last executing test programs: 2m50.312946598s ago: executing program 2 (id=8): syz_emit_ethernet(0x2a, &(0x7f0000000300)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x8, 0x3a, 0x40, @local, @local, {[], @echo_request}}}}}, 0x0) 2m50.286269514s ago: executing program 0 (id=1): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x334) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x23, 0x0, 0x0, 0x0, 0x2}, [@IFA_LOCAL={0x5, 0x2, @empty}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, 0x1}}, 0x20}}, 0x0) r2 = socket$phonet_pipe(0x23, 0x805, 0x2) setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000600)=0x1, 0x4) connect$phonet_pipe(r2, &(0x7f0000000700), 0x10) sendto$phonet(r2, &(0x7f0000000800)='\x00', 0x1, 0x80, 0x0, 0x0) 2m50.056060611s ago: executing program 2 (id=9): syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x18, 0x0, 0x1, @rand_addr=' \x01\x00', @dev, {[@hopopts={0x2f, 0x2, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0xd600}}, @pad1, @padn={0x1, 0x1, [0x0]}]}]}}}}}, 0x0) 2m49.806504668s ago: executing program 2 (id=11): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='10 1\n\x00', 0x5) nanosleep(&(0x7f0000000180)={0x0, 0x5f5e100}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x110}}, 0x0) 2m48.973180369s ago: executing program 2 (id=13): syz_emit_ethernet(0x1f, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff000000e8ff000011424203010000000000"], 0x0) 2m48.66594807s ago: executing program 2 (id=14): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'syz_tun\x00', 0x1002}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@setlink={0x28, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0x8, 0xa, r1}]}, 0x28}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000600)={'bridge0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000700)={'syz_tun\x00', 0x1}) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@setlink={0x44, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MODE={0x5, 0x4, 0x1}]}}}]}, 0x44}}, 0x0) write$tun(r2, &(0x7f0000000900)=ANY=[@ANYBLOB="00112233445500aabbccddee08004500002800010000401174c0010101010101010212345678001400006162636465666768"], 0x32) 2m48.399119888s ago: executing program 0 (id=15): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000100)=0x400, 0x4) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @local}, 0x10) accept(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000300)=@gcm_128={{0x303}}, 0x28) r2 = syz_io_uring_setup(0x100, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000500)=0x0, &(0x7f0000000600)=0x0, &(0x7f0000000700)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000800)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r1, 0x0, &(0x7f0000000900)='\x00', 0x100000}) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) close(r1) 2m47.386112807s ago: executing program 0 (id=16): unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'lo\x00', {0x2, 0x0, @loopback}}) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000080)={'lo\x00', {0x2, 0x0, @broadcast}}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000100)=0x1, 0x4) bind$inet(r1, &(0x7f0000000140)={0x2, 0x0, @loopback}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4001, @loopback}, 0x10) nanosleep(&(0x7f0000000200)={0x1}, 0x0) 2m47.322127568s ago: executing program 2 (id=17): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x1403, 0x5, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}}, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f0000000300)={{&(0x7f0000000400)=""/1, 0x1000}, &(0x7f0000000500), 0x1}, 0x20) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000600)={{}, 0x1}, 0x10) 2m32.306899931s ago: executing program 32 (id=16): unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'lo\x00', {0x2, 0x0, @loopback}}) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000080)={'lo\x00', {0x2, 0x0, @broadcast}}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000100)=0x1, 0x4) bind$inet(r1, &(0x7f0000000140)={0x2, 0x0, @loopback}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4001, @loopback}, 0x10) nanosleep(&(0x7f0000000200)={0x1}, 0x0) 2m31.253620057s ago: executing program 33 (id=17): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x1403, 0x5, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}}, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f0000000300)={{&(0x7f0000000400)=""/1, 0x1000}, &(0x7f0000000500), 0x1}, 0x20) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000600)={{}, 0x1}, 0x10) 1m55.670711781s ago: executing program 1 (id=123): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/ports\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/ports/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='tcp\n\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='127.0.0.1\n\x00', 0xa) openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0) write(r2, &(0x7f00000003c0)='ipv4\n\x00', 0x5) 1m55.468536957s ago: executing program 1 (id=125): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r0, 0x89e0, &(0x7f0000000000)=0x1) 1m55.199476425s ago: executing program 1 (id=127): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv', 0x2) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='nv', 0x2) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @loopback}, 0x10) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e21, @loopback}, 0x10) r2 = accept(r0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000300)="12345678901234567890", 0x14, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000400)="12345678901234567890", 0x14, 0x0, 0x0, 0x0) 1m54.244346812s ago: executing program 1 (id=128): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@upd={0xe8, 0x12, 0x5, 0x1, 0x0, {{'pcrypt(gcm(aes))\x00'}}, [{0x8, 0x1, 0x10000}]}, 0xe8}}, 0x0) 1m54.16963117s ago: executing program 1 (id=129): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x6, @loopback, 0x5000, 0x0, 'rr\x00', 0x0, 0x0, 0xffffffff}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f00000000c0)={{0x6, @loopback, 0x5000, 0x0, 'rr\x00', 0x0, 0x0, 0xffffffff}, {@loopback, 0x5000, 0x0, 0x1}}, 0x44) syz_emit_ethernet(0x40, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x32, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @loopback}, {{0x1234, 0x5000, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, 0x1000}, {"00112233445566778899"}}}}}}, 0x0) 1m53.934176686s ago: executing program 1 (id=130): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/netdevsim/del_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='10\n', 0x3) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000d0)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000110)='10 1\n', 0x5) close(r1) 1m38.386883802s ago: executing program 34 (id=130): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/netdevsim/del_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='10\n', 0x3) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000d0)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000110)='10 1\n', 0x5) close(r1) 1m15.037805695s ago: executing program 3 (id=202): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x48, 0x9, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x1f90}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}]}, 0x48}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x0, 0x53, &(0x7f0000000100)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000200)=0x28) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x0, 0x53, &(0x7f0000000100)={0x7, 0x7, 0x2, 'syz0\x00'}, &(0x7f0000000200)=0x28) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x48, 0xa, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x1f90}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}]}, 0x48}}, 0x0) 1m14.880382114s ago: executing program 3 (id=203): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x2, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='bridge0\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) nanosleep(&(0x7f0000000100)={0x4, r1}, 0x0) ioctl$sock_netdev_private(r0, 0x89f0, &(0x7f0000000200)="6272696467653000000000000000000000010000007f00"/32) nanosleep(&(0x7f0000000100)={0x5, r1}, 0x0) ioctl$sock_netdev_private(r0, 0x89f0, &(0x7f0000000200)="6272696467653000000000000000000000010000007f00"/32) 1m13.848336807s ago: executing program 3 (id=204): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/ports\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/ports/1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000240)='tcp\n\x00', 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='127.0.0.1\n\x00', 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)='4420\n\x00', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0) write(r2, &(0x7f00000003c0)='ipv4\n\x00', 0x5) r3 = syz_socket_connect_nvme_tcp() sendto(r3, &(0x7f0000000200)="17030300050102030405", 0xa, 0x0, 0x0, 0x0) 1m13.660610891s ago: executing program 3 (id=205): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040030}, 0x0) 1m13.437763602s ago: executing program 3 (id=206): nanosleep(&(0x7f0000000500)={0x5}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='10 1\x00', 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000100005000100000000000000060100000800010001000000"], 0x1c}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000110005000100000000000000060100000800010001000000"], 0x1c}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000120005000100000000000000060100000800010001000000"], 0x1c}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000130005000100000000000000060100000800010001000000"], 0x1c}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000140005000100000000000000060100000800010001000000"], 0x1c}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000150005000100000000000000060100000800010001000000"], 0x1c}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000160005000100000000000000060100000800010001000000"], 0x1c}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000170005000100000000000000060100000800010001000000"], 0x1c}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000180005000100000000000000060100000800010001000000"], 0x1c}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000190005000100000000000000060100000800010001000000"], 0x1c}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001a0005000100000000000000060100000800010001000000"], 0x1c}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001b0005000100000000000000060100000800010001000000"], 0x1c}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001c0005000100000000000000060100000800010001000000"], 0x1c}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001d0005000100000000000000060100000800010001000000"], 0x1c}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001e0005000100000000000000060100000800010001000000"], 0x1c}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001f0005000100000000000000060100000800010001000000"], 0x1c}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000200005000100000000000000060100000800010001000000"], 0x1c}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000210005000100000000000000060100000800010001000000"], 0x1c}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000220005000100000000000000060100000800010001000000"], 0x1c}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000230005000100000000000000060100000800010001000000"], 0x1c}}, 0x0) 1m8.182828507s ago: executing program 3 (id=211): r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x5c, 0x10, 0x605, 0x1, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}, @IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}]}, 0x5c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a00)={'veth0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000b00)={'veth1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000300)={'veth0\x00', 0x1}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@ipv6_newaddr={0x34, 0x14, 0x605, 0x1, 0x0, {0xa, 0x40, 0x2, 0x0, r2}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFA_FLAGS={0x8, 0x8, 0x2}]}, 0x34}}, 0x0) unshare(0x40000000) r4 = getpid() r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@setlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_NET_NS_PID={0x8, 0x13, r4}]}, 0x28}}, 0x0) r6 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000400)={'veth1\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c00)={'veth1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x605, 0x1, 0x0, {0xa, 0x40, 0x2, 0x0, r7}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFA_FLAGS={0x8, 0x8, 0x2}]}, 0x34}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newneigh={0x3c, 0x1c, 0x605, 0x1, 0x0, {0xa, 0x0, 0x0, r7, 0x80, 0x0, 0x1}, [@NDA_DST_IPV6={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NDA_LLADDR={0xa, 0x2, @random="001122334455"}]}, 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newneigh={0x3c, 0x1c, 0x605, 0x1, 0x0, {0xa, 0x0, 0x0, r2, 0x80, 0x0, 0x1}, [@NDA_DST_IPV6={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NDA_LLADDR={0xa, 0x2, @random="001122334466"}]}, 0x3c}}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000700)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r8, &(0x7f0000000800)={0xa, 0x4001, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) nanosleep(&(0x7f0000000900)={0x0, 0x1dcd6500}, 0x0) 49.88990662s ago: executing program 35 (id=211): r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x5c, 0x10, 0x605, 0x1, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}, @IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}]}, 0x5c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a00)={'veth0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000b00)={'veth1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000300)={'veth0\x00', 0x1}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@ipv6_newaddr={0x34, 0x14, 0x605, 0x1, 0x0, {0xa, 0x40, 0x2, 0x0, r2}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFA_FLAGS={0x8, 0x8, 0x2}]}, 0x34}}, 0x0) unshare(0x40000000) r4 = getpid() r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@setlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_NET_NS_PID={0x8, 0x13, r4}]}, 0x28}}, 0x0) r6 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000400)={'veth1\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c00)={'veth1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x605, 0x1, 0x0, {0xa, 0x40, 0x2, 0x0, r7}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFA_FLAGS={0x8, 0x8, 0x2}]}, 0x34}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newneigh={0x3c, 0x1c, 0x605, 0x1, 0x0, {0xa, 0x0, 0x0, r7, 0x80, 0x0, 0x1}, [@NDA_DST_IPV6={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NDA_LLADDR={0xa, 0x2, @random="001122334455"}]}, 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newneigh={0x3c, 0x1c, 0x605, 0x1, 0x0, {0xa, 0x0, 0x0, r2, 0x80, 0x0, 0x1}, [@NDA_DST_IPV6={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NDA_LLADDR={0xa, 0x2, @random="001122334466"}]}, 0x3c}}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000700)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r8, &(0x7f0000000800)={0xa, 0x4001, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) nanosleep(&(0x7f0000000900)={0x0, 0x1dcd6500}, 0x0) 6.018468517s ago: executing program 4 (id=266): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x1, 0x1}}, 0x20}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x5c, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{}, {0x0, 0x2, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x64}]}}]}, 0x5c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtfilter={0x70, 0x2c, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0x8000}, {0x3}}, [@filter_kind_options=@f_matchall={{}, {0x0, 0x2, [@TCA_MATCHALL_ACT={0x0, 0x2, [@m_gact={0x1c, 0x1, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x1, {0x0, 0x0, 0x2}}]}}}]}]}}]}, 0x70}}, 0x0) r3 = socket(0x11, 0x3, 0x300) bind(r3, &(0x7f0000000400)=@ll={0x11, 0x300, r2}, 0x14) sendto(r3, &(0x7f0000000500)="12345678901234567890", 0x14, 0x0, 0x0, 0x0) 5.355817401s ago: executing program 8 (id=269): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x10, 0x1, 0x2, 0x0, {0x2}, [@generic="0101000000"]}, 0x14}}, 0x0) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, r1, 0x1, 0x3}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000600)={'netdevsim0\x00', 0x1}) nanosleep(&(0x7f0000000700)={0x0, 0x1dcd6500}, 0x0) 5.179533547s ago: executing program 7 (id=270): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2e0000000314010000000000000000000900020073797a3000000000080041007278650009003300657468300000"], 0x2e}}, 0x0) nanosleep(&(0x7f0000000300)={0x2}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x1f90, @empty}, 0x10) listen(r1, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000200)={0x2, 0x1f90, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) 5.112264391s ago: executing program 4 (id=271): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000012c0)={{r5}, 0x0, 0x0}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, 0x0, 0x0) sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000440)={0x1, 0xf4240}) close_range(r3, 0xffffffffffffffff, 0x400000000000000) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, 0x0, 0x0) 3.71302199s ago: executing program 4 (id=272): syz_open_dev$evdev(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000a00)={0x2, &(0x7f0000000940)=[{0x28, 0x0, 0x1, 0x5ae9}, {0x6, 0xb, 0xa1, 0x1000}]}, 0x10) sendmmsg$inet(r3, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 2.537785861s ago: executing program 8 (id=273): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) 2.460189641s ago: executing program 4 (id=274): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000e0)) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r0, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) 2.194464209s ago: executing program 7 (id=275): r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='vers\x00', &(0x7f0000000180)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='addr\x00', &(0x7f0000000280)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000340)='mountaddr\x00', &(0x7f0000000380)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f0000000640)='12345\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 2.134224742s ago: executing program 4 (id=276): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) r2 = accept(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0xc, &(0x7f0000000100)=0x1, 0x4) read(r2, &(0x7f0000000300), 0xa) nanosleep(&(0x7f0000000400)={0x0, 0x989680}, 0x0) write(r1, &(0x7f0000000200)='0123456789', 0xa) nanosleep(&(0x7f0000000400)={0x0, 0x989680}, 0x0) write(r1, &(0x7f0000000200)='0123456789', 0xa) read(r2, &(0x7f0000000300), 0xa) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100), 0x4) 1.894892073s ago: executing program 8 (id=277): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket(0x1, 0x1, 0x0) bind(r1, &(0x7f0000000000)=@un=@file={0x1, 'test_unix_sock1\x00'}, 0x12) socket(0x1, 0x1, 