.730901][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 152.730938][ C0] call_timer_fn+0x192/0x5e0 [ 152.730963][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 152.730985][ C0] ? call_timer_fn+0xd4/0x5e0 [ 152.731008][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 152.731043][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 152.731066][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 152.731091][ C0] __run_timer_base+0x67b/0x9b0 [ 152.731127][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 152.731154][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 152.731180][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 152.731211][ C0] run_timer_softirq+0xb7/0x170 [ 152.731234][ C0] handle_softirqs+0x1d9/0x6c0 [ 152.731269][ C0] run_ktimerd+0x69/0x100 [ 152.731296][ C0] smpboot_thread_fn+0x57c/0xa80 [ 152.731326][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 152.731367][ C0] kthread+0x388/0x470 [ 152.731397][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 152.731423][ C0] ? __pfx_kthread+0x10/0x10 [ 152.731454][ C0] ret_from_fork+0x514/0xb70 [ 152.731488][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 152.731518][ C0] ? __switch_to+0xc89/0x1420 [ 152.731548][ C0] ? __pfx_kthread+0x10/0x10 [ 152.731579][ C0] ret_from_fork_asm+0x1a/0x30 [ 152.731614][ C0] [ 152.731625][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 152.731650][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 152.731654][ C0] FAULT_INJECTION: forcing a failure. [ 152.731654][ C0] name failslab, interval 1, probability 100, space 0, times 82 [ 152.731662][ C1] Call Trace: [ 152.731670][ C1] [ 152.731681][ C1] dump_stack_lvl+0xe8/0x150 [ 152.731712][ C1] should_fail_ex+0x467/0x600 [ 152.731747][ C1] should_failslab+0xa8/0x100 [ 152.731772][ C1] kmem_cache_alloc_node_noprof+0xae/0x670 [ 152.731794][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 152.731813][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 152.731840][ C1] __alloc_skb+0x1d7/0x7a0 [ 152.731871][ C1] ndisc_alloc_skb+0xa0/0x480 [ 152.731901][ C1] ndisc_send_rs+0x28e/0x6b0 [ 152.731929][ C1] ? ipv6_get_lladdr+0x2b/0x400 [ 152.731959][ C1] addrconf_rs_timer+0x2d2/0x6c0 [ 152.731982][ C1] ? call_timer_fn+0xd4/0x5e0 [ 152.732010][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 152.732035][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 152.732072][ C1] call_timer_fn+0x192/0x5e0 [ 152.732096][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 152.732119][ C1] ? call_timer_fn+0xd4/0x5e0 [ 152.732142][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 152.732177][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 152.732201][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 152.732226][ C1] __run_timer_base+0x67b/0x9b0 [ 152.732262][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 152.732289][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 152.732314][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 152.732345][ C1] run_timer_softirq+0xb7/0x170 [ 152.732370][ C1] handle_softirqs+0x1d9/0x6c0 [ 152.732404][ C1] run_ktimerd+0x69/0x100 [ 152.732432][ C1] smpboot_thread_fn+0x57c/0xa80 [ 152.732462][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 152.732497][ C1] kthread+0x388/0x470 [ 152.732527][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 152.732553][ C1] ? __pfx_kthread+0x10/0x10 [ 152.732585][ C1] ret_from_fork+0x514/0xb70 [ 152.732619][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 152.732650][ C1] ? __switch_to+0xc89/0x1420 [ 152.732680][ C1] ? __pfx_kthread+0x10/0x10 [ 152.732711][ C1] ret_from_fork_asm+0x1a/0x30 [ 152.732747][ C1] [ 152.732758][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 152.732784][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 152.732784][ C1] FAULT_INJECTION: forcing a failure. [ 152.732784][ C1] name failslab, interval 1, probability 100, space 0, times 81 [ 152.732797][ C0] Call Trace: [ 152.732805][ C0] [ 152.732813][ C0] dump_stack_lvl+0xe8/0x150 [ 152.732845][ C0] should_fail_ex+0x467/0x600 [ 152.732881][ C0] should_failslab+0xa8/0x100 [ 152.732906][ C0] kmem_cache_alloc_node_noprof+0xae/0x670 [ 152.732928][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 152.732947][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 152.732974][ C0] __alloc_skb+0x1d7/0x7a0 [ 152.732999][ C0] ndisc_alloc_skb+0xa0/0x480 [ 152.733030][ C0] ndisc_send_rs+0x28e/0x6b0 [ 152.733058][ C0] ? ipv6_get_lladdr+0x2b/0x400 [ 152.733088][ C0] addrconf_rs_timer+0x2d2/0x6c0 [ 152.733112][ C0] ? call_timer_fn+0xd4/0x5e0 [ 152.733140][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 152.733165][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 152.733203][ C0] call_timer_fn+0x192/0x5e0 [ 152.733227][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 152.733249][ C0] ? call_timer_fn+0xd4/0x5e0 [ 152.733273][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 152.733307][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 152.733331][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 152.733362][ C0] __run_timer_base+0x67b/0x9b0 [ 152.733399][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 152.733425][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 152.733452][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 152.733482][ C0] run_timer_softirq+0xb7/0x170 [ 152.733504][ C0] handle_softirqs+0x1d9/0x6c0 [ 152.733539][ C0] run_ktimerd+0x69/0x100 [ 152.733567][ C0] smpboot_thread_fn+0x57c/0xa80 [ 152.733596][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 152.733631][ C0] kthread+0x388/0x470 [ 152.733661][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 152.733687][ C0] ? __pfx_kthread+0x10/0x10 [ 152.733719][ C0] ret_from_fork+0x514/0xb70 [ 152.733753][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 152.733784][ C0] ? __switch_to+0xc89/0x1420 [ 152.733813][ C0] ? __pfx_kthread+0x10/0x10 [ 152.733844][ C0] ret_from_fork_asm+0x1a/0x30 [ 152.733881][ C0] [ 152.733892][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 152.733917][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 152.733918][ C0] FAULT_INJECTION: forcing a failure. [ 152.733918][ C0] name failslab, interval 1, probability 100, space 0, times 80 [ 152.733931][ C1] Call Trace: [ 152.733939][ C1] [ 152.733947][ C1] dump_stack_lvl+0xe8/0x150 [ 152.733978][ C1] should_fail_ex+0x467/0x600 [ 152.734013][ C1] should_failslab+0xa8/0x100 [ 152.734038][ C1] kmem_cache_alloc_node_noprof+0xae/0x670 [ 152.734060][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 152.734079][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 152.734105][ C1] __alloc_skb+0x1d7/0x7a0 [ 152.734130][ C1] ndisc_alloc_skb+0xa0/0x480 [ 152.734160][ C1] ndisc_send_rs+0x28e/0x6b0 [ 152.734189][ C1] ? ipv6_get_lladdr+0x2b/0x400 [ 152.734219][ C1] addrconf_rs_timer+0x2d2/0x6c0 [ 152.734242][ C1] ? call_timer_fn+0xd4/0x5e0 [ 152.734270][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 152.734294][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 152.734331][ C1] call_timer_fn+0x192/0x5e0 [ 152.734357][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 152.734379][ C1] ? call_timer_fn+0xd4/0x5e0 [ 152.734403][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 152.734438][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 152.734461][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 152.734486][ C1] __run_timer_base+0x67b/0x9b0 [ 152.734522][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 152.734549][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 152.734575][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 152.734606][ C1] run_timer_softirq+0xb7/0x170 [ 152.734628][ C1] handle_softirqs+0x1d9/0x6c0 [ 152.734663][ C1] run_ktimerd+0x69/0x100 [ 152.734691][ C1] smpboot_thread_fn+0x57c/0xa80 [ 152.734720][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 152.734755][ C1] kthread+0x388/0x470 [ 152.734785][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 152.734811][ C1] ? __pfx_kthread+0x10/0x10 [ 152.734842][ C1] ret_from_fork+0x514/0xb70 [ 152.734881][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 152.734912][ C1] ? __switch_to+0xc89/0x1420 [ 152.734941][ C1] ? __pfx_kthread+0x10/0x10 [ 152.734973][ C1] ret_from_fork_asm+0x1a/0x30 [ 152.735008][ C1] [ 152.735019][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 152.735045][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 152.735046][ C1] FAULT_INJECTION: forcing a failure. [ 152.735046][ C1] name failslab, interval 1, probability 100, space 0, times 79 [ 152.735059][ C0] Call Trace: [ 152.735067][ C0] [ 152.735075][ C0] dump_stack_lvl+0xe8/0x150 [ 152.735106][ C0] should_fail_ex+0x467/0x600 [ 152.735141][ C0] should_failslab+0xa8/0x100 [ 152.735166][ C0] kmem_cache_alloc_node_noprof+0xae/0x670 [ 152.735188][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 152.735207][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 152.735234][ C0] __alloc_skb+0x1d7/0x7a0 [ 152.735259][ C0] ndisc_alloc_skb+0xa0/0x480 [ 152.735290][ C0] ndisc_send_rs+0x28e/0x6b0 [ 152.735319][ C0] ? ipv6_get_lladdr+0x2b/0x400 [ 152.735353][ C0] addrconf_rs_timer+0x2d2/0x6c0 [ 152.735377][ C0] ? call_timer_fn+0xd4/0x5e0 [ 152.735405][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 152.735430][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 152.735466][ C0] call_timer_fn+0x192/0x5e0 [ 152.735491][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 152.735513][ C0] ? call_timer_fn+0xd4/0x5e0 [ 152.735537][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 152.735571][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 152.735595][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 152.735619][ C0] __run_timer_base+0x67b/0x9b0 [ 152.735656][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 152.735682][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 152.735708][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 152.735739][ C0] run_timer_softirq+0xb7/0x170 [ 152.735761][ C0] handle_softirqs+0x1d9/0x6c0 [ 152.735796][ C0] run_ktimerd+0x69/0x100 [ 152.735824][ C0] smpboot_thread_fn+0x57c/0xa80 [ 152.735855][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 152.735890][ C0] kthread+0x388/0x470 [ 152.735920][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 152.735946][ C0] ? __pfx_kthread+0x10/0x10 [ 152.735978][ C0] ret_from_fork+0x514/0xb70 [ 152.736011][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 152.736043][ C0] ? __switch_to+0xc89/0x1420 [ 152.736077][ C0] ? __pfx_kthread+0x10/0x10 [ 152.736108][ C0] ret_from_fork_asm+0x1a/0x30 [ 152.736144][ C0] [ 152.736155][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 152.736181][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 152.736181][ C0] FAULT_INJECTION: forcing a failure. [ 152.736181][ C0] name failslab, interval 1, probability 100, space 0, times 78 [ 152.736194][ C1] Call Trace: [ 152.736202][ C1] [ 152.736210][ C1] dump_stack_lvl+0xe8/0x150 [ 152.736241][ C1] should_fail_ex+0x467/0x600 [ 152.736275][ C1] should_failslab+0xa8/0x100 [ 152.736300][ C1] kmem_cache_alloc_node_noprof+0xae/0x670 [ 152.736322][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 152.736341][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 152.736369][ C1] __alloc_skb+0x1d7/0x7a0 [ 152.736394][ C1] ndisc_alloc_skb+0xa0/0x480 [ 152.736425][ C1] ndisc_send_rs+0x28e/0x6b0 [ 152.736453][ C1] ? ipv6_get_lladdr+0x2b/0x400 [ 152.736483][ C1] addrconf_rs_timer+0x2d2/0x6c0 [ 152.736507][ C1] ? call_timer_fn+0xd4/0x5e0 [ 152.736553][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 152.736578][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 152.736615][ C1] call_timer_fn+0x192/0x5e0 [ 152.736640][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 152.736662][ C1] ? call_timer_fn+0xd4/0x5e0 [ 152.736685][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 152.736720][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 152.736744][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 152.736768][ C1] __run_timer_base+0x67b/0x9b0 [ 152.736804][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 152.736831][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 152.736863][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 152.736894][ C1] run_timer_softirq+0xb7/0x170 [ 152.736917][ C1] handle_softirqs+0x1d9/0x6c0 [ 152.736951][ C1] run_ktimerd+0x69/0x100 [ 152.736978][ C1] smpboot_thread_fn+0x57c/0xa80 [ 152.737013][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 152.737049][ C1] kthread+0x388/0x470 [ 152.737079][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 152.737105][ C1] ? __pfx_kthread+0x10/0x10 [ 152.737136][ C1] ret_from_fork+0x514/0xb70 [ 152.737170][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 152.737200][ C1] ? __switch_to+0xc89/0x1420 [ 152.737229][ C1] ? __pfx_kthread+0x10/0x10 [ 152.737261][ C1] ret_from_fork_asm+0x1a/0x30 [ 152.737297][ C1] [ 152.737308][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 152.737334][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 152.737334][ C1] FAULT_INJECTION: forcing a failure. [ 152.737334][ C1] name failslab, interval 1, probability 100, space 0, times 77 [ 152.737354][ C0] Call Trace: [ 152.737361][ C0] [ 152.737369][ C0] dump_stack_lvl+0xe8/0x150 [ 152.737400][ C0] should_fail_ex+0x467/0x600 [ 152.737435][ C0] should_failslab+0xa8/0x100 [ 152.737460][ C0] kmem_cache_alloc_node_noprof+0xae/0x670 [ 152.737482][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 152.737501][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 152.737528][ C0] __alloc_skb+0x1d7/0x7a0 [ 152.737554][ C0] ndisc_alloc_skb+0xa0/0x480 [ 152.737584][ C0] ndisc_send_rs+0x28e/0x6b0 [ 152.737613][ C0] ? ipv6_get_lladdr+0x2b/0x400 [ 152.737642][ C0] addrconf_rs_timer+0x2d2/0x6c0 [ 152.737666][ C0] ? call_timer_fn+0xd4/0x5e0 [ 152.737694][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 152.737719][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 152.737757][ C0] call_timer_fn+0x192/0x5e0 [ 152.737781][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 152.737804][ C0] ? call_timer_fn+0xd4/0x5e0 [ 152.737827][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 152.737863][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 152.737887][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 152.737912][ C0] __run_timer_base+0x67b/0x9b0 [ 152.737948][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 152.737975][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 152.738001][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 152.738031][ C0] run_timer_softirq+0xb7/0x170 [ 152.738055][ C0] handle_softirqs+0x1d9/0x6c0 [ 152.738089][ C0] run_ktimerd+0x69/0x100 [ 152.738117][ C0] smpboot_thread_fn+0x57c/0xa80 [ 152.738146][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 152.738181][ C0] kthread+0x388/0x470 [ 152.738211][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 152.738237][ C0] ? __pfx_kthread+0x10/0x10 [ 152.738268][ C0] ret_from_fork+0x514/0xb70 [ 152.738303][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 152.738333][ C0] ? __switch_to+0xc89/0x1420 [ 152.738369][ C0] ? __pfx_kthread+0x10/0x10 [ 152.738399][ C0] ret_from_fork_asm+0x1a/0x30 [ 152.738435][ C0] [ 152.738446][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 152.738470][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 152.738473][ C0] FAULT_INJECTION: forcing a failure. [ 152.738473][ C0] name failslab, interval 1, probability 100, space 0, times 76 [ 152.738484][ C1] Call Trace: [ 152.738492][ C1] [ 152.738500][ C1] dump_stack_lvl+0xe8/0x150 [ 152.738532][ C1] should_fail_ex+0x467/0x600 [ 152.738567][ C1] should_failslab+0xa8/0x100 [ 152.738591][ C1] kmem_cache_alloc_node_noprof+0xae/0x670 [ 152.738613][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 152.738632][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 152.738660][ C1] __alloc_skb+0x1d7/0x7a0 [ 152.738684][ C1] ndisc_alloc_skb+0xa0/0x480 [ 152.738715][ C1] ndisc_send_rs+0x28e/0x6b0 [ 152.738743][ C1] ? ipv6_get_lladdr+0x2b/0x400 [ 152.738773][ C1] addrconf_rs_timer+0x2d2/0x6c0 [ 152.738797][ C1] ? call_timer_fn+0xd4/0x5e0 [ 152.738825][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 152.738855][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 152.738892][ C1] call_timer_fn+0x192/0x5e0 [ 152.738916][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 152.738939][ C1] ? call_timer_fn+0xd4/0x5e0 [ 152.738962][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 152.738996][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 152.739020][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 152.739045][ C1] __run_timer_base+0x67b/0x9b0 [ 152.739081][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 152.739107][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 152.739134][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 152.739164][ C1] run_timer_softirq+0xb7/0x170 [ 152.739187][ C1] handle_softirqs+0x1d9/0x6c0 [ 152.739221][ C1] run_ktimerd+0x69/0x100 [ 152.739249][ C1] smpboot_thread_fn+0x57c/0xa80 [ 152.739279][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 152.739314][ C1] kthread+0x388/0x470 [ 152.739344][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 152.739371][ C1] ? __pfx_kthread+0x10/0x10 [ 152.739403][ C1] ret_from_fork+0x514/0xb70 [ 152.739437][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 152.739471][ C1] ? __switch_to+0xc89/0x1420 [ 152.739505][ C1] ? __pfx_kthread+0x10/0x10 [ 152.739537][ C1] ret_from_fork_asm+0x1a/0x30 [ 152.739573][ C1] [ 152.739585][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 152.739611][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 152.739624][ C0] Call Trace: [ 152.739632][ C0] [ 152.739643][ C1] FAULT_INJECTION: forcing a failure. [ 152.739643][ C1] name failslab, interval 1, probability 100, space 0, times 75 [ 152.739641][ C0] dump_stack_lvl+0xe8/0x150 [ 152.739678][ C0] should_fail_ex+0x467/0x600 [ 152.739713][ C0] should_failslab+0xa8/0x100 [ 152.739738][ C0] kmem_cache_alloc_node_noprof+0xae/0x670 [ 152.739760][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 152.739780][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 152.739807][ C0] __alloc_skb+0x1d7/0x7a0 [ 152.739833][ C0] ndisc_alloc_skb+0xa0/0x480 [ 152.739864][ C0] ndisc_send_rs+0x28e/0x6b0 [ 152.739893][ C0] ? ipv6_get_lladdr+0x2b/0x400 [ 152.739923][ C0] addrconf_rs_timer+0x2d2/0x6c0 [ 152.739947][ C0] ? call_timer_fn+0xd4/0x5e0 [ 152.739975][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 152.740000][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 152.740038][ C0] call_timer_fn+0x192/0x5e0 [ 152.740062][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 152.740084][ C0] ? call_timer_fn+0xd4/0x5e0 [ 152.740108][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 152.740143][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 152.740167][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 152.740191][ C0] __run_timer_base+0x67b/0x9b0 [ 152.740228][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 152.740255][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 152.740281][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 152.740312][ C0] run_timer_softirq+0xb7/0x170 [ 152.740335][ C0] handle_softirqs+0x1d9/0x6c0 [ 152.740377][ C0] run_ktimerd+0x69/0x100 [ 152.740408][ C0] smpboot_thread_fn+0x57c/0xa80 [ 152.740438][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 152.740473][ C0] kthread+0x388/0x470 [ 152.740504][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 152.740529][ C0] ? __pfx_kthread+0x10/0x10 [ 152.740560][ C0] ret_from_fork+0x514/0xb70 [ 152.740594][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 152.740624][ C0] ? __switch_to+0xc89/0x1420 [ 152.740654][ C0] ? __pfx_kthread+0x10/0x10 [ 152.740686][ C0] ret_from_fork_asm+0x1a/0x30 [ 152.740720][ C0] [ 152.740731][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 152.740757][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 152.740759][ C0] FAULT_INJECTION: forcing a failure. [ 152.740759][ C0] name failslab, interval 1, probability 100, space 0, times 74 [ 152.740770][ C1] Call Trace: [ 152.740778][ C1] [ 152.740786][ C1] dump_stack_lvl+0xe8/0x150 [ 152.740818][ C1] should_fail_ex+0x467/0x600 [ 152.740859][ C1] should_failslab+0xa8/0x100 [ 152.740883][ C1] kmem_cache_alloc_node_noprof+0xae/0x670 [ 152.740906][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 152.740924][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 152.740951][ C1] __alloc_skb+0x1d7/0x7a0 [ 152.740975][ C1] ndisc_alloc_skb+0xa0/0x480 [ 152.741005][ C1] ndisc_send_rs+0x28e/0x6b0 [ 152.741034][ C1] ? ipv6_get_lladdr+0x2b/0x400 [ 152.741064][ C1] addrconf_rs_timer+0x2d2/0x6c0 [ 152.741087][ C1] ? call_timer_fn+0xd4/0x5e0 [ 152.741115][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 152.741140][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 152.741177][ C1] call_timer_fn+0x192/0x5e0 [ 152.741201][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 152.741223][ C1] ? call_timer_fn+0xd4/0x5e0 [ 152.741247][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 152.741282][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 152.741305][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 152.741330][ C1] __run_timer_base+0x67b/0x9b0 [ 152.741367][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 152.741395][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 152.741421][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 152.741451][ C1] run_timer_softirq+0xb7/0x170 [ 152.741474][ C1] handle_softirqs+0x1d9/0x6c0 [ 152.741509][ C1] run_ktimerd+0x69/0x100 [ 152.741537][ C1] smpboot_thread_fn+0x57c/0xa80 [ 152.741567][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 152.741602][ C1] kthread+0x388/0x470 [ 152.741633][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 152.741658][ C1] ? __pfx_kthread+0x10/0x10 [ 152.741690][ C1] ret_from_fork+0x514/0xb70 [ 152.741724][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 152.741755][ C1] ? __switch_to+0xc89/0x1420 [ 152.741784][ C1] ? __pfx_kthread+0x10/0x10 [ 152.741816][ C1] ret_from_fork_asm+0x1a/0x30 [ 152.741857][ C1] [ 152.741868][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 152.741894][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 152.741895][ C1] FAULT_INJECTION: forcing a failure. [ 152.741895][ C1] name failslab, interval 1, probability 100, space 0, times 73 [ 152.741908][ C0] Call Trace: [ 152.741916][ C0] [ 152.741923][ C0] dump_stack_lvl+0xe8/0x150 [ 152.741954][ C0] should_fail_ex+0x467/0x600 [ 152.741989][ C0] should_failslab+0xa8/0x100 [ 152.742014][ C0] kmem_cache_alloc_node_noprof+0xae/0x670 [ 152.742036][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 152.742055][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 152.742081][ C0] __alloc_skb+0x1d7/0x7a0 [ 152.742107][ C0] ndisc_alloc_skb+0xa0/0x480 [ 152.742137][ C0] ndisc_send_rs+0x28e/0x6b0 [ 152.742166][ C0] ? ipv6_get_lladdr+0x2b/0x400 [ 152.742196][ C0] addrconf_rs_timer+0x2d2/0x6c0 [ 152.742219][ C0] ? call_timer_fn+0xd4/0x5e0 [ 152.742247][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 152.742273][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 152.742310][ C0] call_timer_fn+0x192/0x5e0 [ 152.742334][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 152.742362][ C0] ? call_timer_fn+0xd4/0x5e0 [ 152.742386][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 152.742420][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 152.742445][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 152.742469][ C0] __run_timer_base+0x67b/0x9b0 [ 152.742505][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 152.742532][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 152.742558][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 152.742589][ C0] run_timer_softirq+0xb7/0x170 [ 152.742611][ C0] handle_softirqs+0x1d9/0x6c0 [ 152.742646][ C0] run_ktimerd+0x69/0x100 [ 152.742673][ C0] smpboot_thread_fn+0x57c/0xa80 [ 152.742703][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 152.742738][ C0] kthread+0x388/0x470 [ 152.742768][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 152.742794][ C0] ? __pfx_kthread+0x10/0x10 [ 152.742826][ C0] ret_from_fork+0x514/0xb70 [ 152.742861][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 152.742892][ C0] ? __switch_to+0xc89/0x1420 [ 152.742921][ C0] ? __pfx_kthread+0x10/0x10 [ 152.742953][ C0] ret_from_fork_asm+0x1a/0x30 [ 152.742988][ C0] [ 152.743000][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 152.743025][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 152.743038][ C1] Call Trace: [ 152.743045][ C1] [ 152.743053][ C1] dump_stack_lvl+0xe8/0x150 [ 152.743090][ C1] should_fail_ex+0x467/0x600 [ 152.743155][ C1] should_failslab+0xa8/0x100 [ 152.743236][ C1] kmem_cache_alloc_node_noprof+0xae/0x670 [ 152.743293][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 152.743347][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 152.743430][ C1] __alloc_skb+0x1d7/0x7a0 [ 152.743506][ C1] ndisc_alloc_skb+0xa0/0x480 [ 152.743559][ C1] ndisc_send_rs+0x28e/0x6b0 [ 152.743677][ C1] ? ipv6_get_lladdr+0x2b/0x400 [ 152.743789][ C1] addrconf_rs_timer+0x2d2/0x6c0 [ 152.743872][ C1] ? call_timer_fn+0xd4/0x5e0 [ 152.743957][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 152.744045][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 152.744155][ C1] call_timer_fn+0x192/0x5e0 [ 152.744232][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 152.744298][ C1] ? call_timer_fn+0xd4/0x5e0 [ 152.744366][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 152.744472][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 152.744545][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 152.744621][ C1] __run_timer_base+0x67b/0x9b0 [ 152.744737][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 152.744821][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 152.744878][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 152.744968][ C1] run_timer_softirq+0xb7/0x170 [ 152.745054][ C1] handle_softirqs+0x1d9/0x6c0 [ 152.745191][ C1] run_ktimerd+0x69/0x100 [ 152.745279][ C1] smpboot_thread_fn+0x57c/0xa80 [ 152.745359][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 152.745472][ C1] kthread+0x388/0x470 [ 152.745565][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 152.745639][ C1] ? __pfx_kthread+0x10/0x10 [ 152.745739][ C1] ret_from_fork+0x514/0xb70 [ 152.745840][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 152.745941][ C1] ? __switch_to+0xc89/0x1420 [ 152.746032][ C1] ? __pfx_kthread+0x10/0x10 [ 152.746124][ C1] ret_from_fork_asm+0x1a/0x30 [ 152.746228][ C1] [ 152.746341][ C1] FAULT_INJECTION: forcing a failure. [ 152.746341][ C1] name failslab, interval 1, probability 100, space 0, times 71 [ 152.746432][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 152.746516][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 152.746563][ C1] Call Trace: [ 152.746586][ C1] [ 152.746607][ C1] dump_stack_lvl+0xe8/0x150 [ 152.746703][ C1] should_fail_ex+0x467/0x600 [ 152.746809][ C1] should_failslab+0xa8/0x100 [ 152.746891][ C1] kmem_cache_alloc_node_noprof+0xae/0x670 [ 152.746962][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 152.747023][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 152.747105][ C1] __alloc_skb+0x1d7/0x7a0 [ 152.747179][ C1] ndisc_alloc_skb+0xa0/0x480 [ 152.747271][ C1] ndisc_send_rs+0x28e/0x6b0 [ 152.747357][ C1] ? ipv6_get_lladdr+0x2b/0x400 [ 152.747448][ C1] addrconf_rs_timer+0x2d2/0x6c0 [ 152.747519][ C1] ? call_timer_fn+0xd4/0x5e0 [ 152.747603][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 152.747682][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 152.747788][ C1] call_timer_fn+0x192/0x5e0 [ 152.747868][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 152.747938][ C1] ? call_timer_fn+0xd4/0x5e0 [ 152.747988][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 152.748083][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 152.748174][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 152.748255][ C1] __run_timer_base+0x67b/0x9b0 [ 152.748355][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 152.748438][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 152.748519][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 152.748611][ C1] run_timer_softirq+0xb7/0x170 [ 152.748676][ C1] handle_softirqs+0x1d9/0x6c0 [ 152.748786][ C1] run_ktimerd+0x69/0x100 [ 152.748898][ C1] smpboot_thread_fn+0x57c/0xa80 [ 152.748989][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 152.749092][ C1] kthread+0x388/0x470 [ 152.749182][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 152.749263][ C1] ? __pfx_kthread+0x10/0x10 [ 152.749349][ C1] ret_from_fork+0x514/0xb70 [ 152.749452][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 152.749503][ C1] ? __switch_to+0xc89/0x1420 [ 152.749590][ C1] ? __pfx_kthread+0x10/0x10 [ 152.749696][ C1] ret_from_fork_asm+0x1a/0x30 [ 152.749807][ C1] [ 152.750158][ C1] FAULT_INJECTION: forcing a failure. [ 152.750158][ C1] name failslab, interval 1, probability 100, space 0, times 70 [ 152.750233][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 152.750288][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 152.750321][ C1] Call Trace: [ 152.750341][ C1] [ 152.750366][ C1] dump_stack_lvl+0xe8/0x150 [ 152.750461][ C1] should_fail_ex+0x467/0x600 [ 152.750566][ C1] should_failslab+0xa8/0x100 [ 152.750643][ C1] kmem_cache_alloc_node_noprof+0xae/0x670 [ 152.750717][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 152.750772][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 152.750863][ C1] __alloc_skb+0x1d7/0x7a0 [ 152.750973][ C1] wg_packet_send_keepalive+0x65/0x2c0 [ 152.751065][ C1] call_timer_fn+0x192/0x5e0 [ 152.751142][ C1] ? __pfx_wg_expired_send_persistent_keepalive+0x10/0x10 [ 152.751207][ C1] ? call_timer_fn+0xd4/0x5e0 [ 152.751281][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 152.751390][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 152.751465][ C1] ? __pfx_wg_expired_send_persistent_keepalive+0x10/0x10 [ 152.751537][ C1] __run_timer_base+0x67b/0x9b0 [ 152.751649][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 152.751735][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 152.751815][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 152.751909][ C1] run_timer_softirq+0xb7/0x170 [ 152.751981][ C1] handle_softirqs+0x1d9/0x6c0 [ 152.752091][ C1] run_ktimerd+0x69/0x100 [ 152.752165][ C1] smpboot_thread_fn+0x57c/0xa80 [ 152.752270][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 152.752375][ C1] kthread+0x388/0x470 [ 152.752494][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 152.752575][ C1] ? __pfx_kthread+0x10/0x10 [ 152.752668][ C1] ret_from_fork+0x514/0xb70 [ 152.752771][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 152.752872][ C1] ? __switch_to+0xc89/0x1420 [ 152.752946][ C1] ? __pfx_kthread+0x10/0x10 [ 152.753005][ C1] ret_from_fork_asm+0x1a/0x30 [ 152.753144][ C1] [ 152.753658][ T67] FAULT_INJECTION: forcing a failure. [ 152.753658][ T67] name failslab, interval 1, probability 100, space 0, times 69 [ 152.753741][ T67] CPU: 1 UID: 0 PID: 67 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 152.753802][ T67] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 152.753841][ T67] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 152.753932][ T67] Call Trace: [ 152.753952][ T67] [ 152.753974][ T67] dump_stack_lvl+0xe8/0x150 [ 152.754066][ T67] should_fail_ex+0x467/0x600 [ 152.754167][ T67] should_failslab+0xa8/0x100 [ 152.754241][ T67] kmem_cache_alloc_noprof+0xa4/0x650 [ 152.754302][ T67] ? skb_clone+0x212/0x3a0 [ 152.754376][ T67] ? skb_clone+0x212/0x3a0 [ 152.754488][ T67] skb_clone+0x212/0x3a0 [ 152.754592][ T67] batadv_iv_send_outstanding_bat_ogm_packet+0x571/0x790 [ 152.754704][ T67] ? process_scheduled_works+0xa20/0x14e0 [ 152.754776][ T67] process_scheduled_works+0xa8e/0x14e0 [ 152.754947][ T67] ? __pfx_process_scheduled_works+0x10/0x10 [ 152.755038][ T67] ? assign_work+0x3cf/0x5d0 [ 152.755121][ T67] worker_thread+0xa47/0xfb0 [ 152.755272][ T67] kthread+0x388/0x470 [ 152.755358][ T67] ? __pfx_worker_thread+0x10/0x10 [ 152.755429][ T67] ? __pfx_kthread+0x10/0x10 [ 152.755520][ T67] ret_from_fork+0x514/0xb70 [ 152.755609][ T67] ? __pfx_ret_from_fork+0x10/0x10 [ 152.755700][ T67] ? __switch_to+0xc89/0x1420 [ 152.755784][ T67] ? __pfx_kthread+0x10/0x10 [ 152.755919][ T67] ret_from_fork_asm+0x1a/0x30 [ 152.756028][ T67] [ 152.760761][ T13] FAULT_INJECTION: forcing a failure. [ 152.760761][ T13] name failslab, interval 1, probability 100, space 0, times 66 [ 152.760885][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 152.760946][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 152.760985][ T13] Workqueue: events_unbound nsim_dev_trap_report_work [ 152.761100][ T13] Call Trace: [ 152.761127][ T13] [ 152.761143][ T13] dump_stack_lvl+0xe8/0x150 [ 152.761246][ T13] should_fail_ex+0x467/0x600 [ 152.761355][ T13] should_failslab+0xa8/0x100 [ 152.761428][ T13] kmem_cache_alloc_node_noprof+0xae/0x670 [ 152.761469][ T13] ? __alloc_skb+0x1d7/0x7a0 [ 152.761530][ T13] ? __alloc_skb+0x1d7/0x7a0 [ 152.761613][ T13] __alloc_skb+0x1d7/0x7a0 [ 152.761693][ T13] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 152.761818][ T13] ? process_scheduled_works+0xa20/0x14e0 [ 152.761900][ T13] process_scheduled_works+0xa8e/0x14e0 [ 152.762060][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 152.762151][ T13] ? assign_work+0x3cf/0x5d0 [ 152.762235][ T13] worker_thread+0xa47/0xfb0 [ 152.762383][ T13] kthread+0x388/0x470 [ 152.762476][ T13] ? __pfx_worker_thread+0x10/0x10 [ 152.762547][ T13] ? __pfx_kthread+0x10/0x10 [ 152.762643][ T13] ret_from_fork+0x514/0xb70 [ 152.762772][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 152.762866][ T13] ? __switch_to+0xc89/0x1420 [ 152.762957][ T13] ? __pfx_kthread+0x10/0x10 [ 152.763049][ T13] ret_from_fork_asm+0x1a/0x30 [ 152.763159][ T13] [ 152.763200][ T13] FAULT_INJECTION: forcing a failure. [ 152.763200][ T13] name failslab, interval 1, probability 100, space 0, times 65 [ 152.763272][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 152.763333][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 152.763378][ T13] Workqueue: events_unbound nsim_dev_trap_report_work [ 152.763409][ T13] Call Trace: [ 152.763425][ T13] [ 152.763457][ T13] dump_stack_lvl+0xe8/0x150 [ 152.763578][ T13] should_fail_ex+0x467/0x600 [ 152.763698][ T13] should_failslab+0xa8/0x100 [ 152.763773][ T13] kmem_cache_alloc_node_noprof+0xae/0x670 [ 152.763839][ T13] ? __alloc_skb+0x1d7/0x7a0 [ 152.763910][ T13] ? __alloc_skb+0x1d7/0x7a0 [ 152.763995][ T13] __alloc_skb+0x1d7/0x7a0 [ 152.764071][ T13] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 152.764193][ T13] ? process_scheduled_works+0xa20/0x14e0 [ 152.764269][ T13] process_scheduled_works+0xa8e/0x14e0 [ 152.764425][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 152.764528][ T13] ? assign_work+0x3cf/0x5d0 [ 152.764614][ T13] worker_thread+0xa47/0xfb0 [ 152.764769][ T13] kthread+0x388/0x470 [ 152.764875][ T13] ? __pfx_worker_thread+0x10/0x10 [ 152.764965][ T13] ? __pfx_kthread+0x10/0x10 [ 152.765074][ T13] ret_from_fork+0x514/0xb70 [ 152.765171][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 152.765253][ T13] ? __switch_to+0xc89/0x1420 [ 152.765340][ T13] ? __pfx_kthread+0x10/0x10 [ 152.765438][ T13] ret_from_fork_asm+0x1a/0x30 [ 152.765542][ T13] [ 152.765715][ T1025] FAULT_INJECTION: forcing a failure. [ 152.765715][ T1025] name failslab, interval 1, probability 100, space 0, times 64 [ 152.765790][ T1025] CPU: 1 UID: 0 PID: 1025 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 152.765863][ T1025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 152.765896][ T1025] Workqueue: events_unbound nsim_dev_trap_report_work [ 152.765982][ T1025] Call Trace: [ 152.766002][ T1025] [ 152.766023][ T1025] dump_stack_lvl+0xe8/0x150 [ 152.766118][ T1025] should_fail_ex+0x467/0x600 [ 152.766225][ T1025] should_failslab+0xa8/0x100 [ 152.766313][ T1025] kmem_cache_alloc_node_noprof+0xae/0x670 [ 152.766393][ T1025] ? __alloc_skb+0x1d7/0x7a0 [ 152.766454][ T1025] ? __alloc_skb+0x1d7/0x7a0 [ 152.766538][ T1025] __alloc_skb+0x1d7/0x7a0 [ 152.766616][ T1025] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 152.766737][ T1025] ? process_scheduled_works+0xa20/0x14e0 [ 152.766812][ T1025] process_scheduled_works+0xa8e/0x14e0 [ 152.766966][ T1025] ? __pfx_process_scheduled_works+0x10/0x10 [ 152.767059][ T1025] ? assign_work+0x3cf/0x5d0 [ 152.767150][ T1025] worker_thread+0xa47/0xfb0 [ 152.767305][ T1025] kthread+0x388/0x470 [ 152.767393][ T1025] ? __pfx_worker_thread+0x10/0x10 [ 152.767467][ T1025] ? __pfx_kthread+0x10/0x10 [ 152.767560][ T1025] ret_from_fork+0x514/0xb70 [ 152.767674][ T1025] ? __pfx_ret_from_fork+0x10/0x10 [ 152.767791][ T1025] ? __switch_to+0xc89/0x1420 [ 152.767891][ T1025] ? __pfx_kthread+0x10/0x10 [ 152.767986][ T1025] ret_from_fork_asm+0x1a/0x30 [ 152.768091][ T1025] [ 152.768132][ T1025] FAULT_INJECTION: forcing a failure. [ 152.768132][ T1025] name failslab, interval 1, probability 100, space 0, times 63 [ 152.768198][ T1025] CPU: 1 UID: 0 PID: 1025 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 152.768262][ T1025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 152.768304][ T1025] Workqueue: events_unbound nsim_dev_trap_report_work [ 152.768382][ T1025] Call Trace: [ 152.768403][ T1025] [ 152.768424][ T1025] dump_stack_lvl+0xe8/0x150 [ 152.768516][ T1025] should_fail_ex+0x467/0x600 [ 152.768615][ T1025] should_failslab+0xa8/0x100 [ 152.768700][ T1025] kmem_cache_alloc_node_noprof+0xae/0x670 [ 152.768767][ T1025] ? __alloc_skb+0x1d7/0x7a0 [ 152.768828][ T1025] ? __alloc_skb+0x1d7/0x7a0 [ 152.768917][ T1025] __alloc_skb+0x1d7/0x7a0 [ 152.768969][ T1025] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 152.769142][ T1025] ? process_scheduled_works+0xa20/0x14e0 [ 152.769215][ T1025] process_scheduled_works+0xa8e/0x14e0 [ 152.769356][ T1025] ? __pfx_process_scheduled_works+0x10/0x10 [ 152.769449][ T1025] ? assign_work+0x3cf/0x5d0 [ 152.769494][ T1025] worker_thread+0xa47/0xfb0 [ 152.769604][ T1025] kthread+0x388/0x470 [ 152.769695][ T1025] ? __pfx_worker_thread+0x10/0x10 [ 152.769774][ T1025] ? __pfx_kthread+0x10/0x10 [ 152.769874][ T1025] ret_from_fork+0x514/0xb70 [ 152.769975][ T1025] ? __pfx_ret_from_fork+0x10/0x10 [ 152.770054][ T1025] ? __switch_to+0xc89/0x1420 [ 152.770146][ T1025] ? __pfx_kthread+0x10/0x10 [ 152.770242][ T1025] ret_from_fork_asm+0x1a/0x30 [ 152.770355][ T1025] [ 152.770928][ T2881] FAULT_INJECTION: forcing a failure. [ 152.770928][ T2881] name failslab, interval 1, probability 100, space 0, times 62 [ 152.771009][ T2881] CPU: 1 UID: 0 PID: 2881 Comm: kworker/u8:19 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 152.771079][ T2881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 152.771120][ T2881] Workqueue: events_unbound nsim_dev_trap_report_work [ 152.771203][ T2881] Call Trace: [ 152.771226][ T2881] [ 152.771254][ T2881] dump_stack_lvl+0xe8/0x150 [ 152.771348][ T2881] should_fail_ex+0x467/0x600 [ 152.771439][ T2881] should_failslab+0xa8/0x100 [ 152.771520][ T2881] kmem_cache_alloc_node_noprof+0xae/0x670 [ 152.771592][ T2881] ? __alloc_skb+0x1d7/0x7a0 [ 152.771652][ T2881] ? __alloc_skb+0x1d7/0x7a0 [ 152.771735][ T2881] __alloc_skb+0x1d7/0x7a0 [ 152.771815][ T2881] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 152.771980][ T2881] ? process_scheduled_works+0xa20/0x14e0 [ 152.772055][ T2881] process_scheduled_works+0xa8e/0x14e0 [ 152.772212][ T2881] ? __pfx_process_scheduled_works+0x10/0x10 [ 152.772313][ T2881] ? assign_work+0x3cf/0x5d0 [ 152.772392][ T2881] worker_thread+0xa47/0xfb0 [ 152.772514][ T2881] ? __kthread_parkme+0x71/0x1f0 [ 152.772628][ T2881] kthread+0x388/0x470 [ 152.772722][ T2881] ? __pfx_worker_thread+0x10/0x10 [ 152.772794][ T2881] ? __pfx_kthread+0x10/0x10 [ 152.772895][ T2881] ret_from_fork+0x514/0xb70 [ 152.772998][ T2881] ? __pfx_ret_from_fork+0x10/0x10 [ 152.773081][ T2881] ? __switch_to+0xc89/0x1420 [ 152.773115][ T2881] ? __pfx_kthread+0x10/0x10 [ 152.773128][ C0] FAULT_INJECTION: forcing a failure. [ 152.773128][ C0] name failslab, interval 1, probability 100, space 0, times 62 [ 152.773152][ T2881] ret_from_fork_asm+0x1a/0x30 [ 152.773190][ T2881] [ 152.773203][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 152.773231][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 152.773246][ C0] Call Trace: [ 152.773241][ C1] FAULT_INJECTION: forcing a failure. [ 152.773241][ C1] name failslab, interval 1, probability 100, space 0, times 62 [ 152.773256][ C0] [ 152.773266][ C0] dump_stack_lvl+0xe8/0x150 [ 152.773301][ C0] should_fail_ex+0x467/0x600 [ 152.773337][ C0] should_failslab+0xa8/0x100 [ 152.773371][ C0] kmem_cache_alloc_node_noprof+0xae/0x670 [ 152.773396][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 152.773416][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 152.773444][ C0] __alloc_skb+0x1d7/0x7a0 [ 152.773471][ C0] __netdev_alloc_skb+0xc0/0x4b0 [ 152.773498][ C0] __ieee80211_beacon_get+0xc97/0x1820 [ 152.773529][ C0] ? __lock_acquire+0x683/0x2ce0 [ 152.773551][ C0] ? __ieee80211_beacon_get+0x34/0x1820 [ 152.773577][ C0] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 152.773605][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 152.773642][ C0] mac80211_hwsim_beacon_tx+0x378/0x820 [ 152.773673][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 152.773701][ C0] __iterate_interfaces+0x2af/0x5a0 [ 152.773723][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 152.773751][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 152.773775][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 152.773802][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 152.773829][ C0] mac80211_hwsim_beacon+0xb2/0x2b0 [ 152.773853][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 152.773877][ C0] __hrtimer_run_queues+0x3eb/0xaf0 [ 152.773927][ C0] hrtimer_run_softirq+0x18f/0x260 [ 152.773963][ C0] handle_softirqs+0x1d9/0x6c0 [ 152.773999][ C0] run_ktimerd+0x69/0x100 [ 152.774028][ C0] smpboot_thread_fn+0x57c/0xa80 [ 152.774061][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 152.774097][ C0] kthread+0x388/0x470 [ 152.774128][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 152.774154][ C0] ? __pfx_kthread+0x10/0x10 [ 152.774187][ C0] ret_from_fork+0x514/0xb70 [ 152.774221][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 152.774253][ C0] ? __switch_to+0xc89/0x1420 [ 152.774284][ C0] ? __pfx_kthread+0x10/0x10 [ 152.774316][ C0] ret_from_fork_asm+0x1a/0x30 [ 152.774360][ C0] [ 152.774373][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 152.774399][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 152.774395][ C0] FAULT_INJECTION: forcing a failure. [ 152.774395][ C0] name failslab, interval 1, probability 100, space 0, times 61 [ 152.774414][ C1] Call Trace: [ 152.774423][ C1] [ 152.774432][ C1] dump_stack_lvl+0xe8/0x150 [ 152.774464][ C1] should_fail_ex+0x467/0x600 [ 152.774500][ C1] should_failslab+0xa8/0x100 [ 152.774526][ C1] kmem_cache_alloc_node_noprof+0xae/0x670 [ 152.774549][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 152.774569][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 152.774597][ C1] __alloc_skb+0x1d7/0x7a0 [ 152.774623][ C1] __netdev_alloc_skb+0xc0/0x4b0 [ 152.774651][ C1] __ieee80211_beacon_get+0xc97/0x1820 [ 152.774680][ C1] ? __lock_acquire+0x683/0x2ce0 [ 152.774701][ C1] ? __ieee80211_beacon_get+0x34/0x1820 [ 152.774728][ C1] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 152.774756][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 152.774793][ C1] mac80211_hwsim_beacon_tx+0x378/0x820 [ 152.774821][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 152.774854][ C1] __iterate_interfaces+0x2af/0x5a0 [ 152.774876][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 152.774904][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 152.774928][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 152.774955][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 152.774982][ C1] mac80211_hwsim_beacon+0xb2/0x2b0 [ 152.775003][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 152.775027][ C1] __hrtimer_run_queues+0x3eb/0xaf0 [ 152.775076][ C1] hrtimer_run_softirq+0x18f/0x260 [ 152.775112][ C1] handle_softirqs+0x1d9/0x6c0 [ 152.775148][ C1] run_ktimerd+0x69/0x100 [ 152.775176][ C1] smpboot_thread_fn+0x57c/0xa80 [ 152.775207][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 152.775243][ C1] kthread+0x388/0x470 [ 152.775274][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 152.775300][ C1] ? __pfx_kthread+0x10/0x10 [ 152.775332][ C1] ret_from_fork+0x514/0xb70 [ 152.775369][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 152.775400][ C1] ? __switch_to+0xc89/0x1420 [ 152.775431][ C1] ? __pfx_kthread+0x10/0x10 [ 152.775463][ C1] ret_from_fork_asm+0x1a/0x30 [ 152.775500][ C1] [ 152.775512][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 152.775532][ C1] FAULT_INJECTION: forcing a failure. [ 152.775532][ C1] name failslab, interval 1, probability 100, space 0, times 60 [ 152.775539][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 152.775553][ C0] Call Trace: [ 152.775561][ C0] [ 152.775569][ C0] dump_stack_lvl+0xe8/0x150 [ 152.775602][ C0] should_fail_ex+0x467/0x600 [ 152.775637][ C0] should_failslab+0xa8/0x100 [ 152.775663][ C0] kmem_cache_alloc_node_noprof+0xae/0x670 [ 152.775686][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 152.775706][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 152.775734][ C0] __alloc_skb+0x1d7/0x7a0 [ 152.775760][ C0] __netdev_alloc_skb+0xc0/0x4b0 [ 152.775787][ C0] __ieee80211_beacon_get+0xc97/0x1820 [ 152.775816][ C0] ? __lock_acquire+0x683/0x2ce0 [ 152.775837][ C0] ? __ieee80211_beacon_get+0x34/0x1820 [ 152.775865][ C0] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 152.775894][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 152.775919][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 152.775959][ C0] mac80211_hwsim_beacon_tx+0x378/0x820 [ 152.775988][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 152.776016][ C0] __iterate_interfaces+0x2af/0x5a0 [ 152.776038][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 152.776066][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 152.776089][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 152.776117][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 152.776143][ C0] mac80211_hwsim_beacon+0xb2/0x2b0 [ 152.776165][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 152.776189][ C0] __hrtimer_run_queues+0x3eb/0xaf0 [ 152.776238][ C0] hrtimer_run_softirq+0x18f/0x260 [ 152.776274][ C0] handle_softirqs+0x1d9/0x6c0 [ 152.776310][ C0] run_ktimerd+0x69/0x100 [ 152.776338][ C0] smpboot_thread_fn+0x57c/0xa80 [ 152.776374][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 152.776410][ C0] kthread+0x388/0x470 [ 152.776441][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 152.776468][ C0] ? __pfx_kthread+0x10/0x10 [ 152.776500][ C0] ret_from_fork+0x514/0xb70 [ 152.776553][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 152.776585][ C0] ? __switch_to+0xc89/0x1420 [ 152.776615][ C0] ? __pfx_kthread+0x10/0x10 [ 152.776648][ C0] ret_from_fork_asm+0x1a/0x30 [ 152.776684][ C0] [ 152.776697][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 152.776716][ C0] FAULT_INJECTION: forcing a failure. [ 152.776716][ C0] name failslab, interval 1, probability 100, space 0, times 59 [ 152.776723][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 152.776738][ C1] Call Trace: [ 152.776746][ C1] [ 152.776754][ C1] dump_stack_lvl+0xe8/0x150 [ 152.776786][ C1] should_fail_ex+0x467/0x600 [ 152.776822][ C1] should_failslab+0xa8/0x100 [ 152.776852][ C1] kmem_cache_alloc_node_noprof+0xae/0x670 [ 152.776875][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 152.776895][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 152.776923][ C1] __alloc_skb+0x1d7/0x7a0 [ 152.776949][ C1] __netdev_alloc_skb+0xc0/0x4b0 [ 152.776976][ C1] __ieee80211_beacon_get+0xc97/0x1820 [ 152.777005][ C1] ? __lock_acquire+0x683/0x2ce0 [ 152.777027][ C1] ? __ieee80211_beacon_get+0x34/0x1820 [ 152.777054][ C1] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 152.777082][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 152.777108][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 152.777147][ C1] mac80211_hwsim_beacon_tx+0x378/0x820 [ 152.777176][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 152.777203][ C1] __iterate_interfaces+0x2af/0x5a0 [ 152.777225][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 152.777253][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 152.777277][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 152.777304][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 152.777330][ C1] mac80211_hwsim_beacon+0xb2/0x2b0 [ 152.777354][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 152.777378][ C1] __hrtimer_run_queues+0x3eb/0xaf0 [ 152.777428][ C1] hrtimer_run_softirq+0x18f/0x260 [ 152.777463][ C1] handle_softirqs+0x1d9/0x6c0 [ 152.777499][ C1] run_ktimerd+0x69/0x100 [ 152.777527][ C1] smpboot_thread_fn+0x57c/0xa80 [ 152.777558][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 152.777594][ C1] kthread+0x388/0x470 [ 152.777625][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 152.777651][ C1] ? __pfx_kthread+0x10/0x10 [ 152.777684][ C1] ret_from_fork+0x514/0xb70 [ 152.777719][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 152.777750][ C1] ? __switch_to+0xc89/0x1420 [ 152.777781][ C1] ? __pfx_kthread+0x10/0x10 [ 152.777813][ C1] ret_from_fork_asm+0x1a/0x30 [ 152.777854][ C1] [ 152.777866][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 152.777885][ C1] FAULT_INJECTION: forcing a failure. [ 152.777885][ C1] name failslab, interval 1, probability 100, space 0, times 58 [ 152.777893][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 152.777907][ C0] Call Trace: [ 152.777915][ C0] [ 152.777923][ C0] dump_stack_lvl+0xe8/0x150 [ 152.777955][ C0] should_fail_ex+0x467/0x600 [ 152.777991][ C0] should_failslab+0xa8/0x100 [ 152.778017][ C0] kmem_cache_alloc_node_noprof+0xae/0x670 [ 152.778040][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 152.778059][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 152.778087][ C0] __alloc_skb+0x1d7/0x7a0 [ 152.778113][ C0] __netdev_alloc_skb+0xc0/0x4b0 [ 152.778140][ C0] __ieee80211_beacon_get+0xc97/0x1820 [ 152.778169][ C0] ? __lock_acquire+0x683/0x2ce0 [ 152.778191][ C0] ? __ieee80211_beacon_get+0x34/0x1820 [ 152.778217][ C0] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 152.778245][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 152.778271][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 152.778310][ C0] mac80211_hwsim_beacon_tx+0x378/0x820 [ 152.778339][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 152.778371][ C0] __iterate_interfaces+0x2af/0x5a0 [ 152.778393][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 152.778421][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 152.778445][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 152.778472][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 152.778498][ C0] mac80211_hwsim_beacon+0xb2/0x2b0 [ 152.778520][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 152.778545][ C0] __hrtimer_run_queues+0x3eb/0xaf0 [ 152.778594][ C0] hrtimer_run_softirq+0x18f/0x260 [ 152.778630][ C0] handle_softirqs+0x1d9/0x6c0 [ 152.778666][ C0] run_ktimerd+0x69/0x100 [ 152.778694][ C0] smpboot_thread_fn+0x57c/0xa80 [ 152.778724][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 152.778760][ C0] kthread+0x388/0x470 [ 152.778791][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 152.778818][ C0] ? __pfx_kthread+0x10/0x10 [ 152.778852][ C0] ret_from_fork+0x514/0xb70 [ 152.778886][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 152.778918][ C0] ? __switch_to+0xc89/0x1420 [ 152.778948][ C0] ? __pfx_kthread+0x10/0x10 [ 152.778981][ C0] ret_from_fork_asm+0x1a/0x30 [ 152.779017][ C0] [ 152.779029][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 152.779048][ C0] FAULT_INJECTION: forcing a failure. [ 152.779048][ C0] name failslab, interval 1, probability 100, space 0, times 57 [ 152.779056][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 152.779070][ C1] Call Trace: [ 152.779077][ C1] [ 152.779086][ C1] dump_stack_lvl+0xe8/0x150 [ 152.779118][ C1] should_fail_ex+0x467/0x600 [ 152.779153][ C1] should_failslab+0xa8/0x100 [ 152.779179][ C1] kmem_cache_alloc_node_noprof+0xae/0x670 [ 152.779202][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 152.779222][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 152.779250][ C1] __alloc_skb+0x1d7/0x7a0 [ 152.779275][ C1] __netdev_alloc_skb+0xc0/0x4b0 [ 152.779303][ C1] __ieee80211_beacon_get+0xc97/0x1820 [ 152.779332][ C1] ? __lock_acquire+0x683/0x2ce0 [ 152.779354][ C1] ? __ieee80211_beacon_get+0x34/0x1820 [ 152.779381][ C1] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 152.779410][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 152.779435][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 152.779479][ C1] mac80211_hwsim_beacon_tx+0x378/0x820 [ 152.779512][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 152.779539][ C1] __iterate_interfaces+0x2af/0x5a0 [ 152.779561][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 152.779589][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 152.779613][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 152.779640][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 152.779667][ C1] mac80211_hwsim_beacon+0xb2/0x2b0 [ 152.779689][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 152.779713][ C1] __hrtimer_run_queues+0x3eb/0xaf0 [ 152.779762][ C1] hrtimer_run_softirq+0x18f/0x260 [ 152.779798][ C1] handle_softirqs+0x1d9/0x6c0 [ 152.779834][ C1] run_ktimerd+0x69/0x100 [ 152.779869][ C1] smpboot_thread_fn+0x57c/0xa80 [ 152.779900][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 152.779937][ C1] kthread+0x388/0x470 [ 152.779968][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 152.779995][ C1] ? __pfx_kthread+0x10/0x10 [ 152.780027][ C1] ret_from_fork+0x514/0xb70 [ 152.780062][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 152.780094][ C1] ? __switch_to+0xc89/0x1420 [ 152.780124][ C1] ? __pfx_kthread+0x10/0x10 [ 152.780157][ C1] ret_from_fork_asm+0x1a/0x30 [ 152.780193][ C1] [ 152.780206][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 152.780233][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 152.780247][ C0] Call Trace: [ 152.780256][ C0] [ 152.780264][ C1] FAULT_INJECTION: forcing a failure. [ 152.780264][ C1] name failslab, interval 1, probability 100, space 0, times 56 [ 152.780265][ C0] dump_stack_lvl+0xe8/0x150 [ 152.780302][ C0] should_fail_ex+0x467/0x600 [ 152.780338][ C0] should_failslab+0xa8/0x100 [ 152.780370][ C0] kmem_cache_alloc_node_noprof+0xae/0x670 [ 152.780397][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 152.780417][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 152.780445][ C0] __alloc_skb+0x1d7/0x7a0 [ 152.780471][ C0] __netdev_alloc_skb+0xc0/0x4b0 [ 152.780498][ C0] __ieee80211_beacon_get+0xc97/0x1820 [ 152.780527][ C0] ? __lock_acquire+0x683/0x2ce0 [ 152.780548][ C0] ? __ieee80211_beacon_get+0x34/0x1820 [ 152.780575][ C0] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 152.780603][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 152.780629][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 152.780667][ C0] mac80211_hwsim_beacon_tx+0x378/0x820 [ 152.780697][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 152.780724][ C0] __iterate_interfaces+0x2af/0x5a0 [ 152.780746][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 152.780774][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 152.780798][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 152.780825][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 152.780853][ C0] mac80211_hwsim_beacon+0xb2/0x2b0 [ 152.780876][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 152.780900][ C0] __hrtimer_run_queues+0x3eb/0xaf0 [ 152.780949][ C0] hrtimer_run_softirq+0x18f/0x260 [ 152.780984][ C0] handle_softirqs+0x1d9/0x6c0 [ 152.781020][ C0] run_ktimerd+0x69/0x100 [ 152.781048][ C0] smpboot_thread_fn+0x57c/0xa80 [ 152.781079][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 152.781115][ C0] kthread+0x388/0x470 [ 152.781145][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 152.781172][ C0] ? __pfx_kthread+0x10/0x10 [ 152.781205][ C0] ret_from_fork+0x514/0xb70 [ 152.781239][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 152.781271][ C0] ? __switch_to+0xc89/0x1420 [ 152.781302][ C0] ? __pfx_kthread+0x10/0x10 [ 152.781334][ C0] ret_from_fork_asm+0x1a/0x30 [ 152.781376][ C0] [ 152.781388][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 152.781414][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 152.781427][ C1] Call Trace: [ 152.781436][ C1] [ 152.781481][ C1] dump_stack_lvl+0xe8/0x150 [ 152.781613][ C1] should_fail_ex+0x467/0x600 [ 152.781726][ C1] should_failslab+0xa8/0x100 [ 152.781808][ C1] kmem_cache_alloc_node_noprof+0xae/0x670 [ 152.781874][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 152.781936][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 152.782028][ C1] __alloc_skb+0x1d7/0x7a0 [ 152.782109][ C1] __netdev_alloc_skb+0xc0/0x4b0 [ 152.782191][ C1] __ieee80211_beacon_get+0xc97/0x1820 [ 152.782277][ C1] ? __lock_acquire+0x683/0x2ce0 [ 152.782345][ C1] ? __ieee80211_beacon_get+0x34/0x1820 [ 152.782421][ C1] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 152.782505][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 152.782587][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 152.782707][ C1] mac80211_hwsim_beacon_tx+0x378/0x820 [ 152.782741][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 152.782856][ C1] __iterate_interfaces+0x2af/0x5a0 [ 152.782952][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 152.783036][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 152.783110][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 152.783192][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 152.783275][ C1] mac80211_hwsim_beacon+0xb2/0x2b0 [ 152.783345][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 152.783407][ C1] __hrtimer_run_queues+0x3eb/0xaf0 [ 152.783580][ C1] hrtimer_run_softirq+0x18f/0x260 [ 152.783687][ C1] handle_softirqs+0x1d9/0x6c0 [ 152.783799][ C1] run_ktimerd+0x69/0x100 [ 152.783899][ C1] smpboot_thread_fn+0x57c/0xa80 [ 152.783993][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 152.784103][ C1] kthread+0x388/0x470 [ 152.784204][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 152.784306][ C1] ? __pfx_kthread+0x10/0x10 [ 152.784416][ C1] ret_from_fork+0x514/0xb70 [ 152.784518][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 152.784662][ C1] ? __switch_to+0xc89/0x1420 [ 152.784753][ C1] ? __pfx_kthread+0x10/0x10 [ 152.784854][ C1] ret_from_fork_asm+0x1a/0x30 [ 152.784959][ C1] [ 152.785095][ C1] FAULT_INJECTION: forcing a failure. [ 152.785095][ C1] name failslab, interval 1, probability 100, space 0, times 54 [ 152.785168][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 152.785239][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 152.785272][ C1] Call Trace: [ 152.785293][ C1] [ 152.785322][ C1] dump_stack_lvl+0xe8/0x150 [ 152.785410][ C1] should_fail_ex+0x467/0x600 [ 152.785522][ C1] should_failslab+0xa8/0x100 [ 152.785613][ C1] kmem_cache_alloc_node_noprof+0xae/0x670 [ 152.785711][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 152.785782][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 152.785897][ C1] __alloc_skb+0x1d7/0x7a0 [ 152.785981][ C1] __netdev_alloc_skb+0xc0/0x4b0 [ 152.786066][ C1] __ieee80211_beacon_get+0xc97/0x1820 [ 152.786160][ C1] ? __lock_acquire+0x683/0x2ce0 [ 152.786226][ C1] ? __ieee80211_beacon_get+0x34/0x1820 [ 152.786304][ C1] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 152.786383][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 152.786461][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 152.786584][ C1] mac80211_hwsim_beacon_tx+0x378/0x820 [ 152.786672][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 152.786765][ C1] __iterate_interfaces+0x2af/0x5a0 [ 152.786831][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 152.786924][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 152.787003][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 152.787121][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 152.787206][ C1] mac80211_hwsim_beacon+0xb2/0x2b0 [ 152.787272][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 152.787346][ C1] __hrtimer_run_queues+0x3eb/0xaf0 [ 152.787488][ C1] hrtimer_run_softirq+0x18f/0x260 [ 152.787594][ C1] handle_softirqs+0x1d9/0x6c0 [ 152.787703][ C1] run_ktimerd+0x69/0x100 [ 152.787791][ C1] smpboot_thread_fn+0x57c/0xa80 [ 152.787887][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 152.787994][ C1] kthread+0x388/0x470 [ 152.788026][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 152.788114][ C1] ? __pfx_kthread+0x10/0x10 [ 152.788213][ C1] ret_from_fork+0x514/0xb70 [ 152.788313][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 152.788415][ C1] ? __switch_to+0xc89/0x1420 [ 152.788509][ C1] ? __pfx_kthread+0x10/0x10 [ 152.788611][ C1] ret_from_fork_asm+0x1a/0x30 [ 152.788727][ C1] [ 152.788809][ C1] FAULT_INJECTION: forcing a failure. [ 152.788809][ C1] name failslab, interval 1, probability 100, space 0, times 53 [ 152.788883][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 152.788958][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 152.789010][ C1] Call Trace: [ 152.789031][ C1] [ 152.789054][ C1] dump_stack_lvl+0xe8/0x150 [ 152.789155][ C1] should_fail_ex+0x467/0x600 [ 152.789258][ C1] should_failslab+0xa8/0x100 [ 152.789339][ C1] kmem_cache_alloc_node_noprof+0xae/0x670 [ 