last executing test programs: 14m37.111096245s ago: executing program 32 (id=247): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) r1 = socket(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000000)={'lo\x00', @ifru_flags}) nanosleep(0x0, 0x0) ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000000)={'lo\x00', @ifru_flags=0x1}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 14m32.698797594s ago: executing program 33 (id=263): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x6) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x4000) recvmmsg(r7, &(0x7f00000056c0)=[{{0x0, 0x0, &(0x7f0000004f40)=[{&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000005780)=""/4096, 0x1000}, {&(0x7f0000003f40)=""/4080, 0xff0}], 0x3, 0x0, 0xfffffc5a}, 0xfff}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x7}], 0x3, 0x10022, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000080)={r5, 0x4, 0x81}) bind$llc(r9, &(0x7f00000000c0)={0x1a, 0x206, 0x2, 0x8, 0x8, 0xff, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) unshare(0x2a060400) socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x54}, 0x48) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x48, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x7, 0x0, 0x9, 0x0, 0x8, 0xff}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x0, 0x80, 0x0, 0x2, 0x0, 0x200, 0x2}}, {0x8, 0x2, [0xb, 0xfffc]}}]}]}, 0x78}}, 0x0) r12 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r12, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSMAXCID(r12, 0x40047451, &(0x7f0000000200)=0x2) 8m52.83258534s ago: executing program 34 (id=1768): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3800000003141f0025bd7000fedbdf250900020073797a32000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 5m7.059348965s ago: executing program 35 (id=2887): connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_GET_PROG(0x9, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x40080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000406010100000000000000000300000005"], 0x1c}}, 0x0) 4m18.999238185s ago: executing program 36 (id=3007): ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000003c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23c, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000040)={0xffffffd}, 0x8) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0xc82, &(0x7f0000019380)=ANY=[@ANYBLOB]) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xfff, 0x4000000007}, 0x0) sched_setscheduler(0x0, 0x6, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000240)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e26, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) 4m7.498160803s ago: executing program 37 (id=3100): socket(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000300)={{0x2, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @remote}, 0x28, {0x2, 0x0, @private}}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, 0x0) 2m53.468528813s ago: executing program 7 (id=3316): io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0x14, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000300)=""/222) 2m51.625771549s ago: executing program 7 (id=3317): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xfd}}, 0x10, 0x0}, 0x3000c085) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 2m48.422932927s ago: executing program 7 (id=3340): shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000300)=""/222) 2m48.342843185s ago: executing program 7 (id=3341): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)="be177dbe6dc1fe2b2a0e8c6743f448687e14f1d7ebeff7cffd42ea22c8a2ac263d3788aa034dc019349e1be5cf505a9b501fbab07396bab3afec71f9767193f0b5309295e6d61804000000c55c5a2958d8800a3c2b81faff89887512fde0509148e68ab9788a6a6f8513e442607a7154e11fa396094eb9cc404b6b408c2c38b1ad77e8f41cbe776bf9a3e6961f", 0x8d}, {&(0x7f0000000400)="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", 0x74d}], 0x2}}], 0x1, 0x40) 2m47.316712558s ago: executing program 7 (id=3344): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='proc\x00', &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='-3 +4.0\n\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='tcp 2049\n\x00', 0xa) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='2\n\x00', 0x3) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)="013030303030302032303030303030303030203020302030206b726235203120003030303030307f303030303030003030303030303030303030303030123030303030300030303030303030303030303030303030303030303030303030303030303020746573740a00", 0x6a) close(r3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000500)={0x2, 0x801, @loopback}, 0x10) write(r4, &(0x7f0000000600)="80000074123456780000000000000002000186a00000000200000000000000060000003800000001000000010000000000000000000000000000000401000000000000010000000300000000000000000000001802010400"/104, 0x68) nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0) read(r4, &(0x7f0000000800)=""/256, 0x100) 2m32.265436936s ago: executing program 38 (id=3344): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='proc\x00', &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='-3 +4.0\n\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='tcp 2049\n\x00', 0xa) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='2\n\x00', 0x3) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)="013030303030302032303030303030303030203020302030206b726235203120003030303030307f303030303030003030303030303030303030303030123030303030300030303030303030303030303030303030303030303030303030303030303020746573740a00", 0x6a) close(r3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000500)={0x2, 0x801, @loopback}, 0x10) write(r4, &(0x7f0000000600)="80000074123456780000000000000002000186a00000000200000000000000060000003800000001000000010000000000000000000000000000000401000000000000010000000300000000000000000000001802010400"/104, 0x68) nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0) read(r4, &(0x7f0000000800)=""/256, 0x100) 2m14.240064204s ago: executing program 39 (id=3389): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='udp 2049\n\x00', 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f0000000500)='127.0.0.1:/\x00', &(0x7f0000000400)='./mnt\x00', &(0x7f0000000600), 0x0, &(0x7f0000000040)={[{'soft'}, {'timeo=1'}, {'retrans=1'}, {'proto=udp'}, {'port=2049'}, {'addr=127.0.0.1'}]}) 2m6.739982409s ago: executing program 40 (id=3397): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='-2 -3 +4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='tcp 2049\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='1\n\x00', 0x2) 2m5.197148921s ago: executing program 41 (id=3403): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/module/nfsd/parameters/cltrack_prog\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='/bin/true\n\x00', 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/versions\x00', 0x1, 0x0) write(r2, &(0x7f0000000100)='-2 -3 +4\n\x00', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/portlist\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='5\n\x00', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/threads\x00', 0x1, 0x0) write(r4, &(0x7f0000000100)='1\n\x00', 0x2) r5 = socket$inet_tcp(0x2, 0x1, 0x6) connect$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) write(r5, &(0x7f0000000400)="80000028123456780000000000000002000186a300000003000000000000000700"/44, 0x2c) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)={0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 1m21.802057961s ago: executing program 9 (id=3557): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="2801000010000700000000000000000000000000000000000000004000000000e00000020000000000000000000000004e2000"/60, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000003000000000000000100000000000000020000000000000009000000000000000000001000000000010000000000000000000000000000000000000000000000000000000000000002000000000000000700000000000000000000000000000000000400ffffffffe80a000000000000043500000a0002fe340000000000000014000e00fe8000000000000000000000000000bb240009008f6b0000000000000200000000000000b40000000000000005"], 0x128}, 0x1, 0x0, 0x0, 0x1}, 0x890) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x10c, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in6=@empty, 0x3, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0x4, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x8001, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in=@remote}, @XFRMA_SET_MARK={0x8, 0x1d, 0x5}]}, 0x10c}}, 0x8000) 1m21.530019442s ago: executing program 9 (id=3558): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xb, &(0x7f0000000180)=@framed={{}, [@generic={0x62, 0xa, 0x0, 0xfffffff8, 0x1}, @generic={0xb7, 0x2, 0x0, 0x0, 0x6}, @generic={0xb7, 0x3, 0x0, 0x0, 0x1}, @generic={0xbf, 0xa, 0x4}, @generic={0x7, 0x4, 0x0, 0x0, 0xfffffff8}, @generic={0xb7, 0x5, 0x0, 0x0, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x31}, @generic={0xb7, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) 1m21.297821378s ago: executing program 9 (id=3561): socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)}}], 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r2, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) 1m21.234328676s ago: executing program 4 (id=3563): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x3) clock_getres(0x5, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$unix(0xffffffffffffffff, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) socket(0x10, 0x80002, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) statx(0xffffffffffffff9c, 0x0, 0x6000, 0x80, &(0x7f0000000440)) 1m21.005436134s ago: executing program 4 (id=3564): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x0, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1}, [@qdisc_kind_options=@q_mq]}}}, 0x0) 1m19.248337088s ago: executing program 9 (id=3565): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x28, 0x10, 0x1, 0x1, 0x0, {0x3}, [@typed={0x11, 0x2, 0x0, 0x0, @str='ovs_datapath\x00'}]}, 0x28}}, 0x0) 1m19.051781935s ago: executing program 4 (id=3566): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0x2, 0xb}, {0xfff1, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x5, 0x7, 0xa, 0x2, 0xfffffffc, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000030}, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f00000001c0), 0x39) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 1m18.870525219s ago: executing program 9 (id=3567): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=@newtfilter={0x6c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xffff}, {0x0, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x1}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x1}]}}}]}]}}]}, 0x6c}}, 0x0) write(r0, &(0x7f0000000b00)="000008004500001c00004000401100007f0000017f0000011234123400080000", 0x20) 1m18.448341606s ago: executing program 4 (id=3570): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000000)=0x1, 0x4) write(r0, &(0x7f0000000100)="600000001800050601000000000000000a400000fe040001000000001400010020010db800010000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60) write(r0, &(0x7f0000000200)="1c0000001a00010103000000000000000a00"/28, 0x1c) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)=""/128, 0x80}], 0x1}, 0x0) 1m18.251482595s ago: executing program 4 (id=3571): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @local}, 0x1c) r2 = accept4$inet6(r0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000200)='hello', 0x5) write(r2, &(0x7f0000000240)='world', 0x5) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x40, @local, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x5, 0x18, 0x1000}}}}}}}, 0x0) 1m18.087913335s ago: executing program 9 (id=3573): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd_mnt\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f0000000080)='./nfsd_mnt\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys_mnt\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f0000000140)='./sys_mnt\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys_mnt/module/nfsd/parameters/gracetime\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='1\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys_mnt/module/nfsd/parameters/leasetime\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='1\n', 0x2) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc_mnt\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f0000000300)='./proc_mnt\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./export_dir\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./nfsd_mnt/versions\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='-2 -3 +4\n', 0x9) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./nfsd_mnt/portlist\x00', 0x1, 0x0) write(r3, &(0x7f0000000480)='tcp 2049\n', 0x9) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r4, &(0x7f0000000500)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./proc_mnt/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r5, &(0x7f0000000580)='localhost / 2147483647 0 0 0 0\n', 0x1f) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc_mnt/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0) write(r6, &(0x7f0000000600)='localhost 1 \\x00 2147483647 /\n', 0x1e) close(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./nfsd_mnt/threads\x00', 0x1, 0x0) write(r7, &(0x7f0000000680)='1\n', 0x2) close(r7) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./nfs_mnt\x00', 0x1ff) mount(&(0x7f0000000700)=@filename='127.0.0.1:/\x00', &(0x7f0000000740)='./nfs_mnt\x00', &(0x7f0000000780)='nfs4\x00', 0x0, &(0x7f00000007c0)='addr=127.0.0.1,clientaddr=127.0.0.1\x00') setxattr(&(0x7f0000000800)='./nfs_mnt\x00', &(0x7f0000000840)=@known='system.posix_acl_access\x00', &(0x7f0000000880)='\x02\x00\x00\x00\x01\x00\a\x00\xff\xff\xff\xff\x04\x00\x05\x00\xff\xff\xff\xff \x00\x05\x00\xff\xff\xff\xff', 0x1c, 0x0) 1m17.220964265s ago: executing program 4 (id=3575): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='proc\x00', &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='-3 +4.0\n\x00', 0x8) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='tcp 2049\n\x00', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='2\n\x00', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)="013030303030302032303030303030303030203020302030206b726235203120003030303030307f303030303030003030303030303030303030303030123030303030300030303030303030303030303030303030303030303030303030303030303020746573740a00", 0x80) close(r3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000500)={0x2, 0x108, @loopback}, 0x10) write(r4, &(0x7f0000000600)="80000074123456780000000000000002000186a00000000200000000000000060000003800000001000000010000000000000000000000000000000401000000000000010000000300000000000000000000001802010400"/104, 0x78) nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0) read(r4, &(0x7f0000000800)=""/256, 0x100) 1m16.224203636s ago: executing program 42 (id=3522): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='-2 -3 +4\n\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='1\n\x00', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='tcp 20000\n\x00', 0xa) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r3, &(0x7f0000000240)='1\n\x00', 0x2) close(r3) r4 = socket$inet(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000280)={0x2, 0x4e20, @loopback}, 0x10) write(r4, &(0x7f0000000500)='test', 0x4) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000380)={0x2, 0x4e20, @loopback}, 0x10) write(r5, &(0x7f0000000500)='test', 0x4) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 1m8.265554326s ago: executing program 43 (id=3550): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='tcp 2049\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='udp 2049\n\x00', 0x9) nanosleep(&(0x7f0000000200)={0x0, 0x1dcd6500}, 0x0) 1m7.977653425s ago: executing program 7 (id=3578): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000200)={0x2, 0x8008, @loopback}, 0x10) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='3\n\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000100)='1\n\x00', 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x6) connect$inet(r3, &(0x7f0000000200)={0x2, 0x8008, @loopback}, 0x10) write(r3, &(0x7f0000000400)="80000028123456780000000000000002000186a300000003000000000000000700"/44, 0x2c) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)={0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 1m7.611547221s ago: executing program 2 (id=3603): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x104, 0x1, &(0x7f0000000300)="000102030405060708090a0b0c0d0e0f", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)="00112233445566778899aabbccddeeff", 0x10}], 0x1}, 0x0) 1m7.395363407s ago: executing program 2 (id=3605): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x3) clock_getres(0x5, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$unix(0xffffffffffffffff, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) socket(0x10, 0x80002, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) statx(0xffffffffffffff9c, 0x0, 0x6000, 0x80, &(0x7f0000000440)) 1m6.830453421s ago: executing program 2 (id=3607): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/net/sctp/addip_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='1\x00', 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f00000004c0)="b0", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x38}}}}, 0x84) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e23, @loopback}}}, 0x84) 1m5.840671391s ago: executing program 2 (id=3613): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syz_tun\x00', 0x4002}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'syz_tun\x00', 0x1}) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x224e, 0x0, @empty}, 0x1c) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="000086dd01033e0014003600060047297837aa4baaaaaaaaaa2e86dd60fa050000651101fe8000000000000000000000000000aafe8000000000000000000000000000aa4e200e22006590787dbad24e7d1473b84d6177f62cca9a56ffd996cd1dff847ae92664132f6fcb63ea347457c6ad1349c0c3daab09543f4163c7739216b07e07ec9353"], 0x79) 1m5.696534743s ago: executing program 2 (id=3615): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m5.500839309s ago: executing program 2 (id=3616): mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./proc\x00', &(0x7f0000000740)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='+3 +4\n\x00', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='udp 2049\n\x00', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='1\n\x00', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000300)={0x2, 0x8008, @loopback}, 0x10) write(r4, &(0x7f0000000400)="000000010000000000000002000186a30000000300000001000000010000001c00"/64, 0x40) nanosleep(&(0x7f0000000500)={0x0, 0x11e1a300}, 0x0) read(r3, &(0x7f0000000600), 0x1000) 1m2.835226635s ago: executing program 44 (id=3573): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd_mnt\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f0000000080)='./nfsd_mnt\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys_mnt\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f0000000140)='./sys_mnt\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys_mnt/module/nfsd/parameters/gracetime\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='1\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys_mnt/module/nfsd/parameters/leasetime\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='1\n', 0x2) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc_mnt\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f0000000300)='./proc_mnt\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./export_dir\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./nfsd_mnt/versions\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='-2 -3 +4\n', 0x9) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./nfsd_mnt/portlist\x00', 0x1, 0x0) write(r3, &(0x7f0000000480)='tcp 2049\n', 0x9) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r4, &(0x7f0000000500)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./proc_mnt/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r5, &(0x7f0000000580)='localhost / 2147483647 0 0 0 0\n', 0x1f) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc_mnt/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0) write(r6, &(0x7f0000000600)='localhost 1 \\x00 2147483647 /\n', 0x1e) close(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./nfsd_mnt/threads\x00', 0x1, 0x0) write(r7, &(0x7f0000000680)='1\n', 0x2) close(r7) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./nfs_mnt\x00', 0x1ff) mount(&(0x7f0000000700)=@filename='127.0.0.1:/\x00', &(0x7f0000000740)='./nfs_mnt\x00', &(0x7f0000000780)='nfs4\x00', 0x0, &(0x7f00000007c0)='addr=127.0.0.1,clientaddr=127.0.0.1\x00') setxattr(&(0x7f0000000800)='./nfs_mnt\x00', &(0x7f0000000840)=@known='system.posix_acl_access\x00', &(0x7f0000000880)='\x02\x00\x00\x00\x01\x00\a\x00\xff\xff\xff\xff\x04\x00\x05\x00\xff\xff\xff\xff \x00\x05\x00\xff\xff\xff\xff', 0x1c, 0x0) 1m2.111025622s ago: executing program 45 (id=3575): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='proc\x00', &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='-3 +4.0\n\x00', 0x8) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='tcp 2049\n\x00', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='2\n\x00', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)="013030303030302032303030303030303030203020302030206b726235203120003030303030307f303030303030003030303030303030303030303030123030303030300030303030303030303030303030303030303030303030303030303030303020746573740a00", 0x80) close(r3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000500)={0x2, 0x108, @loopback}, 0x10) write(r4, &(0x7f0000000600)="80000074123456780000000000000002000186a00000000200000000000000060000003800000001000000010000000000000000000000000000000401000000000000010000000300000000000000000000001802010400"/104, 0x78) nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0) read(r4, &(0x7f0000000800)=""/256, 0x100) 53.512130631s ago: executing program 3 (id=3649): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x24) listen(r0, 0x5) r1 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r1, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x24) sendmsg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000400)='\x00', 0x1}], 0x1, &(0x7f0000000500)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) r2 = accept(r0, 0x0, 0x0) sendmsg(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000800)='\x00', 0x1}], 0x1, &(0x7f0000000900)=[{0x18, 0x10f, 0x4, "01000000"}], 0x18}, 0x0) recvmsg(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000c00), 0x100}], 0x1}, 0x0) close(r2) close(r0) close(r1) nanosleep(&(0x7f0000000e00)={0xb}, 0x0) 52.851817676s ago: executing program 46 (id=3578): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000200)={0x2, 0x8008, @loopback}, 0x10) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='3\n\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000100)='1\n\x00', 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x6) connect$inet(r3, &(0x7f0000000200)={0x2, 0x8008, @loopback}, 0x10) write(r3, &(0x7f0000000400)="80000028123456780000000000000002000186a300000003000000000000000700"/44, 0x2c) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)={0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 51.847615165s ago: executing program 3 (id=3655): r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='vers\x00', &(0x7f0000000280)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000002c0)='proto\x00', &(0x7f0000000300)='udp\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000340)='mountproto\x00', &(0x7f0000000380)='udp\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='soft\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='timeo\x00', &(0x7f0000000440)='1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000480)='retrans\x00', &(0x7f00000004c0)='1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 50.781053901s ago: executing program 3 (id=3656): syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[], 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000000)={0x14, 0x2, 0x2, 0x3, 0x0, 0x0, {0x1, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x208}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f00000001c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e22, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x0, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x41}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 50.262698934s ago: executing program 47 (id=3616): mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./proc\x00', &(0x7f0000000740)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='+3 +4\n\x00', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='udp 2049\n\x00', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='1\n\x00', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000300)={0x2, 0x8008, @loopback}, 0x10) write(r4, &(0x7f0000000400)="000000010000000000000002000186a30000000300000001000000010000001c00"/64, 0x40) nanosleep(&(0x7f0000000500)={0x0, 0x11e1a300}, 0x0) read(r3, &(0x7f0000000600), 0x1000) 49.990753359s ago: executing program 3 (id=3662): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x87c, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r6, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x400, 0xd, 0xc, 0x61, 0x2, 0x5, 