last executing test programs: 1m23.231931853s ago: executing program 2 (id=109): mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./proc\x00', &(0x7f0000000640)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r0, &(0x7f0000000700)='\\x01000000 2147483647 0 0 0 krb5 \\x00000000ffffff7f00000000000000001100000000000000000000000000000000000000', 0x6b) 1m23.022846471s ago: executing program 2 (id=113): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000440)='127.0.0.1:/\x00', &(0x7f0000000480)='./mnt\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049,proto=tcp,clientaddr=127']) 1m22.838639599s ago: executing program 2 (id=115): setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) socket(0x8, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/atm\x00', 0x0, 0x0) 1m22.63621728s ago: executing program 2 (id=118): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./export\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='tmpfs\x00', &(0x7f0000000180)='./export\x00', &(0x7f00000001c0)='tmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(&(0x7f0000000240)=@filename='proc\x00', &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000340)='tcp 2049\n\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000740)='1\n\x00', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r2, &(0x7f0000000440)='nfsd 127.0.0.1 2147483647 localhost\n\x00', 0x24) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r3, &(0x7f0000000540)='localhost ./export 2147483647\n\x00', 0x1e) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./export/dir1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./export/dir2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./export/dir3\x00', 0x1ff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000900)={0x2, 0x8008, @loopback}, 0x10) write(r4, &(0x7f0000000a00)="80000038000000010000000000000002000186a300000003000000100000000000000000000000000000000000000000000000000000000020", 0x3c) nanosleep(&(0x7f0000000b00)={0x0, 0x5f5e100}, 0x0) 1m22.056695538s ago: executing program 2 (id=125): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newsa={0x170, 0x10, 0x5, 0x1, 0x0, {{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {@in=@loopback, 0x1234, 0x32}, @in=@loopback, {}, {}, {}, 0x0, 0x1, 0x2, 0x0, 0x0, 0x80}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "210466d38547aa140db9a200000000c538c7cb7a"}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x40, [0x0]}}]}, 0x170}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newpolicy={0xfc, 0x13, 0x5, 0x2, 0x0, {{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x12, [{{@in=@loopback, 0x1234, 0x32}, 0x2, @in=@loopback, 0x1}]}]}, 0xfc}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000400)={0x2, 0x1234, @loopback}, 0x10) connect$inet(r1, &(0x7f0000000420)={0x2, 0x1234, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000500)="12345678", 0x8, 0x0, 0x0, 0x0) 1m19.921496105s ago: executing program 2 (id=148): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00', 0x41}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000140)='./nfsd\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x801, @loopback}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='+3 -4\n\x00', 0x6) 1m19.629648526s ago: executing program 32 (id=148): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00', 0x41}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000140)='./nfsd\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x801, @loopback}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='+3 -4\n\x00', 0x6) 1m12.037667467s ago: executing program 33 (id=200): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1c, {[@window={0x3, 0x3, 0x3}, @timestamp={0x8, 0xa, 0x5, 0x2}, @generic={0x0, 0x8, "d58838068b91"}]}}, {'\x00'}}}}}, 0x4e) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 1m2.340490898s ago: executing program 3 (id=273): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./export\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='tmpfs\x00', &(0x7f0000000180)='./export\x00', &(0x7f00000001c0)='tmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(&(0x7f0000000240)=@filename='proc\x00', &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000340)='tcp 2049\n\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000740)='1\n\x00', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r2, &(0x7f0000000440)='nfsd 127.0.0.1 2147483647 localhost\n\x00', 0x24) close(r2) write(0xffffffffffffffff, &(0x7f0000000540)='localhost ./export 2147483647\n\x00', 0x1e) 59.031965502s ago: executing program 3 (id=286): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4321, @loopback}, 0x10) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) connect$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4321, @loopback}}, 0x24) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)='hello\x00', 0x6}], 0x1, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "010000000000"}], 0x18}, 0x0) recvfrom(r0, &(0x7f0000000300)=""/256, 0x100, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r3, &(0x7f0000000300), 0x20) read(r2, 0x0, 0x0) write(r3, &(0x7f0000000500)="0100", 0x2) read(r2, &(0x7f0000000314), 0x2) sendto$inet(r0, &(0x7f0000000300), 0x2f, 0x0, &(0x7f0000000080)={0x2, 0x1234, @loopback}, 0x10) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/256, 0x100}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000a00), &(0x7f0000000a20)=0x4) 56.65542263s ago: executing program 3 (id=305): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./mnt\x00', 0x1ff) r1 = fsopen(&(0x7f0000000400)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000500)='source\x00', &(0x7f0000000600)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000700)='addr\x00', &(0x7f0000000800)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000900)='nfsvers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000f00)='mountport\x00', &(0x7f0000001000)='2049\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) mount$nfs(&(0x7f0000000500)='127.0.0.1:/export\x00', &(0x7f0000001400)='./mnt\x00', &(0x7f0000000400), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='addr=127.0.0.1,nfsvers=3,proto=tcp,port=2049,mountport=2049,nolock\x00']) accept4$inet(r0, 0x0, 0x0, 0x0) 56.576407934s ago: executing program 4 (id=306): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x24}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/mptcp/add_addr_timeout\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='1\n\x00', 0x2) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000300)={0x2, 0x1f40, @loopback}, 0x10) listen(r3, 0x5) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000300)={0x2, 0x1f40, @loopback}, 0x10) r5 = accept(r3, 0x0, 0x0) write(r4, &(0x7f0000000400)="0123456789", 0xa) read(r5, &(0x7f0000000500), 0xa) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}]}, 0x38}}, 0x0) recvfrom(r4, &(0x7f0000000600), 0x100, 0x40, 0x0, 0x0) nanosleep(&(0x7f0000000700)={0x3}, 0x0) 55.686345592s ago: executing program 3 (id=314): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./export\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='tmpfs\x00', &(0x7f0000000180)='./export\x00', &(0x7f00000001c0)='tmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(&(0x7f0000000240)=@filename='proc\x00', &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000340)='tcp 2049\n\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000740)='1\n\x00', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r2, &(0x7f0000000440)='nfsd 127.0.0.1 2147483647 localhost\n\x00', 0x24) close(r2) write(0xffffffffffffffff, &(0x7f0000000540)='localhost ./export 2147483647\n\x00', 0x1e) 55.61375337s ago: executing program 4 (id=315): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4321, @loopback}, 0x10) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) connect$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4321, @loopback}}, 0x24) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)='hello\x00', 0x6}], 0x1, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "010000000000"}], 0x18}, 0x0) recvfrom(r0, &(0x7f0000000300)=""/256, 0x100, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r3, &(0x7f0000000300), 0x20) read(r2, 0x0, 0x0) write(r3, &(0x7f0000000500)="0100", 0x2) read(r2, &(0x7f0000000314), 0x2) sendto$inet(r0, &(0x7f0000000300), 0x2f, 0x0, &(0x7f0000000080)={0x2, 0x1234, @loopback}, 0x10) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/256, 0x100}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000a00), &(0x7f0000000a20)=0x4) 54.675032508s ago: executing program 4 (id=326): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/sctp/addip_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/net/sctp/addip_noauth_enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='1\n', 0x2) close(r1) r2 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e21, @loopback}, 0x10) listen(r2, 0x5) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000340)=0x1, 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e21, @loopback}, 0x10) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000000340)=0x1, 0x4) bind$inet(r4, &(0x7f0000000380)={0x2, 0x4e22, @rand_addr=0x7f000002}, 0x10) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @rand_addr=0x7f000003}], 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @rand_addr=0x7f000003}], 0x10) 54.490789329s ago: executing program 4 (id=328): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x2382, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x2, &(0x7f0000000500)=ANY=[@ANYBLOB="b7000000010000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@map=r1, r2, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000240)='\x00\x00\x00\x00', &(0x7f0000000280)=@udp=r0}, 0x20) sendto(r0, &(0x7f0000000700)='hello world\x00', 0xc, 0x0, &(0x7f0000000080)=@in={0x2, 0x2382, @loopback}, 0x10) recvmsg(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000880)=""/128, 0x80}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000880)=""/128, 0x80}], 0x1}, 0x0) 53.909829754s ago: executing program 6 (id=331): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x0, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x30}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@setlink={0x0, 0x10, 0x1, 0x0, 0x1, {}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x30}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/net/bridge0/bridge/multicast_snooping\x00', 0x1, 0x0) write(r3, &(0x7f0000000440)='1\n', 0x2) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/class/net/bridge0/bridge/multicast_igmp_version\x00', 0x1, 0x0) write(r4, &(0x7f0000000500)='3\n', 0x2) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/class/net/syz_tun/brport/multicast_fast_leave\x00', 0x1, 0x0) write(r5, &(0x7f00000005c0)='1\n', 0x2) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/class/net/bridge_slave_0/brport/multicast_fast_leave\x00', 0x1, 0x0) write(r6, &(0x7f0000000680)='1\n', 0x2) close(r6) syz_emit_ethernet(0x2a, &(0x7f0000000700)={@link_local, @link_local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x1, 0x2, 0x0, @rand_addr=0x64010100, @multicast1}, {0x22, 0x0, 0x0, @multicast2}}}}}, 0x0) 53.740423744s ago: executing program 6 (id=332): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x2, 0x0) close(r0) 53.644971462s ago: executing program 6 (id=343): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x2, 0x0) close(r0) 53.566664829s ago: executing program 6 (id=334): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1b58, @loopback}}, 0x18) listen(r0, 0xa) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000100)="00000000000000010000000100000001000000010101000000000001", 0x1c, 0x0, &(0x7f0000000200)={0x2, 0x1b58, @loopback}, 0x10) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 53.51217761s ago: executing program 4 (id=335): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='-2 -3 +4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='tcp 20000\n\x00', 0xa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='1\n\x00', 0x2) r3 = socket$inet(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000280)={0x2, 0x4e20, @loopback}, 0x10) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000380)={0x2, 0x4e20, @loopback}, 0x10) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) 53.31965385s ago: executing program 6 (id=336): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4321, @loopback}, 0x10) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) connect$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4321, @loopback}}, 0x24) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)='hello\x00', 0x6}], 0x1, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "010000000000"}], 0x18}, 0x0) recvfrom(r0, &(0x7f0000000300)=""/256, 0x100, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r3, &(0x7f0000000300), 0x20) read(r2, &(0x7f0000000700), 0x20) write(r3, 0x0, 0x0) read(r2, &(0x7f0000000314), 0x2) sendto$inet(r0, &(0x7f0000000300), 0x2f, 0x0, &(0x7f0000000080)={0x2, 0x1234, @loopback}, 0x10) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/256, 0x100}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000a00), &(0x7f0000000a20)=0x4) 52.890177568s ago: executing program 3 (id=338): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/sctp/addip_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/net/sctp/addip_noauth_enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='1\n', 0x2) close(r1) r2 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e21, @loopback}, 0x10) listen(r2, 0x5) r3 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e21, @loopback}, 0x10) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000000340)=0x1, 0x4) bind$inet(r4, &(0x7f0000000380)={0x2, 0x4e22, @rand_addr=0x7f000002}, 0x10) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @rand_addr=0x7f000003}], 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @rand_addr=0x7f000003}], 0x10) 52.448397425s ago: executing program 6 (id=339): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./export_dir\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd_mnt/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='-2 -3 +4\n', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc_mnt/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='localhost / 2147483647 0 0 0 0\n', 0x1f) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc_mnt/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0) write(r4, &(0x7f0000000440)='localhost 1 \\x00 2147483647 /\n', 0x1e) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./nfsd_mnt/threads\x00', 0x1, 0x0) write(r5, &(0x7f00000004c0)='1\n', 0x2) (async) close(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./nfs_mnt\x00', 0x1ff) mount(&(0x7f0000000540)=@filename='127.0.0.1:/\x00', &(0x7f0000000580)='./nfs_mnt\x00', &(0x7f00000005c0)='nfs4\x00', 0x0, &(0x7f0000000600)='addr=127.0.0.1,clientaddr=127.0.0.1\x00') setxattr(&(0x7f0000000640)='./nfs_mnt\x00', &(0x7f0000000680)=@known='system.posix_acl_access\x00', &(0x7f00000006c0)='\x02\x00\x00\x00\x01\x00\a\x00\xff\xff\xff\xff\x04\x00\x05\x00\xff\xff\xff\xff \x00\x05\x00\xff\xff\xff\xff', 0x1c, 0x0) 51.464875794s ago: executing program 3 (id=340): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='-2 -3 +4\n\x00', 0x9) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r1, &(0x7f0000000200)={0x2, 0x800, @empty}, 0x10) listen(r1, 0x80) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='3\x00', 0x1) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='8\n\x00', 0x2) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x6) connect$inet(r4, &(0x7f0000000200)={0x2, 0x800, @loopback}, 0x10) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) close(r3) 51.464712589s ago: executing program 4 (id=341): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./mnt\x00', 0x1ff) r1 = fsopen(&(0x7f0000000400)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000500)='source\x00', &(0x7f0000000600)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000700)='addr\x00', &(0x7f0000000800)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000900)='nfsvers\x00', &(0x7f0000000a00)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, &(0x7f0000001000)='2049\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) mount$nfs(&(0x7f0000000500)='127.0.0.1:/export\x00', &(0x7f0000001400)='./mnt\x00', &(0x7f0000000400), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='addr=127.0.0.1,nfsvers=3,proto=tcp,port=2049,mountport=2049,nolock\x00']) accept4$inet(r0, 0x0, 0x0, 0x0) 51.396171238s ago: executing program 5 (id=344): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'dummy0\x00', {0x2, 0x0, @rand_addr=0xa000001}}) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000100)={'dummy0\x00', @ifru_flags=0x1}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x1403, 0x5, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'dummy0\x00'}}]}, 0x38}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000200), r2) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x48, r3, 0x5, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x48}}, 0x0) 51.351717027s ago: executing program 5 (id=345): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x2, 0x0) close(r0) 51.27192789s ago: executing program 5 (id=346): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x10, 0x1, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3c}, {@in6=@loopback, 0x0, 0x3c}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in6=@loopback}]}, 0x104}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newpolicy={0x100, 0x13, 0x1, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3c}, {}, {}, 0x0, 0x0, 0x1}}, 0x100}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3c) sendto$inet6(r1, &(0x7f0000000300)="3a01000000000000", 0x8, 0x0, &(0x7f0000000400)={0xa, 0x0, 0x0, @loopback}, 0x1c) 51.257879227s ago: executing program 5 (id=347): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x48}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/net/bridge0/bridge/multicast_snooping\x00', 0x1, 0x0) write(r3, &(0x7f0000000440)='1', 0x1) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/class/net/bridge0/bridge/multicast_igmp_version\x00', 0x1, 0x0) write(r4, &(0x7f0000000500)='3\n', 0x2) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/class/net/syz_tun/brport/multicast_fast_leave\x00', 0x1, 0x0) write(r5, &(0x7f00000005c0)='1\n', 0x2) close(r5) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000600)='syz_tun\x00', 0x8) 51.213218776s ago: executing program 5 (id=348): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000314050600000000000000000900020073797a30000000000800410072786500070033006c6f0000"]}}, 0x0) 51.136233404s ago: executing program 5 (id=349): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./export\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='tmpfs\x00', &(0x7f0000000180)='./export\x00', &(0x7f00000001c0)='tmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(&(0x7f0000000240)=@filename='proc\x00', &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000340)='tcp 2049\n\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000740)='1\n\x00', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r2, &(0x7f0000000440)='nfsd 127.0.0.1 2147483647 localhost\n\x00', 0x24) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r3, &(0x7f0000000540)='localhost ./export 2147483647\n\x00', 0x1e) 50.407899036s ago: executing program 1 (id=355): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x18) connect$rxrpc(r0, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x18) sendto$rxrpc(r0, &(0x7f0000000200)='A', 0x1, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000300)="00000000000000000000000000000000000000000600000000000001", 