0x0) socket(0x1, 0x1, 0x0) socket(0x1, 0x1, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000014000100000000000000000001000000000000000100000000000000ffffffffffffffffffffffff"], 0x2c}}, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000014000100000000000000000001000000000000000500000000000000ffffffffffffffffffffffff"], 0x2c}}, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000014000100000000000000000001000000000000000600000000000000ffffffffffffffffffffffff"], 0x2c}}, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000014000100000000000000000001000000000000000700000000000000ffffffffffffffffffffffff"], 0x2c}}, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000014000100000000000000000001000000000000000800000000000000ffffffffffffffffffffffff"], 0x2c}}, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000014000100000000000000000001000000000000000900000000000000ffffffffffffffffffffffff"], 0x2c}}, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000014000100000000000000000001000000000000000a00000000000000ffffffffffffffffffffffff"], 0x2c}}, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000014000100000000000000000001000000000000000b00000000000000ffffffffffffffffffffffff"], 0x2c}}, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000014000100000000000000000001000000000000000c00000000000000ffffffffffffffffffffffff"], 0x2c}}, 0x0) 1.661449842s ago: executing program 7 (id=278): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x80}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d2, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x2}, @in6=@private1={0xfc, 0x1, '\x00', 0x2}, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x80}, {@in6=@private1={0xfc, 0x1, '\x00', 0x2}, 0x4d2, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x2}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x3}, @in6=@private1={0xfc, 0x1, '\x00', 0x3}, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x80}, {@in6=@private1={0xfc, 0x1, '\x00', 0x3}, 0x4d2, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x3}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(r0, 0x0, 0x0) sendmsg$nl_xfrm(r0, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0xc}, @in6=@private1={0xfc, 0x1, '\x00', 0xc}, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x80}, {@in6=@private1={0xfc, 0x1, '\x00', 0xc}, 0x4d2, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0xc}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0xe}, @in6=@private1={0xfc, 0x1, '\x00', 0xe}, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x80}, {@in6=@private1={0xfc, 0x1, '\x00', 0xe}, 0x4d2, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0xe}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) 1.644166698s ago: executing program 8 (id=279): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r0, &(0x7f0000000300), 0x12) fcntl$setstatus(r0, 0x4, 0x800) connect$x25(r0, &(0x7f0000000400), 0x12) 1.600776495s ago: executing program 4 (id=280): unshare(0x40000000) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='2\n', 0x2) close(r0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'lo\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x5c, 0x10, 0x605, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'veth0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'veth1\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000300)={'veth0\x00', {0x2, 0x0, @private=0x100000a}}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000300)={'veth1\x00', {0x2, 0x0, @private=0x200000a}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r3) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x24, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x24}}, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000700)={0x2, 0x4e24, @private=0x100000a}, 0x10) listen(r5, 0x5) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000780)={0x2, 0x0, @private=0x200000a}, 0x10) connect$inet(r6, &(0x7f0000000800)={0x2, 0x4e24, @private=0x100000a}, 0x10) r7 = accept4(r5, 0x0, 0x0, 0x0) write(r6, &(0x7f0000000900)='hello', 0x5) read(r7, &(0x7f0000000a00), 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x38, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0x300000a}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}]}, 0x38}}, 0x0) nanosleep(&(0x7f0000000d00)={0x0, 0xbebc200}, 0x0) write(r6, &(0x7f0000000900)='world', 0x5) read(r7, &(0x7f0000000a00), 0x10) nanosleep(&(0x7f0000000d00)={0x0, 0xbebc200}, 0x0) 1.407320745s ago: executing program 8 (id=281): r0 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r0, 0x0, 0x0) listen(r0, 0x5) r1 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='source\x00', &(0x7f0000000300)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='addr\x00', &(0x7f0000000500)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000600)='proto\x00', &(0x7f0000000700)='tcp\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000800)='vers\x00', &(0x7f0000000900)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000001000)='mountport\x00', &(0x7f0000001100)='2049\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000c00)='timeo\x00', &(0x7f0000000d00)='1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 1.175118184s ago: executing program 8 (id=282): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1ff) mount(&(0x7f0000000e40)=@filename='proc\x00', &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000350)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000450)='-2 -3', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000370)='./nfsd/nfsv4gracetime\x00', 0x1, 0x0) write(r1, &(0x7f0000000470)='10\n', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='tcp 2049\n', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000600)='1\n', 0x2) 916.129389ms ago: executing program 7 (id=283): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 378.537814ms ago: executing program 7 (id=284): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710, @local}, 0x10) r2 = accept4$vsock_stream(r0, 0x0, 0x0, 0x80000) sendto(r2, &(0x7f0000000200)='A', 0x1, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x8, &(0x7f00000000c0), &(0x7f0000000400)=0x0, &(0x7f0000000500)=0x0, &(0x7f0000000600)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x10, 0x0, @fd=r1, 0x0, &(0x7f0000000800)=""/10, 0xa, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000240)=@IORING_OP_READ=@pass_buffer={0x16, 0x10, 0x0, @fd=r1, 0x0, &(0x7f0000000a00)=""/10, 0xa, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r3, 0x2, 0x0, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f0000000b00)=""/10, 0xa, 0x0, 0x0, 0x0) 0s ago: executing program 7 (id=285): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a85, @loopback}, 0x10) listen(r0, 0x5) r1 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = accept$inet(r0, &(0x7f0000000200), &(0x7f0000000210)=0x10) nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0) write(r2, &(0x7f0000000300)='ceph v027\x00'/278, 0x119) nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0) write(r2, &(0x7f0000000800)="01ffffffffffffffffffffffffffffffff00"/30, 0x1e) nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0) write(r2, &(0x7f0000000c00)="070100000000000000000000000000000030000000000000000000000000000000000000000100000000000000000000000000000028d7b3ad00"/74, 0x48) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) kernel console output (not intermixed with test programs): 65889][ C1] hrtimer_run_softirq+0x18f/0x260 [ 218.065990][ C1] handle_softirqs+0x1d9/0x6c0 [ 218.066092][ C1] run_ktimerd+0x69/0x100 [ 218.066177][ C1] smpboot_thread_fn+0x57c/0xa80 [ 218.066260][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 218.066368][ C1] kthread+0x388/0x470 [ 218.066455][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 218.066505][ C1] ? __pfx_kthread+0x10/0x10 [ 218.066540][ C1] ret_from_fork+0x514/0xb70 [ 218.066578][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 218.066630][ C1] ? __switch_to+0xc89/0x1420 [ 218.066680][ C1] ? __pfx_kthread+0x10/0x10 [ 218.066779][ C1] ret_from_fork_asm+0x1a/0x30 [ 218.066898][ C1] [ 218.067077][ C1] FAULT_INJECTION: forcing a failure. [ 218.067077][ C1] name failslab, interval 1, probability 100, space 0, times 53 [ 218.067192][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 218.067217][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.067230][ C1] Call Trace: [ 218.067246][ C1] [ 218.067278][ C1] dump_stack_lvl+0xe8/0x150 [ 218.067394][ C1] should_fail_ex+0x467/0x600 [ 218.067467][ C1] should_failslab+0xa8/0x100 [ 218.067545][ C1] kmem_cache_alloc_node_noprof+0xae/0x670 [ 218.067618][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 218.067676][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 218.067763][ C1] __alloc_skb+0x1d7/0x7a0 [ 218.067840][ C1] __netdev_alloc_skb+0xc0/0x4b0 [ 218.067925][ C1] __ieee80211_beacon_get+0xc97/0x1820 [ 218.068021][ C1] ? __lock_acquire+0x683/0x2ce0 [ 218.068086][ C1] ? __ieee80211_beacon_get+0x34/0x1820 [ 218.068171][ C1] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 218.068255][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 218.068333][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 218.068444][ C1] mac80211_hwsim_beacon_tx+0x378/0x820 [ 218.068525][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 218.068621][ C1] __iterate_interfaces+0x2af/0x5a0 [ 218.068703][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 218.068819][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 218.068905][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 218.068971][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 218.069058][ C1] mac80211_hwsim_beacon+0xb2/0x2b0 [ 218.069126][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 218.069194][ C1] __hrtimer_run_queues+0x3eb/0xaf0 [ 218.069332][ C1] hrtimer_run_softirq+0x18f/0x260 [ 218.069441][ C1] handle_softirqs+0x1d9/0x6c0 [ 218.069549][ C1] run_ktimerd+0x69/0x100 [ 218.069627][ C1] smpboot_thread_fn+0x57c/0xa80 [ 218.069714][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 218.069832][ C1] kthread+0x388/0x470 [ 218.069920][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 218.069996][ C1] ? __pfx_kthread+0x10/0x10 [ 218.070100][ C1] ret_from_fork+0x514/0xb70 [ 218.070228][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 218.070317][ C1] ? __switch_to+0xc89/0x1420 [ 218.070405][ C1] ? __pfx_kthread+0x10/0x10 [ 218.070501][ C1] ret_from_fork_asm+0x1a/0x30 [ 218.070613][ C1] [ 218.071453][ T6867] FAULT_INJECTION: forcing a failure. [ 218.071453][ T6867] name failslab, interval 1, probability 100, space 0, times 52 [ 218.071539][ T6867] CPU: 1 UID: 0 PID: 6867 Comm: syz.4.213 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 218.071614][ T6867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.071652][ T6867] Call Trace: [ 218.071661][ T6867] [ 218.071670][ T6867] dump_stack_lvl+0xe8/0x150 [ 218.071751][ T6867] should_fail_ex+0x467/0x600 [ 218.071903][ T6867] should_failslab+0xa8/0x100 [ 218.071979][ T6867] kmem_cache_alloc_noprof+0xa4/0x650 [ 218.072045][ T6867] ? do_getname+0x2e/0x250 [ 218.072143][ T6867] ? do_getname+0x2e/0x250 [ 218.072264][ T6867] do_getname+0x2e/0x250 [ 218.072352][ T6867] ? getname_flags+0x11/0x20 [ 218.072453][ T6867] do_sys_openat2+0xcc/0x200 [ 218.072518][ T6867] ? __se_sys_futex+0x3a8/0x450 [ 218.072602][ T6867] ? __pfx_do_sys_openat2+0x10/0x10 [ 218.072679][ T6867] ? rcu_is_watching+0x15/0xb0 [ 218.072778][ T6867] __x64_sys_openat+0x138/0x170 [ 218.072853][ T6867] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.072922][ T6867] do_syscall_64+0x174/0x580 [ 218.073000][ T6867] ? trace_irq_disable+0x3b/0x140 [ 218.073070][ T6867] ? clear_bhb_loop+0x40/0x90 [ 218.073145][ T6867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.073189][ T6867] RIP: 0033:0x7f65b407e019 [ 218.073212][ T6867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.073261][ T6867] RSP: 002b:00007f65b22d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 218.073348][ T6867] RAX: ffffffffffffffda RBX: 00007f65b4305fa0 RCX: 00007f65b407e019 [ 218.073393][ T6867] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 218.073437][ T6867] RBP: 00007f65b411500c R08: 0000000000000000 R09: 0000000000000000 [ 218.073480][ T6867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.073515][ T6867] R13: 00007f65b4306038 R14: 00007f65b4305fa0 R15: 00007ffd739ccb38 [ 218.073613][ T6867] [ 218.081523][ T4947] CPU: 1 UID: 0 PID: 4947 Comm: klogd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 218.081607][ T4947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.081647][ T4947] Call Trace: [ 218.081670][ T4947] [ 218.081694][ T4947] dump_stack_lvl+0xe8/0x150 [ 218.081811][ T4947] should_fail_ex+0x467/0x600 [ 218.081919][ T4947] ? __pfx_sock_alloc_inode+0x10/0x10 [ 218.081978][ T4947] should_failslab+0xa8/0x100 [ 218.082054][ T4947] ? __pfx_sock_alloc_inode+0x10/0x10 [ 218.082106][ T4947] kmem_cache_alloc_lru_noprof+0xa7/0x650 [ 218.082146][ T4947] ? sock_alloc_inode+0x2c/0x1a0 [ 218.082165][ T4947] ? sock_alloc_inode+0x2c/0x1a0 [ 218.082263][ T4947] ? __pfx_sock_alloc_inode+0x10/0x10 [ 218.082327][ T4947] sock_alloc_inode+0x2c/0x1a0 [ 218.082392][ T4947] ? __pfx_sock_alloc_inode+0x10/0x10 [ 218.082444][ T4947] alloc_inode+0x6a/0x1b0 [ 218.082510][ T4947] __sock_create+0x12d/0x9d0 [ 218.082568][ T4947] ? preempt_schedule_thunk+0x16/0x40 [ 218.082657][ T4947] __sys_socket+0xd6/0x1b0 [ 218.082731][ T4947] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.082809][ T4947] __x64_sys_socket+0x7a/0x90 [ 218.082875][ T4947] do_syscall_64+0x174/0x580 [ 218.082961][ T4947] ? clear_bhb_loop+0x40/0x90 [ 218.083029][ T4947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.083093][ T4947] RIP: 0033:0x7f2c1d2ae707 [ 218.083149][ T4947] Code: 54 24 0c e8 6b ac ff ff 83 f8 ff 74 04 8b 44 24 0c 48 83 c4 18 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 e6 0c 00 f7 d8 64 89 01 48 [ 218.083198][ T4947] RSP: 002b:00007ffd22f9cfe8 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 218.083268][ T4947] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f2c1d2ae707 [ 218.083313][ T4947] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 218.083348][ T4947] RBP: 00007f2c1d33a560 R08: 0000000000000073 R09: 0000000000000001 [ 218.083389][ T4947] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 218.083427][ T4947] R13: 00007ffd22f9d110 R14: 0000000000000032 R15: 00007ffd22f9d110 [ 218.083527][ T4947] [ 218.083682][ T12] FAULT_INJECTION: forcing a failure. [ 218.083682][ T12] name failslab, interval 1, probability 100, space 0, times 49 [ 218.083770][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 218.083836][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.083878][ T12] Workqueue: events_unbound nsim_dev_trap_report_work [ 218.083959][ T12] Call Trace: [ 218.083981][ T12] [ 218.084010][ T12] dump_stack_lvl+0xe8/0x150 [ 218.084100][ T12] should_fail_ex+0x467/0x600 [ 218.084206][ T12] should_failslab+0xa8/0x100 [ 218.084298][ T12] kmem_cache_alloc_node_noprof+0xae/0x670 [ 218.084365][ T12] ? __alloc_skb+0x1d7/0x7a0 [ 218.084429][ T12] ? __alloc_skb+0x1d7/0x7a0 [ 218.084516][ T12] __alloc_skb+0x1d7/0x7a0 [ 218.084594][ T12] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 218.084733][ T12] ? process_scheduled_works+0xa20/0x14e0 [ 218.084801][ T12] process_scheduled_works+0xa8e/0x14e0 [ 218.084962][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 218.085023][ T12] ? assign_work+0x3cf/0x5d0 [ 218.085089][ T12] worker_thread+0xa47/0xfb0 [ 218.085220][ T12] kthread+0x388/0x470 [ 218.085317][ T12] ? __pfx_worker_thread+0x10/0x10 [ 218.085399][ T12] ? __pfx_kthread+0x10/0x10 [ 218.085498][ T12] ret_from_fork+0x514/0xb70 [ 218.085603][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 218.085691][ T12] ? __switch_to+0xc89/0x1420 [ 218.085836][ T12] ? __pfx_kthread+0x10/0x10 [ 218.085932][ T12] ret_from_fork_asm+0x1a/0x30 [ 218.086040][ T12] [ 218.086292][ T5810] FAULT_INJECTION: forcing a failure. [ 218.086292][ T5810] name failslab, interval 1, probability 100, space 0, times 48 [ 218.086392][ T5810] CPU: 1 UID: 0 PID: 5810 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 218.086461][ T5810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.086500][ T5810] Workqueue: events_unbound nsim_dev_trap_report_work [ 218.086531][ T5810] Call Trace: [ 218.086540][ T5810] [ 218.086548][ T5810] dump_stack_lvl+0xe8/0x150 [ 218.086582][ T5810] should_fail_ex+0x467/0x600 [ 218.086647][ T5810] should_failslab+0xa8/0x100 [ 218.086675][ T5810] kmem_cache_alloc_node_noprof+0xae/0x670 [ 218.086779][ T5810] ? __alloc_skb+0x1d7/0x7a0 [ 218.086857][ T5810] ? __alloc_skb+0x1d7/0x7a0 [ 218.086942][ T5810] __alloc_skb+0x1d7/0x7a0 [ 218.087027][ T5810] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 218.087149][ T5810] ? process_scheduled_works+0xa20/0x14e0 [ 218.087225][ T5810] process_scheduled_works+0xa8e/0x14e0 [ 218.087374][ T5810] ? __pfx_process_scheduled_works+0x10/0x10 [ 218.087471][ T5810] ? assign_work+0x3cf/0x5d0 [ 218.087552][ T5810] worker_thread+0xa47/0xfb0 [ 218.087675][ T5810] ? __kthread_parkme+0x71/0x1f0 [ 218.087796][ T5810] kthread+0x388/0x470 [ 218.087884][ T5810] ? __pfx_worker_thread+0x10/0x10 [ 218.087950][ T5810] ? __pfx_kthread+0x10/0x10 [ 218.088040][ T5810] ret_from_fork+0x514/0xb70 [ 218.088133][ T5810] ? __pfx_ret_from_fork+0x10/0x10 [ 218.088191][ T5810] ? __switch_to+0xc89/0x1420 [ 218.088285][ T5810] ? __pfx_kthread+0x10/0x10 [ 218.088379][ T5810] ret_from_fork_asm+0x1a/0x30 [ 218.088487][ T5810] [ 218.089851][ T6866] FAULT_INJECTION: forcing a failure. [ 218.089851][ T6866] name failslab, interval 1, probability 100, space 0, times 48 [ 218.089927][ T6866] CPU: 1 UID: 0 PID: 6866 Comm: syz.4.213 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 218.089994][ T6866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.090027][ T6866] Call Trace: [ 218.090049][ T6866] [ 218.090071][ T6866] dump_stack_lvl+0xe8/0x150 [ 218.090168][ T6866] should_fail_ex+0x467/0x600 [ 218.090262][ T6866] should_failslab+0xa8/0x100 [ 218.090331][ T6866] kmem_cache_alloc_noprof+0xa4/0x650 [ 218.090395][ T6866] ? vm_area_dup+0x28/0x670 [ 218.090460][ T6866] ? vm_area_dup+0x28/0x670 [ 218.090494][ T6866] vm_area_dup+0x28/0x670 [ 218.090566][ T6866] ? __split_vma+0x1ce/0xa40 [ 218.090690][ T6866] __split_vma+0x1e4/0xa40 [ 218.090788][ T6866] ? mas_ascend+0x2f9/0x8b0 [ 218.090898][ T6866] ? __pfx___split_vma+0x10/0x10 [ 218.091028][ T6866] vma_modify+0x8b7/0x1ec0 [ 218.091147][ T6866] vma_modify_flags+0x24b/0x330 [ 218.091228][ T6866] ? __pfx_vma_modify_flags+0x10/0x10 [ 218.091348][ T6866] ? rcu_is_watching+0x15/0xb0 [ 218.091416][ T6866] ? percpu_counter_add_batch+0xec/0x1d0 [ 218.091523][ T6866] ? __vm_enough_memory+0x11a/0x380 [ 218.091615][ T6866] mprotect_fixup+0x624/0xb10 [ 218.091711][ T6866] ? __pfx_mprotect_fixup+0x10/0x10 [ 218.091792][ T6866] ? mas_next_slot+0xc94/0xd70 [ 218.091942][ T6866] do_mprotect_pkey+0x9d3/0xcd0 [ 218.091987][ T6866] ? lockdep_hardirqs_on+0x7a/0x110 [ 218.092116][ T6866] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 218.092234][ T6866] ? vm_mmap_pgoff+0x35d/0x4e0 [ 218.092343][ T6866] ? __pfx___se_sys_futex+0x10/0x10 [ 218.092420][ T6866] ? rcu_is_watching+0x15/0xb0 [ 218.092507][ T6866] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.092573][ T6866] __x64_sys_mprotect+0x80/0x90 [ 218.092644][ T6866] do_syscall_64+0x174/0x580 [ 218.092715][ T6866] ? trace_irq_disable+0x3b/0x140 [ 218.092776][ T6866] ? clear_bhb_loop+0x40/0x90 [ 218.092852][ T6866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.092920][ T6866] RIP: 0033:0x7f65b407de17 [ 218.092974][ T6866] Code: 89 38 eb 84 0f 1f 80 00 00 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff e9 7a ff ff ff b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.093021][ T6866] RSP: 002b:00007ffd739ccad8 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 218.093088][ T6866] RAX: ffffffffffffffda RBX: 00007f65b22b56c0 RCX: 00007f65b407de17 [ 218.093124][ T6866] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f65b2296000 [ 218.093166][ T6866] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 218.093201][ T6866] R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffd739ccc30 [ 218.093236][ T6866] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 218.093317][ T6866] [ 218.093653][ T68] FAULT_INJECTION: forcing a failure. [ 218.093653][ T68] name failslab, interval 1, probability 100, space 0, times 47 [ 218.093740][ T68] CPU: 1 UID: 0 PID: 68 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 218.093806][ T68] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.093841][ T68] Workqueue: events_unbound nsim_dev_trap_report_work [ 218.093935][ T68] Call Trace: [ 218.093957][ T68] [ 218.093980][ T68] dump_stack_lvl+0xe8/0x150 [ 218.094075][ T68] should_fail_ex+0x467/0x600 [ 218.094174][ T68] should_failslab+0xa8/0x100 [ 218.094255][ T68] kmem_cache_alloc_node_noprof+0xae/0x670 [ 218.094328][ T68] ? __alloc_skb+0x1d7/0x7a0 [ 218.094384][ T68] ? __alloc_skb+0x1d7/0x7a0 [ 218.094471][ T68] __alloc_skb+0x1d7/0x7a0 [ 218.094557][ T68] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 218.094683][ T68] ? process_scheduled_works+0xa20/0x14e0 [ 218.094761][ T68] process_scheduled_works+0xa8e/0x14e0 [ 218.094950][ T68] ? __pfx_process_scheduled_works+0x10/0x10 [ 218.095038][ T68] ? assign_work+0x3cf/0x5d0 [ 218.095132][ T68] worker_thread+0xa47/0xfb0 [ 218.095274][ T68] kthread+0x388/0x470 [ 218.095373][ T68] ? __pfx_worker_thread+0x10/0x10 [ 218.095478][ T68] ? __pfx_kthread+0x10/0x10 [ 218.095569][ T68] ret_from_fork+0x514/0xb70 [ 218.095667][ T68] ? __pfx_ret_from_fork+0x10/0x10 [ 218.095765][ T68] ? __switch_to+0xc89/0x1420 [ 218.095853][ T68] ? __pfx_kthread+0x10/0x10 [ 218.095943][ T68] ret_from_fork_asm+0x1a/0x30 [ 218.096054][ T68] [ 218.096277][ T66] FAULT_INJECTION: forcing a failure. [ 218.096277][ T66] name failslab, interval 1, probability 100, space 0, times 46 [ 218.096306][ T66] CPU: 1 UID: 0 PID: 66 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 218.096363][ T66] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.096411][ T66] Workqueue: events_unbound nsim_dev_trap_report_work [ 218.096505][ T66] Call Trace: [ 218.096512][ T66] [ 218.096520][ T66] dump_stack_lvl+0xe8/0x150 [ 218.096554][ T66] should_fail_ex+0x467/0x600 [ 218.096593][ T66] should_failslab+0xa8/0x100 [ 218.096620][ T66] kmem_cache_alloc_node_noprof+0xae/0x670 [ 218.096644][ T66] ? __alloc_skb+0x1d7/0x7a0 [ 218.096689][ T66] ? __alloc_skb+0x1d7/0x7a0 [ 218.096786][ T66] __alloc_skb+0x1d7/0x7a0 [ 218.096865][ T66] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 218.096993][ T66] ? process_scheduled_works+0xa20/0x14e0 [ 218.097072][ T66] process_scheduled_works+0xa8e/0x14e0 [ 218.097225][ T66] ? __pfx_process_scheduled_works+0x10/0x10 [ 218.097315][ T66] ? assign_work+0x3cf/0x5d0 [ 218.097405][ T66] worker_thread+0xa47/0xfb0 [ 218.097558][ T66] kthread+0x388/0x470 [ 218.097654][ T66] ? __pfx_worker_thread+0x10/0x10 [ 218.097730][ T66] ? __pfx_kthread+0x10/0x10 [ 218.097808][ T66] ret_from_fork+0x514/0xb70 [ 218.097913][ T66] ? __pfx_ret_from_fork+0x10/0x10 [ 218.097984][ T66] ? __switch_to+0xc89/0x1420 [ 218.098079][ T66] ? __pfx_kthread+0x10/0x10 [ 218.098176][ T66] ret_from_fork_asm+0x1a/0x30 [ 218.098272][ T66] [ 218.099689][ T4947] socket: no more sockets [ 218.099793][ T4947] FAULT_INJECTION: forcing a failure. [ 218.099793][ T4947] name failslab, interval 1, probability 100, space 0, times 45 [ 218.099871][ T4947] CPU: 1 UID: 0 PID: 4947 Comm: klogd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 218.099938][ T4947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.099971][ T4947] Call Trace: [ 218.099993][ T4947] [ 218.100016][ T4947] dump_stack_lvl+0xe8/0x150 [ 218.100112][ T4947] should_fail_ex+0x467/0x600 [ 218.100212][ T4947] ? __pfx_sock_alloc_inode+0x10/0x10 [ 218.100271][ T4947] should_failslab+0xa8/0x100 [ 218.100343][ T4947] ? __pfx_sock_alloc_inode+0x10/0x10 [ 218.100397][ T4947] kmem_cache_alloc_lru_noprof+0xa7/0x650 [ 218.100463][ T4947] ? sock_alloc_inode+0x2c/0x1a0 [ 218.100510][ T4947] ? sock_alloc_inode+0x2c/0x1a0 [ 218.100598][ T4947] ? __pfx_sock_alloc_inode+0x10/0x10 [ 218.100652][ T4947] sock_alloc_inode+0x2c/0x1a0 [ 218.100708][ T4947] ? __pfx_sock_alloc_inode+0x10/0x10 [ 218.100762][ T4947] alloc_inode+0x6a/0x1b0 [ 218.100828][ T4947] __sock_create+0x12d/0x9d0 [ 218.100915][ T4947] __sys_socket+0xd6/0x1b0 [ 218.100979][ T4947] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.101044][ T4947] __x64_sys_socket+0x7a/0x90 [ 218.101096][ T4947] do_syscall_64+0x174/0x580 [ 218.101128][ T4947] ? clear_bhb_loop+0x40/0x90 [ 218.101222][ T4947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.101282][ T4947] RIP: 0033:0x7f2c1d2ae707 [ 218.101351][ T4947] Code: 54 24 0c e8 6b ac ff ff 83 f8 ff 74 04 8b 44 24 0c 48 83 c4 18 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 e6 0c 00 f7 d8 64 89 01 48 [ 218.101398][ T4947] RSP: 002b:00007ffd22f9cfe8 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 218.101462][ T4947] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f2c1d2ae707 [ 218.101505][ T4947] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 218.101540][ T4947] RBP: 00007f2c1d33a560 R08: 0000000000000073 R09: 0000000000000001 [ 218.101574][ T4947] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 218.101606][ T4947] R13: 00007ffd22f9d110 R14: 0000000000000032 R15: 00007ffd22f9d110 [ 218.101701][ T4947] [ 218.101842][ T5810] FAULT_INJECTION: forcing a failure. [ 218.101842][ T5810] name failslab, interval 1, probability 100, space 0, times 44 [ 218.101903][ T5810] CPU: 1 UID: 0 PID: 5810 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 218.101972][ T5810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.102006][ T5810] Workqueue: events_unbound nsim_dev_trap_report_work [ 218.102094][ T5810] Call Trace: [ 218.102115][ T5810] [ 218.102137][ T5810] dump_stack_lvl+0xe8/0x150 [ 218.102224][ T5810] should_fail_ex+0x467/0x600 [ 218.102325][ T5810] should_failslab+0xa8/0x100 [ 218.102403][ T5810] kmem_cache_alloc_node_noprof+0xae/0x670 [ 218.102469][ T5810] ? __alloc_skb+0x1d7/0x7a0 [ 218.102525][ T5810] ? __alloc_skb+0x1d7/0x7a0 [ 218.102586][ T5810] __alloc_skb+0x1d7/0x7a0 [ 218.102653][ T5810] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 218.102823][ T5810] ? process_scheduled_works+0xa20/0x14e0 [ 218.102890][ T5810] process_scheduled_works+0xa8e/0x14e0 [ 218.103051][ T5810] ? __pfx_process_scheduled_works+0x10/0x10 [ 218.103138][ T5810] ? assign_work+0x3cf/0x5d0 [ 218.103238][ T5810] worker_thread+0xa47/0xfb0 [ 218.103371][ T5810] ? __kthread_parkme+0x71/0x1f0 [ 218.103481][ T5810] kthread+0x388/0x470 [ 218.103583][ T5810] ? __pfx_worker_thread+0x10/0x10 [ 218.103652][ T5810] ? __pfx_kthread+0x10/0x10 [ 218.103748][ T5810] ret_from_fork+0x514/0xb70 [ 218.103840][ T5810] ? __pfx_ret_from_fork+0x10/0x10 [ 218.103927][ T5810] ? __switch_to+0xc89/0x1420 [ 218.104035][ T5810] ? __pfx_kthread+0x10/0x10 [ 218.104107][ T5810] ret_from_fork_asm+0x1a/0x30 [ 218.104199][ T5810] [ 218.104423][ T6351] FAULT_INJECTION: forcing a failure. [ 218.104423][ T6351] name failslab, interval 1, probability 100, space 0, times 43 [ 218.104493][ T6351] CPU: 1 UID: 0 PID: 6351 Comm: udevd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 218.104558][ T6351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.104592][ T6351] Call Trace: [ 218.104614][ T6351] [ 218.104639][ T6351] dump_stack_lvl+0xe8/0x150 [ 218.104735][ T6351] should_fail_ex+0x467/0x600 [ 218.104844][ T6351] should_failslab+0xa8/0x100 [ 218.104919][ T6351] kmem_cache_alloc_noprof+0xa4/0x650 [ 218.104983][ T6351] ? do_getname+0x2e/0x250 [ 218.105073][ T6351] ? do_getname+0x2e/0x250 [ 218.105173][ T6351] do_getname+0x2e/0x250 [ 218.105255][ T6351] ? getname_flags+0x11/0x20 [ 218.105350][ T6351] vfs_fstatat+0x45/0x170 [ 218.105522][ T6351] __x64_sys_newfstatat+0x151/0x200 [ 218.105594][ T6351] ? __pfx___x64_sys_newfstatat+0x10/0x10 [ 218.105667][ T6351] ? __pfx_do_writev+0x10/0x10 [ 218.105761][ T6351] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.105832][ T6351] do_syscall_64+0x174/0x580 [ 218.105920][ T6351] ? clear_bhb_loop+0x40/0x90 [ 218.105995][ T6351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.106061][ T6351] RIP: 0033:0x7f47f09c4b0a [ 218.106116][ T6351] Code: 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 8b 15 b9 f2 0d 00 f7 [ 218.106161][ T6351] RSP: 002b:00007ffe7b549f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 218.106227][ T6351] RAX: ffffffffffffffda RBX: 000000000000000e RCX: 00007f47f09c4b0a [ 218.106262][ T6351] RDX: 00007ffe7b549f50 RSI: 00007ffe7b54a020 RDI: 00000000ffffff9c [ 218.106303][ T6351] RBP: 00007ffe7b54b060 R08: 0000000000000000 R09: 0000000000000000 [ 218.106337][ T6351] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe7b54b480 [ 218.106372][ T6351] R13: 0000000000000000 R14: 0000000000000008 R15: 000056108490dba0 [ 218.106458][ T6351] [ 218.107474][ T13] FAULT_INJECTION: forcing a failure. [ 218.107474][ T13] name failslab, interval 1, probability 100, space 0, times 43 [ 218.107558][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 218.107626][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.107668][ T13] Workqueue: events_unbound nsim_dev_trap_report_work [ 218.107772][ T13] Call Trace: [ 218.107795][ T13] [ 218.107816][ T13] dump_stack_lvl+0xe8/0x150 [ 218.107905][ T13] should_fail_ex+0x467/0x600 [ 218.107998][ T13] should_failslab+0xa8/0x100 [ 218.108027][ T13] kmem_cache_alloc_node_noprof+0xae/0x670 [ 218.108087][ T13] ? __alloc_skb+0x1d7/0x7a0 [ 218.108153][ T13] ? __alloc_skb+0x1d7/0x7a0 [ 218.108226][ T13] __alloc_skb+0x1d7/0x7a0 [ 218.108305][ T13] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 218.108438][ T13] ? process_scheduled_works+0xa20/0x14e0 [ 218.108514][ T13] process_scheduled_works+0xa8e/0x14e0 [ 218.108683][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 218.108773][ T13] ? assign_work+0x3cf/0x5d0 [ 218.108944][ T13] worker_thread+0xa47/0xfb0 [ 218.109127][ T13] kthread+0x388/0x470 [ 218.109216][ T13] ? __pfx_worker_thread+0x10/0x10 [ 218.109277][ T13] ? __pfx_kthread+0x10/0x10 [ 218.109372][ T13] ret_from_fork+0x514/0xb70 [ 218.109470][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 218.109513][ T13] ? __switch_to+0xc89/0x1420 [ 218.109603][ T13] ? __pfx_kthread+0x10/0x10 [ 218.109687][ T13] ret_from_fork_asm+0x1a/0x30 [ 218.109806][ T13] [ 218.110534][ T12] FAULT_INJECTION: forcing a failure. [ 218.110534][ T12] name failslab, interval 1, probability 100, space 0, times 41 [ 218.110621][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 218.110685][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.110732][ T12] Workqueue: events_unbound nsim_dev_trap_report_work [ 218.110820][ T12] Call Trace: [ 218.110842][ T12] [ 218.110865][ T12] dump_stack_lvl+0xe8/0x150 [ 218.110955][ T12] should_fail_ex+0x467/0x600 [ 218.111064][ T12] should_failslab+0xa8/0x100 [ 218.111141][ T12] kmem_cache_alloc_node_noprof+0xae/0x670 [ 218.111207][ T12] ? __alloc_skb+0x1d7/0x7a0 [ 218.111261][ T12] ? __alloc_skb+0x1d7/0x7a0 [ 218.111348][ T12] __alloc_skb+0x1d7/0x7a0 [ 218.111427][ T12] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 218.111570][ T12] ? process_scheduled_works+0xa20/0x14e0 [ 218.111651][ T12] process_scheduled_works+0xa8e/0x14e0 [ 218.111829][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 218.111929][ T12] ? assign_work+0x3cf/0x5d0 [ 218.112058][ T12] worker_thread+0xa47/0xfb0 [ 218.112160][ T12] kthread+0x388/0x470 [ 218.112265][ T12] ? __pfx_worker_thread+0x10/0x10 [ 218.112351][ T12] ? __pfx_kthread+0x10/0x10 [ 218.112452][ T12] ret_from_fork+0x514/0xb70 [ 218.112561][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 218.112654][ T12] ? __switch_to+0xc89/0x1420 [ 218.112756][ T12] ? __pfx_kthread+0x10/0x10 [ 218.112854][ T12] ret_from_fork_asm+0x1a/0x30 [ 218.112964][ T12] [ 218.113072][ T66] FAULT_INJECTION: forcing a failure. [ 218.113072][ T66] name failslab, interval 1, probability 100, space 0, times 40 [ 218.113155][ T66] CPU: 1 UID: 0 PID: 66 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 218.113219][ T66] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.113256][ T66] Workqueue: events_unbound nsim_dev_trap_report_work [ 218.113335][ T66] Call Trace: [ 218.113358][ T66] [ 218.113383][ T66] dump_stack_lvl+0xe8/0x150 [ 218.113480][ T66] should_fail_ex+0x467/0x600 [ 218.113553][ T66] should_failslab+0xa8/0x100 [ 218.113599][ T66] kmem_cache_alloc_node_noprof+0xae/0x670 [ 218.113695][ T66] ? __alloc_skb+0x1d7/0x7a0 [ 218.113780][ T66] ? __alloc_skb+0x1d7/0x7a0 [ 218.113875][ T66] __alloc_skb+0x1d7/0x7a0 [ 218.113959][ T66] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 218.114092][ T66] ? process_scheduled_works+0xa20/0x14e0 [ 218.114175][ T66] process_scheduled_works+0xa8e/0x14e0 [ 218.114335][ T66] ? __pfx_process_scheduled_works+0x10/0x10 [ 218.114441][ T66] ? assign_work+0x3cf/0x5d0 [ 218.114534][ T66] worker_thread+0xa47/0xfb0 [ 218.114701][ T66] kthread+0x388/0x470 [ 218.114815][ T66] ? __pfx_worker_thread+0x10/0x10 [ 218.114888][ T66] ? __pfx_kthread+0x10/0x10 [ 218.115005][ T66] ret_from_fork+0x514/0xb70 [ 218.115092][ T66] ? __pfx_ret_from_fork+0x10/0x10 [ 218.115196][ T66] ? __switch_to+0xc89/0x1420 [ 218.115297][ T66] ? __pfx_kthread+0x10/0x10 [ 218.115401][ T66] ret_from_fork_asm+0x1a/0x30 [ 218.115513][ T66] [ 218.115698][ T68] FAULT_INJECTION: forcing a failure. [ 218.115698][ T68] name failslab, interval 1, probability 100, space 0, times 39 [ 218.115839][ T68] CPU: 1 UID: 0 PID: 68 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 218.115914][ T68] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.115960][ T68] Workqueue: events_unbound nsim_dev_trap_report_work [ 218.116058][ T68] Call Trace: [ 218.116083][ T68] [ 218.116107][ T68] dump_stack_lvl+0xe8/0x150 [ 218.116209][ T68] should_fail_ex+0x467/0x600 [ 218.116315][ T68] should_failslab+0xa8/0x100 [ 218.116409][ T68] kmem_cache_alloc_node_noprof+0xae/0x670 [ 218.116484][ T68] ? __alloc_skb+0x1d7/0x7a0 [ 218.116521][ T68] ? __alloc_skb+0x1d7/0x7a0 [ 218.116556][ T68] __alloc_skb+0x1d7/0x7a0 [ 218.116589][ T68] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 218.116641][ T68] ? process_scheduled_works+0xa20/0x14e0 [ 218.116742][ T68] process_scheduled_works+0xa8e/0x14e0 [ 218.116880][ T68] ? __pfx_process_scheduled_works+0x10/0x10 [ 218.117028][ T68] ? assign_work+0x3cf/0x5d0 [ 218.117135][ T68] worker_thread+0xa47/0xfb0 [ 218.117313][ T68] kthread+0x388/0x470 [ 218.117415][ T68] ? __pfx_worker_thread+0x10/0x10 [ 218.117498][ T68] ? __pfx_kthread+0x10/0x10 [ 218.117604][ T68] ret_from_fork+0x514/0xb70 [ 218.117709][ T68] ? __pfx_ret_from_fork+0x10/0x10 [ 218.117820][ T68] ? __switch_to+0xc89/0x1420 [ 218.117914][ T68] ? __pfx_kthread+0x10/0x10 [ 218.118008][ T68] ret_from_fork_asm+0x1a/0x30 [ 218.118108][ T68] [ 218.118524][ T4947] socket: no more sockets [ 218.118634][ T4947] FAULT_INJECTION: forcing a failure. [ 218.118634][ T4947] name failslab, interval 1, probability 100, space 0, times 38 [ 218.118729][ T4947] CPU: 1 UID: 0 PID: 4947 Comm: klogd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 218.118802][ T4947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.118840][ T4947] Call Trace: [ 218.118864][ T4947] [ 218.118888][ T4947] dump_stack_lvl+0xe8/0x150 [ 218.118997][ T4947] should_fail_ex+0x467/0x600 [ 218.119118][ T4947] ? __pfx_sock_alloc_inode+0x10/0x10 [ 218.119180][ T4947] should_failslab+0xa8/0x100 [ 218.119232][ T4947] ? __pfx_sock_alloc_inode+0x10/0x10 [ 218.119293][ T4947] kmem_cache_alloc_lru_noprof+0xa7/0x650 [ 218.119375][ T4947] ? sock_alloc_inode+0x2c/0x1a0 [ 218.119435][ T4947] ? sock_alloc_inode+0x2c/0x1a0 [ 218.119510][ T4947] ? __pfx_sock_alloc_inode+0x10/0x10 [ 218.119570][ T4947] sock_alloc_inode+0x2c/0x1a0 [ 218.119604][ T4947] ? __pfx_sock_alloc_inode+0x10/0x10 [ 218.119657][ T4947] alloc_inode+0x6a/0x1b0 [ 218.119828][ T4947] __sock_create+0x12d/0x9d0 [ 218.119933][ T4947] __sys_socket+0xd6/0x1b0 [ 218.120002][ T4947] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.120072][ T4947] __x64_sys_socket+0x7a/0x90 [ 218.120150][ T4947] do_syscall_64+0x174/0x580 [ 218.120243][ T4947] ? clear_bhb_loop+0x40/0x90 [ 218.120324][ T4947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.120385][ T4947] RIP: 0033:0x7f2c1d2ae707 [ 218.120445][ T4947] Code: 54 24 0c e8 6b ac ff ff 83 f8 ff 74 04 8b 44 24 0c 48 83 c4 18 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 e6 0c 00 f7 d8 64 89 01 48 [ 218.120496][ T4947] RSP: 002b:00007ffd22f9cfe8 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 218.120572][ T4947] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f2c1d2ae707 [ 218.120620][ T4947] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 218.120657][ T4947] RBP: 00007f2c1d33a560 R08: 0000000000000073 R09: 0000000000000001 [ 218.120694][ T4947] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 218.120752][ T4947] R13: 00007ffd22f9d110 R14: 000000000000003a R15: 00007ffd22f9d110 [ 218.120845][ T4947] [ 218.121653][ T6866] FAULT_INJECTION: forcing a failure. [ 218.121653][ T6866] name failslab, interval 1, probability 100, space 0, times 36 [ 218.121759][ T6866] CPU: 1 UID: 0 PID: 6866 Comm: syz.4.213 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 218.121830][ T6866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.121873][ T6866] Call Trace: [ 218.121898][ T6866] [ 218.121921][ T6866] dump_stack_lvl+0xe8/0x150 [ 218.122018][ T6866] should_fail_ex+0x467/0x600 [ 218.122127][ T6866] should_failslab+0xa8/0x100 [ 218.122211][ T6866] kmem_cache_alloc_noprof+0xa4/0x650 [ 218.122265][ T6866] ? vm_area_dup+0x28/0x670 [ 218.122339][ T6866] ? vm_area_dup+0x28/0x670 [ 218.122444][ T6866] vm_area_dup+0x28/0x670 [ 218.122523][ T6866] ? __split_vma+0x1ce/0xa40 [ 218.122626][ T6866] __split_vma+0x1e4/0xa40 [ 218.122734][ T6866] ? mas_next_slot+0xc94/0xd70 [ 218.122798][ T6866] ? __pfx___split_vma+0x10/0x10 [ 218.122925][ T6866] ? mas_find+0xab1/0xcf0 [ 