0x0, 0x9, 0x7, 0x0, 0xb9a8653, 0x1, 0x7, 0x9, 0x5, 0x2, 0xfffffff9, 0x2, 0xdd, 0xffffff81, 0x7, 0x9, 0x9, 0x80009, 0x2, 0x7, 0x9, 0xa, 0xa26d, 0xff8, 0x2, 0x4, 0x9, 0x1ff, 0x5, 0xebde0, 0x3, 0x0, 0x4, 0x4, 0xd, 0xfffffff8, 0xfffffffc, 0x400, 0x7, 0x80, 0x6, 0x8, 0x7, 0x4, 0x2f9, 0x2, 0xf, 0x4, 0x9, 0x7ff, 0x7ff, 0x2ab, 0x1000, 0x6, 0x1, 0x4, 0xdfd, 0x4, 0x6, 0x8001, 0x4, 0x3, 0xffffff5d, 0x7f, 0x643, 0x9, 0x0, 0x6, 0x7cd7, 0x5, 0x2, 0x4, 0x4, 0x6, 0x172, 0x8, 0x81, 0x6, 0xd, 0x8, 0x217c, 0x0, 0x9, 0x5, 0x6a, 0x81000, 0x40, 0x1, 0x4, 0xe769, 0x7, 0xb3d5, 0xfffffffd, 0x101, 0x814, 0x5, 0x5, 0xadc, 0x9, 0x9, 0xa323, 0xa, 0x400000, 0x7, 0xe, 0x8, 0x48, 0x117, 0xffffff81, 0x0, 0x3, 0x8ea, 0x4, 0x4, 0xfffffff7, 0x9, 0x2, 0x9, 0xffff, 0x4, 0x80, 0x401, 0x9, 0xffffffff, 0x40, 0xc, 0x6, 0x1ff, 0x7, 0x6, 0x3, 0x6, 0x6, 0x892, 0xf, 0x2, 0x581c, 0x3, 0x39, 0x7, 0x1000, 0x3, 0x8, 0x0, 0x2, 0x4, 0x7, 0x7ff, 0x30a, 0x3815, 0x5, 0xfffffff1, 0x80, 0x8, 0xc5d3, 0x63, 0x4, 0x1, 0x4, 0x2, 0x1, 0x1, 0x8000, 0x0, 0x0, 0x4c, 0xb, 0x81, 0x6, 0x4b5, 0x8, 0x2, 0x400, 0x5, 0x6, 0x6, 0xffff, 0xffff, 0x3, 0x700, 0x7fff, 0x9, 0x1, 0x2, 0x6, 0x3, 0x9, 0xf, 0x7f, 0xaa, 0x4, 0xffff2bad, 0x7, 0x0, 0x4, 0x2, 0x0, 0x2, 0x0, 0x6, 0x3ff, 0xfffff801, 0xd, 0x10000, 0x4, 0x9, 0x0, 0x40, 0x7f, 0x1, 0x8000, 0x8, 0x1, 0x8, 0x5, 0x8, 0x1, 0x5, 0x5, 0xffffffff, 0xc, 0xffffffc2, 0x8, 0x8000, 0x1, 0x3, 0xf, 0x6, 0x24, 0x10000, 0x10001, 0x200, 0x7, 0xd, 0x101, 0x2, 0x9, 0x101, 0x1, 0x40, 0x400, 0x6, 0x1, 0x2, 0x80000000, 0xa18, 0xffff83e8, 0xbbbe, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xb6, 0x2, 0xffffff95, 0x0, 0x3, {0x6, 0x2, 0x0, 0x4, 0xffff, 0x1}, {0x5, 0x1, 0x1, 0x5, 0x8, 0x9}, 0x81, 0x4, 0x3}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3ff, 0x0, 0x10000, 0xfffffff9, 0xe52, 0x401, 0x800, 0xff, 0x200, 0x3, 0x40, 0x800, 0x10, 0xc84, 0x0, 0x1, 0x9, 0x1, 0x2, 0xb, 0xfffffffc, 0xdf70, 0x7, 0x1, 0x5, 0x9, 0xfc, 0xca5, 0xbbbe, 0xfffffffb, 0x0, 0x2, 0x5, 0x9165, 0xff, 0x1, 0x26, 0x1, 0x8, 0x7, 0x4, 0x4b2, 0x8, 0xffffffff, 0x5, 0xcc, 0x0, 0xfffffffb, 0x400, 0x7, 0xfffffffa, 0x3, 0x5, 0x3, 0x40, 0x2, 0x0, 0x1000, 0x0, 0x9, 0x9, 0x80000000, 0x7, 0x1, 0x7fffffff, 0x6, 0xc, 0xf93a, 0x6, 0x7f66, 0x0, 0xe, 0x6, 0xfffffff8, 0x8, 0xffff, 0x5, 0x4, 0xbc6, 0x64a, 0x9, 0x8, 0x7, 0x9, 0x7ff, 0x1, 0xe, 0xe5b3, 0x7, 0x6, 0x1, 0x400, 0x81, 0x9, 0x8, 0x3, 0x3, 0x4, 0x8, 0x7, 0x0, 0xd, 0x1, 0x1, 0xfffff570, 0x8001, 0xffffff12, 0xcdd8, 0x200, 0x8, 0x7ff, 0x800, 0x8, 0x8, 0x5, 0x9, 0x5, 0xce, 0x72f1, 0x0, 0x200, 0x10000, 0xc74, 0x9, 0x7, 0xffff, 0x100, 0xf8, 0x8, 0x80, 0x7, 0x588f, 0xfffffff7, 0x7, 0x100, 0x0, 0x1, 0x3, 0x8, 0x200, 0x3, 0xd, 0x3, 0x7, 0x101, 0x6, 0x2, 0xfffffff9, 0x4, 0x1, 0x2, 0xf, 0x0, 0x80000001, 0x100, 0x8e5, 0x40, 0x0, 0x8001, 0x2, 0x8, 0x8001, 0x2, 0x1, 0x400, 0x8000, 0x98, 0x5, 0x7, 0x2, 0x6, 0xd7b9, 0x5, 0x9, 0x4, 0x11f, 0x28, 0xfff, 0x4, 0x7a, 0x2, 0xffffff7f, 0x6, 0x10, 0x1, 0x1, 0x58, 0x2, 0x0, 0xfffffff7, 0xfffffffd, 0x5, 0x3, 0x7, 0x3, 0xfffffff7, 0x5, 0x3, 0x40, 0x1ff, 0x7, 0x67da, 0x6, 0x2, 0xa, 0x9, 0x400, 0x5, 0x5, 0x6, 0x3ff, 0x1, 0xb2c3, 0x6, 0x3, 0xfffffffe, 0x2, 0x0, 0x4, 0x9, 0xd, 0x8001, 0x0, 0x1000, 0x0, 0x2, 0x5, 0x0, 0x1, 0x100, 0x0, 0xfffffffd, 0x74, 0x10001, 0x4, 0xbc8, 0x0, 0x0, 0x8, 0x249a, 0x80, 0x0, 0xfffffffd, 0x8, 0x142f, 0x1, 0x8001, 0x0, 0x7, 0x1, 0xfffffff7, 0xfffff781, 0xfffffffc, 0x100, 0x10000, 0x7]}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r3, 0x3e}, 0x80, &(0x7f0000001f40)}, 0x20004014) 49.351291516s ago: executing program 3 (id=3664): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() clock_getres(0x5, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$unix(0xffffffffffffffff, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) socket(0x10, 0x80002, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) statx(0xffffffffffffff9c, 0x0, 0x6000, 0x80, &(0x7f0000000440)) 48.427193676s ago: executing program 3 (id=3666): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6f00, @loopback}, 0x10) listen(r0, 0x5) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) accept4$inet(r0, 0x0, 0x0, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='nfsd\x00', &(0x7f0000000300)='./nfsd\x00', &(0x7f0000000400)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='tcp 2049\x00', 0x9) 38.68897948s ago: executing program 1 (id=3698): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) syz_emit_ethernet(0x6a, &(0x7f0000000340)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558, 0x0, 0x0, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x0]}, {}, {0xdd86}}}}}}, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @random="679da814e75e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x5, 0x1, "b204d3a65fbdb91d28dc3ee7c40b5c13ae7f50fd17d78001cb755f26af3c5888", "7436e409070e0b5c4817075a4a3b5461", {"d2c1f0cbf15aaf4a8f49d3646b3cadc7", "8277995a4318134a0f01af631887da13"}}}}}}}, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)=')', 0x1}], 0x1, 0x0, 0x0, 0x4008000}, 0x28008841) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/16], 0x0, 0x2003}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x40000021, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{&(0x7f0000000080)=@l2={0x1f, 0x0, @none}, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)=""/224}, {&(0x7f00000007c0)=""/216}, {&(0x7f00000008c0)}, {&(0x7f0000000900)=""/4096}, {&(0x7f0000001900)=""/13}, {&(0x7f0000001940)=""/243}, {&(0x7f0000000240)=""/22}, {&(0x7f0000001a80)=""/100}], 0x0, &(0x7f0000001b80)=""/102}}, {{&(0x7f0000001c00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0, &(0x7f0000002180)=[{&(0x7f0000001c80)=""/141}, {&(0x7f0000001d40)=""/176}, {&(0x7f0000001e00)=""/196}, {&(0x7f0000001f00)=""/201}, {&(0x7f0000002000)=""/147}, {&(0x7f00000020c0)=""/158}], 0x0, &(0x7f0000002200)=""/158}}], 0x36, 0x10022, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r4, 0x29, 0x4, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000280)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x4, 0x2, 0xf, 0x0, 0x68, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @dev={0xfe, 0x80, '\x00', 0x28}, 0x40, 0x40, 0xe3dd, 0xd00}}) writev(r2, &(0x7f0000001a40)=[{&(0x7f00000006c0)="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", 0xfe}, {&(0x7f00000008c0)="ccabc3c84665f0d1b5974aac48b25cded43f16bf0b6dd14f", 0x18}], 0x2) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f020004000000000000000058000b4824ca945f64009400ff0325010ebc000b00000000008000f0fffeffe809005300fff5dd000000100001d80cf42098da03870000000000", 0x58}], 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000001b00)={0x0, 0x81}, &(0x7f0000001b40)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000002340)={r7, @in={{0x2, 0x4e23, @remote}}, 0x6, 0x8, 0x7, 0xa45a, 0xe, 0x0, 0x9}, 0x9c) 37.60710308s ago: executing program 1 (id=3702): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc_mnt\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc_mnt/sys/net/netfilter\x00', 0x0, 0x0) 37.176850221s ago: executing program 1 (id=3704): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(&(0x7f0000000440)=@filename='none\x00', &(0x7f0000000480)='./proc\x00', &(0x7f00000004c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/net/ipv4/conf/all/route_localnet\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='1\n', 0x2) 37.03758635s ago: executing program 1 (id=3705): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)='\x00', 0x1000}], 0x1}, 0x0) sendmsg$tipc(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)='\x00', 0x1000}], 0x1}, 0x0) sendmsg$tipc(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)='\x00', 0x1000}], 0x1}, 0x0) 36.84928987s ago: executing program 1 (id=3707): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3400000010000106000000000000000000000000000000000c0003006272696467653000180012000b00010062726964676500000800020000000000"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800000010000106000000000000000000000000000000000a000300766574683000080013000100000014001200090001007665746800000700020000000000"], 0x38}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000108004500002800004000400600000a0101010a0101021234567800000001000000005002200000000000"], 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000108004500002800004000400600000a0101010a0101021234567800000002000000015010200000000000"], 0x0) 35.621671977s ago: executing program 1 (id=3710): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='tcp 2049\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='64\n\x00', 0x3) r2 = socket$inet(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000200)={0x2, 0x801, @loopback}, 0x10) r3 = socket$inet(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000200)={0x2, 0x801, @loopback}, 0x10) r4 = socket$inet(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000200)={0x2, 0x801, @loopback}, 0x10) r5 = socket$inet(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000200)={0x2, 0x801, @loopback}, 0x10) r6 = socket$inet(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000200)={0x2, 0x801, @loopback}, 0x10) r7 = socket$inet(0x2, 0x1, 0x0) connect$inet(r7, &(0x7f0000000200)={0x2, 0x801, @loopback}, 0x10) r8 = socket$inet(0x2, 0x1, 0x0) connect$inet(r8, &(0x7f0000000200)={0x2, 0x801, @loopback}, 0x10) r9 = socket$inet(0x2, 0x1, 0x0) connect$inet(r9, &(0x7f0000000200)={0x2, 0x801, @loopback}, 0x10) r10 = socket$inet(0x2, 0x1, 0x0) connect$inet(r10, &(0x7f0000000200)={0x2, 0x801, @loopback}, 0x10) r11 = socket$inet(0x2, 0x1, 0x0) connect$inet(r11, &(0x7f0000000200)={0x2, 0x801, @loopback}, 0x10) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 34.564667488s ago: executing program 5 (id=3715): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(&(0x7f0000000440)=@filename='none\x00', &(0x7f0000000480)='./proc\x00', &(0x7f00000004c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/net/ipv4/conf/all/route_localnet\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='1\n', 0x2) 34.473334064s ago: executing program 5 (id=3716): syz_emit_ethernet(0x3e, &(0x7f0000000240)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010101, @local}, @time_exceeded={0x80, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback}}}}}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) migrate_pages(0x0, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) setns(0xffffffffffffffff, 0x24020000) r2 = syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x10000000) pread64(r1, 0x0, 0x0, 0x2f6) 34.186455617s ago: executing program 5 (id=3717): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=@newsa={0xb0, 0x10, 0x1, 0x0, 0x0, {{@in=@rand_addr=0x64010100, @in=@rand_addr=0x64010100, 0x1234, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20, 0x50}, {@in=@rand_addr=0x64010100, 0x1234, 0x2}, @in=@rand_addr=0x64010100, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xb0}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=@migrate={0xa0, 0x21, 0x5, 0x0, 0x0, {{@in=@rand_addr=0x64010100, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}}, [@migrate={0x50, 0x11, [{@in=@rand_addr=0x64010100, @in=@rand_addr=0x64010100, @in=@rand_addr=0x64010101, @in=@rand_addr=0x64010101, 0x32, 0x0, 0x0, 0x0, 0x2, 0x2}]}]}, 0xa0}}, 0x0) 34.076175562s ago: executing program 5 (id=3718): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/self/make-it-fail\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='1\n\x00', 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'veth0\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000100)='5\n\x00', 0x2) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r3, r2, 0x25, 0x0, @void}, 0x10) close(r5) write(r4, &(0x7f0000000100)='6\n\x00', 0x2) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r3, r2, 0x25, 0x0, @void}, 0x10) close(r6) write(r4, &(0x7f0000000100)='4\n\x00', 0x2) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r3, r2, 0x25, 0x0, @void}, 0x10) close(r7) write(r4, &(0x7f0000000100)='7\n\x00', 0x2) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r3, r2, 0x25, 0x0, @void}, 0x10) close(r8) 33.870268647s ago: executing program 0 (id=3653): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) 32.502454662s ago: executing program 48 (id=3666): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6f00, @loopback}, 0x10) listen(r0, 0x5) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) accept4$inet(r0, 0x0, 0x0, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='nfsd\x00', &(0x7f0000000300)='./nfsd\x00', &(0x7f0000000400)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='tcp 2049\x00', 0x9) 32.141917398s ago: executing program 5 (id=3723): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r1, 0x0, 0x3000c085) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 32.076976013s ago: executing program 0 (id=3724): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f00000003c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/sys/net/ipv6/conf/all/ioam6_enabled\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='1\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./proc/sys/net/ipv6/conf/lo/ioam6_enabled\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='1\n', 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000001000050001000000000000000101000008000100000000000800020000000000"], 0x24}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000001100050001000000000000000101000008000100000000000800020000000000"], 0x24}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000001200050001000000000000000101000008000100000000000800020000000000"], 0x24}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000001300050001000000000000000101000008000100000000000800020000000000"], 0x24}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000001400050001000000000000000101000008000100000000000800020000000000"], 0x24}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000001500050001000000000000000101000008000100000000000800020000000000"], 0x24}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000001600050001000000000000000101000008000100000000000800020000000000"], 0x24}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000001700050001000000000000000101000008000100000000000800020000000000"], 0x24}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000b00)={'syz_tun\x00', 0x1001}) syz_emit_ethernet(0x66, &(0x7f0000000c00)=ANY=[@ANYBLOB="00112233445566778899aabb86dd600000000030004000000000000000000000000000000001000000000000000000000000000000013a04010400000000311c00000000010200008000000000000000000000008000000000010001"], 0x0) 31.8977816s ago: executing program 5 (id=3725): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='nfsd\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='-3 -4.0 -4.1\n', 0xd) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='1\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='\\x01000000 2000000000 0 0 0 krb5 \\x01000000ffffff7f000000000000000011000000000102030405060708090a0b0c0d0e0f\n', 0x85) close(r3) r4 = socket(0x2, 0x1, 0x6) connect(r4, &(0x7f0000000500)=@in={0x2, 0x7f08, @loopback}, 0x10) write(r4, &(0x7f0000000600)="80000070123456780000000000000002000186a300000003000000000000000600000024000000010000000100000001000000020000000401000000000000060000000800000001000000000000000100000020040405ff00000000000000000000000100"/116, 0x74) read(r4, &(0x7f0000000800)=""/100, 0x100) close(r4) 31.771113625s ago: executing program 0 (id=3726): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/sctp/parameters/no_checksums\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/net/ipv4/conf/all/route_localnet\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='1\n', 0x2) 31.54038513s ago: executing program 0 (id=3727): syz_emit_ethernet(0x3e, &(0x7f0000000240)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010101, @local}, @time_exceeded={0x80, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback}}}}}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) migrate_pages(0x0, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) setns(0xffffffffffffffff, 0x24020000) r2 = syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x10000000) pread64(r1, 0x0, 0x0, 0x2f6) 28.081965357s ago: executing program 0 (id=3729): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={&(0x7f0000000000), 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newtfilter={0x70, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x1, [@m_nat={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @private=0xa010101, @private=0xa010102}}]}, {0x7, 0x3, "001122"}, {0xc, 0x4}, {0xc, 0x5}}}]}]}}]}, 0x94}}, 0x0) write(r0, &(0x7f0000000300)="4500001c00010000400100000a0000010a0000020800f7ff00000000", 0x1c) 19.43753214s ago: executing program 49 (id=3710): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='tcp 2049\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='64\n\x00', 0x3) r2 = socket$inet(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000200)={0x2, 0x801, @loopback}, 0x10) r3 = socket$inet(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000200)={0x2, 0x801, @loopback}, 0x10) r4 = socket$inet(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000200)={0x2, 0x801, @loopback}, 0x10) r5 = socket$inet(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000200)={0x2, 0x801, @loopback}, 0x10) r6 = socket$inet(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000200)={0x2, 0x801, @loopback}, 0x10) r7 = socket$inet(0x2, 0x1, 0x0) connect$inet(r7, &(0x7f0000000200)={0x2, 0x801, @loopback}, 0x10) r8 = socket$inet(0x2, 0x1, 0x0) connect$inet(r8, &(0x7f0000000200)={0x2, 0x801, @loopback}, 0x10) r9 = socket$inet(0x2, 0x1, 0x0) connect$inet(r9, &(0x7f0000000200)={0x2, 0x801, @loopback}, 0x10) r10 = socket$inet(0x2, 0x1, 0x0) connect$inet(r10, &(0x7f0000000200)={0x2, 0x801, @loopback}, 0x10) r11 = socket$inet(0x2, 0x1, 0x0) connect$inet(r11, &(0x7f0000000200)={0x2, 0x801, @loopback}, 0x10) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 19.056856852s ago: executing program 0 (id=3733): r0 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x2, @local}, 0x10) connect$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x2, @remote}, 0x10) syz_emit_ethernet(0x15, &(0x7f0000000100)={@local, @remote, @void, {@llc={0x4, {@llc={0x2, 0x3, 's', '\x00'}}}}}, 0x0) syz_emit_ethernet(0x14, &(0x7f0000000200)={@local, @remote, @void, {@llc={0x4, {@llc={0x2, 0x2, "0501"}}}}}, 0x0) syz_emit_ethernet(0x14, &(0x7f0000000300)={@local, @remote, @void, {@llc={0x4, {@llc={0x2, 0x2, "0501"}}}}}, 0x0) 16.062385342s ago: executing program 50 (id=3725): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='nfsd\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='-3 -4.0 -4.1\n', 0xd) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='1\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='\\x01000000 2000000000 0 0 0 krb5 \\x01000000ffffff7f000000000000000011000000000102030405060708090a0b0c0d0e0f\n', 0x85) close(r3) r4 = socket(0x2, 0x1, 0x6) connect(r4, &(0x7f0000000500)=@in={0x2, 0x7f08, @loopback}, 0x10) write(r4, &(0x7f0000000600)="80000070123456780000000000000002000186a300000003000000000000000600000024000000010000000100000001000000020000000401000000000000060000000800000001000000000000000100000020040405ff00000000000000000000000100"/116, 0x74) read(r4, &(0x7f0000000800)=""/100, 0x100) close(r4) 15.801601499s ago: executing program 8 (id=3744): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x5c, 0x10, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}}}}}]}, 0x5c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipv4_newaddr={0x3c, 0x14, 0x601, 0x0, 0x0, {0x2, 0x18}, [@IFA_LABEL={0x14, 0x3, 'veth0\x00'}, @IFA_LOCAL={0x8, 0x2, @private=0xa010101}, @IFA_ADDRESS={0x8, 0x1, @private=0xa010101}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@ipv4_newaddr={0x3c, 0x14, 0x601, 0x0, 0x0, {0x2, 0x18}, [@IFA_LABEL={0x14, 0x3, 'veth1\x00'}, @IFA_LOCAL={0x8, 0x2, @private=0xa010102}, @IFA_ADDRESS={0x8, 0x1, @private=0xa010102}]}, 0x3c}}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1\x00'}}]}, 0x38}}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bind(r2, &(0x7f0000000700)=@in={0x2, 0x1f90, @private=0xa010101}, 0x10) listen(r2, 0x5) r3 = socket$inet_smc(0x2b, 0x1, 0x0) bind(r3, &(0x7f0000000720)=@in={0x2, 0x0, @private=0xa010102}, 0x10) connect$inet(r3, &(0x7f0000000740)={0x2, 0x1f90, @private=0xa010101}, 0x10) accept(r2, 0x0, 0x0) 6.720343499s ago: executing program 6 (id=3751): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) connect$inet(r0, &(0x7f0000000020)={0x2, 0x4e21, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @local}, "4e214e2000000000000000000500000800000000"}}}}, 0x0) 6.636184345s ago: executing program 6 (id=3752): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x87c, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r6, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x400, 0xd, 0xc, 0x61, 0x2, 0x5, 0x0, 0x9, 0x7, 0x0, 0xb9a8653, 0x1, 0x7, 0x9, 0x5, 0x2, 0xfffffff9, 0x2, 0xdd, 0xffffff81, 0x7, 0x9, 0x9, 0x80009, 0x2, 0x7, 0x9, 0xa, 0xa26d, 0xff8, 0x2, 0x4, 0x9, 0x1ff, 0x5, 0xebde0, 0x3, 0x0, 0x4, 0x4, 0xd, 0xfffffff8, 0xfffffffc, 0x400, 0x7, 0x80, 0x6, 0x8, 0x7, 0x4, 0x2f9, 0x2, 0xf, 0x4, 0x9, 0x7ff, 0x7ff, 0x2ab, 0x1000, 0x6, 0x1, 0x4, 0xdfd, 0x4, 0x6, 0x8001, 0x4, 0x3, 0xffffff5d, 0x7f, 0x643, 0x9, 0x0, 0x6, 0x7cd7, 0x5, 0x2, 0x4, 0x4, 0x6, 0x172, 0x8, 0x81, 0x6, 0xd, 0x8, 0x217c, 0x0, 0x9, 0x5, 0x6a, 0x81000, 0x40, 0x1, 0x4, 0xe769, 0x7, 0xb3d5, 0xfffffffd, 0x101, 0x814, 0x5, 0x5, 0xadc, 0x9, 0x9, 0xa323, 0xa, 0x400000, 0x7, 0xe, 0x8, 0x48, 0x117, 0xffffff81, 0x0, 0x3, 0x8ea, 0x4, 0x4, 0xfffffff7, 0x9, 0x2, 0x9, 0xffff, 0x4, 0x80, 0x401, 0x9, 0xffffffff, 0x40, 0xc, 0x6, 0x1ff, 0x7, 0x6, 0x3, 0x6, 0x6, 0x892, 0xf, 0x2, 0x581c, 0x3, 0x39, 0x7, 0x1000, 0x3, 0x8, 0x0, 0x2, 0x4, 0x7, 0x7ff, 0x30a, 0x3815, 0x5, 0xfffffff1, 0x80, 0x8, 0xc5d3, 0x63, 0x4, 0x1, 0x4, 0x2, 0x1, 0x1, 0x8000, 0x0, 0x0, 0x4c, 0xb, 0x81, 0x6, 0x4b5, 0x8, 0x2, 0x400, 0x5, 0x6, 0x6, 0xffff, 0xffff, 0x3, 0x700, 0x7fff, 0x9, 0x1, 0x2, 0x6, 0x3, 0x9, 0xf, 0x7f, 0xaa, 0x4, 0xffff2bad, 0x7, 0x0, 0x4, 0x2, 0x0, 0x2, 0x0, 0x6, 0x3ff, 0xfffff801, 0xd, 0x10000, 0x4, 0x9, 0x0, 0x40, 0x7f, 0x1, 0x8000, 0x8, 0x1, 0x8, 0x5, 0x8, 0x1, 0x5, 0x5, 0xffffffff, 0xc, 0xffffffc2, 0x8, 0x8000, 0x1, 0x3, 0xf, 0x6, 0x24, 0x10000, 0x10001, 0x200, 0x7, 0xd, 0x101, 0x2, 0x9, 0x101, 0x1, 0x40, 0x400, 0x6, 0x1, 0x2, 0x80000000, 0xa18, 0xffff83e8, 0xbbbe, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xb6, 0x2, 0xffffff95, 0x0, 0x3, {0x6, 0x2, 0x0, 0x4, 0xffff, 0x1}, {0x5, 0x1, 0x1, 0x5, 0x8, 0x9}, 0x81, 0x4, 0x3}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3ff, 0x0, 0x10000, 0xfffffff9, 0xe52, 0x401, 0x800, 0xff, 0x200, 0x3, 0x40, 0x800, 0x10, 0xc84, 0x0, 0x1, 0x9, 0x1, 0x2, 0xb, 0xfffffffc, 0xdf70, 0x7, 0x1, 0x5, 0x9, 0xfc, 0xca5, 0xbbbe, 0xfffffffb, 0x0, 0x2, 0x5, 0x9165, 0xff, 0x1, 0x26, 0x1, 0x8, 0x7, 0x4, 0x4b2, 0x8, 0xffffffff, 0x5, 0xcc, 0x0, 0xfffffffb, 0x400, 0x7, 0xfffffffa, 0x3, 0x5, 0x3, 0x40, 0x2, 0x0, 0x1000, 0x0, 0x9, 0x9, 0x80000000, 0x7, 0x1, 0x7fffffff, 0x6, 0xc, 0xf93a, 0x6, 0x7f66, 0x0, 0xe, 0x6, 0xfffffff8, 0x8, 0xffff, 0x5, 0x4, 0xbc6, 0x64a, 0x9, 0x8, 0x7, 0x9, 0x7ff, 0x1, 0xe, 0xe5b3, 0x7, 0x6, 0x1, 0x400, 0x81, 0x9, 0x8, 0x3, 0x3, 0x4, 0x8, 0x7, 0x0, 0xd, 0x1, 0x1, 0xfffff570, 0x8001, 0xffffff12, 0xcdd8, 0x200, 0x8, 0x7ff, 0x800, 0x8, 0x8, 0x5, 0x9, 0x5, 0xce, 0x72f1, 0x0, 0x200, 0x10000, 0xc74, 0x9, 0x7, 0xffff, 0x100, 0xf8, 0x8, 0x80, 0x7, 0x588f, 0xfffffff7, 0x7, 0x100, 0x0, 0x1, 0x3, 0x8, 0x200, 0x3, 0xd, 0x3, 0x7, 0x101, 0x6, 0x2, 0xfffffff9, 0x4, 0x1, 0x2, 0xf, 0x0, 0x80000001, 0x100, 0x8e5, 0x40, 0x0, 0x8001, 0x2, 0x8, 0x8001, 0x2, 0x1, 0x400, 0x8000, 0x98, 0x5, 0x7, 0x2, 0x6, 0xd7b9, 0x5, 0x9, 0x4, 0x11f, 0x28, 0xfff, 0x4, 0x7a, 0x2, 0xffffff7f, 0x6, 0x10, 0x1, 0x1, 0x58, 0x2, 0x0, 0xfffffff7, 0xfffffffd, 0x5, 0x3, 0x7, 0x3, 0xfffffff7, 0x5, 0x3, 0x40, 0x1ff, 0x7, 0x67da, 0x6, 0x2, 0xa, 0x9, 0x400, 0x5, 0x5, 0x6, 0x3ff, 0x1, 0xb2c3, 0x6, 0x3, 0xfffffffe, 0x2, 0x0, 0x4, 0x9, 0xd, 0x8001, 0x0, 0x1000, 0x0, 0x2, 0x5, 0x0, 0x1, 0x100, 0x0, 0xfffffffd, 0x74, 0x10001, 0x4, 0xbc8, 0x0, 0x0, 0x8, 0x249a, 0x80, 0x0, 0xfffffffd, 0x8, 0x142f, 0x1, 0x8001, 0x0, 0x7, 0x1, 0xfffffff7, 0xfffff781, 0xfffffffc, 0x100, 0x10000, 0x7]}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r3, 0x3e}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000001d80)}], 0x1}, 0x20004014) 6.137190584s ago: executing program 6 (id=3753): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'dummy0\x00', {0x2, 0x0, @rand_addr=0xa000001}}) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000100)={'dummy0\x00', @ifru_flags=0x1}) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x0, @rand_addr=0xa000002}, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)='dummy0\x00'}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x1403, 0x5, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'dummy0\x00'}}]}, 0x38}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000300), r2) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x48, r3, 0x5, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x48}}, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000400)='dummy0\x00', 0x7) bind$inet(r4, &(0x7f0000000500)={0x2, 0x4e21, @rand_addr=0xa000001}, 0x10) listen(r4, 0x5) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000400)='dummy0\x00', 0x7) connect$inet(r5, &(0x7f0000000600)={0x2, 0x4e21, @rand_addr=0xa000002}, 0x10) r6 = accept(r4, 0x0, 0x0) recvmsg(r6, &(0x7f00000003c0), 0x0) 2.476887353s ago: executing program 8 (id=3754): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}]}}}]}, 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x64, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_MASTER={0x8, 0xa, r1}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x64}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@setlink={0x20, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x1, 0x1}}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@setlink={0x20, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x1, 0x1}}, 0x20}}, 0x0) sendmsg$netlink(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)={0x40, 0x54, 0x601, 0x0, 0x0, "", [@generic="070000000000000018000100000000000100000000000000e000000108000200240002800500010002000000050002000100000014000380100001800c0001000102030400000000"]}, 0x40}], 0x1}, 0x0) 2.441020523s ago: executing program 6 (id=3755): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x22}, @in=@dev={0xac, 0x14, 0x14, 0x22}, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@dev={0xac, 0x14, 0x14, 0x22}, 0x33, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x22}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x1, 0x2}}, 0xf0}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x2, 0x0, 0x2, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x22}, 0x33, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x22}, 0x0, 0x0, 0x0, 0xb7, 0xffffffff, 0x1}}, 0x120) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 2.345031614s ago: executing program 8 (id=3756): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="48010000240005060100"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff0000000008000100726564001c01028014000100e803000064000000f40100000a0a0a0004010200", @ANYBLOB='\x00'/32, @ANYBLOB='\x00'/32, @ANYBLOB='\x00'/32, @ANYBLOB='\x00'/32, @ANYBLOB='\x00'/32, @ANYBLOB='\x00'/32, @ANYBLOB='\x00'/32, @ANYBLOB='\x00'/32]}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getqdisc={0x24, 0x26, 0x301, 0x2, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 2.300615409s ago: executing program 8 (id=3757): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x3000c085) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 2.225062195s ago: executing program 8 (id=3758): openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xf, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='none\x00', &(0x7f0000000100)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000280)) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1\x00', 0x1ed) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) 1.877661227s ago: executing program 6 (id=3759): r0 = epoll_create(0x4) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x6, 0xc, 0x4, 0x7fff0000}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) 1.165150798s ago: executing program 8 (id=3760): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000009b80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a90000000060a010400000000000000000a0000040900010073797a310000000064000480340001800c0001007061796c6f61640024000280080001400000000a080003400000004f080004400000003808000240000000012c0001800a00010072656469720000001c00028008000240000000130800034000000029080001400000000e0900020073797a32"], 0x6c1c}, 0x1, 0x0, 0x0, 0x40}, 0x24000800) getsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000000), &(0x7f0000000080)=0x10) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$full(0xffffff9c, &(0x7f00000003c0), 0x8002, 0x0) io_uring_setup(0x2f08, &(0x7f00000007c0)={0x0, 0x768, 0x1000, 0x0, 0x14d, 0x0, r3}) r4 = openat$dsp1(0xffffffffffffff9c, 0x0, 0xc8a01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000002c80)={0x0, 0x5, 0x3, 0x1}) syz_emit_ethernet(0x66, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaa8aaaa88a800008100000086dd6076cd8a0028000020010000000000000000000000000000fe8000000000000000000000000000000004000000000000071800000000040000d604"], 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x1ac, &(0x7f0000000640)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) mount(&(0x7f0000000480)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000004c0)='cramfs\x00', 0x208000, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f0000001a00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r7 = syz_io_uring_setup(0x111, &(0x7f0000000200)={0x0, 0xfec9, 0x400, 0x13, 0x3ce}, &(0x7f0000000040), &(0x7f0000000140), 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r7, 0x18, &(0x7f0000000000)={0xfffffffffffffc00, r6, 0x0, {0xa, 0xffffffffffffffff}, 0x4}, 0x1) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r8, &(0x7f0000000180)=0xfe5f, 0x12) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x54, 0x0, 0x2, {0xfffd, 0x1}, {0x38, 0x2}, @ramp={0x8, 0x4, {0x4, 0x31, 0x4, 0x9}}}) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) ioctl$COMEDI_UNLOCK(r8, 0x6406) 0s ago: executing program 6 (id=3761): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='2\x00', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) listen(r1, 0x1) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x1234, 0x4e20, 0x100, 0x0, 0x0, 0x0, 0x8, 0x2, 0x1000, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x11223344}]}}}}}}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) syz_extract_tcp_res(&(0x7f0000000240)={0x0, 0x0}, 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000280)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x1234, 0x4e20, r2, r3, 0x0, 0x0, 0xd, 0x10, 0x1000, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x11223345, 0x11223344}, @mptcp=@capable={0x1e, 0x14, 0x0, 0x8, 0x0, 0x1122334455667788, [0x8877665544332211]}]}}}}}}}, 0x0) kernel console output (not intermixed with test programs): on device bond0 [ 1031.502396][T19672] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.576901][T19629] 8021q: adding VLAN 0 to HW filter on device team0 [ 1031.614397][ T7826] bridge0: port 1(bridge_slave_0) entered blocking state [ 1031.621641][ T7826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1031.739472][T19805] fuse: Unknown parameter 'group_i00000000000000000000' [ 1031.753363][T19672] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.815464][T16712] bridge0: port 2(bridge_slave_1) entered blocking state [ 1031.822729][T16712] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1031.883258][T19807] syzkaller0: entered promiscuous mode [ 1031.894848][T19807] syzkaller0: entered allmulticast mode [ 1032.908715][T18599] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1033.091497][T18599] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1033.160642][T18599] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1033.256168][T18599] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1033.322490][T18599] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1033.368905][T18599] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1033.404178][T18599] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.506676][T18599] usb 6-1: config 0 descriptor?? [ 1033.538681][ C1] net_ratelimit: 5 callbacks suppressed [ 1033.538704][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1033.712072][T14648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1033.761850][T15572] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1033.775625][ T5642] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1033.792009][T18599] hdpvr 6-1:0.0: unexpected answer of status request, len -32 [ 1033.826227][T18599] hdpvr 6-1:0.0: device init failed [ 1033.843279][T18599] hdpvr 6-1:0.0: probe with driver hdpvr failed with error -12 [ 1033.881181][T19672] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1033.899013][T19672] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1033.907618][T19672] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1033.921682][T19672] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1033.946689][T19672] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1033.974527][T19672] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1033.998145][T19672] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1034.012677][T19672] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1034.017254][T19845] fuse: Unknown parameter 'group_id00000000000000000000' [ 1034.167658][T19855] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3707'. [ 1034.205393][T19855] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3707'. [ 1034.365891][T19672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1034.495563][T19672] 8021q: adding VLAN 0 to HW filter on device team0 [ 1034.556093][T16713] bridge0: port 1(bridge_slave_0) entered blocking state [ 1034.563405][T16713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1034.578793][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1034.617656][T16713] bridge0: port 2(bridge_slave_1) entered blocking state [ 1034.624881][T16713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1034.656590][T19862] syzkaller0: entered promiscuous mode [ 1034.664419][T19862] syzkaller0: entered allmulticast mode [ 1035.179558][ T5642] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1035.643528][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1035.656164][T18599] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1035.742054][T18599] usb 6-1: USB disconnect, device number 5 [ 1035.962809][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1036.077024][T19672] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1036.133664][T19629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1036.246794][T19629] veth0_vlan: entered promiscuous mode [ 1036.265432][T15572] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1036.292204][T19629] veth1_vlan: entered promiscuous mode [ 1036.337570][T19897] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3714'. [ 1036.348129][T19629] veth0_macvtap: entered promiscuous mode [ 1036.377728][T19629] veth1_macvtap: entered promiscuous mode [ 1036.453412][T19629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1036.485330][T19629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1036.506126][T14638] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.532903][T14638] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.561267][T14638] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.586547][ T7826] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.818086][T16713] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1036.843037][T16713] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1036.931731][T16713] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1036.940570][T16713] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1037.001876][T19672] veth0_vlan: entered promiscuous mode [ 1037.054481][T19672] veth1_vlan: entered promiscuous mode [ 1037.129554][T19907] FAULT_INJECTION: forcing a failure. [ 1037.129554][T19907] name failslab, interval 1, probability 0, space 0, times 0 [ 1037.178805][T19907] CPU: 0 UID: 0 PID: 19907 Comm: syz.5.3718 Tainted: G L syzkaller #0 PREEMPT(full) [ 1037.178847][T19907] Tainted: [L]=SOFTLOCKUP [ 1037.178856][T19907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1037.178872][T19907] Call Trace: [ 1037.178884][T19907] [ 1037.178895][T19907] dump_stack_lvl+0xe8/0x150 [ 1037.178940][T19907] should_fail_ex+0x40c/0x560 [ 1037.178983][T19907] should_failslab+0xa8/0x100 [ 1037.179028][T19907] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1037.179065][T19907] ? jbd2__journal_start+0x145/0x5c0 [ 1037.179118][T19907] ? jbd2__journal_start+0x145/0x5c0 [ 1037.179152][T19907] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1037.179192][T19907] jbd2__journal_start+0x145/0x5c0 [ 1037.179232][T19907] __ext4_journal_start_sb+0x203/0x5d0 [ 1037.179276][T19907] ext4_dirty_inode+0x93/0x110 [ 1037.179313][T19907] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 1037.179347][T19907] __mark_inode_dirty+0x3a8/0x13b0 [ 1037.179388][T19907] file_update_time_flags+0x3ee/0x4a0 [ 1037.179422][T19907] ext4_page_mkwrite+0x224/0x1140 [ 1037.179471][T19907] ? __pfx_filemap_fault+0x10/0x10 [ 1037.179510][T19907] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 1037.179560][T19907] do_page_mkwrite+0x147/0x310 [ 1037.179605][T19907] do_pte_missing+0x757/0x34b0 [ 1037.179660][T19907] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1037.179696][T19907] ? handle_mm_fault+0xec/0x3080 [ 1037.179734][T19907] handle_mm_fault+0x1b36/0x3080 [ 1037.179785][T19907] ? handle_mm_fault+0xec/0x3080 [ 1037.179826][T19907] ? __pfx_handle_mm_fault+0x10/0x10 [ 1037.179854][T19907] ? lock_vma_under_rcu+0x45a/0x500 [ 1037.179889][T19907] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1037.179954][T19907] do_user_addr_fault+0xa4d/0x1340 [ 1037.180007][T19907] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1037.180040][T19907] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1037.180069][T19907] ? trace_page_fault_user+0x84/0x1e0 [ 1037.180112][T19907] exc_page_fault+0x6a/0xc0 [ 1037.180146][T19907] asm_exc_page_fault+0x26/0x30 [ 1037.180171][T19907] RIP: 0033:0x7f356b0725e0 [ 1037.180195][T19907] Code: 83 e6 07 0f 85 19 01 00 00 be 08 00 00 00 4c 89 ff 83 c5 01 e8 81 93 fe ff 49 8b 47 40 41 83 47 30 08 48 8d 48 f8 49 89 4f 40 <48> 89 58 f8 49 83 c5 01 45 3b 6c 24 04 0f 82 fd fe ff ff 41 80 7f [ 1037.180216][T19907] RSP: 002b:00007ffe9960a4d0 EFLAGS: 00010202 [ 1037.180239][T19907] RAX: 0000001b34419000 RBX: ffffffff899ac4ad RCX: 0000001b34418ff8 [ 1037.180258][T19907] RDX: 0000001b33e2421c RSI: 0000000000000008 RDI: 00007f356bf55720 [ 1037.180276][T19907] RBP: 00000000000001b2 R08: 00007f356b410000 R09: 00007f356b412000 [ 1037.180295][T19907] R10: 00000000899ac4b1 R11: 0000000000000009 R12: 00007f356b426038 [ 1037.180312][T19907] R13: 00000000000003ab R14: ffffffff899ac19c R15: 00007f356bf55720 [ 1037.180332][T19907] ? __kfree_skb+0x1c/0x210 [ 1037.180363][T19907] ? sk_skb_reason_drop+0x10d/0x110 [ 1037.180407][T19907] [ 1037.198557][T19672] veth0_macvtap: entered promiscuous mode [ 1037.287682][T19907] FAULT_INJECTION: forcing a failure. [ 1037.287682][T19907] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1037.535706][T19907] CPU: 0 UID: 0 PID: 19907 Comm: syz.5.3718 Tainted: G L syzkaller #0 PREEMPT(full) [ 1037.535748][T19907] Tainted: [L]=SOFTLOCKUP [ 1037.535757][T19907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1037.535772][T19907] Call Trace: [ 1037.535782][T19907] [ 1037.535794][T19907] dump_stack_lvl+0xe8/0x150 [ 1037.535838][T19907] should_fail_ex+0x40c/0x560 [ 1037.535878][T19907] get_futex_key+0x1b3/0x1580 [ 1037.535925][T19907] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1037.535957][T19907] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1037.535990][T19907] ? __pfx_get_futex_key+0x10/0x10 [ 1037.536028][T19907] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1037.536058][T19907] ? debug_object_free+0x29c/0x340 [ 1037.536106][T19907] futex_wake+0x119/0x5f0 [ 1037.536140][T19907] ? __pfx_futex_wait+0x10/0x10 [ 1037.536172][T19907] ? __pfx_futex_wake+0x10/0x10 [ 1037.536205][T19907] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1037.536243][T19907] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1037.536280][T19907] do_futex+0x458/0x4e0 [ 1037.536312][T19907] ? __pfx_do_futex+0x10/0x10 [ 1037.536337][T19907] ? lockdep_hardirqs_on+0x7a/0x110 [ 1037.536366][T19907] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1037.536405][T19907] __se_sys_futex+0x3a8/0x450 [ 1037.536439][T19907] ? __pfx___se_sys_futex+0x10/0x10 [ 1037.536464][T19907] ? rcu_is_watching+0x15/0xb0 [ 1037.536496][T19907] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1037.536523][T19907] ? __x64_sys_futex+0x21/0xf0 [ 1037.536546][T19907] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.536574][T19907] do_syscall_64+0x174/0x580 [ 1037.536618][T19907] ? trace_irq_disable+0x3b/0x140 [ 1037.536660][T19907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.536686][T19907] RIP: 0033:0x7f356b19de99 [ 1037.536709][T19907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1037.536731][T19907] RSP: 002b:00007ffe9960a568 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1037.536759][T19907] RAX: ffffffffffffffda RBX: 00007f356b426180 RCX: 00007f356b19de99 [ 1037.536778][T19907] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f356b42618c [ 1037.536795][T19907] RBP: 00007f356b426180 R08: 0000000000000001 R09: 00007f356b4260a0 [ 1037.536813][T19907] R10: 00007f356b425fa0 R11: 0000000000000246 R12: 0000000000000002 [ 1037.536829][T19907] R13: 0000000000000001 R14: 0000000000000000 R15: 00007f356b425fa0 [ 1037.536867][T19907] [ 1037.811301][T19907] FAULT_INJECTION: forcing a failure. [ 1037.811301][T19907] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1037.829808][T19907] CPU: 1 UID: 0 PID: 19907 Comm: syz.5.3718 Tainted: G L syzkaller #0 PREEMPT(full) [ 1037.829850][T19907] Tainted: [L]=SOFTLOCKUP [ 1037.829860][T19907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1037.829876][T19907] Call Trace: [ 1037.829887][T19907] [ 1037.829899][T19907] dump_stack_lvl+0xe8/0x150 [ 1037.829944][T19907] should_fail_ex+0x40c/0x560 [ 1037.829988][T19907] get_futex_key+0x1b3/0x1580 [ 1037.830035][T19907] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1037.830067][T19907] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1037.830106][T19907] ? __pfx_get_futex_key+0x10/0x10 [ 1037.830143][T19907] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1037.830172][T19907] ? __lock_acquire+0x683/0x2cf0 [ 1037.830221][T19907] futex_wake+0x119/0x5f0 [ 1037.830254][T19907] ? __pfx_futex_wait+0x10/0x10 [ 1037.830286][T19907] ? __pfx_futex_wake+0x10/0x10 [ 1037.830321][T19907] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1037.830350][T19907] ? lock_acquire+0x106/0x350 [ 1037.830390][T19907] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1037.830418][T19907] ? lock_acquire+0x106/0x350 [ 1037.830458][T19907] do_futex+0x458/0x4e0 [ 1037.830490][T19907] ? __pfx_do_futex+0x10/0x10 [ 1037.830514][T19907] ? ktime_get+0x45/0x220 [ 1037.830547][T19907] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1037.830585][T19907] __se_sys_futex+0x3a8/0x450 [ 1037.830616][T19907] ? __pfx_clockevents_program_event+0x10/0x10 [ 1037.830645][T19907] ? __pfx___se_sys_futex+0x10/0x10 [ 1037.830670][T19907] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1037.830709][T19907] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1037.830738][T19907] ? __x64_sys_futex+0x21/0xf0 [ 1037.830763][T19907] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.830793][T19907] do_syscall_64+0x174/0x580 [ 1037.830833][T19907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.830861][T19907] RIP: 0033:0x7f356b19de99 [ 1037.830885][T19907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1037.830907][T19907] RSP: 002b:00007ffe9960a5e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1037.830934][T19907] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f356b19de99 [ 1037.830953][T19907] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f356b425fa8 [ 1037.830970][T19907] RBP: 0000000000000085 R08: 0000000000000020 R09: 0000000000000000 [ 1037.830985][T19907] R10: 00007f356b425fa0 R11: 0000000000000246 R12: 0000000000000000 [ 1037.831002][T19907] R13: 00007f356b425fac R14: 00007f356b425fa8 R15: 00007f356b425fa0 [ 1037.831043][T19907] [ 1038.126272][T19907] FAULT_INJECTION: forcing a failure. [ 1038.126272][T19907] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1038.142403][T19907] CPU: 0 UID: 0 PID: 19907 Comm: syz.5.3718 Tainted: G L syzkaller #0 PREEMPT(full) [ 1038.142449][T19907] Tainted: [L]=SOFTLOCKUP [ 1038.142459][T19907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1038.142474][T19907] Call Trace: [ 1038.142485][T19907] [ 1038.142496][T19907] dump_stack_lvl+0xe8/0x150 [ 1038.142541][T19907] should_fail_ex+0x40c/0x560 [ 1038.142590][T19907] get_futex_key+0x1b3/0x1580 [ 1038.142634][T19907] ? __lock_acquire+0x683/0x2cf0 [ 1038.142673][T19907] ? __lock_acquire+0x683/0x2cf0 [ 1038.142714][T19907] ? __pfx_get_futex_key+0x10/0x10 [ 1038.142748][T19907] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1038.142778][T19907] ? __lock_acquire+0x683/0x2cf0 [ 1038.142819][T19907] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1038.142859][T19907] futex_wait_setup+0x4a/0x590 [ 1038.142897][T19907] ? __futex_wait+0xdf/0x400 [ 1038.142934][T19907] __futex_wait+0x15f/0x400 [ 1038.142973][T19907] ? __pfx___futex_wait+0x10/0x10 [ 1038.143010][T19907] ? __pfx_futex_wake_mark+0x10/0x10 [ 1038.143049][T19907] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1038.143079][T19907] ? __hrtimer_setup+0x1b7/0x260 [ 1038.143107][T19907] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1038.143143][T19907] ? ktime_add_safe+0x38/0x70 [ 1038.143167][T19907] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1038.143202][T19907] futex_wait+0x121/0x390 [ 1038.143238][T19907] ? __pfx_futex_wait+0x10/0x10 [ 1038.143281][T19907] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1038.143318][T19907] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1038.143356][T19907] do_futex+0x3e7/0x4e0 [ 1038.143388][T19907] ? __pfx_do_futex+0x10/0x10 [ 1038.143413][T19907] ? lockdep_hardirqs_on+0x7a/0x110 [ 1038.143443][T19907] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1038.143475][T19907] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1038.143509][T19907] __se_sys_futex+0x3a8/0x450 [ 1038.143542][T19907] ? __pfx___se_sys_futex+0x10/0x10 [ 1038.143568][T19907] ? rcu_is_watching+0x15/0xb0 [ 1038.143607][T19907] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1038.143637][T19907] ? __x64_sys_futex+0x21/0xf0 [ 1038.143663][T19907] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1038.143691][T19907] do_syscall_64+0x174/0x580 [ 1038.143721][T19907] ? trace_irq_disable+0x3b/0x140 [ 1038.143763][T19907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1038.143789][T19907] RIP: 0033:0x7f356b19de99 [ 1038.143812][T19907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1038.143833][T19907] RSP: 002b:00007ffe9960a5e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1038.143860][T19907] RAX: ffffffffffffffda RBX: 00000000000fd5c7 RCX: 00007f356b19de99 [ 1038.143883][T19907] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f356b42609c [ 1038.143900][T19907] RBP: 0000000000000032 R08: 3fffffffffffffff R09: 0000000000000000 [ 1038.143917][T19907] R10: 00007ffe9960a6f0 R11: 0000000000000246 R12: 00007ffe9960a710 [ 1038.143935][T19907] R13: 00007f356b42609c R14: 00000000000fd5f9 R15: 00007ffe9960a6f0 [ 1038.143974][T19907] [ 1038.659938][T19672] veth1_macvtap: entered promiscuous mode [ 1038.732454][ T5631] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1038.740048][ C1] net_ratelimit: 4 callbacks suppressed [ 1038.740071][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1038.772450][ T5631] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 1038.786327][ T5631] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 1038.816689][ T5631] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 1038.839438][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1038.882410][ T5631] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 1038.979353][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1039.049433][T19929] syzkaller0: entered promiscuous mode [ 1039.056654][T19929] syzkaller0: entered allmulticast mode [ 1039.090337][T19672] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1039.556458][ T5642] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1039.778706][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1040.582838][ T5627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1040.820306][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1040.981405][T12180] Bluetooth: hci16: command tx timeout [ 1041.638182][ T5627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1041.862491][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1042.037602][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1042.714895][T19672] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1042.758745][T14644] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.778004][T14644] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.800436][T14644] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.822305][ T7826] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.949553][T19629] FAULT_INJECTION: forcing a failure. [ 1042.949553][T19629] name failslab, interval 1, probability 100, space 0, times 100 [ 1042.949686][ T80] FAULT_INJECTION: forcing a failure. [ 1042.949686][ T80] name failslab, interval 1, probability 100, space 0, times 100 [ 1042.949873][T19956] FAULT_INJECTION: forcing a failure. [ 1042.949873][T19956] name failslab, interval 1, probability 100, space 0, times 100 [ 1042.965507][T19629] CPU: 0 UID: 0 PID: 19629 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1042.965549][T19629] Tainted: [L]=SOFTLOCKUP [ 1042.965559][T19629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1042.965576][T19629] Call Trace: [ 1042.965587][T19629] [ 1042.965599][T19629] dump_stack_lvl+0xe8/0x150 [ 1042.965645][T19629] should_fail_ex+0x40c/0x560 [ 1042.965690][T19629] ? xt_alloc_table_info+0x40/0xb0 [ 1042.965741][T19629] should_failslab+0xa8/0x100 [ 1042.965786][T19629] __kvmalloc_node_noprof+0x176/0x860 [ 1042.965829][T19629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1042.965863][T19629] ? xt_alloc_table_info+0x40/0xb0 [ 1042.965912][T19629] xt_alloc_table_info+0x40/0xb0 [ 1042.965954][T19629] do_ip6t_set_ctl+0x96b/0xe30 [ 