0x1c, 0x0, &(0x7f0000000400)={0x2, 0x1234, @loopback}, 0x10) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) 50.303917651s ago: executing program 1 (id=356): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syz_tun\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000000100)={'syz_tun\x00', 0x0, 0x1}) 50.265242804s ago: executing program 1 (id=357): syz_emit_ethernet(0x2a, &(0x7f0000000700)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x1, 0x2, 0x0, @rand_addr=0x64010100, @multicast1}, {0x22, 0x0, 0x0, @multicast2}}}}}, 0x0) 50.21796524s ago: executing program 1 (id=358): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x2, 0x0) close(r0) 50.145395696s ago: executing program 1 (id=359): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'dummy0\x00', {0x2, 0x0, @rand_addr=0xa000001}}) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000100)={'dummy0\x00', @ifru_flags=0x1}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x1403, 0x5, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'dummy0\x00'}}]}, 0x38}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000200), r2) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x48, r3, 0x5, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x48}}, 0x0) 50.144366299s ago: executing program 1 (id=360): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, &(0x7f0000000200)="00112233445566778899aabbccddeeff", 0x10, 0x0, &(0x7f0000000300)={0x2, 0x1234, @loopback}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/kernel/slab/skbuff_head_cache/failslab\x00', 0x1, 0x0) write(r1, &(0x7f0000000450)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/failslab/cache-filter\x00', 0x1, 0x0) write(r2, &(0x7f0000000550)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./debug/failslab/probability\x00', 0x1, 0x0) write(r3, &(0x7f0000000650)='100', 0x3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./debug/failslab/times\x00', 0x1, 0x0) write(r4, &(0x7f0000000750)='100', 0x3) sendto$inet(r0, &(0x7f0000000200)="00112233445566778899aabbccddeeff", 0x10, 0x0, &(0x7f0000000300)={0x2, 0x1234, @loopback}, 0x10) 22.944816373s ago: executing program 34 (id=339): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./export_dir\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd_mnt/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='-2 -3 +4\n', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc_mnt/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='localhost / 2147483647 0 0 0 0\n', 0x1f) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc_mnt/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0) write(r4, &(0x7f0000000440)='localhost 1 \\x00 2147483647 /\n', 0x1e) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./nfsd_mnt/threads\x00', 0x1, 0x0) write(r5, &(0x7f00000004c0)='1\n', 0x2) (async) close(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./nfs_mnt\x00', 0x1ff) mount(&(0x7f0000000540)=@filename='127.0.0.1:/\x00', &(0x7f0000000580)='./nfs_mnt\x00', &(0x7f00000005c0)='nfs4\x00', 0x0, &(0x7f0000000600)='addr=127.0.0.1,clientaddr=127.0.0.1\x00') setxattr(&(0x7f0000000640)='./nfs_mnt\x00', &(0x7f0000000680)=@known='system.posix_acl_access\x00', &(0x7f00000006c0)='\x02\x00\x00\x00\x01\x00\a\x00\xff\xff\xff\xff\x04\x00\x05\x00\xff\xff\xff\xff \x00\x05\x00\xff\xff\xff\xff', 0x1c, 0x0) 22.842070071s ago: executing program 35 (id=360): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, &(0x7f0000000200)="00112233445566778899aabbccddeeff", 0x10, 0x0, &(0x7f0000000300)={0x2, 0x1234, @loopback}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/kernel/slab/skbuff_head_cache/failslab\x00', 0x1, 0x0) write(r1, &(0x7f0000000450)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/failslab/cache-filter\x00', 0x1, 0x0) write(r2, &(0x7f0000000550)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./debug/failslab/probability\x00', 0x1, 0x0) write(r3, &(0x7f0000000650)='100', 0x3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./debug/failslab/times\x00', 0x1, 0x0) write(r4, &(0x7f0000000750)='100', 0x3) sendto$inet(r0, &(0x7f0000000200)="00112233445566778899aabbccddeeff", 0x10, 0x0, &(0x7f0000000300)={0x2, 0x1234, @loopback}, 0x10) 22.768850479s ago: executing program 36 (id=349): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./export\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='tmpfs\x00', &(0x7f0000000180)='./export\x00', &(0x7f00000001c0)='tmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(&(0x7f0000000240)=@filename='proc\x00', &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000340)='tcp 2049\n\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000740)='1\n\x00', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r2, &(0x7f0000000440)='nfsd 127.0.0.1 2147483647 localhost\n\x00', 0x24) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r3, &(0x7f0000000540)='localhost ./export 2147483647\n\x00', 0x1e) 22.652219927s ago: executing program 37 (id=340): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='-2 -3 +4\n\x00', 0x9) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r1, &(0x7f0000000200)={0x2, 0x800, @empty}, 0x10) listen(r1, 0x80) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='3\x00', 0x1) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='8\n\x00', 0x2) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x6) connect$inet(r4, &(0x7f0000000200)={0x2, 0x800, @loopback}, 0x10) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) close(r3) 22.554636867s ago: executing program 38 (id=341): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./mnt\x00', 0x1ff) r1 = fsopen(&(0x7f0000000400)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000500)='source\x00', &(0x7f0000000600)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000700)='addr\x00', &(0x7f0000000800)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000900)='nfsvers\x00', &(0x7f0000000a00)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, &(0x7f0000001000)='2049\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) mount$nfs(&(0x7f0000000500)='127.0.0.1:/export\x00', &(0x7f0000001400)='./mnt\x00', &(0x7f0000000400), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='addr=127.0.0.1,nfsvers=3,proto=tcp,port=2049,mountport=2049,nolock\x00']) accept4$inet(r0, 0x0, 0x0, 0x0) 4.486245089s ago: executing program 0 (id=369): mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x2, 0x0) close(r0) 4.276840754s ago: executing program 0 (id=370): syz_emit_ethernet(0x32, &(0x7f0000000700)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x1, 0x2, 0x0, @rand_addr=0x64010100, @multicast1}, {0x22, 0x0, 0x0, @multicast2, "0000000104000001"}}}}}, 0x0) 4.116029865s ago: executing program 0 (id=372): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x48}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/net/bridge0/bridge/multicast_snooping\x00', 0x1, 0x0) write(r3, &(0x7f0000000440)='1\n', 0x2) close(r3) r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r4, &(0x7f0000000500)='3\n', 0x2) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/class/net/syz_tun/brport/multicast_fast_leave\x00', 0x1, 0x0) write(r5, &(0x7f00000005c0)='1\n', 0x2) close(r5) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000600)='syz_tun\x00', 0x8) 3.819705669s ago: executing program 7 (id=374): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a85, @loopback}, 0x10) listen(r0, 0x5) r1 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='mon_host\x00', &(0x7f0000000180)='127.0.0.1:6789\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='ms_mode\x00', &(0x7f0000000200)='crc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = accept(r0, 0x0, 0x0) write(r2, &(0x7f0000000300)="636570682076320a100001000000000000000100000000000000010101000000000000000000000000000000000000000000000000000000000000001c0fa1a9", 0x3a) nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0) close(r2) close(r1) close(r0) 3.693029915s ago: executing program 0 (id=375): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) listen(r1, 0x5) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ed) mount$9p_rdma(&(0x7f0000000100), &(0x7f0000000200)='./mnt\x00', &(0x7f0000000300), 0x0, &(0x7f0000000400)={'trans=rdma,', {'port', 0x3d, 0x4e20}}) 2.975932091s ago: executing program 7 (id=376): r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000200)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='mon_addr\x00', &(0x7f0000000400)='127.0.0.1:6789\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 2.206236784s ago: executing program 8 (id=362): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4321, @loopback}, 0x10) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) connect$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4321, @loopback}}, 0x24) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)='hello\x00', 0x6}], 0x1, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "010000000000"}], 0x18}, 0x0) recvfrom(r0, &(0x7f0000000300)=""/256, 0x100, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r3, &(0x7f0000000300), 0x20) read(r2, &(0x7f0000000700), 0x20) write(r3, &(0x7f0000000500), 0x0) read(r2, &(0x7f0000000314), 0x2) sendto$inet(r0, &(0x7f0000000300), 0x2f, 0x0, &(0x7f0000000080)={0x2, 0x1234, @loopback}, 0x10) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/256, 0x100}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000a00), &(0x7f0000000a20)=0x4) 1.882963362s ago: executing program 7 (id=377): mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x2, 0x0) close(r0) 1.769287672s ago: executing program 7 (id=378): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040), 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000300)={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x5) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000400)={0x2, 0x4e20, @loopback}, 0x10) shutdown(r2, 0x2) 1.720362073s ago: executing program 0 (id=379): syz_emit_ethernet(0x32, &(0x7f0000000700)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x1, 0x2, 0x0, @rand_addr=0x64010100, @multicast1}, {0x22, 0x0, 0x0, @multicast2, "0000000104000001"}}}}}, 0x0) 1.626372446s ago: executing program 9 (id=363): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newaddr={0x28, 0x14, 0x601, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0x1}, [@IFA_LOCAL={0x8, 0x2, @rand_addr=0x1010101}, @IFA_ADDRESS={0x8, 0x1, @rand_addr=0x1010101}]}, 0x28}}, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000400)=0x2, 0x4) bind$rds(r1, &(0x7f0000000500)={0x2, 0x1234, @rand_addr=0x1010101}, 0x10) sendmsg$rds(r1, &(0x7f0000000600)={&(0x7f0000000700)={0x2, 0x1234, @rand_addr=0x1010202}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000900)=""/4, 0x8}], 0x1}, 0x0) nanosleep(&(0x7f0000000a00)={0x1}, 0x0) sendmsg$rds(r1, &(0x7f0000000600)={&(0x7f0000000700)={0x2, 0x1234, @rand_addr=0x1010202}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000900)=""/4, 0x8}], 0x1}, 0x0) nanosleep(&(0x7f0000000a00)={0x1}, 0x0) 1.456555051s ago: executing program 7 (id=380): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x0, 0xa, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x0, 0x1, 0xa, 0x0, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x0, 0x1, 'syz0\x00'}]}], {0x0, 0xb, 0x1, 0x0, 0x0, {0x2}}}}}, 0x0) 1.418284896s ago: executing program 0 (id=381): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x1}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0xc0, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x90, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3e8}]}]}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0xc0}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f0000000400)={0x11, 0x0, r2, 0x0}, 0x14) write(r3, &(0x7f0000000500)="00000000000000000000000008004500001c000000004011000001010101010101020001000100080000", 0x2a) nanosleep(&(0x7f0000000600)={0x0, 0x5f5e100}, 0x0) 1.283784192s ago: executing program 7 (id=382): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x48}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/net/bridge0/bridge/multicast_snooping\x00', 0x1, 0x0) write(r3, &(0x7f0000000440)='1\n', 0x2) close(r3) r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r4, &(0x7f0000000500)='3\n', 0x2) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/class/net/syz_tun/brport/multicast_fast_leave\x00', 0x1, 0x0) write(r5, &(0x7f00000005c0)='1\n', 0x2) close(r5) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000600)='syz_tun\x00', 0x8) 1.161698092s ago: executing program 8 (id=383): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4321, @loopback}}, 0x24) listen(r0, 0x5) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) connect$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4321, @loopback}}, 0x24) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)='hello\x00', 0x6}], 0x1, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)=""/256, 0x100}], 0x1, &(0x7f0000000400)=""/256, 0x100}, 0x40) 0s ago: executing program 9 (id=384): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x178, 0x194, 0x194, 0x178, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'sit0\x00', 'ip6_vti0\x00', {}, {}, 0x6}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x10, 0x20, 0x5, 0x8}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x16, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) kernel console output (not intermixed with test programs): T48] [ 136.815841][ T48] dump_stack_lvl+0x100/0x190 [ 136.815868][ T48] should_fail_ex.cold+0x5/0xa [ 136.815894][ T48] should_failslab+0xc2/0x120 [ 136.815920][ T48] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 136.815947][ T48] ? __alloc_skb+0x140/0x710 [ 136.815976][ T48] __alloc_skb+0x140/0x710 [ 136.815998][ T48] ? __alloc_skb+0x5b7/0x710 [ 136.816020][ T48] ? __pfx___alloc_skb+0x10/0x10 [ 136.816043][ T48] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 136.816073][ T48] ? __pfx___might_resched+0x10/0x10 [ 136.816104][ T48] nsim_dev_trap_report_work+0x2af/0xd20 [ 136.816144][ T48] process_one_work+0xa23/0x1940 [ 136.816178][ T48] ? __pfx_process_one_work+0x10/0x10 [ 136.816210][ T48] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 136.816239][ T48] worker_thread+0x5ef/0xe50 [ 136.816269][ T48] ? __pfx_worker_thread+0x10/0x10 [ 136.816293][ T48] ? kthread+0x13a/0x450 [ 136.816312][ T48] ? __pfx_worker_thread+0x10/0x10 [ 136.816333][ T48] kthread+0x370/0x450 [ 136.816352][ T48] ? __pfx_kthread+0x10/0x10 [ 136.816374][ T48] ret_from_fork+0x72b/0xd50 [ 136.816404][ T48] ? __pfx_ret_from_fork+0x10/0x10 [ 136.816434][ T48] ? __switch_to+0x800/0x10f0 [ 136.816459][ T48] ? __pfx_kthread+0x10/0x10 [ 136.816481][ T48] ret_from_fork_asm+0x1a/0x30 [ 136.816525][ T48] [ 136.817323][ T3225] FAULT_INJECTION: forcing a failure. [ 136.817323][ T3225] name failslab, interval 1, probability 100, space 0, times 32 [ 136.821893][ T134] CPU: 0 UID: 0 PID: 134 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 136.821915][ T134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 136.821928][ T134] Workqueue: events_unbound nsim_dev_trap_report_work [ 136.821951][ T134] Call Trace: [ 136.821958][ T134] [ 136.821965][ T134] dump_stack_lvl+0x100/0x190 [ 136.821990][ T134] should_fail_ex.cold+0x5/0xa [ 136.822013][ T134] should_failslab+0xc2/0x120 [ 136.822038][ T134] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 136.822064][ T134] ? __alloc_skb+0x140/0x710 [ 136.822091][ T134] __alloc_skb+0x140/0x710 [ 136.822118][ T134] ? __alloc_skb+0x5b7/0x710 [ 136.822141][ T134] ? __pfx___alloc_skb+0x10/0x10 [ 136.822164][ T134] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 136.822192][ T134] ? do_raw_spin_unlock+0x145/0x1e0 [ 136.822227][ T134] nsim_dev_trap_report_work+0x2af/0xd20 [ 136.822267][ T134] process_one_work+0xa23/0x1940 [ 136.822303][ T134] ? __pfx_process_one_work+0x10/0x10 [ 136.822336][ T134] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 136.822366][ T134] worker_thread+0x5ef/0xe50 [ 136.822398][ T134] ? __pfx_worker_thread+0x10/0x10 [ 136.822423][ T134] ? kthread+0x13a/0x450 [ 136.822442][ T134] ? __pfx_worker_thread+0x10/0x10 [ 136.822464][ T134] kthread+0x370/0x450 [ 136.822484][ T134] ? __pfx_kthread+0x10/0x10 [ 136.822507][ T134] ret_from_fork+0x72b/0xd50 [ 136.822537][ T134] ? __pfx_ret_from_fork+0x10/0x10 [ 136.822569][ T134] ? __switch_to+0x800/0x10f0 [ 136.822592][ T134] ? __pfx_kthread+0x10/0x10 [ 136.822615][ T134] ret_from_fork_asm+0x1a/0x30 [ 136.822661][ T134] [ 136.822804][ C0] FAULT_INJECTION: forcing a failure. [ 136.822804][ C0] name failslab, interval 1, probability 100, space 0, times 32 [ 136.822874][ C0] CPU: 0 UID: 0 PID: 134 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 136.822901][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 136.822916][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 136.822944][ C0] Call Trace: [ 136.822952][ C0] [ 136.822960][ C0] dump_stack_lvl+0x100/0x190 [ 136.822990][ C0] should_fail_ex.cold+0x5/0xa [ 136.823019][ C0] should_failslab+0xc2/0x120 [ 136.823049][ C0] kmem_cache_alloc_noprof+0x91/0x6a0 [ 136.823077][ C0] ? find_held_lock+0x2b/0x80 [ 136.823119][ C0] ? skb_clone+0x190/0x400 [ 136.823152][ C0] skb_clone+0x190/0x400 [ 136.823177][ C0] tipc_disc_timeout+0x562/0x850 [ 136.823203][ C0] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 136.823225][ C0] ? find_held_lock+0x2b/0x80 [ 136.823277][ C0] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 136.823299][ C0] call_timer_fn+0x19a/0x610 [ 136.823326][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 136.823357][ C0] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 136.823379][ C0] ? mark_held_locks+0x40/0x70 [ 136.823411][ C0] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 136.823431][ C0] __run_timers+0x757/0xb00 [ 136.823466][ C0] ? __pfx___run_timers+0x10/0x10 [ 136.823502][ C0] ? ktime_get+0x9f/0x320 [ 136.823529][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 136.823571][ C0] run_timer_base+0x114/0x190 [ 136.823598][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 136.823628][ C0] run_timer_softirq+0x1a/0x50 [ 136.823654][ C0] handle_softirqs+0x1ea/0x9b0 [ 136.823689][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 136.823719][ C0] ? _raw_spin_unlock+0x28/0x50 [ 136.823754][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 136.823779][ C0] __irq_exit_rcu+0x162/0x210 [ 136.823809][ C0] irq_exit_rcu+0x9/0x30 [ 136.823837][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 136.823862][ C0] [ 136.823868][ C0] [ 136.823877][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 136.823903][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 136.823932][ C0] Code: d6 ef 5e 00 48 89 df 5b e9 fd 6a 64 00 be 03 00 00 00 5b e9 a2 c3 13 03 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 65 8b 05 e5 df 59 12 48 8b 34 24 65 48 8b 15 c1 df 59 [ 136.823954][ C0] RSP: 0018:ffffc90002dbf9d8 EFLAGS: 00000293 [ 136.823970][ C0] RAX: 0000000000000000 RBX: 0000000000000200 RCX: ffffffff8174fd6c [ 136.823985][ C0] RDX: ffff88801ff38000 RSI: ffffffff8174fd76 RDI: ffff88801ff38000 [ 136.824001][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 136.824015][ C0] R10: 0000000000000200 R11: 0000000000000001 R12: 0000000000000200 [ 136.824028][ C0] R13: ffffffff8d4ea100 R14: 0000000000000001 R15: 0000000000000000 [ 136.824050][ C0] ? dump_stack_lvl+0x16c/0x190 [ 136.824075][ C0] ? dump_stack_lvl+0x176/0x190 [ 136.824104][ C0] dump_stack_lvl+0x17c/0x190 [ 136.824140][ C0] should_fail_ex.cold+0x5/0xa [ 136.824168][ C0] should_failslab+0xc2/0x120 [ 136.824197][ C0] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 136.824226][ C0] ? __alloc_skb+0x140/0x710 [ 136.824258][ C0] __alloc_skb+0x140/0x710 [ 136.824283][ C0] ? __alloc_skb+0x5b7/0x710 [ 136.824309][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 136.824335][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 136.824368][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 136.824408][ C0] nsim_dev_trap_report_work+0x2af/0xd20 [ 136.824451][ C0] process_one_work+0xa23/0x1940 [ 136.824489][ C0] ? __pfx_process_one_work+0x10/0x10 [ 136.824523][ C0] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 136.824556][ C0] worker_thread+0x5ef/0xe50 [ 136.824589][ C0] ? __pfx_worker_thread+0x10/0x10 [ 136.824615][ C0] ? kthread+0x13a/0x450 [ 136.824636][ C0] ? __pfx_worker_thread+0x10/0x10 [ 136.824660][ C0] kthread+0x370/0x450 [ 136.824682][ C0] ? __pfx_kthread+0x10/0x10 [ 136.824706][ C0] ret_from_fork+0x72b/0xd50 [ 136.824740][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 136.824774][ C0] ? __switch_to+0x800/0x10f0 [ 136.824798][ C0] ? __pfx_kthread+0x10/0x10 [ 136.824823][ C0] ret_from_fork_asm+0x1a/0x30 [ 136.824871][ C0] [ 136.825340][ C0] FAULT_INJECTION: forcing a failure. [ 136.825340][ C0] name failslab, interval 1, probability 100, space 0, times 31 [ 136.829297][ C1] FAULT_INJECTION: forcing a failure. [ 136.829297][ C1] name failslab, interval 1, probability 100, space 0, times 31 [ 136.833008][ C0] CPU: 0 UID: 0 PID: 134 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 136.833034][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 136.833049][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 136.833078][ C0] Call Trace: [ 136.833086][ C0] [ 136.833094][ C0] dump_stack_lvl+0x100/0x190 [ 136.833127][ C0] should_fail_ex.cold+0x5/0xa [ 136.833155][ C0] should_failslab+0xc2/0x120 [ 136.833185][ C0] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 136.833214][ C0] ? __alloc_skb+0x140/0x710 [ 136.833245][ C0] __alloc_skb+0x140/0x710 [ 136.833270][ C0] ? __alloc_skb+0x5b7/0x710 [ 136.833295][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 136.833323][ C0] ? lock_acquire+0x1b9/0x370 [ 136.833353][ C0] ? __pfx_wg_expired_send_persistent_keepalive+0x10/0x10 [ 136.833389][ C0] wg_packet_send_keepalive+0x7a/0x300 [ 136.833428][ C0] wg_expired_send_persistent_keepalive+0x5e/0x80 [ 136.833463][ C0] call_timer_fn+0x19a/0x610 [ 136.833490][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 136.833521][ C0] ? __pfx_wg_expired_send_persistent_keepalive+0x10/0x10 [ 136.833556][ C0] ? mark_held_locks+0x40/0x70 [ 136.833587][ C0] ? __pfx_wg_expired_send_persistent_keepalive+0x10/0x10 [ 136.833620][ C0] __run_timers+0x757/0xb00 [ 136.833655][ C0] ? __pfx___run_timers+0x10/0x10 [ 136.833691][ C0] ? ktime_get+0x9f/0x320 [ 136.833717][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 136.833760][ C0] run_timer_base+0x114/0x190 [ 136.833786][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 136.833817][ C0] run_timer_softirq+0x1a/0x50 [ 136.833843][ C0] handle_softirqs+0x1ea/0x9b0 [ 136.833878][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 136.833908][ C0] ? _raw_spin_unlock+0x28/0x50 [ 136.833943][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 136.833969][ C0] __irq_exit_rcu+0x162/0x210 [ 136.833999][ C0] irq_exit_rcu+0x9/0x30 [ 136.834026][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 136.834051][ C0] [ 136.834058][ C0] [ 136.834067][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 136.834093][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 136.834127][ C0] Code: d6 ef 5e 00 48 89 df 5b e9 fd 6a 64 00 be 03 00 00 00 5b e9 a2 c3 13 03 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 65 8b 05 e5 df 59 12 48 8b 34 24 65 48 8b 15 c1 df 59 [ 136.834150][ C0] RSP: 0018:ffffc90002dbf9d8 EFLAGS: 00000293 [ 136.834168][ C0] RAX: 0000000000000000 RBX: 0000000000000200 RCX: ffffffff8174fd6c [ 136.834184][ C0] RDX: ffff88801ff38000 RSI: ffffffff8174fd76 RDI: ffff88801ff38000 [ 136.834200][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 136.834214][ C0] R10: 0000000000000200 R11: 0000000000000001 R12: 0000000000000200 [ 136.834228][ C0] R13: ffffffff8d4ea100 R14: 0000000000000001 R15: 0000000000000000 [ 136.834251][ C0] ? dump_stack_lvl+0x16c/0x190 [ 136.834276][ C0] ? dump_stack_lvl+0x176/0x190 [ 136.834305][ C0] dump_stack_lvl+0x17c/0x190 [ 136.834348][ C0] should_fail_ex.cold+0x5/0xa [ 136.834377][ C0] should_failslab+0xc2/0x120 [ 136.834406][ C0] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 136.834436][ C0] ? __alloc_skb+0x140/0x710 [ 136.834468][ C0] __alloc_skb+0x140/0x710 [ 136.834493][ C0] ? __alloc_skb+0x5b7/0x710 [ 136.834519][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 136.834544][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 136.834578][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 136.834617][ C0] nsim_dev_trap_report_work+0x2af/0xd20 [ 136.834660][ C0] process_one_work+0xa23/0x1940 [ 136.834698][ C0] ? __pfx_process_one_work+0x10/0x10 [ 136.834732][ C0] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 136.834764][ C0] worker_thread+0x5ef/0xe50 [ 136.834797][ C0] ? __pfx_worker_thread+0x10/0x10 [ 136.834824][ C0] ? kthread+0x13a/0x450 [ 136.834845][ C0] ? __pfx_worker_thread+0x10/0x10 [ 136.834869][ C0] kthread+0x370/0x450 [ 136.834890][ C0] ? __pfx_kthread+0x10/0x10 [ 136.834915][ C0] ret_from_fork+0x72b/0xd50 [ 136.834949][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 136.834983][ C0] ? __switch_to+0x800/0x10f0 [ 136.835007][ C0] ? __pfx_kthread+0x10/0x10 [ 136.835032][ C0] ret_from_fork_asm+0x1a/0x30 [ 136.835079][ C0] [ 136.835093][ C0] FAULT_INJECTION: forcing a failure. [ 136.835093][ C0] name failslab, interval 1, probability 100, space 0, times 30 [ 136.837570][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 136.837596][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 136.837614][ C1] Call Trace: [ 136.837621][ C1] [ 136.837629][ C1] dump_stack_lvl+0x100/0x190 [ 136.837658][ C1] should_fail_ex.cold+0x5/0xa [ 136.837686][ C1] should_failslab+0xc2/0x120 [ 136.837715][ C1] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 136.837743][ C1] ? __alloc_skb+0x5b7/0x710 [ 136.837768][ C1] ? __alloc_skb+0x140/0x710 [ 136.837798][ C1] __alloc_skb+0x140/0x710 [ 136.837823][ C1] ? __alloc_skb+0x5b7/0x710 [ 136.837847][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 136.837874][ C1] ? lock_acquire+0x1b9/0x370 [ 136.837906][ C1] __netdev_alloc_skb+0x7a/0x960 [ 136.837936][ C1] __ieee80211_beacon_get+0xba1/0x1ee0 [ 136.837969][ C1] ? __lock_acquire+0x49f/0x1a40 [ 136.838000][ C1] ieee80211_beacon_get_tim+0xa6/0x280 [ 136.838031][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 136.838069][ C1] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 136.838107][ C1] __iterate_interfaces+0x2e6/0x650 [ 136.838133][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 136.838166][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 136.838196][ C1] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 136.838229][ C1] mac80211_hwsim_beacon+0xe5/0x2a0 [ 136.838267][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 136.838304][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 136.838350][ C1] hrtimer_run_softirq+0x17d/0x2c0 [ 136.838388][ C1] handle_softirqs+0x1ea/0x9b0 [ 136.838422][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 136.838452][ C1] ? run_ksoftirqd+0x5b/0x60 [ 136.838481][ C1] ? rcu_is_watching+0x12/0xc0 [ 136.838516][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 136.838546][ C1] run_ksoftirqd+0x38/0x60 [ 136.838574][ C1] smpboot_thread_fn+0x3d3/0xaa0 [ 136.838620][ C1] ? kthread+0x13a/0x450 [ 136.838639][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 136.838673][ C1] kthread+0x370/0x450 [ 136.838694][ C1] ? __pfx_kthread+0x10/0x10 [ 136.838718][ C1] ret_from_fork+0x72b/0xd50 [ 136.838751][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 136.838784][ C1] ? __switch_to+0x800/0x10f0 [ 136.838807][ C1] ? __pfx_kthread+0x10/0x10 [ 136.838832][ C1] ret_from_fork_asm+0x1a/0x30 [ 136.838879][ C1] [ 136.838902][ C1] FAULT_INJECTION: forcing a failure. [ 136.838902][ C1] name failslab, interval 1, probability 100, space 0, times 29 [ 136.842331][ C0] CPU: 0 UID: 0 PID: 134 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 136.842358][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 136.842373][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 136.842401][ C0] Call Trace: [ 136.842407][ C0] [ 136.842416][ C0] dump_stack_lvl+0x100/0x190 [ 136.842444][ C0] should_fail_ex.cold+0x5/0xa [ 136.842471][ C0] should_failslab+0xc2/0x120 [ 136.842501][ C0] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 136.842531][ C0] ? __alloc_skb+0x140/0x710 [ 136.842562][ C0] __alloc_skb+0x140/0x710 [ 136.842586][ C0] ? __alloc_skb+0x5b7/0x710 [ 136.842612][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 136.842640][ C0] ? lock_acquire+0x1b9/0x370 [ 136.842671][ C0] ? __pfx_wg_expired_send_persistent_keepalive+0x10/0x10 [ 136.842706][ C0] wg_packet_send_keepalive+0x7a/0x300 [ 136.842745][ C0] wg_expired_send_persistent_keepalive+0x5e/0x80 [ 136.842781][ C0] call_timer_fn+0x19a/0x610 [ 136.842807][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 136.842838][ C0] ? __pfx_wg_expired_send_persistent_keepalive+0x10/0x10 [ 136.842873][ C0] ? mark_held_locks+0x40/0x70 [ 136.842904][ C0] ? __pfx_wg_expired_send_persistent_keepalive+0x10/0x10 [ 136.842938][ C0] __run_timers+0x757/0xb00 [ 136.842973][ C0] ? __pfx___run_timers+0x10/0x10 [ 136.843010][ C0] ? ktime_get+0x9f/0x320 [ 136.843037][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 136.843079][ C0] run_timer_base+0x114/0x190 [ 136.843111][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 136.843143][ C0] run_timer_softirq+0x1a/0x50 [ 136.843169][ C0] handle_softirqs+0x1ea/0x9b0 [ 136.843204][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 136.843235][ C0] ? _raw_spin_unlock+0x28/0x50 [ 136.843269][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 136.843296][ C0] __irq_exit_rcu+0x162/0x210 [ 136.843325][ C0] irq_exit_rcu+0x9/0x30 [ 136.843353][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 136.843378][ C0] [ 136.843386][ C0] [ 136.843394][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 136.843423][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 136.843452][ C0] Code: d6 ef 5e 00 48 89 df 5b e9 fd 6a 64 00 be 03 00 00 00 5b e9 a2 c3 13 03 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 65 8b 05 e5 df 59 12 48 8b 34 24 65 48 8b 15 c1 df 59 [ 136.843473][ C0] RSP: 0018:ffffc90002dbf9d8 EFLAGS: 00000293 [ 136.843493][ C0] RAX: 0000000000000000 RBX: 0000000000000200 RCX: ffffffff8174fd6c [ 136.843508][ C0] RDX: ffff88801ff38000 RSI: ffffffff8174fd76 RDI: ffff88801ff38000 [ 136.843524][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 136.843537][ C0] R10: 0000000000000200 R11: 0000000000000001 R12: 0000000000000200 [ 136.843551][ C0] R13: ffffffff8d4ea100 R14: 0000000000000001 R15: 0000000000000000 [ 136.843574][ C0] ? dump_stack_lvl+0x16c/0x190 [ 136.843599][ C0] ? dump_stack_lvl+0x176/0x190 [ 136.843628][ C0] dump_stack_lvl+0x17c/0x190 [ 136.843656][ C0] should_fail_ex.cold+0x5/0xa [ 136.843684][ C0] should_failslab+0xc2/0x120 [ 136.843714][ C0] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 136.843744][ C0] ? __alloc_skb+0x140/0x710 [ 136.843774][ C0] __alloc_skb+0x140/0x710 [ 136.843800][ C0] ? __alloc_skb+0x5b7/0x710 [ 136.843825][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 136.843851][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 136.843885][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 136.843924][ C0] nsim_dev_trap_report_work+0x2af/0xd20 [ 136.843967][ C0] process_one_work+0xa23/0x1940 [ 136.844004][ C0] ? __pfx_process_one_work+0x10/0x10 [ 136.844038][ C0] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 136.844070][ C0] worker_thread+0x5ef/0xe50 [ 136.844103][ C0] ? __pfx_worker_thread+0x10/0x10 [ 136.844135][ C0] ? kthread+0x13a/0x450 [ 136.844155][ C0] ? __pfx_worker_thread+0x10/0x10 [ 136.844179][ C0] kthread+0x370/0x450 [ 136.844200][ C0] ? __pfx_kthread+0x10/0x10 [ 136.844225][ C0] ret_from_fork+0x72b/0xd50 [ 136.844258][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 136.844292][ C0] ? __switch_to+0x800/0x10f0 [ 136.844316][ C0] ? __pfx_kthread+0x10/0x10 [ 136.844340][ C0] ret_from_fork_asm+0x1a/0x30 [ 136.844389][ C0] [ 136.849790][ T7210] CPU: 0 UID: 0 PID: 7210 Comm: syz.1.360 Not tainted syzkaller #0 PREEMPT(full) [ 136.849819][ T7210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 136.849833][ T7210] Call Trace: [ 136.849840][ T7210] [ 136.849848][ T7210] dump_stack_lvl+0x100/0x190 [ 136.849879][ T7210] should_fail_ex.cold+0x5/0xa [ 136.849906][ T7210] should_failslab+0xc2/0x120 [ 136.849935][ T7210] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 136.849962][ T7210] ? __alloc_skb+0x5b7/0x710 [ 136.849986][ T7210] ? __alloc_skb+0x140/0x710 [ 136.850015][ T7210] __alloc_skb+0x140/0x710 [ 136.850038][ T7210] ? __alloc_skb+0x5b7/0x710 [ 136.850062][ T7210] ? __pfx___alloc_skb+0x10/0x10 [ 136.850088][ T7210] ? __pfx_widen_string+0x10/0x10 [ 136.850133][ T7210] alloc_skb_with_frags+0xdd/0x760 [ 136.850164][ T7210] ? widen_string+0xdb/0x2f0 [ 136.850199][ T7210] ? __pfx_widen_string+0x10/0x10 [ 136.850236][ T7210] sock_alloc_send_pskb+0x801/0x980 [ 136.850265][ T7210] ? format_decode+0x1ad/0xdd0 [ 136.850301][ T7210] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 136.850325][ T7210] ? put_dec+0x2e/0xc0 [ 136.850352][ T7210] ? put_dec_trunc8+0x28b/0x370 [ 136.850387][ T7210] ? __lock_acquire+0x49f/0x1a40 [ 136.850417][ T7210] __ip_append_data+0x20d3/0x44d0 [ 136.850448][ T7210] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 136.850469][ T7210] ? find_held_lock+0x2b/0x80 [ 136.850510][ T7210] ? ip_dst_mtu_maybe_forward.constprop.0+0x3e9/0x750 [ 136.850541][ T7210] ? __pfx___ip_append_data+0x10/0x10 [ 136.850564][ T7210] ? ip_route_output_key_hash_rcu+0x1f8e/0x2870 [ 136.850601][ T7210] ip_make_skb+0x28b/0x310 [ 136.850628][ T7210] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 136.850654][ T7210] ? __pfx_ip_make_skb+0x10/0x10 [ 136.850677][ T7210] ? ip_route_output_key_hash+0x14c/0x2b0 [ 136.850723][ T7210] ? udp_sendmsg+0x171c/0x2720 [ 136.850744][ T7210] udp_sendmsg+0x171c/0x2720 [ 136.850775][ T7210] ? __pfx_udp_sendmsg+0x10/0x10 [ 136.850798][ T7210] ? __pfx_avc_has_perm+0x10/0x10 [ 136.850838][ T7210] ? __pfx_sock_has_perm+0x10/0x10 [ 136.850885][ T7210] ? __pfx_udp_sendmsg+0x10/0x10 [ 136.850908][ T7210] inet_sendmsg+0x105/0x140 [ 136.850936][ T7210] __sys_sendto+0x453/0x4e0 [ 136.850960][ T7210] ? __pfx_inet_sendmsg+0x10/0x10 [ 136.850989][ T7210] ? __pfx___sys_sendto+0x10/0x10 [ 136.851021][ T7210] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 136.851058][ T7210] ? __pfx___x64_sys_futex+0x10/0x10 [ 136.851089][ T7210] ? ksys_write+0x1ac/0x250 [ 136.851129][ T7210] ? __pfx_ksys_write+0x10/0x10 [ 136.851170][ T7210] __x64_sys_sendto+0xe0/0x1c0 [ 136.851196][ T7210] ? do_syscall_64+0x90/0x870 [ 136.851221][ T7210] ? lockdep_hardirqs_on+0x78/0x100 [ 136.851247][ T7210] do_syscall_64+0x115/0x870 [ 136.851272][ T7210] ? clear_bhb_loop+0x40/0x90 [ 136.851299][ T7210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.851322][ T7210] RIP: 0033:0x7fe2ffd9de99 [ 136.851340][ T7210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.851362][ T7210] RSP: 002b:00007fe300c16028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 136.851383][ T7210] RAX: ffffffffffffffda RBX: 00007fe300025fa0 RCX: 00007fe2ffd9de99 [ 136.851398][ T7210] RDX: 0000000000000010 RSI: 0000200000000200 RDI: 0000000000000005 [ 136.851412][ T7210] RBP: 00007fe2ffe33eaf R08: 0000200000000300 R09: 0000000000000010 [ 136.851427][ T7210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.851441][ T7210] R13: 00007fe300026038 R14: 00007fe300025fa0 R15: 00007ffe6bd1ac78 [ 136.851471][ T7210] [ 136.855911][ T4966] CPU: 0 UID: 0 PID: 4966 Comm: klogd Not tainted syzkaller #0 PREEMPT(full) [ 136.855937][ T4966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 136.855949][ T4966] Call Trace: [ 136.855957][ T4966] [ 136.855964][ T4966] dump_stack_lvl+0x100/0x190 [ 136.855993][ T4966] should_fail_ex.cold+0x5/0xa [ 136.856018][ T4966] should_failslab+0xc2/0x120 [ 136.856045][ T4966] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 136.856071][ T4966] ? __alloc_skb+0x5b7/0x710 [ 136.856094][ T4966] ? __alloc_skb+0x140/0x710 [ 136.856126][ T4966] __alloc_skb+0x140/0x710 [ 136.856149][ T4966] ? __alloc_skb+0x5b7/0x710 [ 136.856172][ T4966] ? __pfx___alloc_skb+0x10/0x10 [ 136.856194][ T4966] ? __x64_sys_syslog+0x74/0xb0 [ 136.856224][ T4966] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.856253][ T4966] alloc_skb_with_frags+0xdd/0x760 [ 136.856280][ T4966] ? find_held_lock+0x2b/0x80 [ 136.856311][ T4966] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 136.856336][ T4966] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 136.856365][ T4966] sock_alloc_send_pskb+0x801/0x980 [ 136.856393][ T4966] ? avc_has_perm+0x135/0x1e0 [ 136.856419][ T4966] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 136.856442][ T4966] ? selinux_socket_getpeersec_dgram+0x1a4/0x380 [ 136.856472][ T4966] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 136.856505][ T4966] ? kasan_quarantine_put+0x104/0x240 [ 136.856536][ T4966] unix_dgram_sendmsg+0x3c7/0x1810 [ 136.856570][ T4966] ? __pfx_syslog_print+0x10/0x10 [ 136.856595][ T4966] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 136.856626][ T4966] ? selinux_socket_sendmsg+0x198/0x2f0 [ 136.856662][ T4966] __sys_sendto+0x48b/0x4e0 [ 136.856684][ T4966] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 136.856711][ T4966] ? __pfx___sys_sendto+0x10/0x10 [ 136.856741][ T4966] ? do_syslog+0x18c/0x6d0 [ 136.856779][ T4966] ? xfd_validate_state+0x129/0x190 [ 136.856814][ T4966] __x64_sys_sendto+0xe0/0x1c0 [ 136.856837][ T4966] ? do_syscall_64+0x90/0x870 [ 136.856860][ T4966] ? lockdep_hardirqs_on+0x78/0x100 [ 136.856883][ T4966] do_syscall_64+0x115/0x870 [ 136.856906][ T4966] ? clear_bhb_loop+0x40/0x90 [ 136.856932][ T4966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.856953][ T4966] RIP: 0033:0x7f5260d2c407 [ 136.856971][ T4966] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 136.856991][ T4966] RSP: 002b:00007fff3b44f750 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 136.857011][ T4966] RAX: ffffffffffffffda RBX: 00007f5260bdcc80 RCX: 00007f5260d2c407 [ 136.857026][ T4966] RDX: 0000000000000055 RSI: 00007fff3b44f890 RDI: 0000000000000003 [ 136.857039][ T4966] RBP: 00007fff3b44fcc0 R08: 0000000000000000 R09: 0000000000000000 [ 136.857051][ T4966] R10: 0000000000004000 R11: 0000000000000202 R12: 00007fff3b44fcd8 [ 136.857065][ T4966] R13: 00007fff3b44f890 R14: 000000000000003a R15: 00007fff3b44f890 [ 136.857093][ T4966] [ 136.857543][ T4966] FAULT_INJECTION: forcing a failure. [ 136.857543][ T4966] name failslab, interval 1, probability 100, space 0, times 25 [ 136.858174][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 136.858201][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 136.858214][ C1] Call Trace: [ 136.858221][ C1] [ 136.858229][ C1] dump_stack_lvl+0x100/0x190 [ 136.858259][ C1] should_fail_ex.cold+0x5/0xa [ 136.858285][ C1] should_failslab+0xc2/0x120 [ 136.858315][ C1] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 136.858343][ C1] ? __alloc_skb+0x5b7/0x710 [ 136.858368][ C1] ? __alloc_skb+0x140/0x710 [ 136.858397][ C1] __alloc_skb+0x140/0x710 [ 136.858421][ C1] ? __alloc_skb+0x5b7/0x710 [ 136.858447][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 136.858474][ C1] ? lock_acquire+0x1b9/0x370 [ 136.858506][ C1] __netdev_alloc_skb+0x7a/0x960 [ 136.858537][ C1] __ieee80211_beacon_get+0xba1/0x1ee0 [ 136.858570][ C1] ? __lock_acquire+0x49f/0x1a40 [ 136.858602][ C1] ieee80211_beacon_get_tim+0xa6/0x280 [ 136.858638][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 136.858676][ C1] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 136.858716][ C1] __iterate_interfaces+0x2e6/0x650 [ 136.858742][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 136.858776][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 136.858805][ C1] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 136.858839][ C1] mac80211_hwsim_beacon+0xe5/0x2a0 [ 136.858877][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 136.858914][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 136.858961][ C1] hrtimer_run_softirq+0x17d/0x2c0 [ 136.858998][ C1] handle_softirqs+0x1ea/0x9b0 [ 136.859033][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 136.859063][ C1] ? run_ksoftirqd+0x5b/0x60 [ 136.859091][ C1] ? rcu_is_watching+0x12/0xc0 [ 136.859127][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 136.859155][ C1] run_ksoftirqd+0x38/0x60 [ 136.859183][ C1] smpboot_thread_fn+0x3d3/0xaa0 [ 136.859223][ C1] ? kthread+0x13a/0x450 [ 136.859243][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 136.859278][ C1] kthread+0x370/0x450 [ 136.859299][ C1] ? __pfx_kthread+0x10/0x10 [ 136.859322][ C1] ret_from_fork+0x72b/0xd50 [ 136.859355][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 136.859388][ C1] ? __switch_to+0x800/0x10f0 [ 136.859411][ C1] ? __pfx_kthread+0x10/0x10 [ 136.859435][ C1] ret_from_fork_asm+0x1a/0x30 [ 136.859483][ C1] [ 136.859506][ C1] FAULT_INJECTION: forcing a failure. [ 136.859506][ C1] name failslab, interval 1, probability 100, space 0, times 24 [ 136.873019][ T3225] CPU: 0 UID: 0 PID: 3225 Comm: kworker/R-bat_e Not tainted syzkaller #0 PREEMPT(full) [ 136.873046][ T3225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 136.873060][ T3225] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 136.873089][ T3225] Call Trace: [ 136.873095][ T3225] [ 136.873108][ T3225] dump_stack_lvl+0x100/0x190 [ 136.873136][ T3225] should_fail_ex.cold+0x5/0xa [ 136.873161][ T3225] should_failslab+0xc2/0x120 [ 136.873189][ T3225] kmem_cache_alloc_noprof+0x91/0x6a0 [ 136.873215][ T3225] ? skb_clone+0x190/0x400 [ 136.873244][ T3225] skb_clone+0x190/0x400 [ 136.873271][ T3225] batadv_iv_send_outstanding_bat_ogm_packet+0x650/0x800 [ 136.873308][ T3225] process_one_work+0xa23/0x1940 [ 136.873343][ T3225] ? __pfx_process_one_work+0x10/0x10 [ 136.873375][ T3225] ? __pfx_batadv_iv_send_outstanding_bat_ogm_packet+0x10/0x10 [ 136.873406][ T3225] rescuer_thread+0x905/0x14a0 [ 136.873439][ T3225] ? rescuer_thread+0x240/0x14a0 [ 136.873462][ T3225] ? rescuer_thread+0x118/0x14a0 [ 136.873484][ T3225] ? __pfx_rescuer_thread+0x10/0x10 [ 136.873508][ T3225] ? __kthread_parkme+0x18c/0x230 [ 136.873542][ T3225] ? kthread+0x13a/0x450 [ 136.873561][ T3225] ? __pfx_rescuer_thread+0x10/0x10 [ 136.873582][ T3225] kthread+0x370/0x450 [ 136.873602][ T3225] ? __pfx_kthread+0x10/0x10 [ 136.873624][ T3225] ret_from_fork+0x72b/0xd50 [ 136.873655][ T3225] ? __pfx_ret_from_fork+0x10/0x10 [ 136.873685][ T3225] ? __switch_to+0x800/0x10f0 [ 136.873707][ T3225] ? __pfx_kthread+0x10/0x10 [ 136.873729][ T3225] ret_from_fork_asm+0x1a/0x30 [ 136.873774][ T3225] [ 136.875004][ T3225] FAULT_INJECTION: forcing a failure. [ 136.875004][ T3225] name failslab, interval 1, probability 100, space 0, times 21 [ 136.880262][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 136.880290][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 136.880304][ C1] Call Trace: [ 136.880311][ C1] [ 136.880320][ C1] dump_stack_lvl+0x100/0x190 [ 136.880350][ C1] should_fail_ex.cold+0x5/0xa [ 136.880376][ C1] should_failslab+0xc2/0x120 [ 136.880407][ C1] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 136.880436][ C1] ? __alloc_skb+0x5b7/0x710 [ 136.880460][ C1] ? __alloc_skb+0x140/0x710 [ 136.880491][ C1] __alloc_skb+0x140/0x710 [ 136.880515][ C1] ? __alloc_skb+0x5b7/0x710 [ 136.880539][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 136.880567][ C1] ? lock_acquire+0x1b9/0x370 [ 136.880599][ C1] __netdev_alloc_skb+0x7a/0x960 [ 136.880636][ C1] __ieee80211_beacon_get+0xba1/0x1ee0 [ 136.880669][ C1] ? __lock_acquire+0x49f/0x1a40 [ 136.880701][ C1] ieee80211_beacon_get_tim+0xa6/0x280 [ 136.880731][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 136.880770][ C1] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 136.880809][ C1] __iterate_interfaces+0x2e6/0x650 [ 136.880836][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 136.880869][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 136.880899][ C1] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 136.880932][ C1] mac80211_hwsim_beacon+0xe5/0x2a0 [ 136.880970][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 136.881007][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 136.881054][ C1] hrtimer_run_softirq+0x17d/0x2c0 [ 136.881092][ C1] handle_softirqs+0x1ea/0x9b0 [ 136.881126][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 136.881156][ C1] ? run_ksoftirqd+0x5b/0x60 [ 136.881184][ C1] ? rcu_is_watching+0x12/0xc0 [ 136.881220][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 136.881249][ C1] run_ksoftirqd+0x38/0x60 [ 136.881277][ C1] smpboot_thread_fn+0x3d3/0xaa0 [ 136.881318][ C1] ? kthread+0x13a/0x450 [ 136.881338][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 136.881372][ C1] kthread+0x370/0x450 [ 136.881393][ C1] ? __pfx_kthread+0x10/0x10 [ 136.881417][ C1] ret_from_fork+0x72b/0xd50 [ 136.881450][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 136.881483][ C1] ? __switch_to+0x800/0x10f0 [ 136.881506][ C1] ? __pfx_kthread+0x10/0x10 [ 136.881531][ C1] ret_from_fork_asm+0x1a/0x30 [ 136.881577][ C1] [ 136.881601][ C1] FAULT_INJECTION: forcing a failure. [ 136.881601][ C1] name failslab, interval 1, probability 100, space 0, times 20 [ 136.891043][ T3225] CPU: 0 UID: 0 PID: 3225 Comm: kworker/R-bat_e Not tainted syzkaller #0 PREEMPT(full) [ 136.891070][ T3225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 136.891084][ T3225] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 136.891118][ T3225] Call Trace: [ 136.891125][ T3225] [ 136.891132][ T3225] dump_stack_lvl+0x100/0x190 [ 136.891160][ T3225] should_fail_ex.cold+0x5/0xa [ 136.891186][ T3225] should_failslab+0xc2/0x120 [ 136.891213][ T3225] kmem_cache_alloc_noprof+0x91/0x6a0 [ 136.891239][ T3225] ? skb_clone+0x190/0x400 [ 136.891269][ T3225] skb_clone+0x190/0x400 [ 136.891295][ T3225] batadv_iv_send_outstanding_bat_ogm_packet+0x650/0x800 [ 136.891332][ T3225] process_one_work+0xa23/0x1940 [ 136.891367][ T3225] ? __pfx_process_one_work+0x10/0x10 [ 136.891399][ T3225] ? __pfx_batadv_iv_send_outstanding_bat_ogm_packet+0x10/0x10 [ 136.891430][ T3225] rescuer_thread+0x905/0x14a0 [ 136.891463][ T3225] ? rescuer_thread+0x240/0x14a0 [ 136.891486][ T3225] ? rescuer_thread+0x118/0x14a0 [ 136.891509][ T3225] ? __pfx_rescuer_thread+0x10/0x10 [ 136.891533][ T3225] ? __kthread_parkme+0x18c/0x230 [ 136.891566][ T3225] ? kthread+0x13a/0x450 [ 136.891585][ T3225] ? __pfx_rescuer_thread+0x10/0x10 [ 136.891606][ T3225] kthread+0x370/0x450 [ 136.891625][ T3225] ? __pfx_kthread+0x10/0x10 [ 136.891647][ T3225] ret_from_fork+0x72b/0xd50 [ 136.891678][ T3225] ? __pfx_ret_from_fork+0x10/0x10 [ 136.891709][ T3225] ? __switch_to+0x800/0x10f0 [ 136.891731][ T3225] ? __pfx_kthread+0x10/0x10 [ 136.891753][ T3225] ret_from_fork_asm+0x1a/0x30 [ 136.891798][ T3225] [ 136.891838][ T3225] FAULT_INJECTION: forcing a failure. [ 136.891838][ T3225] name failslab, interval 1, probability 100, space 0, times 19 [ 136.897072][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 136.897099][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 136.897113][ C1] Call Trace: [ 136.897120][ C1] [ 136.897128][ C1] dump_stack_lvl+0x100/0x190 [ 136.897157][ C1] should_fail_ex.cold+0x5/0xa [ 136.897184][ C1] should_failslab+0xc2/0x120 [ 136.897214][ C1] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 136.897243][ C1] ? __alloc_skb+0x5b7/0x710 [ 136.897267][ C1] ? __alloc_skb+0x140/0x710 [ 136.897298][ C1] __alloc_skb+0x140/0x710 [ 136.897322][ C1] ? __alloc_skb+0x5b7/0x710 [ 136.897347][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 136.897374][ C1] ? lock_acquire+0x1b9/0x370 [ 136.897406][ C1] __netdev_alloc_skb+0x7a/0x960 [ 136.897437][ C1] __ieee80211_beacon_get+0xba1/0x1ee0 [ 136.897470][ C1] ? __lock_acquire+0x49f/0x1a40 [ 136.897502][ C1] ieee80211_beacon_get_tim+0xa6/0x280 [ 136.897532][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 136.897571][ C1] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 136.897615][ C1] __iterate_interfaces+0x2e6/0x650 [ 136.897643][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 136.897675][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 136.897704][ C1] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 136.897737][ C1] mac80211_hwsim_beacon+0xe5/0x2a0 [ 136.897775][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 136.897812][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 136.897858][ C1] hrtimer_run_softirq+0x17d/0x2c0 [ 136.897896][ C1] handle_softirqs+0x1ea/0x9b0 [ 136.897930][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 136.897960][ C1] ? run_ksoftirqd+0x5b/0x60 [ 136.897989][ C1] ? rcu_is_watching+0x12/0xc0 [ 136.898024][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 136.898053][ C1] run_ksoftirqd+0x38/0x60 [ 136.898081][ C1] smpboot_thread_fn+0x3d3/0xaa0 [ 136.898120][ C1] ? kthread+0x13a/0x450 [ 136.898141][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 136.898176][ C1] kthread+0x370/0x450 [ 136.898196][ C1] ? __pfx_kthread+0x10/0x10 [ 136.898220][ C1] ret_from_fork+0x72b/0xd50 [ 136.898252][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 136.898286][ C1] ? __switch_to+0x800/0x10f0 [ 136.898308][ C1] ? __pfx_kthread+0x10/0x10 [ 136.898332][ C1] ret_from_fork_asm+0x1a/0x30 [ 136.898380][ C1] [ 136.898403][ C1] FAULT_INJECTION: forcing a failure. [ 136.898403][ C1] name failslab, interval 1, probability 100, space 0, times 18 [ 136.910082][ T3225] CPU: 0 UID: 0 PID: 3225 Comm: kworker/R-bat_e Not tainted syzkaller #0 PREEMPT(full) [ 136.910114][ T3225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 136.910128][ T3225] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 136.910158][ T3225] Call Trace: [ 136.910165][ T3225] [ 136.910173][ T3225] dump_stack_lvl+0x100/0x190 [ 136.910198][ T3225] should_fail_ex.cold+0x5/0xa [ 136.910225][ T3225] should_failslab+0xc2/0x120 [ 136.910253][ T3225] kmem_cache_alloc_noprof+0x91/0x6a0 [ 136.910278][ T3225] ? skb_clone+0x190/0x400 [ 136.910309][ T3225] skb_clone+0x190/0x400 [ 136.910336][ T3225] batadv_iv_send_outstanding_bat_ogm_packet+0x650/0x800 [ 136.910371][ T3225] process_one_work+0xa23/0x1940 [ 136.910407][ T3225] ? __pfx_process_one_work+0x10/0x10 [ 136.910439][ T3225] ? __pfx_batadv_iv_send_outstanding_bat_ogm_packet+0x10/0x10 [ 136.910470][ T3225] rescuer_thread+0x905/0x14a0 [ 136.910503][ T3225] ? rescuer_thread+0x240/0x14a0 [ 136.910526][ T3225] ? rescuer_thread+0x118/0x14a0 [ 136.910548][ T3225] ? __pfx_rescuer_thread+0x10/0x10 [ 136.910573][ T3225] ? __kthread_parkme+0x18c/0x230 [ 136.910606][ T3225] ? kthread+0x13a/0x450 [ 136.910624][ T3225] ? __pfx_rescuer_thread+0x10/0x10 [ 136.910645][ T3225] kthread+0x370/0x450 [ 136.910665][ T3225] ? __pfx_kthread+0x10/0x10 [ 136.910687][ T3225] ret_from_fork+0x72b/0xd50 [ 136.910717][ T3225] ? __pfx_ret_from_fork+0x10/0x10 [ 136.910747][ T3225] ? __switch_to+0x800/0x10f0 [ 136.910769][ T3225] ? __pfx_kthread+0x10/0x10 [ 136.910791][ T3225] ret_from_fork_asm+0x1a/0x30 [ 136.910835][ T3225] [ 136.911345][ T3225] FAULT_INJECTION: forcing a failure. [ 136.911345][ T3225] name failslab, interval 1, probability 100, space 0, times 14 [ 136.913172][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 136.913199][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 136.913212][ C1] Call Trace: [ 136.913219][ C1] [ 136.913226][ C1] dump_stack_lvl+0x100/0x190 [ 136.913256][ C1] should_fail_ex.cold+0x5/0xa [ 136.913284][ C1] should_failslab+0xc2/0x120 [ 136.913313][ C1] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 136.913341][ C1] ? __alloc_skb+0x5b7/0x710 [ 136.913366][ C1] ? __alloc_skb+0x140/0x710 [ 136.913396][ C1] __alloc_skb+0x140/0x710 [ 136.913420][ C1] ? __alloc_skb+0x5b7/0x710 [ 136.913446][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 136.913473][ C1] ? lock_acquire+0x1b9/0x370 [ 136.913506][ C1] __netdev_alloc_skb+0x7a/0x960 [ 136.913537][ C1] __ieee80211_beacon_get+0xba1/0x1ee0 [ 136.913570][ C1] ? __lock_acquire+0x49f/0x1a40 [ 136.913618][ C1] ieee80211_beacon_get_tim+0xa6/0x280 [ 136.913649][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 136.913688][ C1] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 136.913726][ C1] __iterate_interfaces+0x2e6/0x650 [ 136.913753][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 136.913787][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 136.913816][ C1] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 136.913848][ C1] mac80211_hwsim_beacon+0xe5/0x2a0 [ 136.913886][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 136.913922][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 136.913968][ C1] hrtimer_run_softirq+0x17d/0x2c0 [ 136.914006][ C1] handle_softirqs+0x1ea/0x9b0 [ 136.914041][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 136.914070][ C1] ? run_ksoftirqd+0x5b/0x60 [ 136.914098][ C1] ? rcu_is_watching+0x12/0xc0 [ 136.914132][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 136.914161][ C1] run_ksoftirqd+0x38/0x60 [ 136.914188][ C1] smpboot_thread_fn+0x3d3/0xaa0 [ 136.914229][ C1] ? kthread+0x13a/0x450 [ 136.914248][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 136.914283][ C1] kthread+0x370/0x450 [ 136.914303][ C1] ? __pfx_kthread+0x10/0x10 [ 136.914341][ C1] ret_from_fork+0x72b/0xd50 [ 136.914374][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 136.914407][ C1] ? __switch_to+0x800/0x10f0 [ 136.914430][ C1] ? __pfx_kthread+0x10/0x10 [ 136.914454][ C1] ret_from_fork_asm+0x1a/0x30 [ 136.914501][ C1] [ 136.914524][ C1] FAULT_INJECTION: forcing a failure. [ 136.914524][ C1] name failslab, interval 1, probability 100, space 0, times 13 [ 136.916105][ T3225] CPU: 0 UID: 0 PID: 3225 Comm: kworker/R-bat_e Not tainted syzkaller #0 PREEMPT(full) [ 136.916130][ T3225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 136.916142][ T3225] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 136.916169][ T3225] Call Trace: [ 136.916176][ T3225] [ 136.916183][ T3225] dump_stack_lvl+0x100/0x190 [ 136.916210][ T3225] should_fail_ex.cold+0x5/0xa [ 136.916235][ T3225] should_failslab+0xc2/0x120 [ 136.916261][ T3225] kmem_cache_alloc_noprof+0x91/0x6a0 [ 136.916287][ T3225] ? skb_clone+0x190/0x400 [ 136.916317][ T3225] skb_clone+0x190/0x400 [ 136.916343][ T3225] batadv_iv_send_outstanding_bat_ogm_packet+0x650/0x800 [ 136.916380][ T3225] process_one_work+0xa23/0x1940 [ 136.916415][ T3225] ? __pfx_process_one_work+0x10/0x10 [ 136.916447][ T3225] ? __pfx_batadv_iv_send_outstanding_bat_ogm_packet+0x10/0x10 [ 136.916477][ T3225] rescuer_thread+0x905/0x14a0 [ 136.916510][ T3225] ? rescuer_thread+0x240/0x14a0 [ 136.916533][ T3225] ? rescuer_thread+0x118/0x14a0 [ 136.916556][ T3225] ? __pfx_rescuer_thread+0x10/0x10 [ 136.916580][ T3225] ? __kthread_parkme+0x18c/0x230 [ 136.916612][ T3225] ? kthread+0x13a/0x450 [ 136.916631][ T3225] ? __pfx_rescuer_thread+0x10/0x10 [ 136.916652][ T3225] kthread+0x370/0x450 [ 136.916672][ T3225] ? __pfx_kthread+0x10/0x10 [ 136.916694][ T3225] ret_from_fork+0x72b/0xd50 [ 136.916724][ T3225] ? __pfx_ret_from_fork+0x10/0x10 [ 136.916754][ T3225] ? __switch_to+0x800/0x10f0 [ 136.916775][ T3225] ? __pfx_kthread+0x10/0x10 [ 136.916798][ T3225] ret_from_fork_asm+0x1a/0x30 [ 136.916842][ T3225] [ 136.917256][ T3225] FAULT_INJECTION: forcing a failure. [ 136.917256][ T3225] name failslab, interval 1, probability 100, space 0, times 11 [ 136.920779][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 136.920804][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 136.920818][ C1] Call Trace: [ 136.920825][ C1] [ 136.920833][ C1] dump_stack_lvl+0x100/0x190 [ 136.920861][ C1] should_fail_ex.cold+0x5/0xa [ 136.920889][ C1] should_failslab+0xc2/0x120 [ 136.920919][ C1] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 136.920946][ C1] ? __alloc_skb+0x5b7/0x710 [ 136.920971][ C1] ? __alloc_skb+0x140/0x710 [ 136.921002][ C1] __alloc_skb+0x140/0x710 [ 136.921026][ C1] ? __alloc_skb+0x5b7/0x710 [ 136.921051][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 136.921078][ C1] ? lock_acquire+0x1b9/0x370 [ 136.921110][ C1] __netdev_alloc_skb+0x7a/0x960 [ 136.921141][ C1] __ieee80211_beacon_get+0xba1/0x1ee0 [ 136.921173][ C1] ? __lock_acquire+0x49f/0x1a40 [ 136.921205][ C1] ieee80211_beacon_get_tim+0xa6/0x280 [ 136.921236][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 136.921273][ C1] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 136.921312][ C1] __iterate_interfaces+0x2e6/0x650 [ 136.921338][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 136.921371][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 136.921400][ C1] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 136.921433][ C1] mac80211_hwsim_beacon+0xe5/0x2a0 [ 136.921471][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 136.921507][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 136.921553][ C1] hrtimer_run_softirq+0x17d/0x2c0 [ 136.921591][ C1] handle_softirqs+0x1ea/0x9b0 [ 136.921631][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 136.921661][ C1] ? run_ksoftirqd+0x5b/0x60 [ 136.921689][ C1] ? rcu_is_watching+0x12/0xc0 [ 136.921724][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 136.921753][ C1] run_ksoftirqd+0x38/0x60 [ 136.921780][ C1] smpboot_thread_fn+0x3d3/0xaa0 [ 136.921821][ C1] ? kthread+0x13a/0x450 [ 136.921841][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 136.921875][ C1] kthread+0x370/0x450 [ 136.921896][ C1] ? __pfx_kthread+0x10/0x10 [ 136.921920][ C1] ret_from_fork+0x72b/0xd50 [ 136.921953][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 136.921986][ C1] ? __switch_to+0x800/0x10f0 [ 136.922009][ C1] ? __pfx_kthread+0x10/0x10 [ 136.922033][ C1] ret_from_fork_asm+0x1a/0x30 [ 136.922081][ C1] [ 136.922101][ C1] FAULT_INJECTION: forcing a failure. [ 136.922101][ C1] name failslab, interval 1, probability 100, space 0, times 10 [ 136.925945][ T3225] CPU: 0 UID: 0 PID: 3225 Comm: kworker/R-bat_e Not tainted syzkaller #0 PREEMPT(full) [ 136.925972][ T3225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 136.925986][ T3225] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 136.926014][ T3225] Call Trace: [ 136.926020][ T3225] [ 136.926028][ T3225] dump_stack_lvl+0x100/0x190 [ 136.926054][ T3225] should_fail_ex.cold+0x5/0xa [ 136.926081][ T3225] should_failslab+0xc2/0x120 [ 136.926114][ T3225] kmem_cache_alloc_noprof+0x91/0x6a0 [ 136.926141][ T3225] ? skb_clone+0x190/0x400 [ 136.926171][ T3225] skb_clone+0x190/0x400 [ 136.926198][ T3225] batadv_iv_send_outstanding_bat_ogm_packet+0x650/0x800 [ 136.926234][ T3225] process_one_work+0xa23/0x1940 [ 136.926269][ T3225] ? __pfx_process_one_work+0x10/0x10 [ 136.926301][ T3225] ? __pfx_batadv_iv_send_outstanding_bat_ogm_packet+0x10/0x10 [ 136.926332][ T3225] rescuer_thread+0x905/0x14a0 [ 136.926364][ T3225] ? rescuer_thread+0x240/0x14a0 [ 136.926387][ T3225] ? rescuer_thread+0x118/0x14a0 [ 136.926409][ T3225] ? __pfx_rescuer_thread+0x10/0x10 [ 136.926433][ T3225] ? __kthread_parkme+0x18c/0x230 [ 136.926466][ T3225] ? kthread+0x13a/0x450 [ 136.926485][ T3225] ? __pfx_rescuer_thread+0x10/0x10 [ 136.926506][ T3225] kthread+0x370/0x450 [ 136.926525][ T3225] ? __pfx_kthread+0x10/0x10 [ 136.926548][ T3225] ret_from_fork+0x72b/0xd50 [ 136.926578][ T3225] ? __pfx_ret_from_fork+0x10/0x10 [ 136.926608][ T3225] ? __switch_to+0x800/0x10f0 [ 136.926629][ T3225] ? __pfx_kthread+0x10/0x10 [ 136.926652][ T3225] ret_from_fork_asm+0x1a/0x30 [ 136.926696][ T3225] [ 136.927087][ T3225] FAULT_INJECTION: forcing a failure. [ 136.927087][ T3225] name failslab, interval 1, probability 100, space 0, times 8 [ 136.930246][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 136.930272][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 136.930286][ C1] Call Trace: [ 136.930293][ C1] [ 136.930301][ C1] dump_stack_lvl+0x100/0x190 [ 136.930330][ C1] should_fail_ex.cold+0x5/0xa [ 136.930357][ C1] should_failslab+0xc2/0x120 [ 136.930387][ C1] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 136.930414][ C1] ? __alloc_skb+0x5b7/0x710 [ 136.930439][ C1] ? __alloc_skb+0x140/0x710 [ 136.930468][ C1] __alloc_skb+0x140/0x710 [ 136.930492][ C1] ? __alloc_skb+0x5b7/0x710 [ 136.930518][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 136.930545][ C1] ? lock_acquire+0x1b9/0x370 [ 136.930577][ C1] __netdev_alloc_skb+0x7a/0x960 [ 136.930613][ C1] __ieee80211_beacon_get+0xba1/0x1ee0 [ 136.930645][ C1] ? __lock_acquire+0x49f/0x1a40 [ 136.930677][ C1] ieee80211_beacon_get_tim+0xa6/0x280 [ 136.930708][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 136.930745][ C1] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 136.930784][ C1] __iterate_interfaces+0x2e6/0x650 [ 136.930808][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 136.930846][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 136.930876][ C1] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 136.930912][ C1] mac80211_hwsim_beacon+0xe5/0x2a0 [ 136.930950][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 136.930986][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 136.931032][ C1] hrtimer_run_softirq+0x17d/0x2c0 [ 136.931070][ C1] handle_softirqs+0x1ea/0x9b0 [ 136.931104][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 136.931135][ C1] ? run_ksoftirqd+0x5b/0x60 [ 136.931163][ C1] ? rcu_is_watching+0x12/0xc0 [ 136.931199][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 136.931228][ C1] run_ksoftirqd+0x38/0x60 [ 136.931256][ C1] smpboot_thread_fn+0x3d3/0xaa0 [ 136.931297][ C1] ? kthread+0x13a/0x450 [ 136.931317][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 136.931351][ C1] kthread+0x370/0x450 [ 136.931373][ C1] ? __pfx_kthread+0x10/0x10 [ 136.931396][ C1] ret_from_fork+0x72b/0xd50 [ 136.931429][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 136.931463][ C1] ? __switch_to+0x800/0x10f0 [ 136.931485][ C1] ? __pfx_kthread+0x10/0x10 [ 136.931509][ C1] ret_from_fork_asm+0x1a/0x30 [ 136.931557][ C1] [ 136.931579][ C1] FAULT_INJECTION: forcing a failure. [ 136.931579][ C1] name failslab, interval 1, probability 100, space 0, times 7 [ 136.936205][ T1170] FAULT_INJECTION: forcing a failure. [ 136.936205][ T1170] name failslab, interval 1, probability 100, space 0, times 7 [ 136.940624][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 136.940648][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 136.940658][ C1] Call Trace: [ 136.940663][ C1] [ 136.940669][ C1] dump_stack_lvl+0x100/0x190 [ 136.940692][ C1] should_fail_ex.cold+0x5/0xa [ 136.940714][ C1] should_failslab+0xc2/0x120 [ 136.940739][ C1] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 136.940765][ C1] ? __alloc_skb+0x5b7/0x710 [ 136.940790][ C1] ? __alloc_skb+0x140/0x710 [ 136.940820][ C1] __alloc_skb+0x140/0x710 [ 136.940844][ C1] ? __alloc_skb+0x5b7/0x710 [ 136.940869][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 136.940896][ C1] ? lock_acquire+0x1b9/0x370 [ 136.940928][ C1] __netdev_alloc_skb+0x7a/0x960 [ 136.940960][ C1] __ieee80211_beacon_get+0xba1/0x1ee0 [ 136.940992][ C1] ? __lock_acquire+0x49f/0x1a40 [ 136.941024][ C1] ieee80211_beacon_get_tim+0xa6/0x280 [ 136.941055][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 136.941093][ C1] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 136.941131][ C1] __iterate_interfaces+0x2e6/0x650 [ 136.941158][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 136.941190][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 136.941220][ C1] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 136.941252][ C1] mac80211_hwsim_beacon+0xe5/0x2a0 [ 136.941289][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 136.941326][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 136.941373][ C1] hrtimer_run_softirq+0x17d/0x2c0 [ 136.941411][ C1] handle_softirqs+0x1ea/0x9b0 [ 136.941445][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 136.941475][ C1] ? run_ksoftirqd+0x5b/0x60 [ 136.941503][ C1] ? rcu_is_watching+0x12/0xc0 [ 136.941538][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 136.941568][ C1] run_ksoftirqd+0x38/0x60 [ 136.941595][ C1] smpboot_thread_fn+0x3d3/0xaa0 [ 136.941641][ C1] ? kthread+0x13a/0x450 [ 136.941662][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 136.941695][ C1] kthread+0x370/0x450 [ 136.941716][ C1] ? __pfx_kthread+0x10/0x10 [ 136.941740][ C1] ret_from_fork+0x72b/0xd50 [ 136.941773][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 136.941807][ C1] ? __switch_to+0x800/0x10f0 [ 136.941830][ C1] ? __pfx_kthread+0x10/0x10 [ 136.941854][ C1] ret_from_fork_asm+0x1a/0x30 [ 136.941902][ C1] [ 136.941925][ C1] FAULT_INJECTION: forcing a failure. [ 136.941925][ C1] name failslab, interval 1, probability 100, space 0, times 6 [ 136.945210][ T1170] CPU: 0 UID: 0 PID: 1170 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 136.945236][ T1170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 136.945250][ T1170] Workqueue: events_unbound nsim_dev_trap_report_work [ 136.945278][ T1170] Call Trace: [ 136.945285][ T1170] [ 136.945292][ T1170] dump_stack_lvl+0x100/0x190 [ 136.945318][ T1170] should_fail_ex.cold+0x5/0xa [ 136.945344][ T1170] should_failslab+0xc2/0x120 [ 136.945370][ T1170] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 136.945398][ T1170] ? __alloc_skb+0x140/0x710 [ 136.945427][ T1170] __alloc_skb+0x140/0x710 [ 136.945449][ T1170] ? __alloc_skb+0x5b7/0x710 [ 136.945473][ T1170] ? __pfx___alloc_skb+0x10/0x10 [ 136.945495][ T1170] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 136.945525][ T1170] ? __pfx___might_resched+0x10/0x10 [ 136.945557][ T1170] nsim_dev_trap_report_work+0x2af/0xd20 [ 136.945597][ T1170] process_one_work+0xa23/0x1940 [ 136.945632][ T1170] ? __pfx_process_one_work+0x10/0x10 [ 136.945664][ T1170] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 136.945693][ T1170] worker_thread+0x5ef/0xe50 [ 136.945724][ T1170] ? __pfx_worker_thread+0x10/0x10 [ 136.945748][ T1170] ? kthread+0x13a/0x450 [ 136.945766][ T1170] ? __pfx_worker_thread+0x10/0x10 [ 136.945788][ T1170] kthread+0x370/0x450 [ 136.945807][ T1170] ? __pfx_kthread+0x10/0x10 [ 136.945830][ T1170] ret_from_fork+0x72b/0xd50 [ 136.945859][ T1170] ? __pfx_ret_from_fork+0x10/0x10 [ 136.945891][ T1170] ? __switch_to+0x800/0x10f0 [ 136.945912][ T1170] ? __pfx_kthread+0x10/0x10 [ 136.945934][ T1170] ret_from_fork_asm+0x1a/0x30 [ 136.945979][ T1170] [ 136.945989][ T1170] FAULT_INJECTION: forcing a failure. [ 136.945989][ T1170] name failslab, interval 1, probability 100, space 0, times 5 [ 136.949734][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 136.949759][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 136.949773][ C1] Call Trace: [ 136.949781][ C1] [ 136.949788][ C1] dump_stack_lvl+0x100/0x190 [ 136.949817][ C1] should_fail_ex.cold+0x5/0xa [ 136.949844][ C1] should_failslab+0xc2/0x120 [ 136.949873][ C1] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 136.949901][ C1] ? __alloc_skb+0x5b7/0x710 [ 136.949925][ C1] ? __alloc_skb+0x140/0x710 [ 136.949955][ C1] __alloc_skb+0x140/0x710 [ 136.949979][ C1] ? __alloc_skb+0x5b7/0x710 [ 136.950004][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 136.950031][ C1] ? lock_acquire+0x1b9/0x370 [ 136.950063][ C1] __netdev_alloc_skb+0x7a/0x960 [ 136.950093][ C1] __ieee80211_beacon_get+0xba1/0x1ee0 [ 136.950125][ C1] ? __lock_acquire+0x49f/0x1a40 [ 136.950156][ C1] ieee80211_beacon_get_tim+0xa6/0x280 [ 136.950187][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 136.950226][ C1] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 136.950264][ C1] __iterate_interfaces+0x2e6/0x650 [ 136.950290][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 136.950323][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 136.950353][ C1] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 136.950385][ C1] mac80211_hwsim_beacon+0xe5/0x2a0 [ 136.950423][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 136.950459][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 136.950504][ C1] hrtimer_run_softirq+0x17d/0x2c0 [ 136.950542][ C1] handle_softirqs+0x1ea/0x9b0 [ 136.950575][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 136.950611][ C1] ? run_ksoftirqd+0x5b/0x60 [ 136.950639][ C1] ? rcu_is_watching+0x12/0xc0 [ 136.950675][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 136.950703][ C1] run_ksoftirqd+0x38/0x60 [ 136.950731][ C1] smpboot_thread_fn+0x3d3/0xaa0 [ 136.950770][ C1] ? kthread+0x13a/0x450 [ 136.950790][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 136.950824][ C1] kthread+0x370/0x450 [ 136.950844][ C1] ? __pfx_kthread+0x10/0x10 [ 136.950868][ C1] ret_from_fork+0x72b/0xd50 [ 136.950901][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 136.950934][ C1] ? __switch_to+0x800/0x10f0 [ 136.950957][ C1] ? __pfx_kthread+0x10/0x10 [ 136.950981][ C1] ret_from_fork_asm+0x1a/0x30 [ 136.951029][ C1] [ 136.951051][ C1] FAULT_INJECTION: forcing a failure. [ 136.951051][ C1] name failslab, interval 1, probability 100, space 0, times 4 [ 136.954734][ T1170] CPU: 0 UID: 0 PID: 1170 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 136.954760][ T1170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 136.954774][ T1170] Workqueue: events_unbound nsim_dev_trap_report_work [ 136.954800][ T1170] Call Trace: [ 136.954806][ T1170] [ 136.954814][ T1170] dump_stack_lvl+0x100/0x190 [ 136.954840][ T1170] should_fail_ex.cold+0x5/0xa [ 136.954865][ T1170] should_failslab+0xc2/0x120 [ 136.954892][ T1170] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 136.954919][ T1170] ? __alloc_skb+0x140/0x710 [ 136.954948][ T1170] __alloc_skb+0x140/0x710 [ 136.954970][ T1170] ? __alloc_skb+0x5b7/0x710 [ 136.954993][ T1170] ? __pfx___alloc_skb+0x10/0x10 [ 136.955015][ T1170] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 136.955045][ T1170] ? __pfx___might_resched+0x10/0x10 [ 136.955077][ T1170] nsim_dev_trap_report_work+0x2af/0xd20 [ 136.955123][ T1170] process_one_work+0xa23/0x1940 [ 136.955159][ T1170] ? __pfx_process_one_work+0x10/0x10 [ 136.955191][ T1170] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 136.955220][ T1170] worker_thread+0x5ef/0xe50 [ 136.955251][ T1170] ? __pfx_worker_thread+0x10/0x10 [ 136.955275][ T1170] ? kthread+0x13a/0x450 [ 136.955293][ T1170] ? __pfx_worker_thread+0x10/0x10 [ 136.955315][ T1170] kthread+0x370/0x450 [ 136.955335][ T1170] ? __pfx_kthread+0x10/0x10 [ 136.955357][ T1170] ret_from_fork+0x72b/0xd50 [ 136.955386][ T1170] ? __pfx_ret_from_fork+0x10/0x10 [ 136.955417][ T1170] ? __switch_to+0x800/0x10f0 [ 136.955438][ T1170] ? __pfx_kthread+0x10/0x10 [ 136.955461][ T1170] ret_from_fork_asm+0x1a/0x30 [ 136.955506][ T1170] [ 136.955515][ T1170] FAULT_INJECTION: forcing a failure. [ 136.955515][ T1170] name failslab, interval 1, probability 100, space 0, times 3 [ 136.960071][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 136.960097][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 136.960110][ C1] Call Trace: [ 136.960117][ C1] [ 136.960125][ C1] dump_stack_lvl+0x100/0x190 [ 136.960154][ C1] should_fail_ex.cold+0x5/0xa [ 136.960181][ C1] should_failslab+0xc2/0x120 [ 136.960210][ C1] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 136.960238][ C1] ? __alloc_skb+0x5b7/0x710 [ 136.960263][ C1] ? __alloc_skb+0x140/0x710 [ 136.960293][ C1] __alloc_skb+0x140/0x710 [ 136.960318][ C1] ? __alloc_skb+0x5b7/0x710 [ 136.960342][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 136.960369][ C1] ? lock_acquire+0x1b9/0x370 [ 136.960401][ C1] __netdev_alloc_skb+0x7a/0x960 [ 136.960433][ C1] __ieee80211_beacon_get+0xba1/0x1ee0 [ 136.960464][ C1] ? __lock_acquire+0x49f/0x1a40 [ 136.960496][ C1] ieee80211_beacon_get_tim+0xa6/0x280 [ 136.960526][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 136.960564][ C1] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 136.960608][ C1] __iterate_interfaces+0x2e6/0x650 [ 136.960634][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 136.960668][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 136.960698][ C1] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 136.960731][ C1] mac80211_hwsim_beacon+0xe5/0x2a0 [ 136.960769][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 136.960805][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 136.960851][ C1] hrtimer_run_softirq+0x17d/0x2c0 [ 136.960888][ C1] handle_softirqs+0x1ea/0x9b0 [ 136.960923][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 136.960953][ C1] ? run_ksoftirqd+0x5b/0x60 [ 136.960981][ C1] ? rcu_is_watching+0x12/0xc0 [ 136.961017][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 136.961045][ C1] run_ksoftirqd+0x38/0x60 [ 136.961073][ C1] smpboot_thread_fn+0x3d3/0xaa0 [ 136.961113][ C1] ? kthread+0x13a/0x450 [ 136.961132][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 136.961167][ C1] kthread+0x370/0x450 [ 136.961188][ C1] ? __pfx_kthread+0x10/0x10 [ 136.961212][ C1] ret_from_fork+0x72b/0xd50 [ 136.961244][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 136.961278][ C1] ? __switch_to+0x800/0x10f0 [ 136.961301][ C1] ? __pfx_kthread+0x10/0x10 [ 136.961325][ C1] ret_from_fork_asm+0x1a/0x30 [ 136.961372][ C1] [ 136.965217][ C1] FAULT_INJECTION: forcing a failure. [ 136.965217][ C1] name failslab, interval 1, probability 100, space 0, times 2 [ 136.965245][ C1] CPU: 1 UID: 0 PID: 7149 Comm: syz.6.339 Not tainted syzkaller #0 PREEMPT(full) [ 136.965270][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 136.965283][ C1] Call Trace: [ 136.965291][ C1] [ 136.965299][ C1] dump_stack_lvl+0x100/0x190 [ 136.965329][ C1] should_fail_ex.cold+0x5/0xa [ 136.965356][ C1] should_failslab+0xc2/0x120 [ 136.965386][ C1] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 136.965414][ C1] ? __alloc_skb+0x140/0x710 [ 136.965445][ C1] __alloc_skb+0x140/0x710 [ 136.965469][ C1] ? __alloc_skb+0x5b7/0x710 [ 136.965495][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 136.965522][ C1] ? lock_acquire+0x1b9/0x370 [ 136.965554][ C1] __netdev_alloc_skb+0x7a/0x960 [ 136.965585][ C1] __ieee80211_beacon_get+0xba1/0x1ee0 [ 136.965626][ C1] ? __lock_acquire+0x49f/0x1a40 [ 136.965658][ C1] ieee80211_beacon_get_tim+0xa6/0x280 [ 136.965689][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 136.965728][ C1] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 136.965766][ C1] __iterate_interfaces+0x2e6/0x650 [ 136.965793][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 136.965825][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 136.965855][ C1] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 136.965888][ C1] mac80211_hwsim_beacon+0xe5/0x2a0 [ 136.965925][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 136.965962][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 136.966007][ C1] hrtimer_run_softirq+0x17d/0x2c0 [ 136.966045][ C1] handle_softirqs+0x1ea/0x9b0 [ 136.966079][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 136.966108][ C1] ? _raw_spin_unlock+0x3e/0x50 [ 136.966145][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 136.966169][ C1] __irq_exit_rcu+0x162/0x210 [ 136.966199][ C1] irq_exit_rcu+0x9/0x30 [ 136.966227][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 136.966251][ C1] [ 136.966258][ C1] [ 136.966266][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 136.966292][ C1] RIP: 0010:lock_is_held_type+0xf5/0x140 [ 136.966319][ C1] Code: ff ff ff ff 65 0f c1 15 19 75 a9 08 83 fa 01 8b 44 24 04 75 2d 9c 5a 80 e6 02 75 47 41 f7 c5 00 02 00 00 74 01 fb 48 83 c4 08 <5b> 5d 41 5c 41 5d 41 5e 41 5f e9 7c 3f 03 00 c3 cc cc cc cc 31 c0 [ 136.966340][ C1] RSP: 0018:ffffc90003647870 EFLAGS: 00000292 [ 136.966358][ C1] RAX: 0000000000000001 RBX: ffffffff8ebe8180 RCX: 0000000000000001 [ 136.966372][ C1] RDX: 0000000000000046 RSI: ffffffff8e17fc5f RDI: ffffffff8c401580 [ 136.966387][ C1] RBP: ffff88802ead0000 R08: 0000000000000005 R09: 0000000000000000 [ 136.966401][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 00000000ffffffff [ 136.966415][ C1] R13: 0000000000000246 R14: ffff88802ead0c90 R15: 0000000000000006 [ 136.966446][ C1] kernfs_root+0x20e/0x2a0 [ 136.966470][ C1] kernfs_next_descendant_post+0x61/0x4b0 [ 136.966497][ C1] __kernfs_remove+0x193/0xb80 [ 136.966522][ C1] ? kernfs_find_ns+0x33e/0x700 [ 136.966550][ C1] kernfs_remove_by_name_ns+0x7c/0x120 [ 136.966582][ C1] remove_files+0x96/0x1c0 [ 136.966610][ C1] sysfs_remove_group+0x8b/0x1b0 [ 136.966632][ C1] ? __kmem_cache_shutdown+0x23a/0x330 [ 136.966663][ C1] sysfs_remove_groups+0x60/0xb0 [ 136.966690][ C1] __kobject_del+0x89/0x220 [ 136.966723][ C1] kobject_del+0x3f/0x60 [ 136.966753][ C1] kmem_cache_destroy+0x106/0x190 [ 136.966793][ C1] nfsd_file_cache_shutdown+0x12c/0x490 [ 136.966827][ C1] nfsd_destroy_serv+0x30a/0x4e0 [ 136.966859][ C1] ? __pfx_nfsd_destroy_serv+0x10/0x10 [ 136.966900][ C1] nfsd_svc+0x48f/0x840 [ 136.966935][ C1] write_threads+0x2b0/0x570 [ 136.966957][ C1] ? __pfx_write_threads+0x10/0x10 [ 136.966983][ C1] ? __might_fault+0xc5/0x140 [ 136.967014][ C1] ? _copy_from_user+0x59/0xd0 [ 136.967048][ C1] ? __pfx_write_threads+0x10/0x10 [ 136.967069][ C1] nfsctl_transaction_write+0x106/0x1a0 [ 136.967106][ C1] vfs_write+0x2aa/0x1050 [ 136.967142][ C1] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 136.967179][ C1] ? __pfx_vfs_write+0x10/0x10 [ 136.967213][ C1] ? __fget_files+0x215/0x3d0 [ 136.967243][ C1] ? __fget_files+0x21f/0x3d0 [ 136.967274][ C1] ksys_write+0x12a/0x250 [ 136.967309][ C1] ? __pfx_ksys_write+0x10/0x10 [ 136.967352][ C1] do_syscall_64+0x115/0x870 [ 136.967376][ C1] ? clear_bhb_loop+0x40/0x90 [ 136.967404][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.967426][ C1] RIP: 0033:0x7faf3e99de99 [ 136.967445][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.967466][ C1] RSP: 002b:00007faf3f788028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 136.967487][ C1] RAX: ffffffffffffffda RBX: 00007faf3ec26180 RCX: 00007faf3e99de99 [ 136.967501][ C1] RDX: 0000000000000002 RSI: 00002000000004c0 RDI: 0000000000000003 [ 136.967515][ C1] RBP: 00007faf3ea33eaf R08: 0000000000000000 R09: 0000000000000000 [ 136.967529][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.967543][ C1] R13: 00007faf3ec26218 R14: 00007faf3ec26180 R15: 00007ffd37054ce8 [ 136.967573][ C1] [ 136.967612][ C1] FAULT_INJECTION: forcing a failure. [ 136.967612][ C1] name failslab, interval 1, probability 100, space 0, times 1 [ 136.970897][ T1170] CPU: 0 UID: 0 PID: 1170 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 136.970922][ T1170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 136.970936][ T1170] Workqueue: events_unbound nsim_dev_trap_report_work [ 136.970962][ T1170] Call Trace: [ 136.970984][ T1170] [ 136.970991][ T1170] dump_stack_lvl+0x100/0x190 [ 136.971017][ T1170] should_fail_ex.cold+0x5/0xa [ 136.971043][ T1170] should_failslab+0xc2/0x120 [ 136.971070][ T1170] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 136.971102][ T1170] ? __alloc_skb+0x140/0x710 [ 136.971131][ T1170] __alloc_skb+0x140/0x710 [ 136.971153][ T1170] ? __alloc_skb+0x5b7/0x710 [ 136.971176][ T1170] ? __pfx___alloc_skb+0x10/0x10 [ 136.971199][ T1170] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 136.971229][ T1170] ? __pfx___might_resched+0x10/0x10 [ 136.971261][ T1170] nsim_dev_trap_report_work+0x2af/0xd20 [ 136.971301][ T1170] process_one_work+0xa23/0x1940 [ 136.971337][ T1170] ? __pfx_process_one_work+0x10/0x10 [ 136.971369][ T1170] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 136.971398][ T1170] worker_thread+0x5ef/0xe50 [ 136.971429][ T1170] ? __pfx_worker_thread+0x10/0x10 [ 136.971453][ T1170] ? kthread+0x13a/0x450 [ 136.971472][ T1170] ? __pfx_worker_thread+0x10/0x10 [ 136.971493][ T1170] kthread+0x370/0x450 [ 136.971512][ T1170] ? __pfx_kthread+0x10/0x10 [ 136.971535][ T1170] ret_from_fork+0x72b/0xd50 [ 136.971565][ T1170] ? __pfx_ret_from_fork+0x10/0x10 [ 136.971595][ T1170] ? __switch_to+0x800/0x10f0 [ 136.971618][ T1170] ? __pfx_kthread+0x10/0x10 [ 136.971640][ T1170] ret_from_fork_asm+0x1a/0x30 [ 136.971685][ T1170] [ 136.971770][ T3225] CPU: 0 UID: 0 PID: 3225 Comm: kworker/R-bat_e Not tainted syzkaller #0 PREEMPT(full) [ 136.971795][ T3225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 136.971807][ T3225] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 136.971833][ T3225] Call Trace: [ 136.971840][ T3225] [ 136.971847][ T3225] dump_stack_lvl+0x100/0x190 [ 136.971873][ T3225] should_fail_ex.cold+0x5/0xa [ 136.971898][ T3225] should_failslab+0xc2/0x120 [ 136.971925][ T3225] kmem_cache_alloc_noprof+0x91/0x6a0 [ 136.971951][ T3225] ? skb_clone+0x190/0x400 [ 136.971981][ T3225] skb_clone+0x190/0x400 [ 136.972008][ T3225] batadv_iv_send_outstanding_bat_ogm_packet+0x650/0x800 [ 136.972044][ T3225] process_one_work+0xa23/0x1940 [ 136.972079][ T3225] ? __pfx_process_one_work+0x10/0x10 [ 136.972117][ T3225] ? __pfx_batadv_iv_send_outstanding_bat_ogm_packet+0x10/0x10 [ 136.972147][ T3225] rescuer_thread+0x905/0x14a0 [ 136.972183][ T3225] ? rescuer_thread+0x240/0x14a0 [ 136.972207][ T3225] ? rescuer_thread+0x118/0x14a0 [ 136.972229][ T3225] ? __pfx_rescuer_thread+0x10/0x10 [ 136.972253][ T3225] ? __kthread_parkme+0x18c/0x230 [ 136.972286][ T3225] ? kthread+0x13a/0x450 [ 136.972305][ T3225] ? __pfx_rescuer_thread+0x10/0x10 [ 136.972326][ T3225] kthread+0x370/0x450 [ 136.972345][ T3225] ? __pfx_kthread+0x10/0x10 [ 136.972367][ T3225] ret_from_fork+0x72b/0xd50 [ 136.972397][ T3225] ? __pfx_ret_from_fork+0x10/0x10 [ 136.972428][ T3225] ? __switch_to+0x800/0x10f0 [ 136.972449][ T3225] ? __pfx_kthread+0x10/0x10 [ 136.972471][ T3225] ret_from_fork_asm+0x1a/0x30 [ 136.972515][ T3225] [ 136.987508][ T4966] CPU: 0 UID: 0 PID: 4966 Comm: klogd Not tainted syzkaller #0 PREEMPT(full) [ 136.987535][ T4966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 136.987546][ T4966] Call Trace: [ 136.987554][ T4966] [ 136.987562][ T4966] dump_stack_lvl+0x100/0x190 [ 136.987589][ T4966] should_fail_ex.cold+0x5/0xa [ 136.987615][ T4966] should_failslab+0xc2/0x120 [ 136.987642][ T4966] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 136.987668][ T4966] ? __alloc_skb+0x5b7/0x710 [ 136.987691][ T4966] ? __alloc_skb+0x140/0x710 [ 136.987719][ T4966] __alloc_skb+0x140/0x710 [ 136.987741][ T4966] ? __alloc_skb+0x5b7/0x710 [ 136.987764][ T4966] ? __pfx___alloc_skb+0x10/0x10 [ 136.987795][ T4966] alloc_skb_with_frags+0xdd/0x760 [ 136.987823][ T4966] ? find_held_lock+0x2b/0x80 [ 136.987854][ T4966] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 136.987878][ T4966] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 136.987908][ T4966] sock_alloc_send_pskb+0x801/0x980 [ 136.987936][ T4966] ? avc_has_perm+0x135/0x1e0 [ 136.987962][ T4966] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 136.987984][ T4966] ? selinux_socket_getpeersec_dgram+0x1a4/0x380 [ 136.988014][ T4966] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 136.988055][ T4966] unix_dgram_sendmsg+0x3c7/0x1810 [ 136.988089][ T4966] ? unix_dgram_connect+0x24d/0xbf0 [ 136.988119][ T4966] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 136.988150][ T4966] ? selinux_socket_sendmsg+0x198/0x2f0 [ 136.988185][ T4966] __sys_sendto+0x48b/0x4e0 [ 136.988208][ T4966] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 136.988235][ T4966] ? __pfx___sys_sendto+0x10/0x10 [ 136.988266][ T4966] ? __sys_connect+0xe4/0x170 [ 136.988305][ T4966] __x64_sys_sendto+0xe0/0x1c0 [ 136.988328][ T4966] ? do_syscall_64+0x90/0x870 [ 136.988352][ T4966] ? lockdep_hardirqs_on+0x78/0x100 [ 136.988375][ T4966] do_syscall_64+0x115/0x870 [ 136.988397][ T4966] ? clear_bhb_loop+0x40/0x90 [ 136.988423][ T4966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.988444][ T4966] RIP: 0033:0x7f5260d2c407 [ 136.988462][ T4966] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 136.988482][ T4966] RSP: 002b:00007fff3b44f750 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 136.988502][ T4966] RAX: ffffffffffffffda RBX: 00007f5260bdcc80 RCX: 00007f5260d2c407 [ 136.988517][ T4966] RDX: 0000000000000055 RSI: 00007fff3b44f890 RDI: 0000000000000003 [ 136.988529][ T4966] RBP: 00007fff3b44fcc0 R08: 0000000000000000 R09: 0000000000000000 [ 136.988542][ T4966] R10: 0000000000004000 R11: 0000000000000202 R12: 00007fff3b44fcd8 [ 136.988556][ T4966] R13: 00007fff3b44f890 R14: 000000000000003a R15: 00007fff3b44f890 [ 136.988584][ T4966] [ 163.059609][ C1] CPU: 1 UID: 0 PID: 7149 Comm: syz.6.339 Not tainted syzkaller #0 PREEMPT(full) [ 163.059627][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 163.059636][ C1] Call Trace: [ 163.059641][ C1] [ 163.059647][ C1] dump_stack_lvl+0x100/0x190 [ 163.059667][ C1] should_fail_ex.cold+0x5/0xa [ 163.059683][ C1] should_failslab+0xc2/0x120 [ 163.059700][ C1] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 163.059718][ C1] ? __alloc_skb+0x140/0x710 [ 163.059735][ C1] __alloc_skb+0x140/0x710 [ 163.059749][ C1] ? __alloc_skb+0x5b7/0x710 [ 163.059762][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 163.059777][ C1] ? lock_acquire+0x1b9/0x370 [ 163.059795][ C1] __netdev_alloc_skb+0x7a/0x960 [ 163.059812][ C1] __ieee80211_beacon_get+0xba1/0x1ee0 [ 163.059830][ C1] ? __lock_acquire+0x49f/0x1a40 [ 163.059847][ C1] ieee80211_beacon_get_tim+0xa6/0x280 [ 163.059864][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 163.059885][ C1] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 163.059906][ C1] __iterate_interfaces+0x2e6/0x650 [ 163.059922][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 163.059940][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 163.059956][ C1] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 163.059973][ C1] mac80211_hwsim_beacon+0xe5/0x2a0 [ 163.059994][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 163.060013][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 163.060039][ C1] hrtimer_run_softirq+0x17d/0x2c0 [ 163.060059][ C1] handle_softirqs+0x1ea/0x9b0 [ 163.060079][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 163.060095][ C1] ? _raw_spin_unlock+0x3e/0x50 [ 163.060119][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 163.060133][ C1] __irq_exit_rcu+0x162/0x210 [ 163.060149][ C1] irq_exit_rcu+0x9/0x30 [ 163.060164][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 163.060179][ C1] [ 163.060182][ C1] [ 163.060187][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 163.060202][ C1] RIP: 0010:lock_is_held_type+0xf5/0x140 [ 163.060217][ C1] Code: ff ff ff ff 65 0f c1 15 19 75 a9 08 83 fa 01 8b 44 24 04 75 2d 9c 5a 80 e6 02 75 47 41 f7 c5 00 02 00 00 74 01 fb 48 83 c4 08 <5b> 5d 41 5c 41 5d 41 5e 41 5f e9 7c 3f 03 00 c3 cc cc cc cc 31 c0 [ 163.060229][ C1] RSP: 0018:ffffc90003647870 EFLAGS: 00000292 [ 163.060241][ C1] RAX: 0000000000000001 RBX: ffffffff8ebe8180 RCX: 0000000000000001 [ 163.060249][ C1] RDX: 0000000000000046 RSI: ffffffff8e17fc5f RDI: ffffffff8c401580 [ 163.060257][ C1] RBP: ffff88802ead0000 R08: 0000000000000005 R09: 0000000000000000 [ 163.060264][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 00000000ffffffff [ 163.060271][ C1] R13: 0000000000000246 R14: ffff88802ead0c90 R15: 0000000000000006 [ 163.060289][ C1] kernfs_root+0x20e/0x2a0 [ 163.060303][ C1] kernfs_next_descendant_post+0x61/0x4b0 [ 163.060317][ C1] __kernfs_remove+0x193/0xb80 [ 163.060331][ C1] ? kernfs_find_ns+0x33e/0x700 [ 163.060347][ C1] kernfs_remove_by_name_ns+0x7c/0x120 [ 163.060364][ C1] remove_files+0x96/0x1c0 [ 163.060377][ C1] sysfs_remove_group+0x8b/0x1b0 [ 163.060389][ C1] ? __kmem_cache_shutdown+0x23a/0x330 [ 163.060405][ C1] sysfs_remove_groups+0x60/0xb0 [ 163.060420][ C1] __kobject_del+0x89/0x220 [ 163.060438][ C1] kobject_del+0x3f/0x60 [ 163.060455][ C1] kmem_cache_destroy+0x106/0x190 [ 163.060476][ C1] nfsd_file_cache_shutdown+0x12c/0x490 [ 163.060496][ C1] nfsd_destroy_serv+0x30a/0x4e0 [ 163.060514][ C1] ? __pfx_nfsd_destroy_serv+0x10/0x10 [ 163.060536][ C1] nfsd_svc+0x48f/0x840 [ 163.060555][ C1] write_threads+0x2b0/0x570 [ 163.060568][ C1] ? __pfx_write_threads+0x10/0x10 [ 163.060582][ C1] ? __might_fault+0xc5/0x140 [ 163.060600][ C1] ? _copy_from_user+0x59/0xd0 [ 163.060619][ C1] ? __pfx_write_threads+0x10/0x10 [ 163.060631][ C1] nfsctl_transaction_write+0x106/0x1a0 [ 163.060651][ C1] vfs_write+0x2aa/0x1050 [ 163.060672][ C1] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 163.060692][ C1] ? __pfx_vfs_write+0x10/0x10 [ 163.060711][ C1] ? __fget_files+0x215/0x3d0 [ 163.060727][ C1] ? __fget_files+0x21f/0x3d0 [ 163.060745][ C1] ksys_write+0x12a/0x250 [ 163.060764][ C1] ? __pfx_ksys_write+0x10/0x10 [ 163.060788][ C1] do_syscall_64+0x115/0x870 [ 163.060802][ C1] ? clear_bhb_loop+0x40/0x90 [ 163.060817][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.060830][ C1] RIP: 0033:0x7faf3e99de99 [ 163.060842][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.060854][ C1] RSP: 002b:00007faf3f788028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 163.060864][ C1] RAX: ffffffffffffffda RBX: 00007faf3ec26180 RCX: 00007faf3e99de99 [ 163.060873][ C1] RDX: 0000000000000002 RSI: 00002000000004c0 RDI: 0000000000000003 [ 163.060880][ C1] RBP: 00007faf3ea33eaf R08: 0000000000000000 R09: 0000000000000000 [ 163.060887][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.060895][ C1] R13: 00007faf3ec26218 R14: 00007faf3ec26180 R15: 00007ffd37054ce8 [ 163.060911][ C1] [ 163.580310][ T48] rpcbind: server 127.0.0.1 not responding, timed out [ 163.786800][ T7178] NFSD: Failed to start, no listeners configured. [ 163.922793][ T5625] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 163.937127][ T5625] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 163.945697][ T5625] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 163.954324][ T5625] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 163.961875][ T5625] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 164.003429][ T5625] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 164.013448][ T5625] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 164.022095][ T5625] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 164.122604][ T5625] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 164.133134][ T5625] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 164.358393][ T5623] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 164.371786][ T5623] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 164.384121][ T5623] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 164.395226][ T5623] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 164.407123][ T5623] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 164.518852][ T5623] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 164.537037][ T5623] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 164.546282][ T5623] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 164.556434][ T5623] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 164.565007][ T5623] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 164.608294][ T4928] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 164.619092][ T4928] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 164.632350][ T4928] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 164.641046][ T4928] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 164.648688][ T4928] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 164.700295][ T5607] tipc: Resetting bearer [ 164.804185][ T5607] bridge0: port 3(syz_tun) entered disabled state [ 164.862791][ T5607] syz_tun (unregistering): left allmulticast mode [ 164.869278][ T5607] syz_tun (unregistering): left promiscuous mode [ 164.877950][ T5607] bridge0: port 3(syz_tun) entered disabled state [ 164.894103][ T5607] tipc: Disabling bearer [ 165.131607][ T7211] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.163915][ T7221] bridge0: port 3(syz_tun) entered disabled state [ 165.178953][ T7221] syz_tun (unregistering): left allmulticast mode [ 165.186176][ T7221] syz_tun (unregistering): left promiscuous mode [ 165.192719][ T7221] bridge0: port 3(syz_tun) entered disabled state [ 165.275253][ T7211] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.331286][ T7226] lo speed is unknown, defaulting to 1000 [ 165.429485][ T7211] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.577369][ T7211] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.659514][ T7237] lo speed is unknown, defaulting to 1000 [ 165.777730][ T7211] bridge_slave_1: left allmulticast mode [ 165.791307][ T7211] bridge_slave_1: left promiscuous mode [ 165.797678][ T7211] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.827019][ T7211] bridge_slave_0: left allmulticast mode [ 165.843920][ T7211] bridge_slave_0: left promiscuous mode [ 165.862546][ T7211] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.022404][ T5623] Bluetooth: hci5: command tx timeout [ 166.163814][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 166.163831][ T29] audit: type=1400 audit(1785172666.624:354): avc: denied { write } for pid=7280 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 166.200957][ T7211] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.209691][ T5623] Bluetooth: hci6: command tx timeout [ 166.233495][ T7211] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.243561][ T7211] bond0 (unregistering): Released all slaves [ 166.264398][ T7229] lo speed is unknown, defaulting to 1000 [ 166.278275][ T29] audit: type=1400 audit(1785172666.734:355): avc: denied { write } for pid=7291 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 166.388979][ T7211] tipc: Disabling bearer [ 166.398050][ T7211] tipc: Left network mode [ 166.400332][ T5272] 8021q: adding VLAN 0 to HW filter on device eth11 [ 166.512725][ T5623] Bluetooth: hci7: command tx timeout [ 166.663519][ T5623] Bluetooth: hci8: command tx timeout [ 166.742059][ T7247] lo speed is unknown, defaulting to 1000 [ 166.749671][ T5623] Bluetooth: hci9: command tx timeout [ 166.997828][ T29] audit: type=1400 audit(1785172667.454:356): avc: denied { write } for pid=7295 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.093879][ T29] audit: type=1400 audit(1785172667.544:357): avc: denied { write } for pid=7310 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.186660][ T5272] 8021q: adding VLAN 0 to HW filter on device eth12 [ 167.235544][ T7243] lo speed is unknown, defaulting to 1000 [ 167.319256][ T7226] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.326728][ T7226] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.335097][ T7226] bridge_slave_0: entered allmulticast mode [ 167.342911][ T7226] bridge_slave_0: entered promiscuous mode [ 167.353857][ T7226] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.360998][ T7226] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.369419][ T7226] bridge_slave_1: entered allmulticast mode [ 167.377009][ T7226] bridge_slave_1: entered promiscuous mode [ 167.476366][ T7226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.514183][ T7226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.734459][ T7226] team0: Port device team_slave_0 added [ 167.766735][ T7226] team0: Port device team_slave_1 added [ 167.807697][ T29] audit: type=1400 audit(1785172668.264:358): avc: denied { write } for pid=7320 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.906722][ T29] audit: type=1400 audit(1785172668.364:359): avc: denied { write } for pid=7334 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 168.024839][ T5272] 8021q: adding VLAN 0 to HW filter on device eth13 [ 168.032909][ T7226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.040206][ T7226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.072497][ T7226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.083612][ T7237] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.090757][ T7237] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.098080][ T7237] bridge_slave_0: entered allmulticast mode [ 168.104814][ T5623] Bluetooth: hci5: command tx timeout [ 168.107130][ T7237] bridge_slave_0: entered promiscuous mode [ 168.133762][ T7226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.140790][ T7226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.169483][ T7226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.187013][ T7237] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.194228][ T7237] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.201730][ T7237] bridge_slave_1: entered allmulticast mode [ 168.210289][ T7237] bridge_slave_1: entered promiscuous mode [ 168.262399][ T5623] Bluetooth: hci6: command tx timeout [ 168.338281][ T7237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.398450][ T7226] hsr_slave_0: entered promiscuous mode [ 168.411818][ T7226] hsr_slave_1: entered promiscuous mode [ 168.425170][ T7226] debugfs: 'hsr0' already exists in 'hsr' [ 168.443036][ T7226] Cannot create hsr debugfs directory [ 168.463959][ T7237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.592270][ T5623] Bluetooth: hci7: command tx timeout [ 168.663085][ T29] audit: type=1400 audit(1785172669.114:360): avc: denied { write } for pid=7340 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 168.743232][ T5623] Bluetooth: hci8: command tx timeout [ 168.788468][ T29] audit: type=1400 audit(1785172669.244:361): avc: denied { write } for pid=7351 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 168.815543][ T7211] hsr_slave_0: left promiscuous mode [ 168.821578][ T7211] hsr_slave_1: left promiscuous mode [ 168.827076][ T5623] Bluetooth: hci9: command tx timeout [ 168.840028][ T7211] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.847773][ T7211] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.862456][ T7211] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.869856][ T7211] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.883506][ T7211] veth1_macvtap: left promiscuous mode [ 168.888975][ T7211] veth0_macvtap: left promiscuous mode [ 168.894891][ T7211] veth1_vlan: left promiscuous mode [ 168.900140][ T7211] veth0_vlan: left promiscuous mode [ 169.041415][ T7211] team0 (unregistering): Port device team_slave_1 removed [ 169.054974][ T7211] team0 (unregistering): Port device team_slave_0 removed [ 169.108665][ T7211] smc: removing net device veth0 with user defined pnetid SYZ0 [ 169.137839][ T12] smc: removing ib device syz0 [ 169.149609][ T7237] team0: Port device team_slave_0 added [ 169.171374][ T7237] team0: Port device team_slave_1 added [ 169.186099][ T12] smbdirect: ib_dev[syz0] removed [ 169.387440][ T5272] 8021q: adding VLAN 0 to HW filter on device eth14 [ 169.395343][ T187] lo speed is unknown, defaulting to 1000 [ 169.403841][ T187] syz0: Port: 1 Link DOWN [ 169.801201][ T7237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.811696][ T7237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.838885][ T7237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.946938][ T7237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.957097][ T7237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.983833][ T7237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.036899][ T7229] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.053889][ T7229] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.062108][ T7229] bridge_slave_0: entered allmulticast mode [ 170.084591][ T7229] bridge_slave_0: entered promiscuous mode [ 170.182496][ T5623] Bluetooth: hci5: command tx timeout [ 170.242915][ T7229] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.250302][ T7229] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.257809][ T7229] bridge_slave_1: entered allmulticast mode [ 170.269966][ T7229] bridge_slave_1: entered promiscuous mode [ 170.342258][ T5623] Bluetooth: hci6: command tx timeout [ 170.662241][ T5623] Bluetooth: hci7: command tx timeout [ 170.740460][ T7237] hsr_slave_0: entered promiscuous mode [ 170.755532][ T7237] hsr_slave_1: entered promiscuous mode [ 170.762071][ T7237] debugfs: 'hsr0' already exists in 'hsr' [ 170.769106][ T7237] Cannot create hsr debugfs directory [ 170.787524][ T7229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.822293][ T5623] Bluetooth: hci8: command tx timeout [ 170.904237][ T5623] Bluetooth: hci9: command tx timeout [ 170.948734][ T7229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.038541][ T7229] team0: Port device team_slave_0 added [ 171.077396][ T7229] team0: Port device team_slave_1 added [ 171.180315][ T7229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.187438][ T7229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.213794][ T7229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.228833][ T7229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.235832][ T7229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.261760][ T7229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.376181][ T7247] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.385366][ T7247] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.392802][ T7247] bridge_slave_0: entered allmulticast mode [ 171.399585][ T7247] bridge_slave_0: entered promiscuous mode [ 171.429528][ T7247] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.437530][ T7247] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.444814][ T7247] bridge_slave_1: entered allmulticast mode [ 171.451671][ T7247] bridge_slave_1: entered promiscuous mode [ 171.472419][ T7226] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 171.481246][ T7226] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 171.511203][ T7211] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.549352][ T7226] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 171.559176][ T7226] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 171.600877][ T7226] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 171.610881][ T7226] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 171.623486][ T7229] hsr_slave_0: entered promiscuous mode [ 171.629593][ T7229] hsr_slave_1: entered promiscuous mode [ 171.635772][ T7229] debugfs: 'hsr0' already exists in 'hsr' [ 171.641500][ T7229] Cannot create hsr debugfs directory [ 171.649741][ T7247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.731964][ T7226] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 171.744207][ T7226] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 171.789892][ T7211] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.811576][ T7247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.878114][ T7243] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.887540][ T7243] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.898944][ T7243] bridge_slave_0: entered allmulticast mode [ 171.907565][ T7243] bridge_slave_0: entered promiscuous mode [ 171.921099][ T29] audit: type=1400 audit(1785172672.374:362): avc: denied { write } for pid=7377 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 172.000907][ T7247] team0: Port device team_slave_0 added [ 172.011686][ T7243] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.020210][ T7243] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.032105][ T7243] bridge_slave_1: entered allmulticast mode [ 172.040394][ T7243] bridge_slave_1: entered promiscuous mode [ 172.048771][ T29] audit: type=1400 audit(1785172672.504:363): avc: denied { write } for pid=7394 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 172.093982][ T7211] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.125104][ T7247] team0: Port device team_slave_1 added [ 172.221192][ T7243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.236677][ T7243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.263565][ T7211] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.263658][ T5623] Bluetooth: hci5: command tx timeout [ 172.290539][ T7247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.307015][ T7247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.335205][ T7247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.380907][ T7247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.389963][ T7247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.416760][ T7247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.427343][ T5623] Bluetooth: hci6: command tx timeout [ 172.508510][ T29] audit: type=1400 audit(1785172672.964:364): avc: denied { write } for pid=7396 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 172.540398][ T7243] team0: Port device team_slave_0 added [ 172.621177][ T29] audit: type=1400 audit(1785172673.074:365): avc: denied { write } for pid=7407 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 172.627923][ T7243] team0: Port device team_slave_1 added [ 172.695118][ T7247] hsr_slave_0: entered promiscuous mode [ 172.701824][ T7247] hsr_slave_1: entered promiscuous mode [ 172.708757][ T7247] debugfs: 'hsr0' already exists in 'hsr' [ 172.714739][ T7247] Cannot create hsr debugfs directory [ 172.742540][ T5623] Bluetooth: hci7: command tx timeout [ 172.759134][ T7243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.766409][ T7243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.795237][ T7243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.859297][ T7243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.867836][ T7243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.895230][ T7243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.917769][ T5623] Bluetooth: hci8: command tx timeout [ 172.986286][ T5623] Bluetooth: hci9: command tx timeout [ 173.018430][ T29] audit: type=1400 audit(1785172673.474:366): avc: denied { write } for pid=7409 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 173.147298][ T7243] hsr_slave_0: entered promiscuous mode [ 173.154142][ T7243] hsr_slave_1: entered promiscuous mode [ 173.159741][ T29] audit: type=1400 audit(1785172673.614:367): avc: denied { write } for pid=7420 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 173.182686][ T7243] debugfs: 'hsr0' already exists in 'hsr' [ 173.188422][ T7243] Cannot create hsr debugfs directory [ 173.220864][ T7211] bridge_slave_1: left allmulticast mode [ 173.226938][ T7211] bridge_slave_1: left promiscuous mode [ 173.233019][ T7211] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.246854][ T7211] bridge_slave_0: left allmulticast mode [ 173.252706][ T7211] bridge_slave_0: left promiscuous mode [ 173.264511][ T7211] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.455185][ T7211] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.468729][ T7211] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.490172][ T7211] bond0 (unregistering): Released all slaves [ 173.519316][ T29] audit: type=1400 audit(1785172673.974:368): avc: denied { write } for pid=7424 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 173.625364][ T29] audit: type=1400 audit(1785172674.074:369): avc: denied { write } for pid=7435 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 173.649982][ T7237] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 173.693609][ T7237] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 173.742654][ T7237] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 173.754537][ T7237] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 173.762057][ T7237] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 173.770918][ T7237] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 173.792381][ T7237] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 173.804212][ T7237] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 173.979285][ T7226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.210748][ T7226] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.230005][ T7229] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 174.241399][ T29] audit: type=1400 audit(1785172674.694:370): avc: denied { write } for pid=7438 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.265464][ T7229] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 174.276233][ T7229] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 174.290686][ T7229] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 174.323917][ T7211] hsr_slave_0: left promiscuous mode [ 174.329854][ T7211] hsr_slave_1: left promiscuous mode [ 174.336009][ T7211] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.344873][ T7211] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.352959][ T7211] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.360371][ T29] audit: type=1400 audit(1785172674.814:371): avc: denied { write } for pid=7455 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.382521][ T7211] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.413286][ T7211] veth1_macvtap: left promiscuous mode [ 174.419059][ T7211] veth0_macvtap: left promiscuous mode [ 174.426920][ T7211] veth1_vlan: left promiscuous mode [ 174.435554][ T7211] veth0_vlan: left promiscuous mode [ 174.602417][ T7189] NFSD: Unable to initialize client recovery tracking! (-110) [ 174.610086][ T7189] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 174.641686][ T7189] NFSD: starting 90-second grace period (net f00005ad) [ 174.752335][ T7211] team0 (unregistering): Port device team_slave_1 removed [ 174.773808][ T7211] team0 (unregistering): Port device team_slave_0 removed [ 175.034214][ T7211] smc: removing net device lo with user defined pnetid SYZ0 [ 175.110691][ T7229] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 175.155104][ T7229] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 175.183926][ T7229] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 175.216279][ T7229] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 175.328659][ T134] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.335814][ T134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.537704][ T6507] bridge0: port 3(syz_tun) entered disabled state [ 175.563695][ T6507] syz_tun (unregistering): left allmulticast mode [ 175.570152][ T6507] syz_tun (unregistering): left promiscuous mode [ 175.576924][ T6507] bridge0: port 3(syz_tun) entered disabled state [ 175.601361][ T7178] tipc: Resetting bearer [ 175.639514][ T7178] bridge0: port 3(syz_tun) entered disabled state [ 175.675014][ T7178] syz_tun (unregistering): left allmulticast mode [ 175.681508][ T7178] syz_tun (unregistering): left promiscuous mode [ 175.688563][ T7178] bridge0: port 3(syz_tun) entered disabled state [ 175.697655][ T7178] tipc: Disabling bearer [ 175.768603][ T7189] bridge0: port 3(syz_tun) entered disabled state [ 175.789496][ T7189] syz_tun (unregistering): left allmulticast mode [ 175.796915][ T7189] syz_tun (unregistering): left promiscuous mode [ 175.803349][ T7189] bridge0: port 3(syz_tun) entered disabled state [ 175.814940][ T554] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.821998][ T554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.884776][ T7247] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 175.898550][ T7247] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 175.919841][ T7247] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 175.945011][ T7247] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 175.954540][ T7247] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 175.967323][ T7247] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 176.050098][ T7247] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 176.063686][ T7247] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 176.110969][ T7211] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.157924][ T7237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.268961][ T7211] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.363283][ T7237] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.401701][ T7211] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.441229][ T1052] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.448407][ T1052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.547478][ T7211] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.602105][ T1052] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.609269][ T1052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.831660][ T7229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.085785][ T7229] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.107886][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.115082][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.199860][ T7211] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.247177][ T7243] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 177.266998][ T7243] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 177.293684][ T7247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.317033][ T7243] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 177.334518][ T7243] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 177.345253][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 177.345268][ T29] audit: type=1400 audit(1785172677.804:380): avc: denied { write } for pid=7533 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 177.381443][ T554] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.388609][ T554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.401973][ T7226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.416200][ T7243] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 177.431927][ T7243] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 177.455568][ T7243] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 177.480984][ T7243] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 177.510601][ T7211] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.521064][ T29] audit: type=1400 audit(1785172677.964:381): avc: denied { write } for pid=7550 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 177.696268][ T7211] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.740679][ T7247] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.800694][ T554] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.807885][ T554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.865963][ T7211] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.908557][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.915743][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.328157][ T7226] veth0_vlan: entered promiscuous mode [ 178.340892][ T29] audit: type=1400 audit(1785172678.794:382): avc: denied { write } for pid=7567 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.465562][ T7237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.480277][ T7226] veth1_vlan: entered promiscuous mode [ 178.527430][ T29] audit: type=1400 audit(1785172678.984:383): avc: denied { write } for pid=7593 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.558308][ T7211] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.628641][ T7243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.690537][ T7211] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.761349][ T7243] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.802843][ T134] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.810029][ T134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.910783][ T7211] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.938762][ T134] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.945913][ T134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.043145][ T7211] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.086131][ T7226] veth0_macvtap: entered promiscuous mode [ 179.117007][ T29] audit: type=1400 audit(1785172679.574:384): avc: denied { write } for pid=7596 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 179.117306][ T7226] veth1_macvtap: entered promiscuous mode [ 179.193052][ T7237] veth0_vlan: entered promiscuous mode [ 179.209013][ T7229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.285802][ T7226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.297756][ T29] audit: type=1400 audit(1785172679.754:385): avc: denied { write } for pid=7619 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 179.337984][ T7237] veth1_vlan: entered promiscuous mode [ 179.355093][ T7226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.366956][ T7247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.476040][ T7589] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.504328][ T7589] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.568440][ T7589] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.578555][ T7589] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.807072][ T7237] veth0_macvtap: entered promiscuous mode [ 179.852587][ T7211] bridge_slave_1: left allmulticast mode [ 179.858322][ T7211] bridge_slave_1: left promiscuous mode [ 179.866237][ T7211] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.879780][ T7211] bridge_slave_0: left allmulticast mode [ 179.888665][ T7211] bridge_slave_0: left promiscuous mode [ 179.894504][ T7211] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.912619][ T7211] bridge_slave_1: left allmulticast mode [ 179.918302][ T7211] bridge_slave_1: left promiscuous mode [ 179.924800][ T7211] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.935151][ T29] audit: type=1400 audit(1785172680.384:386): avc: denied { write } for pid=7625 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 179.960575][ T7211] bridge_slave_0: left allmulticast mode [ 179.966287][ T7211] bridge_slave_0: left promiscuous mode [ 179.971988][ T7211] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.990991][ T7211] bridge_slave_1: left allmulticast mode [ 179.997988][ T7211] bridge_slave_1: left promiscuous mode [ 180.005668][ T7211] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.015296][ T7211] bridge_slave_0: left allmulticast mode [ 180.020972][ T29] audit: type=1400 audit(1785172680.474:387): avc: denied { write } for pid=7644 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 180.052644][ T7211] bridge_slave_0: left promiscuous mode [ 180.059333][ T7211] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.220742][ T7211] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.231441][ T7211] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.241320][ T7211] bond0 (unregistering): Released all slaves [ 180.321206][ T7211] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.336577][ T7211] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.347180][ T7211] bond0 (unregistering): Released all slaves [ 180.411711][ T7211] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.430230][ T7211] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.440191][ T7211] bond0 (unregistering): Released all slaves [ 180.456159][ T7237] veth1_macvtap: entered promiscuous mode [ 