152.789415][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 152.789471][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 152.789502][ C1] __alloc_skb+0x1d7/0x7a0 [ 152.789572][ C1] __netdev_alloc_skb+0xc0/0x4b0 [ 152.789655][ C1] __ieee80211_beacon_get+0xc97/0x1820 [ 152.789739][ C1] ? __lock_acquire+0x683/0x2ce0 [ 152.789810][ C1] ? __ieee80211_beacon_get+0x34/0x1820 [ 152.789891][ C1] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 152.789974][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 152.790054][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 152.790166][ C1] mac80211_hwsim_beacon_tx+0x378/0x820 [ 152.790257][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 152.790374][ C1] __iterate_interfaces+0x2af/0x5a0 [ 152.790452][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 152.790535][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 152.790606][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 152.790687][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 152.790769][ C1] mac80211_hwsim_beacon+0xb2/0x2b0 [ 152.790832][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 152.790912][ C1] __hrtimer_run_queues+0x3eb/0xaf0 [ 152.791056][ C1] hrtimer_run_softirq+0x18f/0x260 [ 152.791159][ C1] handle_softirqs+0x1d9/0x6c0 [ 152.791271][ C1] run_ktimerd+0x69/0x100 [ 152.791347][ C1] smpboot_thread_fn+0x57c/0xa80 [ 152.791438][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 152.791548][ C1] kthread+0x388/0x470 [ 152.791640][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 152.791742][ C1] ? __pfx_kthread+0x10/0x10 [ 152.791864][ C1] ret_from_fork+0x514/0xb70 [ 152.791966][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 152.792063][ C1] ? __switch_to+0xc89/0x1420 [ 152.792158][ C1] ? __pfx_kthread+0x10/0x10 [ 152.792255][ C1] ret_from_fork_asm+0x1a/0x30 [ 152.792350][ C1] [ 152.792980][ T1482] FAULT_INJECTION: forcing a failure. [ 152.792980][ T1482] name failslab, interval 1, probability 100, space 0, times 51 [ 152.793078][ T1482] CPU: 1 UID: 0 PID: 1482 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 152.793174][ T1482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 152.793216][ T1482] Workqueue: events_unbound nsim_dev_trap_report_work [ 152.793311][ T1482] Call Trace: [ 152.793339][ T1482] [ 152.793355][ T1482] dump_stack_lvl+0xe8/0x150 [ 152.793450][ T1482] should_fail_ex+0x467/0x600 [ 152.793554][ T1482] should_failslab+0xa8/0x100 [ 152.793627][ T1482] kmem_cache_alloc_node_noprof+0xae/0x670 [ 152.793698][ T1482] ? __alloc_skb+0x1d7/0x7a0 [ 152.793753][ T1482] ? __alloc_skb+0x1d7/0x7a0 [ 152.793836][ T1482] __alloc_skb+0x1d7/0x7a0 [ 152.793920][ T1482] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 152.794051][ T1482] ? process_scheduled_works+0xa20/0x14e0 [ 152.794123][ T1482] process_scheduled_works+0xa8e/0x14e0 [ 152.794282][ T1482] ? __pfx_process_scheduled_works+0x10/0x10 [ 152.794365][ T1482] ? assign_work+0x3cf/0x5d0 [ 152.794442][ T1482] worker_thread+0xa47/0xfb0 [ 152.794591][ T1482] ? __kthread_parkme+0x71/0x1f0 [ 152.794704][ T1482] kthread+0x388/0x470 [ 152.794803][ T1482] ? __pfx_worker_thread+0x10/0x10 [ 152.794877][ T1482] ? __pfx_kthread+0x10/0x10 [ 152.794970][ T1482] ret_from_fork+0x514/0xb70 [ 152.795078][ T1482] ? __pfx_ret_from_fork+0x10/0x10 [ 152.795170][ T1482] ? __switch_to+0xc89/0x1420 [ 152.795263][ T1482] ? __pfx_kthread+0x10/0x10 [ 152.795349][ T1482] ret_from_fork_asm+0x1a/0x30 [ 152.795452][ T1482] [ 152.795494][ T1482] FAULT_INJECTION: forcing a failure. [ 152.795494][ T1482] name failslab, interval 1, probability 100, space 0, times 50 [ 152.795564][ T1482] CPU: 1 UID: 0 PID: 1482 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 152.795627][ T1482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 152.795668][ T1482] Workqueue: events_unbound nsim_dev_trap_report_work [ 152.795750][ T1482] Call Trace: [ 152.795771][ T1482] [ 152.795792][ T1482] dump_stack_lvl+0xe8/0x150 [ 152.795918][ T1482] should_fail_ex+0x467/0x600 [ 152.796034][ T1482] should_failslab+0xa8/0x100 [ 152.796113][ T1482] kmem_cache_alloc_node_noprof+0xae/0x670 [ 152.796177][ T1482] ? __alloc_skb+0x1d7/0x7a0 [ 152.796238][ T1482] ? __alloc_skb+0x1d7/0x7a0 [ 152.796322][ T1482] __alloc_skb+0x1d7/0x7a0 [ 152.796408][ T1482] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 152.796548][ T1482] ? process_scheduled_works+0xa20/0x14e0 [ 152.796629][ T1482] process_scheduled_works+0xa8e/0x14e0 [ 152.796784][ T1482] ? __pfx_process_scheduled_works+0x10/0x10 [ 152.796894][ T1482] ? assign_work+0x3cf/0x5d0 [ 152.796981][ T1482] worker_thread+0xa47/0xfb0 [ 152.797108][ T1482] ? __kthread_parkme+0x71/0x1f0 [ 152.797223][ T1482] kthread+0x388/0x470 [ 152.797349][ T1482] ? __pfx_worker_thread+0x10/0x10 [ 152.797422][ T1482] ? __pfx_kthread+0x10/0x10 [ 152.797521][ T1482] ret_from_fork+0x514/0xb70 [ 152.797618][ T1482] ? __pfx_ret_from_fork+0x10/0x10 [ 152.797717][ T1482] ? __switch_to+0xc89/0x1420 [ 152.797808][ T1482] ? __pfx_kthread+0x10/0x10 [ 152.797902][ T1482] ret_from_fork_asm+0x1a/0x30 [ 152.798014][ T1482] [ 152.799602][ C1] FAULT_INJECTION: forcing a failure. [ 152.799602][ C1] name failslab, interval 1, probability 100, space 0, times 50 [ 152.799671][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 152.799735][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 152.799776][ C1] Call Trace: [ 152.799798][ C1] [ 152.799828][ C1] dump_stack_lvl+0xe8/0x150 [ 152.799933][ C1] should_fail_ex+0x467/0x600 [ 152.800057][ C1] should_failslab+0xa8/0x100 [ 152.800149][ C1] kmem_cache_alloc_node_noprof+0xae/0x670 [ 152.800220][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 152.800282][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 152.800364][ C1] __alloc_skb+0x1d7/0x7a0 [ 152.800439][ C1] wg_packet_send_keepalive+0x65/0x2c0 [ 152.800529][ C1] call_timer_fn+0x192/0x5e0 [ 152.800603][ C1] ? __pfx_wg_expired_send_persistent_keepalive+0x10/0x10 [ 152.800673][ C1] ? call_timer_fn+0xd4/0x5e0 [ 152.800746][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 152.800865][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 152.800939][ C1] ? __pfx_wg_expired_send_persistent_keepalive+0x10/0x10 [ 152.801018][ C1] __run_timer_base+0x67b/0x9b0 [ 152.801134][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 152.801217][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 152.801282][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 152.801363][ C1] run_timer_softirq+0xb7/0x170 [ 152.801418][ C1] handle_softirqs+0x1d9/0x6c0 [ 152.801529][ C1] run_ktimerd+0x69/0x100 [ 152.801584][ C1] smpboot_thread_fn+0x57c/0xa80 [ 152.801682][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 152.801805][ C1] kthread+0x388/0x470 [ 152.801907][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 152.801989][ C1] ? __pfx_kthread+0x10/0x10 [ 152.802092][ C1] ret_from_fork+0x514/0xb70 [ 152.802195][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 152.802289][ C1] ? __switch_to+0xc89/0x1420 [ 152.802385][ C1] ? __pfx_kthread+0x10/0x10 [ 152.802485][ C1] ret_from_fork_asm+0x1a/0x30 [ 152.802599][ C1] [ 152.802824][ C1] FAULT_INJECTION: forcing a failure. [ 152.802824][ C1] name failslab, interval 1, probability 100, space 0, times 49 [ 152.802913][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 152.802978][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 152.803017][ C1] Call Trace: [ 152.803039][ C1] [ 152.803077][ C1] dump_stack_lvl+0xe8/0x150 [ 152.803202][ C1] should_fail_ex+0x467/0x600 [ 152.803317][ C1] should_failslab+0xa8/0x100 [ 152.803387][ C1] kmem_cache_alloc_node_noprof+0xae/0x670 [ 152.803460][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 152.803522][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 152.803607][ C1] __alloc_skb+0x1d7/0x7a0 [ 152.803687][ C1] __netdev_alloc_skb+0xc0/0x4b0 [ 152.803774][ C1] hsr_init_skb+0xf3/0x6d0 [ 152.803866][ C1] send_hsr_supervision_frame+0x195/0xd60 [ 152.803963][ C1] ? __pfx_send_hsr_supervision_frame+0x10/0x10 [ 152.804035][ C1] hsr_announce+0x1db/0x370 [ 152.804132][ C1] ? hsr_announce+0x89/0x370 [ 152.804227][ C1] ? __pfx_hsr_announce+0x10/0x10 [ 152.804328][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 152.804449][ C1] call_timer_fn+0x192/0x5e0 [ 152.804556][ C1] ? __pfx_hsr_announce+0x10/0x10 [ 152.804649][ C1] ? call_timer_fn+0xd4/0x5e0 [ 152.804725][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 152.804835][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 152.804918][ C1] ? __pfx_hsr_announce+0x10/0x10 [ 152.805010][ C1] __run_timer_base+0x67b/0x9b0 [ 152.805122][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 152.805205][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 152.805287][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 152.805386][ C1] run_timer_softirq+0xb7/0x170 [ 152.805462][ C1] handle_softirqs+0x1d9/0x6c0 [ 152.805568][ C1] run_ktimerd+0x69/0x100 [ 152.805655][ C1] smpboot_thread_fn+0x57c/0xa80 [ 152.805752][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 152.805888][ C1] kthread+0x388/0x470 [ 152.805990][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 152.806051][ C1] ? __pfx_kthread+0x10/0x10 [ 152.806150][ C1] ret_from_fork+0x514/0xb70 [ 152.806255][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 152.806344][ C1] ? __switch_to+0xc89/0x1420 [ 152.806441][ C1] ? __pfx_kthread+0x10/0x10 [ 152.806537][ C1] ret_from_fork_asm+0x1a/0x30 [ 152.806650][ C1] [ 152.806926][ T2873] FAULT_INJECTION: forcing a failure. [ 152.806926][ T2873] name failslab, interval 1, probability 100, space 0, times 47 [ 152.807021][ T2873] CPU: 1 UID: 0 PID: 2873 Comm: kworker/u8:14 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 152.807084][ T2873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 152.807124][ T2873] Workqueue: events_unbound nsim_dev_trap_report_work [ 152.807223][ T2873] Call Trace: [ 152.807244][ T2873] [ 152.807266][ T2873] dump_stack_lvl+0xe8/0x150 [ 152.807368][ T2873] should_fail_ex+0x467/0x600 [ 152.807472][ T2873] should_failslab+0xa8/0x100 [ 152.807553][ T2873] kmem_cache_alloc_node_noprof+0xae/0x670 [ 152.807625][ T2873] ? __alloc_skb+0x1d7/0x7a0 [ 152.807679][ T2873] ? __alloc_skb+0x1d7/0x7a0 [ 152.807769][ T2873] __alloc_skb+0x1d7/0x7a0 [ 152.807850][ T2873] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 152.807974][ T2873] ? process_scheduled_works+0xa20/0x14e0 [ 152.808063][ T2873] process_scheduled_works+0xa8e/0x14e0 [ 152.808219][ T2873] ? __pfx_process_scheduled_works+0x10/0x10 [ 152.808347][ T2873] ? assign_work+0x3cf/0x5d0 [ 152.808445][ T2873] worker_thread+0xa47/0xfb0 [ 152.808600][ T2873] kthread+0x388/0x470 [ 152.808692][ T2873] ? __pfx_worker_thread+0x10/0x10 [ 152.808765][ T2873] ? __pfx_kthread+0x10/0x10 [ 152.808866][ T2873] ret_from_fork+0x514/0xb70 [ 152.808969][ T2873] ? __pfx_ret_from_fork+0x10/0x10 [ 152.809068][ T2873] ? __switch_to+0xc89/0x1420 [ 152.809159][ T2873] ? __pfx_kthread+0x10/0x10 [ 152.809254][ T2873] ret_from_fork_asm+0x1a/0x30 [ 152.809359][ T2873] [ 152.809393][ T2873] FAULT_INJECTION: forcing a failure. [ 152.809393][ T2873] name failslab, interval 1, probability 100, space 0, times 46 [ 152.809472][ T2873] CPU: 1 UID: 0 PID: 2873 Comm: kworker/u8:14 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 152.809496][ T2873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 152.809511][ T2873] Workqueue: events_unbound nsim_dev_trap_report_work [ 152.809596][ T2873] Call Trace: [ 152.809610][ T2873] [ 152.809639][ T2873] dump_stack_lvl+0xe8/0x150 [ 152.809764][ T2873] should_fail_ex+0x467/0x600 [ 152.809875][ T2873] should_failslab+0xa8/0x100 [ 152.809947][ T2873] kmem_cache_alloc_node_noprof+0xae/0x670 [ 152.810018][ T2873] ? __alloc_skb+0x1d7/0x7a0 [ 152.810079][ T2873] ? __alloc_skb+0x1d7/0x7a0 [ 152.810161][ T2873] __alloc_skb+0x1d7/0x7a0 [ 152.810237][ T2873] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 152.810374][ T2873] ? process_scheduled_works+0xa20/0x14e0 [ 152.810456][ T2873] process_scheduled_works+0xa8e/0x14e0 [ 152.810612][ T2873] ? __pfx_process_scheduled_works+0x10/0x10 [ 152.810703][ T2873] ? assign_work+0x3cf/0x5d0 [ 152.810797][ T2873] worker_thread+0xa47/0xfb0 [ 152.810966][ T2873] kthread+0x388/0x470 [ 152.811070][ T2873] ? __pfx_worker_thread+0x10/0x10 [ 152.811160][ T2873] ? __pfx_kthread+0x10/0x10 [ 152.811259][ T2873] ret_from_fork+0x514/0xb70 [ 152.811348][ T2873] ? __pfx_ret_from_fork+0x10/0x10 [ 