last executing test programs: 2m12.21085469s ago: executing program 32 (id=75): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='-4\n\x00', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='udp 2049\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='1\n\x00', 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000240)={0x2, 0x8008, @loopback}, 0x10) sendto(r3, &(0x7f0000000280)='12345678\x00', 0x8, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 2m11.178524445s ago: executing program 33 (id=91): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='-2 -3 +4\n\x00', 0x9) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r1, &(0x7f0000000200)={0x2, 0x800, @empty}, 0x10) listen(r1, 0x80) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='3\x00', 0x1) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='8\n\x00', 0x2) close(r3) r4 = socket$inet_tcp(0x2, 0x1, 0x6) connect$inet(r4, &(0x7f0000000200)={0x2, 0x800, @loopback}, 0x10) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 2m11.127219956s ago: executing program 34 (id=99): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x9902, @loopback}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000120)={0x2, 0x9a02, @loopback}, 0x10) r2 = socket$inet(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x9b02, @loopback}, 0x10) r3 = socket$inet(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000160)={0x2, 0x9c02, @loopback}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x2, 0x0) write(r4, &(0x7f0000000240)='tcp 2049\x00', 0x9) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x2, 0x0) write(r5, &(0x7f00000002c0)='1\x00', 0x2) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 2m3.503877511s ago: executing program 35 (id=133): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/fs/nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc/fs/nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/fs/nfsd/ports\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='tcp 2049\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/fs/nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='1\n\x00', 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r3, &(0x7f0000000100)="000000010000000000000002000186a30000000300000000000000010000002000"/64, 0x40, 0x0, &(0x7f0000000200)={0x2, 0x7f1, @loopback}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) read(r4, &(0x7f0000000300)=""/100, 0x64) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)={0x20, 0x25, 0x301, 0x0, 0x0, {0x2}}, 0x20}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)={0x20, 0x25, 0x301, 0x0, 0x0, {0x2}}, 0x20}}, 0x0) 2m0.741851297s ago: executing program 4 (id=176): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x1001}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', 0x1}) write(r0, &(0x7f0000000300)="4500001c00000000401176c301010101010101011234123400080000", 0x1c) 2m0.544527252s ago: executing program 4 (id=177): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='none\x00', &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/net/ipv6/conf/all/use_tempaddr\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='2\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/sys/net/ipv6/conf/default/use_tempaddr\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='2\n', 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/sys/net/ipv6/conf/syzkaller0/use_tempaddr\x00', 0x1, 0x0) write(r5, &(0x7f0000000380)='2\n', 0x2) r6 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000200)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40, r4}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000100)={'syzkaller0\x00'}) 1m58.869613663s ago: executing program 4 (id=179): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a300000000098000000060a010400000000000000000100000008000b400000000070000480340001800b000100657874686472000024000280080001400000000c080006400000000008000440000000220500020007000000380001800c0001006269747769736500280002800800034000000004080001400000001408000240000000120400058008000640000000010900010073797a30"], 0x10c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000100)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c0001800500010003000000060004000a0a0000060005000a0a0000"], 0xbc}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r2, &(0x7f0000000600)={0x2, 0x6bb, @loopback}, 0x10) listen(r2, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r3, &(0x7f0000000700)={0x2, 0x3039, @loopback}, 0x10) connect$inet(r3, &(0x7f0000000800)={0x2, 0x6bb, @loopback}, 0x10) r4 = accept$inet(r2, 0x0, 0x0) write(r3, &(0x7f0000000900)="009c00011a2b3c4d00010000010000000000000300000003000000016c6f63616c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c696e757800"/172, 0x9c) write(r4, &(0x7f0000000a00)="009c00011a2b3c4d00020000010001000000000300000003000000016c6f63616c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c696e757800"/172, 0x9c) write(r3, &(0x7f0000000b00)="00a800011a2b3c4d00070000000100010000012c05f5e1000000000300000003004000"/168, 0xa8) write(r4, &(0x7f0000000c00)="002000011a2b3c4d00080000000200010100000005f5e1000040000000000000", 0x20) 1m58.237004088s ago: executing program 7 (id=156): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'\x00', 0x1001}) r1 = socket$packet(0x11, 0x3, 0x300) bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$packet(r1, &(0x7f0000000300)="ffffffffffff00000000000008004500001c00000000401176c301010101010101011234123400080000", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x300, 0x2, 0x1, 0x0, 0x6, @broadcast}, 0x14) read(r0, &(0x7f0000000400), 0x1000) 1m58.080432082s ago: executing program 7 (id=180): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000140)='1\x00', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000120)='./proc/sys/net/sctp/reconf_enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='1\x00', 0x1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180)=0x2, 0x4) setsockopt(r2, 0x84, 0x7d, &(0x7f0000000200)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x7}, 0x8) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt(r3, 0x84, 0x7d, &(0x7f0000000300)='\x00\x00\x00\x00', 0x4) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x80}, 0x8) bind(r2, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x10) listen(r2, 0x5) connect(r3, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) r4 = accept(r2, 0x0, 0x0) sendmsg$inet_sctp(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000700)="123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890", 0x90}], 0x1, 0x0, 0x0, 0x8000}, 0x8000) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000900), 0x4) 1m57.997446544s ago: executing program 7 (id=181): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='3\n\x00', 0x2) write(r1, &(0x7f0000000200)='4\n\x00', 0x2) write(r1, &(0x7f0000000240)='5\n\x00', 0x2) write(r1, &(0x7f0000000280)='6\n\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/versions\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='-2 -3\n\x00', 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000380)='1\n\x00', 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f00000003c0)={0x2, 0x801, @loopback}, 0x10) 1m57.955542765s ago: executing program 4 (id=182): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ed) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/sctp/addip_noauth_enable\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='1\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/sys/net/sctp/addip_enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='1\x00', 0x2) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000000)=@in={0x2, 0x2345, @loopback}, 0x10) listen(r2, 0x5) r3 = socket(0x2, 0x3, 0x84) sendto$inet(r3, &(0x7f0000000100)="1234234500000000000000000400000800000000c100001400000001000500087f000001c00100087f000002", 0x2c, 0x0, &(0x7f0000000200)={0x2, 0x2345, @loopback}, 0x10) 1m57.824668538s ago: executing program 4 (id=183): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x8) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x1, 0x0, 0x12}, 0x10) listen(r0, 0x5) syz_emit_ethernet(0x13, &(0x7f0000000200)={@local, @remote, @void, {@llc={0x4, {@llc={0x12, 0x12, 'o\x00\x00'}}}}}, 0x0) syz_emit_ethernet(0x12, &(0x7f0000000300)={@local, @remote, @void, {@llc={0x4, {@llc={0x12, 0x12, "0108"}}}}}, 0x0) 1m57.798367479s ago: executing program 4 (id=184): mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./proc\x00', &(0x7f0000000740)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='+3 +4\n\x00', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='udp 2049\n\x00', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='1\n\x00', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000300)={0x2, 0x8008, @loopback}, 0x10) write(r4, &(0x7f0000000400)="000000010000000000000002000186a30000000300000001000000010000001c00"/64, 0x40) nanosleep(&(0x7f0000000500)={0x0, 0xbebc200}, 0x0) read(r3, &(0x7f0000000600), 0x1000) 1m47.770295831s ago: executing program 36 (id=159): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./nfsd\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='tcp 2049\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='\\x01000000 2000000000 0 0 0 krb5 \\x00000000ffffffff0000000000000000120000000000000000000000000000000000000000000000000000000000000000000000 client\n', 0x96) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000400)={0x2, 0x1, @loopback}, 0x10) write(r2, &(0x7f0000000500)="80000060000000010000000000000002000186a0000000030000000000000006000000010000001800000001000000000000000400000001000000020000000401000000000000060000000000000000000000040000000000000020020100ff00"/124, 0x64) 1m45.489433116s ago: executing program 8 (id=185): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, r2, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r4, &(0x7f0000000500)="01000000", 0x4) read(r3, &(0x7f0000000000), 0x4) write(r4, &(0x7f0000000600)="00001000003300004000000000000000", 0x10) read(r3, &(0x7f0000000140), 0x10) sendmsg$xdp(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) 1m45.392426429s ago: executing program 8 (id=186): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='tcp 2049\n\x00', 0x9) nanosleep(&(0x7f0000000200)={0x0, 0x1dcd6500}, 0x0) 1m44.377292614s ago: executing program 37 (id=178): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='nfsd\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='-3 +4.0\n', 0x8) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='2\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='\\x01000000 2000000000 0 0 0 krb5 \\x01000000ffffff7f000000000000000011000000000102030405060708090a0b0c0d0e0f\n', 0x85) close(r3) r4 = socket$inet(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000500)={0x2, 0x801, @loopback}, 0x10) write(r4, &(0x7f0000000600)="80000070123456780000000000000002000186a300000004000000000000000600000024000000010000000100000001000000020000000401000000000000060000000800000001000000000000000100000020040405ff00000000000000000000000100"/116, 0x74) read(r4, &(0x7f0000000800)=""/100, 0x100) close(r4) 1m42.321729533s ago: executing program 38 (id=181): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='3\n\x00', 0x2) write(r1, &(0x7f0000000200)='4\n\x00', 0x2) write(r1, &(0x7f0000000240)='5\n\x00', 0x2) write(r1, &(0x7f0000000280)='6\n\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/versions\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='-2 -3\n\x00', 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000380)='1\n\x00', 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f00000003c0)={0x2, 0x801, @loopback}, 0x10) 1m42.206814696s ago: executing program 39 (id=184): mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./proc\x00', &(0x7f0000000740)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='+3 +4\n\x00', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='udp 2049\n\x00', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='1\n\x00', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000300)={0x2, 0x8008, @loopback}, 0x10) write(r4, &(0x7f0000000400)="000000010000000000000002000186a30000000300000001000000010000001c00"/64, 0x40) nanosleep(&(0x7f0000000500)={0x0, 0xbebc200}, 0x0) read(r3, &(0x7f0000000600), 0x1000) 1m41.326555597s ago: executing program 9 (id=187): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x0, 0x0, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x0, 0x0, 'bridge0\x00'}, @IFLA_LINKINFO={0x0, 0x0, 0x0, 0x0, @bridge={{0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newlink={0x0, 0x0, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x0, 0x0, 'veth0\x00'}, @IFLA_LINKINFO={0x0, 0x0, 0x0, 0x0, @veth={{0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, @void}}}]}, 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@setlink={0x0, 0x0, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x0, 0x0, r1}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@setlink={0x0, 0x0, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x1, 0x1}}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@setlink={0x0, 0x0, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x1, 0x1}}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@setlink={0x0, 0x0, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x0, 0x0, 0x0, 0x0, @bridge={{0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, [@IFLA_BR_MCAST_SNOOPING={0x0, 0x0, 0x1}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@RTM_NEWMDB={0x0, 0x0, 0x601, 0x0, 0x0, {0x7, r1}, [@MDBA_SET_ENTRY={0x0, 0x1, {r2, 0x1, 0x0, 0x0, {@ip4=@multicast1, 0x800}}}]}, 0x38}}, 0x0) 1m41.256069059s ago: executing program 9 (id=190): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='-2 -3 +4\n\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='tcp 20000\n\x00', 0xa) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='1\n\x00', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='tcp 20000\n\x00', 0xa) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r4, &(0x7f0000000240)='1\n\x00', 0x2) close(r4) r5 = socket$inet(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000280)={0x2, 0x4e20, @loopback}, 0x10) write(r5, &(0x7f0000000500)='test', 0x4) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) r6 = socket$inet(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000380)={0x2, 0x4e20, @loopback}, 0x10) write(r6, &(0x7f0000000500)='test', 0x4) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 1m30.274166085s ago: executing program 40 (id=186): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='tcp 2049\n\x00', 0x9) nanosleep(&(0x7f0000000200)={0x0, 0x1dcd6500}, 0x0) 1m28.81669263s ago: executing program 1 (id=276): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="200000003f00010001000000000000000101000000000000080001006f7673300800020000000000"], 0x20}], 0x1}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="480000004100010001000000000000000101000000000000280001001000040001020304050606050403020106000600080000000c000e000a0000000800030004000100"], 0x48}], 0x1}, 0x0) 1m28.607901175s ago: executing program 1 (id=277): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a300000000098000000060a010400000000000000000100000008000b400000000070000480340001800b000100657874686472000024000280080001400000000c080006400000000008000440000000220500020007000000380001800c0001006269747769736500280002800800034000000004080001400000001408000240000000120400058008000640000000010900010073797a30"], 