218.123042][ T6866] vms_gather_munmap_vmas+0x4e3/0x1370 [ 218.123170][ T6866] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 218.123295][ T6866] do_vmi_align_munmap+0x2c7/0x4d0 [ 218.123431][ T6866] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 218.123547][ T6866] ? mtree_range_walk+0x70a/0x8c0 [ 218.123706][ T6866] do_vmi_munmap+0x252/0x2d0 [ 218.123818][ T6866] __vm_munmap+0x241/0x3e0 [ 218.123964][ T6866] ? __pfx___vm_munmap+0x10/0x10 [ 218.124044][ T6866] ? vm_mmap_pgoff+0x35d/0x4e0 [ 218.124168][ T6866] ? rcu_is_watching+0x15/0xb0 [ 218.124212][ T6866] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.124267][ T6866] __x64_sys_munmap+0x60/0x70 [ 218.124357][ T6866] do_syscall_64+0x174/0x580 [ 218.124454][ T6866] ? trace_irq_disable+0x3b/0x140 [ 218.124518][ T6866] ? clear_bhb_loop+0x40/0x90 [ 218.124588][ T6866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.124644][ T6866] RIP: 0033:0x7f65b407de47 [ 218.124699][ T6866] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.124763][ T6866] RSP: 002b:00007ffd739ccad8 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 218.124819][ T6866] RAX: ffffffffffffffda RBX: 00007f65b22b56c0 RCX: 00007f65b407de47 [ 218.124862][ T6866] RDX: 000000000000000c RSI: 0000000000021000 RDI: 00007f65b2295000 [ 218.124905][ T6866] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 218.124925][ T6866] R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffd739ccc30 [ 218.124961][ T6866] R13: ffffffffffffffe8 R14: 0000000000001000 R15: 0000000000000000 [ 218.125049][ T6866] [ 218.125204][ T13] FAULT_INJECTION: forcing a failure. [ 218.125204][ T13] name failslab, interval 1, probability 100, space 0, times 35 [ 218.125272][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 218.125330][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.125372][ T13] Workqueue: events_unbound nsim_dev_trap_report_work [ 218.125461][ T13] Call Trace: [ 218.125483][ T13] [ 218.125506][ T13] dump_stack_lvl+0xe8/0x150 [ 218.125595][ T13] should_fail_ex+0x467/0x600 [ 218.125702][ T13] should_failslab+0xa8/0x100 [ 218.125816][ T13] kmem_cache_alloc_node_noprof+0xae/0x670 [ 218.125876][ T13] ? __alloc_skb+0x1d7/0x7a0 [ 218.125943][ T13] ? __alloc_skb+0x1d7/0x7a0 [ 218.126022][ T13] __alloc_skb+0x1d7/0x7a0 [ 218.126102][ T13] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 218.126226][ T13] ? process_scheduled_works+0xa20/0x14e0 [ 218.126303][ T13] process_scheduled_works+0xa8e/0x14e0 [ 218.126459][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 218.126515][ T13] ? assign_work+0x3cf/0x5d0 [ 218.126547][ T13] worker_thread+0xa47/0xfb0 [ 218.126627][ T13] kthread+0x388/0x470 [ 218.126662][ T13] ? __pfx_worker_thread+0x10/0x10 [ 218.126744][ T13] ? __pfx_kthread+0x10/0x10 [ 218.126859][ T13] ret_from_fork+0x514/0xb70 [ 218.126958][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 218.127055][ T13] ? __switch_to+0xc89/0x1420 [ 218.127136][ T13] ? __pfx_kthread+0x10/0x10 [ 218.127216][ T13] ret_from_fork_asm+0x1a/0x30 [ 218.127259][ T13] [ 218.127982][ T6351] FAULT_INJECTION: forcing a failure. [ 218.127982][ T6351] name failslab, interval 1, probability 100, space 0, times 34 [ 218.128066][ T6351] CPU: 1 UID: 0 PID: 6351 Comm: udevd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 218.128135][ T6351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.128168][ T6351] Call Trace: [ 218.128189][ T6351] [ 218.128211][ T6351] dump_stack_lvl+0xe8/0x150 [ 218.128312][ T6351] should_fail_ex+0x467/0x600 [ 218.128411][ T6351] should_failslab+0xa8/0x100 [ 218.128487][ T6351] kmem_cache_alloc_noprof+0xa4/0x650 [ 218.128552][ T6351] ? do_getname+0x2e/0x250 [ 218.128631][ T6351] ? do_getname+0x2e/0x250 [ 218.128756][ T6351] do_getname+0x2e/0x250 [ 218.128870][ T6351] ? __se_sys_mkdir+0x15/0x150 [ 218.128950][ T6351] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.129018][ T6351] __se_sys_mkdir+0x21/0x150 [ 218.129096][ T6351] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.129162][ T6351] do_syscall_64+0x174/0x580 [ 218.129242][ T6351] ? clear_bhb_loop+0x40/0x90 [ 218.129312][ T6351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.129376][ T6351] RIP: 0033:0x7f47f09c7c37 [ 218.129433][ T6351] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db ce ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 53 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 91 c1 0d 00 f7 d8 64 89 02 b8 [ 218.129458][ T6351] RSP: 002b:00007ffe7b549fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 218.129515][ T6351] RAX: ffffffffffffffda RBX: 00007ffe7b54b485 RCX: 00007f47f09c7c37 [ 218.129560][ T6351] RDX: 0000000000000004 RSI: 00000000000001ed RDI: 00007ffe7b549fe0 [ 218.129596][ T6351] RBP: 00007ffe7b54b060 R08: 00007ffe7b54b480 R09: 0000000000000000 [ 218.129638][ T6351] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe7b54b480 [ 218.129680][ T6351] R13: 0000000000000000 R14: 000056106fe8e7d4 R15: 0000000000000004 [ 218.129759][ T6351] [ 218.129943][ T5810] FAULT_INJECTION: forcing a failure. [ 218.129943][ T5810] name failslab, interval 1, probability 100, space 0, times 33 [ 218.130013][ T5810] CPU: 1 UID: 0 PID: 5810 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 218.130079][ T5810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.130116][ T5810] Workqueue: events_unbound nsim_dev_trap_report_work [ 218.130242][ T5810] Call Trace: [ 218.130271][ T5810] [ 218.130293][ T5810] dump_stack_lvl+0xe8/0x150 [ 218.130384][ T5810] should_fail_ex+0x467/0x600 [ 218.130491][ T5810] should_failslab+0xa8/0x100 [ 218.130568][ T5810] kmem_cache_alloc_node_noprof+0xae/0x670 [ 218.130634][ T5810] ? __alloc_skb+0x1d7/0x7a0 [ 218.130699][ T5810] ? __alloc_skb+0x1d7/0x7a0 [ 218.130792][ T5810] __alloc_skb+0x1d7/0x7a0 [ 218.130879][ T5810] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 218.131002][ T5810] ? process_scheduled_works+0xa20/0x14e0 [ 218.131077][ T5810] process_scheduled_works+0xa8e/0x14e0 [ 218.131246][ T5810] ? __pfx_process_scheduled_works+0x10/0x10 [ 218.131338][ T5810] ? assign_work+0x3cf/0x5d0 [ 218.131426][ T5810] worker_thread+0xa47/0xfb0 [ 218.131566][ T5810] ? __kthread_parkme+0x71/0x1f0 [ 218.131695][ T5810] kthread+0x388/0x470 [ 218.131793][ T5810] ? __pfx_worker_thread+0x10/0x10 [ 218.131860][ T5810] ? __pfx_kthread+0x10/0x10 [ 218.131949][ T5810] ret_from_fork+0x514/0xb70 [ 218.132056][ T5810] ? __pfx_ret_from_fork+0x10/0x10 [ 218.132136][ T5810] ? __switch_to+0xc89/0x1420 [ 218.132203][ T5810] ? __pfx_kthread+0x10/0x10 [ 218.132286][ T5810] ret_from_fork_asm+0x1a/0x30 [ 218.132436][ T5810] [ 218.132893][ T12] FAULT_INJECTION: forcing a failure. [ 218.132893][ T12] name failslab, interval 1, probability 100, space 0, times 32 [ 218.132970][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 218.133058][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.133108][ T12] Workqueue: events_unbound nsim_dev_trap_report_work [ 218.133194][ T12] Call Trace: [ 218.133217][ T12] [ 218.133239][ T12] dump_stack_lvl+0xe8/0x150 [ 218.133328][ T12] should_fail_ex+0x467/0x600 [ 218.133435][ T12] should_failslab+0xa8/0x100 [ 218.133512][ T12] kmem_cache_alloc_node_noprof+0xae/0x670 [ 218.133578][ T12] ? __alloc_skb+0x1d7/0x7a0 [ 218.133643][ T12] ? __alloc_skb+0x1d7/0x7a0 [ 218.133736][ T12] __alloc_skb+0x1d7/0x7a0 [ 218.133841][ T12] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 218.133964][ T12] ? process_scheduled_works+0xa20/0x14e0 [ 218.134039][ T12] process_scheduled_works+0xa8e/0x14e0 [ 218.134204][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 218.134288][ T12] ? assign_work+0x3cf/0x5d0 [ 218.134393][ T12] worker_thread+0xa47/0xfb0 [ 218.134577][ T12] kthread+0x388/0x470 [ 218.134666][ T12] ? __pfx_worker_thread+0x10/0x10 [ 218.134743][ T12] ? __pfx_kthread+0x10/0x10 [ 218.134840][ T12] ret_from_fork+0x514/0xb70 [ 218.134934][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 218.135022][ T12] ? __switch_to+0xc89/0x1420 [ 218.135110][ T12] ? __pfx_kthread+0x10/0x10 [ 218.135199][ T12] ret_from_fork_asm+0x1a/0x30 [ 218.135313][ T12] [ 218.135436][ T66] FAULT_INJECTION: forcing a failure. [ 218.135436][ T66] name failslab, interval 1, probability 100, space 0, times 31 [ 218.135513][ T66] CPU: 1 UID: 0 PID: 66 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 218.135578][ T66] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.135613][ T66] Workqueue: events_unbound nsim_dev_trap_report_work [ 218.135693][ T66] Call Trace: [ 218.135722][ T66] [ 218.135745][ T66] dump_stack_lvl+0xe8/0x150 [ 218.135866][ T66] should_fail_ex+0x467/0x600 [ 218.135983][ T66] should_failslab+0xa8/0x100 [ 218.136051][ T66] kmem_cache_alloc_node_noprof+0xae/0x670 [ 218.136124][ T66] ? __alloc_skb+0x1d7/0x7a0 [ 218.136180][ T66] ? __alloc_skb+0x1d7/0x7a0 [ 218.136252][ T66] __alloc_skb+0x1d7/0x7a0 [ 218.136330][ T66] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 218.136461][ T66] ? process_scheduled_works+0xa20/0x14e0 [ 218.136509][ T66] process_scheduled_works+0xa8e/0x14e0 [ 218.136564][ T66] ? __pfx_process_scheduled_works+0x10/0x10 [ 218.136597][ T66] ? assign_work+0x3cf/0x5d0 [ 218.136629][ T66] worker_thread+0xa47/0xfb0 [ 218.136687][ T66] kthread+0x388/0x470 [ 218.136727][ T66] ? __pfx_worker_thread+0x10/0x10 [ 218.136752][ T66] ? __pfx_kthread+0x10/0x10 [ 218.136787][ T66] ret_from_fork+0x514/0xb70 [ 218.136823][ T66] ? __pfx_ret_from_fork+0x10/0x10 [ 218.136856][ T66] ? __switch_to+0xc89/0x1420 [ 218.136914][ T66] ? __pfx_kthread+0x10/0x10 [ 218.137005][ T66] ret_from_fork_asm+0x1a/0x30 [ 218.137116][ T66] [ 218.137732][ T68] FAULT_INJECTION: forcing a failure. [ 218.137732][ T68] name failslab, interval 1, probability 100, space 0, times 29 [ 218.137814][ T68] CPU: 1 UID: 0 PID: 68 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 218.137883][ T68] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.137919][ T68] Workqueue: events_unbound nsim_dev_trap_report_work [ 218.138010][ T68] Call Trace: [ 218.138018][ T68] [ 218.138035][ T68] dump_stack_lvl+0xe8/0x150 [ 218.138127][ T68] should_fail_ex+0x467/0x600 [ 218.138235][ T68] should_failslab+0xa8/0x100 [ 218.138308][ T68] kmem_cache_alloc_node_noprof+0xae/0x670 [ 218.138343][ T68] ? __alloc_skb+0x1d7/0x7a0 [ 218.138411][ T68] ? __alloc_skb+0x1d7/0x7a0 [ 218.138516][ T68] __alloc_skb+0x1d7/0x7a0 [ 218.138599][ T68] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 218.138800][ T68] ? process_scheduled_works+0xa20/0x14e0 [ 218.138886][ T68] process_scheduled_works+0xa8e/0x14e0 [ 218.139087][ T68] ? __pfx_process_scheduled_works+0x10/0x10 [ 218.139160][ T68] ? assign_work+0x3cf/0x5d0 [ 218.139251][ T68] worker_thread+0xa47/0xfb0 [ 218.139420][ T68] kthread+0x388/0x470 [ 218.139515][ T68] ? __pfx_worker_thread+0x10/0x10 [ 218.139599][ T68] ? __pfx_kthread+0x10/0x10 [ 218.139696][ T68] ret_from_fork+0x514/0xb70 [ 218.139813][ T68] ? __pfx_ret_from_fork+0x10/0x10 [ 218.139919][ T68] ? __switch_to+0xc89/0x1420 [ 218.140011][ T68] ? __pfx_kthread+0x10/0x10 [ 218.140116][ T68] ret_from_fork_asm+0x1a/0x30 [ 218.140271][ T68] [ 218.141950][ T4947] socket: no more sockets [ 218.142064][ T4947] FAULT_INJECTION: forcing a failure. [ 218.142064][ T4947] name failslab, interval 1, probability 100, space 0, times 27 [ 218.142149][ T4947] CPU: 1 UID: 0 PID: 4947 Comm: klogd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 218.142220][ T4947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.142250][ T4947] Call Trace: [ 218.142273][ T4947] [ 218.142296][ T4947] dump_stack_lvl+0xe8/0x150 [ 218.142400][ T4947] should_fail_ex+0x467/0x600 [ 218.142509][ T4947] ? __pfx_sock_alloc_inode+0x10/0x10 [ 218.142569][ T4947] should_failslab+0xa8/0x100 [ 218.142650][ T4947] ? __pfx_sock_alloc_inode+0x10/0x10 [ 218.142708][ T4947] kmem_cache_alloc_lru_noprof+0xa7/0x650 [ 218.142790][ T4947] ? sock_alloc_inode+0x2c/0x1a0 [ 218.142850][ T4947] ? sock_alloc_inode+0x2c/0x1a0 [ 218.142945][ T4947] ? __pfx_sock_alloc_inode+0x10/0x10 [ 218.143025][ T4947] sock_alloc_inode+0x2c/0x1a0 [ 218.143085][ T4947] ? __pfx_sock_alloc_inode+0x10/0x10 [ 218.143142][ T4947] alloc_inode+0x6a/0x1b0 [ 218.143213][ T4947] __sock_create+0x12d/0x9d0 [ 218.143298][ T4947] __sys_socket+0xd6/0x1b0 [ 218.143367][ T4947] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.143439][ T4947] __x64_sys_socket+0x7a/0x90 [ 218.143512][ T4947] do_syscall_64+0x174/0x580 [ 218.143614][ T4947] ? clear_bhb_loop+0x40/0x90 [ 218.143689][ T4947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.143762][ T4947] RIP: 0033:0x7f2c1d2ae707 [ 218.143830][ T4947] Code: 54 24 0c e8 6b ac ff ff 83 f8 ff 74 04 8b 44 24 0c 48 83 c4 18 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 e6 0c 00 f7 d8 64 89 01 48 [ 218.143881][ T4947] RSP: 002b:00007ffd22f9cfe8 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 218.143949][ T4947] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f2c1d2ae707 [ 218.143997][ T4947] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 218.144032][ T4947] RBP: 00007f2c1d33a560 R08: 0000000000000073 R09: 0000000000000001 [ 218.144079][ T4947] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 218.144116][ T4947] R13: 00007ffd22f9d110 R14: 000000000000002f R15: 00007ffd22f9d110 [ 218.144211][ T4947] [ 218.144725][ T6351] FAULT_INJECTION: forcing a failure. [ 218.144725][ T6351] name failslab, interval 1, probability 100, space 0, times 26 [ 218.144808][ T6351] CPU: 1 UID: 0 PID: 6351 Comm: udevd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 218.144878][ T6351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.144918][ T6351] Call Trace: [ 218.144943][ T6351] [ 218.144966][ T6351] dump_stack_lvl+0xe8/0x150 [ 218.145061][ T6351] should_fail_ex+0x467/0x600 [ 218.145167][ T6351] should_failslab+0xa8/0x100 [ 218.145252][ T6351] kmem_cache_alloc_noprof+0xa4/0x650 [ 218.145321][ T6351] ? do_getname+0x2e/0x250 [ 218.145414][ T6351] ? do_getname+0x2e/0x250 [ 218.145522][ T6351] do_getname+0x2e/0x250 [ 218.145616][ T6351] ? getname_flags+0x11/0x20 [ 218.145748][ T6351] do_sys_openat2+0xcc/0x200 [ 218.145837][ T6351] ? __pfx_do_sys_openat2+0x10/0x10 [ 218.145919][ T6351] ? rcu_is_watching+0x15/0xb0 [ 218.146013][ T6351] __x64_sys_openat+0x138/0x170 [ 218.146096][ T6351] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.146158][ T6351] do_syscall_64+0x174/0x580 [ 218.146228][ T6351] ? clear_bhb_loop+0x40/0x90 [ 218.146304][ T6351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.146373][ T6351] RIP: 0033:0x7f47f095a407 [ 218.146423][ T6351] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 218.146480][ T6351] RSP: 002b:00007ffe7b54af20 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 218.146511][ T6351] RAX: ffffffffffffffda RBX: 00007f47f086c880 RCX: 00007f47f095a407 [ 218.146527][ T6351] RDX: 0000000000080241 RSI: 00007ffe7b54b480 RDI: ffffffffffffff9c [ 218.146543][ T6351] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000 [ 218.146557][ T6351] R10: 00000000000001b6 R11: 0000000000000202 R12: 000056106fe8edfc [ 218.146572][ T6351] R13: 000056106fe8edfc R14: 0000000000000001 R15: 000056108490dba0 [ 218.146626][ T6351] [ 218.146962][ T13] FAULT_INJECTION: forcing a failure. [ 218.146962][ T13] name failslab, interval 1, probability 100, space 0, times 25 [ 218.147036][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 218.147104][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.147139][ T13] Workqueue: events_unbound nsim_dev_trap_report_work [ 218.147173][ T13] Call Trace: [ 218.147181][ T13] [ 218.147213][ T13] dump_stack_lvl+0xe8/0x150 [ 218.147315][ T13] should_fail_ex+0x467/0x600 [ 218.147442][ T13] should_failslab+0xa8/0x100 [ 218.147529][ T13] kmem_cache_alloc_node_noprof+0xae/0x670 [ 218.147600][ T13] ? __alloc_skb+0x1d7/0x7a0 [ 218.147667][ T13] ? __alloc_skb+0x1d7/0x7a0 [ 218.147800][ T13] __alloc_skb+0x1d7/0x7a0 [ 218.147898][ T13] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 218.148027][ T13] ? process_scheduled_works+0xa20/0x14e0 [ 218.148085][ T13] process_scheduled_works+0xa8e/0x14e0 [ 218.148259][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 218.148357][ T13] ? assign_work+0x3cf/0x5d0 [ 218.148420][ T13] worker_thread+0xa47/0xfb0 [ 218.148546][ T13] kthread+0x388/0x470 [ 218.148643][ T13] ? __pfx_worker_thread+0x10/0x10 [ 218.148743][ T13] ? __pfx_kthread+0x10/0x10 [ 218.148863][ T13] ret_from_fork+0x514/0xb70 [ 218.148967][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 218.149079][ T13] ? __switch_to+0xc89/0x1420 [ 218.149170][ T13] ? __pfx_kthread+0x10/0x10 [ 218.149259][ T13] ret_from_fork_asm+0x1a/0x30 [ 218.149365][ T13] [ 218.149703][ T66] FAULT_INJECTION: forcing a failure. [ 218.149703][ T66] name failslab, interval 1, probability 100, space 0, times 24 [ 218.149805][ T66] CPU: 1 UID: 0 PID: 66 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 218.149871][ T66] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.149886][ T66] Workqueue: events_unbound nsim_dev_trap_report_work [ 218.149955][ T66] Call Trace: [ 218.149977][ T66] [ 218.150001][ T66] dump_stack_lvl+0xe8/0x150 [ 218.150121][ T66] should_fail_ex+0x467/0x600 [ 218.150247][ T66] should_failslab+0xa8/0x100 [ 218.150323][ T66] kmem_cache_alloc_node_noprof+0xae/0x670 [ 218.150397][ T66] ? __alloc_skb+0x1d7/0x7a0 [ 218.150453][ T66] ? __alloc_skb+0x1d7/0x7a0 [ 218.150541][ T66] __alloc_skb+0x1d7/0x7a0 [ 218.150620][ T66] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 218.150761][ T66] ? process_scheduled_works+0xa20/0x14e0 [ 218.150837][ T66] process_scheduled_works+0xa8e/0x14e0 [ 218.150992][ T66] ? __pfx_process_scheduled_works+0x10/0x10 [ 218.151091][ T66] ? assign_work+0x3cf/0x5d0 [ 218.151179][ T66] worker_thread+0xa47/0xfb0 [ 218.151326][ T66] kthread+0x388/0x470 [ 218.151414][ T66] ? __pfx_worker_thread+0x10/0x10 [ 218.151515][ T66] ? __pfx_kthread+0x10/0x10 [ 218.151626][ T66] ret_from_fork+0x514/0xb70 [ 218.151734][ T66] ? __pfx_ret_from_fork+0x10/0x10 [ 218.151824][ T66] ? __switch_to+0xc89/0x1420 [ 218.151931][ T66] ? __pfx_kthread+0x10/0x10 [ 218.152020][ T66] ret_from_fork_asm+0x1a/0x30 [ 218.152128][ T66] [ 218.152320][ T12] FAULT_INJECTION: forcing a failure. [ 218.152320][ T12] name failslab, interval 1, probability 100, space 0, times 23 [ 218.152389][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 218.152455][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.152496][ T12] Workqueue: events_unbound nsim_dev_trap_report_work [ 218.152575][ T12] Call Trace: [ 218.152596][ T12] [ 218.152611][ T12] dump_stack_lvl+0xe8/0x150 [ 218.152709][ T12] should_fail_ex+0x467/0x600 [ 218.152826][ T12] should_failslab+0xa8/0x100 [ 218.152921][ T12] kmem_cache_alloc_node_noprof+0xae/0x670 [ 218.153002][ T12] ? __alloc_skb+0x1d7/0x7a0 [ 218.153059][ T12] ? __alloc_skb+0x1d7/0x7a0 [ 218.153148][ T12] __alloc_skb+0x1d7/0x7a0 [ 218.153220][ T12] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 218.153344][ T12] ? process_scheduled_works+0xa20/0x14e0 [ 218.153419][ T12] process_scheduled_works+0xa8e/0x14e0 [ 218.153581][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 218.153670][ T12] ? assign_work+0x3cf/0x5d0 [ 218.153771][ T12] worker_thread+0xa47/0xfb0 [ 218.153934][ T12] kthread+0x388/0x470 [ 218.154029][ T12] ? __pfx_worker_thread+0x10/0x10 [ 218.154102][ T12] ? __pfx_kthread+0x10/0x10 [ 218.154184][ T12] ret_from_fork+0x514/0xb70 [ 218.154306][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 218.154410][ T12] ? __switch_to+0xc89/0x1420 [ 218.154499][ T12] ? __pfx_kthread+0x10/0x10 [ 218.154595][ T12] ret_from_fork_asm+0x1a/0x30 [ 218.154698][ T12] [ 218.155160][ T5810] FAULT_INJECTION: forcing a failure. [ 218.155160][ T5810] name failslab, interval 1, probability 100, space 0, times 22 [ 218.155224][ T5810] CPU: 1 UID: 0 PID: 5810 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 218.155290][ T5810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.155324][ T5810] Workqueue: events_unbound nsim_dev_trap_report_work [ 218.155397][ T5810] Call Trace: [ 218.155420][ T5810] [ 218.155442][ T5810] dump_stack_lvl+0xe8/0x150 [ 218.155537][ T5810] should_fail_ex+0x467/0x600 [ 218.155615][ T5810] should_failslab+0xa8/0x100 [ 218.155661][ T5810] kmem_cache_alloc_node_noprof+0xae/0x670 [ 218.155758][ T5810] ? __alloc_skb+0x1d7/0x7a0 [ 218.155845][ T5810] ? __alloc_skb+0x1d7/0x7a0 [ 218.155937][ T5810] __alloc_skb+0x1d7/0x7a0 [ 218.156022][ T5810] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 218.156151][ T5810] ? process_scheduled_works+0xa20/0x14e0 [ 218.156219][ T5810] process_scheduled_works+0xa8e/0x14e0 [ 218.156382][ T5810] ? __pfx_process_scheduled_works+0x10/0x10 [ 218.156472][ T5810] ? assign_work+0x3cf/0x5d0 [ 218.156519][ T5810] worker_thread+0xa47/0xfb0 [ 218.156562][ T5810] ? __kthread_parkme+0x71/0x1f0 [ 218.156681][ T5810] kthread+0x388/0x470 [ 218.156780][ T5810] ? __pfx_worker_thread+0x10/0x10 [ 218.156852][ T5810] ? __pfx_kthread+0x10/0x10 [ 218.156940][ T5810] ret_from_fork+0x514/0xb70 [ 218.157040][ T5810] ? __pfx_ret_from_fork+0x10/0x10 [ 218.157120][ T5810] ? __switch_to+0xc89/0x1420 [ 218.157230][ T5810] ? __pfx_kthread+0x10/0x10 [ 218.157328][ T5810] ret_from_fork_asm+0x1a/0x30 [ 218.157436][ T5810] [ 218.158942][ C1] FAULT_INJECTION: forcing a failure. [ 218.158942][ C1] name failslab, interval 1, probability 100, space 0, times 22 [ 218.158943][ C0] FAULT_INJECTION: forcing a failure. [ 218.158943][ C0] name failslab, interval 1, probability 100, space 0, times 22 [ 218.158976][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 218.159003][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.159014][ C1] Call Trace: [ 218.159021][ C1] [ 218.159029][ C1] dump_stack_lvl+0xe8/0x150 [ 218.159060][ C1] should_fail_ex+0x467/0x600 [ 218.159095][ C1] should_failslab+0xa8/0x100 [ 218.159119][ C1] kmem_cache_alloc_node_noprof+0xae/0x670 [ 218.159141][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 218.159160][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 218.159188][ C1] __alloc_skb+0x1d7/0x7a0 [ 218.159214][ C1] __netdev_alloc_skb+0xc0/0x4b0 [ 218.159242][ C1] __ieee80211_beacon_get+0xc97/0x1820 [ 218.159274][ C1] ? __lock_acquire+0x683/0x2ce0 [ 218.159295][ C1] ? __ieee80211_beacon_get+0x34/0x1820 [ 218.159322][ C1] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 218.159354][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 218.159391][ C1] mac80211_hwsim_beacon_tx+0x378/0x820 [ 218.159421][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 218.159450][ C1] __iterate_interfaces+0x2af/0x5a0 [ 218.159473][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 218.159500][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 218.159524][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 218.159551][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 218.159579][ C1] mac80211_hwsim_beacon+0xb2/0x2b0 [ 218.159600][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 218.159624][ C1] __hrtimer_run_queues+0x3eb/0xaf0 [ 218.159671][ C1] hrtimer_run_softirq+0x18f/0x260 [ 218.159706][ C1] handle_softirqs+0x1d9/0x6c0 [ 218.159746][ C1] run_ktimerd+0x69/0x100 [ 218.159772][ C1] smpboot_thread_fn+0x57c/0xa80 [ 218.159801][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 218.159836][ C1] kthread+0x388/0x470 [ 218.159865][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 218.159890][ C1] ? __pfx_kthread+0x10/0x10 [ 218.159920][ C1] ret_from_fork+0x514/0xb70 [ 218.159953][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 218.159982][ C1] ? __switch_to+0xc89/0x1420 [ 218.160010][ C1] ? __pfx_kthread+0x10/0x10 [ 218.160040][ C1] ret_from_fork_asm+0x1a/0x30 [ 218.160082][ C1] [ 218.160094][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 218.160119][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.160132][ C0] Call Trace: [ 218.160131][ C1] FAULT_INJECTION: forcing a failure. [ 218.160131][ C1] name failslab, interval 1, probability 100, space 0, times 21 [ 218.160141][ C0] [ 218.160150][ C0] dump_stack_lvl+0xe8/0x150 [ 218.160183][ C0] should_fail_ex+0x467/0x600 [ 218.160223][ C0] should_failslab+0xa8/0x100 [ 218.160247][ C0] kmem_cache_alloc_node_noprof+0xae/0x670 [ 218.160269][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 218.160288][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 218.160316][ C0] __alloc_skb+0x1d7/0x7a0 [ 218.160342][ C0] __netdev_alloc_skb+0xc0/0x4b0 [ 218.160369][ C0] __ieee80211_beacon_get+0xc97/0x1820 [ 218.160399][ C0] ? __lock_acquire+0x683/0x2ce0 [ 218.160419][ C0] ? __ieee80211_beacon_get+0x34/0x1820 [ 218.160458][ C0] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 218.160487][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 218.160524][ C0] mac80211_hwsim_beacon_tx+0x378/0x820 [ 218.160552][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 218.160580][ C0] __iterate_interfaces+0x2af/0x5a0 [ 218.160603][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 218.160630][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 218.160655][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 218.160681][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 218.160709][ C0] mac80211_hwsim_beacon+0xb2/0x2b0 [ 218.160731][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 218.160754][ C0] __hrtimer_run_queues+0x3eb/0xaf0 [ 218.160801][ C0] hrtimer_run_softirq+0x18f/0x260 [ 218.160834][ C0] handle_softirqs+0x1d9/0x6c0 [ 218.160887][ C0] run_ktimerd+0x69/0x100 [ 218.160914][ C0] smpboot_thread_fn+0x57c/0xa80 [ 218.160963][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 218.161002][ C0] kthread+0x388/0x470 [ 218.161031][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 218.161056][ C0] ? __pfx_kthread+0x10/0x10 [ 218.161097][ C0] ret_from_fork+0x514/0xb70 [ 218.161130][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 218.161160][ C0] ? __switch_to+0xc89/0x1420 [ 218.161187][ C0] ? __pfx_kthread+0x10/0x10 [ 218.161227][ C0] ret_from_fork_asm+0x1a/0x30 [ 218.161262][ C0] [ 218.161274][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 218.161294][ C0] FAULT_INJECTION: forcing a failure. [ 218.161294][ C0] name failslab, interval 1, probability 100, space 0, times 20 [ 218.161300][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.161314][ C1] Call Trace: [ 218.161322][ C1] [ 218.161329][ C1] dump_stack_lvl+0xe8/0x150 [ 218.161359][ C1] should_fail_ex+0x467/0x600 [ 218.161394][ C1] should_failslab+0xa8/0x100 [ 218.161418][ C1] kmem_cache_alloc_node_noprof+0xae/0x670 [ 218.161439][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 218.161459][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 218.161487][ C1] __alloc_skb+0x1d7/0x7a0 [ 218.161513][ C1] __netdev_alloc_skb+0xc0/0x4b0 [ 218.161545][ C1] __ieee80211_beacon_get+0xc97/0x1820 [ 218.161575][ C1] ? __lock_acquire+0x683/0x2ce0 [ 218.161600][ C1] ? __ieee80211_beacon_get+0x34/0x1820 [ 218.161627][ C1] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 218.161656][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 218.161683][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 218.161726][ C1] mac80211_hwsim_beacon_tx+0x378/0x820 [ 218.161754][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 218.161781][ C1] __iterate_interfaces+0x2af/0x5a0 [ 218.161804][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 218.161831][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 218.161861][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 218.161888][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 218.161916][ C1] mac80211_hwsim_beacon+0xb2/0x2b0 [ 218.161937][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 218.161960][ C1] __hrtimer_run_queues+0x3eb/0xaf0 [ 218.162012][ C1] hrtimer_run_softirq+0x18f/0x260 [ 218.162046][ C1] handle_softirqs+0x1d9/0x6c0 [ 218.162080][ C1] run_ktimerd+0x69/0x100 [ 218.162106][ C1] smpboot_thread_fn+0x57c/0xa80 [ 218.162135][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 218.162169][ C1] kthread+0x388/0x470 [ 218.162198][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 218.162220][ C1] ? __pfx_kthread+0x10/0x10 [ 218.162251][ C1] ret_from_fork+0x514/0xb70 [ 218.162296][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 218.162326][ C1] ? __switch_to+0xc89/0x1420 [ 218.162354][ C1] ? __pfx_kthread+0x10/0x10 [ 218.162384][ C1] ret_from_fork_asm+0x1a/0x30 [ 218.162440][ C1] [ 218.162451][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 218.162477][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.162472][ C1] FAULT_INJECTION: forcing a failure. [ 218.162472][ C1] name failslab, interval 1, probability 100, space 0, times 19 [ 218.162491][ C0] Call Trace: [ 218.162500][ C0] [ 218.162507][ C0] dump_stack_lvl+0xe8/0x150 [ 218.162538][ C0] should_fail_ex+0x467/0x600 [ 218.162572][ C0] should_failslab+0xa8/0x100 [ 218.162609][ C0] kmem_cache_alloc_node_noprof+0xae/0x670 [ 218.162630][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 218.162650][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 218.162678][ C0] __alloc_skb+0x1d7/0x7a0 [ 218.162703][ C0] __netdev_alloc_skb+0xc0/0x4b0 [ 218.162731][ C0] __ieee80211_beacon_get+0xc97/0x1820 [ 218.162761][ C0] ? __lock_acquire+0x683/0x2ce0 [ 218.162781][ C0] ? __ieee80211_beacon_get+0x34/0x1820 [ 218.162809][ C0] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 218.162838][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 218.162865][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 218.162902][ C0] mac80211_hwsim_beacon_tx+0x378/0x820 [ 218.162929][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 218.162958][ C0] __iterate_interfaces+0x2af/0x5a0 [ 218.162980][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 218.163008][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 218.163033][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 218.163059][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 218.163087][ C0] mac80211_hwsim_beacon+0xb2/0x2b0 [ 218.163108][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 218.163132][ C0] __hrtimer_run_queues+0x3eb/0xaf0 [ 218.163179][ C0] hrtimer_run_softirq+0x18f/0x260 [ 218.163218][ C0] handle_softirqs+0x1d9/0x6c0 [ 218.163253][ C0] run_ktimerd+0x69/0x100 [ 218.163279][ C0] smpboot_thread_fn+0x57c/0xa80 [ 218.163308][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 218.163342][ C0] kthread+0x388/0x470 [ 218.163371][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 218.163395][ C0] ? __pfx_kthread+0x10/0x10 [ 218.163425][ C0] ret_from_fork+0x514/0xb70 [ 218.163458][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 218.163488][ C0] ? __switch_to+0xc89/0x1420 [ 218.163516][ C0] ? __pfx_kthread+0x10/0x10 [ 218.163547][ C0] ret_from_fork_asm+0x1a/0x30 [ 218.163582][ C0] [ 218.163593][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 218.163619][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.163632][ C1] Call Trace: [ 218.163638][ C1] [ 218.163698][ C1] dump_stack_lvl+0xe8/0x150 [ 218.163829][ C1] should_fail_ex+0x467/0x600 [ 218.163940][ C1] should_failslab+0xa8/0x100 [ 218.164017][ C1] kmem_cache_alloc_node_noprof+0xae/0x670 [ 218.164085][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 218.164150][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 218.164223][ C1] __alloc_skb+0x1d7/0x7a0 [ 218.164300][ C1] __netdev_alloc_skb+0xc0/0x4b0 [ 218.164398][ C1] __ieee80211_beacon_get+0xc97/0x1820 [ 218.164488][ C1] ? __lock_acquire+0x683/0x2ce0 [ 218.164545][ C1] ? __ieee80211_beacon_get+0x34/0x1820 [ 218.164633][ C1] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 218.164733][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 218.164820][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 218.164931][ C1] mac80211_hwsim_beacon_tx+0x378/0x820 [ 218.165066][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 218.165175][ C1] __iterate_interfaces+0x2af/0x5a0 [ 218.165223][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 218.165276][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 218.165364][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 218.165442][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 218.165531][ C1] mac80211_hwsim_beacon+0xb2/0x2b0 [ 218.165596][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 218.165671][ C1] __hrtimer_run_queues+0x3eb/0xaf0 [ 218.165823][ C1] hrtimer_run_softirq+0x18f/0x260 [ 218.165940][ C1] handle_softirqs+0x1d9/0x6c0 [ 218.166048][ C1] run_ktimerd+0x69/0x100 [ 218.166128][ C1] smpboot_thread_fn+0x57c/0xa80 [ 218.166217][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 218.166311][ C1] kthread+0x388/0x470 [ 218.166391][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 218.166469][ C1] ? __pfx_kthread+0x10/0x10 [ 218.166519][ C1] ret_from_fork+0x514/0xb70 [ 218.166559][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 218.166613][ C1] ? __switch_to+0xc89/0x1420 [ 218.166647][ C1] ? __pfx_kthread+0x10/0x10 [ 218.166692][ C1] ret_from_fork_asm+0x1a/0x30 [ 218.166818][ C1] [ 218.166999][ C1] FAULT_INJECTION: forcing a failure. [ 218.166999][ C1] name failslab, interval 1, probability 100, space 0, times 17 [ 218.167086][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 218.167152][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.167186][ C1] Call Trace: [ 218.167208][ C1] [ 218.167235][ C1] dump_stack_lvl+0xe8/0x150 [ 218.167325][ C1] should_fail_ex+0x467/0x600 [ 218.167432][ C1] should_failslab+0xa8/0x100 [ 218.167508][ C1] kmem_cache_alloc_node_noprof+0xae/0x670 [ 218.167581][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 218.167639][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 218.167703][ C1] __alloc_skb+0x1d7/0x7a0 [ 218.167750][ C1] __netdev_alloc_skb+0xc0/0x4b0 [ 218.167870][ C1] __ieee80211_beacon_get+0xc97/0x1820 [ 218.167992][ C1] ? __lock_acquire+0x683/0x2ce0 [ 218.168050][ C1] ? __ieee80211_beacon_get+0x34/0x1820 [ 218.168136][ C1] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 218.168219][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 218.168298][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 218.168357][ C1] mac80211_hwsim_beacon_tx+0x378/0x820 [ 218.168444][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 218.168532][ C1] __iterate_interfaces+0x2af/0x5a0 [ 218.168595][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 218.168674][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 218.168761][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 218.168847][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 218.168936][ C1] mac80211_hwsim_beacon+0xb2/0x2b0 [ 218.169022][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 218.169089][ C1] __hrtimer_run_queues+0x3eb/0xaf0 [ 218.169235][ C1] hrtimer_run_softirq+0x18f/0x260 [ 218.169371][ C1] handle_softirqs+0x1d9/0x6c0 [ 218.169494][ C1] run_ktimerd+0x69/0x100 [ 218.169575][ C1] smpboot_thread_fn+0x57c/0xa80 [ 218.169664][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 218.169774][ C1] kthread+0x388/0x470 [ 218.169869][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 218.169907][ C1] ? __pfx_kthread+0x10/0x10 [ 218.169999][ C1] ret_from_fork+0x514/0xb70 [ 218.170098][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 218.170188][ C1] ? __switch_to+0xc89/0x1420 [ 218.170269][ C1] ? __pfx_kthread+0x10/0x10 [ 218.170363][ C1] ret_from_fork_asm+0x1a/0x30 [ 218.170468][ C1] [ 218.173682][ T1294] FAULT_INJECTION: forcing a failure. [ 218.173682][ T1294] name failslab, interval 1, probability 100, space 0, times 15 [ 218.173791][ T1294] CPU: 1 UID: 0 PID: 1294 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 218.173861][ T1294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.173898][ T1294] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 218.173996][ T1294] Call Trace: [ 218.174019][ T1294] [ 218.174042][ T1294] dump_stack_lvl+0xe8/0x150 [ 218.174142][ T1294] should_fail_ex+0x467/0x600 [ 218.174240][ T1294] should_failslab+0xa8/0x100 [ 218.174320][ T1294] kmem_cache_alloc_noprof+0xa4/0x650 [ 218.174391][ T1294] ? skb_clone+0x212/0x3a0 [ 218.174468][ T1294] ? skb_clone+0x212/0x3a0 [ 218.174570][ T1294] skb_clone+0x212/0x3a0 [ 218.174661][ T1294] batadv_iv_send_outstanding_bat_ogm_packet+0x571/0x790 [ 218.174799][ T1294] ? process_scheduled_works+0xa20/0x14e0 [ 218.174886][ T1294] process_scheduled_works+0xa8e/0x14e0 [ 218.175057][ T1294] ? __pfx_process_scheduled_works+0x10/0x10 [ 218.175147][ T1294] ? assign_work+0x3cf/0x5d0 [ 218.175236][ T1294] worker_thread+0xa47/0xfb0 [ 218.175359][ T1294] ? __kthread_parkme+0x71/0x1f0 [ 218.175476][ T1294] kthread+0x388/0x470 [ 218.175566][ T1294] ? __pfx_worker_thread+0x10/0x10 [ 218.175636][ T1294] ? __pfx_kthread+0x10/0x10 [ 218.175745][ T1294] ret_from_fork+0x514/0xb70 [ 218.175818][ T1294] ? __pfx_ret_from_fork+0x10/0x10 [ 218.175853][ T1294] ? __switch_to+0xc89/0x1420 [ 218.175887][ T1294] ? __pfx_kthread+0x10/0x10 [ 218.175925][ T1294] ret_from_fork_asm+0x1a/0x30 [ 218.175967][ T1294] [ 218.176584][ C0] FAULT_INJECTION: forcing a failure. [ 218.176584][ C0] name failslab, interval 1, probability 100, space 0, times 15 [ 218.176616][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 218.176642][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.176656][ C0] Call Trace: [ 218.176664][ C0] [ 218.176673][ C0] dump_stack_lvl+0xe8/0x150 [ 218.176712][ C0] should_fail_ex+0x467/0x600 [ 218.176755][ C0] should_failslab+0xa8/0x100 [ 218.176786][ C0] kmem_cache_alloc_node_noprof+0xae/0x670 [ 218.176818][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 218.176841][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 218.176876][ C0] __alloc_skb+0x1d7/0x7a0 [ 218.176909][ C0] wg_packet_send_keepalive+0x65/0x2c0 [ 218.176946][ C0] call_timer_fn+0x192/0x5e0 [ 218.176975][ C0] ? __pfx_wg_expired_send_persistent_keepalive+0x10/0x10 [ 218.177003][ C0] ? call_timer_fn+0xd4/0x5e0 [ 218.177030][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 218.177088][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 218.177121][ C0] ? __pfx_wg_expired_send_persistent_keepalive+0x10/0x10 [ 218.177151][ C0] __run_timer_base+0x67b/0x9b0 [ 218.177191][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 218.177235][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 