152.811448][ T2873] ? __switch_to+0xc89/0x1420 [ 152.811533][ T2873] ? __pfx_kthread+0x10/0x10 [ 152.811631][ T2873] ret_from_fork_asm+0x1a/0x30 [ 152.811736][ T2873] [ 152.830546][ T4968] synth uevent: /devices/virtual/block/loop4: failed to send uevent [ 152.830630][ T4968] block loop4: uevent: failed to send synthetic uevent: -12 [ 154.072964][ T6498] netlink: 4 bytes leftover after parsing attributes in process `syz.4.207'. [ 154.086568][ T6500] netlink: 268 bytes leftover after parsing attributes in process `syz.4.207'. [ 157.650797][ T6506] netlink: 12 bytes leftover after parsing attributes in process `syz.0.209'. [ 158.442731][ T6509] syz1: rxe_newlink: already configured on veth0 [ 165.413645][ T5615] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 165.508928][ T5615] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 165.551249][ T5615] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 165.566910][ T5615] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 165.589064][ T5615] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 166.326423][ T5615] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 166.747551][ T5615] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 166.808815][ T5615] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 166.829092][ T5615] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 166.851177][ T5615] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 168.162660][ T5615] Bluetooth: hci5: command tx timeout [ 169.474708][ T5615] Bluetooth: hci6: command tx timeout [ 170.239717][ T5615] Bluetooth: hci5: command tx timeout [ 171.529684][ T5615] Bluetooth: hci6: command tx timeout [ 172.340470][ T5615] Bluetooth: hci5: command tx timeout [ 173.600684][ T5615] Bluetooth: hci6: command tx timeout [ 174.399821][ T5615] Bluetooth: hci5: command tx timeout [ 175.697693][ T5615] Bluetooth: hci6: command tx timeout [ 180.993067][ T6573] ceph: No mds server is up or the cluster is laggy [ 181.311957][ T5724] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 181.629343][ T5717] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 183.132412][ T6517] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.132565][ T6517] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.132727][ T6517] bridge_slave_0: entered allmulticast mode [ 183.134682][ T6517] bridge_slave_0: entered promiscuous mode [ 183.171351][ T6517] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.171521][ T6517] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.171671][ T6517] bridge_slave_1: entered allmulticast mode [ 183.173636][ T6517] bridge_slave_1: entered promiscuous mode [ 183.261732][ T6517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.298572][ T6517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.394534][ T6517] team0: Port device team_slave_0 added [ 183.412584][ T6517] team0: Port device team_slave_1 added [ 183.475501][ T6517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.475518][ T6517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.475544][ T6517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.553790][ T6517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.553809][ T6517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.553840][ T6517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.729684][ T6517] hsr_slave_0: entered promiscuous mode [ 183.730735][ T6517] hsr_slave_1: entered promiscuous mode [ 183.731510][ T6517] debugfs: 'hsr0' already exists in 'hsr' [ 183.731529][ T6517] Cannot create hsr debugfs directory [ 183.731865][ T6522] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.732080][ T6522] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.732264][ T6522] bridge_slave_0: entered allmulticast mode [ 183.734513][ T6522] bridge_slave_0: entered promiscuous mode [ 183.799743][ T6522] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.800126][ T6522] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.806205][ T6522] bridge_slave_1: entered allmulticast mode [ 183.808098][ T6522] bridge_slave_1: entered promiscuous mode [ 184.061185][ T6522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.085995][ T6522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.158607][ T6522] team0: Port device team_slave_0 added [ 184.178818][ T6522] team0: Port device team_slave_1 added [ 184.256519][ T6522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.256536][ T6522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 184.256562][ T6522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.316475][ T6522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.316492][ T6522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 184.316520][ T6522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.501118][ T6522] hsr_slave_0: entered promiscuous mode [ 184.502313][ T6522] hsr_slave_1: entered promiscuous mode [ 184.503126][ T6522] debugfs: 'hsr0' already exists in 'hsr' [ 184.503144][ T6522] Cannot create hsr debugfs directory [ 184.709259][ T6517] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 184.764874][ T6517] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 184.779812][ T6517] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 184.837948][ T6517] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 184.853700][ T6517] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 184.886320][ T6517] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 185.043882][ T6517] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 185.064392][ T6517] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 185.345455][ T6522] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 185.377903][ T6522] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 185.394714][ T6522] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 185.428842][ T6522] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 185.454867][ T6522] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 185.474651][ T6522] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 185.476300][ T6522] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 185.503183][ T6522] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 185.553612][ T6517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.621400][ T6517] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.664682][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.667223][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.703674][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.703880][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.871934][ T6522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.957345][ T6522] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.990991][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.991140][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.999160][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.999355][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.622293][ T6517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.825246][ T6522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.174102][ T6517] veth0_vlan: entered promiscuous mode [ 187.222221][ T6517] veth1_vlan: entered promiscuous mode [ 187.314552][ T6522] veth0_vlan: entered promiscuous mode [ 187.346305][ T6522] veth1_vlan: entered promiscuous mode [ 187.377160][ T6517] veth0_macvtap: entered promiscuous mode [ 187.394989][ T6517] veth1_macvtap: entered promiscuous mode [ 187.436501][ T6517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.473005][ T6517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.478016][ T6522] veth0_macvtap: entered promiscuous mode [ 187.512702][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.514862][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.515442][ T6522] veth1_macvtap: entered promiscuous mode [ 187.518132][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.573734][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.883162][ T6522] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.988123][ T6522] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.123066][ T1482] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.123319][ T1482] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.126403][ T1482] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.128988][ T1482] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.223437][ T624] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.223453][ T624] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.491269][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.491296][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.889698][ T624] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.889723][ T624] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.135272][ T1029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.135297][ T1029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.495499][ T4917] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 189.561780][ T6659] netlink: 20 bytes leftover after parsing attributes in process `syz.5.230'. [ 189.564696][ T6658] netlink: 20 bytes leftover after parsing attributes in process `syz.5.230'. [ 189.589032][ T4917] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 189.604483][ T4917] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 189.605869][ T4917] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 189.606771][ T4917] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 190.854059][ T6681] netlink: 4 bytes leftover after parsing attributes in process `syz.5.235'. [ 190.996456][ T5615] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 191.007470][ T5615] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 191.020470][ T5615] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 191.057495][ T5615] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 191.058482][ T5615] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 191.206454][ T6684] tipc: Started in network mode [ 191.206474][ T6684] tipc: Node identity , cluster identity 4711 [ 191.206490][ T6684] tipc: Failed to set node id, please configure manually [ 191.206538][ T6684] tipc: Enabling of bearer rejected, failed to enable media [ 191.573826][ T6693] rdma_rxe: rxe_newlink: failed to add lo [ 191.681659][ T5615] Bluetooth: hci7: command tx timeout [ 191.727143][ T6693] smc: net device veth0 applied user defined pnetid SYZ0 [ 191.772846][ T6698] smc: net device lo applied user defined pnetid SYZ1 [ 192.016555][ T6693] smc: removing ib device syz1 [ 192.295010][ T6693] smbdirect: ib_dev[syz1] removed [ 193.199822][ T5615] Bluetooth: hci8: command tx timeout [ 193.200989][ T6717] netlink: 8 bytes leftover after parsing attributes in process `syz.5.240'. [ 193.251153][ T6719] netlink: 12 bytes leftover after parsing attributes in process `syz.5.240'. [ 193.251186][ T6719] netlink: 4 bytes leftover after parsing attributes in process `syz.5.240'. [ 193.253921][ T6691] infiniband syz0: set active [ 193.256955][ T6691] infiniband syz0: added veth0 [ 193.303165][ T6720] netlink: 12 bytes leftover after parsing attributes in process `syz.5.240'. [ 193.335495][ T6655] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.335629][ T6655] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.335885][ T6655] bridge_slave_0: entered allmulticast mode [ 193.378642][ T6691] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 193.378688][ T6691] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 193.378735][ T6691] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 193.450639][ T6655] bridge_slave_0: entered promiscuous mode [ 193.547472][ T6655] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.547559][ T6655] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.547755][ T6655] bridge_slave_1: entered allmulticast mode [ 193.607654][ T6655] bridge_slave_1: entered promiscuous mode [ 193.759906][ T5615] Bluetooth: hci7: command tx timeout [ 193.814376][ T6691] RDS/IB: syz0: added [ 193.814478][ T6691] smc: adding ib device syz0 with port count 1 [ 193.814505][ T6691] smc: ib device syz0 port 1 has no pnetid [ 194.177390][ T6655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.254107][ T6655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.338284][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.338344][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.548761][ T6655] team0: Port device team_slave_0 added [ 194.629976][ T6655] team0: Port device