0x10c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000100)={&(0x7f0000000300), 0xc, 0x0}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r2, &(0x7f0000000600)={0x2, 0x6bb, @loopback}, 0x10) listen(r2, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r3, &(0x7f0000000700)={0x2, 0x3039, @loopback}, 0x10) connect$inet(r3, &(0x7f0000000800)={0x2, 0x6bb, @loopback}, 0x10) r4 = accept$inet(r2, 0x0, 0x0) write(r3, &(0x7f0000000900)="009c00011a2b3c4d00010000010000000000000300000003000000016c6f63616c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c696e757800"/172, 0x9c) write(r4, &(0x7f0000000a00)="009c00011a2b3c4d00020000010001000000000300000003000000016c6f63616c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c696e757800"/172, 0x9c) write(r3, &(0x7f0000000b00)="00a800011a2b3c4d00070000000100010000012c05f5e1000000000300000003004000"/168, 0xa8) write(r4, &(0x7f0000000c00)="002000011a2b3c4d00080000000200010100000005f5e1000040000000000000", 0x20) 1m28.549355507s ago: executing program 1 (id=278): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r2, &(0x7f0000000600)={0x2, 0x6bb, @loopback}, 0x10) listen(r2, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r3, &(0x7f0000000700)={0x2, 0x3039, @loopback}, 0x10) connect$inet(r3, &(0x7f0000000800)={0x2, 0x6bb, @loopback}, 0x10) r4 = accept$inet(r2, 0x0, 0x0) write(r3, &(0x7f0000000900)="009c00011a2b3c4d00010000010000000000000300000003000000016c6f63616c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c696e757800"/170, 0xaa) write(r4, &(0x7f0000000a00), 0x0) 1m28.334819282s ago: executing program 1 (id=280): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a300000000098000000060a010400000000000000000100000008000b400000000070000480340001800b000100657874686472000024000280080001400000000c080006400000000008000440000000220500020007000000380001800c000100626974776973650028000280080003400000000408000140000000140800024000000012040005"], 0x10c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000100)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c0001"], 0xbc}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r2, &(0x7f0000000600)={0x2, 0x6bb, @loopback}, 0x10) listen(r2, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r3, &(0x7f0000000700)={0x2, 0x3039, @loopback}, 0x10) connect$inet(r3, &(0x7f0000000800)={0x2, 0x6bb, @loopback}, 0x10) write(r3, &(0x7f0000000b00)="00a800011a2b3c4d00070000000100010000012c05f5e1000000000300000003004000"/168, 0xa8) 1m28.211591994s ago: executing program 1 (id=281): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', 0x1}) mount(&(0x7f0000000240)=@filename='proc\x00', &(0x7f0000000280)='./proc_mnt\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/25/smp_affinity\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='1\x00', 0x2) 1m27.936406752s ago: executing program 1 (id=284): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000200)={0x2, 0x8008, @loopback}, 0x10) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/versions\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='-2 -3 +4\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='3\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000100)='1\n\x00', 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x6) connect$inet(r4, &(0x7f0000000200)={0x2, 0x8008, @loopback}, 0x10) write(r4, &(0x7f0000000400)="80000028123456780000000000000002000186a300000003000000000000000700"/44, 0x2c) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)={0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 1m26.206168393s ago: executing program 41 (id=190): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='-2 -3 +4\n\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='tcp 20000\n\x00', 0xa) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='1\n\x00', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='tcp 20000\n\x00', 0xa) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r4, &(0x7f0000000240)='1\n\x00', 0x2) close(r4) r5 = socket$inet(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000280)={0x2, 0x4e20, @loopback}, 0x10) write(r5, &(0x7f0000000500)='test', 0x4) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) r6 = socket$inet(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000380)={0x2, 0x4e20, @loopback}, 0x10) write(r6, &(0x7f0000000500)='test', 0x4) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 1m12.681730711s ago: executing program 42 (id=284): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000200)={0x2, 0x8008, @loopback}, 0x10) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/versions\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='-2 -3 +4\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='3\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000100)='1\n\x00', 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x6) connect$inet(r4, &(0x7f0000000200)={0x2, 0x8008, @loopback}, 0x10) write(r4, &(0x7f0000000400)="80000028123456780000000000000002000186a300000003000000000000000700"/44, 0x2c) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)={0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 31.140541486s ago: executing program 2 (id=567): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/class/net/bridge0/bridge/multicast_igmp_version\x00', 0x1, 0x0) write(r2, &(0x7f0000000500)='3\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/class/net/syz_tun/brport/multicast_fast_leave\x00', 0x1, 0x0) write(r3, &(0x7f00000005c0)='1\n', 0x2) syz_emit_ethernet(0x38, &(0x7f0000000700)={@multicast, @local, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x1, 0x2, 0x0, @rand_addr=0x1010164, @multicast1, {[@ra={0x94, 0x4}]}}, "2200354f0000000104000001e1010203c0a8"}}}}, 0x0) 31.122667446s ago: executing program 2 (id=568): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000140)='1\x00', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000120)='./proc/sys/net/sctp/reconf_enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='1\x00', 0x1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180)=0x2, 0x4) setsockopt(r2, 0x84, 0x7d, &(0x7f0000000200)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x7}, 0x8) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt(r3, 0x84, 0x7d, &(0x7f0000000300)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x80}, 0x8) bind(r2, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x10) listen(r2, 0x5) connect(r3, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) r4 = accept(r2, 0x0, 0x0) sendmsg$inet_sctp(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)=[{0x0}], 0x1, 0x0, 0x0, 0x8000}, 0x8000) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000900), 0x4) 30.237912038s ago: executing program 2 (id=572): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@loopback, 0x1234, 0x6c}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}, 0x0, '\x00'}}]}, 0x160}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newpolicy={0x120, 0x13, 0x1, 0x0, 0x0, {{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@loopback, 0x1234, 0x6c}, 0x2, @in=@loopback}]}]}, 0x120}}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000400)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000000500)="12345678901234567890123456789012345678901234567890123456789012345678901234567890", 0x50) 30.096391661s ago: executing program 2 (id=573): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/self/fail-nth\x00', 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') write(r0, &(0x7f0000000100)='1\x00', 0x2) read(r1, &(0x7f0000000180)=""/512, 0x200) write(r0, &(0x7f0000000100)='2\x00', 0x2) write(r0, &(0x7f0000000100)='3', 0x1) write(r0, &(0x7f0000000100)='4\x00', 0x2) write(r0, &(0x7f0000000100)='5', 0x1) read(r1, &(0x7f0000000180)=""/512, 0x200) write(r0, &(0x7f0000000100), 0x0) read(r1, &(0x7f0000000180)=""/512, 0x200) 28.513558939s ago: executing program 2 (id=579): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(&(0x7f0000000440)=@filename='none\x00', &(0x7f0000000480)='./proc\x00', &(0x7f00000004c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/sctp/parameters/no_checksums\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/ipv4/conf/default/route_localnet\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='1\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/net/ipv4/conf/all/route_localnet\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='1\n', 0x2) r3 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) listen(r3, 0x5) r4 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e21, @loopback}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000300)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa0800450000240000000040847c547f0000017f0000014e214e20123456780000000006000400"], 0x0) 28.11245605s ago: executing program 0 (id=580): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000140)='1\x00', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000120)='./proc/sys/net/sctp/reconf_enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='1\x00', 0x1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180)=0x2, 0x4) setsockopt(r2, 0x84, 0x7d, &(0x7f0000000200)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x7}, 0x8) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt(r3, 0x84, 0x7d, &(0x7f0000000300)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x80}, 0x8) bind(r2, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x10) listen(r2, 0x5) connect(r3, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) r4 = accept(r2, 0x0, 0x0) sendmsg$inet_sctp(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000700)}], 0x1, 0x0, 0x0, 0x8000}, 0x8000) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000900), 0x4) 27.552439173s ago: executing program 2 (id=583): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000120)={0x2, 0x4e21, @loopback}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='1\x00', 0x1) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 27.226373361s ago: executing program 0 (id=584): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a300000000098000000060a010400000000000000000100000008000b400000000070000480340001800b000100657874686472000024000280080001400000000c080006400000000008000440000000220500020007000000380001800c0001006269747769736500280002800800034000000004080001400000001408000240000000120400058008000640000000010900010073797a30"], 0x10c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000100)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c0001800500010003000000060004000a0a0000060005"], 0xbc}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r2, &(0x7f0000000600)={0x2, 0x6bb, @loopback}, 0x10) listen(r2, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r3, &(0x7f0000000700)={0x2, 0x3039, @loopback}, 0x10) connect$inet(r3, &(0x7f0000000800)={0x2, 0x6bb, @loopback}, 0x10) r4 = accept$inet(r2, 0x0, 0x0) write(r3, &(0x7f0000000900)="009c00011a2b3c4d00010000010000000000000300000003000000016c6f63616c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c696e757800"/172, 0x9c) write(r4, &(0x7f0000000a00)="009c00011a2b3c4d00020000010001000000000300000003000000016c6f63616c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c696e757800"/172, 0x9c) write(r3, &(0x7f0000000b00)="00a800011a2b3c4d00070000000100010000012c05f5e1000000000300000003004000"/168, 0xa8) write(r4, &(0x7f0000000c00)="002000011a2b3c4d00080000000200010100000005f5e1000040000000000000", 0x20) 26.246408005s ago: executing program 0 (id=586): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/class/net/bridge0/bridge/multicast_igmp_version\x00', 0x1, 0x0) write(r2, &(0x7f0000000500)='3\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/class/net/syz_tun/brport/multicast_fast_leave\x00', 0x1, 0x0) write(r3, &(0x7f00000005c0)='1\n', 0x2) syz_emit_ethernet(0x39, &(0x7f0000000700)={@multicast, @local, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x1, 0x2, 0x0, @rand_addr=0x1010164, @multicast1, {[@ra={0x94, 0x4}]}}, "2200354f0000000104000001e1010203c0a801"}}}}, 0x0) 26.070143469s ago: executing program 0 (id=587): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/self/fail-nth\x00', 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') write(r0, &(0x7f0000000100)='1\x00', 0x2) read(r1, &(0x7f0000000180)=""/512, 0x200) write(r0, &(0x7f0000000100)='2\x00', 0x2) write(r0, &(0x7f0000000100)='3', 0x1) write(r0, &(0x7f0000000100)='4\x00', 0x2) write(r0, &(0x7f0000000100)='5', 0x1) read(r1, &(0x7f0000000180)=""/512, 0x200) write(r0, &(0x7f0000000100)='6', 0x1) read(r1, &(0x7f0000000180)=""/512, 0x200) 24.168108735s ago: executing program 0 (id=592): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000140)='1\x00', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000120)='./proc/sys/net/sctp/reconf_enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='1\x00', 0x1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180)=0x2, 0x4) setsockopt(r2, 0x84, 0x7d, &(0x7f0000000200)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x7}, 0x8) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt(r3, 0x84, 0x7d, &(0x7f0000000300)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x80}, 0x8) bind(r2, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x10) listen(r2, 0x5) connect(r3, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) r4 = accept(r2, 0x0, 0x0) sendmsg$inet_sctp(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000700)}], 0x1, 0x0, 0x0, 0x8000}, 0x8000) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000900), 0x4) 23.216282998s ago: executing program 0 (id=597): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='none\x00', &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/versions\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='-2 -3\n\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='3\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='1\n\x00', 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000340)={0x2, 0x801, @loopback}, 0x10) write(r4, &(0x7f0000000380)="80000040000000010000000000000002000186a30000000400000001000000010000001400000001000000000000000000000000000000000000000000000000000000000000000100000018", 0x44) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(&(0x7f0000000440)=@filename='none\x00', &(0x7f0000000480)='./proc\x00', &(0x7f00000004c0)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r5, &(0x7f0000000540)='nfsd 127.0.0.1 999999999 anonymous\n\x00', 0x23) 11.9918412s ago: executing program 43 (id=583): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000120)={0x2, 0x4e21, @loopback}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='1\x00', 0x1) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 7.923938095s ago: executing program 44 (id=597): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='none\x00', &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/versions\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='-2 -3\n\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='3\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='1\n\x00', 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000340)={0x2, 0x801, @loopback}, 0x10) write(r4, &(0x7f0000000380)="80000040000000010000000000000002000186a30000000400000001000000010000001400000001000000000000000000000000000000000000000000000000000000000000000100000018", 0x44) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(&(0x7f0000000440)=@filename='none\x00', &(0x7f0000000480)='./proc\x00', &(0x7f00000004c0)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r5, &(0x7f0000000540)='nfsd 