218.177262][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 218.177291][ C0] run_timer_softirq+0xb7/0x170 [ 218.177314][ C0] handle_softirqs+0x1d9/0x6c0 [ 218.177348][ C0] run_ktimerd+0x69/0x100 [ 218.177374][ C0] smpboot_thread_fn+0x57c/0xa80 [ 218.177403][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 218.177437][ C0] kthread+0x388/0x470 [ 218.177467][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 218.177496][ C0] ? __pfx_kthread+0x10/0x10 [ 218.177527][ C0] ret_from_fork+0x514/0xb70 [ 218.177559][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 218.177589][ C0] ? __switch_to+0xc89/0x1420 [ 218.177622][ C0] ? __pfx_kthread+0x10/0x10 [ 218.177652][ C0] ret_from_fork_asm+0x1a/0x30 [ 218.177686][ C0] [ 218.179506][ T68] FAULT_INJECTION: forcing a failure. [ 218.179506][ T68] name failslab, interval 1, probability 100, space 0, times 13 [ 218.179606][ T68] CPU: 1 UID: 0 PID: 68 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 218.179685][ T68] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.179739][ T68] Workqueue: events_unbound nsim_dev_trap_report_work [ 218.179839][ T68] Call Trace: [ 218.179863][ T68] [ 218.179886][ T68] dump_stack_lvl+0xe8/0x150 [ 218.179987][ T68] should_fail_ex+0x467/0x600 [ 218.180103][ T68] should_failslab+0xa8/0x100 [ 218.180184][ T68] kmem_cache_alloc_node_noprof+0xae/0x670 [ 218.180266][ T68] ? __alloc_skb+0x1d7/0x7a0 [ 218.180332][ T68] ? __alloc_skb+0x1d7/0x7a0 [ 218.180415][ T68] __alloc_skb+0x1d7/0x7a0 [ 218.180504][ T68] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 218.180655][ T68] ? process_scheduled_works+0xa20/0x14e0 [ 218.180758][ T68] process_scheduled_works+0xa8e/0x14e0 [ 218.180919][ T68] ? __pfx_process_scheduled_works+0x10/0x10 [ 218.181020][ T68] ? assign_work+0x3cf/0x5d0 [ 218.181115][ T68] worker_thread+0xa47/0xfb0 [ 218.181279][ T68] kthread+0x388/0x470 [ 218.181371][ T68] ? __pfx_worker_thread+0x10/0x10 [ 218.181441][ T68] ? __pfx_kthread+0x10/0x10 [ 218.181541][ T68] ret_from_fork+0x514/0xb70 [ 218.181645][ T68] ? __pfx_ret_from_fork+0x10/0x10 [ 218.181748][ T68] ? __switch_to+0xc89/0x1420 [ 218.181840][ T68] ? __pfx_kthread+0x10/0x10 [ 218.181940][ T68] ret_from_fork_asm+0x1a/0x30 [ 218.182071][ T68] [ 218.185261][ T6867] FAULT_INJECTION: forcing a failure. [ 218.185261][ T6867] name failslab, interval 1, probability 100, space 0, times 12 [ 218.185348][ T6867] CPU: 1 UID: 0 PID: 6867 Comm: syz.4.213 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 218.185414][ T6867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.185450][ T6867] Call Trace: [ 218.185472][ T6867] [ 218.185495][ T6867] dump_stack_lvl+0xe8/0x150 [ 218.185592][ T6867] should_fail_ex+0x467/0x600 [ 218.185698][ T6867] should_failslab+0xa8/0x100 [ 218.185774][ T6867] kmem_cache_alloc_noprof+0xa4/0x650 [ 218.185825][ T6867] ? taskstats_exit+0x19e/0xe10 [ 218.185910][ T6867] ? taskstats_exit+0x19e/0xe10 [ 218.186007][ T6867] taskstats_exit+0x19e/0xe10 [ 218.186040][ T6867] ? acct_update_integrals+0x342/0x410 [ 218.186157][ T6867] ? acct_update_integrals+0x38a/0x410 [ 218.186248][ T6867] ? __pfx_taskstats_exit+0x10/0x10 [ 218.186358][ T6867] ? seccomp_filter_release+0x18a/0x2d0 [ 218.186435][ T6867] do_exit+0x6ad/0x2360 [ 218.186483][ T6867] ? lockdep_hardirqs_on+0x7a/0x110 [ 218.186511][ T6867] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 218.186547][ T6867] ? __pfx_do_exit+0x10/0x10 [ 218.186580][ T6867] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 218.186623][ T6867] ? rt_spin_lock+0x1e0/0x400 [ 218.186652][ T6867] ? rt_spin_unlock+0x157/0x200 [ 218.186729][ T6867] do_group_exit+0x22d/0x2f0 [ 218.186786][ T6867] ? rt_spin_unlock+0x163/0x200 [ 218.186861][ T6867] get_signal+0x121b/0x12c0 [ 218.186991][ T6867] arch_do_signal_or_restart+0xbb/0x860 [ 218.187082][ T6867] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 218.187215][ T6867] exit_to_user_mode_loop+0x104/0x730 [ 218.187277][ T6867] ? rcu_is_watching+0x15/0xb0 [ 218.187356][ T6867] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.187443][ T6867] do_syscall_64+0x353/0x580 [ 218.187533][ T6867] ? trace_irq_disable+0x3b/0x140 [ 218.187584][ T6867] ? clear_bhb_loop+0x40/0x90 [ 218.187647][ T6867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.187678][ T6867] RIP: 0033:0x7f65b407e019 [ 218.187744][ T6867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.187798][ T6867] RSP: 002b:00007f65b22d60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 218.187855][ T6867] RAX: fffffffffffffe00 RBX: 00007f65b4305fa8 RCX: 00007f65b407e019 [ 218.187900][ T6867] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f65b4305fa8 [ 218.187942][ T6867] RBP: 00007f65b4305fa0 R08: 0000000000000000 R09: 0000000000000000 [ 218.187976][ T6867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.188011][ T6867] R13: 00007f65b4306038 R14: 00007ffd739cca50 R15: 00007ffd739ccb38 [ 218.188099][ T6867] [ 218.189270][ T6351] FAULT_INJECTION: forcing a failure. [ 218.189270][ T6351] name failslab, interval 1, probability 100, space 0, times 10 [ 218.189367][ T6351] CPU: 1 UID: 0 PID: 6351 Comm: udevd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 218.189432][ T6351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.189465][ T6351] Call Trace: [ 218.189487][ T6351] [ 218.189509][ T6351] dump_stack_lvl+0xe8/0x150 [ 218.189601][ T6351] should_fail_ex+0x467/0x600 [ 218.189719][ T6351] should_failslab+0xa8/0x100 [ 218.189797][ T6351] kmem_cache_alloc_node_noprof+0xae/0x670 [ 218.189877][ T6351] ? __alloc_skb+0x1d7/0x7a0 [ 218.189942][ T6351] ? __alloc_skb+0x1d7/0x7a0 [ 218.190032][ T6351] __alloc_skb+0x1d7/0x7a0 [ 218.190113][ T6351] netlink_sendmsg+0x5d4/0xb40 [ 218.190209][ T6351] ? __lock_acquire+0x683/0x2ce0 [ 218.190315][ T6351] ? __pfx_netlink_sendmsg+0x10/0x10 [ 218.190406][ T6351] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 218.190509][ T6351] ? __kernel_text_address+0xd/0x30 [ 218.190568][ T6351] ? unwind_get_return_address+0x4d/0x90 [ 218.190656][ T6351] ? __pfx_netlink_sendmsg+0x10/0x10 [ 218.190745][ T6351] sock_sendmsg_nosec+0x13a/0x180 [ 218.190851][ T6351] ____sys_sendmsg+0x565/0x870 [ 218.190955][ T6351] ? __pfx_____sys_sendmsg+0x10/0x10 [ 218.191066][ T6351] ? import_iovec+0x73/0xa0 [ 218.191157][ T6351] ___sys_sendmsg+0x2a5/0x360 [ 218.191253][ T6351] ? __pfx____sys_sendmsg+0x10/0x10 [ 218.191332][ T6351] ? do_raw_spin_lock+0x12b/0x2f0 [ 218.191516][ T6351] ? rt_spin_unlock+0x157/0x200 [ 218.191616][ T6351] __x64_sys_sendmsg+0x1b7/0x290 [ 218.191730][ T6351] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 218.191861][ T6351] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.191930][ T6351] do_syscall_64+0x174/0x580 [ 218.192037][ T6351] ? clear_bhb_loop+0x40/0x90 [ 218.192112][ T6351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.192180][ T6351] RIP: 0033:0x7f47f095a407 [ 218.192251][ T6351] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 218.192302][ T6351] RSP: 002b:00007ffe7b54b7b0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 218.192370][ T6351] RAX: ffffffffffffffda RBX: 00007f47f086c880 RCX: 00007f47f095a407 [ 218.192419][ T6351] RDX: 0000000000000000 RSI: 00007ffe7b54b810 RDI: 000000000000000c [ 218.192458][ T6351] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 218.192502][ T6351] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000000000d3 [ 218.192539][ T6351] R13: 000056108490ad60 R14: 0000000000000000 R15: 000056108490dba0 [ 218.192598][ T6351] [ 218.192772][ T6396] FAULT_INJECTION: forcing a failure. [ 218.192772][ T6396] name failslab, interval 1, probability 100, space 0, times 10 [ 218.192878][ T6396] CPU: 1 UID: 0 PID: 6396 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 218.192949][ T6396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.192985][ T6396] Call Trace: [ 218.193009][ T6396] [ 218.193032][ T6396] dump_stack_lvl+0xe8/0x150 [ 218.193140][ T6396] should_fail_ex+0x467/0x600 [ 218.193242][ T6396] should_failslab+0xa8/0x100 [ 218.193316][ T6396] kmem_cache_alloc_node_noprof+0xae/0x670 [ 218.193386][ T6396] ? __alloc_skb+0x1d7/0x7a0 [ 218.193455][ T6396] ? __alloc_skb+0x1d7/0x7a0 [ 218.193547][ T6396] __alloc_skb+0x1d7/0x7a0 [ 218.193630][ T6396] netlink_ack+0x136/0xb30 [ 218.193721][ T6396] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 218.193795][ T6396] ? ref_tracker_free+0x668/0x820 [ 218.193874][ T6396] ? __pfx_ref_tracker_free+0x10/0x10 [ 218.193968][ T6396] netlink_rcv_skb+0x2a4/0x4a0 [ 218.194052][ T6396] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 218.194133][ T6396] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 218.194187][ T6396] ? netlink_deliver_tap+0x2e/0x1b0 [ 218.194304][ T6396] ? netlink_deliver_tap+0x2e/0x1b0 [ 218.194419][ T6396] netlink_unicast+0x7f5/0x990 [ 218.194526][ T6396] netlink_sendmsg+0x813/0xb40 [ 218.194644][ T6396] ? __pfx_netlink_sendmsg+0x10/0x10 [ 218.194731][ T6396] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 218.194855][ T6396] ? __pfx_netlink_sendmsg+0x10/0x10 [ 218.194930][ T6396] sock_sendmsg_nosec+0x13a/0x180 [ 218.195037][ T6396] __sys_sendto+0x41e/0x5d0 [ 218.195132][ T6396] ? __pfx___sys_sendto+0x10/0x10 [ 218.195203][ T6396] ? lockdep_hardirqs_on+0x7a/0x110 [ 218.195317][ T6396] ? fput_close_sync+0x11f/0x240 [ 218.195379][ T6396] ? kmem_cache_free+0x526/0x6c0 [ 218.195482][ T6396] ? __pfx_fput_close_sync+0x10/0x10 [ 218.195598][ T6396] __x64_sys_sendto+0xde/0x100 [ 218.195686][ T6396] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.195729][ T6396] do_syscall_64+0x174/0x580 [ 218.195815][ T6396] ? clear_bhb_loop+0x40/0x90 [ 218.195896][ T6396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.195956][ T6396] RIP: 0033:0x7fc605d2e84e [ 218.196068][ T6396] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 218.196118][ T6396] RSP: 002b:00007ffc58a19e28 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 218.196180][ T6396] RAX: ffffffffffffffda RBX: 000055557f54b500 RCX: 00007fc605d2e84e [ 218.196221][ T6396] RDX: 0000000000000028 RSI: 00007fc606b24670 RDI: 0000000000000003 [ 218.196259][ T6396] RBP: 0000000000000001 R08: 00007ffc58a19ea4 R09: 000000000000000c [ 218.196305][ T6396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 218.196341][ T6396] R13: 0000000000000000 R14: 00007fc606b24670 R15: 0000000000000000 [ 218.196434][ T6396] [ 218.196846][ T4947] FAULT_INJECTION: forcing a failure. [ 218.196846][ T4947] name failslab, interval 1, probability 100, space 0, times 9 [ 218.196953][ T4947] CPU: 1 UID: 0 PID: 4947 Comm: klogd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 218.197047][ T4947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.197085][ T4947] Call Trace: [ 218.197109][ T4947] [ 218.197124][ T4947] dump_stack_lvl+0xe8/0x150 [ 218.197234][ T4947] should_fail_ex+0x467/0x600 [ 218.197335][ T4947] ? __pfx_sock_alloc_inode+0x10/0x10 [ 218.197404][ T4947] should_failslab+0xa8/0x100 [ 218.197485][ T4947] ? __pfx_sock_alloc_inode+0x10/0x10 [ 218.197542][ T4947] kmem_cache_alloc_lru_noprof+0xa7/0x650 [ 218.197615][ T4947] ? sock_alloc_inode+0x2c/0x1a0 [ 218.197667][ T4947] ? sock_alloc_inode+0x2c/0x1a0 [ 218.197758][ T4947] ? __pfx_sock_alloc_inode+0x10/0x10 [ 218.197816][ T4947] sock_alloc_inode+0x2c/0x1a0 [ 218.197875][ T4947] ? __pfx_sock_alloc_inode+0x10/0x10 [ 218.197932][ T4947] alloc_inode+0x6a/0x1b0 [ 218.198001][ T4947] __sock_create+0x12d/0x9d0 [ 218.198096][ T4947] __sys_socket+0xd6/0x1b0 [ 218.198143][ T4947] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.198207][ T4947] __x64_sys_socket+0x7a/0x90 [ 218.198262][ T4947] do_syscall_64+0x174/0x580 [ 218.198364][ T4947] ? clear_bhb_loop+0x40/0x90 [ 218.198476][ T4947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.198545][ T4947] RIP: 0033:0x7f2c1d2ae707 [ 218.198605][ T4947] Code: 54 24 0c e8 6b ac ff ff 83 f8 ff 74 04 8b 44 24 0c 48 83 c4 18 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 e6 0c 00 f7 d8 64 89 01 48 [ 218.198661][ T4947] RSP: 002b:00007ffd22f9cfe8 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 218.198739][ T4947] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f2c1d2ae707 [ 218.198777][ T4947] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 218.198813][ T4947] RBP: 00007f2c1d33a560 R08: 0000000000000073 R09: 0000000000000001 [ 218.198858][ T4947] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 218.198895][ T4947] R13: 00007ffd22f9d110 R14: 000000000000002f R15: 00007ffd22f9d110 [ 218.198988][ T4947] [ 218.199793][ T5578] FAULT_INJECTION: forcing a failure. [ 218.199793][ T5578] name failslab, interval 1, probability 100, space 0, times 9 [ 218.199883][ T5578] CPU: 1 UID: 0 PID: 5578 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 218.199955][ T5578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.199990][ T5578] Call Trace: [ 218.200013][ T5578] [ 218.200037][ T5578] dump_stack_lvl+0xe8/0x150 [ 218.200140][ T5578] should_fail_ex+0x467/0x600 [ 218.200232][ T5578] should_failslab+0xa8/0x100 [ 218.200316][ T5578] __kmalloc_cache_noprof+0xa0/0x6b0 [ 218.200388][ T5578] ? __pollwait+0x27f/0x430 [ 218.200471][ T5578] ? __pollwait+0x27f/0x430 [ 218.200576][ T5578] __pollwait+0x27f/0x430 [ 218.200671][ T5578] ? __pfx___pollwait+0x10/0x10 [ 218.200733][ T5578] pipe_poll+0xf3/0x4b0 [ 218.200768][ T5578] ? __pfx_pipe_poll+0x10/0x10 [ 218.200824][ T5578] do_select+0x104c/0x1610 [ 218.201052][ T5578] ? __pfx_do_select+0x10/0x10 [ 218.201136][ T5578] ? __lock_acquire+0x683/0x2ce0 [ 218.201211][ T5578] ? __might_fault+0xaf/0x130 [ 218.201282][ T5578] ? __pfx___pollwait+0x10/0x10 [ 218.201387][ T5578] ? __pfx_pollwake+0x10/0x10 [ 218.201458][ T5578] ? __pfx_pollwake+0x10/0x10 [ 218.201530][ T5578] ? __pfx_pollwake+0x10/0x10 [ 218.201600][ T5578] ? __pfx_pollwake+0x10/0x10 [ 218.201649][ T5578] ? __pfx_pollwake+0x10/0x10 [ 218.201722][ T5578] ? __pfx_pollwake+0x10/0x10 [ 218.201804][ T5578] ? __pfx_pollwake+0x10/0x10 [ 218.201875][ T5578] ? __pfx_pollwake+0x10/0x10 [ 218.201992][ T5578] ? __pfx_pollwake+0x10/0x10 [ 218.202134][ T5578] core_sys_select+0x86f/0xb40 [ 218.202259][ T5578] ? __pfx_core_sys_select+0x10/0x10 [ 218.202380][ T5578] ? __pfx_set_user_sigmask+0x10/0x10 [ 218.202515][ T5578] __se_sys_pselect6+0x267/0x320 [ 218.202630][ T5578] ? __pfx___se_sys_pselect6+0x10/0x10 [ 218.202733][ T5578] ? __pfx_ksys_read+0x10/0x10 [ 218.202824][ T5578] ? __x64_sys_pselect6+0x21/0xf0 [ 218.202914][ T5578] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.202983][ T5578] do_syscall_64+0x174/0x580 [ 218.203073][ T5578] ? clear_bhb_loop+0x40/0x90 [ 218.203144][ T5578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.203202][ T5578] RIP: 0033:0x7f2efe239197 [ 218.203252][ T5578] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 218.203301][ T5578] RSP: 002b:00007ffeaaa2edc0 EFLAGS: 00000202 ORIG_RAX: 000000000000010e [ 218.203366][ T5578] RAX: ffffffffffffffda RBX: 00005555877d0540 RCX: 00007f2efe239197 [ 218.203411][ T5578] RDX: 0000000000000000 RSI: 00007ffeaaa2eee0 RDI: 0000000000000026 [ 218.203447][ T5578] RBP: 00007ffeaaa2f340 R08: 00007ffeaaa2ee00 R09: 00007ffeaaa2ee10 [ 218.203491][ T5578] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffeaaa2f180 [ 218.203535][ T5578] R13: 00007ffeaaa2ef70 R14: 585858582e7a7973 R15: 00007ffeaaa2f3b0 [ 218.203627][ T5578] [ 218.203801][ T13] FAULT_INJECTION: forcing a failure. [ 218.203801][ T13] name failslab, interval 1, probability 100, space 0, times 8 [ 218.203853][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 218.203902][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.203963][ T13] Workqueue: events_unbound nsim_dev_trap_report_work [ 218.204071][ T13] Call Trace: [ 218.204094][ T13] [ 218.204117][ T13] dump_stack_lvl+0xe8/0x150 [ 218.204213][ T13] should_fail_ex+0x467/0x600 [ 218.204312][ T13] should_failslab+0xa8/0x100 [ 218.204391][ T13] kmem_cache_alloc_node_noprof+0xae/0x670 [ 218.204460][ T13] ? __alloc_skb+0x1d7/0x7a0 [ 218.204528][ T13] ? __alloc_skb+0x1d7/0x7a0 [ 218.204597][ T13] __alloc_skb+0x1d7/0x7a0 [ 218.204688][ T13] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 218.204930][ T13] ? process_scheduled_works+0xa20/0x14e0 [ 218.205022][ T13] process_scheduled_works+0xa8e/0x14e0 [ 218.205195][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 218.205301][ T13] ? assign_work+0x3cf/0x5d0 [ 218.205455][ T13] worker_thread+0xa47/0xfb0 [ 218.205636][ T13] kthread+0x388/0x470 [ 218.205737][ T13] ? __pfx_worker_thread+0x10/0x10 [ 218.205808][ T13] ? __pfx_kthread+0x10/0x10 [ 218.205896][ T13] ret_from_fork+0x514/0xb70 [ 218.206010][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 218.206114][ T13] ? __switch_to+0xc89/0x1420 [ 218.206210][ T13] ? __pfx_kthread+0x10/0x10 [ 218.206324][ T13] ret_from_fork_asm+0x1a/0x30 [ 218.206448][ T13] [ 218.207873][ T66] FAULT_INJECTION: forcing a failure. [ 218.207873][ T66] name failslab, interval 1, probability 100, space 0, times 7 [ 218.207971][ T66] CPU: 1 UID: 0 PID: 66 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 218.208036][ T66] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.208077][ T66] Workqueue: events_unbound nsim_dev_trap_report_work [ 218.208163][ T66] Call Trace: [ 218.208172][ T66] [ 218.208181][ T66] dump_stack_lvl+0xe8/0x150 [ 218.208299][ T66] should_fail_ex+0x467/0x600 [ 218.208442][ T66] should_failslab+0xa8/0x100 [ 218.208528][ T66] kmem_cache_alloc_node_noprof+0xae/0x670 [ 218.208597][ T66] ? __alloc_skb+0x1d7/0x7a0 [ 218.208657][ T66] ? __alloc_skb+0x1d7/0x7a0 [ 218.208745][ T66] __alloc_skb+0x1d7/0x7a0 [ 218.208817][ T66] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 218.208941][ T66] ? process_scheduled_works+0xa20/0x14e0 [ 218.209021][ T66] process_scheduled_works+0xa8e/0x14e0 [ 218.209174][ T66] ? __pfx_process_scheduled_works+0x10/0x10 [ 218.209271][ T66] ? assign_work+0x3cf/0x5d0 [ 218.209368][ T66] worker_thread+0xa47/0xfb0 [ 218.209521][ T66] kthread+0x388/0x470 [ 218.209615][ T66] ? __pfx_worker_thread+0x10/0x10 [ 218.209707][ T66] ? __pfx_kthread+0x10/0x10 [ 218.209816][ T66] ret_from_fork+0x514/0xb70 [ 218.209910][ T66] ? __pfx_ret_from_fork+0x10/0x10 [ 218.209997][ T66] ? __switch_to+0xc89/0x1420 [ 218.210085][ T66] ? __pfx_kthread+0x10/0x10 [ 218.210176][ T66] ret_from_fork_asm+0x1a/0x30 [ 218.210287][ T66] [ 218.210549][ T67] FAULT_INJECTION: forcing a failure. [ 218.210549][ T67] name failslab, interval 1, probability 100, space 0, times 7 [ 218.210627][ T67] CPU: 1 UID: 0 PID: 67 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 218.210693][ T67] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.210727][ T67] Workqueue: ipv6_addrconf addrconf_dad_work [ 218.210793][ T67] Call Trace: [ 218.210818][ T67] [ 218.210841][ T67] dump_stack_lvl+0xe8/0x150 [ 218.210937][ T67] should_fail_ex+0x467/0x600 [ 218.211072][ T67] should_failslab+0xa8/0x100 [ 218.211162][ T67] kmem_cache_alloc_node_noprof+0xae/0x670 [ 218.211228][ T67] ? __alloc_skb+0x1d7/0x7a0 [ 218.211295][ T67] ? __alloc_skb+0x1d7/0x7a0 [ 218.211394][ T67] __alloc_skb+0x1d7/0x7a0 [ 218.211472][ T67] __ipv6_ifa_notify+0x1d0/0xc60 [ 218.211572][ T67] ? __pfx___ipv6_ifa_notify+0x10/0x10 [ 218.211652][ T67] ? __cancel_work+0x17f/0x230 [ 218.211730][ T67] ? lockdep_hardirqs_on+0x7a/0x110 [ 218.211822][ T67] addrconf_dad_completed+0x1b5/0xe60 [ 218.211913][ T67] ? __pfx_addrconf_dad_completed+0x10/0x10 [ 218.211979][ T67] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 218.212064][ T67] ? lockdep_hardirqs_on+0x7a/0x110 [ 218.212162][ T67] addrconf_dad_work+0xdda/0x16e0 [ 218.212232][ T67] ? addrconf_dad_work+0x131/0x16e0 [ 218.212330][ T67] ? __pfx_addrconf_dad_work+0x10/0x10 [ 218.212398][ T67] ? process_scheduled_works+0xa20/0x14e0 [ 218.212573][ T67] ? rcu_is_watching+0x15/0xb0 [ 218.212655][ T67] ? process_scheduled_works+0xa20/0x14e0 [ 218.212731][ T67] process_scheduled_works+0xa8e/0x14e0 [ 218.212895][ T67] ? __pfx_process_scheduled_works+0x10/0x10 [ 218.212987][ T67] ? assign_work+0x3cf/0x5d0 [ 218.213076][ T67] worker_thread+0xa47/0xfb0 [ 218.213227][ T67] kthread+0x388/0x470 [ 218.213328][ T67] ? __pfx_worker_thread+0x10/0x10 [ 218.213398][ T67] ? __pfx_kthread+0x10/0x10 [ 218.213489][ T67] ret_from_fork+0x514/0xb70 [ 218.213598][ T67] ? __pfx_ret_from_fork+0x10/0x10 [ 218.213691][ T67] ? __switch_to+0xc89/0x1420 [ 218.213798][ T67] ? __pfx_kthread+0x10/0x10 [ 218.213941][ T67] ret_from_fork_asm+0x1a/0x30 [ 218.214046][ T67] [ 218.214266][ T5810] FAULT_INJECTION: forcing a failure. [ 218.214266][ T5810] name failslab, interval 1, probability 100, space 0, times 6 [ 218.214357][ T5810] CPU: 1 UID: 0 PID: 5810 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 218.214425][ T5810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.214460][ T5810] Workqueue: events_unbound nsim_dev_trap_report_work [ 218.214550][ T5810] Call Trace: [ 218.214573][ T5810] [ 218.214595][ T5810] dump_stack_lvl+0xe8/0x150 [ 218.214687][ T5810] should_fail_ex+0x467/0x600 [ 218.214799][ T5810] should_failslab+0xa8/0x100 [ 218.214884][ T5810] kmem_cache_alloc_node_noprof+0xae/0x670 [ 218.214953][ T5810] ? __alloc_skb+0x1d7/0x7a0 [ 218.215025][ T5810] ? __alloc_skb+0x1d7/0x7a0 [ 218.215116][ T5810] __alloc_skb+0x1d7/0x7a0 [ 218.215219][ T5810] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 218.215357][ T5810] ? process_scheduled_works+0xa20/0x14e0 [ 218.215437][ T5810] process_scheduled_works+0xa8e/0x14e0 [ 218.215596][ T5810] ? __pfx_process_scheduled_works+0x10/0x10 [ 218.215692][ T5810] ? assign_work+0x3cf/0x5d0 [ 218.215793][ T5810] worker_thread+0xa47/0xfb0 [ 218.215901][ T5810] ? __kthread_parkme+0x71/0x1f0 [ 218.216021][ T5810] kthread+0x388/0x470 [ 218.216106][ T5810] ? __pfx_worker_thread+0x10/0x10 [ 218.216182][ T5810] ? __pfx_kthread+0x10/0x10 [ 218.216274][ T5810] ret_from_fork+0x514/0xb70 [ 218.216386][ T5810] ? __pfx_ret_from_fork+0x10/0x10 [ 218.216479][ T5810] ? __switch_to+0xc89/0x1420 [ 218.216519][ T5810] ? __pfx_kthread+0x10/0x10 [ 218.216554][ T5810] ret_from_fork_asm+0x1a/0x30 [ 218.216680][ T5810] [ 218.218126][ T12] FAULT_INJECTION: forcing a failure. [ 218.218126][ T12] name failslab, interval 1, probability 100, space 0, times 5 [ 218.218216][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 218.218284][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.218330][ T12] Workqueue: events_unbound nsim_dev_trap_report_work [ 218.218449][ T12] Call Trace: [ 218.218480][ T12] [ 218.218503][ T12] dump_stack_lvl+0xe8/0x150 [ 218.218602][ T12] should_fail_ex+0x467/0x600 [ 218.218706][ T12] should_failslab+0xa8/0x100 [ 218.218786][ T12] kmem_cache_alloc_node_noprof+0xae/0x670 [ 218.218860][ T12] ? __alloc_skb+0x1d7/0x7a0 [ 218.218927][ T12] ? __alloc_skb+0x1d7/0x7a0 [ 218.219011][ T12] __alloc_skb+0x1d7/0x7a0 [ 218.219100][ T12] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 218.219226][ T12] ? process_scheduled_works+0xa20/0x14e0 [ 218.219315][ T12] process_scheduled_works+0xa8e/0x14e0 [ 218.219473][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 218.219572][ T12] ? assign_work+0x3cf/0x5d0 [ 218.219664][ T12] worker_thread+0xa47/0xfb0 [ 218.219854][ T12] kthread+0x388/0x470 [ 218.219955][ T12] ? __pfx_worker_thread+0x10/0x10 [ 218.220021][ T12] ? __pfx_kthread+0x10/0x10 [ 218.220115][ T12] ret_from_fork+0x514/0xb70 [ 218.220235][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 218.220328][ T12] ? __switch_to+0xc89/0x1420 [ 218.220425][ T12] ? __pfx_kthread+0x10/0x10 [ 218.220515][ T12] ret_from_fork_asm+0x1a/0x30 [ 218.220627][ T12] [ 218.220777][ T68] FAULT_INJECTION: forcing a failure. [ 218.220777][ T68] name failslab, interval 1, probability 100, space 0, times 4 [ 218.220841][ T68] CPU: 1 UID: 0 PID: 68 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 218.220906][ T68] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.220941][ T68] Workqueue: events_unbound nsim_dev_trap_report_work [ 218.221028][ T68] Call Trace: [ 218.221063][ T68] [ 218.221092][ T68] dump_stack_lvl+0xe8/0x150 [ 218.221220][ T68] should_fail_ex+0x467/0x600 [ 218.221331][ T68] should_failslab+0xa8/0x100 [ 218.221399][ T68] kmem_cache_alloc_node_noprof+0xae/0x670 [ 218.221465][ T68] ? __alloc_skb+0x1d7/0x7a0 [ 218.221531][ T68] ? __alloc_skb+0x1d7/0x7a0 [ 218.221610][ T68] __alloc_skb+0x1d7/0x7a0 [ 218.221689][ T68] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 218.221814][ T68] ? process_scheduled_works+0xa20/0x14e0 [ 218.221891][ T68] process_scheduled_works+0xa8e/0x14e0 [ 218.222046][ T68] ? __pfx_process_scheduled_works+0x10/0x10 [ 218.222134][ T68] ? assign_work+0x3cf/0x5d0 [ 218.222213][ T68] worker_thread+0xa47/0xfb0 [ 218.222383][ T68] kthread+0x388/0x470 [ 218.222481][ T68] ? __pfx_worker_thread+0x10/0x10 [ 218.222569][ T68] ? __pfx_kthread+0x10/0x10 [ 218.222672][ T68] ret_from_fork+0x514/0xb70 [ 218.222769][ T68] ? __pfx_ret_from_fork+0x10/0x10 [ 218.222850][ T68] ? __switch_to+0xc89/0x1420 [ 218.222936][ T68] ? __pfx_kthread+0x10/0x10 [ 218.223024][ T68] ret_from_fork_asm+0x1a/0x30 [ 218.223130][ T68] [ 218.223531][ T4947] FAULT_INJECTION: forcing a failure. [ 218.223531][ T4947] name failslab, interval 1, probability 100, space 0, times 3 [ 218.223607][ T4947] CPU: 1 UID: 0 PID: 4947 Comm: klogd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 218.223665][ T4947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.223697][ T4947] Call Trace: [ 218.223718][ T4947] [ 218.223741][ T4947] dump_stack_lvl+0xe8/0x150 [ 218.223850][ T4947] should_fail_ex+0x467/0x600 [ 218.223980][ T4947] ? __pfx_sock_alloc_inode+0x10/0x10 [ 218.224045][ T4947] should_failslab+0xa8/0x100 [ 218.224127][ T4947] ? __pfx_sock_alloc_inode+0x10/0x10 [ 218.224174][ T4947] kmem_cache_alloc_lru_noprof+0xa7/0x650 [ 218.224251][ T4947] ? sock_alloc_inode+0x2c/0x1a0 [ 218.224299][ T4947] ? sock_alloc_inode+0x2c/0x1a0 [ 218.224386][ T4947] ? __pfx_sock_alloc_inode+0x10/0x10 [ 218.224442][ T4947] sock_alloc_inode+0x2c/0x1a0 [ 218.224499][ T4947] ? __pfx_sock_alloc_inode+0x10/0x10 [ 218.224546][ T4947] alloc_inode+0x6a/0x1b0 [ 218.224612][ T4947] __sock_create+0x12d/0x9d0 [ 218.224702][ T4947] __sys_socket+0xd6/0x1b0 [ 218.224768][ T4947] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.224821][ T4947] __x64_sys_socket+0x7a/0x90 [ 218.224897][ T4947] do_syscall_64+0x174/0x580 [ 218.224985][ T4947] ? clear_bhb_loop+0x40/0x90 [ 218.225054][ T4947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.225121][ T4947] RIP: 0033:0x7f2c1d2ae707 [ 218.225177][ T4947] Code: 54 24 0c e8 6b ac ff ff 83 f8 ff 74 04 8b 44 24 0c 48 83 c4 18 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 e6 0c 00 f7 d8 64 89 01 48 [ 218.225234][ T4947] RSP: 002b:00007ffd22f9cfe8 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 218.225324][ T4947] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f2c1d2ae707 [ 218.225370][ T4947] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 218.225411][ T4947] RBP: 00007f2c1d33a560 R08: 0000000000000073 R09: 0000000000000001 [ 218.225439][ T4947] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 218.225475][ T4947] R13: 00007ffd22f9d110 R14: 000000000000002d R15: 00007ffd22f9d110 [ 218.225564][ T4947] [ 222.180778][ T5599] Bluetooth: hci3: command 0x0406 tx timeout [ 222.181289][ T5599] Bluetooth: hci4: command 0x0406 tx timeout [ 234.791190][ T4907] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 234.848979][ T4907] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 234.858358][ T4907] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 234.889869][ T4907] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 234.892795][ T4907] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 235.201998][ T5603] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 235.233393][ T5603] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 235.238189][ T5603] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 235.240889][ T5603] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 235.241936][ T5603] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 237.136909][ T4907] Bluetooth: hci0: command tx timeout [ 237.458679][ T4907] Bluetooth: hci5: command tx timeout [ 237.868485][ T6508] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 237.911947][ T6508] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 237.951440][ T6889] lo speed is unknown, defaulting to 1000 [ 237.951749][ T6508] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 238.034462][ T6508] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 238.038964][ T6898] lo speed is unknown, defaulting to 1000 [ 238.076211][ T6508] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 238.110114][ T6508] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 238.146963][ T6508] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 238.201025][ T6508] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 239.216727][ T4907] Bluetooth: hci0: command tx timeout [ 239.397896][ T6525] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 239.449456][ T6525] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 239.509773][ T6525] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 239.547164][ T4907] Bluetooth: hci5: command tx timeout [ 239.588463][ T6525] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 239.701315][ T5809] bridge_slave_1: left allmulticast mode [ 239.701351][ T5809] bridge_slave_1: left promiscuous mode [ 239.701628][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.883427][ T5809] bridge_slave_0: left allmulticast mode [ 239.883470][ T5809] bridge_slave_0: left promiscuous mode [ 239.883751][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.738443][ T5809] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.797560][ T5809] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.839555][ T5809] bond0 (unregistering): Released all slaves [ 240.870871][ T6525] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 240.946077][ T6525] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 241.044181][ T6525] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 241.128082][ T6525] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 241.306880][ T4907] Bluetooth: hci0: command tx timeout [ 241.447097][ T5809] hsr_slave_0: left promiscuous mode [ 241.471090][ T5809] hsr_slave_1: left promiscuous mode [ 241.472079][ T5809] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.514834][ T5809] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.617615][ T4907] Bluetooth: hci5: command tx timeout [ 242.091842][ T5809] team0 (unregistering): Port device team_slave_1 removed [ 242.138616][ T5809] team0 (unregistering): Port device team_slave_0 removed [ 242.942313][ T7021] netlink: 48 bytes leftover after parsing attributes in process `syz.4.221'. [ 243.363502][ T7034] netlink: 28 bytes leftover after parsing attributes in process `syz.4.222'. [ 243.363628][ T7034] netlink: 28 bytes leftover after parsing attributes in process `syz.4.222'. [ 243.377060][ T4907] Bluetooth: hci0: command tx timeout [ 243.681023][ T6889] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.681235][ T6889] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.681461][ T6889] bridge_slave_0: entered allmulticast mode [ 243.697101][ T4907] Bluetooth: hci5: command tx timeout [ 243.743782][ T6889] bridge_slave_0: entered promiscuous mode [ 243.801172][ T5253] 8021q: adding VLAN 0 to HW filter on device eth5 [ 243.801936][ T6898] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.802062][ T6898] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.802267][ T6898] bridge_slave_0: entered allmulticast mode [ 243.805304][ T6898] bridge_slave_0: entered promiscuous mode [ 243.905736][ T6889] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.905868][ T6889] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.906117][ T6889] bridge_slave_1: entered allmulticast mode [ 243.926428][ T6889] bridge_slave_1: entered promiscuous mode [ 243.938499][ T6898] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.938621][ T6898] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.938862][ T6898] bridge_slave_1: entered allmulticast mode [ 243.984531][ T6898] bridge_slave_1: entered promiscuous mode [ 243.996450][ T6508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.159771][ T6889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.222552][ T6898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.243996][ T6889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.275048][ T6898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.466966][ T6889] team0: Port device team_slave_0 added [ 244.602505][ T6898] team0: Port device team_slave_0 added [ 244.618316][ T6889] team0: Port device team_slave_1 added [ 244.622265][ T6898] team0: Port device team_slave_1 added [ 244.663004][ T6508] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.740462][ T6889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.740479][ T6889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 244.740501][ T6889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.771731][ T6898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.771792][ T6898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 244.771876][ T6898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.861101][ T6889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.861115][ T6889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 244.861137][ T6889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.915602][ T1318] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.926836][ T1318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.944786][ T6898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.944805][ T6898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 244.944836][ T6898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.104399][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.104501][ T5809] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.288242][ T6889] hsr_slave_0: entered promiscuous mode [ 245.289838][ T6889] hsr_slave_1: entered promiscuous mode [ 245.290895][ T6889] debugfs: 'hsr0' already exists in 'hsr' [ 245.290923][ T6889] Cannot create hsr debugfs directory [ 245.329947][ T6898] hsr_slave_0: entered promiscuous mode [ 245.331481][ T6898] hsr_slave_1: entered promiscuous mode [ 245.332511][ T6898] debugfs: 'hsr0' already exists in 'hsr' [ 245.332537][ T6898] Cannot create hsr debugfs directory [ 245.366142][ T6525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.646773][ T7054] NFSD: Unable to initialize client recovery tracking! (-110) [ 245.646797][ T7054] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 245.646811][ T7054] NFSD: starting 90-second grace period (net f0000537) [ 246.005832][ T6525] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.023709][ T5253] 8021q: adding VLAN 0 to HW filter on device eth6 [ 246.156777][ T1318] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.156974][ T1318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.269138][ T998] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.269268][ T998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.904866][ T7083] netlink: 112 bytes leftover after parsing attributes in process `syz.4.227'. [ 246.950761][ T7080] netlink: 16 bytes leftover after parsing attributes in process `syz.4.227'. [ 247.480857][ T7096] netlink: 4 bytes leftover after parsing attributes in process `syz.4.229'. [ 247.739160][ T6889] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 247.838923][ T6889] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 247.865825][ T6889] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 247.992515][ T6889] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 248.017171][ T6889] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 248.139322][ T6889] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 248.184456][ T6889] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 248.275712][ T6889] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 248.530579][ T5253] 8021q: adding VLAN 0 to HW filter on device eth7 [ 248.612965][ T6508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.626944][ T7112] NFSD: Unable to initialize client recovery tracking! (-110) [ 249.626966][ T7112] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 249.626979][ T7112] NFSD: starting 90-second grace period (net f0000537) [ 250.041541][ T6525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.809570][ T6889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.912744][ T6508] veth0_vlan: entered promiscuous mode [ 251.109184][ T6889] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.114111][ T6508] veth1_vlan: entered promiscuous mode [ 251.194467][ T1294] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.194565][ T1294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.255477][ T1294] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.255575][ T1294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.670317][ T6508] veth0_macvtap: entered promiscuous mode [ 251.886105][ T6508] veth1_macvtap: entered promiscuous mode [ 252.035253][ T6525] veth0_vlan: entered promiscuous mode [ 252.446032][ T6525] veth1_vlan: entered promiscuous mode [ 252.592827][ T5603] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 252.608824][ T5603] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 252.613978][ T5603] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 252.648213][ T5603] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 252.682872][ T5603] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 252.776671][ T6898] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 252.937718][ T6898] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 253.003207][ T6898] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 253.052281][ T6898] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 253.094028][ T6898] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 253.161522][ T6898] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 253.165786][ T6898] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 253.239404][ T6898] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 253.512009][ T7205] netlink: 24 bytes leftover after parsing attributes in