last executing test programs: 39.594022118s ago: executing program 1 (id=2): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/self/fail-nth\x00', 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') write(r0, &(0x7f0000000100)='1\x00', 0x2) read(r1, &(0x7f0000000180)=""/512, 0x200) write(r0, &(0x7f0000000100)='2\x00', 0x2) read(r1, &(0x7f0000000180)=""/512, 0x200) write(r0, &(0x7f0000000100)='3\x00', 0x2) read(r1, &(0x7f0000000180)=""/512, 0x200) write(r0, &(0x7f0000000100)='4\x00', 0x2) read(r1, &(0x7f0000000180)=""/512, 0x200) write(r0, &(0x7f0000000100)='5\x00', 0x2) read(r1, &(0x7f0000000180)=""/512, 0x200) write(r0, &(0x7f0000000100)='6\x00', 0x2) read(r1, &(0x7f0000000180)=""/512, 0x200) write(r0, &(0x7f0000000100)='7\x00', 0x2) read(r1, &(0x7f0000000180)=""/512, 0x200) write(r0, &(0x7f0000000100)='8\x00', 0x2) read(r1, &(0x7f0000000180)=""/512, 0x200) write(r0, &(0x7f0000000100)='9\x00', 0x2) read(r1, &(0x7f0000000180)=""/512, 0x200) write(r0, &(0x7f0000000100)='10\x00', 0x3) read(r1, &(0x7f0000000180)=""/512, 0x200) 37.694478543s ago: executing program 0 (id=14): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='nfsd\x00', &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x6) bind(r0, &(0x7f0000000100)=@in={0x2, 0x801, @loopback}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='3\n\x00', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='1\n\x00', 0x2) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000440)='127.0.0.1:/\x00', &(0x7f0000000480)='./mnt\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049,proto=tcp,clientaddr=127.0.0.1\x00']) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/file0\x00', 0x0, 0x0) close(r3) 37.665802688s ago: executing program 1 (id=16): r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0x1, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'syzkaller0\x00', &(0x7f00000002c0)=@ethtool_eeprom={0xb, 0x0, 0x0, 0x10}}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000180)={'syzkaller1\x00', &(0x7f00000002c0)=@ethtool_eeprom={0xb, 0x0, 0x0, 0x10}}) 36.819140259s ago: executing program 0 (id=21): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\x00', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000120)='./proc/sys/net/sctp/reconf_enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='1\x00', 0x1) close(r1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180)=0x2, 0x4) setsockopt(r2, 0x84, 0x7d, &(0x7f0000000200)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={0x0, 0x80}, 0x8) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x7}, 0x8) bind(r2, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x10) listen(r2, 0x5) connect(r3, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet_sctp(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000700)="123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890", 0x90}], 0x1, 0x0, 0x0, 0x8000}, 0x8000) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000800), 0x4) 36.441520793s ago: executing program 0 (id=24): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000000)={0x2, 0x4000, @loopback}, 0x10) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000140)=0x1, 0x4) sendmsg$rds(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x2, 0x4000, @loopback}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000240)=""/8, 0x8}], 0x1, &(0x7f0000000700)=[@fadd={0x58, 0x114, 0x6, {{0x1}, &(0x7f0000000140), &(0x7f0000000180), 0x1, 0x0, 0x0, 0x0, 0x20, 0x1234}}], 0x58}, 0x0) 36.330473247s ago: executing program 0 (id=26): mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000b00)='./sys\x00', &(0x7f0000000c00)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='10 2\n\x00', 0x5) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/netdevsim/devices/netdevsim10/sriov_numvfs\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='4\n\x00', 0x2) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newlinkprop={0x48, 0x6c, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_ALT_IFNAME={0x14, 0x35, 'netdevsim0\x00'}]}, 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)=@getlink={0x3c, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_EXT_MASK={0x8, 0x1d, 0x1}]}, 0x34}}, 0x0) 36.175476765s ago: executing program 0 (id=28): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x5c, 0x10, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}}}}}]}, 0x5c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipv4_newaddr={0x3c, 0x14, 0x601, 0x0, 0x0, {0x2, 0x18}, [@IFA_LABEL={0x14, 0x3, 'veth0\x00'}, @IFA_LOCAL={0x8, 0x2, @private=0xa010101}, @IFA_ADDRESS={0x8, 0x1, @private=0xa010101}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@ipv4_newaddr={0x3c, 0x14, 0x601, 0x0, 0x0, {0x2, 0x18}, [@IFA_LABEL={0x14, 0x3, 'veth1\x00'}, @IFA_LOCAL={0x8, 0x2, @private=0xa010102}, @IFA_ADDRESS={0x8, 0x1, @private=0xa010102}]}, 0x3c}}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1\x00'}}]}, 0x38}}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bind(r2, &(0x7f0000000700)=@in={0x2, 0x1f90, @private=0xa010101}, 0x10) listen(r2, 0x5) r3 = socket$inet_smc(0x2b, 0x1, 0x0) bind(r3, &(0x7f0000000720)=@in={0x2, 0x0, @private=0xa010102}, 0x10) connect$inet(r3, &(0x7f0000000740)={0x2, 0x1f90, @private=0xa010101}, 0x10) accept(r2, 0x0, 0x0) 35.769116572s ago: executing program 4 (id=31): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r2 = accept(r0, 0x0, 0x0) shutdown(r2, 0x2) (async) sendmsg$inet_sctp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)='hello', 0x5}], 0x1}, 0x0) close(r2) 35.632917641s ago: executing program 4 (id=32): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/mpls/platform_labels\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1000', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/mpls/conf/lo/input\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='1', 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@ipv4_newroute={0x40, 0x18, 0x601, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, @private=0xa010100}, @RTA_OIF={0x8, 0x4, 0x1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x8, 0x1, [{0x64, 0x0, 0x1, 0x40}]}}]}, 0x40}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000500)=0x64, 0x4) connect$inet(r3, &(0x7f0000000540)={0x2, 0x1234, @private=0xa010101}, 0x10) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)='\x00'/1000, 0x3e8}], 0x1}, 0x0) 35.515216383s ago: executing program 4 (id=33): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ed) mount$9p_rdma(&(0x7f0000000100), &(0x7f0000000200)='./mnt\x00', &(0x7f0000000300), 0x0, &(0x7f0000000400)={'trans=rdma,', {'port', 0x3d, 0x4e20}}) 34.86931407s ago: executing program 4 (id=36): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\x00', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000120)='./proc/sys/net/sctp/reconf_enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='1\x00', 0x1) close(r1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180)=0x2, 0x4) setsockopt(r2, 0x84, 0x7d, &(0x7f0000000200)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={0x0, 0x200}, 0x8) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt(r3, 0x84, 0x7d, &(0x7f0000000300)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x200}, 0x8) bind(r2, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x10) listen(r2, 0x5) connect(r3, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) r4 = accept(r2, 0x0, 0x0) sendto(r3, &(0x7f0000000500)='\x00', 0x2710, 0x0, 0x0, 0x0) sendto(r4, &(0x7f0000003000)='\x00', 0x2710, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000700), 0x4) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000800), 0x4) 34.648108167s ago: executing program 4 (id=37): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ed) mount$9p_rdma(&(0x7f0000000100), &(0x7f0000000200)='./mnt\x00', &(0x7f0000000300), 0x0, &(0x7f0000000400)={'trans=rdma,', {'port', 0x3d, 0x4e20}}) 34.461036555s ago: executing program 1 (id=39): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x24}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/mptcp/add_addr_timeout\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='1\n\x00', 0x2) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000300)={0x2, 0x1f40, @loopback}, 0x10) listen(r3, 0x5) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000300)={0x2, 0x1f40, @loopback}, 0x10) r5 = accept(r3, 0x0, 0x0) write(r4, &(0x7f0000000400)="0123456789", 0xa) read(r5, &(0x7f0000000500), 0xa) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}]}, 0x38}}, 0x0) nanosleep(&(0x7f0000000700)={0x1}, 0x0) 33.656218758s ago: executing program 3 (id=43): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r2 = accept(r0, 0x0, 0x0) shutdown(r2, 0x2) (async) sendmsg$inet_sctp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)='hello', 0x5}], 0x1}, 0x0) close(r2) 33.526089819s ago: executing program 1 (id=44): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/write_ports\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='2049\n\x00', 0x5) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='1\n\x00', 0x2) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000340)='127.0.0.1:/\x00', &(0x7f0000000380)='./mnt\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='port=2049,proto=tcp,clientaddr=127.0.0.1\x00']) 33.496822051s ago: executing program 3 (id=45): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\x00', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000120)='./proc/sys/net/sctp/reconf_enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='1\x00', 0x1) close(r1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180)=0x2, 0x4) setsockopt(r2, 0x84, 0x7d, &(0x7f0000000200)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={0x0, 0x80}, 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x7}, 0x8) bind(r2, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x10) listen(r2, 0x5) connect(0xffffffffffffffff, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000700)="123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890", 0x90}], 0x1, 0x0, 0x0, 0x8000}, 0x8000) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000800), 0x4) 33.333173161s ago: executing program 2 (id=47): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/net/mpls/platform_labels\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='1000\n', 0x5) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/sys/net/mpls/conf/lo/input\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='1\n', 0x2) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f0000000400)=@mpls_newroute={0x0, 0x18, 0x605, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x0, 0x1, {0x100, 0x0, 0x1}}, @RTA_NEWDST={0x0, 0x16, [{0x200, 0x0, 0x1}]}, @RTA_OIF={0x0, 0x4, 0x1}]}, 0x1}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000500)={&(0x7f0000000200), 0xc, &(0x7f0000000600)={&(0x7f0000000700)=@mpls_getroute={0x0, 