180.549703][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.570467][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.604095][ T7211] tipc: Left network mode [ 180.660842][ T7237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.701764][ T7237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.751607][ T7589] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.769234][ T7589] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.800192][ T134] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.810505][ T134] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.844174][ T134] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.909337][ T134] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.049870][ T7229] veth0_vlan: entered promiscuous mode [ 181.069672][ T7247] veth0_vlan: entered promiscuous mode [ 181.097480][ T7661] bridge0: port 3(syz_tun) entered blocking state [ 181.106143][ T7661] bridge0: port 3(syz_tun) entered disabled state [ 181.122658][ T7661] syz_tun: entered allmulticast mode [ 181.132103][ T7661] syz_tun: entered promiscuous mode [ 181.141895][ T7661] bridge0: port 3(syz_tun) entered blocking state [ 181.148465][ T7661] bridge0: port 3(syz_tun) entered forwarding state [ 181.175955][ T29] audit: type=1400 audit(1785172681.634:388): avc: denied { write } for pid=7652 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 181.327587][ T7229] veth1_vlan: entered promiscuous mode [ 181.344046][ T7247] veth1_vlan: entered promiscuous mode [ 181.429847][ T29] audit: type=1400 audit(1785172681.884:389): avc: denied { write } for pid=7672 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 181.578215][ T7229] veth0_macvtap: entered promiscuous mode [ 181.597291][ T1052] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.599702][ T7243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.609002][ T1052] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.636086][ T5272] 8021q: adding VLAN 0 to HW filter on device eth7 [ 181.647524][ T7229] veth1_macvtap: entered promiscuous mode [ 181.694445][ T7247] veth0_macvtap: entered promiscuous mode [ 181.719954][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.729940][ T7247] veth1_macvtap: entered promiscuous mode [ 181.731337][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.760328][ T7229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.816342][ T7229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.889120][ T1052] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.924324][ T1052] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.945427][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.994157][ T7247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.021747][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.089309][ T7247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.155248][ T7243] veth0_vlan: entered promiscuous mode [ 182.200696][ T7589] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.280514][ T7589] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.307063][ T7589] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.361313][ T7589] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.386644][ T7243] veth1_vlan: entered promiscuous mode [ 182.428743][ T29] audit: type=1400 audit(1785172682.884:390): avc: denied { write } for pid=7679 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.639305][ T7589] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.655796][ T7589] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.678933][ T29] audit: type=1400 audit(1785172683.134:391): avc: denied { write } for pid=7698 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.792135][ T7704] bridge0: port 3(syz_tun) entered blocking state [ 182.827898][ T7704] bridge0: port 3(syz_tun) entered disabled state [ 182.837679][ T7704] syz_tun: entered allmulticast mode [ 182.865503][ T7704] syz_tun: entered promiscuous mode [ 182.879691][ T7704] bridge0: port 3(syz_tun) entered blocking state [ 182.886274][ T7704] bridge0: port 3(syz_tun) entered forwarding state [ 182.904944][ T7243] veth0_macvtap: entered promiscuous mode [ 182.952444][ T5272] 8021q: adding VLAN 0 to HW filter on device eth8 [ 182.968302][ T7211] hsr_slave_0: left promiscuous mode [ 182.975453][ T7211] hsr_slave_1: left promiscuous mode [ 182.984495][ T7211] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.992029][ T7211] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.001275][ T7211] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.009119][ T7211] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.033227][ T7211] hsr_slave_0: left promiscuous mode [ 183.047906][ T7211] hsr_slave_1: left promiscuous mode [ 183.056388][ T7211] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.064263][ T7211] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.072106][ T7211] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.079852][ T7211] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.090394][ T7211] hsr_slave_0: left promiscuous mode [ 183.096165][ T7211] hsr_slave_1: left promiscuous mode [ 183.101816][ T7211] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.109522][ T7211] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.117620][ T7211] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.125304][ T7211] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.144836][ T7211] veth1_macvtap: left promiscuous mode [ 183.150313][ T7211] veth0_macvtap: left promiscuous mode [ 183.156331][ T7211] veth1_vlan: left promiscuous mode [ 183.161591][ T7211] veth0_vlan: left promiscuous mode [ 183.167770][ T7211] veth1_macvtap: left promiscuous mode [ 183.174346][ T7211] veth0_macvtap: left promiscuous mode [ 183.179871][ T7211] veth1_vlan: left promiscuous mode [ 183.185460][ T7211] veth0_vlan: left promiscuous mode [ 183.191543][ T7211] veth1_macvtap: left promiscuous mode [ 183.197153][ T7211] veth0_macvtap: left promiscuous mode [ 183.202791][ T7211] veth1_vlan: left promiscuous mode [ 183.208002][ T7211] veth0_vlan: left promiscuous mode [ 183.458470][ T7211] team0 (unregistering): Port device team_slave_1 removed [ 183.471830][ T7211] team0 (unregistering): Port device team_slave_0 removed [ 183.528375][ T7589] smc: removing ib device syz1 [ 183.561346][ T7211] smc: removing net device lo with user defined pnetid SYZ0 [ 183.665722][ T7211] team0 (unregistering): Port device team_slave_1 removed [ 183.680349][ T7211] team0 (unregistering): Port device team_slave_0 removed [ 183.768722][ T5739] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 183.798291][ T7211] smc: removing net device veth0 with user defined pnetid SYZ0 [ 183.837004][ T7211] smc: removing net device lo with user defined pnetid SYZ0 [ 183.944692][ T7211] team0 (unregistering): Port device team_slave_1 removed [ 183.958330][ T7211] team0 (unregistering): Port device team_slave_0 removed [ 184.027393][ T7211] smc: removing net device dummy0 with user defined pnetid SYZ0 [ 184.037402][ T5739] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 184.076600][ T7711] lo speed is unknown, defaulting to 1000 [ 184.077081][ T46] syz1: Port: 1 Link DOWN [ 184.083220][ T7711] lo speed is unknown, defaulting to 1000 [ 184.114668][ T7243] veth1_macvtap: entered promiscuous mode [ 184.125657][ T134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.136391][ T7589] smbdirect: ib_dev[syz1] removed [ 184.144484][ T134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.163038][ T7711] lo speed is unknown, defaulting to 1000 [ 184.172147][ T7711] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 184.189315][ T7711] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 184.207529][ T7711] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 184.240148][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.251042][ T7243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.272099][ T7711] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 184.288282][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.324541][ T7711] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 184.338063][ T7243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.459105][ T1170] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.500082][ T1170] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.537101][ T7711] lo speed is unknown, defaulting to 1000 [ 184.539916][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.543793][ T1170] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.574917][ T24] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 184.584053][ T7715] ceph: No mds server is up or the cluster is laggy [ 184.595425][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.607289][ T1170] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.635914][ T7711] lo speed is unknown, defaulting to 1000 [ 184.669762][ T7711] lo speed is unknown, defaulting to 1000 [ 184.769182][ T7711] lo speed is unknown, defaulting to 1000 [ 184.807653][ T7711] lo speed is unknown, defaulting to 1000 [ 185.101765][ T1052] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.152532][ T1052] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.190582][ T7738] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 185.401231][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.435989][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.452020][ T29] audit: type=1400 audit(1785172685.904:392): avc: denied { write } for pid=7719 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 207.932234][ T29] audit: type=1400 audit(1785172687.164:393): avc: denied { write } for pid=7752 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 207.965460][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 207.971778][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 291.782175][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 291.789176][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P76/1:b..l [ 291.797260][ C1] rcu: (detected by 1, t=10502 jiffies, g=33893, q=3650 ncpus=2) [ 291.805054][ C1] task:kworker/u8:4 state:R running task stack:23776 pid:76 tgid:76 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 291.819154][ C1] Workqueue: ipv6_addrconf addrconf_dad_work [ 291.825153][ C1] Call Trace: [ 291.828419][ C1] [ 291.831343][ C1] __schedule+0x125c/0x6730 [ 291.835842][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 291.841216][ C1] ? kasan_save_stack+0x30/0x50 [ 291.846065][ C1] ? kasan_save_track+0x14/0x30 [ 291.850916][ C1] ? kasan_save_free_info+0x3b/0x70 [ 291.856119][ C1] ? __kasan_slab_free+0x5f/0x80 [ 291.861051][ C1] ? kmem_cache_free+0x127/0x6b0 [ 291.865986][ C1] ? __pfx___schedule+0x10/0x10 [ 291.870831][ C1] ? mark_held_locks+0x40/0x70 [ 291.875595][ C1] preempt_schedule_irq+0x50/0x90 [ 291.880612][ C1] irqentry_exit+0x205/0xa00 [ 291.885203][ C1] asm_common_interrupt+0x26/0x40 [ 291.890231][ C1] RIP: 0010:lock_acquire+0x5e/0x370 [ 291.895427][ C1] Code: 05 fb 4d 7e 12 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 86 81 3c 0f 0f 82 ac 02 00 00 8b 35 4e b5 3c 0f 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 9d 4d 7e 12 0f 85 ec 02 00 00 48 83 c4 [ 291.915027][ C1] RSP: 0018:ffffc900015e73d0 EFLAGS: 00000206 [ 291.921091][ C1] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000000 [ 291.929048][ C1] RDX: 0000000000000000 RSI: ffffffff8e17fc5f RDI: ffffffff8c401580 [ 291.937015][ C1] RBP: ffffffff8ebe8180 R08: 000000003e6eacc7 R09: 0000000000000007 [ 291.944975][ C1] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002 [ 291.952933][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 291.960910][ C1] ? unwind_next_frame+0x3c8/0x2090 [ 291.966107][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 291.972257][ C1] unwind_next_frame+0xd1/0x2090 [ 291.977185][ C1] ? unwind_next_frame+0xbd/0x2090 [ 291.982285][ C1] ? stack_trace_save+0x8e/0xc0 [ 291.987127][ C1] ? __unwind_start+0x3cd/0x7e0 [ 291.991973][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 291.998121][ C1] arch_stack_walk+0x94/0xf0 [ 292.002722][ C1] ? stack_trace_save+0x8e/0xc0 [ 292.007568][ C1] stack_trace_save+0x8e/0xc0 [ 292.012238][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 292.017602][ C1] ? nlmsg_notify+0xdc/0x290 [ 292.022190][ C1] kasan_save_stack+0x30/0x50 [ 292.026909][ C1] kasan_save_track+0x14/0x30 [ 292.031580][ C1] __kasan_slab_alloc+0x89/0x90 [ 292.036429][ C1] kmem_cache_alloc_node_noprof+0x27d/0x6b0 [ 292.042321][ C1] ? __alloc_skb+0x140/0x710 [ 292.046913][ C1] __alloc_skb+0x140/0x710 [ 292.051329][ C1] ? __alloc_skb+0x5b7/0x710 [ 292.055916][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 292.060848][ C1] ? __timer_delete+0xec/0x1b0 [ 292.065603][ C1] ? __pfx___timer_delete+0x10/0x10 [ 292.070804][ C1] __ipv6_ifa_notify+0x1f1/0xf90 [ 292.075749][ C1] ? __pfx___ipv6_ifa_notify+0x10/0x10 [ 292.081212][ C1] ? __cancel_work+0x2b5/0x340 [ 292.085975][ C1] ? __cancel_work+0x245/0x340 [ 292.090736][ C1] ? __pfx___cancel_work+0x10/0x10 [ 292.095843][ C1] ? __lock_acquire+0x49f/0x1a40 [ 292.100781][ C1] ? addrconf_dad_completed+0x195/0xff0 [ 292.106324][ C1] addrconf_dad_completed+0x195/0xff0 [ 292.111701][ C1] ? __pfx_addrconf_dad_completed+0x10/0x10 [ 292.117600][ C1] ? addrconf_dad_work+0x83c/0x1360 [ 292.122793][ C1] addrconf_dad_work+0x83c/0x1360 [ 292.127826][ C1] ? __pfx_addrconf_dad_work+0x10/0x10 [ 292.133283][ C1] ? rcu_is_watching+0x12/0xc0 [ 292.138060][ C1] process_one_work+0xa23/0x1940 [ 292.143006][ C1] ? __pfx_process_one_work+0x10/0x10 [ 292.148385][ C1] ? __pfx_addrconf_dad_work+0x10/0x10 [ 292.153843][ C1] worker_thread+0x5ef/0xe50 [ 292.158439][ C1] ? kthread+0x13a/0x450 [ 292.162672][ C1] ? __pfx_worker_thread+0x10/0x10 [ 292.167773][ C1] kthread+0x370/0x450 [ 292.171833][ C1] ? __pfx_kthread+0x10/0x10 [ 292.176416][ C1] ret_from_fork+0x72b/0xd50 [ 292.181008][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 292.186122][ C1] ? __switch_to+0x800/0x10f0 [ 292.190794][ C1] ? __pfx_kthread+0x10/0x10 [ 292.195379][ C1] ret_from_fork_asm+0x1a/0x30 [ 292.200162][ C1] [ 292.203169][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 8382 jiffies! g33893 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 292.215393][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=11214 [ 292.223275][ C1] rcu: rcu_preempt kthread starved for 8383 jiffies! g33893 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 292.234545][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 292.244497][ C1] rcu: RCU grace-period kthread stack dump: [ 292.250367][ C1] task:rcu_preempt state:I stack:27432 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 292.262299][ C1] Call Trace: [ 292.265564][ C1] [ 292.268486][ C1] __schedule+0x125c/0x6730 [ 292.273001][ C1] ? __pfx___schedule+0x10/0x10 [ 292.277845][ C1] ? find_held_lock+0x2b/0x80 [ 292.282526][ C1] ? schedule+0x225/0x2c0 [ 292.286849][ C1] schedule+0xdd/0x2c0 [ 292.290911][ C1] schedule_timeout+0x127/0x280 [ 292.295763][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 292.301140][ C1] ? __pfx_process_timeout+0x10/0x10 [ 292.306424][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 292.312220][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 292.317677][ C1] rcu_gp_fqs_loop+0x1a9/0x900 [ 292.322439][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 292.327722][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 292.332661][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 292.337854][ C1] ? rcu_is_watching+0x12/0xc0 [ 292.342620][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 292.348424][ C1] rcu_gp_kthread+0x179/0x230 [ 292.353099][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 292.358291][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 292.364091][ C1] ? __kthread_parkme+0x18c/0x230 [ 292.369118][ C1] ? kthread+0x13a/0x450 [ 292.373349][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 292.378541][ C1] kthread+0x370/0x450 [ 292.382601][ C1] ? __pfx_kthread+0x10/0x10 [ 292.387185][ C1] ret_from_fork+0x72b/0xd50 [ 292.391776][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 292.396889][ C1] ? __switch_to+0x800/0x10f0 [ 292.401559][ C1] ? __pfx_kthread+0x10/0x10 [ 292.406143][ C1] ret_from_fork_asm+0x1a/0x30 [ 292.410922][ C1] [ 292.413929][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 292.420250][ C1] Sending NMI from CPU 1 to CPUs 0: [ 292.425458][ C0] NMI backtrace for cpu 0 [ 292.425478][ C0] CPU: 0 UID: 0 PID: 5725 Comm: kworker/0:6 Not tainted syzkaller #0 PREEMPT(full) [ 292.425501][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 292.425517][ C0] Workqueue: events_power_efficient gc_worker [ 292.425547][ C0] RIP: 0010:lock_is_held_type+0x67/0x140 [ 292.425570][ C0] Code: 95 9c 0b 00 00 85 d2 0f 85 a7 00 00 00 48 89 fb 41 89 f4 9c 41 5d fa 48 c7 c7 db bf 29 8e e8 30 1a 00 00 65 ff 05 89 75 a9 08 <8b> 85 98 0b 00 00 85 c0 0f 8e 94 00 00 00 4c 8d b5 a0 0b 00 00 45 [ 292.425590][ C0] RSP: 0018:ffffc90000007e28 EFLAGS: 00000002 [ 292.425605][ C0] RAX: 0000000000000000 RBX: ffff8880b8428418 RCX: 0000000000000001 [ 292.425618][ C0] RDX: 0000000000000000 RSI: ffffffff8e29bfdb RDI: ffffffff8c401580 [ 292.425631][ C0] RBP: ffff88807912a540 R08: 0000000000000005 R09: 0000000000000000 [ 292.425643][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 00000000ffffffff [ 292.425655][ C0] R13: 0000000000000046 R14: 0000000000000001 R15: ffff8880b8428590 [ 292.425670][ C0] FS: 0000000000000000(0000) GS:ffff888123ddc000(0000) knlGS:0000000000000000 [ 292.425689][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 292.425702][ C0] CR2: 00007fa1b6ded2f8 CR3: 000000005d988000 CR4: 00000000003526f0 [ 292.425715][ C0] Call Trace: [ 292.425722][ C0] [ 292.425732][ C0] enqueue_hrtimer+0x24f/0x2f0 [ 292.425762][ C0] __hrtimer_run_queues+0x6ed/0x9c0 [ 292.425795][ C0] hrtimer_interrupt+0x3e5/0x940 [ 292.425819][ C0] __sysvec_apic_timer_interrupt+0x109/0x470 [ 292.425850][ C0] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 292.425872][ C0] [ 292.425878][ C0] [ 292.425885][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 292.425907][ C0] RIP: 0010:lock_acquire+0x5e/0x370 [ 292.425932][ C0] Code: 05 fb 4d 7e 12 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 86 81 3c 0f 0f 82 ac 02 00 00 8b 35 4e b5 3c 0f 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 9d 4d 7e 12 0f 85 ec 02 00 00 48 83 c4 [ 292.425950][ C0] RSP: 0018:ffffc900045ffad0 EFLAGS: 00000206 [ 292.425965][ C0] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000000 [ 292.425977][ C0] RDX: 0000000000000000 RSI: ffffffff8e17fc5f RDI: ffffffff8c401580 [ 292.425991][ C0] RBP: ffffffff8ebe8180 R08: 00000000ef871b96 R09: 0000000000000007 [ 292.426004][ C0] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002 [ 292.426016][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 292.426034][ C0] ? __pfx___might_resched+0x10/0x10 [ 292.426058][ C0] ? gc_worker+0xc71/0x1a10 [ 292.426082][ C0] gc_worker+0x22b/0x1a10 [ 292.426105][ C0] ? gc_worker+0x21a/0x1a10 [ 292.426132][ C0] ? __pfx_gc_worker+0x10/0x10 [ 292.426156][ C0] ? rcu_is_watching+0x12/0xc0 [ 292.426186][ C0] process_one_work+0xa23/0x1940 [ 292.426213][ C0] ? __pfx_process_one_work+0x10/0x10 [ 292.426237][ C0] ? __pfx_gc_worker+0x10/0x10 [ 292.426262][ C0] worker_thread+0x5ef/0xe50 [ 292.426286][ C0] ? __pfx_worker_thread+0x10/0x10 [ 292.426307][ C0] ? kthread+0x13a/0x450 [ 292.426324][ C0] ? __pfx_worker_thread+0x10/0x10 [ 292.426344][ C0] kthread+0x370/0x450 [ 292.426362][ C0] ? __pfx_kthread+0x10/0x10 [ 292.426381][ C0] ret_from_fork+0x72b/0xd50 [ 292.426407][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 292.426434][ C0] ? __switch_to+0x800/0x10f0 [ 292.426453][ C0] ? __pfx_kthread+0x10/0x10 [ 292.426471][ C0] ret_from_fork_asm+0x1a/0x30 [ 292.426505][ C0]