team_slave_1 added [ 194.937422][ T6655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.937442][ T6655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.937475][ T6655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.034819][ T6655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.034839][ T6655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.034872][ T6655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.281094][ T5615] Bluetooth: hci8: command tx timeout [ 195.531501][ T6655] hsr_slave_0: entered promiscuous mode [ 195.534799][ T6655] hsr_slave_1: entered promiscuous mode [ 195.557852][ T6655] debugfs: 'hsr0' already exists in 'hsr' [ 195.557883][ T6655] Cannot create hsr debugfs directory [ 195.839988][ T5615] Bluetooth: hci7: command tx timeout [ 196.608273][ T6682] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.608490][ T6682] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.608711][ T6682] bridge_slave_0: entered allmulticast mode [ 196.634350][ T6682] bridge_slave_0: entered promiscuous mode [ 196.697143][ T6682] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.697279][ T6682] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.697488][ T6682] bridge_slave_1: entered allmulticast mode [ 196.734358][ T6682] bridge_slave_1: entered promiscuous mode [ 197.030863][ T6682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.076259][ T6682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.326201][ T6682] team0: Port device team_slave_0 added [ 197.335705][ T6682] team0: Port device team_slave_1 added [ 197.360471][ T5615] Bluetooth: hci8: command tx timeout [ 197.770317][ T6682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.770337][ T6682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 197.770369][ T6682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.779407][ T6682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.779425][ T6682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 197.781817][ T6682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.920491][ T5615] Bluetooth: hci7: command tx timeout [ 198.278160][ T4917] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 198.317166][ T4917] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 198.328925][ T4917] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 198.353158][ T4917] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 198.357330][ T4917] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 198.672868][ T6682] hsr_slave_0: entered promiscuous mode [ 198.674873][ T6682] hsr_slave_1: entered promiscuous mode [ 198.675899][ T6682] debugfs: 'hsr0' already exists in 'hsr' [ 198.675925][ T6682] Cannot create hsr debugfs directory [ 198.862732][ T6655] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 198.897434][ T6655] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 198.988446][ T6655] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 199.019402][ T6655] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 199.131275][ T6655] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 199.245083][ T6655] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 199.298890][ T6655] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 199.363309][ T6655] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 199.441616][ T5615] Bluetooth: hci8: command tx timeout [ 200.216979][ T6655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.322167][ T6682] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 200.372115][ T6682] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 200.375025][ T6655] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.395725][ T6682] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 200.409727][ T5615] Bluetooth: hci9: command tx timeout [ 200.452291][ T6682] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 200.454832][ T6682] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 200.498203][ T6682] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 200.512330][ T1025] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.512546][ T1025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.513458][ T6682] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 200.587408][ T6682] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 200.626239][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.626457][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.115217][ T6682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.191754][ T6682] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.237362][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.239231][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.290424][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.290563][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.067363][ T6655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.479980][ T5615] Bluetooth: hci9: command tx timeout [ 202.797801][ T6655] veth0_vlan: entered promiscuous mode [ 202.833259][ T6655] veth1_vlan: entered promiscuous mode [ 202.954892][ T6655] veth0_macvtap: entered promiscuous mode [ 202.979297][ T6682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.997020][ T6655] veth1_macvtap: entered promiscuous mode [ 203.095780][ T6655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.146135][ T6655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.179760][ T1025] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.183087][ T1025] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.185516][ T1025] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.185844][ T1025] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.141085][ T1482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.141110][ T1482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.241284][ T6741] rdma_rxe: rxe_newlink: failed to add veth0 [ 204.358293][ T6806] [ 204.358307][ T6806] ============================= [ 204.358315][ T6806] WARNING: suspicious RCU usage [ 204.358332][ T6806] syzkaller #0 Not tainted [ 204.358345][ T6806] ----------------------------- [ 204.358353][ T6806] net/xfrm/xfrm_user.c:1630 suspicious rcu_dereference_check() usage! [ 204.358370][ T6806] [ 204.358370][ T6806] other info that might help us debug this: [ 204.358370][ T6806] [ 204.358380][ T6806] [ 204.358380][ T6806] rcu_scheduler_active = 2, debug_locks = 1 [ 204.358396][ T6806] 1 lock held by syz.5.246/6806: [ 204.358411][ T6806] #0: ffff888024baa048 (&net->xfrm.xfrm_cfg_mutex){+.+.}-{4:4}, at: xfrm_netlink_rcv+0x6a/0x90 [ 204.358490][ T6806] [ 204.358490][ T6806] stack backtrace: [ 204.358505][ T6806] CPU: 0 UID: 0 PID: 6806 Comm: syz.5.246 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 204.358533][ T6806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 SYZFAIL: failed to send rpc fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe) [ 204.358549][ T6806] Call Trace: [ 204.358558][ T6806] [ 204.358569][ T6806] dump_stack_lvl+0xe8/0x150 [ 204.358608][ T6806] lockdep_rcu_suspicious+0x13f/0x1d0 [ 204.358644][ T6806] xfrm_nlmsg_multicast+0x1d8/0x1f0 [ 204.358678][ T6806] xfrm_send_migrate_state+0x870/0xae0 [ 204.358733][ T6806] ? __pfx_xfrm_send_migrate_state+0x10/0x10 [ 204.358768][ T6806] ? xfrm_state_add+0xf0/0xa40 [ 204.358805][ T6806] ? xfrm_state_migrate_install+0x192/0x550 [ 204.358837][ T6806] xfrm_do_migrate_state+0x1749/0x1e90 [ 204.358874][ T6806] ? xfrm_do_migrate_state+0x12ea/0x1e90 [ 204.358918][ T6806] ? __pfx_xfrm_do_migrate_state+0x10/0x10 [ 204.358971][ T6806] ? safesetid_security_capable+0xa9/0x1a0 [ 204.359005][ T6806] ? __nla_parse+0x40/0x60 [ 204.359043][ T6806] xfrm_user_rcv_msg+0x7a8/0xf30 [ 204.359080][ T6806] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 204.359146][ T6806] ? __lock_acquire+0x683/0x2ce0 [ 204.359181][ T6806] ? __pfx_ref_tracker_free+0x10/0x10 [ 204.359218][ T6806] netlink_rcv_skb+0x226/0x4a0 [ 204.359251][ T6806] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 204.359286][ T6806] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 204.359328][ T6806] ? lockdep_hardirqs_on+0x7a/0x110 [ 204.359359][ T6806] ? mutex_lock_nested+0x152/0x1d0 [ 204.359395][ T6806] ? xfrm_netlink_rcv+0x6a/0x90 [ 204.359430][ T6806] xfrm_netlink_rcv+0x79/0x90 [ 204.359460][ T6806] netlink_unicast+0x7f5/0x990 [ 204.359495][ T6806] netlink_sendmsg+0x813/0xb40 [ 204.359535][ T6806] ? __pfx_netlink_sendmsg+0x10/0x10 [ 204.359568][ T6806] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 204.359610][ T6806] ? __pfx_netlink_sendmsg+0x10/0x10 [ 204.359638][ T6806] sock_sendmsg_nosec+0x13a/0x180 [ 204.359677][ T6806] ____sys_sendmsg+0x565/0x870 [ 204.359707][ T6806] ? __might_fault+0xaf/0x130 [ 204.359740][ T6806] ? __pfx_____sys_sendmsg+0x10/0x10 [ 204.359779][ T6806] ? import_iovec+0x73/0xa0 [ 204.359813][ T6806] ___sys_sendmsg+0x2a5/0x360 [ 204.359843][ T6806] ? __lock_acquire+0x683/0x2ce0 [ 204.359874][ T6806] ? __pfx____sys_sendmsg+0x10/0x10 [ 204.359909][ T6806] ? futex_wait+0x2a2/0x390 [ 204.359975][ T6806] ? __fget_files+0x2a/0x420 [ 204.360001][ T6806] ? __fget_files+0x3a8/0x420 [ 204.360047][ T6806] __x64_sys_sendmsg+0x1b7/0x290 [ 204.360082][ T6806] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 204.360130][ T6806] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.360157][ T6806] do_syscall_64+0x174/0x580 [ 204.360187][ T6806] ? trace_irq_disable+0x3b/0x140 [ 204.360211][ T6806] ? clear_bhb_loop+0x40/0x90 [ 204.360239][ T6806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.360264][ T6806] RIP: 0033:0x7fd0b586de99 [ 204.360287][ T6806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.360308][ T6806] RSP: 002b:00007fd0b3ac6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 204.360332][ T6806] RAX: ffffffffffffffda RBX: 00007fd0b5af5fa0 RCX: 00007fd0b586de99 [ 204.360351][ T6806] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 204.360367][ T6806] RBP: 00007fd0b5903eaf R08: 0000000000000000 R09: 0000000000000000 [ 204.360384][ T6806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 204.360399][ T6806] R13: 00007fd0b5af6038 R14: 00007fd0b5af5fa0 R15: 00007ffd32e79828 [ 204.360435][ T6806] [ 204.560174][ T5615] Bluetooth: hci9: command tx timeout [ 205.037311][ T2881] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.037334][ T2881] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.653480][ T5615] Bluetooth: hci9: command tx timeout [ 207.614789][ T67] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.915713][ T67] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.246842][ T67] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.546775][ T67] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.181560][ T67] bridge_slave_1: left allmulticast mode [ 209.219290][ T67] bridge_slave_1: left promiscuous mode [ 209.233611][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.465545][ T67] bridge_slave_0: left allmulticast mode [ 209.465584][ T67] bridge_slave_0: left promiscuous mode [ 209.465849][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.410603][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 210.470353][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.515607][ T67] bond0 (unregistering): Released all slaves [ 210.580079][ T5263] 8021q: adding VLAN 0 to HW filter on device eth1 [ 211.366164][ T5263] 8021q: adding VLAN 0 to HW filter on device eth2 [ 211.986236][ T5263] 8021q: adding VLAN 0 to HW filter on device eth3 [ 212.729707][ T67] hsr_slave_0: left promiscuous mode [ 212.771029][ T67] hsr_slave_1: left promiscuous mode [ 212.772828][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.772916][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.805297][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.805321][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.917630][ T67] veth1_macvtap: left promiscuous mode [ 212.917848][ T67] veth0_macvtap: left promiscuous mode [ 212.918054][ T67] veth1_vlan: left promiscuous mode [ 212.930395][ T67] veth0_vlan: left promiscuous mode [ 213.892818][ T67] team0 (unregistering): Port device team_slave_1 removed [ 213.952647][ T67] team0 (unregistering): Port device team_slave_0 removed [ 214.080507][ T67] smc: removing net device veth0 with user defined pnetid SYZ0 [ 214.087296][ T56] smc: removing ib device syz0 [ 214.183244][ T67] smc: removing net device lo with user defined pnetid SYZ1 [ 214.218142][ T5263] 8021q: adding VLAN 0 to HW filter on device eth4 [ 214.229419][ T31] syz0: Port: 1 Link DOWN