0x1a, 0x301}, 0x1}}, 0x0) 33.275137482s ago: executing program 3 (id=48): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\x00', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000120)='./proc/sys/net/sctp/reconf_enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='1\x00', 0x1) close(r1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180)=0x2, 0x4) setsockopt(r2, 0x84, 0x7d, &(0x7f0000000200)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={0x0, 0x200}, 0x8) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt(r3, 0x84, 0x7d, &(0x7f0000000300)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x200}, 0x8) bind(r2, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x10) listen(r2, 0x5) connect(r3, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) r4 = accept(r2, 0x0, 0x0) sendto(r3, &(0x7f0000000500)='\x00', 0x2710, 0x0, 0x0, 0x0) sendto(r4, &(0x7f0000003000)='\x00', 0x2710, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000700), 0x4) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000800), 0x4) 33.047650038s ago: executing program 1 (id=49): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./export_dir\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd_mnt/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='-2 -3 +4\n', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/client_tracking_method\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='none\n', 0x5) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd_mnt/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='tcp 2049\n', 0x9) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc_mnt/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r4, &(0x7f0000000440)='localhost / 2147483647 0 0 0 0\n', 0x1f) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./proc_mnt/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0) write(r5, &(0x7f00000004c0)='localhost 1 \\x00 2147483647 /\n', 0x1e) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd_mnt/threads\x00', 0x1, 0x0) write(r6, &(0x7f0000000540)='1\n', 0x2) close(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./nfs_mnt\x00', 0x1ff) mount(&(0x7f00000005c0)=@filename='127.0.0.1:/\x00', &(0x7f0000000600)='./nfs_mnt\x00', &(0x7f0000000640)='nfs4\x00', 0x0, &(0x7f0000000680)='addr=127.0.0.1,clientaddr=127.0.0.1\x00') setxattr(&(0x7f00000006c0)='./nfs_mnt\x00', &(0x7f0000000700)=@known='system.posix_acl_access\x00', &(0x7f0000000740)='\x02\x00\x00\x00\x01\x00\a\x00\xff\xff\xff\xff\x04\x00\x05\x00\xff\xff\xff\xff \x00\x05\x00\xff\xff\xff\xff', 0x1c, 0x0) 33.047417214s ago: executing program 2 (id=50): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) bind$rds(r0, &(0x7f0000000100)={0x2, 0x1234, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000200)={&(0x7f0000000300)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000500)=""/4, 0x8}], 0x1}, 0x0) nanosleep(&(0x7f0000000600)={0x0, 0x5f5e100}, 0x0) 33.043206367s ago: executing program 3 (id=51): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind(r0, &(0x7f0000000000)=@in={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x80) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) write$sysctl(r1, &(0x7f0000000200)='2\x00', 0x1) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) accept$inet(r0, 0x0, 0x0) 32.913671056s ago: executing program 3 (id=52): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, r2, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000) sendmsg$xdp(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x40) ppoll(&(0x7f0000000800)=[{r0, 0x4}], 0x1, 0x0, 0x0, 0x0) 32.83504998s ago: executing program 2 (id=53): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000500)=0x10001, 0x4) connect$inet(r0, &(0x7f0000000600)={0x2, 0x1234, @loopback}, 0x10) write(r0, &(0x7f0000000700)='hello1', 0x6) 32.783468639s ago: executing program 3 (id=54): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./export\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='tmpfs\x00', &(0x7f0000000180)='./export\x00', &(0x7f00000001c0)='tmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(&(0x7f0000000240)=@filename='proc\x00', &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000340)='tcp 2049\n\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r1, &(0x7f0000000440)='nfsd 127.0.0.1 2147483647 localhost\n\x00', 0x24) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r2, &(0x7f0000000540)='localhost / 2147483647\n\x00', 0x17) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./export/dir1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./export/dir2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./export/dir3\x00', 0x1ff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000900)={0x2, 0x8008, @loopback}, 0x10) write(r3, &(0x7f0000000a00)="80000038000000010000000000000002000186a300000003000000100000000000000000000000000000000000000000000000000000000020", 0x3c) nanosleep(&(0x7f0000000b00)={0x0, 0x5f5e100}, 0x0) 32.754746364s ago: executing program 2 (id=55): syz_emit_ethernet(0x32, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0800450000240000000040847c547f0000017f0000014e214e20123456780000000006000400"], 0x0) 32.692241397s ago: executing program 2 (id=56): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x1}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0xc0, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x90, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3e8}]}]}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0xffffffffc4653600}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0xc0}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f0000000400)={0x11, 0x0, r2, 0x0}, 0x14) write(r3, &(0x7f0000000500)="00000000000000000000000008004500001c000000004011000001010101010101020001000100080000", 0x2a) nanosleep(&(0x7f0000000600)={0x0, 0x5f5e100}, 0x0) 27.876587501s ago: executing program 2 (id=57): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000580)={0x1, @vbi={0x4, 0x80000000, 0x4, 0x34325258, [0x88000], [0xaf09, 0x7], 0x1}}) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000480)) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x1) listxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) openat$vcsu(0xffffff9c, &(0x7f0000000100), 0x30403, 0x0) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000040)={0x6, 0x7, 0x9, 0x0, 0x1, "100056f200"}) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000000)=0x8001) r7 = msgget$private(0x0, 0x200) msgctl$MSG_STAT(r7, 0xb, &(0x7f0000000bc0)=""/4096) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) 784.517µs ago: executing program 0 (id=58): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\x00', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000120)='./proc/sys/net/sctp/reconf_enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='1\x00', 0x1) close(r1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180)=0x2, 0x4) setsockopt(r2, 0x84, 0x7d, &(0x7f0000000200)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={0x0, 0x80}, 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x7}, 0x8) bind(r2, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x10) listen(r2, 0x5) connect(0xffffffffffffffff, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000700)="123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890", 0x90}], 0x1, 0x0, 0x0, 0x8000}, 0x8000) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000800), 0x4) 0s ago: executing program 4 (id=59): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/net/mpls/platform_labels\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='1000\n', 0x5) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/sys/net/mpls/conf/lo/input\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='1\n', 0x2) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f0000000400)=@mpls_newroute={0x0, 0x18, 0x605, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x0, 0x1, {0x100, 0x0, 0x1}}, @RTA_NEWDST={0x0, 0x16, [{0x200, 0x0, 0x1}]}, @RTA_OIF={0x0, 0x4, 0x1}]}, 0x1}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000500)={&(0x7f0000000200), 0xc, &(0x7f0000000600)={&(0x7f0000000700)=@mpls_getroute={0x0, 0x1a, 0x301}, 0x1}}, 0x0) kernel console output (not intermixed with test programs): [ 51.962660][ T30] audit: type=1400 audit(1785174018.944:111): avc: denied { write } for pid=5461 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.005080][ T30] audit: type=1400 audit(1785174018.994:112): avc: denied { write } for pid=5472 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.307627][ T30] audit: type=1400 audit(1785174019.294:113): avc: denied { write } for pid=5475 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.362038][ T30] audit: type=1400 audit(1785174019.344:114): avc: denied { write } for pid=5486 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.541251][ T30] audit: type=1400 audit(1785174019.524:115): avc: denied { write } for pid=5489 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.599649][ T30] audit: type=1400 audit(1785174019.584:116): avc: denied { write } for pid=5500 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.769698][ T30] audit: type=1400 audit(1785174019.754:117): avc: denied { write } for pid=5503 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.828293][ T30] audit: type=1400 audit(1785174019.814:118): avc: denied { write } for pid=5514 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.099681][ T30] audit: type=1400 audit(1785174020.084:119): avc: denied { write } for pid=5517 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.152344][ T30] audit: type=1400 audit(1785174020.134:120): avc: denied { write } for pid=5528 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.142' (ED25519) to the list of known hosts. [ 58.625585][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 58.625600][ T30] audit: type=1400 audit(1785174025.614:129): avc: denied { mounton } for pid=5596 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 58.655827][ T30] audit: type=1400 audit(1785174025.644:130): avc: denied { mount } for pid=5596 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 58.658625][ T5596] cgroup: Unknown subsys name 'net' [ 58.685524][ T30] audit: type=1400 audit(1785174025.674:131): avc: denied { unmount } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 58.815710][ T5596] cgroup: Unknown subsys name 'cpuset' [ 58.823689][ T5596] cgroup: Unknown subsys name 'rlimit' [ 58.922391][ T30] audit: type=1400 audit(1785174025.904:132): avc: denied { setattr } for pid=5596 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=816 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.946251][ T30] audit: type=1400 audit(1785174025.904:133): avc: denied { create } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.986421][ T30] audit: type=1400 audit(1785174025.904:134): avc: denied { write } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.022756][ T30] audit: type=1400 audit(1785174025.904:135): avc: denied { read } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.035323][ T5598] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 59.043346][ T30] audit: type=1400 audit(1785174025.934:136): avc: denied { mounton } for pid=5596 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 59.076584][ T30] audit: type=1400 audit(1785174025.934:137): avc: denied { mount } for pid=5596 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 59.100259][ T30] audit: type=1400 audit(1785174026.044:138): avc: denied { relabelto } for pid=5598 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 60.090732][ T5596] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 62.063824][ T5613] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.072541][ T5613] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.081040][ T5615] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.086948][ T5616] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.089279][ T5615] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.095939][ T5616] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.104409][ T5615] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.114988][ T5613] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.119881][ T5615] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.126819][ T5613] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.131706][ T5615] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.140876][ T5613] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.152120][ T5616] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.161445][ T5616] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.170910][ T5624] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.186205][ T5624] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.196655][ T4928] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 62.204093][ T5624] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.213943][ T4928] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.221003][ T5624] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 62.230117][ T5624] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 62.231022][ T4928] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.245800][ T5624] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 62.248342][ T4928] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 62.269000][ T5624] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 63.517095][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.524296][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.531476][ T5609] bridge_slave_0: entered allmulticast mode [ 63.538390][ T5609] bridge_slave_0: entered promiscuous mode [ 63.574546][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.581823][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.589029][ T5609] bridge_slave_1: entered allmulticast mode [ 63.596337][ T5609] bridge_slave_1: entered promiscuous mode [ 63.608742][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.615864][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.623227][ T5614] bridge_slave_0: entered allmulticast mode [ 63.630194][ T5614] bridge_slave_0: entered promiscuous mode [ 63.657676][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.664817][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.672024][ T5614] bridge_slave_1: entered allmulticast mode [ 63.678863][ T5614] bridge_slave_1: entered promiscuous mode [ 63.685552][ T5623] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.692612][ T5623] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.699748][ T5623] bridge_slave_0: entered allmulticast mode [ 63.706530][ T5623] bridge_slave_0: entered promiscuous mode [ 63.737287][ T5623] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.744392][ T5623] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.751470][ T5623] bridge_slave_1: entered allmulticast mode [ 63.758343][ T5623] bridge_slave_1: entered promiscuous mode [ 63.772774][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.784353][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.835093][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.850752][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.858436][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.866252][ T5608] bridge_slave_0: entered allmulticast mode [ 63.873513][ T5608] bridge_slave_0: entered promiscuous mode [ 63.886805][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.894035][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.901228][ T5618] bridge_slave_0: entered allmulticast mode [ 63.908082][ T5618] bridge_slave_0: entered promiscuous mode [ 63.916353][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.927090][ T5623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.936528][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.943641][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.950738][ T5608] bridge_slave_1: entered allmulticast mode [ 63.957662][ T5608] bridge_slave_1: entered promiscuous mode [ 63.965286][ T5609] team0: Port device team_slave_0 added [ 63.970984][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.978867][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.986096][ T5618] bridge_slave_1: entered allmulticast mode [ 63.992733][ T5618] bridge_slave_1: entered promiscuous mode [ 64.007004][ T5623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.031212][ T5609] team0: Port device team_slave_1 added [ 64.074929][ T5614] team0: Port device team_slave_0 added [ 64.081934][ T5623] team0: Port device team_slave_0 added [ 64.089781][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.107998][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.118522][ T5614] team0: Port device team_slave_1 added [ 64.125578][ T5623] team0: Port device team_slave_1 added [ 64.132744][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.142498][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.149644][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.175572][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.188437][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.200018][ T5619] Bluetooth: hci1: command tx timeout [ 64.205999][ T5624] Bluetooth: hci2: command tx timeout [ 64.227577][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.234721][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.260888][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.273151][ T5619] Bluetooth: hci0: command tx timeout [ 64.305593][ T5608] team0: Port device team_slave_0 added [ 64.317463][ T5618] team0: Port device team_slave_0 added [ 64.324961][ T5618] team0: Port device team_slave_1 added [ 64.331027][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.338092][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.353345][ T5619] Bluetooth: hci4: command tx timeout [ 64.364480][ T5624] Bluetooth: hci3: command tx timeout [ 64.370529][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.386691][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.394471][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.420533][ T5623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.432877][ T5608] team0: Port device team_slave_1 added [ 64.455148][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.462181][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.488072][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.499257][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.506299][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.532322][ T5623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.574043][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.581076][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.607683][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.619059][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.626085][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.652108][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.681374][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.688519][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.714470][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.725706][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.732700][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.758604][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.785868][ T5609] hsr_slave_0: entered promiscuous mode [ 64.792067][ T5609] hsr_slave_1: entered promiscuous mode [ 64.818267][ T5614] hsr_slave_0: entered promiscuous mode [ 64.824526][ T5614] hsr_slave_1: entered promiscuous mode [ 64.831006][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 64.836909][ T5614] Cannot create hsr debugfs directory [ 64.859414][ T5623] hsr_slave_0: entered promiscuous mode [ 64.865631][ T5623] hsr_slave_1: entered promiscuous mode [ 64.871491][ T5623] debugfs: 'hsr0' already exists in 'hsr' [ 64.877354][ T5623] Cannot create hsr debugfs directory [ 64.900298][ T5608] hsr_slave_0: entered promiscuous mode [ 64.906497][ T5608] hsr_slave_1: entered promiscuous mode [ 64.912401][ T5608] debugfs: 'hsr0' already exists in 'hsr' [ 64.918259][ T5608] Cannot create hsr debugfs directory [ 64.979740][ T5618] hsr_slave_0: entered promiscuous mode [ 64.986008][ T5618] hsr_slave_1: entered promiscuous mode [ 64.991861][ T5618] debugfs: 'hsr0' already exists in 'hsr' [ 64.997679][ T5618] Cannot create hsr debugfs directory [ 65.311777][ T5614] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.324171][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.336716][ T5614] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.347103][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.355748][ T5614] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.365319][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.378990][ T5614] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.387933][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 65.435274][ T5609] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.445571][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.454201][ T5609] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.465301][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.473017][ T5609] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.485057][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.492736][ T5609] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.502300][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 65.588449][ T5608] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.598156][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.605922][ T5608] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.614666][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.622335][ T5608] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.632434][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.641001][ T5608] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.649426][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 65.728378][ T5623] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.737486][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.745652][ T5623] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.755160][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.762824][ T5623] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.772343][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.786047][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.797385][ T5623] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.806723][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 65.847133][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.864601][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.875673][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.884397][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.914266][ T1180] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.921622][ T1180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.937655][ T5618] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.946391][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.954976][ T5618] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.963770][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.971482][ T5618] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.980173][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.989450][ T1180] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.996543][ T1180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.010786][ T5618] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.019465][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.035186][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.072420][ T1180] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.079516][ T1180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.106840][ T1180] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.113969][ T1180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.169859][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.218711][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.276426][ T5624] Bluetooth: hci2: command tx timeout [ 66.277894][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.282720][ T5624] Bluetooth: hci1: command tx timeout [ 66.289065][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.302762][ T5623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.311945][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.334451][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.341556][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.354943][ T5624] Bluetooth: hci0: command tx timeout [ 66.381925][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.416424][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.423611][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.433472][ T5624] Bluetooth: hci4: command tx timeout [ 66.433611][ T5619] Bluetooth: hci3: command tx timeout [ 66.455723][ T5623] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.475847][ T1180] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.483852][ T1180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.509859][ T113] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.517041][ T113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.559844][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.566998][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.832607][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.997277][ T5614] veth0_vlan: entered promiscuous mode [ 67.070937][ T5614] veth1_vlan: entered promiscuous mode [ 67.133746][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.190802][ T5614] veth0_macvtap: entered promiscuous mode [ 67.212208][ T5614] veth1_macvtap: entered promiscuous mode [ 67.268670][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.298429][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.350184][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.375214][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.392646][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.419139][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.452860][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.476559][ T5609] veth0_vlan: entered promiscuous mode [ 67.496135][ T5623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.507562][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.531609][ T5609] veth1_vlan: entered promiscuous mode [ 67.666868][ T913] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.686913][ T5609] veth0_macvtap: entered promiscuous mode [ 67.690053][ T913] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.703030][ T5608] veth0_vlan: entered promiscuous mode [ 67.744218][ T5609] veth1_macvtap: entered promiscuous mode [ 67.766971][ T5623] veth0_vlan: entered promiscuous mode [ 67.780942][ T1124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.791386][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.801211][ T1124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.802344][ T5608] veth1_vlan: entered promiscuous mode [ 67.831262][ T5623] veth1_vlan: entered promiscuous mode [ 67.846060][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.847179][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 67.847189][ T30] audit: type=1400 audit(1785174034.834:154): avc: denied { mounton } for pid=5614 comm="syz-executor" path="/root/syzkaller.TX5dcN/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 67.867010][ T5608] veth0_macvtap: entered promiscuous mode [ 67.900354][ T30] audit: type=1400 audit(1785174034.874:155): avc: denied { mount } for pid=5614 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 67.915946][ T5608] veth1_macvtap: entered promiscuous mode [ 67.943587][ T30] audit: type=1400 audit(1785174034.874:156): avc: denied { mounton } for pid=5614 comm="syz-executor" path="/root/syzkaller.TX5dcN/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 67.976913][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.981274][ T5614] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 68.001469][ T5618] veth0_vlan: entered promiscuous mode [ 68.002090][ T30] audit: type=1400 audit(1785174034.874:157): avc: denied { mount } for pid=5614 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 68.013001][ T5618] veth1_vlan: entered promiscuous mode [ 68.034523][ T30] audit: type=1400 audit(1785174034.884:158): avc: denied { mounton } for pid=5614 comm="syz-executor" path="/root/syzkaller.TX5dcN/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 68.034567][ T30] audit: type=1400 audit(1785174034.884:159): avc: denied { mounton } for pid=5614 comm="syz-executor" path="/root/syzkaller.TX5dcN/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 68.090931][ T30] audit: type=1400 audit(1785174034.884:160): avc: denied { unmount } for pid=5614 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 68.112904][ T30] audit: type=1400 audit(1785174034.914:161): avc: denied { mounton } for pid=5614 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 68.116268][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.139764][ T30] audit: type=1400 audit(1785174034.914:162): avc: denied { mount } for pid=5614 comm="syz-executor" name="/" dev="gadgetfs" ino=7730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 68.165919][ T30] audit: type=1400 audit(1785174034.924:163): avc: denied { mount } for pid=5614 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 68.189459][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.198988][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.229302][ T5618] veth0_macvtap: entered promiscuous mode [ 68.242152][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.257325][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.297921][ T5623] veth0_macvtap: entered promiscuous mode [ 68.311180][ T5618] veth1_macvtap: entered promiscuous mode [ 68.331373][ T5623] veth1_macvtap: entered promiscuous mode [ 68.338620][ T1124] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.348094][ T1124] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.357062][ T5619] Bluetooth: hci2: command tx timeout [ 68.369461][ T5619] Bluetooth: hci1: command tx timeout [ 68.401443][ T1124] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.430394][ T1124] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.439906][ T5619] Bluetooth: hci0: command tx timeout [ 68.458265][ T1124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.461268][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.471075][ T1124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.487156][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.513801][ T5619] Bluetooth: hci3: command tx timeout [ 68.516918][ T5624] Bluetooth: hci4: command tx timeout [ 68.537584][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.564983][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.595398][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.604290][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.626586][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.638816][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.679425][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.715117][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.769061][ T5806] syz.2.6 uses obsolete (PF_INET,SOCK_PACKET) [ 68.798360][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.798455][ T1180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.810070][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.831840][ T1180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.847219][ T5808] tipc: Started in network mode [ 68.852657][ T5808] tipc: Node identity 7f000001, cluster identity 4711 [ 68.866331][ T5808] tipc: New replicast peer: 127.0.0.1 [ 68.878398][ T5808] tipc: Enabled bearer , priority 10 [ 68.899610][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.940124][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.049917][ T1180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.075059][ T1180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.164549][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.198439][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.248013][ T1124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.289342][ T1124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.367085][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.385989][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.660780][ T1180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.692541][ T1180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.020721][ T5714] tipc: Node number set to 2130706433 [ 