1042.966001][T19629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1042.966031][T19629] ? rcu_is_watching+0x15/0xb0 [ 1042.966061][T19629] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 1042.966104][T19629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1042.966145][T19629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1042.966176][T19629] ? __mutex_unlock_slowpath+0x731/0x900 [ 1042.966211][T19629] ? aa_sk_perm+0x6d5/0x900 [ 1042.966239][T19629] ? __pfx_handle_mm_fault+0x10/0x10 [ 1042.966272][T19629] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1042.966310][T19629] ? __pfx_aa_sk_perm+0x10/0x10 [ 1042.966346][T19629] nf_setsockopt+0x26f/0x290 [ 1042.966376][T19629] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1042.966421][T19629] do_sock_setsockopt+0x17c/0x1b0 [ 1042.966458][T19629] __x64_sys_setsockopt+0x13d/0x1b0 [ 1042.966595][T19629] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1042.966633][T19629] do_syscall_64+0x174/0x580 [ 1042.966667][T19629] ? trace_irq_disable+0x3b/0x140 [ 1042.966719][T19629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1042.966746][T19629] RIP: 0033:0x7fe765b9f6da [ 1042.966773][T19629] Code: 48 83 ec 10 48 63 c9 48 63 ff 45 89 c9 6a 2c e8 6c 99 fb ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 49 89 ca b8 36 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 [ 1042.966795][T19629] RSP: 002b:00007fff29309178 EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1042.966822][T19629] RAX: ffffffffffffffda RBX: 00007fff29309200 RCX: 00007fe765b9f6da [ 1042.966850][T19629] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 1042.966866][T19629] RBP: 0000000000000003 R08: 00000000000002e8 R09: 0000000000000000 [ 1042.966883][T19629] R10: 00007fe765ded2a0 R11: 0000000000000206 R12: 00007fe765ded240 [ 1042.966901][T19629] R13: 00007fff2930919c R14: 0000000000000000 R15: 00007fe765dedfc0 [ 1042.966941][T19629] [ 1042.978942][ T5953] FAULT_INJECTION: forcing a failure. [ 1042.978942][ T5953] name failslab, interval 1, probability 100, space 0, times 18 [ 1042.989532][ T5642] FAULT_INJECTION: forcing a failure. [ 1042.989532][ T5642] name failslab, interval 1, probability 100, space 0, times 18 [ 1043.001060][ C0] FAULT_INJECTION: forcing a failure. [ 1043.001060][ C0] name failslab, interval 1, probability 100, space 0, times 17 [ 1043.001093][ C1] FAULT_INJECTION: forcing a failure. [ 1043.001093][ C1] name failslab, interval 1, probability 100, space 0, times 17 [ 1043.001104][ C0] CPU: 0 UID: 0 PID: 5953 Comm: kworker/0:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 1043.001137][ C0] Tainted: [L]=SOFTLOCKUP [ 1043.001145][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1043.001161][ C0] Workqueue: events nsim_fib_event_work [ 1043.001197][ C0] Call Trace: [ 1043.001207][ C0] [ 1043.001217][ C0] dump_stack_lvl+0xe8/0x150 [ 1043.001256][ C0] should_fail_ex+0x40c/0x560 [ 1043.001298][ C0] should_failslab+0xa8/0x100 [ 1043.001343][ C0] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 1043.001378][ C0] ? __alloc_skb+0x5a3/0x7a0 [ 1043.001400][ C0] ? __alloc_skb+0x5a3/0x7a0 [ 1043.001430][ C0] __alloc_skb+0x5a3/0x7a0 [ 1043.001457][ C0] __netdev_alloc_skb+0xc1/0x810 [ 1043.001480][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.001508][ C0] ? __ieee80211_beacon_get+0x36/0x1920 [ 1043.001540][ C0] __ieee80211_beacon_get+0xcfd/0x1920 [ 1043.001566][ C0] ? __ieee80211_beacon_get+0x36/0x1920 [ 1043.001598][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.001633][ C0] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 1043.001665][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 1043.001710][ C0] ? perf_trace_contention_end+0x80/0x310 [ 1043.001745][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.001777][ C0] mac80211_hwsim_beacon_tx+0x378/0x820 [ 1043.001810][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.001842][ C0] __iterate_interfaces+0x2af/0x5a0 [ 1043.001868][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1043.001897][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1043.001925][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1043.001953][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1043.001981][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1043.002005][ C0] mac80211_hwsim_beacon+0xaf/0x240 [ 1043.002028][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1043.002053][ C0] __hrtimer_run_queues+0x3bc/0xa10 [ 1043.002097][ C0] hrtimer_run_softirq+0x17a/0x240 [ 1043.002131][ C0] handle_softirqs+0x225/0x840 [ 1043.002164][ C0] ? __irq_exit_rcu+0xca/0x220 [ 1043.002200][ C0] __irq_exit_rcu+0xca/0x220 [ 1043.002229][ C0] irq_exit_rcu+0x9/0x30 [ 1043.002255][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1043.002281][ C0] [ 1043.002290][ C0] [ 1043.002299][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1043.002325][ C0] RIP: 0010:console_flush_all+0x7d2/0xaf0 [ 1043.002353][ C0] Code: ff ff e8 31 2f 21 00 90 0f 0b 90 e9 9c fc ff ff e8 23 2f 21 00 e8 3e 10 2b 0a 48 85 db 74 c0 e8 14 2f 21 00 fb 48 8b 5c 24 18 <48> 8b 44 24 28 42 80 3c 20 00 4d 8d 77 58 74 08 4c 89 f7 e8 56 c3 [ 1043.002372][ C0] RSP: 0018:ffffc9000597f300 EFLAGS: 00000293 [ 1043.002391][ C0] RAX: ffffffff81a5d4ec RBX: ffffc9000597f460 RCX: ffff88801fb29f00 [ 1043.002409][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1043.002423][ C0] RBP: ffffc9000597f410 R08: ffffffff90579137 R09: 1ffffffff20af226 [ 1043.002440][ C0] R10: dffffc0000000000 R11: fffffbfff20af227 R12: dffffc0000000000 [ 1043.002457][ C0] R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff8f46f6a0 [ 1043.002480][ C0] ? console_flush_all+0x7cc/0xaf0 [ 1043.002521][ C0] ? console_flush_all+0x123/0xaf0 [ 1043.002553][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 1043.002583][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.002610][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1043.002644][ C0] console_unlock+0xd1/0x1c0 [ 1043.002668][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.002697][ C0] ? __pfx_console_unlock+0x10/0x10 [ 1043.002724][ C0] ? vprintk_emit+0x2b1/0x560 [ 1043.002749][ C0] ? vprintk_emit+0x455/0x560 [ 1043.002772][ C0] ? vprintk_emit+0x2cf/0x560 [ 1043.002794][ C0] ? vprintk_emit+0x2cf/0x560 [ 1043.002820][ C0] vprintk_emit+0x485/0x560 [ 1043.002847][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 1043.002881][ C0] _printk+0xdd/0x130 [ 1043.002914][ C0] ? __pfx__printk+0x10/0x10 [ 1043.002941][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.002970][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.002997][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.003030][ C0] should_fail_ex+0x3ed/0x560 [ 1043.003065][ C0] should_failslab+0xa8/0x100 [ 1043.003103][ C0] __kmalloc_cache_noprof+0xa8/0x660 [ 1043.003133][ C0] ? stack_depot_save_flags+0x33/0x800 [ 1043.003164][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.003191][ C0] ? nsim_fib_event+0xf37/0xa390 [ 1043.003222][ C0] ? nsim_fib_event+0xf37/0xa390 [ 1043.003260][ C0] nsim_fib_event+0xf37/0xa390 [ 1043.003290][ C0] ? worker_thread+0xa47/0xfb0 [ 1043.003317][ C0] ? kthread+0x388/0x470 [ 1043.003378][ C0] ? __pfx_nsim_fib_event+0x10/0x10 [ 1043.003423][ C0] ? kasan_quarantine_put+0xbb/0x1f0 [ 1043.003456][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.003487][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.003522][ C0] nsim_fib_event_work+0x244/0x3b0 [ 1043.003557][ C0] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 1043.003590][ C0] ? rcu_is_watching+0x15/0xb0 [ 1043.003614][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.003643][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 1043.003670][ C0] process_scheduled_works+0xa8e/0x14e0 [ 1043.003733][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1043.003768][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.003795][ C0] ? assign_work+0x3cf/0x5d0 [ 1043.003827][ C0] worker_thread+0xa47/0xfb0 [ 1043.003858][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.003895][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.003921][ C0] ? __kthread_parkme+0x71/0x1f0 [ 1043.003963][ C0] kthread+0x388/0x470 [ 1043.003997][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1043.004024][ C0] ? __pfx_kthread+0x10/0x10 [ 1043.004060][ C0] ret_from_fork+0x514/0xb70 [ 1043.004099][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1043.004134][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.004160][ C0] ? __switch_to+0xc89/0x1420 [ 1043.004194][ C0] ? __pfx_kthread+0x10/0x10 [ 1043.004229][ C0] ret_from_fork_asm+0x1a/0x30 [ 1043.004269][ C0] [ 1043.004284][ C1] CPU: 1 UID: 0 PID: 5642 Comm: kworker/1:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 1043.004316][ C1] Tainted: [L]=SOFTLOCKUP [ 1043.004324][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1043.004340][ C1] Workqueue: mld mld_dad_work [ 1043.004355][ C0] FAULT_INJECTION: forcing a failure. [ 1043.004355][ C0] name failslab, interval 1, probability 100, space 0, times 15 [ 1043.004370][ C1] [ 1043.004377][ C1] Call Trace: [ 1043.004386][ C1] [ 1043.004395][ C1] dump_stack_lvl+0xe8/0x150 [ 1043.004431][ C1] should_fail_ex+0x40c/0x560 [ 1043.004465][ C1] should_failslab+0xa8/0x100 [ 1043.004503][ C1] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 1043.004534][ C1] ? local_lock_release+0x9c/0x160 [ 1043.004559][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 1043.004579][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 1043.004609][ C1] __alloc_skb+0x1d7/0x7a0 [ 1043.004636][ C1] __netdev_alloc_skb+0xc1/0x810 [ 1043.004659][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.004687][ C1] ? __ieee80211_beacon_get+0x36/0x1920 [ 1043.004718][ C1] __ieee80211_beacon_get+0xcfd/0x1920 [ 1043.004745][ C1] ? __ieee80211_beacon_get+0x36/0x1920 [ 1043.004776][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.004810][ C1] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 1043.004842][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 1043.004871][ C1] ? perf_trace_contention_end+0x80/0x310 [ 1043.004898][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.004930][ C1] mac80211_hwsim_beacon_tx+0x378/0x820 [ 1043.004960][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.004992][ C1] __iterate_interfaces+0x2af/0x5a0 [ 1043.005017][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1043.005046][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1043.005074][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1043.005102][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1043.005130][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1043.005154][ C1] mac80211_hwsim_beacon+0xaf/0x240 [ 1043.005177][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1043.005206][ C1] __hrtimer_run_queues+0x3bc/0xa10 [ 1043.005251][ C1] hrtimer_run_softirq+0x17a/0x240 [ 1043.005283][ C1] handle_softirqs+0x225/0x840 [ 1043.005315][ C1] ? __irq_exit_rcu+0xca/0x220 [ 1043.005351][ C1] __irq_exit_rcu+0xca/0x220 [ 1043.005381][ C1] irq_exit_rcu+0x9/0x30 [ 1043.005406][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1043.005432][ C1] [ 1043.005440][ C1] [ 1043.005450][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1043.005474][ C1] RIP: 0010:vprintk_emit+0x45d/0x560 [ 1043.005499][ C1] Code: 0f 84 44 ff ff ff e8 72 6c 21 00 fb eb 44 e8 6a 6c 21 00 e8 85 4d 2b 0a 4d 85 f6 74 94 e8 5b 6c 21 00 fb 48 c7 c7 a0 bf b4 8e <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 fb 1b [ 1043.005517][ C1] RSP: 0018:ffffc90004e5f540 EFLAGS: 00000293 [ 1043.005536][ C1] RAX: ffffffff81a597a5 RBX: ffffffff81a5961f RCX: ffff88801d35be00 [ 1043.005553][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8eb4bfa0 [ 1043.005568][ C1] RBP: ffffc90004e5f5f0 R08: ffffffff90579137 R09: 1ffffffff20af226 [ 1043.005585][ C1] R10: dffffc0000000000 R11: fffffbfff20af227 R12: 0000000000000000 [ 1043.005601][ C1] R13: 0000000000000061 R14: 0000000000000200 R15: 1ffff920009cbeac [ 1043.005621][ C1] ? vprintk_emit+0x2cf/0x560 [ 1043.005646][ C1] ? vprintk_emit+0x455/0x560 [ 1043.005675][ C1] ? __lock_acquire+0x683/0x2cf0 [ 1043.005711][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 1043.005733][ C1] ? __lock_acquire+0x683/0x2cf0 [ 1043.005765][ C1] ? __dev_queue_xmit+0x29b/0x3820 [ 1043.005804][ C1] _printk+0xdd/0x130 [ 1043.005829][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1043.005862][ C1] ? __pfx__printk+0x10/0x10 [ 1043.005884][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.005916][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.005943][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.005969][ C1] ? ___ratelimit+0x584/0x8e0 [ 1043.005993][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.006026][ C1] should_fail_ex+0x3ed/0x560 [ 1043.006060][ C1] should_failslab+0xa8/0x100 [ 1043.006097][ C1] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 1043.006126][ C1] ? local_lock_release+0x9c/0x160 [ 1043.006150][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 1043.006171][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 1043.006206][ C1] __alloc_skb+0x1d7/0x7a0 [ 1043.006234][ C1] mld_newpack+0x165/0xcb0 [ 1043.006277][ C1] ? __pfx_mld_newpack+0x10/0x10 [ 1043.006310][ C1] ? trace_contention_end+0x3d/0x140 [ 1043.006337][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.006362][ C1] ? __mutex_lock+0x30d/0x1550 [ 1043.006393][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.006425][ C1] add_grec+0x119f/0x19d0 [ 1043.006462][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1043.006499][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.006531][ C1] mld_send_initial_cr+0x288/0x550 [ 1043.006566][ C1] mld_dad_work+0x3d/0x480 [ 1043.006598][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 1043.006626][ C1] process_scheduled_works+0xa8e/0x14e0 [ 1043.006683][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1043.006717][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.006743][ C1] ? assign_work+0x3cf/0x5d0 [ 1043.006776][ C1] worker_thread+0xa47/0xfb0 [ 1043.006832][ C1] kthread+0x388/0x470 [ 1043.006866][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1043.006893][ C1] ? __pfx_kthread+0x10/0x10 [ 1043.006928][ C1] ret_from_fork+0x514/0xb70 [ 1043.006967][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1043.007000][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.007027][ C1] ? __switch_to+0xc89/0x1420 [ 1043.007060][ C1] ? __pfx_kthread+0x10/0x10 [ 1043.007095][ C1] ret_from_fork_asm+0x1a/0x30 [ 1043.007135][ C1] [ 1043.007149][ C0] CPU: 0 UID: 0 PID: 5953 Comm: kworker/0:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 1043.007162][ C1] FAULT_INJECTION: forcing a failure. [ 1043.007162][ C1] name failslab, interval 1, probability 100, space 0, times 14 [ 1043.007180][ C0] Tainted: [L]=SOFTLOCKUP [ 1043.007189][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1043.007204][ C0] Workqueue: events nsim_fib_event_work [ 1043.007235][ C0] Call Trace: [ 1043.007243][ C0] [ 1043.007253][ C0] dump_stack_lvl+0xe8/0x150 [ 1043.007288][ C0] should_fail_ex+0x40c/0x560 [ 1043.007323][ C0] should_failslab+0xa8/0x100 [ 1043.007458][ C0] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 1043.007495][ C0] ? __alloc_skb+0x5a3/0x7a0 [ 1043.007517][ C0] ? __alloc_skb+0x5a3/0x7a0 [ 1043.007546][ C0] __alloc_skb+0x5a3/0x7a0 [ 1043.007574][ C0] __netdev_alloc_skb+0xc1/0x810 [ 1043.007597][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.007639][ C0] ? __ieee80211_beacon_get+0x36/0x1920 [ 1043.007670][ C0] __ieee80211_beacon_get+0xcfd/0x1920 [ 1043.007696][ C0] ? __ieee80211_beacon_get+0x36/0x1920 [ 1043.007726][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.007760][ C0] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 1043.007792][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 1043.007821][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.007847][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1043.007877][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.007909][ C0] mac80211_hwsim_beacon_tx+0x378/0x820 [ 1043.007940][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.007972][ C0] __iterate_interfaces+0x2af/0x5a0 [ 1043.007997][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1043.008025][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1043.008053][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1043.008081][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1043.008108][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1043.008132][ C0] mac80211_hwsim_beacon+0xaf/0x240 [ 1043.008155][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1043.008178][ C0] __hrtimer_run_queues+0x3bc/0xa10 [ 1043.008223][ C0] hrtimer_run_softirq+0x17a/0x240 [ 1043.008256][ C0] handle_softirqs+0x225/0x840 [ 1043.008288][ C0] ? __irq_exit_rcu+0xca/0x220 [ 1043.008323][ C0] __irq_exit_rcu+0xca/0x220 [ 1043.008352][ C0] irq_exit_rcu+0x9/0x30 [ 1043.008377][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1043.008404][ C0] [ 1043.008412][ C0] [ 1043.008422][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1043.008447][ C0] RIP: 0010:console_flush_all+0x7d2/0xaf0 [ 1043.008475][ C0] Code: ff ff e8 31 2f 21 00 90 0f 0b 90 e9 9c fc ff ff e8 23 2f 21 00 e8 3e 10 2b 0a 48 85 db 74 c0 e8 14 2f 21 00 fb 48 8b 5c 24 18 <48> 8b 44 24 28 42 80 3c 20 00 4d 8d 77 58 74 08 4c 89 f7 e8 56 c3 [ 1043.008498][ C0] RSP: 0018:ffffc9000597f300 EFLAGS: 00000293 [ 1043.008519][ C0] RAX: ffffffff81a5d4ec RBX: ffffc9000597f460 RCX: ffff88801fb29f00 [ 1043.008537][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1043.008551][ C0] RBP: ffffc9000597f410 R08: ffffffff90579137 R09: 1ffffffff20af226 [ 1043.008567][ C0] R10: dffffc0000000000 R11: fffffbfff20af227 R12: dffffc0000000000 [ 1043.008585][ C0] R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff8f46f6a0 [ 1043.008608][ C0] ? console_flush_all+0x7cc/0xaf0 [ 1043.008655][ C0] ? console_flush_all+0x123/0xaf0 [ 1043.008687][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 1043.008717][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.008743][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1043.008776][ C0] console_unlock+0xd1/0x1c0 [ 1043.008800][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.008828][ C0] ? __pfx_console_unlock+0x10/0x10 [ 1043.008851][ C0] ? vprintk_emit+0x2b1/0x560 [ 1043.008875][ C0] ? vprintk_emit+0x455/0x560 [ 1043.008898][ C0] ? vprintk_emit+0x2cf/0x560 [ 1043.008919][ C0] ? vprintk_emit+0x2cf/0x560 [ 1043.008944][ C0] vprintk_emit+0x485/0x560 [ 1043.008970][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 1043.009005][ C0] _printk+0xdd/0x130 [ 1043.009037][ C0] ? __pfx__printk+0x10/0x10 [ 1043.009063][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.009091][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.009117][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.009149][ C0] should_fail_ex+0x3ed/0x560 [ 1043.009184][ C0] should_failslab+0xa8/0x100 [ 1043.009220][ C0] __kmalloc_cache_noprof+0xa8/0x660 [ 1043.009251][ C0] ? stack_depot_save_flags+0x33/0x800 [ 1043.009280][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.009307][ C0] ? nsim_fib_event+0xf37/0xa390 [ 1043.009337][ C0] ? nsim_fib_event+0xf37/0xa390 [ 1043.009375][ C0] nsim_fib_event+0xf37/0xa390 [ 1043.009405][ C0] ? worker_thread+0xa47/0xfb0 [ 1043.009431][ C0] ? kthread+0x388/0x470 [ 1043.009490][ C0] ? __pfx_nsim_fib_event+0x10/0x10 [ 1043.009535][ C0] ? kasan_quarantine_put+0xbb/0x1f0 [ 1043.009567][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.009597][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.009637][ C0] nsim_fib_event_work+0x244/0x3b0 [ 1043.009671][ C0] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 1043.009704][ C0] ? rcu_is_watching+0x15/0xb0 [ 1043.009727][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.009755][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 1043.009782][ C0] process_scheduled_works+0xa8e/0x14e0 [ 1043.009838][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1043.009872][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.009898][ C0] ? assign_work+0x3cf/0x5d0 [ 1043.009929][ C0] worker_thread+0xa47/0xfb0 [ 1043.009960][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.009996][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.010022][ C0] ? __kthread_parkme+0x71/0x1f0 [ 1043.010062][ C0] kthread+0x388/0x470 [ 1043.010096][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1043.010122][ C0] ? __pfx_kthread+0x10/0x10 [ 1043.010157][ C0] ret_from_fork+0x514/0xb70 [ 1043.010195][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1043.010229][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.010255][ C0] ? __switch_to+0xc89/0x1420 [ 1043.010287][ C0] ? __pfx_kthread+0x10/0x10 [ 1043.010322][ C0] ret_from_fork_asm+0x1a/0x30 [ 1043.010361][ C0] [ 1043.010379][ C1] CPU: 1 UID: 0 PID: 5642 Comm: kworker/1:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 1043.010410][ C1] Tainted: [L]=SOFTLOCKUP [ 1043.010420][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1043.010436][ C1] Workqueue: mld mld_dad_work [ 1043.010468][ C1] Call Trace: [ 1043.010477][ C1] [ 1043.010487][ C1] dump_stack_lvl+0xe8/0x150 [ 1043.010500][ C0] FAULT_INJECTION: forcing a failure. [ 1043.010500][ C0] name failslab, interval 1, probability 100, space 0, times 12 [ 1043.010524][ C1] should_fail_ex+0x40c/0x560 [ 1043.010558][ C1] should_failslab+0xa8/0x100 [ 1043.010594][ C1] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 1043.010623][ C1] ? local_lock_release+0x9c/0x160 [ 1043.010646][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 1043.010667][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 1043.010696][ C1] __alloc_skb+0x1d7/0x7a0 [ 1043.010723][ C1] __netdev_alloc_skb+0xc1/0x810 [ 1043.010745][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.010772][ C1] ? __ieee80211_beacon_get+0x36/0x1920 [ 1043.010802][ C1] __ieee80211_beacon_get+0xcfd/0x1920 [ 1043.010827][ C1] ? __ieee80211_beacon_get+0x36/0x1920 [ 1043.010858][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.010891][ C1] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 1043.010923][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 1043.010951][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.010977][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1043.011006][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.011037][ C1] mac80211_hwsim_beacon_tx+0x378/0x820 [ 1043.011066][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.011098][ C1] __iterate_interfaces+0x2af/0x5a0 [ 1043.011128][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1043.011157][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1043.011184][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1043.011212][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1043.011239][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1043.011262][ C1] mac80211_hwsim_beacon+0xaf/0x240 [ 1043.011285][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1043.011309][ C1] __hrtimer_run_queues+0x3bc/0xa10 [ 1043.011352][ C1] hrtimer_run_softirq+0x17a/0x240 [ 1043.011384][ C1] handle_softirqs+0x225/0x840 [ 1043.011415][ C1] ? __irq_exit_rcu+0xca/0x220 [ 1043.011450][ C1] __irq_exit_rcu+0xca/0x220 [ 1043.011479][ C1] irq_exit_rcu+0x9/0x30 [ 1043.011504][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1043.011529][ C1] [ 1043.011537][ C1] [ 1043.011546][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1043.011570][ C1] RIP: 0010:vprintk_emit+0x45d/0x560 [ 1043.011594][ C1] Code: 0f 84 44 ff ff ff e8 72 6c 21 00 fb eb 44 e8 6a 6c 21 00 e8 85 4d 2b 0a 4d 85 f6 74 94 e8 5b 6c 21 00 fb 48 c7 c7 a0 bf b4 8e <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 fb 1b [ 1043.011613][ C1] RSP: 0018:ffffc90004e5f540 EFLAGS: 00000293 [ 1043.011632][ C1] RAX: ffffffff81a597a5 RBX: ffffffff81a5961f RCX: ffff88801d35be00 [ 1043.011649][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8eb4bfa0 [ 1043.011663][ C1] RBP: ffffc90004e5f5f0 R08: ffffffff90579137 R09: 1ffffffff20af226 [ 1043.011680][ C1] R10: dffffc0000000000 R11: fffffbfff20af227 R12: 0000000000000000 [ 1043.011696][ C1] R13: 0000000000000061 R14: 0000000000000200 R15: 1ffff920009cbeac [ 1043.011715][ C1] ? vprintk_emit+0x2cf/0x560 [ 1043.011740][ C1] ? vprintk_emit+0x455/0x560 [ 1043.011769][ C1] ? __lock_acquire+0x683/0x2cf0 [ 1043.011805][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 1043.011826][ C1] ? __lock_acquire+0x683/0x2cf0 [ 1043.011858][ C1] ? __dev_queue_xmit+0x29b/0x3820 [ 1043.011895][ C1] _printk+0xdd/0x130 [ 1043.011919][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1043.011952][ C1] ? __pfx__printk+0x10/0x10 [ 1043.011975][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.012005][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.012032][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.012058][ C1] ? ___ratelimit+0x584/0x8e0 [ 1043.012082][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.012118][ C1] should_fail_ex+0x3ed/0x560 [ 1043.012151][ C1] should_failslab+0xa8/0x100 [ 1043.012187][ C1] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 1043.012215][ C1] ? local_lock_release+0x9c/0x160 [ 1043.012238][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 1043.012259][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 1043.012288][ C1] __alloc_skb+0x1d7/0x7a0 [ 1043.012315][ C1] mld_newpack+0x165/0xcb0 [ 1043.012358][ C1] ? __pfx_mld_newpack+0x10/0x10 [ 1043.012390][ C1] ? trace_contention_end+0x3d/0x140 [ 