process `syz.4.235'. [ 253.512067][ T7205] netlink: 4 bytes leftover after parsing attributes in process `syz.4.235'. [ 254.462692][ T4907] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 254.506322][ T4907] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 254.516163][ T4907] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 254.541355][ T4907] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 254.542304][ T4907] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 254.906831][ T5603] Bluetooth: hci4: command tx timeout [ 255.545071][ T7233] tipc: Resetting bearer [ 255.952458][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.952529][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.006661][ T7189] lo speed is unknown, defaulting to 1000 [ 256.030496][ T6889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.756671][ T7214] lo speed is unknown, defaulting to 1000 [ 256.900523][ T5603] Bluetooth: hci6: command tx timeout [ 256.976760][ T5603] Bluetooth: hci4: command tx timeout [ 257.041892][ T6898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.438399][ T6898] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.520235][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.520467][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.619418][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.652400][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.735989][ T6889] veth0_vlan: entered promiscuous mode [ 258.028793][ T6889] veth1_vlan: entered promiscuous mode [ 258.169139][ T7189] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.169366][ T7189] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.169638][ T7189] bridge_slave_0: entered allmulticast mode [ 258.172391][ T7189] bridge_slave_0: entered promiscuous mode [ 258.243267][ T7189] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.243355][ T7189] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.243813][ T7189] bridge_slave_1: entered allmulticast mode [ 258.246096][ T7189] bridge_slave_1: entered promiscuous mode [ 258.418287][ T998] bridge_slave_1: left allmulticast mode [ 258.418330][ T998] bridge_slave_1: left promiscuous mode [ 258.420655][ T998] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.522008][ T998] bridge_slave_0: left allmulticast mode [ 258.522041][ T998] bridge_slave_0: left promiscuous mode [ 258.522229][ T998] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.977017][ T5603] Bluetooth: hci6: command tx timeout [ 259.058118][ T5603] Bluetooth: hci4: command tx timeout [ 259.332125][ T998] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.407557][ T998] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.443763][ T998] bond0 (unregistering): Released all slaves [ 259.550433][ T7189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.649751][ T7189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.737672][ T7214] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.737767][ T7214] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.738245][ T7214] bridge_slave_0: entered allmulticast mode [ 259.740875][ T7214] bridge_slave_0: entered promiscuous mode [ 259.845329][ T7214] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.845479][ T7214] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.845706][ T7214] bridge_slave_1: entered allmulticast mode [ 259.854977][ T7214] bridge_slave_1: entered promiscuous mode [ 259.891100][ T7189] team0: Port device team_slave_0 added [ 259.970717][ T7189] team0: Port device team_slave_1 added [ 260.048088][ T7214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.196880][ T998] hsr_slave_0: left promiscuous mode [ 260.216852][ T998] hsr_slave_1: left promiscuous mode [ 260.218069][ T998] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.258317][ T998] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.351229][ T998] veth1_macvtap: left promiscuous mode [ 260.351343][ T998] veth0_macvtap: left promiscuous mode [ 260.351562][ T998] veth1_vlan: left promiscuous mode [ 260.351704][ T998] veth0_vlan: left promiscuous mode [ 261.061725][ T5603] Bluetooth: hci6: command tx timeout [ 261.077371][ T998] team0 (unregistering): Port device team_slave_1 removed [ 261.136874][ T5603] Bluetooth: hci4: command tx timeout [ 261.137779][ T998] team0 (unregistering): Port device team_slave_0 removed [ 261.382467][ T7214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.383515][ T7189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.383529][ T7189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 261.383561][ T7189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.573904][ T7189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.573921][ T7189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 261.573950][ T7189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.723490][ T7214] team0: Port device team_slave_0 added [ 261.749132][ T7214] team0: Port device team_slave_1 added [ 261.752154][ T6889] veth0_macvtap: entered promiscuous mode [ 262.004998][ T7214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.005031][ T7214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 262.005067][ T7214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.087290][ T7189] hsr_slave_0: entered promiscuous mode [ 262.088406][ T7189] hsr_slave_1: entered promiscuous mode [ 262.094411][ T7189] debugfs: 'hsr0' already exists in 'hsr' [ 262.094441][ T7189] Cannot create hsr debugfs directory [ 262.095255][ T6889] veth1_macvtap: entered promiscuous mode [ 262.131056][ T7214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.131071][ T7214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 262.131093][ T7214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.804976][ T5253] 8021q: adding VLAN 0 to HW filter on device eth5 [ 262.858990][ T7214] hsr_slave_0: entered promiscuous mode [ 262.860613][ T7214] hsr_slave_1: entered promiscuous mode [ 262.861423][ T7214] debugfs: 'hsr0' already exists in 'hsr' [ 262.861443][ T7214] Cannot create hsr debugfs directory [ 262.946903][ T6889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.111099][ T6889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.137074][ T5603] Bluetooth: hci6: command tx timeout [ 264.080170][ T6898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.102435][ T5253] 8021q: adding VLAN 0 to HW filter on device eth6 [ 265.708121][ T5809] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.708146][ T5809] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.947681][ T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.538292][ T5809] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.538316][ T5809] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.903794][ T6898] veth0_vlan: entered promiscuous mode [ 266.976924][ T6898] veth1_vlan: entered promiscuous mode [ 267.014128][ T1318] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.295491][ T6898] veth0_macvtap: entered promiscuous mode [ 267.356385][ T6898] veth1_macvtap: entered promiscuous mode [ 267.431592][ T6898] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.477288][ T6898] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.208082][ T66] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.211545][ T66] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.212376][ T66] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.392664][ T7357] netlink: 4 bytes leftover after parsing attributes in process `syz.8.245'. [ 269.954989][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.955017][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.158117][ T998] bridge_slave_1: left allmulticast mode [ 270.158154][ T998] bridge_slave_1: left promiscuous mode [ 270.158425][ T998] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.429326][ T998] bridge_slave_0: left allmulticast mode [ 270.429371][ T998] bridge_slave_0: left promiscuous mode [ 270.429684][ T998] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.164357][ T7389] NFSD: Failed to start, no listeners configured. [ 271.658536][ T998] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 271.718039][ T998] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 271.759469][ T998] bond0 (unregistering): Released all slaves [ 272.469361][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.469398][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.477586][ T5810] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.811101][ T998] hsr_slave_0: left promiscuous mode [ 272.861700][ T998] hsr_slave_1: left promiscuous mode [ 272.862820][ T998] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.983119][ T998] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.067723][ T998] veth1_vlan: left promiscuous mode [ 273.067968][ T998] veth0_vlan: left promiscuous mode [ 273.897996][ T998] team0 (unregistering): Port device team_slave_1 removed [ 273.990555][ T998] team0 (unregistering): Port device team_slave_0 removed [ 274.154811][ T7415] svc: failed to register lockdv1 RPC service (errno 111). [ 274.352087][ T5810] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.517288][ T5991] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 275.611901][ T7422] ceph: No mds server is up or the cluster is laggy [ 275.725105][ T36] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 275.861560][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.714137][ T7415] svc: failed to register nfsdv3 RPC service (errno 512). [ 277.714385][ T7415] svc: failed to register nfsaclv3 RPC service (errno 512). [ 277.714403][ T7415] failed to unregister tcp with rpcbind [ 277.801301][ T7415] svc: failed to register nfsdv3 RPC service (errno 97). [ 277.801329][ T7415] svc: failed to register nfsaclv3 RPC service (errno 97). [ 277.801345][ T7415] failed to unregister tcp with rpcbind [ 278.335446][ T7459] netlink: 76 bytes leftover after parsing attributes in process `syz.4.266'. [ 278.440111][ T7458] netlink: 56 bytes leftover after parsing attributes in process `syz.4.266'. [ 283.317610][ T7526] svc: failed to register lockdv1 RPC service (errno 111). [ 283.353937][ T7511] lo speed is unknown, defaulting to 1000 [ 283.668581][ T7189] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 283.892551][ T7189] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 283.935894][ T7189] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 284.045350][ T7189] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 284.120276][ T5991] ------------[ cut here ]------------ [ 284.120293][ T5991] con->v1.connect_seq != le32_to_cpu(con->v1.in_reply.connect_seq) [ 284.120311][ T5991] WARNING: net/ceph/messenger_v1.c:902 at ceph_con_v1_try_read+0x3335/0x6eb0, CPU#1: kworker/1:7/5991 [ 284.120356][ T5991] Modules linked in: [ 284.120379][ T5991] CPU: 1 UID: 0 PID: 5991 Comm: kworker/1:7 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 284.120404][ T5991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 284.120416][ T5991] Workqueue: ceph-msgr ceph_con_workfn [ 284.120440][ T5991] RIP: 0010:ceph_con_v1_try_read+0x3335/0x6eb0 [ 284.120467][ T5991] Code: 45 31 e4 e9 3f d1 ff ff e8 68 a6 be f6 90 0f 0b 90 e9 cd d3 ff ff e8 5a a6 be f6 90 0f 0b 90 e9 dd e6 ff ff e8 4c a6 be f6 90 <0f> 0b 90 e9 f4 e7 ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 30 d1 [ 284.120483][ T5991] RSP: 0018:ffffc90006127180 EFLAGS: 00010293 [ 284.120497][ T5991] RAX: ffffffff8b073574 RBX: 0000000000000001 RCX: ffff888028ba9f00 [ 284.120509][ T5991] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 284.120519][ T5991] RBP: ffffc90006127a78 R08: 0000000000000000 R09: 0000000000000000 [ 284.120530][ T5991] R10: 0000000000000100 R11: 000000000000000d R12: ffff888054e08488 [ 284.120542][ T5991] R13: fffff52000c24e70 R14: dffffc0000000000 R15: 00000000ffffffff [ 284.120554][ T5991] FS: 0000000000000000(0000) GS:ffff888125d3e000(0000) knlGS:0000000000000000 [ 284.120568][ T5991] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 284.120579][ T5991] CR2: 000000110c2d7ea7 CR3: 000000003f0b0000 CR4: 00000000003526f0 [ 284.120595][ T5991] Call Trace: [ 284.120603][ T5991] [ 284.120650][ T5991] ? __pfx_ceph_con_v1_try_read+0x10/0x10 [ 284.120686][ T5991] ? __local_bh_enable+0x1e1/0x2f0 [ 284.120712][ T5991] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 284.120737][ T5991] ? lockdep_hardirqs_on+0x7a/0x110 [ 284.120776][ T5991] ? __pfx_inet_sendmsg+0x10/0x10 [ 284.120793][ T5991] ? rcu_is_watching+0x15/0xb0 [ 284.120815][ T5991] ? __pfx_inet_sendmsg+0x10/0x10 [ 284.120830][ T5991] ? sock_sendmsg_nosec+0xc2/0x180 [ 284.120887][ T5991] ? sock_sendmsg+0x1ca/0x2d0 [ 284.120920][ T5991] ? unwind_next_frame+0x8f/0x2550 [ 284.120944][ T5991] ? __pfx_sock_sendmsg+0x10/0x10 [ 284.120980][ T5991] ? iov_iter_kvec+0xb8/0x180 [ 284.121013][ T5991] ? ceph_con_flag_clear+0x38/0x50 [ 284.121035][ T5991] ? ceph_con_v1_try_write+0x3808/0x3dc0 [ 284.121077][ T5991] ? __lock_acquire+0x683/0x2ce0 [ 284.121108][ T5991] ? __lock_acquire+0x683/0x2ce0 [ 284.121130][ T5991] ? __lock_acquire+0x683/0x2ce0 [ 284.121166][ T5991] ? look_up_lock_class+0x57/0x110 [ 284.121197][ T5991] ? register_lock_class+0x31/0x2e0 [ 284.121228][ T5991] ? __lock_acquire+0x683/0x2ce0 [ 284.121262][ T5991] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 284.121287][ T5991] ? lockdep_hardirqs_on+0x7a/0x110 [ 284.121310][ T5991] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 284.121334][ T5991] ? mutex_lock_nested+0x152/0x1d0 [ 284.121351][ T5991] ? ceph_con_workfn+0x3b/0x14a0 [ 284.121377][ T5991] ceph_con_workfn+0x208/0x14a0 [ 284.121402][ T5991] ? rcu_is_watching+0x15/0xb0 [ 284.121426][ T5991] ? process_scheduled_works+0xa20/0x14e0 [ 284.121447][ T5991] process_scheduled_works+0xa8e/0x14e0 [ 284.121490][ T5991] ? __pfx_process_scheduled_works+0x10/0x10 [ 284.121516][ T5991] ? assign_work+0x3cf/0x5d0 [ 284.121541][ T5991] worker_thread+0xa47/0xfb0 [ 284.121574][ T5991] ? __kthread_parkme+0x71/0x1f0 [ 284.121607][ T5991] kthread+0x388/0x470 [ 284.121632][ T5991] ? __pfx_worker_thread+0x10/0x10 [ 284.121653][ T5991] ? __pfx_kthread+0x10/0x10 [ 284.121680][ T5991] ret_from_fork+0x514/0xb70 [ 284.121712][ T5991] ? __pfx_ret_from_fork+0x10/0x10 [ 284.121743][ T5991] ? __switch_to+0xc89/0x1420 [ 284.121770][ T5991] ? __pfx_kthread+0x10/0x10 [ 284.121800][ T5991] ret_from_fork_asm+0x1a/0x30 [ 284.121835][ T5991] [ 284.121846][ T5991] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 284.121860][ T5991] CPU: 1 UID: 0 PID: 5991 Comm: kworker/1:7 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 284.121880][ T5991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 284.121891][ T5991] Workqueue: ceph-msgr ceph_con_workfn [ 284.121916][ T5991] Call Trace: [ 284.121923][ T5991] [ 284.121929][ T5991] vpanic+0x56c/0xa60 [ 284.121947][ T5991] ? __pfx__printk+0x10/0x10 [ 284.121967][ T5991] ? __pfx_vpanic+0x10/0x10 [ 284.121982][ T5991] ? is_bpf_text_address+0x292/0x2b0 [ 284.122002][ T5991] ? is_bpf_text_address+0x26/0x2b0 [ 284.122029][ T5991] panic+0xc5/0xd0 [ 284.122044][ T5991] ? __pfx_panic+0x10/0x10 [ 284.122069][ T5991] ? ret_from_fork_asm+0x1a/0x30 [ 284.122090][ T5991] __warn+0x315/0x4c0 [ 284.122107][ T5991] ? ceph_con_v1_try_read+0x3335/0x6eb0 [ 284.122137][ T5991] ? ceph_con_v1_try_read+0x3335/0x6eb0 [ 284.122163][ T5991] __report_bug+0x276/0x570 [ 284.122193][ T5991] ? ceph_con_v1_try_read+0x3335/0x6eb0 [ 284.122235][ T5991] ? __pfx___report_bug+0x10/0x10 [ 284.122258][ T5991] ? __local_bh_enable+0x1e1/0x2f0 [ 284.122283][ T5991] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 284.122304][ T5991] ? lockdep_hardirqs_on+0x7a/0x110 [ 284.122334][ T5991] ? ceph_con_v1_try_read+0x3335/0x6eb0 [ 284.122359][ T5991] report_bug+0x16a/0x220 [ 284.122383][ T5991] ? ceph_con_v1_try_read+0x3335/0x6eb0 [ 284.122408][ T5991] ? ceph_con_v1_try_read+0x3337/0x6eb0 [ 284.122433][ T5991] handle_bug+0x9c/0x200 [ 284.122462][ T5991] exc_invalid_op+0x1a/0x50 [ 284.122487][ T5991] asm_exc_invalid_op+0x1a/0x20 [ 284.122505][ T5991] RIP: 0010:ceph_con_v1_try_read+0x3335/0x6eb0 [ 284.122533][ T5991] Code: 45 31 e4 e9 3f d1 ff ff e8 68 a6 be f6 90 0f 0b 90 e9 cd d3 ff ff e8 5a a6 be f6 90 0f 0b 90 e9 dd e6 ff ff e8 4c a6 be f6 90 <0f> 0b 90 e9 f4 e7 ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 30 d1 [ 284.122548][ T5991] RSP: 0018:ffffc90006127180 EFLAGS: 00010293 [ 284.122564][ T5991] RAX: ffffffff8b073574 RBX: 0000000000000001 RCX: ffff888028ba9f00 [ 284.122576][ T5991] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 284.122586][ T5991] RBP: ffffc90006127a78 R08: 0000000000000000 R09: 0000000000000000 [ 284.122598][ T5991] R10: 0000000000000100 R11: 000000000000000d R12: ffff888054e08488 [ 284.122609][ T5991] R13: fffff52000c24e70 R14: dffffc0000000000 R15: 00000000ffffffff [ 284.122630][ T5991] ? ceph_con_v1_try_read+0x3334/0x6eb0 [ 284.122704][ T5991] ? __pfx_ceph_con_v1_try_read+0x10/0x10 [ 284.122745][ T5991] ? __local_bh_enable+0x1e1/0x2f0 [ 284.122772][ T5991] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 284.122793][ T5991] ? lockdep_hardirqs_on+0x7a/0x110 [ 284.122820][ T5991] ? __pfx_inet_sendmsg+0x10/0x10 [ 284.122840][ T5991] ? rcu_is_watching+0x15/0xb0 [ 284.122865][ T5991] ? __pfx_inet_sendmsg+0x10/0x10 [ 284.122880][ T5991] ? sock_sendmsg_nosec+0xc2/0x180 [ 284.122910][ T5991] ? sock_sendmsg+0x1ca/0x2d0 [ 284.122936][ T5991] ? unwind_next_frame+0x8f/0x2550 [ 284.122960][ T5991] ? __pfx_sock_sendmsg+0x10/0x10 [ 284.122995][ T5991] ? iov_iter_kvec+0xb8/0x180 [ 284.123019][ T5991] ? ceph_con_flag_clear+0x38/0x50 [ 284.123041][ T5991] ? ceph_con_v1_try_write+0x3808/0x3dc0 [ 284.123084][ T5991] ? __lock_acquire+0x683/0x2ce0 [ 284.123114][ T5991] ? __lock_acquire+0x683/0x2ce0 [ 284.123137][ T5991] ? __lock_acquire+0x683/0x2ce0 [ 284.123156][ T5991] ? look_up_lock_class+0x57/0x110 [ 284.123180][ T5991] ? register_lock_class+0x31/0x2e0 [ 284.123203][ T5991] ? __lock_acquire+0x683/0x2ce0 [ 284.123249][ T5991] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 284.123275][ T5991] ? lockdep_hardirqs_on+0x7a/0x110 [ 284.123297][ T5991] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 284.123320][ T5991] ? mutex_lock_nested+0x152/0x1d0 [ 284.123337][ T5991] ? ceph_con_workfn+0x3b/0x14a0 [ 284.123364][ T5991] ceph_con_workfn+0x208/0x14a0 [ 284.123390][ T5991] ? rcu_is_watching+0x15/0xb0 [ 284.123414][ T5991] ? process_scheduled_works+0xa20/0x14e0 [ 284.123438][ T5991] process_scheduled_works+0xa8e/0x14e0 [ 284.123482][ T5991] ? __pfx_process_scheduled_works+0x10/0x10 [ 284.123509][ T5991] ? assign_work+0x3cf/0x5d0 [ 284.123535][ T5991] worker_thread+0xa47/0xfb0 [ 284.123571][ T5991] ? __kthread_parkme+0x71/0x1f0 [ 284.123603][ T5991] kthread+0x388/0x470 [ 284.123629][ T5991] ? __pfx_worker_thread+0x10/0x10 [ 284.123649][ T5991] ? __pfx_kthread+0x10/0x10 [ 284.123676][ T5991] ret_from_fork+0x514/0xb70 [ 284.123707][ T5991] ? __pfx_ret_from_fork+0x10/0x10 [ 284.123737][ T5991] ? __switch_to+0xc89/0x1420 [ 284.123765][ T5991] ? __pfx_kthread+0x10/0x10 [ 284.123793][ T5991] ret_from_fork_asm+0x1a/0x30 [ 284.123826][ T5991] [ 284.126377][ T5991] Kernel Offset: disabled