70.195913][ T5707] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 70.212641][ T5835] FAULT_INJECTION: forcing a failure. [ 70.212641][ T5835] name fail_futex, interval 1, probability 0, space 0, times 1 [ 70.261150][ T5835] CPU: 0 UID: 0 PID: 5835 Comm: syz.1.2 Not tainted syzkaller #0 PREEMPT(full) [ 70.261174][ T5835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 70.261184][ T5835] Call Trace: [ 70.261189][ T5835] [ 70.261196][ T5835] dump_stack_lvl+0x100/0x190 [ 70.261222][ T5835] should_fail_ex.cold+0x5/0xa [ 70.261243][ T5835] should_fail_futex+0x4c/0x60 [ 70.261267][ T5835] __x64_sys_futex+0x1f0/0x4d0 [ 70.261293][ T5835] ? __pfx___x64_sys_futex+0x10/0x10 [ 70.261327][ T5835] do_syscall_64+0x115/0x870 [ 70.261345][ T5835] ? clear_bhb_loop+0x40/0x90 [ 70.261364][ T5835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.261381][ T5835] RIP: 0033:0x7f269a59de99 [ 70.261395][ T5835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.261410][ T5835] RSP: 002b:00007ffded9fd0f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 70.261426][ T5835] RAX: ffffffffffffffda RBX: 0000000000011223 RCX: 00007f269a59de99 [ 70.261438][ T5835] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f269a825fac [ 70.261448][ T5835] RBP: 0000000000000032 R08: 0000000000000001 R09: 0000000000000000 [ 70.261458][ T5835] R10: 00007ffded9fd200 R11: 0000000000000246 R12: 00007ffded9fd220 [ 70.261468][ T5835] R13: 00007f269a825fac R14: 0000000000011255 R15: 00007ffded9fd200 [ 70.261490][ T5835] [ 70.409959][ T5835] FAULT_INJECTION: forcing a failure. [ 70.409959][ T5835] name fail_futex, interval 1, probability 0, space 0, times 0 [ 70.422768][ T5835] CPU: 0 UID: 0 PID: 5835 Comm: syz.1.2 Not tainted syzkaller #0 PREEMPT(full) [ 70.422784][ T5835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 70.422791][ T5835] Call Trace: [ 70.422795][ T5835] [ 70.422800][ T5835] dump_stack_lvl+0x100/0x190 [ 70.422817][ T5835] should_fail_ex.cold+0x5/0xa [ 70.422829][ T5835] ? lockdep_hardirqs_on+0x78/0x100 [ 70.422843][ T5835] should_fail_futex+0x4c/0x60 [ 70.422859][ T5835] __x64_sys_futex+0x1f0/0x4d0 [ 70.422878][ T5835] ? __pfx___x64_sys_futex+0x10/0x10 [ 70.422899][ T5835] do_syscall_64+0x115/0x870 [ 70.422912][ T5835] ? clear_bhb_loop+0x40/0x90 [ 70.422925][ T5835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.422937][ T5835] RIP: 0033:0x7f269a59de99 [ 70.422947][ T5835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.422958][ T5835] RSP: 002b:00007ffded9fd0f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 70.422969][ T5835] RAX: ffffffffffffffda RBX: 00000000000112e8 RCX: 00007f269a59de99 [ 70.422975][ T5835] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f269a825fac [ 70.422982][ T5835] RBP: 0000000000000032 R08: 0000000000000001 R09: 0000000000000000 [ 70.422988][ T5835] R10: 00007ffded9fd200 R11: 0000000000000246 R12: 00007ffded9fd220 [ 70.422994][ T5835] R13: 00007f269a825fac R14: 000000000001131a R15: 00007ffded9fd200 [ 70.423007][ T5835] [ 70.591707][ T5624] Bluetooth: hci0: command tx timeout [ 70.591739][ T4928] Bluetooth: hci2: command tx timeout [ 70.597191][ T5624] Bluetooth: hci4: command tx timeout [ 70.598631][ T5624] Bluetooth: hci3: command tx timeout [ 70.603389][ T5619] Bluetooth: hci1: command tx timeout [ 70.620607][ T5835] FAULT_INJECTION: forcing a failure. [ 70.620607][ T5835] name fail_futex, interval 1, probability 0, space 0, times 0 [ 70.635164][ T5835] CPU: 0 UID: 0 PID: 5835 Comm: syz.1.2 Not tainted syzkaller #0 PREEMPT(full) [ 70.635185][ T5835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 70.635194][ T5835] Call Trace: [ 70.635200][ T5835] [ 70.635206][ T5835] dump_stack_lvl+0x100/0x190 [ 70.635232][ T5835] should_fail_ex.cold+0x5/0xa [ 70.635254][ T5835] should_fail_futex+0x4c/0x60 [ 70.635277][ T5835] __x64_sys_futex+0x1f0/0x4d0 [ 70.635304][ T5835] ? __pfx___x64_sys_futex+0x10/0x10 [ 70.635338][ T5835] do_syscall_64+0x115/0x870 [ 70.635358][ T5835] ? clear_bhb_loop+0x40/0x90 [ 70.635379][ T5835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.635397][ T5835] RIP: 0033:0x7f269a59de99 [ 70.635412][ T5835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.635428][ T5835] RSP: 002b:00007ffded9fd0f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 70.635445][ T5835] RAX: ffffffffffffffda RBX: 00000000000113bb RCX: 00007f269a59de99 [ 70.635456][ T5835] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f269a825fac [ 70.635466][ T5835] RBP: 0000000000000032 R08: 0000000000000001 R09: 0000000000000000 [ 70.635476][ T5835] R10: 00007ffded9fd200 R11: 0000000000000246 R12: 00007ffded9fd220 [ 70.635485][ T5835] R13: 00007f269a825fac R14: 00000000000113ed R15: 00007ffded9fd200 [ 70.635508][ T5835] [ 70.635662][ T5835] FAULT_INJECTION: forcing a failure. [ 70.635662][ T5835] name fail_futex, interval 1, probability 0, space 0, times 0 [ 70.673114][ T5707] usb 5-1: Using ep0 maxpacket: 16 [ 70.825356][ T5707] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.837625][ T5707] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.848625][ T5707] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 70.864852][ T5707] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 70.874537][ T5835] CPU: 0 UID: 0 PID: 5835 Comm: syz.1.2 Not tainted syzkaller #0 PREEMPT(full) [ 70.874552][ T5835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 70.874559][ T5835] Call Trace: [ 70.874563][ T5835] [ 70.874567][ T5835] dump_stack_lvl+0x100/0x190 [ 70.874585][ T5835] should_fail_ex.cold+0x5/0xa [ 70.874599][ T5835] get_futex_key+0x1d2/0x14f0 [ 70.874616][ T5835] ? __pfx_get_futex_key+0x10/0x10 [ 70.874632][ T5835] ? __pfx___schedule+0x10/0x10 [ 70.874643][ T5835] ? __resched_curr+0x42e/0x500 [ 70.874658][ T5835] ? __pfx___resched_curr+0x10/0x10 [ 70.874675][ T5835] futex_wait_setup+0x91/0x540 [ 70.874690][ T5835] __futex_wait+0x19f/0x300 [ 70.874703][ T5835] ? __pfx___futex_wait+0x10/0x10 [ 70.874717][ T5835] ? __pfx_futex_wake_mark+0x10/0x10 [ 70.874729][ T5835] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 70.874745][ T5835] ? __hrtimer_setup+0x208/0x330 [ 70.874762][ T5835] ? ktime_add_safe+0x60/0x70 [ 70.874779][ T5835] futex_wait+0xe6/0x370 [ 70.874790][ T5835] ? __pfx_futex_wait+0x10/0x10 [ 70.874803][ T5835] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 70.874823][ T5835] do_futex+0x265/0x440 [ 70.874840][ T5835] ? __pfx_do_futex+0x10/0x10 [ 70.874856][ T5835] ? ktime_get+0x22c/0x320 [ 70.874869][ T5835] ? lockdep_hardirqs_on+0x78/0x100 [ 70.874883][ T5835] __x64_sys_futex+0x34f/0x4d0 [ 70.874902][ T5835] ? __pfx___x64_sys_futex+0x10/0x10 [ 70.874923][ T5835] do_syscall_64+0x115/0x870 [ 70.874935][ T5835] ? clear_bhb_loop+0x40/0x90 [ 70.874948][ T5835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.874960][ T5835] RIP: 0033:0x7f269a59de99 [ 70.874975][ T5835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.874986][ T5835] RSP: 002b:00007ffded9fd0f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 70.874997][ T5835] RAX: ffffffffffffffda RBX: 00000000000113ca RCX: 00007f269a59de99 [ 70.875004][ T5835] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f269a825fac [ 70.875010][ T5835] RBP: 0000000000000032 R08: 0000000000000001 R09: 0000000000000000 [ 70.875016][ T5835] R10: 00007ffded9fd200 R11: 0000000000000246 R12: 00007ffded9fd220 [ 70.875023][ T5835] R13: 00007f269a825fac R14: 00000000000113fc R15: 00007ffded9fd200 [ 70.875036][ T5835] [ 70.875251][ T5835] FAULT_INJECTION: forcing a failure. [ 70.875251][ T5835] name fail_futex, interval 1, probability 0, space 0, times 0 [ 71.126260][ T5707] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.169534][ T5835] CPU: 0 UID: 0 PID: 5835 Comm: syz.1.2 Not tainted syzkaller #0 PREEMPT(full) [ 71.169558][ T5835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 71.169567][ T5835] Call Trace: [ 71.169573][ T5835] [ 71.169580][ T5835] dump_stack_lvl+0x100/0x190 [ 71.169605][ T5835] should_fail_ex.cold+0x5/0xa [ 71.169627][ T5835] get_futex_key+0x1d2/0x14f0 [ 71.169653][ T5835] ? __pfx_get_futex_key+0x10/0x10 [ 71.169678][ T5835] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 71.169696][ T5835] ? hrtimer_try_to_cancel.part.0+0x194/0x600 [ 71.169725][ T5835] futex_wake+0xf4/0x5e0 [ 71.169740][ T5835] ? futex_wait+0x11e/0x370 [ 71.169759][ T5835] ? __pfx_futex_wake+0x10/0x10 [ 71.169784][ T5835] do_futex+0x2b2/0x440 [ 71.169808][ T5835] ? __pfx_do_futex+0x10/0x10 [ 71.169829][ T5835] ? ktime_get+0x22c/0x320 [ 71.169843][ T5835] ? lockdep_hardirqs_on+0x78/0x100 [ 71.169862][ T5835] __x64_sys_futex+0x34f/0x4d0 [ 71.169887][ T5835] ? __pfx___x64_sys_futex+0x10/0x10 [ 71.169917][ T5835] do_syscall_64+0x115/0x870 [ 71.169933][ T5835] ? clear_bhb_loop+0x40/0x90 [ 71.169951][ T5835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.169982][ T5835] RIP: 0033:0x7f269a59de99 [ 71.169996][ T5835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.170009][ T5835] RSP: 002b:00007ffded9fd0f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 71.170024][ T5835] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f269a59de99 [ 71.170034][ T5835] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f269a825fa8 [ 71.170042][ T5835] RBP: 0000000000001ec6 R08: 0000000000000004 R09: 0000000000000000 [ 71.170051][ T5835] R10: 00007f269a825fa0 R11: 0000000000000246 R12: 0000000000000000 [ 71.170059][ T5835] R13: 00007f269a825fac R14: 00007f269a825fa8 R15: 00007f269a825fa0 [ 71.170079][ T5835] [ 71.365597][ T5707] usb 5-1: config 0 descriptor?? [ 71.404520][ T5835] FAULT_INJECTION: forcing a failure. [ 71.404520][ T5835] name failslab, interval 1, probability 0, space 0, times 1 [ 71.449666][ T5835] CPU: 1 UID: 0 PID: 5835 Comm: syz.1.2 Not tainted syzkaller #0 PREEMPT(full) [ 71.449690][ T5835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 71.449701][ T5835] Call Trace: [ 71.449707][ T5835] [ 71.449714][ T5835] dump_stack_lvl+0x100/0x190 [ 71.449741][ T5835] should_fail_ex.cold+0x5/0xa [ 71.449764][ T5835] should_failslab+0xc2/0x120 [ 71.449787][ T5835] __kmalloc_flags_noprof+0x122/0x8b0 [ 71.449816][ T5835] ? alloc_slab_obj_exts+0x5a/0x160 [ 71.449837][ T5835] alloc_slab_obj_exts+0x5a/0x160 [ 71.449855][ T5835] __memcg_slab_post_alloc_hook+0x3d4/0x1160 [ 71.449888][ T5835] ? kasan_save_track+0x14/0x30 [ 71.449911][ T5835] kmem_cache_alloc_noprof+0x587/0x6a0 [ 71.449932][ T5835] ? alloc_buffer_head+0x21/0x140 [ 71.449959][ T5835] alloc_buffer_head+0x21/0x140 [ 71.449981][ T5835] folio_alloc_buffers+0x194/0x8e0 [ 71.450013][ T5835] create_empty_buffers+0x3a/0x660 [ 71.450037][ T5835] ? __lock_acquire+0x49f/0x1a40 [ 71.450061][ T5835] folio_create_buffers+0x13b/0x1a0 [ 71.450087][ T5835] __block_write_begin_int+0x393/0x19c0 [ 71.450108][ T5835] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 71.450135][ T5835] ? __pfx___block_write_begin_int+0x10/0x10 [ 71.450153][ T5835] ? __pfx___might_resched+0x10/0x10 [ 71.450176][ T5835] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 71.450198][ T5835] block_page_mkwrite+0x34d/0x460 [ 71.450216][ T5835] ext4_page_mkwrite+0xdee/0x1850 [ 71.450240][ T5835] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 71.450263][ T5835] do_page_mkwrite+0x17a/0x440 [ 71.450284][ T5835] ? __pfx_filemap_map_pages+0x10/0x10 [ 71.450307][ T5835] do_fault+0x3b5/0x1750 [ 71.450332][ T5835] __handle_mm_fault+0x187d/0x2a00 [ 71.450366][ T5835] ? reacquire_held_locks+0xce/0x1e0 [ 71.450386][ T5835] ? __pfx___handle_mm_fault+0x10/0x10 [ 71.450416][ T5835] ? lock_vma_under_rcu+0x17c/0x590 [ 71.450447][ T5835] ? lockdep_hardirqs_on+0x78/0x100 [ 71.450472][ T5835] handle_mm_fault+0x37b/0xa30 [ 71.450502][ T5835] do_user_addr_fault+0x5a3/0x12f0 [ 71.450534][ T5835] exc_page_fault+0x6f/0xd0 [ 71.450551][ T5835] asm_exc_page_fault+0x26/0x30 [ 71.450566][ T5835] RIP: 0033:0x7f269a472d52 [ 71.450581][ T5835] Code: 00 00 00 eb 39 0f 1f 00 be 08 00 00 00 48 89 df e8 13 8c fe ff 48 8b 53 40 48 8d 42 f8 48 89 43 40 8b 43 30 83 c0 08 89 43 30 <4c> 89 62 f8 41 8d 56 01 41 39 ee 0f 83 9d 00 00 00 41 89 d6 48 8b [ 71.450597][ T5835] RSP: 002b:00007ffded9fcff0 EFLAGS: 00010202 [ 71.450611][ T5835] RAX: 0000000000013008 RBX: 00007f269b355720 RCX: 0000000000000000 [ 71.450621][ T5835] RDX: 0000001b33611000 RSI: 0000000000000008 RDI: 00007f269b355720 [ 71.450631][ T5835] RBP: 000000000000008d R08: 00007f269a810000 R09: 00007f269a826128 [ 71.450640][ T5835] R10: 0000000000000003 R11: 0000000000000013 R12: ffffffff8299090a [ 71.450650][ T5835] R13: 00007f269a826128 R14: 000000000000004d R15: fffffffffffed000 [ 71.450662][ T5835] ? fdget_pos+0x1fa/0x380 [ 71.450689][ T5835] [ 71.655708][ T5835] FAULT_INJECTION: forcing a failure. [ 71.655708][ T5835] name fail_futex, interval 1, probability 0, space 0, times 0 [ 71.748763][ T5835] CPU: 0 UID: 0 PID: 5835 Comm: syz.1.2 Not tainted syzkaller #0 PREEMPT(full) [ 71.748789][ T5835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 71.748798][ T5835] Call Trace: [ 71.748804][ T5835] [ 71.748810][ T5835] dump_stack_lvl+0x100/0x190 [ 71.748838][ T5835] should_fail_ex.cold+0x5/0xa [ 71.748860][ T5835] ? lockdep_hardirqs_on+0x78/0x100 [ 71.748881][ T5835] should_fail_futex+0x4c/0x60 [ 71.748906][ T5835] __x64_sys_futex+0x1f0/0x4d0 [ 71.748934][ T5835] ? __pfx___x64_sys_futex+0x10/0x10 [ 71.748968][ T5835] do_syscall_64+0x115/0x870 [ 71.748986][ T5835] ? clear_bhb_loop+0x40/0x90 [ 71.749008][ T5835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.749025][ T5835] RIP: 0033:0x7f269a59de99 [ 71.749039][ T5835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.749055][ T5835] RSP: 002b:00007ffded9fd0f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 71.749073][ T5835] RAX: ffffffffffffffda RBX: 00000000000117c6 RCX: 00007f269a59de99 [ 71.749084][ T5835] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f269a82609c [ 71.749094][ T5835] RBP: 0000000000000032 R08: 0000000000000001 R09: 0000000000000000 [ 71.749103][ T5835] R10: 00007ffded9fd200 R11: 0000000000000246 R12: 00007ffded9fd220 [ 71.749113][ T5835] R13: 00007f269a82609c R14: 00000000000117f8 R15: 00007ffded9fd200 [ 71.749135][ T5835] [ 72.282275][ T5863] svc: failed to register nfsdv3 RPC service (errno 111). [ 72.290924][ T5863] svc: failed to register nfsaclv3 RPC service (errno 111). [ 72.357516][ T5707] usbhid 5-1:0.0: can't add hid device: -71 [ 72.365297][ T5707] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 72.404086][ T5714] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 72.408753][ T5707] usb 5-1: USB disconnect, device number 2 [ 72.449751][ T5864] NFSD: Failed to start, no listeners configured. [ 72.598505][ T5714] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 72.606471][ T13] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.622842][ T5714] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 72.642482][ T5714] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 72.654359][ T5884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19'. [ 72.659373][ T5714] usb 2-1: SerialNumber: syz [ 72.787039][ T5874] svc: failed to register lockdv1 RPC service (errno 111). [ 72.795605][ T5874] lockd_up: makesock failed, error=-111 [ 72.967503][ T5874] svc: failed to register nfsdv3 RPC service (errno 111). [ 72.976215][ T5874] svc: failed to register nfsaclv3 RPC service (errno 111). [ 72.984006][ T5874] failed to unregister tcp with rpcbind [ 72.990075][ T5874] svc: failed to register nfsdv3 RPC service (errno 97). [ 73.004336][ T5874] svc: failed to register nfsaclv3 RPC service (errno 97). [ 73.011655][ T5874] failed to unregister tcp with rpcbind [ 73.218133][ T30] kauditd_printk_skb: 69 callbacks suppressed [ 73.218148][ T30] audit: type=1400 audit(1785174040.204:233): avc: denied { create } for pid=5903 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 73.244854][ T5904] atomic_op ffff888056179198 conn xmit_atomic 0000000000000000 [ 73.281199][ T30] audit: type=1400 audit(1785174040.204:234): avc: denied { bind } for pid=5903 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 73.327247][ T30] audit: type=1400 audit(1785174040.214:235): avc: denied { setopt } for pid=5903 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 73.347106][ T30] audit: type=1400 audit(1785174040.234:236): avc: denied { write } for pid=5903 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 73.384530][ T5714] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 73.478261][ T30] audit: type=1400 audit(1785174040.464:237): avc: denied { create } for pid=5911 comm="syz.0.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 73.498703][ T30] audit: type=1400 audit(1785174040.464:238): avc: denied { write } for pid=5911 comm="syz.0.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 73.844076][ T30] audit: type=1400 audit(1785174040.834:239): avc: denied { connect } for pid=5930 comm="syz.3.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 73.917208][ T30] audit: type=1400 audit(1785174040.904:240): avc: denied { accept } for pid=5933 comm="syz.4.31" laddr=127.0.0.1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 73.975326][ T30] audit: type=1400 audit(1785174040.904:241): avc: denied { shutdown } for pid=5933 comm="syz.4.31" laddr=127.0.0.1 lport=20000 faddr=127.0.0.1 fport=53030 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 74.031682][ T30] audit: type=1400 audit(1785174040.994:242): avc: denied { write } for pid=5914 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.152733][ T5946] siw: device registration error -23 [ 74.280736][ T5912] infiniband syz0: set active [ 74.287663][ T5912] infiniband syz0: added veth0 [ 74.307613][ T5912] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 74.328554][ T5912] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 74.348760][ T5912] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 74.483281][ T5912] RDS/IB: syz0: added [ 74.496992][ T5912] smc: adding ib device syz0 with port count 1 [ 74.505439][ T5912] smc: ib device syz0 port 1 has no pnetid [ 74.553359][ T5908] NFSD: Unable to initialize client recovery tracking! (-110) [ 74.568544][ T9] usb 2-1: USB disconnect, device number 2 [ 74.585602][ T5908] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 74.606634][ T5908] NFSD: starting 90-second grace period (net f0000419) [ 74.630165][ T9] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 75.094366][ T5969] svc: failed to register lockdv1 RPC service (errno 111). [ 75.369672][ T5969] svc: failed to register nfsdv3 RPC service (errno 111). [ 75.387680][ T5969] svc: failed to register nfsaclv3 RPC service (errno 111). [ 75.411733][ T5969] failed to unregister tcp with rpcbind [ 75.421296][ T5969] svc: failed to register nfsdv3 RPC service (errno 97). [ 75.439680][ T5969] svc: failed to register nfsaclv3 RPC service (errno 97). [ 75.453203][ T5969] failed to unregister tcp with rpcbind [ 76.248986][ T6024] NFSD: Failed to start, no listeners configured. [ 76.471222][ T5915] infiniband syz1: set active [ 76.497166][ T5915] infiniband syz1: added veth1 [ 76.520318][ T5915] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 76.532816][ T5915] infiniband syz1: Couldn't open port 1 [ 76.562700][ T5915] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 76.618085][ T5915] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 76.663965][ T5915] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 76.707188][ T5915] RDS/IB: syz1: added [ 76.717999][ T5915] smc: adding ib device syz1 with port count 1 [ 76.726518][ T5915] smc: ib device syz1 port 1 has no pnetid [ 81.684882][ T24] cfg80211: failed to load regulatory.db [ 81.731845][ T5982] rdma_rxe: rxe_newlink: failed to add veth0 [ 81.765705][ T6039] NFSD: Unable to initialize client recovery tracking! (-110) [ 81.773321][ T6039] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 81.782298][ T6039] NFSD: starting 90-second grace period (net f00004d0) [ 186.703035][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 186.710008][ C0] rcu: 1-...!: (2 ticks this GP) idle=125c/1/0x4000000000000000 softirq=16094/16094 fqs=5 [ 186.720456][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P913/1:b..l [ 186.728272][ C0] rcu: (detected by 0, t=10504 jiffies, g=12945, q=1432 ncpus=2) [ 186.736064][ C0] Sending NMI from CPU 0 to CPUs 1: [ 186.736088][ C1] NMI backtrace for cpu 1 [ 186.736101][ C1] CPU: 1 UID: 0 PID: 5596 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 186.736117][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 186.736125][ C1] RIP: 0010:trace_hrtimer_start+0x77/0x220 [ 186.736149][ C1] Code: d0 73 22 91 e8 4a 11 85 00 48 0f a3 1d 62 98 2c 0f 0f 92 c3 31 ff 89 de e8 d6 7e 14 00 84 db 0f 85 2f 01 00 00 e8 b9 84 14 00 <5b> 5d 41 5c 41 5d 41 5e e9 cc 75 c8 09 e8 a7 84 14 00 65 8b 1d 94 [ 186.736161][ C1] RSP: 0018:ffffc90000a07a90 EFLAGS: 00000006 [ 186.736172][ C1] RAX: 0000000000010102 RBX: 0000000000000001 RCX: ffffffff81f5dcc6 [ 186.736181][ C1] RDX: ffff88807ecda540 RSI: ffffffff81f5db87 RDI: ffff88807ecda540 [ 186.736190][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 186.736197][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88801e3b9300 [ 186.736205][ C1] R13: 0000000000000000 R14: 0000000000000001 R15: ffff8880b8528590 [ 186.736213][ C1] FS: 0000555585a6b540(0000) GS:ffff888123edc000(0000) knlGS:0000000000000000 [ 186.736228][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 186.736236][ C1] CR2: 00007f8fc01c0000 CR3: 00000000779df000 CR4: 00000000003526f0 [ 186.736245][ C1] Call Trace: [ 186.736251][ C1] [ 186.736257][ C1] enqueue_hrtimer+0x84/0x2f0 [ 186.736277][ C1] __hrtimer_run_queues+0x6ed/0x9c0 [ 186.736298][ C1] hrtimer_interrupt+0x3e5/0x940 [ 186.736314][ C1] __sysvec_apic_timer_interrupt+0x109/0x470 [ 186.736335][ C1] sysvec_apic_timer_interrupt+0x51/0xc0 [ 186.736357][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 186.736372][ C1] RIP: 0010:__orc_find+0x3d/0xf0 [ 186.736385][ C1] Code: 53 48 83 ec 08 85 d2 0f 84 99 00 00 00 49 89 fe 48 89 f0 49 39 fc 72 7b 48 b9 00 00 00 00 00 fc ff df 49 89 ff 48 89 fd eb 0c <48> 8d 6b 04 49 89 df 49 39 ec 72 4e 4c 89 e2 48 29 ea 48 89 d6 48 [ 186.736396][ C1] RSP: 0018:ffffc90000a07d10 EFLAGS: 00000206 [ 186.736406][ C1] RAX: ffffffff9258cc56 RBX: ffffffff919e48a8 RCX: dffffc0000000000 [ 186.736414][ C1] RDX: ffffffff8985ffe2 RSI: 0000000000000000 RDI: ffffffff919e48a8 [ 186.736423][ C1] RBP: ffffffff919e48a8 R08: ffffffff9258cc5c R09: 0000000000000007 [ 186.736431][ C1] R10: 0000000000000200 R11: 0000000000088600 R12: ffffffff919e48a8 [ 186.736439][ C1] R13: ffffffff8986000f R14: ffffffff919e48a8 R15: ffffffff919e48a8 [ 186.736448][ C1] ? __alloc_skb+0x13f/0x710 [ 186.736464][ C1] ? __alloc_skb+0x112/0x710 [ 186.736481][ C1] ? __alloc_skb+0x13f/0x710 [ 186.736493][ C1] unwind_next_frame+0x2ec/0x2090 [ 186.736506][ C1] ? __alloc_skb+0x140/0x710 [ 186.736520][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 186.736535][ C1] arch_stack_walk+0x94/0xf0 [ 186.736557][ C1] ? __alloc_skb+0x140/0x710 [ 186.736571][ C1] ? skb_free_head+0xb9/0x160 [ 186.736584][ C1] stack_trace_save+0x8e/0xc0 [ 186.736597][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 186.736611][ C1] ? __lock_acquire+0x49f/0x1a40 [ 186.736627][ C1] kasan_save_stack+0x30/0x50 [ 186.736642][ C1] ? kasan_save_stack+0x30/0x50 [ 186.736656][ C1] ? kasan_save_track+0x14/0x30 [ 186.736669][ C1] ? kasan_save_free_info+0x3b/0x70 [ 186.736687][ C1] ? __kasan_slab_free+0x5f/0x80 [ 186.736702][ C1] ? kfree+0x22b/0x6c0 [ 186.736719][ C1] ? skb_free_head+0xb9/0x160 [ 186.736731][ C1] ? skb_release_data+0x6c5/0x8e0 [ 186.736745][ C1] ? kfree_skb_partial+0xb0/0xf0 [ 186.736760][ C1] ? tcp_add_backlog+0x149e/0x2250 [ 186.736777][ C1] ? tcp_v4_rcv+0x3814/0x4840 [ 186.736792][ C1] ? ip_protocol_deliver_rcu+0xba/0x4d0 [ 186.736810][ C1] ? ip_local_deliver_finish+0x3f2/0x6e0 [ 186.736828][ C1] ? ip_local_deliver+0x19a/0x1f0 [ 186.736845][ C1] ? ip_list_rcv_finish+0xa14/0xce0 [ 186.736863][ C1] ? ip_list_rcv+0x338/0x450 [ 186.736879][ C1] ? __netif_receive_skb_list_core+0x74c/0x940 [ 186.736893][ C1] ? netif_receive_skb_list_internal+0x722/0xd40 [ 186.736907][ C1] ? napi_complete_done+0x221/0x940 [ 186.736919][ C1] ? virtnet_poll+0x1c12/0x3a90 [ 186.736935][ C1] ? __napi_poll.constprop.0+0xaf/0x450 [ 186.736948][ C1] ? net_rx_action+0xa40/0xf20 [ 186.736960][ C1] ? handle_softirqs+0x1ea/0x9b0 [ 186.736976][ C1] ? __irq_exit_rcu+0x162/0x210 [ 186.736991][ C1] ? irq_exit_rcu+0x9/0x30 [ 186.737006][ C1] ? common_interrupt+0xbe/0xe0 [ 186.737023][ C1] ? asm_common_interrupt+0x26/0x40 [ 186.737035][ C1] ? lock_acquire+0x5e/0x370 [ 186.737049][ C1] ? unwind_next_frame+0xd1/0x2090 [ 186.737061][ C1] ? __unwind_start+0x3cd/0x7e0 [ 186.737072][ C1] ? arch_stack_walk+0x73/0xf0 [ 186.737090][ C1] ? stack_trace_save+0x8e/0xc0 [ 186.737102][ C1] ? kasan_save_stack+0x30/0x50 [ 186.737116][ C1] ? kasan_save_track+0x14/0x30 [ 186.737129][ C1] ? __kasan_slab_alloc+0x89/0x90 [ 186.737144][ C1] ? kmem_cache_alloc_node_noprof+0x27d/0x6b0 [ 186.737158][ C1] ? __alloc_skb+0x140/0x710 [ 186.737177][ C1] kasan_save_track+0x14/0x30 [ 186.737191][ C1] kasan_save_free_info+0x3b/0x70 [ 186.737210][ C1] __kasan_slab_free+0x5f/0x80 [ 186.737225][ C1] ? napi_pp_put_page+0x360/0x390 [ 186.737238][ C1] kfree+0x22b/0x6c0 [ 186.737257][ C1] skb_free_head+0xb9/0x160 [ 186.737271][ C1] skb_release_data+0x6c5/0x8e0 [ 186.737288][ C1] kfree_skb_partial+0xb0/0xf0 [ 186.737304][ C1] tcp_add_backlog+0x149e/0x2250 [ 186.737325][ C1] ? __pfx_tcp_add_backlog+0x10/0x10 [ 186.737345][ C1] ? do_raw_spin_lock+0x128/0x260 [ 186.737363][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 186.737382][ C1] tcp_v4_rcv+0x3814/0x4840 [ 186.737403][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 186.737421][ C1] ? __pfx_raw_local_deliver+0x10/0x10 [ 186.737439][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 186.737456][ C1] ip_protocol_deliver_rcu+0xba/0x4d0 [ 186.737476][ C1] ip_local_deliver_finish+0x3f2/0x6e0 [ 186.737496][ C1] ip_local_deliver+0x19a/0x1f0 [ 186.737514][ C1] ? __pfx_ip_local_deliver+0x10/0x10 [ 186.737532][ C1] ip_list_rcv_finish+0xa14/0xce0 [ 186.737552][ C1] ? __pfx_ip_list_rcv_finish+0x10/0x10 [ 186.737570][ C1] ? ip_rcv_core+0x93c/0xe80 [ 186.737589][ C1] ip_list_rcv+0x338/0x450 [ 186.737608][ C1] ? __pfx_ip_list_rcv+0x10/0x10 [ 186.737627][ C1] ? __pfx_ip_list_rcv+0x10/0x10 [ 186.737645][ C1] __netif_receive_skb_list_core+0x74c/0x940 [ 186.737662][ C1] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 186.737676][ C1] ? lock_acquire+0x1b9/0x370 [ 186.737694][ C1] netif_receive_skb_list_internal+0x722/0xd40 [ 186.737710][ C1] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 186.737724][ C1] ? __pfx___free_old_xmit+0x10/0x10 [ 186.737743][ C1] ? __pfx_receive_buf+0x10/0x10 [ 186.737759][ C1] ? detach_buf_split_in_order+0x521/0x980 [ 186.737774][ C1] ? free_old_xmit+0x136/0x1f0 [ 186.737788][ C1] napi_complete_done+0x221/0x940 [ 186.737802][ C1] ? __pfx_napi_complete_done+0x10/0x10 [ 186.737815][ C1] ? virtqueue_get_buf_ctx+0x8ee/0x1af0 [ 186.737828][ C1] ? virtqueue_enable_cb_prepare_split+0x65/0x250 [ 186.737848][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 186.737865][ C1] virtnet_poll+0x1c12/0x3a90 [ 186.737884][ C1] ? virtnet_poll_tx+0xace/0x14b0 [ 186.737900][ C1] ? __pfx_virtnet_poll+0x10/0x10 [ 186.737917][ C1] ? __lock_acquire+0x49f/0x1a40 [ 186.737932][ C1] ? __lock_acquire+0x49f/0x1a40 [ 186.737947][ C1] ? __pfx_virtnet_poll_tx+0x10/0x10 [ 186.737962][ C1] ? blk_mq_hw_queue_need_run+0x30b/0x4a0 [ 186.737981][ C1] ? rcu_is_watching+0x12/0xc0 [ 186.738001][ C1] __napi_poll.constprop.0+0xaf/0x450 [ 186.738016][ C1] net_rx_action+0xa40/0xf20 [ 186.738031][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 186.738045][ C1] ? __lock_acquire+0x49f/0x1a40 [ 186.738060][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 186.738072][ C1] ? sched_clock+0x38/0x60 [ 186.738087][ C1] ? sched_clock_cpu+0x6c/0x570 [ 186.738105][ C1] ? mark_held_locks+0x40/0x70 [ 186.738120][ C1] handle_softirqs+0x1ea/0x9b0 [ 186.738137][ C1] ? _raw_spin_unlock+0x28/0x50 [ 186.738156][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 186.738173][ C1] __irq_exit_rcu+0x162/0x210 [ 186.738189][ C1] irq_exit_rcu+0x9/0x30 [ 186.738204][ C1] common_interrupt+0xbe/0xe0 [ 186.738222][ C1] [ 186.738226][ C1] [ 186.738231][ C1] asm_common_interrupt+0x26/0x40 [ 186.738244][ C1] RIP: 0010:lock_acquire+0x5e/0x370 [ 186.738259][ C1] Code: 05 fb 4d 7e 12 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 86 81 3c 0f 0f 82 ac 02 00 00 8b 35 4e b5 3c 0f 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 9d 4d 7e 12 0f 85 ec 02 00 00 48 83 c4 [ 186.738270][ C1] RSP: 0018:ffffc9000369f280 EFLAGS: 00000206 [ 186.738280][ C1] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000000 [ 186.738288][ C1] RDX: 0000000000000000 RSI: ffffffff8e17fc5f RDI: ffffffff8c401580 [ 186.738296][ C1] RBP: ffffffff8ebe8180 R08: 00000000205ecd38 R09: 0000000000000007 [ 186.738305][ C1] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002 [ 186.738312][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 186.738325][ C1] ? unwind_next_frame+0x3be/0x2090 [ 186.738338][ C1] ? unwind_next_frame+0x3be/0x2090 [ 186.738355][ C1] unwind_next_frame+0xd1/0x2090 [ 186.738367][ C1] ? unwind_next_frame+0xbd/0x2090 [ 186.738379][ C1] ? arch_stack_walk+0x73/0xf0 [ 186.738400][ C1] __unwind_start+0x3cd/0x7e0 [ 186.738413][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 186.738427][ C1] arch_stack_walk+0x73/0xf0 [ 186.738447][ C1] ? arch_stack_walk+0x73/0xf0 [ 186.738466][ C1] stack_trace_save+0x8e/0xc0 [ 186.738479][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 186.738492][ C1] ? unwind_get_return_address+0x59/0xa0 [ 186.738505][ C1] ? arch_stack_walk+0xa6/0xf0 [ 186.738524][ C1] kasan_save_stack+0x30/0x50 [ 186.738551][ C1] kasan_save_track+0x14/0x30 [ 186.738565][ C1] __kasan_slab_alloc+0x89/0x90 [ 186.738581][ C1] kmem_cache_alloc_node_noprof+0x27d/0x6b0 [ 186.738596][ C1] ? __lock_acquire+0x450/0x1a40 [ 186.738611][ C1] ? __alloc_skb+0x140/0x710 [ 186.738626][ C1] __alloc_skb+0x140/0x710 [ 186.738641][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 186.738657][ C1] tcp_stream_alloc_skb+0x34/0x660 [ 186.738674][ C1] tcp_write_xmit+0x732/0x8470 [ 186.738697][ C1] ? __sk_mem_schedule+0xd0/0x100 [ 186.738714][ C1] tcp_sendmsg_locked+0x2c8c/0x44d0 [ 186.738737][ C1] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 186.738754][ C1] ? do_raw_spin_lock+0x128/0x260 [ 186.738772][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 186.738791][ C1] ? __local_bh_enable_ip+0x9e/0x120 [ 186.738808][ C1] tcp_sendmsg+0x2e/0x50 [ 186.738823][ C1] ? __pfx_tcp_sendmsg+0x10/0x10 [ 186.738840][ C1] inet_sendmsg+0xb9/0x140 [ 186.738856][ C1] sock_write_iter+0x4ea/0x5b0 [ 186.738874][ C1] ? __pfx_inet_sendmsg+0x10/0x10 [ 186.738889][ C1] ? __pfx_sock_write_iter+0x10/0x10 [ 186.738909][ C1] ? bpf_lsm_file_permission+0x9/0x10 [ 186.738928][ C1] ? security_file_permission+0x76/0x210 [ 186.738942][ C1] ? rw_verify_area+0xce/0x6d0 [ 186.738960][ C1] vfs_write+0x6ac/0x1050 [ 186.738978][ C1] ? __pfx_sock_write_iter+0x10/0x10 [ 186.738997][ C1] ? __pfx_vfs_write+0x10/0x10 [ 186.739015][ C1] ? find_held_lock+0x2b/0x80 [ 186.739034][ C1] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 186.739050][ C1] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 186.739067][ C1] ? count_memcg_events_mm.constprop.0+0x109/0x2a0 [ 186.739084][ C1] ksys_write+0x1f8/0x250 [ 186.739102][ C1] ? __pfx_ksys_write+0x10/0x10 [ 186.739122][ C1] do_syscall_64+0x115/0x870 [ 186.739136][ C1] ? clear_bhb_loop+0x40/0x90 [ 186.739151][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.739165][ C1] RIP: 0033:0x7f8fc4159017 [ 186.739176][ C1] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 186.739187][ C1] RSP: 002b:00007ffc2f6c81a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 186.739199][ C1] RAX: ffffffffffffffda RBX: 0000555585a6b540 RCX: 00007f8fc4159017 [ 186.739207][ C1] RDX: 0000000000055f08 RSI: 00007f8fc01aa0f8 RDI: 0000000000000003 [ 186.739215][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 186.739223][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000055f08 [ 186.739231][ C1] R13: 0000555585a7f8a0 R14: 00007ffc2f6c8780 R15: 00007f8fc01aa0f8 [ 186.739243][ C1] [ 186.740082][ C0] task:kworker/u8:6 state:R running task stack:25776 pid:913 tgid:913 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 187.951862][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 187.958543][ C0] Call Trace: [ 187.961810][ C0] [ 187.964735][ C0] __schedule+0x125c/0x6730 [ 187.969231][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 187.975908][ C0] ? __lock_acquire+0x49f/0x1a40 [ 187.980839][ C0] ? __pfx___schedule+0x10/0x10 [ 187.985682][ C0] ? mark_held_locks+0x40/0x70 [ 187.990438][ C0] preempt_schedule_irq+0x50/0x90 [ 187.995453][ C0] irqentry_exit+0x205/0xa00 [ 188.000040][ C0] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 188.005499][ C0] RIP: 0010:rcu_is_watching+0x80/0xc0 [ 188.010870][ C0] Code: 89 da 48 c1 ea 03 0f b6 14 02 48 89 d8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 24 8b 03 c1 e8 02 83 e0 01 65 ff 0d c0 db 75 12 <74> 07 5b 5d c3 cc cc cc cc e8 42 88 87 ff 5b 5d e9 db ec cf 09 48 [ 188.030464][ C0] RSP: 0018:ffffc9000437f678 EFLAGS: 00000286 [ 188.036521][ C0] RAX: 0000000000000001 RBX: ffff8880b8533c68 RCX: 0000000000000000 [ 188.044479][ C0] RDX: 0000000000000000 RSI: ffffffff8c401500 RDI: ffffffff8e46d928 [ 188.052523][ C0] RBP: 0000000000000001 R08: 0000000044911634 R09: 0000000000000007 [ 188.060652][ C0] R10: 0000000000000200 R11: 0000000000000000 R12: ffffffff81f46ee0 [ 188.068611][ C0] R13: ffffc9000437f700 R14: 0000000000000000 R15: ffff88802717a540 [ 188.076570][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 188.082724][ C0] ? rcu_is_watching+0x12/0xc0 [ 188.087483][ C0] unwind_next_frame+0x6fa/0x2090 [ 188.092499][ C0] ? cfg80211_wiphy_work+0x2b7/0x550 [ 188.097780][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 188.103926][ C0] arch_stack_walk+0x94/0xf0 [ 188.108519][ C0] ? cfg80211_wiphy_work+0x2b7/0x550 [ 188.113800][ C0] ? skb_free_head+0xb9/0x160 [ 188.118475][ C0] stack_trace_save+0x8e/0xc0 [ 188.123141][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 188.128505][ C0] ? __lock_acquire+0x49f/0x1a40 [ 188.133434][ C0] ? ieee80211_iface_work+0xa9a/0x1070 [ 188.138890][ C0] ? cfg80211_wiphy_work+0x2b7/0x550 [ 188.144168][ C0] kasan_save_stack+0x30/0x50 [ 188.148868][ C0] ? kasan_save_stack+0x30/0x50 [ 188.153801][ C0] ? kasan_save_track+0x14/0x30 [ 188.158645][ C0] ? kasan_save_free_info+0x3b/0x70 [ 188.163838][ C0] ? __kasan_slab_free+0x5f/0x80 [ 188.168768][ C0] ? kfree+0x22b/0x6c0 [ 188.172830][ C0] ? skb_free_head+0xb9/0x160 [ 188.177497][ C0] ? skb_release_data+0x6c5/0x8e0 [ 188.182516][ C0] ? consume_skb+0xc4/0x110 [ 188.187013][ C0] ? ieee80211_iface_work+0x355/0x1070 [ 188.192469][ C0] ? cfg80211_wiphy_work+0x2b7/0x550 [ 188.197780][ C0] kasan_save_track+0x14/0x30 [ 188.202476][ C0] kasan_save_free_info+0x3b/0x70 [ 188.207499][ C0] __kasan_slab_free+0x5f/0x80 [ 188.212256][ C0] ? napi_pp_put_page+0x360/0x390 [ 188.217272][ C0] kfree+0x22b/0x6c0 [ 188.221170][ C0] skb_free_head+0xb9/0x160 [ 188.225664][ C0] skb_release_data+0x6c5/0x8e0 [ 188.230511][ C0] ? rcu_is_watching+0x12/0xc0 [ 188.235275][ C0] consume_skb+0xc4/0x110 [ 188.239604][ C0] ieee80211_iface_work+0x355/0x1070 [ 188.244892][ C0] cfg80211_wiphy_work+0x2b7/0x550 [ 188.250023][ C0] process_one_work+0xa23/0x1940 [ 188.254963][ C0] ? __pfx_process_one_work+0x10/0x10 [ 188.260336][ C0] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 188.265967][ C0] worker_thread+0x5ef/0xe50 [ 188.270556][ C0] ? kthread+0x13a/0x450 [ 188.274787][ C0] ? __pfx_worker_thread+0x10/0x10 [ 188.279886][ C0] kthread+0x370/0x450 [ 188.283946][ C0] ? __pfx_kthread+0x10/0x10 [ 188.288556][ C0] ret_from_fork+0x72b/0xd50 [ 188.293144][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 188.298253][ C0] ? __switch_to+0x800/0x10f0 [ 188.302921][ C0] ? __pfx_kthread+0x10/0x10 [ 188.307501][ C0] ret_from_fork_asm+0x1a/0x30 [ 188.312273][ C0] [ 188.315284][ C0] rcu: rcu_preempt kthread starved for 7709 jiffies! g12945 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 188.326382][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 188.336339][ C0] rcu: RCU grace-period kthread stack dump: [ 188.342221][ C0] task:rcu_preempt state:R running task stack:28984 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 188.355708][ C0] Call Trace: [ 188.358989][ C0] [ 188.361923][ C0] __schedule+0x125c/0x6730 [ 188.366457][ C0] ? __pfx___schedule+0x10/0x10 [ 188.371297][ C0] ? find_held_lock+0x2b/0x80 [ 188.375975][ C0] ? schedule+0x225/0x2c0 [ 188.380299][ C0] schedule+0xdd/0x2c0 [ 188.384360][ C0] schedule_timeout+0x127/0x280 [ 188.389210][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 188.394581][ C0] ? __pfx_process_timeout+0x10/0x10 [ 188.400386][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 188.406184][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 188.411640][ C0] rcu_gp_fqs_loop+0x1a9/0x900 [ 188.416398][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 188.421680][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 188.426616][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 188.431806][ C0] ? rcu_is_watching+0x12/0xc0 [ 188.436566][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 188.442366][ C0] rcu_gp_kthread+0x179/0x230 [ 188.447039][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 188.452227][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 188.458051][ C0] ? __kthread_parkme+0x18c/0x230 [ 188.463086][ C0] ? kthread+0x13a/0x450 [ 188.467354][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 188.472566][ C0] kthread+0x370/0x450 [ 188.476642][ C0] ? __pfx_kthread+0x10/0x10 [ 188.481234][ C0] ret_from_fork+0x72b/0xd50 [ 188.485843][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 188.490953][ C0] ? __switch_to+0x800/0x10f0 [ 188.495621][ C0] ? __pfx_kthread+0x10/0x10 [ 188.500203][ C0] ret_from_fork_asm+0x1a/0x30 [ 188.504976][ C0] [ 188.507987][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 188.514302][ C0] CPU: 0 UID: 0 PID: 1180 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) [ 188.523745][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 188.533789][ C0] Workqueue: writeback wb_workfn (flush-8:0) [ 188.539769][ C0] RIP: 0010:smp_call_function_many_cond+0x593/0x1870 [ 188.546436][ C0] Code: 00 fc ff df 48 8b 54 24 08 49 89 d5 49 89 d4 49 c1 ed 03 41 83 e4 07 49 01 c5 41 83 c4 03 e8 64 99 0c 00 f3 90 41 0f b6 45 00 <41> 38 c4 7c 08 84 c0 0f 85 a8 10 00 00 8b 45 08 31 ff 83 e0 01 41 [ 188.566031][ C0] RSP: 0018:ffffc90005516848 EFLAGS: 00000293 [ 188.572086][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff81fdc702 [ 188.580308][ C0] RDX: ffff88802a4f8000 RSI: ffffffff81fdc6dc RDI: ffff88802a4f8000 [ 188.588269][ C0] RBP: ffff8880b8541240 R08: 0000000000000005 R09: 0000000000000000 [ 188.596316][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 188.604272][ C0] R13: ffffed10170a8249 R14: 0000000000000001 R15: ffff8880b843c880 [ 188.612405][ C0] FS: 0000000000000000(0000) GS:ffff888123ddc000(0000) knlGS:0000000000000000 [ 188.621325][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 188.627895][ C0] CR2: 00007fd673fef4b8 CR3: 00000000608df000 CR4: 00000000003526f0 [ 188.635855][ C0] Call Trace: [ 188.639122][ C0] [ 188.642043][ C0] ? __pfx_should_flush_tlb+0x10/0x10 [ 188.647409][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 188.652609][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 188.658931][ C0] ? lock_acquire+0x1b9/0x370 [ 188.663603][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 188.668793][ C0] ? __pfx_should_flush_tlb+0x10/0x10 [ 188.674155][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 188.679277][ C0] flush_tlb_mm_range+0x45f/0x16f0 [ 188.684388][ C0] ? page_table_check_clear+0x480/0x8f0 [ 188.689930][ C0] ? __page_table_check_pte_clear+0xa9/0x100 [ 188.695912][ C0] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 188.701454][ C0] ? find_held_lock+0x2b/0x80 [ 188.706132][ C0] ptep_clear_flush+0x148/0x170 [ 188.710977][ C0] page_vma_mkclean_one.constprop.0+0x3a2/0x7b0 [ 188.717217][ C0] ? __pfx_page_vma_mkclean_one.constprop.0+0x10/0x10 [ 188.723972][ C0] ? __ext4_handle_dirty_metadata+0x24d/0x710 [ 188.730038][ C0] ? __brelse+0x94/0xb0 [ 188.734194][ C0] page_mkclean_one+0x1cd/0x2b0 [ 188.739039][ C0] ? __pfx_page_mkclean_one+0x10/0x10 [ 188.744413][ C0] ? __pfx___might_resched+0x10/0x10 [ 188.749695][ C0] __rmap_walk_file+0x383/0x680 [ 188.754546][ C0] rmap_walk_file+0x1d8/0x2a0 [ 188.759218][ C0] folio_mkclean+0x2af/0x4e0 [ 188.763803][ C0] ? __pfx_folio_mkclean+0x10/0x10 [ 188.768912][ C0] ? __pfx_page_mkclean_one+0x10/0x10 [ 188.774276][ C0] ? __pfx_invalid_mkclean_vma+0x10/0x10 [ 188.779909][ C0] folio_clear_dirty_for_io+0x1ba/0x960 [ 188.785449][ C0] mpage_submit_folio+0x84/0x330 [ 188.790385][ C0] mpage_map_and_submit_buffers+0x5f2/0xb50 [ 188.796283][ C0] ? __pfx_mpage_map_and_submit_buffers+0x10/0x10 [ 188.802696][ C0] ? ext4_fc_track_range+0x126/0x4e0 [ 188.807991][ C0] ? ext4_ext_index_trans_blocks+0x167/0x1a0 [ 188.813982][ C0] ? __ext4_journal_ensure_credits+0x265/0x2f0 [ 188.820135][ C0] ext4_do_writepages+0x23a4/0x3ed0 [ 188.825340][ C0] ? __pfx_ext4_do_writepages+0x10/0x10 [ 188.830887][ C0] ? ext4_writepages+0x347/0x750 [ 188.835897][ C0] ext4_writepages+0x347/0x750 [ 188.840649][ C0] ? __pfx_ext4_writepages+0x10/0x10 [ 188.845950][ C0] ? __pfx_ext4_writepages+0x10/0x10 [ 188.851223][ C0] do_writepages+0x278/0x600 [ 188.855808][ C0] ? __pfx_do_writepages+0x10/0x10 [ 188.860916][ C0] __writeback_single_inode+0x164/0x1300 [ 188.866545][ C0] ? find_held_lock+0x2b/0x80 [ 188.871222][ C0] ? __pfx___writeback_single_inode+0x10/0x10 [ 188.877283][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 188.882478][ C0] writeback_sb_inodes+0x766/0x1c50 [ 188.887682][ C0] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 188.893337][ C0] ? _raw_spin_unlock+0x28/0x50 [ 188.898185][ C0] ? move_expired_inodes+0x5ea/0x8f0 [ 188.903475][ C0] __writeback_inodes_wb+0xf8/0x2d0 [ 188.909281][ C0] ? __pfx___writeback_inodes_wb+0x10/0x10 [ 188.915172][ C0] ? queue_io+0x287/0x530 [ 188.919500][ C0] wb_writeback+0x6f6/0xb50 [ 188.923996][ C0] ? __pfx_wb_writeback+0x10/0x10 [ 188.929015][ C0] ? get_nr_inodes+0x100/0x150 [ 188.933780][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 188.938970][ C0] wb_workfn+0x93f/0xc80 [ 188.943206][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 188.949010][ C0] ? __pfx_wb_workfn+0x10/0x10 [ 188.953768][ C0] ? rcu_is_watching+0x12/0xc0 [ 188.958530][ C0] process_one_work+0xa23/0x1940 [ 188.963467][ C0] ? __pfx_process_one_work+0x10/0x10 [ 188.968833][ C0] ? __pfx_wb_workfn+0x10/0x10 [ 188.973673][ C0] worker_thread+0x5ef/0xe50 [ 188.978278][ C0] ? __pfx_worker_thread+0x10/0x10 [ 188.983386][ C0] ? kthread+0x13a/0x450 [ 188.987620][ C0] ? __pfx_worker_thread+0x10/0x10 [ 188.992718][ C0] kthread+0x370/0x450 [ 188.996793][ C0] ? __pfx_kthread+0x10/0x10 [ 189.001383][ C0] ret_from_fork+0x72b/0xd50 [ 189.005972][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 189.011101][ C0] ? __switch_to+0x800/0x10f0 [ 189.015770][ C0] ? __pfx_kthread+0x10/0x10 [ 189.020351][ C0] ret_from_fork_asm+0x1a/0x30 [ 189.025126][ C0]