1043.012418][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.012448][ C1] ? __mutex_lock+0x30d/0x1550 [ 1043.012477][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.012508][ C1] add_grec+0x119f/0x19d0 [ 1043.012545][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1043.012581][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.012612][ C1] mld_send_initial_cr+0x288/0x550 [ 1043.012647][ C1] mld_dad_work+0x3d/0x480 [ 1043.012678][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 1043.012705][ C1] process_scheduled_works+0xa8e/0x14e0 [ 1043.012761][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1043.012795][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.012820][ C1] ? assign_work+0x3cf/0x5d0 [ 1043.012853][ C1] worker_thread+0xa47/0xfb0 [ 1043.012909][ C1] kthread+0x388/0x470 [ 1043.012942][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1043.012972][ C1] ? __pfx_kthread+0x10/0x10 [ 1043.013007][ C1] ret_from_fork+0x514/0xb70 [ 1043.013044][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1043.013078][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.013103][ C1] ? __switch_to+0xc89/0x1420 [ 1043.013139][ C1] ? __pfx_kthread+0x10/0x10 [ 1043.013174][ C1] ret_from_fork_asm+0x1a/0x30 [ 1043.013213][ C1] [ 1043.013228][ C0] CPU: 0 UID: 0 PID: 5953 Comm: kworker/0:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 1043.013244][ C1] FAULT_INJECTION: forcing a failure. [ 1043.013244][ C1] name failslab, interval 1, probability 100, space 0, times 11 [ 1043.013258][ C0] Tainted: [L]=SOFTLOCKUP [ 1043.013268][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1043.013282][ C0] Workqueue: events nsim_fib_event_work [ 1043.013311][ C0] Call Trace: [ 1043.013320][ C0] [ 1043.013329][ C0] dump_stack_lvl+0xe8/0x150 [ 1043.013362][ C0] should_fail_ex+0x40c/0x560 [ 1043.013397][ C0] should_failslab+0xa8/0x100 [ 1043.013433][ C0] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 1043.013465][ C0] ? __alloc_skb+0x5a3/0x7a0 [ 1043.013485][ C0] ? __alloc_skb+0x5a3/0x7a0 [ 1043.013515][ C0] __alloc_skb+0x5a3/0x7a0 [ 1043.013542][ C0] __netdev_alloc_skb+0xc1/0x810 [ 1043.013565][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.013591][ C0] ? __ieee80211_beacon_get+0x36/0x1920 [ 1043.013626][ C0] __ieee80211_beacon_get+0xcfd/0x1920 [ 1043.013651][ C0] ? __ieee80211_beacon_get+0x36/0x1920 [ 1043.013682][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.013716][ C0] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 1043.013748][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 1043.013777][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.013802][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1043.013831][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.013863][ C0] mac80211_hwsim_beacon_tx+0x378/0x820 [ 1043.013892][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.013923][ C0] __iterate_interfaces+0x2af/0x5a0 [ 1043.013948][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1043.013977][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1043.014004][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1043.014032][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1043.014059][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1043.014083][ C0] mac80211_hwsim_beacon+0xaf/0x240 [ 1043.014106][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1043.014130][ C0] __hrtimer_run_queues+0x3bc/0xa10 [ 1043.014173][ C0] hrtimer_run_softirq+0x17a/0x240 [ 1043.014206][ C0] handle_softirqs+0x225/0x840 [ 1043.014237][ C0] ? __irq_exit_rcu+0xca/0x220 [ 1043.014272][ C0] __irq_exit_rcu+0xca/0x220 [ 1043.014300][ C0] irq_exit_rcu+0x9/0x30 [ 1043.014326][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1043.014350][ C0] [ 1043.014359][ C0] [ 1043.014368][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1043.014392][ C0] RIP: 0010:console_flush_all+0x7d2/0xaf0 [ 1043.014418][ C0] Code: ff ff e8 31 2f 21 00 90 0f 0b 90 e9 9c fc ff ff e8 23 2f 21 00 e8 3e 10 2b 0a 48 85 db 74 c0 e8 14 2f 21 00 fb 48 8b 5c 24 18 <48> 8b 44 24 28 42 80 3c 20 00 4d 8d 77 58 74 08 4c 89 f7 e8 56 c3 [ 1043.014441][ C0] RSP: 0018:ffffc9000597f300 EFLAGS: 00000293 [ 1043.014459][ C0] RAX: ffffffff81a5d4ec RBX: ffffc9000597f460 RCX: ffff88801fb29f00 [ 1043.014476][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1043.014490][ C0] RBP: ffffc9000597f410 R08: ffffffff90579137 R09: 1ffffffff20af226 [ 1043.014506][ C0] R10: dffffc0000000000 R11: fffffbfff20af227 R12: dffffc0000000000 [ 1043.014523][ C0] R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff8f46f6a0 [ 1043.014549][ C0] ? console_flush_all+0x7cc/0xaf0 [ 1043.014588][ C0] ? console_flush_all+0x123/0xaf0 [ 1043.014627][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 1043.014658][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.014684][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1043.014721][ C0] console_unlock+0xd1/0x1c0 [ 1043.014745][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.014773][ C0] ? __pfx_console_unlock+0x10/0x10 [ 1043.014795][ C0] ? vprintk_emit+0x2b1/0x560 [ 1043.014820][ C0] ? vprintk_emit+0x455/0x560 [ 1043.014843][ C0] ? vprintk_emit+0x2cf/0x560 [ 1043.014864][ C0] ? vprintk_emit+0x2cf/0x560 [ 1043.014889][ C0] vprintk_emit+0x485/0x560 [ 1043.014916][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 1043.014950][ C0] _printk+0xdd/0x130 [ 1043.014981][ C0] ? __pfx__printk+0x10/0x10 [ 1043.015008][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.015035][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.015062][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.015098][ C0] should_fail_ex+0x3ed/0x560 [ 1043.015131][ C0] should_failslab+0xa8/0x100 [ 1043.015167][ C0] __kmalloc_cache_noprof+0xa8/0x660 [ 1043.015197][ C0] ? stack_depot_save_flags+0x33/0x800 [ 1043.015226][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.015252][ C0] ? nsim_fib_event+0xf37/0xa390 [ 1043.015282][ C0] ? nsim_fib_event+0xf37/0xa390 [ 1043.015319][ C0] nsim_fib_event+0xf37/0xa390 [ 1043.015349][ C0] ? worker_thread+0xa47/0xfb0 [ 1043.015375][ C0] ? kthread+0x388/0x470 [ 1043.015434][ C0] ? __pfx_nsim_fib_event+0x10/0x10 [ 1043.015479][ C0] ? kasan_quarantine_put+0xbb/0x1f0 [ 1043.015513][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.015544][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.015579][ C0] nsim_fib_event_work+0x244/0x3b0 [ 1043.015612][ C0] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 1043.015651][ C0] ? rcu_is_watching+0x15/0xb0 [ 1043.015674][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.015702][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 1043.015729][ C0] process_scheduled_works+0xa8e/0x14e0 [ 1043.015785][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1043.015819][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.015844][ C0] ? assign_work+0x3cf/0x5d0 [ 1043.015876][ C0] worker_thread+0xa47/0xfb0 [ 1043.015906][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.015943][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.015968][ C0] ? __kthread_parkme+0x71/0x1f0 [ 1043.016009][ C0] kthread+0x388/0x470 [ 1043.016042][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1043.016069][ C0] ? __pfx_kthread+0x10/0x10 [ 1043.016103][ C0] ret_from_fork+0x514/0xb70 [ 1043.016141][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1043.016174][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.016199][ C0] ? __switch_to+0xc89/0x1420 [ 1043.016232][ C0] ? __pfx_kthread+0x10/0x10 [ 1043.016266][ C0] ret_from_fork_asm+0x1a/0x30 [ 1043.016305][ C0] [ 1043.016319][ C1] CPU: 1 UID: 0 PID: 5642 Comm: kworker/1:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 1043.016349][ C1] Tainted: [L]=SOFTLOCKUP [ 1043.016357][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1043.016373][ C1] Workqueue: mld mld_dad_work [ 1043.016381][ C0] FAULT_INJECTION: forcing a failure. [ 1043.016381][ C0] name failslab, interval 1, probability 100, space 0, times 9 [ 1043.016399][ C1] [ 1043.016406][ C1] Call Trace: [ 1043.016414][ C1] [ 1043.016423][ C1] dump_stack_lvl+0xe8/0x150 [ 1043.016456][ C1] should_fail_ex+0x40c/0x560 [ 1043.016490][ C1] should_failslab+0xa8/0x100 [ 1043.016525][ C1] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 1043.016553][ C1] ? local_lock_release+0x9c/0x160 [ 1043.016577][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 1043.016597][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 1043.016626][ C1] __alloc_skb+0x1d7/0x7a0 [ 1043.016654][ C1] __netdev_alloc_skb+0xc1/0x810 [ 1043.016677][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.016703][ C1] ? __ieee80211_beacon_get+0x36/0x1920 [ 1043.016732][ C1] __ieee80211_beacon_get+0xcfd/0x1920 [ 1043.016758][ C1] ? __ieee80211_beacon_get+0x36/0x1920 [ 1043.016789][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.016822][ C1] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 1043.016854][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 1043.016883][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.016909][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1043.016937][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.016969][ C1] mac80211_hwsim_beacon_tx+0x378/0x820 [ 1043.016997][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.017029][ C1] __iterate_interfaces+0x2af/0x5a0 [ 1043.017054][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1043.017081][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1043.017109][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1043.017142][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1043.017168][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1043.017192][ C1] mac80211_hwsim_beacon+0xaf/0x240 [ 1043.017214][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1043.017238][ C1] __hrtimer_run_queues+0x3bc/0xa10 [ 1043.017281][ C1] hrtimer_run_softirq+0x17a/0x240 [ 1043.017313][ C1] handle_softirqs+0x225/0x840 [ 1043.017344][ C1] ? __irq_exit_rcu+0xca/0x220 [ 1043.017379][ C1] __irq_exit_rcu+0xca/0x220 [ 1043.017407][ C1] irq_exit_rcu+0x9/0x30 [ 1043.017433][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1043.017457][ C1] [ 1043.017465][ C1] [ 1043.017474][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1043.017498][ C1] RIP: 0010:vprintk_emit+0x45d/0x560 [ 1043.017521][ C1] Code: 0f 84 44 ff ff ff e8 72 6c 21 00 fb eb 44 e8 6a 6c 21 00 e8 85 4d 2b 0a 4d 85 f6 74 94 e8 5b 6c 21 00 fb 48 c7 c7 a0 bf b4 8e <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 fb 1b [ 1043.017539][ C1] RSP: 0018:ffffc90004e5f540 EFLAGS: 00000293 [ 1043.017557][ C1] RAX: ffffffff81a597a5 RBX: ffffffff81a5961f RCX: ffff88801d35be00 [ 1043.017574][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8eb4bfa0 [ 1043.017589][ C1] RBP: ffffc90004e5f5f0 R08: ffffffff90579137 R09: 1ffffffff20af226 [ 1043.017605][ C1] R10: dffffc0000000000 R11: fffffbfff20af227 R12: 0000000000000000 [ 1043.017622][ C1] R13: 0000000000000061 R14: 0000000000000200 R15: 1ffff920009cbeac [ 1043.017641][ C1] ? vprintk_emit+0x2cf/0x560 [ 1043.017666][ C1] ? vprintk_emit+0x455/0x560 [ 1043.017695][ C1] ? __lock_acquire+0x683/0x2cf0 [ 1043.017729][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 1043.017751][ C1] ? __lock_acquire+0x683/0x2cf0 [ 1043.017782][ C1] ? __dev_queue_xmit+0x29b/0x3820 [ 1043.017819][ C1] _printk+0xdd/0x130 [ 1043.017844][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1043.017877][ C1] ? __pfx__printk+0x10/0x10 [ 1043.017899][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.017930][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.017957][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.017982][ C1] ? ___ratelimit+0x584/0x8e0 [ 1043.018006][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.018037][ C1] should_fail_ex+0x3ed/0x560 [ 1043.018070][ C1] should_failslab+0xa8/0x100 [ 1043.018106][ C1] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 1043.018141][ C1] ? local_lock_release+0x9c/0x160 [ 1043.018165][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 1043.018185][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 1043.018218][ C1] __alloc_skb+0x1d7/0x7a0 [ 1043.018245][ C1] mld_newpack+0x165/0xcb0 [ 1043.018287][ C1] ? __pfx_mld_newpack+0x10/0x10 [ 1043.018319][ C1] ? trace_contention_end+0x3d/0x140 [ 1043.018345][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.018371][ C1] ? __mutex_lock+0x30d/0x1550 [ 1043.018400][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.018431][ C1] add_grec+0x119f/0x19d0 [ 1043.018468][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1043.018509][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.018542][ C1] mld_send_initial_cr+0x288/0x550 [ 1043.018575][ C1] mld_dad_work+0x3d/0x480 [ 1043.018607][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 1043.018635][ C1] process_scheduled_works+0xa8e/0x14e0 [ 1043.018691][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1043.018724][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.018749][ C1] ? assign_work+0x3cf/0x5d0 [ 1043.018781][ C1] worker_thread+0xa47/0xfb0 [ 1043.018836][ C1] kthread+0x388/0x470 [ 1043.018870][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1043.018896][ C1] ? __pfx_kthread+0x10/0x10 [ 1043.018931][ C1] ret_from_fork+0x514/0xb70 [ 1043.018968][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1043.019001][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.019027][ C1] ? __switch_to+0xc89/0x1420 [ 1043.019059][ C1] ? __pfx_kthread+0x10/0x10 [ 1043.019120][ C1] ret_from_fork_asm+0x1a/0x30 [ 1043.019159][ C1] [ 1043.019173][ C0] CPU: 0 UID: 0 PID: 5953 Comm: kworker/0:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 1043.019203][ C0] Tainted: [L]=SOFTLOCKUP [ 1043.019212][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1043.019227][ C0] Workqueue: events nsim_fib_event_work [ 1043.019232][ C1] FAULT_INJECTION: forcing a failure. [ 1043.019232][ C1] name failslab, interval 1, probability 100, space 0, times 8 [ 1043.019254][ C0] [ 1043.019261][ C0] Call Trace: [ 1043.019270][ C0] [ 1043.019279][ C0] dump_stack_lvl+0xe8/0x150 [ 1043.019312][ C0] should_fail_ex+0x40c/0x560 [ 1043.019345][ C0] should_failslab+0xa8/0x100 [ 1043.019381][ C0] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 1043.019418][ C0] ? __alloc_skb+0x5a3/0x7a0 [ 1043.019439][ C0] ? __alloc_skb+0x5a3/0x7a0 [ 1043.019468][ C0] __alloc_skb+0x5a3/0x7a0 [ 1043.019496][ C0] __netdev_alloc_skb+0xc1/0x810 [ 1043.019518][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.019545][ C0] ? __ieee80211_beacon_get+0x36/0x1920 [ 1043.019575][ C0] __ieee80211_beacon_get+0xcfd/0x1920 [ 1043.019601][ C0] ? __ieee80211_beacon_get+0x36/0x1920 [ 1043.019637][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.019671][ C0] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 1043.019703][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 1043.019732][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.019757][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1043.019786][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.019818][ C0] mac80211_hwsim_beacon_tx+0x378/0x820 [ 1043.019847][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.019878][ C0] __iterate_interfaces+0x2af/0x5a0 [ 1043.019903][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1043.019931][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1043.019958][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1043.019986][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1043.020013][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1043.020036][ C0] mac80211_hwsim_beacon+0xaf/0x240 [ 1043.020059][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1043.020083][ C0] __hrtimer_run_queues+0x3bc/0xa10 [ 1043.020127][ C0] hrtimer_run_softirq+0x17a/0x240 [ 1043.020159][ C0] handle_softirqs+0x225/0x840 [ 1043.020191][ C0] ? __irq_exit_rcu+0xca/0x220 [ 1043.020226][ C0] __irq_exit_rcu+0xca/0x220 [ 1043.020254][ C0] irq_exit_rcu+0x9/0x30 [ 1043.020280][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1043.020305][ C0] [ 1043.020312][ C0] [ 1043.020322][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1043.020346][ C0] RIP: 0010:console_flush_all+0x7d2/0xaf0 [ 1043.020374][ C0] Code: ff ff e8 31 2f 21 00 90 0f 0b 90 e9 9c fc ff ff e8 23 2f 21 00 e8 3e 10 2b 0a 48 85 db 74 c0 e8 14 2f 21 00 fb 48 8b 5c 24 18 <48> 8b 44 24 28 42 80 3c 20 00 4d 8d 77 58 74 08 4c 89 f7 e8 56 c3 [ 1043.020392][ C0] RSP: 0018:ffffc9000597f300 EFLAGS: 00000293 [ 1043.020410][ C0] RAX: ffffffff81a5d4ec RBX: ffffc9000597f460 RCX: ffff88801fb29f00 [ 1043.020428][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1043.020441][ C0] RBP: ffffc9000597f410 R08: ffffffff90579137 R09: 1ffffffff20af226 [ 1043.020458][ C0] R10: dffffc0000000000 R11: fffffbfff20af227 R12: dffffc0000000000 [ 1043.020475][ C0] R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff8f46f6a0 [ 1043.020498][ C0] ? console_flush_all+0x7cc/0xaf0 [ 1043.020537][ C0] ? console_flush_all+0x123/0xaf0 [ 1043.020569][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 1043.020599][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.020630][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1043.020664][ C0] console_unlock+0xd1/0x1c0 [ 1043.020688][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.020716][ C0] ? __pfx_console_unlock+0x10/0x10 [ 1043.020738][ C0] ? vprintk_emit+0x2b1/0x560 [ 1043.020763][ C0] ? vprintk_emit+0x455/0x560 [ 1043.020786][ C0] ? vprintk_emit+0x2cf/0x560 [ 1043.020808][ C0] ? vprintk_emit+0x2cf/0x560 [ 1043.020833][ C0] vprintk_emit+0x485/0x560 [ 1043.020860][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 1043.020894][ C0] _printk+0xdd/0x130 [ 1043.020925][ C0] ? __pfx__printk+0x10/0x10 [ 1043.020952][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.020980][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.021007][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.021039][ C0] should_fail_ex+0x3ed/0x560 [ 1043.021073][ C0] should_failslab+0xa8/0x100 [ 1043.021109][ C0] __kmalloc_cache_noprof+0xa8/0x660 [ 1043.021139][ C0] ? stack_depot_save_flags+0x33/0x800 [ 1043.021168][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.021195][ C0] ? nsim_fib_event+0xf37/0xa390 [ 1043.021224][ C0] ? nsim_fib_event+0xf37/0xa390 [ 1043.021262][ C0] nsim_fib_event+0xf37/0xa390 [ 1043.021292][ C0] ? worker_thread+0xa47/0xfb0 [ 1043.021318][ C0] ? kthread+0x388/0x470 [ 1043.021379][ C0] ? __pfx_nsim_fib_event+0x10/0x10 [ 1043.021424][ C0] ? kasan_quarantine_put+0xbb/0x1f0 [ 1043.021457][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.021488][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.021522][ C0] nsim_fib_event_work+0x244/0x3b0 [ 1043.021556][ C0] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 1043.021590][ C0] ? rcu_is_watching+0x15/0xb0 [ 1043.021619][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.021648][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 1043.021676][ C0] process_scheduled_works+0xa8e/0x14e0 [ 1043.021733][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1043.021766][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.021793][ C0] ? assign_work+0x3cf/0x5d0 [ 1043.021826][ C0] worker_thread+0xa47/0xfb0 [ 1043.021856][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.021893][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.021919][ C0] ? __kthread_parkme+0x71/0x1f0 [ 1043.021960][ C0] kthread+0x388/0x470 [ 1043.021994][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1043.022021][ C0] ? __pfx_kthread+0x10/0x10 [ 1043.022056][ C0] ret_from_fork+0x514/0xb70 [ 1043.022093][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1043.022128][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.022153][ C0] ? __switch_to+0xc89/0x1420 [ 1043.022186][ C0] ? __pfx_kthread+0x10/0x10 [ 1043.022221][ C0] ret_from_fork_asm+0x1a/0x30 [ 1043.022261][ C0] [ 1043.022275][ C1] CPU: 1 UID: 0 PID: 5642 Comm: kworker/1:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 1043.022306][ C1] Tainted: [L]=SOFTLOCKUP [ 1043.022318][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1043.022335][ C0] FAULT_INJECTION: forcing a failure. [ 1043.022335][ C0] name failslab, interval 1, probability 100, space 0, times 6 [ 1043.022334][ C1] Workqueue: mld mld_dad_work [ 1043.022365][ C1] Call Trace: [ 1043.022374][ C1] [ 1043.022383][ C1] dump_stack_lvl+0xe8/0x150 [ 1043.022418][ C1] should_fail_ex+0x40c/0x560 [ 1043.022451][ C1] should_failslab+0xa8/0x100 [ 1043.022488][ C1] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 1043.022517][ C1] ? local_lock_release+0x9c/0x160 [ 1043.022540][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 1043.022561][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 1043.022591][ C1] __alloc_skb+0x1d7/0x7a0 [ 1043.022618][ C1] __netdev_alloc_skb+0xc1/0x810 [ 1043.022642][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.022668][ C1] ? __ieee80211_beacon_get+0x36/0x1920 [ 1043.022698][ C1] __ieee80211_beacon_get+0xcfd/0x1920 [ 1043.022725][ C1] ? __ieee80211_beacon_get+0x36/0x1920 [ 1043.022755][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.022790][ C1] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 1043.022822][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 1043.022851][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.022877][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1043.022906][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.022938][ C1] mac80211_hwsim_beacon_tx+0x378/0x820 [ 1043.022971][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.023003][ C1] __iterate_interfaces+0x2af/0x5a0 [ 1043.023028][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1043.023057][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1043.023085][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1043.023117][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1043.023145][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1043.023168][ C1] mac80211_hwsim_beacon+0xaf/0x240 [ 1043.023192][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1043.023216][ C1] __hrtimer_run_queues+0x3bc/0xa10 [ 1043.023260][ C1] hrtimer_run_softirq+0x17a/0x240 [ 1043.023293][ C1] handle_softirqs+0x225/0x840 [ 1043.023324][ C1] ? __irq_exit_rcu+0xca/0x220 [ 1043.023360][ C1] __irq_exit_rcu+0xca/0x220 [ 1043.023389][ C1] irq_exit_rcu+0x9/0x30 [ 1043.023415][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1043.023440][ C1] [ 1043.023448][ C1] [ 1043.023458][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1043.023482][ C1] RIP: 0010:vprintk_emit+0x45d/0x560 [ 1043.023505][ C1] Code: 0f 84 44 ff ff ff e8 72 6c 21 00 fb eb 44 e8 6a 6c 21 00 e8 85 4d 2b 0a 4d 85 f6 74 94 e8 5b 6c 21 00 fb 48 c7 c7 a0 bf b4 8e <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 fb 1b [ 1043.023524][ C1] RSP: 0018:ffffc90004e5f540 EFLAGS: 00000293 [ 1043.023542][ C1] RAX: ffffffff81a597a5 RBX: ffffffff81a5961f RCX: ffff88801d35be00 [ 1043.023559][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8eb4bfa0 [ 1043.023574][ C1] RBP: ffffc90004e5f5f0 R08: ffffffff90579137 R09: 1ffffffff20af226 [ 1043.023591][ C1] R10: dffffc0000000000 R11: fffffbfff20af227 R12: 0000000000000000 [ 1043.023607][ C1] R13: 0000000000000061 R14: 0000000000000200 R15: 1ffff920009cbeac [ 1043.023627][ C1] ? vprintk_emit+0x2cf/0x560 [ 1043.023652][ C1] ? vprintk_emit+0x455/0x560 [ 1043.023681][ C1] ? __lock_acquire+0x683/0x2cf0 [ 1043.023717][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 1043.023738][ C1] ? __lock_acquire+0x683/0x2cf0 [ 1043.023771][ C1] ? __dev_queue_xmit+0x29b/0x3820 [ 1043.023809][ C1] _printk+0xdd/0x130 [ 1043.023834][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1043.023867][ C1] ? __pfx__printk+0x10/0x10 [ 1043.023890][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.023921][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.023949][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.023975][ C1] ? ___ratelimit+0x584/0x8e0 [ 1043.023998][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.024031][ C1] should_fail_ex+0x3ed/0x560 [ 1043.024064][ C1] should_failslab+0xa8/0x100 [ 1043.024101][ C1] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 1043.024135][ C1] ? local_lock_release+0x9c/0x160 [ 1043.024158][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 1043.024179][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 1043.024208][ C1] __alloc_skb+0x1d7/0x7a0 [ 1043.024236][ C1] mld_newpack+0x165/0xcb0 [ 1043.024279][ C1] ? __pfx_mld_newpack+0x10/0x10 [ 1043.024311][ C1] ? trace_contention_end+0x3d/0x140 [ 1043.024337][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.024363][ C1] ? __mutex_lock+0x30d/0x1550 [ 1043.024394][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.024426][ C1] add_grec+0x119f/0x19d0 [ 1043.024464][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1043.024500][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.024532][ C1] mld_send_initial_cr+0x288/0x550 [ 1043.024567][ C1] mld_dad_work+0x3d/0x480 [ 1043.024599][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 1043.024627][ C1] process_scheduled_works+0xa8e/0x14e0 [ 1043.024684][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1043.024718][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.024744][ C1] ? assign_work+0x3cf/0x5d0 [ 1043.024777][ C1] worker_thread+0xa47/0xfb0 [ 1043.024833][ C1] kthread+0x388/0x470 [ 1043.024868][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1043.024894][ C1] ? __pfx_kthread+0x10/0x10 [ 1043.024930][ C1] ret_from_fork+0x514/0xb70 [ 1043.024968][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1043.025003][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.025029][ C1] ? __switch_to+0xc89/0x1420 [ 1043.025062][ C1] ? __pfx_kthread+0x10/0x10 [ 1043.025097][ C1] ret_from_fork_asm+0x1a/0x30 [ 1043.025140][ C1] [ 1043.025154][ C0] CPU: 0 UID: 0 PID: 5953 Comm: kworker/0:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 1043.025169][ C1] FAULT_INJECTION: forcing a failure. [ 1043.025169][ C1] name failslab, interval 1, probability 100, space 0, times 5 [ 1043.025185][ C0] Tainted: [L]=SOFTLOCKUP [ 1043.025194][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1043.025208][ C0] Workqueue: events nsim_fib_event_work [ 1043.025238][ C0] Call Trace: [ 1043.025246][ C0] [ 1043.025256][ C0] dump_stack_lvl+0xe8/0x150 [ 1043.025290][ C0] should_fail_ex+0x40c/0x560 [ 1043.025324][ C0] should_failslab+0xa8/0x100 [ 1043.025361][ C0] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 1043.025394][ C0] ? __alloc_skb+0x5a3/0x7a0 [ 1043.025415][ C0] ? __alloc_skb+0x5a3/0x7a0 [ 1043.025445][ C0] __alloc_skb+0x5a3/0x7a0 [ 1043.025476][ C0] __netdev_alloc_skb+0xc1/0x810 [ 1043.025499][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.025527][ C0] ? __ieee80211_beacon_get+0x36/0x1920 [ 1043.025557][ C0] __ieee80211_beacon_get+0xcfd/0x1920 [ 1043.025583][ C0] ? __ieee80211_beacon_get+0x36/0x1920 [ 1043.025620][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.025655][ C0] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 1043.025687][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 1043.025717][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.025743][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1043.025773][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.025805][ C0] mac80211_hwsim_beacon_tx+0x378/0x820 [ 1043.025834][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.025867][ C0] __iterate_interfaces+0x2af/0x5a0 [ 1043.025892][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1043.025922][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1043.025950][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1043.025979][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1043.026006][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1043.026030][ C0] mac80211_hwsim_beacon+0xaf/0x240 [ 1043.026053][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1043.026078][ C0] __hrtimer_run_queues+0x3bc/0xa10 [ 1043.026126][ C0] hrtimer_run_softirq+0x17a/0x240 [ 1043.026159][ C0] handle_softirqs+0x225/0x840 [ 1043.026192][ C0] ? __irq_exit_rcu+0xca/0x220 [ 1043.026227][ C0] __irq_exit_rcu+0xca/0x220 [ 1043.026257][ C0] irq_exit_rcu+0x9/0x30 [ 1043.026283][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1043.026308][ C0] [ 1043.026316][ C0] [ 1043.026325][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1043.026350][ C0] RIP: 0010:console_flush_all+0x7d2/0xaf0 [ 1043.026378][ C0] Code: ff ff e8 31 2f 21 00 90 0f 0b 90 e9 9c fc ff ff e8 23 2f 21 00 e8 3e 10 2b 0a 48 85 db 74 c0 e8 14 2f 21 00 fb 48 8b 5c 24 18 <48> 8b 44 24 28 42 80 3c 20 00 4d 8d 77 58 74 08 4c 89 f7 e8 56 c3 [ 1043.026396][ C0] RSP: 0018:ffffc9000597f300 EFLAGS: 00000293 [ 1043.026415][ C0] RAX: ffffffff81a5d4ec RBX: ffffc9000597f460 RCX: ffff88801fb29f00 [ 1043.026432][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1043.026446][ C0] RBP: ffffc9000597f410 R08: ffffffff90579137 R09: 1ffffffff20af226 [ 1043.026463][ C0] R10: dffffc0000000000 R11: fffffbfff20af227 R12: dffffc0000000000 [ 1043.026481][ C0] R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff8f46f6a0 [ 1043.026504][ C0] ? console_flush_all+0x7cc/0xaf0 [ 1043.026544][ C0] ? console_flush_all+0x123/0xaf0 [ 1043.026577][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 1043.026608][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.026640][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1043.026675][ C0] console_unlock+0xd1/0x1c0 [ 1043.026699][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.026728][ C0] ? __pfx_console_unlock+0x10/0x10 [ 1043.026751][ C0] ? vprintk_emit+0x2b1/0x560 [ 1043.026776][ C0] ? vprintk_emit+0x455/0x560 [ 1043.026799][ C0] ? vprintk_emit+0x2cf/0x560 [ 1043.026821][ C0] ? vprintk_emit+0x2cf/0x560 [ 1043.026848][ C0] vprintk_emit+0x485/0x560 [ 1043.026879][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 1043.026914][ C0] _printk+0xdd/0x130 [ 1043.026946][ C0] ? __pfx__printk+0x10/0x10 [ 1043.026973][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.027002][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.027029][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.027063][ C0] should_fail_ex+0x3ed/0x560 [ 1043.027097][ C0] should_failslab+0xa8/0x100 [ 1043.027134][ C0] __kmalloc_cache_noprof+0xa8/0x660 [ 1043.027165][ C0] ? stack_depot_save_flags+0x33/0x800 [ 1043.027195][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.027223][ C0] ? nsim_fib_event+0xf37/0xa390 [ 1043.027253][ C0] ? nsim_fib_event+0xf37/0xa390 [ 1043.027292][ C0] nsim_fib_event+0xf37/0xa390 [ 1043.027322][ C0] ? worker_thread+0xa47/0xfb0 [ 1043.027348][ C0] ? kthread+0x388/0x470 [ 1043.027410][ C0] ? __pfx_nsim_fib_event+0x10/0x10 [ 1043.027456][ C0] ? kasan_quarantine_put+0xbb/0x1f0 [ 1043.027489][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.027521][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.027557][ C0] nsim_fib_event_work+0x244/0x3b0 [ 1043.027591][ C0] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 1043.027631][ C0] ? rcu_is_watching+0x15/0xb0 [ 1043.027654][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.027683][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 1043.027711][ C0] process_scheduled_works+0xa8e/0x14e0 [ 1043.027769][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1043.027803][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.027830][ C0] ? assign_work+0x3cf/0x5d0 [ 1043.027863][ C0] worker_thread+0xa47/0xfb0 [ 1043.027894][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.027932][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.027958][ C0] ? __kthread_parkme+0x71/0x1f0 [ 1043.028000][ C0] kthread+0x388/0x470 [ 1043.028034][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1043.028061][ C0] ? __pfx_kthread+0x10/0x10 [ 1043.028097][ C0] ret_from_fork+0x514/0xb70 [ 1043.028136][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1043.028170][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.028197][ C0] ? __switch_to+0xc89/0x1420 [ 1043.028230][ C0] ? __pfx_kthread+0x10/0x10 [ 1043.028266][ C0] ret_from_fork_asm+0x1a/0x30 [ 1043.028306][ C0] [ 1043.028320][ C1] CPU: 1 UID: 0 PID: 5642 Comm: kworker/1:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 1043.028351][ C1] Tainted: [L]=SOFTLOCKUP [ 1043.028360][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1043.028377][ C0] FAULT_INJECTION: forcing a failure. [ 1043.028377][ C0] name failslab, interval 1, probability 100, space 0, times 3 [ 1043.028378][ C1] Workqueue: mld mld_dad_work [ 1043.028408][ C1] Call Trace: [ 1043.028417][ C1] [ 1043.028426][ C1] dump_stack_lvl+0xe8/0x150 [ 1043.028461][ C1] should_fail_ex+0x40c/0x560 [ 1043.028499][ C1] should_failslab+0xa8/0x100 [ 1043.028539][ C1] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 1043.028569][ C1] ? local_lock_release+0x9c/0x160 [ 1043.028593][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 1043.028614][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 1043.028645][ C1] __alloc_skb+0x1d7/0x7a0 [ 1043.028673][ C1] __netdev_alloc_skb+0xc1/0x810 [ 1043.028696][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.028725][ C1] ? __ieee80211_beacon_get+0x36/0x1920 [ 1043.028755][ C1] __ieee80211_beacon_get+0xcfd/0x1920 [ 1043.028781][ C1] ? __ieee80211_beacon_get+0x36/0x1920 [ 1043.028813][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.028848][ C1] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 1043.028881][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 1043.028911][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.028938][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1043.028968][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.029000][ C1] mac80211_hwsim_beacon_tx+0x378/0x820 [ 1043.029031][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.029063][ C1] __iterate_interfaces+0x2af/0x5a0 [ 1043.029089][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1043.029122][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1043.029152][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1043.029181][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1043.029209][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1043.029233][ C1] mac80211_hwsim_beacon+0xaf/0x240 [ 1043.029257][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1043.029281][ C1] __hrtimer_run_queues+0x3bc/0xa10 [ 1043.029326][ C1] hrtimer_run_softirq+0x17a/0x240 [ 1043.029359][ C1] handle_softirqs+0x225/0x840 [ 1043.029393][ C1] ? __irq_exit_rcu+0xca/0x220 [ 1043.029429][ C1] __irq_exit_rcu+0xca/0x220 [ 1043.029459][ C1] irq_exit_rcu+0x9/0x30 [ 1043.029486][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1043.029512][ C1] [ 1043.029520][ C1] [ 1043.029530][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1043.029555][ C1] RIP: 0010:vprintk_emit+0x45d/0x560 [ 1043.029579][ C1] Code: 0f 84 44 ff ff ff e8 72 6c 21 00 fb eb 44 e8 6a 6c 21 00 e8 85 4d 2b 0a 4d 85 f6 74 94 e8 5b 6c 21 00 fb 48 c7 c7 a0 bf b4 8e <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 fb 1b [ 1043.029598][ C1] RSP: 0018:ffffc90004e5f540 EFLAGS: 00000293 [ 1043.029617][ C1] RAX: ffffffff81a597a5 RBX: ffffffff81a5961f RCX: ffff88801d35be00 [ 1043.029635][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8eb4bfa0 [ 1043.029651][ C1] RBP: ffffc90004e5f5f0 R08: ffffffff90579137 R09: 1ffffffff20af226 [ 1043.029668][ C1] R10: dffffc0000000000 R11: fffffbfff20af227 R12: 0000000000000000 [ 1043.029685][ C1] R13: 0000000000000061 R14: 0000000000000200 R15: 1ffff920009cbeac [ 1043.029705][ C1] ? vprintk_emit+0x2cf/0x560 [ 1043.029730][ C1] ? vprintk_emit+0x455/0x560 [ 1043.029761][ C1] ? __lock_acquire+0x683/0x2cf0 [ 1043.029797][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 1043.029820][ C1] ? __lock_acquire+0x683/0x2cf0 [ 1043.029853][ C1] ? __dev_queue_xmit+0x29b/0x3820 [ 1043.029891][ C1] _printk+0xdd/0x130 [ 1043.029916][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1043.029951][ C1] ? __pfx__printk+0x10/0x10 [ 1043.029974][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.030006][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.030035][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.030062][ C1] ? ___ratelimit+0x584/0x8e0 [ 1043.030087][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.030126][ C1] should_fail_ex+0x3ed/0x560 [ 1043.030161][ C1] should_failslab+0xa8/0x100 [ 1043.030199][ C1] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 1043.030229][ C1] ? local_lock_release+0x9c/0x160 [ 1043.030253][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 1043.030274][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 1043.030305][ C1] __alloc_skb+0x1d7/0x7a0 [ 1043.030333][ C1] mld_newpack+0x165/0xcb0 [ 1043.030377][ C1] ? __pfx_mld_newpack+0x10/0x10 [ 1043.030410][ C1] ? trace_contention_end+0x3d/0x140 [ 1043.030438][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.030465][ C1] ? __mutex_lock+0x30d/0x1550 [ 1043.030495][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.030529][ C1] add_grec+0x119f/0x19d0 [ 1043.030567][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1043.030605][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.030638][ C1] mld_send_initial_cr+0x288/0x550 [ 1043.030678][ C1] mld_dad_work+0x3d/0x480 [ 1043.030711][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 1043.030739][ C1] process_scheduled_works+0xa8e/0x14e0 [ 1043.030797][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1043.030833][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.030860][ C1] ? assign_work+0x3cf/0x5d0 [ 1043.030893][ C1] worker_thread+0xa47/0xfb0 [ 1043.030951][ C1] kthread+0x388/0x470 [ 1043.030986][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1043.031014][ C1] ? __pfx_kthread+0x10/0x10 [ 1043.031050][ C1] ret_from_fork+0x514/0xb70 [ 1043.031089][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1043.031131][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.031160][ C1] ? __switch_to+0xc89/0x1420 [ 1043.031194][ C1] ? __pfx_kthread+0x10/0x10 [ 1043.031237][ C1] ret_from_fork_asm+0x1a/0x30 [ 1043.031277][ C1] [ 1043.031292][ C0] CPU: 0 UID: 0 PID: 5953 Comm: kworker/0:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 1043.031324][ C0] Tainted: [L]=SOFTLOCKUP [ 1043.031333][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1043.031346][ C1] FAULT_INJECTION: forcing a failure. [ 1043.031346][ C1] name failslab, interval 1, probability 100, space 0, times 2 [ 1043.031349][ C0] Workqueue: events nsim_fib_event_work [ 1043.031380][ C0] Call Trace: [ 1043.031389][ C0] [ 1043.031399][ C0] dump_stack_lvl+0xe8/0x150 [ 1043.031434][ C0] should_fail_ex+0x40c/0x560 [ 1043.031469][ C0] should_failslab+0xa8/0x100 [ 1043.031507][ C0] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 1043.031540][ C0] ? __alloc_skb+0x5a3/0x7a0 [ 1043.031561][ C0] ? __alloc_skb+0x5a3/0x7a0 [ 1043.031592][ C0] __alloc_skb+0x5a3/0x7a0 [ 1043.031630][ C0] __netdev_alloc_skb+0xc1/0x810 [ 1043.031654][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.031682][ C0] ? __ieee80211_beacon_get+0x36/0x1920 [ 1043.031712][ C0] __ieee80211_beacon_get+0xcfd/0x1920 [ 1043.031740][ C0] ? __ieee80211_beacon_get+0x36/0x1920 [ 1043.031772][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.031807][ C0] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 1043.031844][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 1043.031874][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.031901][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1043.031932][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.031965][ C0] mac80211_hwsim_beacon_tx+0x378/0x820 [ 1043.031995][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.032028][ C0] __iterate_interfaces+0x2af/0x5a0 [ 1043.032054][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1043.032084][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1043.032112][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1043.032143][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1043.032174][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1043.032199][ C0] mac80211_hwsim_beacon+0xaf/0x240 [ 1043.032223][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1043.032250][ C0] __hrtimer_run_queues+0x3bc/0xa10 [ 1043.032299][ C0] hrtimer_run_softirq+0x17a/0x240 [ 1043.032336][ C0] handle_softirqs+0x225/0x840 [ 1043.032369][ C0] ? __irq_exit_rcu+0xca/0x220 [ 1043.032406][ C0] __irq_exit_rcu+0xca/0x220 [ 1043.032437][ C0] irq_exit_rcu+0x9/0x30 [ 1043.032464][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1043.032490][ C0] [ 1043.032498][ C0] [ 1043.032508][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1043.032534][ C0] RIP: 0010:console_flush_all+0x7d2/0xaf0 [ 1043.032561][ C0] Code: ff ff e8 31 2f 21 00 90 0f 0b 90 e9 9c fc ff ff e8 23 2f 21 00 e8 3e 10 2b 0a 48 85 db 74 c0 e8 14 2f 21 00 fb 48 8b 5c 24 18 <48> 8b 44 24 28 42 80 3c 20 00 4d 8d 77 58 74 08 4c 89 f7 e8 56 c3 [ 1043.032580][ C0] RSP: 0018:ffffc9000597f300 EFLAGS: 00000293 [ 1043.032599][ C0] RAX: ffffffff81a5d4ec RBX: ffffc9000597f460 RCX: ffff88801fb29f00 [ 1043.032622][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1043.032636][ C0] RBP: ffffc9000597f410 R08: ffffffff90579137 R09: 1ffffffff20af226 [ 1043.032653][ C0] R10: dffffc0000000000 R11: fffffbfff20af227 R12: dffffc0000000000 [ 1043.032671][ C0] R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff8f46f6a0 [ 1043.032695][ C0] ? console_flush_all+0x7cc/0xaf0 [ 1043.032736][ C0] ? console_flush_all+0x123/0xaf0 [ 1043.032769][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 1043.032801][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.032828][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1043.032864][ C0] console_unlock+0xd1/0x1c0 [ 1043.032888][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.032918][ C0] ? __pfx_console_unlock+0x10/0x10 [ 1043.032941][ C0] ? vprintk_emit+0x2b1/0x560 [ 1043.032967][ C0] ? vprintk_emit+0x455/0x560 [ 1043.032991][ C0] ? vprintk_emit+0x2cf/0x560 [ 1043.033013][ C0] ? vprintk_emit+0x2cf/0x560 [ 1043.033039][ C0] vprintk_emit+0x485/0x560 [ 1043.033067][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 1043.033104][ C0] _printk+0xdd/0x130 [ 1043.033136][ C0] ? __pfx__printk+0x10/0x10 [ 1043.033164][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.033193][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.033221][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.033255][ C0] should_fail_ex+0x3ed/0x560 [ 1043.033289][ C0] should_failslab+0xa8/0x100 [ 1043.033327][ C0] __kmalloc_cache_noprof+0xa8/0x660 [ 1043.033358][ C0] ? stack_depot_save_flags+0x33/0x800 [ 1043.033388][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.033416][ C0] ? nsim_fib_event+0xf37/0xa390 [ 1043.033446][ C0] ? nsim_fib_event+0xf37/0xa390 [ 1043.033485][ C0] nsim_fib_event+0xf37/0xa390 [ 1043.033516][ C0] ? worker_thread+0xa47/0xfb0 [ 1043.033543][ C0] ? kthread+0x388/0x470 [ 1043.033606][ C0] ? __pfx_nsim_fib_event+0x10/0x10 [ 1043.033657][ C0] ? kasan_quarantine_put+0xbb/0x1f0 [ 1043.033690][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.033722][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.033759][ C0] nsim_fib_event_work+0x244/0x3b0 [ 1043.033794][ C0] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 1043.033828][ C0] ? rcu_is_watching+0x15/0xb0 [ 1043.033852][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.033881][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 1043.033909][ C0] process_scheduled_works+0xa8e/0x14e0 [ 1043.033968][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1043.034003][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.034030][ C0] ? assign_work+0x3cf/0x5d0 [ 1043.034064][ C0] worker_thread+0xa47/0xfb0 [ 1043.034096][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.034134][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.034161][ C0] ? __kthread_parkme+0x71/0x1f0 [ 1043.034203][ C0] kthread+0x388/0x470 [ 1043.034238][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1043.034266][ C0] ? __pfx_kthread+0x10/0x10 [ 1043.034302][ C0] ret_from_fork+0x514/0xb70 [ 1043.034341][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1043.034377][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.034404][ C0] ? __switch_to+0xc89/0x1420 [ 1043.034437][ C0] ? __pfx_kthread+0x10/0x10 [ 1043.034474][ C0] ret_from_fork_asm+0x1a/0x30 [ 1043.034513][ C0] [ 1043.034527][ C1] CPU: 1 UID: 0 PID: 5642 Comm: kworker/1:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 1043.034559][ C1] Tainted: [L]=SOFTLOCKUP [ 1043.034569][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1043.034585][ C1] Workqueue: mld mld_dad_work [ 1043.034617][ C1] Call Trace: [ 1043.034626][ C1] [ 1043.034635][ C1] dump_stack_lvl+0xe8/0x150 [ 1043.034672][ C1] should_fail_ex+0x40c/0x560 [ 1043.034708][ C1] should_failslab+0xa8/0x100 [ 1043.034749][ C1] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 1043.034781][ C1] ? local_lock_release+0x9c/0x160 [ 1043.034807][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 1043.034830][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 1043.034864][ C1] __alloc_skb+0x1d7/0x7a0 [ 1043.034894][ C1] __netdev_alloc_skb+0xc1/0x810 [ 1043.034920][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.034950][ C1] ? __ieee80211_beacon_get+0x36/0x1920 [ 1043.034983][ C1] __ieee80211_beacon_get+0xcfd/0x1920 [ 1043.035013][ C1] ? __ieee80211_beacon_get+0x36/0x1920 [ 1043.035047][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.035085][ C1] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 1043.035126][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 1043.035159][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.035188][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1043.035220][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.035256][ C1] mac80211_hwsim_beacon_tx+0x378/0x820 [ 1043.035289][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.035325][ C1] __iterate_interfaces+0x2af/0x5a0 [ 1043.035353][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1043.035387][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1043.035417][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1043.035449][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1043.035479][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1043.035506][ C1] mac80211_hwsim_beacon+0xaf/0x240 [ 1043.035532][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1043.035557][ C1] __hrtimer_run_queues+0x3bc/0xa10 [ 1043.035606][ C1] hrtimer_run_softirq+0x17a/0x240 [ 1043.035642][ C1] handle_softirqs+0x225/0x840 [ 1043.035678][ C1] ? __irq_exit_rcu+0xca/0x220 [ 1043.035718][ C1] __irq_exit_rcu+0xca/0x220 [ 1043.035750][ C1] irq_exit_rcu+0x9/0x30 [ 1043.035779][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1043.035807][ C1] [ 1043.035815][ C1] [ 1043.035825][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1043.035852][ C1] RIP: 0010:vprintk_emit+0x45d/0x560 [ 1043.035878][ C1] Code: 0f 84 44 ff ff ff e8 72 6c 21 00 fb eb 44 e8 6a 6c 21 00 e8 85 4d 2b 0a 4d 85 f6 74 94 e8 5b 6c 21 00 fb 48 c7 c7 a0 bf b4 8e <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 fb 1b [ 1043.035899][ C1] RSP: 0018:ffffc90004e5f540 EFLAGS: 00000293 [ 1043.035919][ C1] RAX: ffffffff81a597a5 RBX: ffffffff81a5961f RCX: ffff88801d35be00 [ 1043.035938][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8eb4bfa0 [ 1043.035955][ C1] RBP: ffffc90004e5f5f0 R08: ffffffff90579137 R09: 1ffffffff20af226 [ 1043.035974][ C1] R10: dffffc0000000000 R11: fffffbfff20af227 R12: 0000000000000000 [ 1043.035993][ C1] R13: 0000000000000061 R14: 0000000000000200 R15: 1ffff920009cbeac [ 1043.036015][ C1] ? vprintk_emit+0x2cf/0x560 [ 1043.036042][ C1] ? vprintk_emit+0x455/0x560 [ 1043.036074][ C1] ? __lock_acquire+0x683/0x2cf0 [ 1043.036112][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 1043.036145][ C1] ? __lock_acquire+0x683/0x2cf0 [ 1043.036182][ C1] ? __dev_queue_xmit+0x29b/0x3820 [ 1043.036226][ C1] _printk+0xdd/0x130 [ 1043.036255][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1043.036294][ C1] ? __pfx__printk+0x10/0x10 [ 1043.036320][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.036354][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.036383][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.036412][ C1] ? ___ratelimit+0x584/0x8e0 [ 1043.036437][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.036474][ C1] should_fail_ex+0x3ed/0x560 [ 1043.036511][ C1] should_failslab+0xa8/0x100 [ 1043.036551][ C1] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 1043.036584][ C1] ? local_lock_release+0x9c/0x160 [ 1043.036615][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 1043.036638][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 1043.036671][ C1] __alloc_skb+0x1d7/0x7a0 [ 1043.036702][ C1] mld_newpack+0x165/0xcb0 [ 1043.036747][ C1] ? __pfx_mld_newpack+0x10/0x10 [ 1043.036783][ C1] ? trace_contention_end+0x3d/0x140 [ 1043.036812][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.036840][ C1] ? __mutex_lock+0x30d/0x1550 [ 1043.036873][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.036909][ C1] add_grec+0x119f/0x19d0 [ 1043.036952][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1043.036993][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.037029][ C1] mld_send_initial_cr+0x288/0x550 [ 1043.037067][ C1] mld_dad_work+0x3d/0x480 [ 1043.037103][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 1043.037141][ C1] process_scheduled_works+0xa8e/0x14e0 [ 1043.037205][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1043.037243][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.037273][ C1] ? assign_work+0x3cf/0x5d0 [ 1043.037310][ C1] worker_thread+0xa47/0xfb0 [ 1043.037375][ C1] kthread+0x388/0x470 [ 1043.037414][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1043.037444][ C1] ? __pfx_kthread+0x10/0x10 [ 1043.037484][ C1] ret_from_fork+0x514/0xb70 [ 1043.037527][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1043.037566][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.037596][ C1] ? __switch_to+0xc89/0x1420 [ 1043.037633][ C1] ? __pfx_kthread+0x10/0x10 [ 1043.037672][ C1] ret_from_fork_asm+0x1a/0x30 [ 1043.037714][ C1] [ 1043.038356][ T80] CPU: 0 UID: 0 PID: 80 Comm: kworker/u8:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 1043.038398][ T80] Tainted: [L]=SOFTLOCKUP [ 1043.038408][ T80] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1043.038425][ T80] Workqueue: ipv6_addrconf addrconf_dad_work [ 1043.038459][ T80] Call Trace: [ 1043.038469][ T80] [ 1043.038478][ T80] dump_stack_lvl+0xe8/0x150 [ 1043.038513][ T80] should_fail_ex+0x40c/0x560 [ 1043.038547][ T80] should_failslab+0xa8/0x100 [ 1043.038580][ T80] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 1043.038607][ T80] ? local_lock_release+0x9c/0x160 [ 1043.038638][ T80] ? __alloc_skb+0x1d7/0x7a0 [ 1043.038658][ T80] ? __alloc_skb+0x1d7/0x7a0 [ 1043.038687][ T80] __alloc_skb+0x1d7/0x7a0 [ 1043.038715][ T80] __ipv6_ifa_notify+0x1d0/0xc60 [ 1043.038749][ T80] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.038788][ T80] ? __pfx___ipv6_ifa_notify+0x10/0x10 [ 1043.038832][ T80] ? __cancel_work+0x17f/0x230 [ 1043.038866][ T80] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.038895][ T80] ? lockdep_hardirqs_on+0x7a/0x110 [ 1043.038934][ T80] addrconf_dad_completed+0x1a1/0xe60 [ 1043.038977][ T80] ? __pfx_addrconf_dad_completed+0x10/0x10 [ 1043.039011][ T80] ? addrconf_dad_work+0xe57/0x15c0 [ 1043.039048][ T80] ? __local_bh_enable_ip+0xd0/0x130 [ 1043.039103][ T80] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.039135][ T80] addrconf_dad_work+0xcf8/0x15c0 [ 1043.039173][ T80] ? __pfx_addrconf_dad_work+0x10/0x10 [ 1043.039208][ T80] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.039248][ T80] ? rcu_is_watching+0x15/0xb0 [ 1043.039273][ T80] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.039305][ T80] ? process_scheduled_works+0xa20/0x14e0 [ 1043.039336][ T80] process_scheduled_works+0xa8e/0x14e0 [ 1043.039403][ T80] ? __pfx_process_scheduled_works+0x10/0x10 [ 1043.039442][ T80] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.039471][ T80] ? assign_work+0x3cf/0x5d0 [ 1043.039508][ T80] worker_thread+0xa47/0xfb0 [ 1043.039574][ T80] kthread+0x388/0x470 [ 1043.039612][ T80] ? __pfx_worker_thread+0x10/0x10 [ 1043.039648][ T80] ? __pfx_kthread+0x10/0x10 [ 1043.039688][ T80] ret_from_fork+0x514/0xb70 [ 1043.039730][ T80] ? __pfx_ret_from_fork+0x10/0x10 [ 1043.039769][ T80] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.039798][ T80] ? __switch_to+0xc89/0x1420 [ 1043.039835][ T80] ? __pfx_kthread+0x10/0x10 [ 1043.039874][ T80] ret_from_fork_asm+0x1a/0x30 [ 1043.039919][ T80] [ 1043.070817][ T5953] CPU: 0 UID: 0 PID: 5953 Comm: kworker/0:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 1043.070855][ T5953] Tainted: [L]=SOFTLOCKUP [ 1043.070865][ T5953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1043.070881][ T5953] Workqueue: events nsim_fib_event_work [ 1043.070921][ T5953] Call Trace: [ 1043.070931][ T5953] [ 1043.070942][ T5953] dump_stack_lvl+0xe8/0x150 [ 1043.070997][ T5953] should_fail_ex+0x40c/0x560 [ 1043.071037][ T5953] should_failslab+0xa8/0x100 [ 1043.071078][ T5953] __kmalloc_cache_noprof+0xa8/0x660 [ 1043.071112][ T5953] ? stack_depot_save_flags+0x33/0x800 [ 1043.071145][ T5953] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.071177][ T5953] ? nsim_fib_event+0xf37/0xa390 [ 1043.071209][ T5953] ? nsim_fib_event+0xf37/0xa390 [ 1043.071251][ T5953] nsim_fib_event+0xf37/0xa390 [ 1043.071284][ T5953] ? worker_thread+0xa47/0xfb0 [ 1043.071314][ T5953] ? kthread+0x388/0x470 [ 1043.071381][ T5953] ? __pfx_nsim_fib_event+0x10/0x10 [ 1043.071432][ T5953] ? kasan_quarantine_put+0xbb/0x1f0 [ 1043.071467][ T5953] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.071502][ T5953] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.071540][ T5953] nsim_fib_event_work+0x244/0x3b0 [ 1043.071578][ T5953] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 1043.071622][ T5953] ? rcu_is_watching+0x15/0xb0 [ 1043.071647][ T5953] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.071679][ T5953] ? process_scheduled_works+0xa20/0x14e0 [ 1043.071709][ T5953] process_scheduled_works+0xa8e/0x14e0 [ 1043.071773][ T5953] ? __pfx_process_scheduled_works+0x10/0x10 [ 1043.071811][ T5953] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.071839][ T5953] ? assign_work+0x3cf/0x5d0 [ 1043.071875][ T5953] worker_thread+0xa47/0xfb0 [ 1043.071910][ T5953] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.071951][ T5953] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.071979][ T5953] ? __kthread_parkme+0x71/0x1f0 [ 1043.072025][ T5953] kthread+0x388/0x470 [ 1043.072063][ T5953] ? __pfx_worker_thread+0x10/0x10 [ 1043.072092][ T5953] ? __pfx_kthread+0x10/0x10 [ 1043.072131][ T5953] ret_from_fork+0x514/0xb70 [ 1043.072173][ T5953] ? __pfx_ret_from_fork+0x10/0x10 [ 1043.072210][ T5953] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.072238][ T5953] ? __switch_to+0xc89/0x1420 [ 1043.072275][ T5953] ? __pfx_kthread+0x10/0x10 [ 1043.072314][ T5953] ret_from_fork_asm+0x1a/0x30 [ 1043.072357][ T5953] [ 1043.074307][T19956] CPU: 0 UID: 0 PID: 19956 Comm: syz.6.3728 Tainted: G L syzkaller #0 PREEMPT(full) [ 1043.074343][T19956] Tainted: [L]=SOFTLOCKUP [ 1043.074352][T19956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1043.074367][T19956] Call Trace: [ 1043.074377][T19956] [ 1043.074387][T19956] dump_stack_lvl+0xe8/0x150 [ 1043.074431][T19956] should_fail_ex+0x40c/0x560 [ 1043.074473][T19956] should_failslab+0xa8/0x100 [ 1043.074513][T19956] kmem_cache_alloc_lru_noprof+0xa7/0x5f0 [ 1043.074548][T19956] ? sock_alloc_inode+0x2c/0x1a0 [ 1043.074584][T19956] ? sock_alloc_inode+0x2c/0x1a0 [ 1043.074628][T19956] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.074662][T19956] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1043.074696][T19956] sock_alloc_inode+0x2c/0x1a0 [ 1043.074732][T19956] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1043.074765][T19956] alloc_inode+0x6a/0x1b0 [ 1043.074801][T19956] __sock_create+0x12d/0x9d0 [ 1043.074851][T19956] __sys_socket+0xd6/0x1b0 [ 1043.074890][T19956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1043.074918][T19956] __x64_sys_socket+0x7a/0x90 [ 1043.074958][T19956] do_syscall_64+0x174/0x580 [ 1043.074988][T19956] ? trace_irq_disable+0x3b/0x140 [ 1043.075028][T19956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1043.075054][T19956] RIP: 0033:0x7fecfeb9de99 [ 1043.075078][T19956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1043.075098][T19956] RSP: 002b:00007fecffa05028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1043.075122][T19956] RAX: ffffffffffffffda RBX: 00007fecfee25fa0 RCX: 00007fecfeb9de99 [ 1043.075141][T19956] RDX: 0000000000000300 RSI: 0000000000000003 RDI: 0000000000000011 [ 1043.075157][T19956] RBP: 00007fecfec33eaf R08: 0000000000000000 R09: 0000000000000000 [ 1043.075173][T19956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1043.075188][T19956] R13: 00007fecfee26038 R14: 00007fecfee25fa0 R15: 00007fff54ab2fe8 [ 1043.075227][T19956] [ 1043.092777][T12180] Bluetooth: hci16: command tx timeout [ 1043.949576][ C1] net_ratelimit: 3 callbacks suppressed [ 1043.949602][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1044.983656][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1045.070594][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1051.089909][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1051.098104][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1051.143225][ T5627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1051.151408][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1051.159712][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1051.162983][ T5642] CPU: 1 UID: 0 PID: 5642 Comm: kworker/1:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 1051.163020][ T5642] Tainted: [L]=SOFTLOCKUP [ 1051.163029][ T5642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1051.163046][ T5642] Workqueue: mld mld_dad_work [ 1051.163087][ T5642] Call Trace: [ 1051.163099][ T5642] [ 1051.163111][ T5642] dump_stack_lvl+0xe8/0x150 [ 1051.163158][ T5642] should_fail_ex+0x40c/0x560 [ 1051.163199][ T5642] should_failslab+0xa8/0x100 [ 1051.163242][ T5642] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 1051.163275][ T5642] ? local_lock_release+0x9c/0x160 [ 1051.163302][ T5642] ? __alloc_skb+0x1d7/0x7a0 [ 1051.163325][ T5642] ? __alloc_skb+0x1d7/0x7a0 [ 1051.163358][ T5642] __alloc_skb+0x1d7/0x7a0 [ 1051.163390][ T5642] mld_newpack+0x165/0xcb0 [ 1051.163438][ T5642] ? __pfx_mld_newpack+0x10/0x10 [ 1051.163474][ T5642] ? trace_contention_end+0x3d/0x140 [ 1051.163505][ T5642] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1051.163535][ T5642] ? __mutex_lock+0x30d/0x1550 [ 1051.163569][ T5642] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1051.163605][ T5642] add_grec+0x119f/0x19d0 [ 1051.163647][ T5642] ? __pfx___mutex_lock+0x10/0x10 [ 1051.163688][ T5642] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1051.163724][ T5642] mld_send_initial_cr+0x288/0x550 [ 1051.163763][ T5642] mld_dad_work+0x3d/0x480 [ 1051.163802][ T5642] ? process_scheduled_works+0xa20/0x14e0 [ 1051.163833][ T5642] process_scheduled_works+0xa8e/0x14e0 [ 1051.163900][ T5642] ? __pfx_process_scheduled_works+0x10/0x10 [ 1051.163938][ T5642] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1051.163966][ T5642] ? assign_work+0x3cf/0x5d0 [ 1051.164004][ T5642] worker_thread+0xa47/0xfb0 [ 1051.164070][ T5642] kthread+0x388/0x470 [ 1051.164111][ T5642] ? __pfx_worker_thread+0x10/0x10 [ 1051.164146][ T5642] ? __pfx_kthread+0x10/0x10 [ 1051.164185][ T5642] ret_from_fork+0x514/0xb70 [ 1051.164229][ T5642] ? __pfx_ret_from_fork+0x10/0x10 [ 1051.164267][ T5642] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1051.164296][ T5642] ? __switch_to+0xc89/0x1420 [ 1051.164333][ T5642] ? __pfx_kthread+0x10/0x10 [ 1051.164373][ T5642] ret_from_fork_asm+0x1a/0x30 [ 1051.164418][ T5642] [ 1051.167828][ T5631] Bluetooth: hci16: command tx timeout [ 1051.198673][T19438] Bluetooth: hci1: command 0x0406 tx timeout [ 1051.202512][ T5783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1051.531340][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1051.812693][T19438] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1051.827351][T19438] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1051.838756][T19438] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1051.850521][T19438] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1051.858360][T19438] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1052.014510][T14644] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1052.047194][T14644] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1052.253607][T16713] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.258700][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1052.281304][ T5783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1052.373922][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1052.385940][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1052.545844][T12180] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 1052.564087][T16713] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.576222][T12180] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 1052.593941][T12180] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 1052.603569][T12180] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 1052.611466][T12180] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 1052.848843][T16713] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.043327][T16713] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.219125][T12180] Bluetooth: hci16: command tx timeout [ 1053.299611][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1053.901262][T19926] bridge0: port 1(bridge_slave_0) entered blocking state [ 1053.909597][T19926] bridge0: port 1(bridge_slave_0) entered disabled state [ 1053.918093][T19926] bridge_slave_0: entered allmulticast mode [ 1053.927398][T19926] bridge_slave_0: entered promiscuous mode [ 1053.938691][T12180] Bluetooth: hci14: command tx timeout [ 1053.984004][T19926] bridge0: port 2(bridge_slave_1) entered blocking state [ 1053.998901][T19926] bridge0: port 2(bridge_slave_1) entered disabled state [ 1054.007853][T19926] bridge_slave_1: entered allmulticast mode [ 1054.020346][T19926] bridge_slave_1: entered promiscuous mode [ 1054.043041][T20015] syzkaller0: entered promiscuous mode [ 1054.049277][T20015] syzkaller0: entered allmulticast mode [ 1054.073463][T16713] bridge_slave_1: left allmulticast mode [ 1054.089600][T16713] bridge_slave_1: left promiscuous mode [ 1054.100379][T16713] bridge0: port 2(bridge_slave_1) entered disabled state [ 1054.111790][T16713] bridge_slave_0: left allmulticast mode [ 1054.125919][T16713] bridge_slave_0: left promiscuous mode [ 1054.134375][T16713] bridge0: port 1(bridge_slave_0) entered disabled state [ 1054.193761][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.202517][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.549312][T16713] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1054.565395][T16713] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1054.583891][T16713] bond0 (unregistering): Released all slaves [ 1054.674699][T12180] Bluetooth: hci17: command tx timeout [ 1054.716679][T20029] bridge0: port 3(syz_tun) entered blocking state [ 1054.723602][T20029] bridge0: port 3(syz_tun) entered disabled state [ 1054.730468][T20029] syz_tun: entered allmulticast mode [ 1054.738098][T20029] syz_tun: entered promiscuous mode [ 1054.756392][T20029] bridge0: port 3(syz_tun) entered blocking state [ 1054.763058][T20029] bridge0: port 3(syz_tun) entered forwarding state [ 1054.851541][T19926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1054.865090][T19926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1054.942044][ T5280] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1055.155537][T19438] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 1055.170341][T19438] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 1055.187052][T19438] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 1055.204293][T19438] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 1055.217666][T19438] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 1055.446713][T19926] team0: Port device team_slave_0 added [ 1055.456510][T19926] team0: Port device team_slave_1 added [ 1055.688376][T16713] hsr_slave_0: left promiscuous mode [ 1055.708484][T16713] hsr_slave_1: left promiscuous mode [ 1055.720459][T16713] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1055.741056][T16713] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1055.753846][T16713] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1055.771822][T16713] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1055.795130][T16713] veth1_macvtap: left promiscuous mode [ 1055.811662][T16713] veth0_macvtap: left promiscuous mode [ 1055.817556][T16713] veth1_vlan: left promiscuous mode [ 1055.823222][T16713] veth0_vlan: left promiscuous mode [ 1056.019663][T12180] Bluetooth: hci14: command tx timeout [ 1056.366933][T16713] team0 (unregistering): Port device team_slave_1 removed [ 1056.387895][T16713] team0 (unregistering): Port device team_slave_0 removed [ 1056.419274][ C1] net_ratelimit: 6 callbacks suppressed [ 1056.419299][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1056.440531][T15572] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1056.567612][T19926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1056.575016][T19926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1056.604939][T19926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1056.628953][T19926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1056.637812][T19926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1056.664991][T19926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1056.745760][T12180] Bluetooth: hci17: command tx timeout [ 1056.766146][ T5280] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1057.381100][T12180] Bluetooth: hci18: command tx timeout [ 1057.457853][T19926] hsr_slave_0: entered promiscuous mode [ 1057.464772][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1057.479961][ T5783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1057.502477][T19926] hsr_slave_1: entered promiscuous mode [ 1057.512331][T19926] debugfs: 'hsr0' already exists in 'hsr' [ 1057.514810][T20052] infiniband syz0: set active [ 1057.523017][T20052] infiniband syz0: added veth0 [ 1057.525977][T19926] Cannot create hsr debugfs directory [ 1057.531853][T20052] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 1057.542132][T20052] infiniband syz0: Couldn't open port 1 [ 1057.556748][T20052] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1057.572091][T20052] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1057.590266][T20052] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1057.620611][ T5757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1057.631372][T14644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1057.646658][ T5783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1057.649962][T20052] RDS/IB: syz0: added [ 1057.663398][ T5757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1057.691849][T20052] smc: adding ib device syz0 with port count 1 [ 1057.715781][T20052] smc: ib device syz0 port 1 has no pnetid [ 1057.962288][T19965] bridge0: port 1(bridge_slave_0) entered blocking state [ 1057.978208][T19965] bridge0: port 1(bridge_slave_0) entered disabled state [ 1058.004600][T19965] bridge_slave_0: entered allmulticast mode [ 1058.025375][T19965] bridge_slave_0: entered promiscuous mode [ 1058.100381][T12180] Bluetooth: hci14: command tx timeout [ 1058.168327][T19965] bridge0: port 2(bridge_slave_1) entered blocking state [ 1058.180513][T19965] bridge0: port 2(bridge_slave_1) entered disabled state [ 1058.196084][T19965] bridge_slave_1: entered allmulticast mode [ 1058.221315][T19965] bridge_slave_1: entered promiscuous mode [ 1058.499227][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1058.508287][T15572] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1058.681661][T19979] bridge0: port 1(bridge_slave_0) entered blocking state [ 1058.689615][T19979] bridge0: port 1(bridge_slave_0) entered disabled state [ 1058.696964][T19979] bridge_slave_0: entered allmulticast mode [ 1058.708981][T19979] bridge_slave_0: entered promiscuous mode [ 1058.724236][T19965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1058.741009][T19965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1058.785924][ T5280] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1058.795914][T19979] bridge0: port 2(bridge_slave_1) entered blocking state [ 1058.803914][T19979] bridge0: port 2(bridge_slave_1) entered disabled state [ 1058.812140][T19979] bridge_slave_1: entered allmulticast mode [ 1058.819995][T12180] Bluetooth: hci17: command tx timeout [ 1058.820877][T19979] bridge_slave_1: entered promiscuous mode [ 1058.963327][T19965] team0: Port device team_slave_0 added [ 1058.988128][T19965] team0: Port device team_slave_1 added [ 1059.040816][T19979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1059.247056][T19965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1059.271499][T19965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1059.345855][T19965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1059.365729][T19979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1059.460832][T12180] Bluetooth: hci18: command tx timeout [ 1059.518924][T19926] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.546038][T19965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1059.568385][T19965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1059.627778][T19965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1059.758086][T19979] team0: Port device team_slave_0 added [ 1059.903383][T19979] team0: Port device team_slave_1 added [ 1060.006625][T19965] hsr_slave_0: entered promiscuous mode [ 1060.015148][T19965] hsr_slave_1: entered promiscuous mode [ 1060.022058][T19965] debugfs: 'hsr0' already exists in 'hsr' [ 1060.039080][T19965] Cannot create hsr debugfs directory [ 1060.130750][ T5280] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1060.178629][T12180] Bluetooth: hci14: command tx timeout [ 1060.187652][T19979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1060.195631][T19979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1060.235775][T19979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1060.282338][T19979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1060.299264][T19979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1060.358368][T19979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1060.640390][T19979] hsr_slave_0: entered promiscuous mode [ 1060.647401][T19979] hsr_slave_1: entered promiscuous mode [ 1060.654749][T19979] debugfs: 'hsr0' already exists in 'hsr' [ 1060.663802][T19979] Cannot create hsr debugfs directory [ 1060.899331][T12180] Bluetooth: hci17: command tx timeout [ 1060.957206][T20046] bridge0: port 1(bridge_slave_0) entered blocking state [ 1060.964981][T20046] bridge0: port 1(bridge_slave_0) entered disabled state [ 1060.975015][T20046] bridge_slave_0: entered allmulticast mode [ 1060.983258][T20046] bridge_slave_0: entered promiscuous mode [ 1060.993261][T20046] bridge0: port 2(bridge_slave_1) entered blocking state [ 1061.000564][T20046] bridge0: port 2(bridge_slave_1) entered disabled state [ 1061.007934][T20046] bridge_slave_1: entered allmulticast mode [ 1061.017010][T20046] bridge_slave_1: entered promiscuous mode [ 1061.107350][T20046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1061.141775][T20046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1061.252397][T20046] team0: Port device team_slave_0 added [ 1061.272669][T20046] team0: Port device team_slave_1 added [ 1061.367853][T20046] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1061.375292][T20046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1061.384097][T12180] Bluetooth: hci7: command 0x0406 tx timeout [ 1061.403109][T20046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1061.432439][T20046] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1061.439777][T20046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1061.466453][T20046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1061.540275][T19438] Bluetooth: hci18: command tx timeout [ 1061.596806][T20046] hsr_slave_0: entered promiscuous mode [ 1061.604888][T20046] hsr_slave_1: entered promiscuous mode [ 1061.612285][T20046] debugfs: 'hsr0' already exists in 'hsr' [ 1061.619826][ C1] net_ratelimit: 6 callbacks suppressed [ 1061.619844][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1061.626903][T20046] Cannot create hsr debugfs directory [ 1061.637266][ T5783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1062.660534][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1062.670186][ T5783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1063.141574][T14638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1063.150720][ T5757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1063.161506][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1063.619552][T19438] Bluetooth: hci18: command tx timeout [ 1063.709643][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1063.718928][ T5783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1064.071400][T20055] infiniband syz1: set active [ 1064.076241][T20055] infiniband syz1: added veth1 [ 1064.083497][T20055] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 1064.089053][T20055] infiniband syz1: Couldn't open port 1 [ 1064.111185][T20055] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1064.126669][T20055] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1064.144034][T20055] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1064.184708][T20055] RDS/IB: syz1: added [ 1064.191625][T20055] smc: adding ib device syz1 with port count 1 [ 1064.218817][T20055] smc: ib device syz1 port 1 has no pnetid [ 1064.230408][T19926] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.380143][T19926] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.474610][T20158] syzkaller0: entered promiscuous mode [ 1064.498747][T20158] syzkaller0: entered allmulticast mode [ 1064.571333][T19926] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.740780][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1064.838240][T19965] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.939885][T20165] smc: net device dummy0 applied user defined pnetid SYZ0 [ 1064.988482][T19965] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1066.829455][ C1] net_ratelimit: 4 callbacks suppressed [ 1066.829473][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1066.844631][ T5783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1067.859692][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1067.868692][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1068.455615][T20164] rdma_rxe: rxe_newlink: failed to add dummy0 [ 1068.901079][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1068.911290][T16712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1069.021471][ T5628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1069.030694][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1069.040028][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1069.053836][T19965] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.938983][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1071.459482][ T32] INFO: task syz.7.3344:17559 blocked for more than 149 seconds. [ 1071.469748][ T32] Tainted: G L syzkaller #0 [ 1071.476270][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1071.518630][ T32] task:syz.7.3344 state:D stack:28424 pid:17559 tgid:17551 ppid:8580 task_flags:0x400040 flags:0x00080002 [ 1071.578895][ T32] Call Trace: [ 1071.591711][ T32] [ 1071.604076][ T32] __schedule+0x17d9/0x56c0 [ 1071.622646][ T32] ? __lock_acquire+0x683/0x2cf0 [ 1071.689290][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1071.703082][ T5631] Bluetooth: hci8: command 0x0406 tx timeout [ 1071.709312][ T5631] Bluetooth: hci9: command 0x0406 tx timeout [ 1071.732901][ T32] ? __pfx___schedule+0x10/0x10 [ 1071.823059][ T32] ? schedule+0x90/0x2b0 [ 1071.832241][ T32] schedule+0x164/0x2b0 [ 1071.838046][ T32] schedule_preempt_disabled+0x13/0x30 [ 1071.853327][ T32] __mutex_lock+0x7bf/0x1550 [ 1071.863178][T20193] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1071.874732][ T32] ? nfsctl_transaction_write+0xc7/0x160 [ 1071.881899][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1071.902781][ T32] ? write_threads+0x39d/0x5a0 [ 1071.910289][T20193] PM: Image not found (code -6) [ 1071.981522][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1071.989383][ T32] ? simple_strntoull+0x111/0x190 [ 1071.997957][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1072.008139][ T32] ? qword_get+0x5ad/0x650 [ 1072.015264][ T32] write_threads+0x39d/0x5a0 [ 1072.020340][ C1] net_ratelimit: 3 callbacks suppressed [ 1072.020359][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1072.085352][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1072.093704][ T5783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1072.109002][ T5757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1072.127359][ T32] ? __pfx_write_threads+0x10/0x10 [ 1072.138567][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1072.150664][ T32] ? _copy_from_user+0x94/0xb0 [ 1072.161865][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1072.192041][ T32] ? simple_transaction_get+0x12d/0x160 [ 1072.198913][ T32] nfsctl_transaction_write+0x10f/0x160 [ 1072.210522][ T32] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 1072.230791][ T32] vfs_write+0x296/0xba0 [ 1072.235676][ T32] ? __pfx_vfs_write+0x10/0x10 [ 1072.249032][ T32] ? __fget_files+0x2a/0x420 [ 1072.255247][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1072.268707][ T32] ? __fget_files+0x3a2/0x420 [ 1072.279159][ T32] ? __fget_files+0x2a/0x420 [ 1072.299136][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1072.307763][ T32] ksys_write+0x150/0x270 [ 1072.318559][ T32] ? __pfx_ksys_write+0x10/0x10 [ 1072.328714][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1072.334947][ T32] do_syscall_64+0x174/0x580 [ 1072.340391][ T32] ? trace_irq_disable+0x3b/0x140 [ 1072.345662][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1072.353768][ T32] RIP: 0033:0x7f885319de99 [ 1072.358225][ T32] RSP: 002b:00007f88540c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1072.366813][ T32] RAX: ffffffffffffffda RBX: 00007f8853426090 RCX: 00007f885319de99 [ 1072.375082][ T32] RDX: 0000000000000003 RSI: 0000200000000340 RDI: 0000000000000003 [ 1072.383309][ T32] RBP: 00007f8853233eaf R08: 0000000000000000 R09: 0000000000000000 [ 1072.395856][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1072.404020][ T32] R13: 00007f8853426128 R14: 00007f8853426090 R15: 00007fff3f8acb38 [ 1072.412449][ T32] [ 1072.420608][ T32] INFO: task syz.3.3389:17896 blocked for more than 150 seconds. [ 1072.429220][ T32] Tainted: G L syzkaller #0 [ 1072.435960][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1072.454301][ T32] task:syz.3.3389 state:D stack:27304 pid:17896 tgid:17895 ppid:5620 task_flags:0x400140 flags:0x00080002 [ 1072.475573][ T32] Call Trace: [ 1072.479237][ T32] [ 1072.482208][ T32] __schedule+0x17d9/0x56c0 [ 1072.492024][ T32] ? __pfx___schedule+0x10/0x10 [ 1072.496939][ T32] ? schedule+0x90/0x2b0 [ 1072.502925][ T32] schedule+0x164/0x2b0 [ 1072.507429][ T32] schedule_preempt_disabled+0x13/0x30 [ 1072.514443][ T32] __mutex_lock+0x7bf/0x1550 [ 1072.519580][ T32] ? kasan_save_track+0x3e/0x80 [ 1072.524488][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1072.530654][ T32] ? write_ports+0xb5/0xd10 [ 1072.535263][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1072.541604][ T32] write_ports+0xb5/0xd10 [ 1072.545991][ T32] ? __pfx_write_ports+0x10/0x10 [ 1072.551523][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1072.557639][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1072.563774][ T32] ? _copy_from_user+0x94/0xb0 [ 1072.568922][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1072.574611][ T32] ? simple_transaction_get+0x12d/0x160 [ 1072.581069][ T32] nfsctl_transaction_write+0x10f/0x160 [ 1072.586672][ T32] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 1072.597780][ T32] vfs_write+0x296/0xba0 [ 1072.602381][ T32] ? __pfx_vfs_write+0x10/0x10 [ 1072.607188][ T32] ? __fget_files+0x2a/0x420 [ 1072.612210][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1072.617917][ T32] ? __fget_files+0x3a2/0x420 [ 1072.623213][ T32] ? __fget_files+0x2a/0x420 [ 1072.627868][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1072.634212][ T32] ksys_write+0x150/0x270 [ 1072.641429][ T32] ? __pfx_ksys_write+0x10/0x10 [ 1072.646364][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1072.652793][ T32] do_syscall_64+0x174/0x580 [ 1072.657735][ T32] ? trace_irq_disable+0x3b/0x140 [ 1072.670908][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1072.676862][ T32] RIP: 0033:0x7f4f9b79de99 [ 1072.681801][ T32] RSP: 002b:00007f4f9c752028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1072.697234][ T32] RAX: ffffffffffffffda RBX: 00007f4f9ba25fa0 RCX: 00007f4f9b79de99 [ 1072.705592][ T32] RDX: 0000000000000009 RSI: 0000200000000300 RDI: 0000000000000003 [ 1072.714069][ T32] RBP: 00007f4f9b833eaf R08: 0000000000000000 R09: 0000000000000000 [ 1072.722507][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1072.730890][ T32] R13: 00007f4f9ba26038 R14: 00007f4f9ba25fa0 R15: 00007fff74439928 [ 1072.742693][ T32] [ 1072.760643][ T32] [ 1072.760643][ T32] Showing all locks held in the system: [ 1072.768466][ T32] 1 lock held by ksoftirqd/1/23: [ 1072.773766][ T32] 2 locks held by kworker/1:0/24: [ 1072.778956][ T32] 1 lock held by khungtaskd/32: [ 1072.798985][ T32] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1072.809170][ T32] 1 lock held by klogd/4974: [ 1072.813781][ T32] #0: ffff8880b863b160 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb2/0x160 [ 1072.823887][ T32] 1 lock held by dhcpcd/5280: [ 1072.828639][ T32] #0: ffffffff9002d700 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newroute+0x12b/0x250 [ 1072.838101][ T32] 2 locks held by getty/5374: [ 1072.843177][ T32] #0: ffff8880329d80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1072.854888][ T32] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1072.865169][ T32] 5 locks held by kworker/u8:14/7826: [ 1072.870668][ T32] 5 locks held by kworker/u9:0/12180: [ 1072.876048][ T32] #0: ffff888051046140 ((wq_completion)hci8){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1072.890232][ T32] #1: ffffc900066b7c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1072.906464][ T32] #2: ffff88804aa50ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 1072.918001][ T32] #3: ffff88804aa500b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 1072.927926][ T32] #4: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1072.940349][ T32] 3 locks held by kworker/u8:22/14650: [ 1072.945847][ T32] #0: ffff88801b064140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1072.958050][ T32] #1: ffffc90005777c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1072.969701][ T32] #2: ffffffff9002d700 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1072.979457][ T32] 3 locks held by syz.7.3344/17552: [ 1072.984685][ T32] #0: ffff8880770555f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1072.994308][ T32] #1: ffff88807c6ce450 (sb_writers#26){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1073.007977][ T32] #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 1073.017217][ T32] 3 locks held by syz.7.3344/17559: [ 1073.022545][ T32] #0: ffff888053deab70 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1073.033296][ T32] #1: ffff88807c6ce450 (sb_writers#26){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1073.042426][ T32] #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x39d/0x5a0 [ 1073.051610][ T32] 3 locks held by syz.3.3389/17896: [ 1073.056817][ T32] #0: ffff88803267eef0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1073.066467][ T32] #1: ffff88804b3e4450 (sb_writers#26){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1073.069141][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1073.075919][ T32] #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 1073.093000][ T32] 3 locks held by syz.6.3397/17971: [ 1073.098305][ T32] #0: ffff8880122ca9b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1073.110622][ T32] #1: ffff888028eb8450 (sb_writers#26){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1073.119780][ T32] #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 1073.128967][ T32] 3 locks held by syz.6.3397/17974: [ 1073.134160][ T32] #0: ffff8880352c80f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1073.148371][ T32] #1: ffff888028eb8450 (sb_writers#26){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1073.157941][ T32] #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 1073.158107][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1073.166909][ T32] 3 locks held by syz.6.3397/17975: [ 1073.166929][ T32] #0: ffff88807ef7ab70 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1073.189827][ T32] #1: ffff888028eb8450 (sb_writers#26){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1073.198926][ T32] #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x39d/0x5a0 [ 1073.211074][ T32] 3 locks held by syz.5.3403/18012: [ 1073.216291][ T32] #0: ffff8880563a57b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1073.225522][ T32] #1: ffff888012206450 (sb_writers#26){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1073.234633][ T32] #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 1073.243770][ T32] 3 locks held by syz.5.3403/18014: [ 1073.249025][ T32] #0: ffff8880665d5cf0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1073.258197][ T32] #1: ffff888012206450 (sb_writers#26){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1073.267284][ T32] #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 1073.276205][ T32] 3 locks held by syz.5.3403/18016: [ 1073.281483][ T32] #0: ffff88807987ed30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1073.290657][ T32] #1: ffff888012206450 (sb_writers#26){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1073.299949][ T32] #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x39d/0x5a0 [ 1073.312454][ T32] 3 locks held by syz.0.3522/18801: [ 1073.317711][ T32] #0: ffff88807f026630 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1073.326895][ T32] #1: ffff88807a8d4450 (sb_writers#26){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1073.336022][ T32] #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 1073.345217][ T32] 3 locks held by syz.0.3522/18804: [ 1073.350480][ T32] #0: ffff8880123c09b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1073.359656][ T32] #1: ffff88807a8d4450 (sb_writers#26){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1073.368763][ T32] #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x39d/0x5a0 [ 1073.377889][ T32] 3 locks held by syz.0.3522/18806: [ 1073.383662][ T32] #0: ffff88807b968630 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1073.393029][ T32] #1: ffff88807a8d4450 (sb_writers#26){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1073.402639][ T32] #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 1073.414890][ T32] 3 locks held by syz.0.3522/18809: [ 1073.420232][ T32] #0: ffff888056cecef0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1073.429437][ T32] #1: ffff88807a8d4450 (sb_writers#26){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1073.438485][ T32] #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x39d/0x5a0 [ 1073.447736][ T32] 3 locks held by syz.8.3550/18962: [ 1073.453168][ T32] #0: ffff888079023b30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1073.462430][ T32] #1: ffff888023772450 (sb_writers#26){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1073.471523][ T32] #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 1073.480396][ T32] 3 locks held by syz.8.3550/18963: [ 1073.485593][ T32] #0: ffff8880790182b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1073.494875][ T32] #1: ffff888023772450 (sb_writers#26){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1073.503995][ T32] #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 1073.516374][ T32] 3 locks held by syz.9.3573/19070: [ 1073.521884][ T32] #0: ffff8880352d1b30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1073.531121][ T32] #1: ffff8880540d0450 (sb_writers#26){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1073.540414][ T32] #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 1073.549628][ T32] 3 locks held by syz.9.3573/19073: [ 1073.554828][ T32] #0: ffff88805c3e42b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1073.563989][ T32] #1: ffff8880540d0450 (sb_writers#26){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1073.573115][ T32] #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 1073.582078][ T32] 3 locks held by syz.9.3573/19077: [ 1073.587290][ T32] #0: ffff88807ef850b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1073.596540][ T32] #1: ffff8880540d0450 (sb_writers#26){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1073.605621][ T32] #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x39d/0x5a0 [ 1073.618416][ T32] 3 locks held by syz.4.3575/19094: [ 1073.623843][ T32] #0: ffff88803267d270 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1073.633245][ T32] #1: ffff88801bf74450 (sb_writers#26){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1073.642353][ T32] #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 1073.651659][ T32] 3 locks held by syz.4.3575/19097: [ 1073.656854][ T32] #0: ffff88807a3e5430 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1073.666008][ T32] #1: ffff88801bf74450 (sb_writers#26){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1073.675086][ T32] #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 1073.683975][ T32] 3 locks held by syz.4.3575/19099: [ 1073.689249][ T32] #0: ffff88807a36d5f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1073.698327][ T32] #1: ffff88801bf74450 (sb_writers#26){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1073.707695][ T32] #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x39d/0x5a0 [ 1073.720510][ T32] 3 locks held by syz.7.3578/19342: [ 1073.725762][ T32] #0: ffff88807a6ffcf0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1073.734949][ T32] #1: ffff8880216f4450 (sb_writers#26){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1073.744359][ T32] #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 1073.753627][ T32] 3 locks held by syz.7.3578/19345: [ 1073.758909][ T32] #0: ffff88807ae110b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1073.768038][ T32] #1: ffff8880216f4450 (sb_writers#26){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1073.777183][ T32] #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x39d/0x5a0 [ 1073.786521][ T32] 3 locks held by syz.2.3616/19399: [ 1073.791890][ T32] #0: ffff8880365d0d30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1073.801075][ T32] #1: ffff888034b24450 (sb_writers#26){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1073.810197][ T32] #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 1073.823382][ T32] 3 locks held by syz.2.3616/19400: [ 1073.828696][ T32] #0: ffff888032fef0b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1073.837808][ T32] #1: ffff888034b24450 (sb_writers#26){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1073.846922][ T32] #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 1073.856042][ T32] 3 locks held by syz.2.3616/19401: [ 1073.861387][ T32] #0: ffff888032fee630 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1073.870615][ T32] #1: ffff888034b24450 (sb_writers#26){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1073.879776][ T32] #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x39d/0x5a0 [ 1073.888956][ T32] 6 locks held by kworker/u9:2/19438: [ 1073.894469][ T32] #0: ffff88807eceb940 ((wq_completion)hci9){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1073.905474][ T32] #1: ffffc9000592fc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1073.918167][ T32] #2: ffff888056f3cea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 1073.931851][ T32] #3: ffff888056f3c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 1073.942296][ T32] #4: ffffffff901b4d20 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x149/0x320 [ 1073.952214][ T32] #5: ffff8880775cdaf8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x9f/0x520 [ 1073.961951][ T32] 3 locks held by syz.3.3666/19698: [ 1073.967190][ T32] #0: ffff888076d25430 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1073.976373][ T32] #1: ffff888031daa450 (sb_writers#26){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1073.985533][ T32] #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 1073.994488][ T32] 3 locks held by syz.1.3710/19873: [ 1073.999810][ T32] #0: ffff88807d2bf970 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1074.009011][ T32] #1: ffff88802a3b2450 (sb_writers#26){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1074.018099][ T32] #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 1074.035872][ T32] 3 locks held by syz.1.3710/19874: [ 1074.041218][ T32] #0: ffff88807d2bf7b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1074.050375][ T32] #1: ffff88802a3b2450 (sb_writers#26){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1074.059528][ T32] #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x39d/0x5a0 [ 1074.068969][ T32] 4 locks held by syz-executor/19926: [ 1074.074462][ T32] #0: ffff888033f00450 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1074.083475][ T32] #1: ffff888098d0f880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 1074.093348][ T32] #2: ffff888029545f08 (kn->active#53){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 1074.103846][ T32] #3: ffffffff8f8a96a0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: new_device_store+0x13c/0x710 [ 1074.109403][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1074.114454][ T32] 3 locks held by syz.5.3725/19939: [ 1074.131388][ T32] #0: ffff88802ab39270 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1074.140632][ T32] #1: ffff888031ede450 (sb_writers#26){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1074.149734][ T32] #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 1074.158898][ T32] 3 locks held by syz.5.3725/19940: [ 1074.164101][ T32] #0: ffff88807a6f5970 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1074.173355][ T32] #1: ffff888031ede450 (sb_writers#26){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1074.186825][ T32] #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 1074.189656][ T5628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1074.196052][ T32] 3 locks held by syz.5.3725/19943: [ 1074.211224][ T32] #0: ffff88807f0262b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1074.220449][ T32] #1: ffff888031ede450 (sb_writers#26){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1074.234166][ T32] #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x39d/0x5a0 [ 1074.243449][ T32] 7 locks held by syz-executor/19965: [ 1074.248915][ T32] #0: ffff888033f00450 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1074.257845][ T32] #1: ffff888099b85080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 1074.267700][ T32] #2: ffff888029545e18 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 1074.277854][ T32] #3: ffffffff8f8a96a0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1074.288313][ T32] #4: ffff88805a08b128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 1074.299229][ T32] #5: ffff88805a08a258 (&devlink->lock_key#20){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x170 [ 1074.309450][ T32] #6: ffffffff9002d700 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x173/0x800 [ 1074.318589][ T32] 4 locks held by syz-executor/19979: [ 1074.323980][ T32] #0: ffff888033f00450 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1074.336779][ T32] #1: ffff88804be51080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 1074.348326][ T32] #2: ffff888029545e18 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 1074.358554][ T32] #3: ffffffff8f8a96a0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1074.369001][ T32] 4 locks held by syz-executor/20046: [ 1074.374365][ T32] #0: ffff888033f00450 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1074.383374][ T32] #1: ffff8880a2338c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 1074.393247][ T32] #2: ffff888029545e18 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 1074.403404][ T32] #3: ffffffff8f8a96a0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1074.414091][ T32] 1 lock held by syz.8.3760/20190: [ 1074.419292][ T32] #0: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1074.430371][ T32] [ 1074.468829][ T32] ============================================= [ 1074.468829][ T32] [ 1074.477325][ T32] NMI backtrace for cpu 0 [ 1074.477350][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1074.477386][ T32] Tainted: [L]=SOFTLOCKUP [ 1074.477396][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1074.477413][ T32] Call Trace: [ 1074.477423][ T32] [ 1074.477434][ T32] dump_stack_lvl+0xe8/0x150 [ 1074.477481][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 1074.477522][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1074.477554][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1074.477597][ T32] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 1074.477643][ T32] sys_info+0x135/0x170 [ 1074.477681][ T32] watchdog+0xfd7/0x1030 [ 1074.477726][ T32] ? watchdog+0x1c7/0x1030 [ 1074.477769][ T32] kthread+0x388/0x470 [ 1074.477810][ T32] ? __pfx_watchdog+0x10/0x10 [ 1074.477841][ T32] ? __pfx_kthread+0x10/0x10 [ 1074.477884][ T32] ret_from_fork+0x514/0xb70 [ 1074.477929][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1074.477969][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1074.478000][ T32] ? __switch_to+0xc89/0x1420 [ 1074.478040][ T32] ? __pfx_kthread+0x10/0x10 [ 1074.478082][ T32] ret_from_fork_asm+0x1a/0x30 [ 1074.478134][ T32] [ 1074.478144][ T32] Sending NMI from CPU 0 to CPUs 1: [ 1074.614680][ C1] NMI backtrace for cpu 1 [ 1074.614705][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1074.614736][ C1] Tainted: [L]=SOFTLOCKUP [ 1074.614746][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1074.614760][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1074.614793][ C1] Code: dc 7e 02 e9 fe 5f 3f f5 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 8e 18 00 fb f4 d7 5f 3f f5 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1074.614812][ C1] RSP: 0018:ffffc90000197e40 EFLAGS: 00000242 [ 1074.614833][ C1] RAX: 000000000108b90d RBX: ffffffff819b4450 RCX: 0000000080000001 [ 1074.614851][ C1] RDX: 0000000000000001 RSI: ffffffff8e22d06b RDI: ffffffff8c4bdc80 [ 1074.614868][ C1] RBP: ffffc90000197f10 R08: ffff8880b87338db R09: 1ffff110170e671b [ 1074.614886][ C1] R10: dffffc0000000000 R11: ffffed10170e671c R12: 0000000000000000 [ 1074.614902][ C1] R13: 1ffff11003bd4000 R14: 1ffff92000032fd0 R15: dffffc0000000000 [ 1074.614924][ C1] FS: 0000000000000000(0000) GS:ffff88812504e000(0000) knlGS:0000000000000000 [ 1074.614943][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1074.614959][ C1] CR2: 0000200000008000 CR3: 000000007f8e8000 CR4: 0000000000350ef0 [ 1074.614979][ C1] Call Trace: [ 1074.614988][ C1] [ 1074.614996][ C1] default_idle+0x9/0x20 [ 1074.615026][ C1] default_idle_call+0x72/0xb0 [ 1074.615056][ C1] do_idle+0x2e0/0x540 [ 1074.615091][ C1] ? __pfx_do_idle+0x10/0x10 [ 1074.615131][ C1] cpu_startup_entry+0x43/0x60 [ 1074.615163][ C1] start_secondary+0x101/0x110 [ 1074.615198][ C1] common_startup_64+0x13e/0x157 [ 1074.615239][ C1] [ 1074.935864][T19965] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1075.058896][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1075.065831][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1075.076537][ T32] Tainted: [L]=SOFTLOCKUP [ 1075.080848][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1075.090944][ T32] Call Trace: [ 1075.094211][ T32] [ 1075.097125][ T32] vpanic+0x56c/0xa60 [ 1075.101108][ T32] ? __pfx___schedule+0x10/0x10 [ 1075.105956][ T32] ? __pfx_vpanic+0x10/0x10 [ 1075.110462][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1075.116093][ T32] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 1075.122254][ T32] panic+0xc5/0xd0 [ 1075.126000][ T32] ? __pfx_panic+0x10/0x10 [ 1075.130429][ T32] ? preempt_schedule_common+0x82/0xd0 [ 1075.135897][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 1075.141271][ T32] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 1075.147527][ T32] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 1075.153697][ T32] watchdog+0x1030/0x1030 [ 1075.158052][ T32] ? watchdog+0x1c7/0x1030 [ 1075.162476][ T32] kthread+0x388/0x470 [ 1075.166547][ T32] ? __pfx_watchdog+0x10/0x10 [ 1075.171213][ T32] ? __pfx_kthread+0x10/0x10 [ 1075.175805][ T32] ret_from_fork+0x514/0xb70 [ 1075.180396][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1075.185508][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1075.191178][ T32] ? __switch_to+0xc89/0x1420 [ 1075.195857][ T32] ? __pfx_kthread+0x10/0x10 [ 1075.200450][ T32] ret_from_fork_asm+0x1a/0x30 [ 1075.205246][ T32] [ 1075.208567][ T32] Kernel Offset: disabled [ 1075.212892][ T32] Rebooting in 86400 seconds..