127.0.0.1 999999999 anonymous\n\x00', 0x23) 4.896381774s ago: executing program 3 (id=646): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a300000000098000000060a010400000000000000000100000008000b400000000070000480340001800b000100657874686472000024000280080001400000000c080006400000000008000440000000220500020007000000380001800c0001006269747769736500280002800800034000000004080001400000001408000240000000120400058008000640000000010900010073797a30"], 0x10c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000100)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c0001800500010003000000060004000a0a0000060005000a0a00"], 0xbc}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r2, &(0x7f0000000600)={0x2, 0x6bb, @loopback}, 0x10) listen(r2, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r3, &(0x7f0000000700)={0x2, 0x3039, @loopback}, 0x10) connect$inet(r3, &(0x7f0000000800)={0x2, 0x6bb, @loopback}, 0x10) r4 = accept$inet(r2, 0x0, 0x0) write(r3, &(0x7f0000000900)="009c00011a2b3c4d00010000010000000000000300000003000000016c6f63616c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c696e757800"/172, 0x9c) write(r4, &(0x7f0000000a00)="009c00011a2b3c4d00020000010001000000000300000003000000016c6f63616c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c696e757800"/172, 0x9c) write(r3, &(0x7f0000000b00)="00a800011a2b3c4d00070000000100010000012c05f5e1000000000300000003004000"/168, 0xa8) write(r4, &(0x7f0000000c00)="002000011a2b3c4d00080000000200010100000005f5e1000040000000000000", 0x20) 4.448781965s ago: executing program 5 (id=649): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), r0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x123, 0x234, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) bind(r2, &(0x7f0000000300)=@in={0x2, 0x4e20, @loopback}, 0x10) listen(r2, 0x5) connect(r3, &(0x7f0000000300)=@in={0x2, 0x4e20, @loopback}, 0x10) accept4(r2, 0x0, 0x0, 0x0) 4.310880859s ago: executing program 5 (id=651): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x3c, 0x0, 0x8, 0x105, 0x0, 0x0, {0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1e000000}]}]}, 0x3c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000000000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f00000111004000100002000c000c0073797a3000000000"], 0x40}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 4.164472463s ago: executing program 5 (id=652): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) socket$unix(0x1, 0x1, 0x0) write(r0, &(0x7f0000000100)="00000000000000000000000008004500001c0000000040113cce7f0000017f000001003500350008a646", 0x2a) 3.968474877s ago: executing program 3 (id=653): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000240)='./debug\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/kernel/slab/skbuff_head_cache/failslab\x00', 0x1, 0x0) write(r0, &(0x7f0000000450)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/failslab/cache-filter\x00', 0x1, 0x0) write(r1, &(0x7f0000000550)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./debug/failslab/probability\x00', 0x1, 0x0) write(r2, &(0x7f0000000650)='100', 0x3) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r3, &(0x7f0000000700)="00112233445566778899aabbccddeeff", 0x10, 0x0, &(0x7f0000000750)={0x2, 0x1234, @loopback}, 0x10) sendto$inet(r3, &(0x7f0000000700)="00112233445566778899aabbccddeeff", 0x10, 0x0, &(0x7f0000000750)={0x2, 0x1234, @loopback}, 0x10) 3.946595338s ago: executing program 5 (id=654): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='127.0.0.1:/export\x00', &(0x7f0000000100)='./mnt\x00', &(0x7f0000000300)='nfs\x00', 0x0, &(0x7f0000000400)='addr=127.0.0.1,port=2049,proto=udp,vers=3,mountport=2049,mountproto=udp,timeo=600,retrans=10,retry=10\x00') (async) 3.712430275s ago: executing program 3 (id=655): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000140)='1\x00', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000120)='./proc/sys/net/sctp/reconf_enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='1\x00', 0x1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180)=0x2, 0x4) setsockopt(r2, 0x84, 0x7d, &(0x7f0000000200)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x7}, 0x8) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt(r3, 0x84, 0x7d, &(0x7f0000000300)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x80}, 0x8) bind(r2, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x10) listen(r2, 0x5) connect(r3, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) r4 = accept(r2, 0x0, 0x0) sendmsg$inet_sctp(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000700)="123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234", 0x39}], 0x1, 0x0, 0x0, 0x8000}, 0x8000) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000900), 0x4) 3.528551599s ago: executing program 6 (id=656): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@getqdisc={0x14, 0x26, 0x301, 0x2, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x14}}, 0x0) 3.417965422s ago: executing program 6 (id=657): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x28, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x160, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x130, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x160}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x160, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x130, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x160}}, 0x0) 1.884726502s ago: executing program 6 (id=658): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, &(0x7f0000000200)="00112233445566778899aabbccddeeff", 0x10, 0x0, &(0x7f0000000300)={0x2, 0x1234, @loopback}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/kernel/slab/skbuff_head_cache/failslab\x00', 0x1, 0x0) write(r1, &(0x7f0000000450)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/failslab/cache-filter\x00', 0x1, 0x0) write(r2, &(0x7f0000000550)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./debug/failslab/probability\x00', 0x1, 0x0) write(r3, &(0x7f0000000650)='100', 0x3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./debug/failslab/times\x00', 0x1, 0x0) write(r4, &(0x7f0000000750)='1', 0x1) sendto$inet(r0, &(0x7f0000000200)="00112233445566778899aabbccddeeff", 0x10, 0x0, &(0x7f0000000300)={0x2, 0x1234, @loopback}, 0x10) 1.884470122s ago: executing program 3 (id=659): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x1}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local, 0x1}, 0x1c) r2 = accept4$inet6(r0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000100)='hello', 0x5) write(r2, &(0x7f0000000140)='world', 0x5) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x5, 0x18, 0x1000}}}}}}}, 0x0) 1.18245735s ago: executing program 6 (id=660): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a300000000098000000060a010400000000000000000100000008000b400000000070000480340001800b000100657874686472000024000280080001400000000c080006400000000008000440000000220500020007000000380001800c0001006269747769736500280002800800034000000004080001400000001408000240000000120400058008000640000000010900010073797a30"], 0x10c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000100)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c0001800500010003000000060004000a0a0000060005000a0a0000"], 0xbc}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r2, 0x0, 0x0) listen(r2, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r3, &(0x7f0000000700)={0x2, 0x3039, @loopback}, 0x10) connect$inet(r3, &(0x7f0000000800)={0x2, 0x6bb, @loopback}, 0x10) r4 = accept$inet(r2, 0x0, 0x0) write(r3, &(0x7f0000000900)="009c00011a2b3c4d00010000010000000000000300000003000000016c6f63616c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c696e757800"/172, 0x9c) write(r4, &(0x7f0000000a00)="009c00011a2b3c4d00020000010001000000000300000003000000016c6f63616c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c696e757800"/172, 0x9c) write(r3, &(0x7f0000000b00)="00a800011a2b3c4d00070000000100010000012c05f5e1000000000300000003004000"/168, 0xa8) write(r4, &(0x7f0000000c00)="002000011a2b3c4d00080000000200010100000005f5e1000040000000000000", 0x20) 1.072352573s ago: executing program 5 (id=661): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0xc, @local}, 0x10) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x1, 0x0, 0x0, 0x0, 0xc, @remote}, 0x10) syz_emit_ethernet(0x1a, &(0x7f0000000200)={@local, @remote, @void, {@llc={0x4, {@llc={0xc, 0xc, 's'}}}}}, 0x0) syz_emit_ethernet(0x1a, &(0x7f0000000300)={@local, @remote, @void, {@llc={0x4, {@llc={0xc, 0xc, 's'}}}}}, 0x0) 832.308539ms ago: executing program 3 (id=662): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x2c, r2, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller0\x00'}}]}]}, 0x2c}}, 0x0) syz_emit_ethernet(0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffff00112233445588ca2d010000000000000100000200000000010000020000129400112233445500"/54], 0x0) 628.277804ms ago: executing program 3 (id=663): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a300000000098000000060a010400000000000000000100000008000b400000000070000480340001800b000100657874686472000024000280080001400000000c080006400000000008000440000000220500020007000000380001800c000100626974776973650028000280080003400000000408000140000000140800024000000012040005"], 0x10c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000100)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c00018005"], 0xbc}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r2, &(0x7f0000000600)={0x2, 0x6bb, @loopback}, 0x10) listen(r2, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r3, &(0x7f0000000700)={0x2, 0x3039, @loopback}, 0x10) connect$inet(r3, &(0x7f0000000800)={0x2, 0x6bb, @loopback}, 0x10) write(r3, &(0x7f0000000b00)="00a800011a2b3c4d00070000000100010000012c05f5e1000000000300000003004000"/158, 0x9e) 255.722224ms ago: executing program 6 (id=664): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r0) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0x14, r2, 0x1}, 0x14}}, 0x0) 54.226929ms ago: executing program 5 (id=665): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a85, @loopback}, 0x10) listen(r0, 0x5) r1 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='source\x00', &(0x7f0000000300)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='ms_mode\x00', &(0x7f0000000500)='crc\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000600)='mount_timeout\x00', &(0x7f0000000700)='5\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = accept$inet(r0, 0x0, 0x0) write(r2, &(0x7f0000000800)='ceph v2\n\x00'/20, 0x1c) shutdown(r2, 0x2) close(r2) close(r0) nanosleep(&(0x7f0000000800)={0x2}, 0x0) 0s ago: executing program 6 (id=666): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xf, 0x4, 0x4, 0x2, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xe, 0x2, &(0x7f0000000280)=@raw=[@generic={0xb7, 0x0, 0x0, 0x0, 0x1}, @generic={0x95}], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@fallback=r2, r3, 0x24, 0x0, 0x0, @void, @value=0x0}, 0x30) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000380)='\x00\x00\x00\x00', &(0x7f00000003c0)=@udp=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)='hello\x00', 0x5}], 0x1}, 0x0) recvmsg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000540)=""/10, 0xa}], 0x1}, 0x0) kernel console output (not intermixed with test programs): T7709] ? __x64_sys_futex+0xf0/0xf0 [ 198.140764][ T7709] ? __x64_sys_futex+0x21/0xf0 [ 198.145525][ T7709] do_syscall_64+0x55/0xb0 [ 198.149946][ T7709] ? clear_bhb_loop+0x40/0x90 [ 198.154620][ T7709] ? clear_bhb_loop+0x40/0x90 [ 198.159299][ T7709] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 198.165227][ T7709] RIP: 0033:0x7fd5c7f9de99 [ 198.169665][ T7709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.189284][ T7709] RSP: 002b:00007fff2ea1a8b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 198.197699][ T7709] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd5c7f9de99 [ 198.205683][ T7709] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd5c8225fa8 [ 198.213691][ T7709] RBP: 0000000000001530 R08: 0000000000000008 R09: 0000000000000000 [ 198.221662][ T7709] R10: 00007fd5c8225fa0 R11: 0000000000000246 R12: 0000000000000000 [ 198.229661][ T7709] R13: 00007fd5c8225fac R14: 00007fd5c8225fa8 R15: 00007fd5c8225fa0 [ 198.237647][ T7709] [ 198.317408][ T7709] FAULT_INJECTION: forcing a failure. [ 198.317408][ T7709] name fail_futex, interval 1, probability 0, space 0, times 0 [ 198.340729][ T7709] CPU: 0 PID: 7709 Comm: syz.2.556 Not tainted syzkaller #0 [ 198.348086][ T7709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 198.358169][ T7709] Call Trace: [ 198.361470][ T7709] [ 198.364399][ T7709] dump_stack_lvl+0x18c/0x250 [ 198.369084][ T7709] ? show_regs_print_info+0x20/0x20 [ 198.374280][ T7709] ? load_image+0x420/0x420 [ 198.378782][ T7709] ? do_futex+0x35d/0x3e0 [ 198.383108][ T7709] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 198.389080][ T7709] ? __ia32_sys_get_robust_list+0x110/0x110 [ 198.394965][ T7709] should_fail_ex+0x394/0x4c0 [ 198.399659][ T7709] __se_sys_futex+0x181/0x440 [ 198.404371][ T7709] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 198.410560][ T7709] ? __x64_sys_futex+0xf0/0xf0 [ 198.415350][ T7709] ? __x64_sys_futex+0x21/0xf0 [ 198.420122][ T7709] do_syscall_64+0x55/0xb0 [ 198.424530][ T7709] ? clear_bhb_loop+0x40/0x90 [ 198.429224][ T7709] ? clear_bhb_loop+0x40/0x90 [ 198.433895][ T7709] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 198.439891][ T7709] RIP: 0033:0x7fd5c7f9de99 [ 198.444303][ T7709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.463925][ T7709] RSP: 002b:00007fff2ea1a8b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 198.472359][ T7709] RAX: ffffffffffffffda RBX: 000000000003068a RCX: 00007fd5c7f9de99 [ 198.480328][ T7709] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd5c822609c [ 198.488315][ T7709] RBP: 0000000000000032 R08: 0000000000745d1e R09: 0000000000000000 [ 198.496291][ T7709] R10: 00007fff2ea1a9c0 R11: 0000000000000246 R12: 00007fff2ea1a9e0 [ 198.504275][ T7709] R13: 00007fd5c822609c R14: 00000000000306bc R15: 00007fff2ea1a9c0 [ 198.512304][ T7709] [ 198.531139][ T7709] FAULT_INJECTION: forcing a failure. [ 198.531139][ T7709] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 198.545143][ T7709] CPU: 0 PID: 7709 Comm: syz.2.556 Not tainted syzkaller #0 [ 198.552550][ T7709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 198.562639][ T7709] Call Trace: [ 198.565978][ T7709] [ 198.568941][ T7709] dump_stack_lvl+0x18c/0x250 [ 198.573654][ T7709] ? show_regs_print_info+0x20/0x20 [ 198.578873][ T7709] ? load_image+0x420/0x420 [ 198.583398][ T7709] ? __might_fault+0xaa/0x120 [ 198.588095][ T7709] ? __lock_acquire+0x7d80/0x7d80 [ 198.593146][ T7709] should_fail_ex+0x394/0x4c0 [ 198.597854][ T7709] _copy_from_user+0x2f/0xe0 [ 198.602463][ T7709] get_timespec64+0x97/0x1b0 [ 198.607079][ T7709] ? timespec64_add_safe+0x1f0/0x1f0 [ 198.612384][ T7709] ? blkcg_maybe_throttle_current+0x19f/0xa90 [ 198.618487][ T7709] __se_sys_futex+0x19b/0x440 [ 198.623188][ T7709] ? __x64_sys_futex+0xf0/0xf0 [ 198.627967][ T7709] ? __x64_sys_futex+0x21/0xf0 [ 198.632748][ T7709] do_syscall_64+0x55/0xb0 [ 198.637173][ T7709] ? clear_bhb_loop+0x40/0x90 [ 198.641841][ T7709] ? clear_bhb_loop+0x40/0x90 [ 198.646608][ T7709] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 198.652512][ T7709] RIP: 0033:0x7fd5c7f9de99 [ 198.656927][ T7709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.677085][ T7709] RSP: 002b:00007fff2ea1a8b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 198.685516][ T7709] RAX: ffffffffffffffda RBX: 000000000003075f RCX: 00007fd5c7f9de99 [ 198.693507][ T7709] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd5c822609c [ 198.701578][ T7709] RBP: 0000000000000032 R08: 0000000000745d1e R09: 0000000000000000 [ 198.709552][ T7709] R10: 00007fff2ea1a9c0 R11: 0000000000000246 R12: 00007fff2ea1a9e0 [ 198.717523][ T7709] R13: 00007fd5c822609c R14: 0000000000030791 R15: 00007fff2ea1a9c0 [ 198.725508][ T7709] [ 198.752437][ T7709] FAULT_INJECTION: forcing a failure. [ 198.752437][ T7709] name fail_futex, interval 1, probability 0, space 0, times 0 [ 198.770306][ T7709] CPU: 0 PID: 7709 Comm: syz.2.556 Not tainted syzkaller #0 [ 198.777644][ T7709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 198.787722][ T7709] Call Trace: [ 198.791016][ T7709] [ 198.793963][ T7709] dump_stack_lvl+0x18c/0x250 [ 198.798671][ T7709] ? show_regs_print_info+0x20/0x20 [ 198.803908][ T7709] ? load_image+0x420/0x420 [ 198.808451][ T7709] should_fail_ex+0x394/0x4c0 [ 198.813147][ T7709] get_futex_key+0x136/0x1030 [ 198.817822][ T7709] ? __lock_acquire+0x7d80/0x7d80 [ 198.822849][ T7709] ? futex_setup_timer+0xc0/0xc0 [ 198.827785][ T7709] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 198.833701][ T7709] ? lockdep_hardirqs_on+0x98/0x150 [ 198.838904][ T7709] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 198.844822][ T7709] futex_wait_setup+0xbc/0x270 [ 198.849616][ T7709] ? futex_wait_multiple+0x920/0x920 [ 198.854896][ T7709] ? ktime_add_safe+0x38/0x60 [ 198.859572][ T7709] futex_wait+0x1bc/0x5c0 [ 198.863903][ T7709] ? futex_wait_setup+0x270/0x270 [ 198.868929][ T7709] ? __remove_hrtimer+0x470/0x470 [ 198.873984][ T7709] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 198.880236][ T7709] ? lockdep_hardirqs_on+0x98/0x150 [ 198.885442][ T7709] do_futex+0x2ff/0x3e0 [ 198.889604][ T7709] ? _copy_from_user+0xa5/0xe0 [ 198.894367][ T7709] ? __ia32_sys_get_robust_list+0x110/0x110 [ 198.900252][ T7709] ? blkcg_maybe_throttle_current+0x19f/0xa90 [ 198.906316][ T7709] ? read_tsc+0x9/0x20 [ 198.910398][ T7709] ? ktime_get+0x24b/0x280 [ 198.914815][ T7709] __se_sys_futex+0x3a9/0x440 [ 198.919494][ T7709] ? __x64_sys_futex+0xf0/0xf0 [ 198.924256][ T7709] ? __x64_sys_futex+0x21/0xf0 [ 198.929033][ T7709] do_syscall_64+0x55/0xb0 [ 198.933483][ T7709] ? clear_bhb_loop+0x40/0x90 [ 198.938169][ T7709] ? clear_bhb_loop+0x40/0x90 [ 198.942855][ T7709] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 198.948769][ T7709] RIP: 0033:0x7fd5c7f9de99 [ 198.953893][ T7709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.973531][ T7709] RSP: 002b:00007fff2ea1a8b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 198.981955][ T7709] RAX: ffffffffffffffda RBX: 000000000003083d RCX: 00007fd5c7f9de99 [ 198.989948][ T7709] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd5c822609c [ 198.997928][ T7709] RBP: 0000000000000032 R08: 0000000000745d1e R09: 0000000000000000 [ 199.006073][ T7709] R10: 00007fff2ea1a9c0 R11: 0000000000000246 R12: 00007fff2ea1a9e0 [ 199.014043][ T7709] R13: 00007fd5c822609c R14: 000000000003086f R15: 00007fff2ea1a9c0 [ 199.022033][ T7709] [ 199.048684][ T7709] FAULT_INJECTION: forcing a failure. [ 199.048684][ T7709] name fail_futex, interval 1, probability 0, space 0, times 0 [ 199.089090][ T7709] CPU: 0 PID: 7709 Comm: syz.2.556 Not tainted syzkaller #0 [ 199.096446][ T7709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 199.106519][ T7709] Call Trace: [ 199.109801][ T7709] [ 199.112744][ T7709] dump_stack_lvl+0x18c/0x250 [ 199.117427][ T7709] ? show_regs_print_info+0x20/0x20 [ 199.122625][ T7709] ? load_image+0x420/0x420 [ 199.127138][ T7709] should_fail_ex+0x394/0x4c0 [ 199.131822][ T7709] get_futex_key+0x136/0x1030 [ 199.136504][ T7709] ? futex_setup_timer+0xc0/0xc0 [ 199.141462][ T7709] ? count_memcg_event_mm+0x36f/0x3c0 [ 199.146837][ T7709] futex_wake+0x127/0x4f0 [ 199.151168][ T7709] ? futex_wake_mark+0x150/0x150 [ 199.156111][ T7709] ? handle_mm_fault+0xe6/0x4a50 [ 199.161069][ T7709] do_futex+0x35d/0x3e0 [ 199.165222][ T7709] ? __ia32_sys_get_robust_list+0x110/0x110 [ 199.171133][ T7709] ? __lock_acquire+0x7d80/0x7d80 [ 199.176177][ T7709] __se_sys_futex+0x3a9/0x440 [ 199.180874][ T7709] ? __x64_sys_futex+0xf0/0xf0 [ 199.185650][ T7709] ? lock_chain_count+0x20/0x20 [ 199.190533][ T7709] ? __x64_sys_futex+0x21/0xf0 [ 199.195307][ T7709] do_syscall_64+0x55/0xb0 [ 199.199728][ T7709] ? clear_bhb_loop+0x40/0x90 [ 199.204405][ T7709] ? clear_bhb_loop+0x40/0x90 [ 199.209114][ T7709] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 199.215006][ T7709] RIP: 0033:0x7fd5c7f9de99 [ 199.219442][ T7709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.239068][ T7709] RSP: 002b:00007fff2ea1a8b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 199.247485][ T7709] RAX: ffffffffffffffda RBX: 00000000000000f0 RCX: 00007fd5c7f9de99 [ 199.255475][ T7709] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd5c8226098 [ 199.263465][ T7709] RBP: 0000000000001ec6 R08: 0000000000000000 R09: 0000000000000000 [ 199.271466][ T7709] R10: 00007fd5c8225fa0 R11: 0000000000000246 R12: 0000000000000001 [ 199.279443][ T7709] R13: 00007fd5c822609c R14: 00007fd5c8226098 R15: 00007fd5c8226090 [ 199.287467][ T7709] [ 200.453490][ T7755] __nla_validate_parse: 6 callbacks suppressed [ 200.453508][ T7755] netlink: 12 bytes leftover after parsing attributes in process `syz.0.570'. [ 200.625219][ T7762] netlink: 40 bytes leftover after parsing attributes in process `syz.2.572'. [ 200.654707][ T7762] netlink: 36 bytes leftover after parsing attributes in process `syz.2.572'. [ 200.732458][ T7766] FAULT_INJECTION: forcing a failure. [ 200.732458][ T7766] name fail_futex, interval 1, probability 0, space 0, times 0 [ 200.746025][ T7766] CPU: 0 PID: 7766 Comm: syz.2.573 Not tainted syzkaller #0 [ 200.753334][ T7766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 200.763501][ T7766] Call Trace: [ 200.766787][ T7766] [ 200.769718][ T7766] dump_stack_lvl+0x18c/0x250 [ 200.774404][ T7766] ? lock_chain_count+0x20/0x20 [ 200.779260][ T7766] ? show_regs_print_info+0x20/0x20 [ 200.784458][ T7766] ? load_image+0x420/0x420 [ 200.788976][ T7766] should_fail_ex+0x394/0x4c0 [ 200.793672][ T7766] get_futex_key+0x136/0x1030 [ 200.798349][ T7766] ? futex_wait+0x4a0/0x5c0 [ 200.802851][ T7766] ? futex_setup_timer+0xc0/0xc0 [ 200.807791][ T7766] futex_wake+0x127/0x4f0 [ 200.812123][ T7766] ? futex_wake_mark+0x150/0x150 [ 200.817072][ T7766] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 200.823316][ T7766] ? lockdep_hardirqs_on+0x98/0x150 [ 200.828519][ T7766] do_futex+0x35d/0x3e0 [ 200.832678][ T7766] ? _copy_from_user+0xa5/0xe0 [ 200.837459][ T7766] ? __ia32_sys_get_robust_list+0x110/0x110 [ 200.843471][ T7766] __se_sys_futex+0x3a9/0x440 [ 200.848166][ T7766] ? __x64_sys_futex+0xf0/0xf0 [ 200.852945][ T7766] ? __x64_sys_futex+0x21/0xf0 [ 200.857730][ T7766] do_syscall_64+0x55/0xb0 [ 200.862148][ T7766] ? clear_bhb_loop+0x40/0x90 [ 200.866822][ T7766] ? clear_bhb_loop+0x40/0x90 [ 200.871495][ T7766] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 200.877391][ T7766] RIP: 0033:0x7fd5c7f9de99 [ 200.881806][ T7766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.901458][ T7766] RSP: 002b:00007fff2ea1a8b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 200.909873][ T7766] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd5c7f9de99 [ 200.917850][ T7766] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd5c8225fa8 [ 200.925860][ T7766] RBP: 0000000000001530 R08: 0000000000000008 R09: 0000000000000000 [ 200.933835][ T7766] R10: 00007fd5c8225fa0 R11: 0000000000000246 R12: 0000000000000000 [ 200.941821][ T7766] R13: 00007fd5c8225fac R14: 00007fd5c8225fa8 R15: 00007fd5c8225fa0 [ 200.949805][ T7766] [ 201.017673][ T7766] FAULT_INJECTION: forcing a failure. [ 201.017673][ T7766] name fail_futex, interval 1, probability 0, space 0, times 0 [ 201.046250][ T7766] CPU: 1 PID: 7766 Comm: syz.2.573 Not tainted syzkaller #0 [ 201.053596][ T7766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 201.063671][ T7766] Call Trace: [ 201.066971][ T7766] [ 201.070099][ T7766] dump_stack_lvl+0x18c/0x250 [ 201.074809][ T7766] ? show_regs_print_info+0x20/0x20 [ 201.080040][ T7766] ? load_image+0x420/0x420 [ 201.084589][ T7766] ? do_futex+0x35d/0x3e0 [ 201.088947][ T7766] ? _copy_from_user+0xa5/0xe0 [ 201.093750][ T7766] ? __ia32_sys_get_robust_list+0x110/0x110 [ 201.099675][ T7766] should_fail_ex+0x394/0x4c0 [ 201.104391][ T7766] __se_sys_futex+0x181/0x440 [ 201.109110][ T7766] ? __x64_sys_futex+0xf0/0xf0 [ 201.113896][ T7766] ? __x64_sys_futex+0x21/0xf0 [ 201.118661][ T7766] do_syscall_64+0x55/0xb0 [ 201.123085][ T7766] ? clear_bhb_loop+0x40/0x90 [ 201.127782][ T7766] ? clear_bhb_loop+0x40/0x90 [ 201.132462][ T7766] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 201.138355][ T7766] RIP: 0033:0x7fd5c7f9de99 [ 201.142770][ T7766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.162375][ T7766] RSP: 002b:00007fff2ea1a8b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 201.170796][ T7766] RAX: ffffffffffffffda RBX: 0000000000031116 RCX: 00007fd5c7f9de99 [ 201.178849][ T7766] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd5c822609c [ 201.186842][ T7766] RBP: 0000000000000032 R08: 0000000000745d1e R09: 0000000000000000 [ 201.194832][ T7766] R10: 00007fff2ea1a9c0 R11: 0000000000000246 R12: 00007fff2ea1a9e0 [ 201.202806][ T7766] R13: 00007fd5c822609c R14: 0000000000031148 R15: 00007fff2ea1a9c0 [ 201.210805][ T7766] [ 201.221606][ T7766] FAULT_INJECTION: forcing a failure. [ 201.221606][ T7766] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.246553][ T7766] CPU: 1 PID: 7766 Comm: syz.2.573 Not tainted syzkaller #0 [ 201.253904][ T7766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 201.263982][ T7766] Call Trace: [ 201.267280][ T7766] [ 201.270234][ T7766] dump_stack_lvl+0x18c/0x250 [ 201.270465][ T7774] (null): rxe_set_mtu: Set mtu to 4096 [ 201.274924][ T7766] ? show_regs_print_info+0x20/0x20 [ 201.274951][ T7766] ? load_image+0x420/0x420 [ 201.274975][ T7766] ? __might_fault+0xaa/0x120 [ 201.280858][ T7774] lo speed is unknown, defaulting to 1000 [ 201.285641][ T7766] ? __lock_acquire+0x7d80/0x7d80 [ 201.285672][ T7766] should_fail_ex+0x394/0x4c0 [ 201.285697][ T7766] _copy_from_user+0x2f/0xe0 [ 201.294883][ T7774] lo speed is unknown, defaulting to 1000 [ 201.300576][ T7766] get_timespec64+0x97/0x1b0 [ 201.300609][ T7766] ? timespec64_add_safe+0x1f0/0x1f0 [ 201.300629][ T7766] ? blkcg_maybe_throttle_current+0x19f/0xa90 [ 201.300658][ T7766] __se_sys_futex+0x19b/0x440 [ 201.321837][ T7774] lo speed is unknown, defaulting to 1000 [ 201.325196][ T7766] ? __x64_sys_futex+0xf0/0xf0 [ 201.325226][ T7766] ? __x64_sys_futex+0x21/0xf0 [ 201.356621][ T7766] do_syscall_64+0x55/0xb0 [ 201.361067][ T7766] ? clear_bhb_loop+0x40/0x90 [ 201.365763][ T7766] ? clear_bhb_loop+0x40/0x90 [ 201.370456][ T7766] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 201.376366][ T7766] RIP: 0033:0x7fd5c7f9de99 [ 201.380884][ T7766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.400513][ T7766] RSP: 002b:00007fff2ea1a8b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 201.408955][ T7766] RAX: ffffffffffffffda RBX: 00000000000311e2 RCX: 00007fd5c7f9de99 [ 201.416952][ T7766] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd5c822609c [ 201.424946][ T7766] RBP: 0000000000000032 R08: 0000000000745d1e R09: 0000000000000000 [ 201.433162][ T7766] R10: 00007fff2ea1a9c0 R11: 0000000000000246 R12: 00007fff2ea1a9e0 [ 201.441166][ T7766] R13: 00007fd5c822609c R14: 0000000000031214 R15: 00007fff2ea1a9c0 [ 201.449180][ T7766] [ 201.473156][ T7766] FAULT_INJECTION: forcing a failure. [ 201.473156][ T7766] name fail_futex, interval 1, probability 0, space 0, times 0 [ 201.515953][ T7766] CPU: 1 PID: 7766 Comm: syz.2.573 Not tainted syzkaller #0 [ 201.523311][ T7766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 201.533392][ T7766] Call Trace: [ 201.536695][ T7766] [ 201.539641][ T7766] dump_stack_lvl+0x18c/0x250 [ 201.544340][ T7766] ? show_regs_print_info+0x20/0x20 [ 201.549564][ T7766] ? load_image+0x420/0x420 [ 201.554104][ T7766] should_fail_ex+0x394/0x4c0 [ 201.558817][ T7766] get_futex_key+0x136/0x1030 [ 201.563520][ T7766] ? __lock_acquire+0x7d80/0x7d80 [ 201.568580][ T7766] ? futex_setup_timer+0xc0/0xc0 [ 201.573542][ T7766] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 201.579469][ T7766] ? lockdep_hardirqs_on+0x98/0x150 [ 201.584698][ T7766] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 201.590637][ T7766] futex_wait_setup+0xbc/0x270 [ 201.595432][ T7766] ? futex_wait_multiple+0x920/0x920 [ 201.600749][ T7766] ? ktime_add_safe+0x38/0x60 [ 201.605454][ T7766] futex_wait+0x1bc/0x5c0 [ 201.609809][ T7766] ? futex_wait_setup+0x270/0x270 [ 201.614857][ T7766] ? __remove_hrtimer+0x470/0x470 [ 201.619917][ T7766] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 201.626182][ T7766] ? lockdep_hardirqs_on+0x98/0x150 [ 201.631410][ T7766] do_futex+0x2ff/0x3e0 [ 201.635585][ T7766] ? _copy_from_user+0xa5/0xe0 [ 201.640375][ T7766] ? __ia32_sys_get_robust_list+0x110/0x110 [ 201.646300][ T7766] ? blkcg_maybe_throttle_current+0x19f/0xa90 [ 201.652428][ T7766] ? read_tsc+0x9/0x20 [ 201.656522][ T7766] ? ktime_get+0x24b/0x280 [ 201.660955][ T7766] __se_sys_futex+0x3a9/0x440 [ 201.665680][ T7766] ? __x64_sys_futex+0xf0/0xf0 [ 201.670470][ T7766] ? __x64_sys_futex+0x21/0xf0 [ 201.675252][ T7766] do_syscall_64+0x55/0xb0 [ 201.679690][ T7766] ? clear_bhb_loop+0x40/0x90 [ 201.684905][ T7766] ? clear_bhb_loop+0x40/0x90 [ 201.689604][ T7766] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 201.695522][ T7766] RIP: 0033:0x7fd5c7f9de99 [ 201.699962][ T7766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.719598][ T7766] RSP: 002b:00007fff2ea1a8b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 201.728053][ T7766] RAX: ffffffffffffffda RBX: 00000000000312dd RCX: 00007fd5c7f9de99 [ 201.736046][ T7766] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd5c822609c [ 201.744036][ T7766] RBP: 0000000000000032 R08: 0000000000745d1e R09: 0000000000000000 [ 201.752132][ T7766] R10: 00007fff2ea1a9c0 R11: 0000000000000246 R12: 00007fff2ea1a9e0 [ 201.760126][ T7766] R13: 00007fd5c822609c R14: 000000000003130f R15: 00007fff2ea1a9c0 [ 201.768131][ T7766] [ 201.866219][ T7766] FAULT_INJECTION: forcing a failure. [ 201.866219][ T7766] name fail_futex, interval 1, probability 0, space 0, times 0 [ 201.884931][ T7766] CPU: 1 PID: 7766 Comm: syz.2.573 Not tainted syzkaller #0 [ 201.892277][ T7766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 201.902330][ T7766] Call Trace: [ 201.905629][ T7766] [ 201.908557][ T7766] dump_stack_lvl+0x18c/0x250 [ 201.913240][ T7766] ? show_regs_print_info+0x20/0x20 [ 201.918436][ T7766] ? load_image+0x420/0x420 [ 201.922946][ T7766] should_fail_ex+0x394/0x4c0 [ 201.927627][ T7766] get_futex_key+0x136/0x1030 [ 201.932305][ T7766] ? futex_setup_timer+0xc0/0xc0 [ 201.937237][ T7766] ? count_memcg_event_mm+0x36f/0x3c0 [ 201.942628][ T7766] futex_wake+0x127/0x4f0 [ 201.946974][ T7766] ? futex_wake_mark+0x150/0x150 [ 201.951925][ T7766] ? handle_mm_fault+0xe6/0x4a50 [ 201.956868][ T7766] do_futex+0x35d/0x3e0 [ 201.961021][ T7766] ? __ia32_sys_get_robust_list+0x110/0x110 [ 201.966907][ T7766] ? __lock_acquire+0x7d80/0x7d80 [ 201.971930][ T7766] __se_sys_futex+0x3a9/0x440 [ 201.976609][ T7766] ? __x64_sys_futex+0xf0/0xf0 [ 201.981380][ T7766] ? lock_chain_count+0x20/0x20 [ 201.986234][ T7766] ? __x64_sys_futex+0x21/0xf0 [ 201.991014][ T7766] do_syscall_64+0x55/0xb0 [ 201.995430][ T7766] ? clear_bhb_loop+0x40/0x90 [ 202.000109][ T7766] ? clear_bhb_loop+0x40/0x90 [ 202.004782][ T7766] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 202.010671][ T7766] RIP: 0033:0x7fd5c7f9de99 [ 202.015080][ T7766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.034681][ T7766] RSP: 002b:00007fff2ea1a8b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 202.043107][ T7766] RAX: ffffffffffffffda RBX: 00000000000000f0 RCX: 00007fd5c7f9de99 [ 202.051080][ T7766] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd5c8226098 [ 202.059051][ T7766] RBP: 0000000000001ec6 R08: 0000000000000000 R09: 0000000000000000 [ 202.067015][ T7766] R10: 00007fd5c8225fa0 R11: 0000000000000246 R12: 0000000000000001 [ 202.074979][ T7766] R13: 00007fd5c822609c R14: 00007fd5c8226098 R15: 00007fd5c8226090 [ 202.082959][ T7766] [ 202.100818][ T7783] netlink: 12 bytes leftover after parsing attributes in process `syz.6.578'. [ 202.136198][ T7774] infiniband syz0: set active [ 202.141001][ T5835] lo speed is unknown, defaulting to 1000 [ 202.155535][ T7774] infiniband syz0: added lo [ 202.161976][ T7774] syz0: rxe_create_cq: returned err = -12 [ 202.168020][ T7774] infiniband syz0: Couldn't create ib_mad CQ [ 202.174335][ T7774] infiniband syz0: Couldn't open port 1 [ 202.216968][ T7774] RDS/IB: syz0: added [ 202.223312][ T7774] smc: adding ib device syz0 with port count 1 [ 202.230969][ T7774] smc: ib device syz0 port 1 has pnetid [ 202.237084][ T5835] lo speed is unknown, defaulting to 1000 [ 202.243638][ T7774] lo speed is unknown, defaulting to 1000 [ 202.445655][ T7774] lo speed is unknown, defaulting to 1000 [ 202.606284][ T7774] lo speed is unknown, defaulting to 1000 [ 202.928308][ T7774] lo speed is unknown, defaulting to 1000 [ 203.148095][ T7774] lo speed is unknown, defaulting to 1000 [ 203.357687][ T7774] lo speed is unknown, defaulting to 1000 [ 203.531950][ T7774] lo speed is unknown, defaulting to 1000 [ 203.744877][ T7774] lo speed is unknown, defaulting to 1000 [ 203.916240][ T7774] lo speed is unknown, defaulting to 1000 [ 204.164110][ T7774] lo speed is unknown, defaulting to 1000 [ 204.352475][ T7774] lo speed is unknown, defaulting to 1000 [ 204.528538][ T7774] lo speed is unknown, defaulting to 1000 [ 204.860784][ T7817] FAULT_INJECTION: forcing a failure. [ 204.860784][ T7817] name fail_futex, interval 1, probability 0, space 0, times 0 [ 204.875925][ T7774] lo speed is unknown, defaulting to 1000 [ 204.896215][ T7817] CPU: 0 PID: 7817 Comm: syz.0.587 Not tainted syzkaller #0 [ 204.903554][ T7817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 204.913673][ T7817] Call Trace: [ 204.916970][ T7817] [ 204.919915][ T7817] dump_stack_lvl+0x18c/0x250 [ 204.924624][ T7817] ? lock_chain_count+0x20/0x20 [ 204.929506][ T7817] ? show_regs_print_info+0x20/0x20 [ 204.934721][ T7817] ? load_image+0x420/0x420 [ 204.939247][ T7817] should_fail_ex+0x394/0x4c0 [ 204.943931][ T7817] get_futex_key+0x136/0x1030 [ 204.948608][ T7817] ? futex_wait+0x4a0/0x5c0 [ 204.953104][ T7817] ? futex_setup_timer+0xc0/0xc0 [ 204.958068][ T7817] futex_wake+0x127/0x4f0 [ 204.962397][ T7817] ? futex_wake_mark+0x150/0x150 [ 204.967335][ T7817] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 204.973573][ T7817] ? lockdep_hardirqs_on+0x98/0x150 [ 204.978807][ T7817] do_futex+0x35d/0x3e0 [ 204.982979][ T7817] ? _copy_from_user+0xa5/0xe0 [ 204.987774][ T7817] ? __ia32_sys_get_robust_list+0x110/0x110 [ 204.993689][ T7817] __se_sys_futex+0x3a9/0x440 [ 204.998377][ T7817] ? __x64_sys_futex+0xf0/0xf0 [ 205.003141][ T7817] ? __x64_sys_futex+0x21/0xf0 [ 205.007903][ T7817] do_syscall_64+0x55/0xb0 [ 205.012312][ T7817] ? clear_bhb_loop+0x40/0x90 [ 205.016997][ T7817] ? clear_bhb_loop+0x40/0x90 [ 205.021677][ T7817] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 205.027567][ T7817] RIP: 0033:0x7fbb68d9de99 [ 205.031978][ T7817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.051624][ T7817] RSP: 002b:00007ffde8626208 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 205.060040][ T7817] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbb68d9de99 [ 205.068017][ T7817] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fbb69025fa8 [ 205.075984][ T7817] RBP: 0000000000001530 R08: 0000000000000008 R09: 0000000000000000 [ 205.083976][ T7817] R10: 00007fbb69025fa0 R11: 0000000000000246 R12: 0000000000000000 [ 205.091946][ T7817] R13: 00007fbb69025fac R14: 00007fbb69025fa8 R15: 00007fbb69025fa0 [ 205.099927][ T7817] [ 205.265905][ T7817] FAULT_INJECTION: forcing a failure. [ 205.265905][ T7817] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.328058][ T7817] CPU: 1 PID: 7817 Comm: syz.0.587 Not tainted syzkaller #0 [ 205.335412][ T7817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 205.345493][ T7817] Call Trace: [ 205.348789][ T7817] [ 205.351733][ T7817] dump_stack_lvl+0x18c/0x250 [ 205.356445][ T7817] ? show_regs_print_info+0x20/0x20 [ 205.361708][ T7817] ? load_image+0x420/0x420 [ 205.366242][ T7817] ? __might_fault+0xaa/0x120 [ 205.370942][ T7817] ? __lock_acquire+0x7d80/0x7d80 [ 205.375998][ T7817] should_fail_ex+0x394/0x4c0 [ 205.380712][ T7817] _copy_from_user+0x2f/0xe0 [ 205.385322][ T7817] get_timespec64+0x97/0x1b0 [ 205.389931][ T7817] ? timespec64_add_safe+0x1f0/0x1f0 [ 205.395251][ T7817] ? __lock_acquire+0x7d80/0x7d80 [ 205.400281][ T7817] __se_sys_futex+0x19b/0x440 [ 205.404959][ T7817] ? __x64_sys_futex+0xf0/0xf0 [ 205.409721][ T7817] ? __x64_sys_futex+0x21/0xf0 [ 205.414484][ T7817] do_syscall_64+0x55/0xb0 [ 205.418898][ T7817] ? clear_bhb_loop+0x40/0x90 [ 205.423580][ T7817] ? clear_bhb_loop+0x40/0x90 [ 205.428274][ T7817] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 205.434166][ T7817] RIP: 0033:0x7fbb68d9de99 [ 205.438668][ T7817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.458377][ T7817] RSP: 002b:00007ffde8626208 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 205.466794][ T7817] RAX: ffffffffffffffda RBX: 00000000000321ae RCX: 00007fbb68d9de99 [ 205.474764][ T7817] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fbb69025fac [ 205.482732][ T7817] RBP: 0000000000000032 R08: 0000000000745d1e R09: 0000000000000000 [ 205.490700][ T7817] R10: 00007ffde8626310 R11: 0000000000000246 R12: 00007ffde8626330 [ 205.498674][ T7817] R13: 00007fbb69025fac R14: 00000000000321e0 R15: 00007ffde8626310 [ 205.506678][ T7817] [ 205.552910][ T7774] lo speed is unknown, defaulting to 1000 [ 205.601943][ T7817] FAULT_INJECTION: forcing a failure. [ 205.601943][ T7817] name fail_futex, interval 1, probability 0, space 0, times 0 [ 205.624306][ T7817] CPU: 0 PID: 7817 Comm: syz.0.587 Not tainted syzkaller #0 [ 205.631659][ T7817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 205.641736][ T7817] Call Trace: [ 205.645032][ T7817] [ 205.648235][ T7817] dump_stack_lvl+0x18c/0x250 [ 205.652940][ T7817] ? show_regs_print_info+0x20/0x20 [ 205.658162][ T7817] ? load_image+0x420/0x420 [ 205.662700][ T7817] should_fail_ex+0x394/0x4c0 [ 205.667402][ T7817] get_futex_key+0x136/0x1030 [ 205.672094][ T7817] ? __lock_acquire+0x7d80/0x7d80 [ 205.677142][ T7817] ? futex_setup_timer+0xc0/0xc0 [ 205.682091][ T7817] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 205.688010][ T7817] ? lockdep_hardirqs_on+0x98/0x150 [ 205.693665][ T7817] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 205.699586][ T7817] futex_wait_setup+0xbc/0x270 [ 205.704366][ T7817] ? futex_wait_multiple+0x920/0x920 [ 205.709670][ T7817] ? ktime_add_safe+0x38/0x60 [ 205.714402][ T7817] futex_wait+0x1bc/0x5c0 [ 205.718764][ T7817] ? futex_wait_setup+0x270/0x270 [ 205.723811][ T7817] ? __remove_hrtimer+0x470/0x470 [ 205.728875][ T7817] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 205.735227][ T7817] ? lockdep_hardirqs_on+0x98/0x150 [ 205.740456][ T7817] do_futex+0x2ff/0x3e0 [ 205.744628][ T7817] ? _copy_from_user+0xa5/0xe0 [ 205.749413][ T7817] ? __ia32_sys_get_robust_list+0x110/0x110 [ 205.755321][ T7817] ? blkcg_maybe_throttle_current+0x19f/0xa90 [ 205.761410][ T7817] ? read_tsc+0x9/0x20 [ 205.765495][ T7817] ? ktime_get+0x24b/0x280 [ 205.769936][ T7817] __se_sys_futex+0x3a9/0x440 [ 205.774640][ T7817] ? __x64_sys_futex+0xf0/0xf0 [ 205.779427][ T7817] ? __x64_sys_futex+0x21/0xf0 [ 205.784381][ T7817] do_syscall_64+0x55/0xb0 [ 205.788811][ T7817] ? clear_bhb_loop+0x40/0x90 [ 205.793503][ T7817] ? clear_bhb_loop+0x40/0x90 [ 205.798205][ T7817] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 205.804138][ T7817] RIP: 0033:0x7fbb68d9de99 [ 205.808572][ T7817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.828206][ T7817] RSP: 002b:00007ffde8626208 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 205.836651][ T7817] RAX: ffffffffffffffda RBX: 00000000000322fe RCX: 00007fbb68d9de99 [ 205.844643][ T7817] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fbb69025fac [ 205.852637][ T7817] RBP: 0000000000000032 R08: 0000000000745d1e R09: 0000000000000000 [ 205.860634][ T7817] R10: 00007ffde8626310 R11: 0000000000000246 R12: 00007ffde8626330 [ 205.868626][ T7817] R13: 00007fbb69025fac R14: 0000000000032330 R15: 00007ffde8626310 [ 205.876639][ T7817] [ 205.894121][ T7817] FAULT_INJECTION: forcing a failure. [ 205.894121][ T7817] name fail_futex, interval 1, probability 0, space 0, times 0 [ 205.907087][ T7817] CPU: 0 PID: 7817 Comm: syz.0.587 Not tainted syzkaller #0 [ 205.914398][ T7817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 205.924477][ T7817] Call Trace: [ 205.927778][ T7817] [ 205.930724][ T7817] dump_stack_lvl+0x18c/0x250 [ 205.935458][ T7817] ? lock_chain_count+0x20/0x20 [ 205.940339][ T7817] ? show_regs_print_info+0x20/0x20 [ 205.945566][ T7817] ? load_image+0x420/0x420 [ 205.950144][ T7817] ? futex_q_unlock+0x23/0x30 [ 205.954844][ T7817] should_fail_ex+0x394/0x4c0 [ 205.959562][ T7774] lo speed is unknown, defaulting to 1000 [ 205.965298][ T7817] get_futex_key+0x136/0x1030 [ 205.970097][ T7817] ? futex_wait+0x4a0/0x5c0 [ 205.974631][ T7817] ? futex_setup_timer+0xc0/0xc0 [ 205.979604][ T7817] futex_wake+0x127/0x4f0 [ 205.983962][ T7817] ? futex_wake_mark+0x150/0x150 [ 205.988941][ T7817] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 205.995237][ T7817] ? lockdep_hardirqs_on+0x98/0x150 [ 206.000462][ T7817] do_futex+0x35d/0x3e0 [ 206.004624][ T7817] ? _copy_from_user+0xa5/0xe0 [ 206.009392][ T7817] ? __ia32_sys_get_robust_list+0x110/0x110 [ 206.015280][ T7817] ? blkcg_maybe_throttle_current+0x19f/0xa90 [ 206.021349][ T7817] __se_sys_futex+0x3a9/0x440 [ 206.026031][ T7817] ? __x64_sys_futex+0xf0/0xf0 [ 206.030796][ T7817] ? __x64_sys_futex+0x21/0xf0 [ 206.035560][ T7817] do_syscall_64+0x55/0xb0 [ 206.040063][ T7817] ? clear_bhb_loop+0x40/0x90 [ 206.044737][ T7817] ? clear_bhb_loop+0x40/0x90 [ 206.049414][ T7817] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 206.055304][ T7817] RIP: 0033:0x7fbb68d9de99 [ 206.059714][ T7817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.079318][ T7817] RSP: 002b:00007ffde8626208 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 206.087729][ T7817] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbb68d9de99 [ 206.095717][ T7817] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fbb69025fa8 [ 206.103709][ T7817] RBP: 0000000000001ec6 R08: 0000000000000002 R09: 0000000000000000 [ 206.111675][ T7817] R10: 00007fbb69025fa0 R11: 0000000000000246 R12: 0000000000000000 [ 206.119643][ T7817] R13: 00007fbb69025fac R14: 00007fbb69025fa8 R15: 00007fbb69025fa0 [ 206.127624][ T7817] [ 206.231855][ T7817] FAULT_INJECTION: forcing a failure. [ 206.231855][ T7817] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.265591][ T7817] CPU: 1 PID: 7817 Comm: syz.0.587 Not tainted syzkaller #0 [ 206.272943][ T7817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 206.283114][ T7817] Call Trace: [ 206.286415][ T7817] [ 206.289369][ T7817] dump_stack_lvl+0x18c/0x250 [ 206.294086][ T7817] ? show_regs_print_info+0x20/0x20 [ 206.299318][ T7817] ? load_image+0x420/0x420 [ 206.303864][ T7817] ? __might_fault+0xaa/0x120 [ 206.308612][ T7817] ? __lock_acquire+0x7d80/0x7d80 [ 206.313696][ T7817] should_fail_ex+0x394/0x4c0 [ 206.318433][ T7817] _copy_from_user+0x2f/0xe0 [ 206.323050][ T7817] get_timespec64+0x97/0x1b0 [ 206.327668][ T7817] ? timespec64_add_safe+0x1f0/0x1f0 [ 206.332996][ T7817] __se_sys_futex+0x19b/0x440 [ 206.337708][ T7817] ? __x64_sys_futex+0xf0/0xf0 [ 206.342515][ T7817] ? __x64_sys_futex+0x21/0xf0 [ 206.347306][ T7817] do_syscall_64+0x55/0xb0 [ 206.351753][ T7817] ? clear_bhb_loop+0x40/0x90 [ 206.356479][ T7817] ? clear_bhb_loop+0x40/0x90 [ 206.361183][ T7817] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 206.367097][ T7817] RIP: 0033:0x7fbb68d9de99 [ 206.371527][ T7817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.391159][ T7817] RSP: 002b:00007ffde8626208 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 206.399608][ T7817] RAX: ffffffffffffffda RBX: 0000000000032574 RCX: 00007fbb68d9de99 [ 206.407598][ T7817] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fbb6902609c [ 206.415653][ T7817] RBP: 0000000000000032 R08: 0000000000745d1e R09: 0000000000000000 [ 206.423627][ T7817] R10: 00007ffde8626310 R11: 0000000000000246 R12: 00007ffde8626330 [ 206.431619][ T7817] R13: 00007fbb6902609c R14: 00000000000325a6 R15: 00007ffde8626310 [ 206.439656][ T7817] [ 206.473469][ T7826] netlink: 12 bytes leftover after parsing attributes in process `syz.6.589'. [ 206.504236][ T7828] bridge0: port 3(dummy0) entered blocking state [ 206.514340][ T7828] bridge0: port 3(dummy0) entered disabled state [ 206.521955][ T7828] dummy0: entered allmulticast mode [ 206.529813][ T7828] dummy0: entered promiscuous mode [ 206.535712][ T7828] bridge0: port 3(dummy0) entered blocking state [ 206.542478][ T7828] bridge0: port 3(dummy0) entered forwarding state [ 206.560985][ T7828] netlink: 16 bytes leftover after parsing attributes in process `syz.3.590'. [ 206.636403][ T7831] tipc: New replicast peer: 127.0.0.1 [ 206.642545][ T7831] tipc: Enabled bearer , priority 10 [ 208.457058][ T7867] FAULT_INJECTION: forcing a failure. [ 208.457058][ T7867] name fail_futex, interval 1, probability 0, space 0, times 0 [ 208.470415][ T7867] CPU: 0 PID: 7867 Comm: syz.6.600 Not tainted syzkaller #0 [ 208.477740][ T7867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 208.487808][ T7867] Call Trace: [ 208.491081][ T7867] [ 208.494005][ T7867] dump_stack_lvl+0x18c/0x250 [ 208.498685][ T7867] ? lock_chain_count+0x20/0x20 [ 208.503546][ T7867] ? show_regs_print_info+0x20/0x20 [ 208.508741][ T7867] ? load_image+0x420/0x420 [ 208.513254][ T7867] should_fail_ex+0x394/0x4c0 [ 208.517932][ T7867] get_futex_key+0x136/0x1030 [ 208.522607][ T7867] ? futex_wait+0x4a0/0x5c0 [ 208.527116][ T7867] ? futex_setup_timer+0xc0/0xc0 [ 208.532085][ T7867] futex_wake+0x127/0x4f0 [ 208.536433][ T7867] ? futex_wake_mark+0x150/0x150 [ 208.541397][ T7867] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 208.547634][ T7867] ? lockdep_hardirqs_on+0x98/0x150 [ 208.552832][ T7867] do_futex+0x35d/0x3e0 [ 208.556997][ T7867] ? _copy_from_user+0xa5/0xe0 [ 208.561779][ T7867] ? __ia32_sys_get_robust_list+0x110/0x110 [ 208.567676][ T7867] __se_sys_futex+0x3a9/0x440 [ 208.572362][ T7867] ? __x64_sys_futex+0xf0/0xf0 [ 208.577125][ T7867] ? __x64_sys_futex+0x21/0xf0 [ 208.581883][ T7867] do_syscall_64+0x55/0xb0 [ 208.586302][ T7867] ? clear_bhb_loop+0x40/0x90 [ 208.591060][ T7867] ? clear_bhb_loop+0x40/0x90 [ 208.595735][ T7867] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 208.601627][ T7867] RIP: 0033:0x7fa42cf9de99 [ 208.606042][ T7867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.625654][ T7867] RSP: 002b:00007ffca9a6aaf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 208.634077][ T7867] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa42cf9de99 [ 208.642067][ T7867] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa42d225fa8 [ 208.650058][ T7867] RBP: 0000000000001530 R08: 0000000000000008 R09: 0000000000000000 [ 208.658033][ T7867] R10: 00007fa42d225fa0 R11: 0000000000000246 R12: 0000000000000000 [ 208.666000][ T7867] R13: 00007fa42d225fac R14: 00007fa42d225fa8 R15: 00007fa42d225fa0 [ 208.673986][ T7867] [ 208.691871][ T7867] FAULT_INJECTION: forcing a failure. [ 208.691871][ T7867] name fail_futex, interval 1, probability 0, space 0, times 0 [ 208.722370][ T7867] CPU: 0 PID: 7867 Comm: syz.6.600 Not tainted syzkaller #0 [ 208.729713][ T7867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 208.739772][ T7867] Call Trace: [ 208.743078][ T7867] [ 208.746025][ T7867] dump_stack_lvl+0x18c/0x250 [ 208.750728][ T7867] ? show_regs_print_info+0x20/0x20 [ 208.755941][ T7867] ? load_image+0x420/0x420 [ 208.760439][ T7867] ? do_futex+0x35d/0x3e0 [ 208.764755][ T7867] ? _copy_from_user+0xa5/0xe0 [ 208.769509][ T7867] ? __ia32_sys_get_robust_list+0x110/0x110 [ 208.775424][ T7867] should_fail_ex+0x394/0x4c0 [ 208.780128][ T7867] __se_sys_futex+0x181/0x440 [ 208.784833][ T7867] ? __x64_sys_futex+0xf0/0xf0 [ 208.789605][ T7867] ? __x64_sys_futex+0x21/0xf0 [ 208.794359][ T7867] do_syscall_64+0x55/0xb0 [ 208.798764][ T7867] ? clear_bhb_loop+0x40/0x90 [ 208.803442][ T7867] ? clear_bhb_loop+0x40/0x90 [ 208.808134][ T7867] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 208.814017][ T7867] RIP: 0033:0x7fa42cf9de99 [ 208.818417][ T7867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.838062][ T7867] RSP: 002b:00007ffca9a6aaf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 208.846491][ T7867] RAX: ffffffffffffffda RBX: 0000000000032f10 RCX: 00007fa42cf9de99 [ 208.854454][ T7867] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa42d225fac [ 208.862418][ T7867] RBP: 0000000000000032 R08: 0000000000745d1e R09: 0000000000000000 [ 208.870392][ T7867] R10: 00007ffca9a6ac00 R11: 0000000000000246 R12: 00007ffca9a6ac20 [ 208.878361][ T7867] R13: 00007fa42d225fac R14: 0000000000032f42 R15: 00007ffca9a6ac00 [ 208.886365][ T7867] [ 208.895055][ T7867] FAULT_INJECTION: forcing a failure. [ 208.895055][ T7867] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.932698][ T7867] CPU: 0 PID: 7867 Comm: syz.6.600 Not tainted syzkaller #0 [ 208.940051][ T7867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 208.950128][ T7867] Call Trace: [ 208.953429][ T7867] [ 208.956377][ T7867] dump_stack_lvl+0x18c/0x250 [ 208.961081][ T7867] ? show_regs_print_info+0x20/0x20 [ 208.966276][ T7867] ? load_image+0x420/0x420 [ 208.970772][ T7867] ? __might_fault+0xaa/0x120 [ 208.975446][ T7867] ? __lock_acquire+0x7d80/0x7d80 [ 208.980482][ T7867] should_fail_ex+0x394/0x4c0 [ 208.985173][ T7867] _copy_from_user+0x2f/0xe0 [ 208.989796][ T7867] get_timespec64+0x97/0x1b0 [ 208.994413][ T7867] ? timespec64_add_safe+0x1f0/0x1f0 [ 208.999718][ T7867] ? blkcg_maybe_throttle_current+0x19f/0xa90 [ 209.005815][ T7867] __se_sys_futex+0x19b/0x440 [ 209.010513][ T7867] ? __x64_sys_futex+0xf0/0xf0 [ 209.015292][ T7867] ? __x64_sys_futex+0x21/0xf0 [ 209.020058][ T7867] do_syscall_64+0x55/0xb0 [ 209.024463][ T7867] ? clear_bhb_loop+0x40/0x90 [ 209.029144][ T7867] ? clear_bhb_loop+0x40/0x90 [ 209.033812][ T7867] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 209.039722][ T7867] RIP: 0033:0x7fa42cf9de99 [ 209.044136][ T7867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.063738][ T7867] RSP: 002b:00007ffca9a6aaf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 209.072150][ T7867] RAX: ffffffffffffffda RBX: 0000000000032fdb RCX: 00007fa42cf9de99 [ 209.080119][ T7867] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa42d225fac [ 209.088080][ T7867] RBP: 0000000000000032 R08: 0000000000745d1e R09: 0000000000000000 [ 209.096043][ T7867] R10: 00007ffca9a6ac00 R11: 0000000000000246 R12: 00007ffca9a6ac20 [ 209.104006][ T7867] R13: 00007fa42d225fac R14: 000000000003300d R15: 00007ffca9a6ac00 [ 209.111985][ T7867] [ 209.154722][ T7867] FAULT_INJECTION: forcing a failure. [ 209.154722][ T7867] name fail_futex, interval 1, probability 0, space 0, times 0 [ 209.184106][ T7867] CPU: 0 PID: 7867 Comm: syz.6.600 Not tainted syzkaller #0 [ 209.191462][ T7867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 209.201626][ T7867] Call Trace: [ 209.204928][ T7867] [ 209.207912][ T7867] dump_stack_lvl+0x18c/0x250 [ 209.212630][ T7867] ? show_regs_print_info+0x20/0x20 [ 209.217868][ T7867] ? load_image+0x420/0x420 [ 209.222407][ T7867] ? do_futex+0x35d/0x3e0 [ 209.226767][ T7867] ? _copy_from_user+0xa5/0xe0 [ 209.231567][ T7867] ? __ia32_sys_get_robust_list+0x110/0x110 [ 209.237499][ T7867] should_fail_ex+0x394/0x4c0 [ 209.242300][ T7867] __se_sys_futex+0x181/0x440 [ 209.247008][ T7867] ? __x64_sys_futex+0xf0/0xf0 [ 209.251815][ T7867] ? __x64_sys_futex+0x21/0xf0 [ 209.256607][ T7867] do_syscall_64+0x55/0xb0 [ 209.261050][ T7867] ? clear_bhb_loop+0x40/0x90 [ 209.265756][ T7867] ? clear_bhb_loop+0x40/0x90 [ 209.270636][ T7867] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 209.276540][ T7867] RIP: 0033:0x7fa42cf9de99 [ 209.280982][ T7867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.300606][ T7867] RSP: 002b:00007ffca9a6aaf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 209.309055][ T7867] RAX: ffffffffffffffda RBX: 00000000000330df RCX: 00007fa42cf9de99 [ 209.317031][ T7867] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa42d225fac [ 209.325028][ T7867] RBP: 0000000000000032 R08: 0000000000745d1e R09: 0000000000000000 [ 209.333017][ T7867] R10: 00007ffca9a6ac00 R11: 0000000000000246 R12: 00007ffca9a6ac20 [ 209.340991][ T7867] R13: 00007fa42d225fac R14: 0000000000033111 R15: 00007ffca9a6ac00 [ 209.348972][ T7867] [ 209.362104][ T7867] FAULT_INJECTION: forcing a failure. [ 209.362104][ T7867] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.378169][ T7867] CPU: 0 PID: 7867 Comm: syz.6.600 Not tainted syzkaller #0 [ 209.385500][ T7867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 209.395584][ T7867] Call Trace: [ 209.398874][ T7867] [ 209.401814][ T7867] dump_stack_lvl+0x18c/0x250 [ 209.406525][ T7867] ? show_regs_print_info+0x20/0x20 [ 209.411754][ T7867] ? load_image+0x420/0x420 [ 209.416300][ T7867] ? __might_fault+0xaa/0x120 [ 209.421008][ T7867] ? __lock_acquire+0x7d80/0x7d80 [ 209.426069][ T7867] should_fail_ex+0x394/0x4c0 [ 209.430789][ T7867] _copy_from_user+0x2f/0xe0 [ 209.435403][ T7867] get_timespec64+0x97/0x1b0 [ 209.440023][ T7867] ? timespec64_add_safe+0x1f0/0x1f0 [ 209.445335][ T7867] ? blkcg_maybe_throttle_current+0x19f/0xa90 [ 209.451430][ T7867] __se_sys_futex+0x19b/0x440 [ 209.456122][ T7867] ? __x64_sys_futex+0xf0/0xf0 [ 209.460879][ T7867] ? __x64_sys_futex+0x21/0xf0 [ 209.465643][ T7867] do_syscall_64+0x55/0xb0 [ 209.470060][ T7867] ? clear_bhb_loop+0x40/0x90 [ 209.474735][ T7867] ? clear_bhb_loop+0x40/0x90 [ 209.479434][ T7867] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 209.485330][ T7867] RIP: 0033:0x7fa42cf9de99 [ 209.489757][ T7867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.509363][ T7867] RSP: 002b:00007ffca9a6aaf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 209.517780][ T7867] RAX: ffffffffffffffda RBX: 00000000000331ae RCX: 00007fa42cf9de99 [ 209.525787][ T7867] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa42d225fac [ 209.533763][ T7867] RBP: 0000000000000032 R08: 0000000000745d1e R09: 0000000000000000 [ 209.541733][ T7867] R10: 00007ffca9a6ac00 R11: 0000000000000246 R12: 00007ffca9a6ac20 [ 209.549705][ T7867] R13: 00007fa42d225fac R14: 00000000000331e0 R15: 00007ffca9a6ac00 [ 209.557685][ T7867] [ 209.580057][ T7876] netlink: 12 bytes leftover after parsing attributes in process `syz.3.603'. [ 211.852288][ T7905] FAULT_INJECTION: forcing a failure. [ 211.852288][ T7905] name fail_futex, interval 1, probability 0, space 0, times 0 [ 211.867030][ T7905] CPU: 0 PID: 7905 Comm: syz.6.612 Not tainted syzkaller #0 [ 211.874366][ T7905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 211.884621][ T7905] Call Trace: [ 211.887915][ T7905] [ 211.890870][ T7905] dump_stack_lvl+0x18c/0x250 [ 211.895581][ T7905] ? lock_chain_count+0x20/0x20 [ 211.900459][ T7905] ? show_regs_print_info+0x20/0x20 [ 211.905675][ T7905] ? load_image+0x420/0x420 [ 211.910213][ T7905] should_fail_ex+0x394/0x4c0 [ 211.914911][ T7905] get_futex_key+0x136/0x1030 [ 211.919609][ T7905] ? futex_wait+0x4a0/0x5c0 [ 211.924128][ T7905] ? futex_setup_timer+0xc0/0xc0 [ 211.929090][ T7905] futex_wake+0x127/0x4f0 [ 211.933457][ T7905] ? futex_wake_mark+0x150/0x150 [ 211.938415][ T7905] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 211.944678][ T7905] ? lockdep_hardirqs_on+0x98/0x150 [ 211.949907][ T7905] do_futex+0x35d/0x3e0 [ 211.954080][ T7905] ? _copy_from_user+0xa5/0xe0 [ 211.958854][ T7905] ? __ia32_sys_get_robust_list+0x110/0x110 [ 211.964787][ T7905] __se_sys_futex+0x3a9/0x440 [ 211.969494][ T7905] ? __x64_sys_futex+0xf0/0xf0 [ 211.974283][ T7905] ? __x64_sys_futex+0x21/0xf0 [ 211.979070][ T7905] do_syscall_64+0x55/0xb0 [ 211.983506][ T7905] ? clear_bhb_loop+0x40/0x90 [ 211.988202][ T7905] ? clear_bhb_loop+0x40/0x90 [ 211.992895][ T7905] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 211.998806][ T7905] RIP: 0033:0x7fa42cf9de99 [ 212.003226][ T7905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.022835][ T7905] RSP: 002b:00007ffca9a6aaf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 212.031256][ T7905] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa42cf9de99 [ 212.039250][ T7905] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa42d225fa8 [ 212.047424][ T7905] RBP: 0000000000001530 R08: 0000000000000008 R09: 0000000000000000 [ 212.055418][ T7905] R10: 00007fa42d225fa0 R11: 0000000000000246 R12: 0000000000000000 [ 212.063403][ T7905] R13: 00007fa42d225fac R14: 00007fa42d225fa8 R15: 00007fa42d225fa0 [ 212.071396][ T7905] [ 212.089747][ T7905] FAULT_INJECTION: forcing a failure. [ 212.089747][ T7905] name fail_futex, interval 1, probability 0, space 0, times 0 [ 212.102747][ T7905] CPU: 0 PID: 7905 Comm: syz.6.612 Not tainted syzkaller #0 [ 212.110074][ T7905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 212.120152][ T7905] Call Trace: [ 212.123444][ T7905] [ 212.126390][ T7905] dump_stack_lvl+0x18c/0x250 [ 212.131094][ T7905] ? show_regs_print_info+0x20/0x20 [ 212.136325][ T7905] ? load_image+0x420/0x420 [ 212.140853][ T7905] ? do_futex+0x35d/0x3e0 [ 212.145204][ T7905] ? _copy_from_user+0xa5/0xe0 [ 212.150081][ T7905] ? __ia32_sys_get_robust_list+0x110/0x110 [ 212.156096][ T7905] should_fail_ex+0x394/0x4c0 [ 212.160808][ T7905] __se_sys_futex+0x181/0x440 [ 212.165515][ T7905] ? __x64_sys_futex+0xf0/0xf0 [ 212.170312][ T7905] ? __x64_sys_futex+0x21/0xf0 [ 212.175118][ T7905] do_syscall_64+0x55/0xb0 [ 212.179536][ T7905] ? clear_bhb_loop+0x40/0x90 [ 212.184233][ T7905] ? clear_bhb_loop+0x40/0x90 [ 212.188941][ T7905] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 212.195121][ T7905] RIP: 0033:0x7fa42cf9de99 [ 212.199548][ T7905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.219246][ T7905] RSP: 002b:00007ffca9a6aaf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 212.227660][ T7905] RAX: ffffffffffffffda RBX: 0000000000033c56 RCX: 00007fa42cf9de99 [ 212.235631][ T7905] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa42d225fac [ 212.243705][ T7905] RBP: 0000000000000032 R08: 0000000000745d1e R09: 0000000000000000 [ 212.252038][ T7905] R10: 00007ffca9a6ac00 R11: 0000000000000246 R12: 00007ffca9a6ac20 [ 212.260021][ T7905] R13: 00007fa42d225fac R14: 0000000000033c88 R15: 00007ffca9a6ac00 [ 212.268209][ T7905] [ 212.282502][ T7905] FAULT_INJECTION: forcing a failure. [ 212.282502][ T7905] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.302976][ T7905] CPU: 1 PID: 7905 Comm: syz.6.612 Not tainted syzkaller #0 [ 212.310303][ T7905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 212.320374][ T7905] Call Trace: [ 212.323669][ T7905] [ 212.326597][ T7905] dump_stack_lvl+0x18c/0x250 [ 212.331279][ T7905] ? show_regs_print_info+0x20/0x20 [ 212.336481][ T7905] ? load_image+0x420/0x420 [ 212.341071][ T7905] ? __might_fault+0xaa/0x120 [ 212.345768][ T7905] ? __lock_acquire+0x7d80/0x7d80 [ 212.350791][ T7905] should_fail_ex+0x394/0x4c0 [ 212.355512][ T7905] _copy_from_user+0x2f/0xe0 [ 212.360137][ T7905] get_timespec64+0x97/0x1b0 [ 212.364736][ T7905] ? timespec64_add_safe+0x1f0/0x1f0 [ 212.370028][ T7905] ? blkcg_maybe_throttle_current+0x19f/0xa90 [ 212.376113][ T7905] __se_sys_futex+0x19b/0x440 [ 212.380794][ T7905] ? __x64_sys_futex+0xf0/0xf0 [ 212.385584][ T7905] ? __x64_sys_futex+0x21/0xf0 [ 212.390350][ T7905] do_syscall_64+0x55/0xb0 [ 212.394793][ T7905] ? clear_bhb_loop+0x40/0x90 [ 212.399497][ T7905] ? clear_bhb_loop+0x40/0x90 [ 212.404179][ T7905] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 212.410168][ T7905] RIP: 0033:0x7fa42cf9de99 [ 212.414604][ T7905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.434216][ T7905] RSP: 002b:00007ffca9a6aaf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 212.442629][ T7905] RAX: ffffffffffffffda RBX: 0000000000033d17 RCX: 00007fa42cf9de99 [ 212.450634][ T7905] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa42d225fac [ 212.458619][ T7905] RBP: 0000000000000032 R08: 0000000000745d1e R09: 0000000000000000 [ 212.466598][ T7905] R10: 00007ffca9a6ac00 R11: 0000000000000246 R12: 00007ffca9a6ac20 [ 212.474569][ T7905] R13: 00007fa42d225fac R14: 0000000000033d49 R15: 00007ffca9a6ac00 [ 212.482580][ T7905] [ 212.501207][ T7905] FAULT_INJECTION: forcing a failure. [ 212.501207][ T7905] name fail_futex, interval 1, probability 0, space 0, times 0 [ 212.514592][ T7905] CPU: 1 PID: 7905 Comm: syz.6.612 Not tainted syzkaller #0 [ 212.521936][ T7905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 212.531992][ T7905] Call Trace: [ 212.535264][ T7905] [ 212.538281][ T7905] dump_stack_lvl+0x18c/0x250 [ 212.542960][ T7905] ? show_regs_print_info+0x20/0x20 [ 212.548246][ T7905] ? load_image+0x420/0x420 [ 212.552765][ T7905] ? do_futex+0x35d/0x3e0 [ 212.557088][ T7905] ? _copy_from_user+0xa5/0xe0 [ 212.561850][ T7905] ? __ia32_sys_get_robust_list+0x110/0x110 [ 212.567759][ T7905] should_fail_ex+0x394/0x4c0 [ 212.572473][ T7905] __se_sys_futex+0x181/0x440 [ 212.577193][ T7905] ? __x64_sys_futex+0xf0/0xf0 [ 212.581986][ T7905] ? __x64_sys_futex+0x21/0xf0 [ 212.586760][ T7905] do_syscall_64+0x55/0xb0 [ 212.591213][ T7905] ? clear_bhb_loop+0x40/0x90 [ 212.595914][ T7905] ? clear_bhb_loop+0x40/0x90 [ 212.600613][ T7905] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 212.606515][ T7905] RIP: 0033:0x7fa42cf9de99 [ 212.610925][ T7905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.630542][ T7905] RSP: 002b:00007ffca9a6aaf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 212.638980][ T7905] RAX: ffffffffffffffda RBX: 0000000000033df1 RCX: 00007fa42cf9de99 [ 212.647210][ T7905] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa42d225fac [ 212.655236][ T7905] RBP: 0000000000000032 R08: 0000000000745d1e R09: 0000000000000000 [ 212.663237][ T7905] R10: 00007ffca9a6ac00 R11: 0000000000000246 R12: 00007ffca9a6ac20 [ 212.671241][ T7905] R13: 00007fa42d225fac R14: 0000000000033e23 R15: 00007ffca9a6ac00 [ 212.679261][ T7905] [ 212.691462][ T7905] FAULT_INJECTION: forcing a failure. [ 212.691462][ T7905] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.707053][ T7905] CPU: 1 PID: 7905 Comm: syz.6.612 Not tainted syzkaller #0 [ 212.714390][ T7905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 212.724467][ T7905] Call Trace: [ 212.727771][ T7905] [ 212.730718][ T7905] dump_stack_lvl+0x18c/0x250 [ 212.735429][ T7905] ? show_regs_print_info+0x20/0x20 [ 212.740644][ T7905] ? load_image+0x420/0x420 [ 212.745177][ T7905] ? __might_fault+0xaa/0x120 [ 212.749894][ T7905] ? __lock_acquire+0x7d80/0x7d80 [ 212.754956][ T7905] should_fail_ex+0x394/0x4c0 [ 212.759676][ T7905] _copy_from_user+0x2f/0xe0 [ 212.764302][ T7905] get_timespec64+0x97/0x1b0 [ 212.768927][ T7905] ? timespec64_add_safe+0x1f0/0x1f0 [ 212.774247][ T7905] ? blkcg_maybe_throttle_current+0x19f/0xa90 [ 212.780395][ T7905] __se_sys_futex+0x19b/0x440 [ 212.785092][ T7905] ? __x64_sys_futex+0xf0/0xf0 [ 212.790291][ T7905] ? __x64_sys_futex+0x21/0xf0 [ 212.795150][ T7905] do_syscall_64+0x55/0xb0 [ 212.799597][ T7905] ? clear_bhb_loop+0x40/0x90 [ 212.804311][ T7905] ? clear_bhb_loop+0x40/0x90 [ 212.809022][ T7905] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 212.814945][ T7905] RIP: 0033:0x7fa42cf9de99 [ 212.819367][ T7905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.838973][ T7905] RSP: 002b:00007ffca9a6aaf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 212.847415][ T7905] RAX: ffffffffffffffda RBX: 0000000000033eb0 RCX: 00007fa42cf9de99 [ 212.855397][ T7905] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa42d225fac [ 212.863374][ T7905] RBP: 0000000000000032 R08: 0000000000745d1e R09: 0000000000000000 [ 212.871344][ T7905] R10: 00007ffca9a6ac00 R11: 0000000000000246 R12: 00007ffca9a6ac20 [ 212.879311][ T7905] R13: 00007fa42d225fac R14: 0000000000033ee2 R15: 00007ffca9a6ac00 [ 212.887290][ T7905] [ 213.069070][ T7913] netlink: 12 bytes leftover after parsing attributes in process `syz.6.614'. [ 214.854970][ T7932] netlink: 68 bytes leftover after parsing attributes in process `syz.6.618'. [ 214.864026][ T7932] netlink: 4 bytes leftover after parsing attributes in process `syz.6.618'. [ 214.874226][ T7932] netlink: 4 bytes leftover after parsing attributes in process `syz.6.618'. [ 215.745802][ T7944] FAULT_INJECTION: forcing a failure. [ 215.745802][ T7944] name fail_futex, interval 1, probability 0, space 0, times 0 [ 215.759022][ T7944] CPU: 1 PID: 7944 Comm: syz.6.622 Not tainted syzkaller #0 [ 215.766354][ T7944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 215.776431][ T7944] Call Trace: [ 215.779720][ T7944] [ 215.782659][ T7944] dump_stack_lvl+0x18c/0x250 [ 215.787361][ T7944] ? lock_chain_count+0x20/0x20 [ 215.792258][ T7944] ? show_regs_print_info+0x20/0x20 [ 215.797485][ T7944] ? load_image+0x420/0x420 [ 215.802060][ T7944] should_fail_ex+0x394/0x4c0 [ 215.806765][ T7944] get_futex_key+0x136/0x1030 [ 215.811466][ T7944] ? futex_wait+0x4a0/0x5c0 [ 215.815992][ T7944] ? futex_setup_timer+0xc0/0xc0 [ 215.820969][ T7944] futex_wake+0x127/0x4f0 [ 215.825332][ T7944] ? futex_wake_mark+0x150/0x150 [ 215.830285][ T7944] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 215.836528][ T7944] ? lockdep_hardirqs_on+0x98/0x150 [ 215.841754][ T7944] do_futex+0x35d/0x3e0 [ 215.845908][ T7944] ? _copy_from_user+0xa5/0xe0 [ 215.850676][ T7944] ? __ia32_sys_get_robust_list+0x110/0x110 [ 215.856573][ T7944] __se_sys_futex+0x3a9/0x440 [ 215.861252][ T7944] ? __x64_sys_futex+0xf0/0xf0 [ 215.866013][ T7944] ? __x64_sys_futex+0x21/0xf0 [ 215.870779][ T7944] do_syscall_64+0x55/0xb0 [ 215.875190][ T7944] ? clear_bhb_loop+0x40/0x90 [ 215.879862][ T7944] ? clear_bhb_loop+0x40/0x90 [ 215.884557][ T7944] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 215.890449][ T7944] RIP: 0033:0x7fa42cf9de99 [ 215.894859][ T7944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.914459][ T7944] RSP: 002b:00007ffca9a6aaf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 215.922875][ T7944] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa42cf9de99 [ 215.930865][ T7944] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa42d225fa8 [ 215.938836][ T7944] RBP: 0000000000001530 R08: 0000000000000008 R09: 0000000000000000 [ 215.946802][ T7944] R10: 00007fa42d225fa0 R11: 0000000000000246 R12: 0000000000000000 [ 215.954768][ T7944] R13: 00007fa42d225fac R14: 00007fa42d225fa8 R15: 00007fa42d225fa0 [ 215.962746][ T7944] [ 216.025505][ T7944] FAULT_INJECTION: forcing a failure. [ 216.025505][ T7944] name fail_futex, interval 1, probability 0, space 0, times 0 [ 216.046806][ T7944] CPU: 1 PID: 7944 Comm: syz.6.622 Not tainted syzkaller #0 [ 216.054152][ T7944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 216.064221][ T7944] Call Trace: [ 216.067516][ T7944] [ 216.070553][ T7944] dump_stack_lvl+0x18c/0x250 [ 216.075294][ T7944] ? show_regs_print_info+0x20/0x20 [ 216.080539][ T7944] ? load_image+0x420/0x420 [ 216.085096][ T7944] ? do_futex+0x35d/0x3e0 [ 216.089456][ T7944] ? _copy_from_user+0xa5/0xe0 [ 216.094245][ T7944] ? __ia32_sys_get_robust_list+0x110/0x110 [ 216.100162][ T7944] should_fail_ex+0x394/0x4c0 [ 216.104855][ T7944] __se_sys_futex+0x181/0x440 [ 216.109547][ T7944] ? __x64_sys_futex+0xf0/0xf0 [ 216.114325][ T7944] ? __x64_sys_futex+0x21/0xf0 [ 216.119098][ T7944] do_syscall_64+0x55/0xb0 [ 216.123530][ T7944] ? clear_bhb_loop+0x40/0x90 [ 216.128209][ T7944] ? clear_bhb_loop+0x40/0x90 [ 216.132919][ T7944] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 216.138837][ T7944] RIP: 0033:0x7fa42cf9de99 [ 216.143350][ T7944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.162979][ T7944] RSP: 002b:00007ffca9a6aaf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 216.171425][ T7944] RAX: ffffffffffffffda RBX: 0000000000034bb6 RCX: 00007fa42cf9de99 [ 216.179424][ T7944] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa42d22609c [ 216.187422][ T7944] RBP: 0000000000000032 R08: 0000000000745d1e R09: 0000000000000000 [ 216.195409][ T7944] R10: 00007ffca9a6ac00 R11: 0000000000000246 R12: 00007ffca9a6ac20 [ 216.203404][ T7944] R13: 00007fa42d22609c R14: 0000000000034be8 R15: 00007ffca9a6ac00 [ 216.211417][ T7944] [ 216.238119][ T7944] FAULT_INJECTION: forcing a failure. [ 216.238119][ T7944] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.251487][ T7944] CPU: 1 PID: 7944 Comm: syz.6.622 Not tainted syzkaller #0 [ 216.258897][ T7944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 216.269007][ T7944] Call Trace: [ 216.272339][ T7944] [ 216.275301][ T7944] dump_stack_lvl+0x18c/0x250 [ 216.280019][ T7944] ? show_regs_print_info+0x20/0x20 [ 216.285254][ T7944] ? load_image+0x420/0x420 [ 216.289792][ T7944] ? __might_fault+0xaa/0x120 [ 216.294497][ T7944] ? __lock_acquire+0x7d80/0x7d80 [ 216.299671][ T7944] should_fail_ex+0x394/0x4c0 [ 216.304378][ T7944] _copy_from_user+0x2f/0xe0 [ 216.308995][ T7944] get_timespec64+0x97/0x1b0 [ 216.313606][ T7944] ? timespec64_add_safe+0x1f0/0x1f0 [ 216.318913][ T7944] ? blkcg_maybe_throttle_current+0x19f/0xa90 [ 216.325019][ T7944] __se_sys_futex+0x19b/0x440 [ 216.329721][ T7944] ? __x64_sys_futex+0xf0/0xf0 [ 216.334496][ T7944] ? __x64_sys_futex+0x21/0xf0 [ 216.339258][ T7944] do_syscall_64+0x55/0xb0 [ 216.343674][ T7944] ? clear_bhb_loop+0x40/0x90 [ 216.348370][ T7944] ? clear_bhb_loop+0x40/0x90 [ 216.353052][ T7944] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 216.358945][ T7944] RIP: 0033:0x7fa42cf9de99 [ 216.363361][ T7944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.382973][ T7944] RSP: 002b:00007ffca9a6aaf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 216.391424][ T7944] RAX: ffffffffffffffda RBX: 0000000000034c8a RCX: 00007fa42cf9de99 [ 216.399398][ T7944] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa42d22609c [ 216.407371][ T7944] RBP: 0000000000000032 R08: 0000000000745d1e R09: 0000000000000000 [ 216.415344][ T7944] R10: 00007ffca9a6ac00 R11: 0000000000000246 R12: 00007ffca9a6ac20 [ 216.423327][ T7944] R13: 00007fa42d22609c R14: 0000000000034cbc R15: 00007ffca9a6ac00 [ 216.431313][ T7944] [ 216.447256][ T7944] FAULT_INJECTION: forcing a failure. [ 216.447256][ T7944] name fail_futex, interval 1, probability 0, space 0, times 0 [ 216.475605][ T7944] CPU: 0 PID: 7944 Comm: syz.6.622 Not tainted syzkaller #0 [ 216.482960][ T7944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 216.493041][ T7944] Call Trace: [ 216.496350][ T7944] [ 216.499304][ T7944] dump_stack_lvl+0x18c/0x250 [ 216.504024][ T7944] ? show_regs_print_info+0x20/0x20 [ 216.509254][ T7944] ? load_image+0x420/0x420 [ 216.513801][ T7944] should_fail_ex+0x394/0x4c0 [ 216.518516][ T7944] get_futex_key+0x136/0x1030 [ 216.523226][ T7944] ? __lock_acquire+0x7d80/0x7d80 [ 216.528286][ T7944] ? futex_setup_timer+0xc0/0xc0 [ 216.533235][ T7944] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 216.539147][ T7944] ? lockdep_hardirqs_on+0x98/0x150 [ 216.544369][ T7944] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 216.550277][ T7944] futex_wait_setup+0xbc/0x270 [ 216.555034][ T7944] ? futex_wait_multiple+0x920/0x920 [ 216.560312][ T7944] ? ktime_add_safe+0x38/0x60 [ 216.565001][ T7944] futex_wait+0x1bc/0x5c0 [ 216.569327][ T7944] ? futex_wait_setup+0x270/0x270 [ 216.574474][ T7944] ? __remove_hrtimer+0x470/0x470 [ 216.579534][ T7944] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 216.585793][ T7944] ? lockdep_hardirqs_on+0x98/0x150 [ 216.591028][ T7944] do_futex+0x2ff/0x3e0 [ 216.595208][ T7944] ? _copy_from_user+0xa5/0xe0 [ 216.599992][ T7944] ? __ia32_sys_get_robust_list+0x110/0x110 [ 216.605915][ T7944] ? blkcg_maybe_throttle_current+0x19f/0xa90 [ 216.611977][ T7944] ? read_tsc+0x9/0x20 [ 216.616061][ T7944] ? ktime_get+0x24b/0x280 [ 216.620468][ T7944] __se_sys_futex+0x3a9/0x440 [ 216.625138][ T7944] ? __x64_sys_futex+0xf0/0xf0 [ 216.629890][ T7944] ? __x64_sys_futex+0x21/0xf0 [ 216.634640][ T7944] do_syscall_64+0x55/0xb0 [ 216.639067][ T7944] ? clear_bhb_loop+0x40/0x90 [ 216.643775][ T7944] ? clear_bhb_loop+0x40/0x90 [ 216.648475][ T7944] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 216.654463][ T7944] RIP: 0033:0x7fa42cf9de99 [ 216.658884][ T7944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.678489][ T7944] RSP: 002b:00007ffca9a6aaf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 216.686944][ T7944] RAX: ffffffffffffffda RBX: 0000000000034d5b RCX: 00007fa42cf9de99 [ 216.694940][ T7944] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa42d22609c [ 216.702933][ T7944] RBP: 0000000000000032 R08: 0000000000745d1e R09: 0000000000000000 [ 216.710914][ T7944] R10: 00007ffca9a6ac00 R11: 0000000000000246 R12: 00007ffca9a6ac20 [ 216.718895][ T7944] R13: 00007fa42d22609c R14: 0000000000034d8d R15: 00007ffca9a6ac00 [ 216.726879][ T7944] [ 216.742642][ T7944] FAULT_INJECTION: forcing a failure. [ 216.742642][ T7944] name fail_futex, interval 1, probability 0, space 0, times 0 [ 216.760690][ T7944] CPU: 0 PID: 7944 Comm: syz.6.622 Not tainted syzkaller #0 [ 216.768052][ T7944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 216.778120][ T7944] Call Trace: [ 216.781390][ T7944] [ 216.784311][ T7944] dump_stack_lvl+0x18c/0x250 [ 216.788992][ T7944] ? show_regs_print_info+0x20/0x20 [ 216.794201][ T7944] ? load_image+0x420/0x420 [ 216.798709][ T7944] should_fail_ex+0x394/0x4c0 [ 216.803379][ T7944] get_futex_key+0x136/0x1030 [ 216.808046][ T7944] ? futex_setup_timer+0xc0/0xc0 [ 216.812966][ T7944] ? count_memcg_event_mm+0x36f/0x3c0 [ 216.818344][ T7944] futex_wake+0x127/0x4f0 [ 216.822692][ T7944] ? futex_wake_mark+0x150/0x150 [ 216.827649][ T7944] ? handle_mm_fault+0xe6/0x4a50 [ 216.832596][ T7944] do_futex+0x35d/0x3e0 [ 216.836753][ T7944] ? __ia32_sys_get_robust_list+0x110/0x110 [ 216.842808][ T7944] ? __lock_acquire+0x7d80/0x7d80 [ 216.847846][ T7944] __se_sys_futex+0x3a9/0x440 [ 216.852514][ T7944] ? __x64_sys_futex+0xf0/0xf0 [ 216.857354][ T7944] ? lock_chain_count+0x20/0x20 [ 216.862210][ T7944] ? __x64_sys_futex+0x21/0xf0 [ 216.866979][ T7944] do_syscall_64+0x55/0xb0 [ 216.871406][ T7944] ? clear_bhb_loop+0x40/0x90 [ 216.876087][ T7944] ? clear_bhb_loop+0x40/0x90 [ 216.880759][ T7944] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 216.886649][ T7944] RIP: 0033:0x7fa42cf9de99 [ 216.891057][ T7944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.910756][ T7944] RSP: 002b:00007ffca9a6aaf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 216.919174][ T7944] RAX: ffffffffffffffda RBX: 00000000000000f0 RCX: 00007fa42cf9de99 [ 216.927140][ T7944] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa42d226098 [ 216.935103][ T7944] RBP: 0000000000001ec6 R08: 0000000000000004 R09: 0000000000000000 [ 216.943066][ T7944] R10: 00007fa42d225fa0 R11: 0000000000000246 R12: 0000000000000001 [ 216.951137][ T7944] R13: 00007fa42d22609c R14: 00007fa42d226098 R15: 00007fa42d226090 [ 216.959130][ T7944] [ 217.063114][ T7954] netlink: 12 bytes leftover after parsing attributes in process `syz.3.624'. [ 219.191417][ T51] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 219.201668][ T51] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 219.210513][ T51] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 219.221232][ T51] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 219.234467][ T51] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 219.242639][ T51] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 219.295158][ T7977] lo speed is unknown, defaulting to 1000 [ 219.592725][ T7977] chnl_net:caif_netlink_parms(): no params data found [ 219.696098][ T7977] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.703328][ T7977] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.710713][ T7977] bridge_slave_0: entered allmulticast mode [ 219.719165][ T7977] bridge_slave_0: entered promiscuous mode [ 219.729605][ T7977] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.736910][ T7977] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.744204][ T7977] bridge_slave_1: entered allmulticast mode [ 219.751855][ T7977] bridge_slave_1: entered promiscuous mode [ 219.813001][ T7977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.838342][ T7977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.933533][ T7977] team0: Port device team_slave_0 added [ 219.989507][ T7977] team0: Port device team_slave_1 added [ 220.084119][ T7977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.106451][ T7977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.146089][ T7977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.159560][ T7977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.166789][ T7977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.203656][ T7977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.290270][ T7977] hsr_slave_0: entered promiscuous mode [ 220.302643][ T7977] hsr_slave_1: entered promiscuous mode [ 220.313881][ T7977] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 220.328189][ T7998] FAULT_INJECTION: forcing a failure. [ 220.328189][ T7998] name fail_futex, interval 1, probability 0, space 0, times 0 [ 220.345456][ T7977] Cannot create hsr debugfs directory [ 220.379859][ T7998] CPU: 1 PID: 7998 Comm: syz.6.633 Not tainted syzkaller #0 [ 220.387221][ T7998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 220.397295][ T7998] Call Trace: [ 220.400597][ T7998] [ 220.403545][ T7998] dump_stack_lvl+0x18c/0x250 [ 220.408253][ T7998] ? lock_chain_count+0x20/0x20 [ 220.413129][ T7998] ? show_regs_print_info+0x20/0x20 [ 220.418519][ T7998] ? load_image+0x420/0x420 [ 220.423060][ T7998] should_fail_ex+0x394/0x4c0 [ 220.427742][ T7998] get_futex_key+0x136/0x1030 [ 220.432420][ T7998] ? futex_wait+0x4a0/0x5c0 [ 220.436923][ T7998] ? futex_setup_timer+0xc0/0xc0 [ 220.441862][ T7998] futex_wake+0x127/0x4f0 [ 220.446193][ T7998] ? futex_wake_mark+0x150/0x150 [ 220.451130][ T7998] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 220.457368][ T7998] ? lockdep_hardirqs_on+0x98/0x150 [ 220.462564][ T7998] do_futex+0x35d/0x3e0 [ 220.466714][ T7998] ? _copy_from_user+0xa5/0xe0 [ 220.471504][ T7998] ? __ia32_sys_get_robust_list+0x110/0x110 [ 220.477412][ T7998] __se_sys_futex+0x3a9/0x440 [ 220.482101][ T7998] ? __x64_sys_futex+0xf0/0xf0 [ 220.486870][ T7998] ? __x64_sys_futex+0x21/0xf0 [ 220.491631][ T7998] do_syscall_64+0x55/0xb0 [ 220.496045][ T7998] ? clear_bhb_loop+0x40/0x90 [ 220.500721][ T7998] ? clear_bhb_loop+0x40/0x90 [ 220.505399][ T7998] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 220.511289][ T7998] RIP: 0033:0x7fa42cf9de99 [ 220.515710][ T7998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.535322][ T7998] RSP: 002b:00007ffca9a6aaf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 220.543748][ T7998] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa42cf9de99 [ 220.551713][ T7998] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa42d225fa8 [ 220.559700][ T7998] RBP: 0000000000001530 R08: 0000000000000008 R09: 0000000000000000 [ 220.567674][ T7998] R10: 00007fa42d225fa0 R11: 0000000000000246 R12: 0000000000000000 [ 220.575642][ T7998] R13: 00007fa42d225fac R14: 00007fa42d225fa8 R15: 00007fa42d225fa0 [ 220.583626][ T7998] [ 220.606464][ T7998] FAULT_INJECTION: forcing a failure. [ 220.606464][ T7998] name fail_futex, interval 1, probability 0, space 0, times 0 [ 220.650513][ T7998] CPU: 0 PID: 7998 Comm: syz.6.633 Not tainted syzkaller #0 [ 220.657862][ T7998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 220.667946][ T7998] Call Trace: [ 220.671246][ T7998] [ 220.674206][ T7998] dump_stack_lvl+0x18c/0x250 [ 220.678924][ T7998] ? show_regs_print_info+0x20/0x20 [ 220.684157][ T7998] ? load_image+0x420/0x420 [ 220.688705][ T7998] should_fail_ex+0x394/0x4c0 [ 220.693422][ T7998] get_futex_key+0x136/0x1030 [ 220.698134][ T7998] ? __lock_acquire+0x7d80/0x7d80 [ 220.703194][ T7998] ? futex_setup_timer+0xc0/0xc0 [ 220.708156][ T7998] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 220.714079][ T7998] ? lockdep_hardirqs_on+0x98/0x150 [ 220.719307][ T7998] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 220.725232][ T7998] futex_wait_setup+0xbc/0x270 [ 220.730008][ T7998] ? futex_wait_multiple+0x920/0x920 [ 220.735285][ T7998] ? ktime_add_safe+0x38/0x60 [ 220.739959][ T7998] futex_wait+0x1bc/0x5c0 [ 220.744303][ T7998] ? futex_wait_setup+0x270/0x270 [ 220.749320][ T7998] ? __remove_hrtimer+0x470/0x470 [ 220.754345][ T7998] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 220.760595][ T7998] ? lockdep_hardirqs_on+0x98/0x150 [ 220.765887][ T7998] do_futex+0x2ff/0x3e0 [ 220.770044][ T7998] ? _copy_from_user+0xa5/0xe0 [ 220.775004][ T7998] ? __ia32_sys_get_robust_list+0x110/0x110 [ 220.780982][ T7998] ? read_tsc+0x9/0x20 [ 220.785052][ T7998] ? ktime_get+0x24b/0x280 [ 220.789478][ T7998] __se_sys_futex+0x3a9/0x440 [ 220.794158][ T7998] ? __x64_sys_futex+0xf0/0xf0 [ 220.798920][ T7998] ? __x64_sys_futex+0x21/0xf0 [ 220.803680][ T7998] do_syscall_64+0x55/0xb0 [ 220.808091][ T7998] ? clear_bhb_loop+0x40/0x90 [ 220.812789][ T7998] ? clear_bhb_loop+0x40/0x90 [ 220.817474][ T7998] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 220.823456][ T7998] RIP: 0033:0x7fa42cf9de99 [ 220.827983][ T7998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.847587][ T7998] RSP: 002b:00007ffca9a6aaf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 220.856000][ T7998] RAX: ffffffffffffffda RBX: 0000000000035d9b RCX: 00007fa42cf9de99 [ 220.863996][ T7998] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa42d225fac [ 220.871961][ T7998] RBP: 0000000000000032 R08: 0000000000745d1e R09: 0000000000000000 [ 220.879946][ T7998] R10: 00007ffca9a6ac00 R11: 0000000000000246 R12: 00007ffca9a6ac20 [ 220.888003][ T7998] R13: 00007fa42d225fac R14: 0000000000035dcd R15: 00007ffca9a6ac00 [ 220.895984][ T7998] [ 220.916174][ T7998] FAULT_INJECTION: forcing a failure. [ 220.916174][ T7998] name fail_futex, interval 1, probability 0, space 0, times 0 [ 221.006309][ T7998] CPU: 1 PID: 7998 Comm: syz.6.633 Not tainted syzkaller #0 [ 221.013654][ T7998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 221.023730][ T7998] Call Trace: [ 221.027028][ T7998] [ 221.029975][ T7998] dump_stack_lvl+0x18c/0x250 [ 221.034674][ T7998] ? lock_chain_count+0x20/0x20 [ 221.039545][ T7998] ? show_regs_print_info+0x20/0x20 [ 221.044767][ T7998] ? load_image+0x420/0x420 [ 221.049303][ T7998] ? futex_q_unlock+0x23/0x30 [ 221.054032][ T7998] should_fail_ex+0x394/0x4c0 [ 221.055817][ T8004] netlink: 12 bytes leftover after parsing attributes in process `syz.3.634'. [ 221.058722][ T7998] get_futex_key+0x136/0x1030 [ 221.072243][ T7998] ? futex_wait+0x4a0/0x5c0 [ 221.076753][ T7998] ? futex_setup_timer+0xc0/0xc0 [ 221.081691][ T7998] futex_wake+0x127/0x4f0 [ 221.086026][ T7998] ? futex_wake_mark+0x150/0x150 [ 221.091000][ T7998] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 221.097253][ T7998] ? lockdep_hardirqs_on+0x98/0x150 [ 221.102460][ T7998] do_futex+0x35d/0x3e0 [ 221.106611][ T7998] ? _copy_from_user+0xa5/0xe0 [ 221.111379][ T7998] ? __ia32_sys_get_robust_list+0x110/0x110 [ 221.117271][ T7998] ? blkcg_maybe_throttle_current+0x19f/0xa90 [ 221.123335][ T7998] __se_sys_futex+0x3a9/0x440 [ 221.128013][ T7998] ? __x64_sys_futex+0xf0/0xf0 [ 221.132773][ T7998] ? __x64_sys_futex+0x21/0xf0 [ 221.137544][ T7998] do_syscall_64+0x55/0xb0 [ 221.141969][ T7998] ? clear_bhb_loop+0x40/0x90 [ 221.146653][ T7998] ? clear_bhb_loop+0x40/0x90 [ 221.151337][ T7998] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 221.157233][ T7998] RIP: 0033:0x7fa42cf9de99 [ 221.161647][ T7998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.181251][ T7998] RSP: 002b:00007ffca9a6aaf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 221.189662][ T7998] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa42cf9de99 [ 221.197736][ T7998] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa42d225fa8 [ 221.205715][ T7998] RBP: 0000000000001ec6 R08: 0000000000000002 R09: 0000000000000000 [ 221.213682][ T7998] R10: 00007fa42d225fa0 R11: 0000000000000246 R12: 0000000000000000 [ 221.221645][ T7998] R13: 00007fa42d225fac R14: 00007fa42d225fa8 R15: 00007fa42d225fa0 [ 221.229621][ T7998] [ 221.280880][ T7977] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.293864][ T7998] FAULT_INJECTION: forcing a failure. [ 221.293864][ T7998] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.314999][ T7998] CPU: 1 PID: 7998 Comm: syz.6.633 Not tainted syzkaller #0 [ 221.322337][ T7998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 221.332414][ T7998] Call Trace: [ 221.335694][ T7998] [ 221.338618][ T7998] dump_stack_lvl+0x18c/0x250 [ 221.343294][ T7998] ? show_regs_print_info+0x20/0x20 [ 221.348489][ T7998] ? load_image+0x420/0x420 [ 221.352991][ T7998] ? __might_fault+0xaa/0x120 [ 221.357666][ T7998] ? __lock_acquire+0x7d80/0x7d80 [ 221.362702][ T7998] should_fail_ex+0x394/0x4c0 [ 221.367392][ T7998] _copy_from_user+0x2f/0xe0 [ 221.371993][ T7998] get_timespec64+0x97/0x1b0 [ 221.376592][ T7998] ? timespec64_add_safe+0x1f0/0x1f0 [ 221.381888][ T7998] __se_sys_clock_nanosleep+0x1c7/0x3a0 [ 221.387435][ T7998] ? __x64_sys_clock_nanosleep+0xb0/0xb0 [ 221.393066][ T7998] ? lockdep_hardirqs_on+0x98/0x150 [ 221.398273][ T7998] do_syscall_64+0x55/0xb0 [ 221.402698][ T7998] ? clear_bhb_loop+0x40/0x90 [ 221.407404][ T7998] ? clear_bhb_loop+0x40/0x90 [ 221.412081][ T7998] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 221.417971][ T7998] RIP: 0033:0x7fa42cf5e6ce [ 221.422381][ T7998] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 221.441994][ T7998] RSP: 002b:00007ffca9a6aa78 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 221.450408][ T7998] RAX: ffffffffffffffda RBX: 0000555582888500 RCX: 00007fa42cf5e6ce [ 221.458374][ T7998] RDX: 00007ffca9a6aad0 RSI: 0000000000000000 RDI: 0000000000000000 [ 221.466337][ T7998] RBP: 00007fa42d227da0 R08: 0000000000000000 R09: 0000000000000000 [ 221.474300][ T7998] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000360ac [ 221.482263][ T7998] R13: 00007fa42d22609c R14: 000000000003607a R15: 00007fa42d226090 [ 221.490244][ T7998] [ 221.495587][ T5783] Bluetooth: hci15: command tx timeout [ 221.580682][ T7977] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.648155][ T7977] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.719041][ T7977] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.863302][ T7977] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 221.872929][ T7977] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 221.889245][ T7977] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 221.907677][ T7977] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 222.054399][ T7977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.095221][ T7977] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.109771][ T5911] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.116958][ T5911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.124410][ T5783] Bluetooth: hci4: command 0x0406 tx timeout [ 222.149872][ T5905] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.157064][ T5905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.495930][ T7977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.814712][ T7977] veth0_vlan: entered promiscuous mode [ 222.833958][ T7977] veth1_vlan: entered promiscuous mode [ 222.906901][ T7977] veth0_macvtap: entered promiscuous mode [ 222.941300][ T7977] veth1_macvtap: entered promiscuous mode [ 223.016056][ T7977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.042248][ T7977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.071937][ T7977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.095447][ T7977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.105324][ T7977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.132133][ T7977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.162370][ T7977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.174236][ T7977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.184576][ T7977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.215492][ T7977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.238123][ T7977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.265959][ T7977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.285412][ T7977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.305529][ T7977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.326620][ T7977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.346593][ T7977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.350805][ T5783] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 223.357123][ T7977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.389716][ T5783] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 223.395398][ T7977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.408190][ T5783] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 223.422643][ T7977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.434748][ T7977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.455730][ T5783] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 223.463518][ T5783] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 223.465407][ T7977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.482101][ T5783] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 223.513981][ T7977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.524162][ T7977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.545175][ T7977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.557706][ T51] Bluetooth: hci15: command tx timeout [ 223.563776][ T7977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.574832][ T7977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.584806][ T7977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.595572][ T7977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.605545][ T7977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.616089][ T7977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.627933][ T7977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.645089][ T7977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.658354][ T7977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.668313][ T7977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.678879][ T7977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.712014][ T7977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.752050][ T7977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.772152][ T7977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.784437][ T7977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.795125][ T7977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.806324][ T7977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.816960][ T7977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.828115][ T7977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.843888][ T7977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.859397][ T7977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.882320][ T7977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.894597][ T7977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.915736][ T7977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.926943][ T7977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.944109][ T8043] netlink: 12 bytes leftover after parsing attributes in process `syz.6.643'. [ 223.953259][ T7977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.968037][ T7977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.978069][ T7977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.988582][ T7977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.998486][ T7977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.009128][ T7977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.020224][ T7977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.030777][ T7977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.042101][ T7977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.053025][ T7977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.067483][ T7977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.078334][ T7977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.107159][ T7977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.155189][ T7977] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.178120][ T8046] FAULT_INJECTION: forcing a failure. [ 224.178120][ T8046] name fail_futex, interval 1, probability 0, space 0, times 0 [ 224.185484][ T7977] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.191676][ T8046] CPU: 1 PID: 8046 Comm: syz.3.642 Not tainted syzkaller #0 [ 224.206922][ T8046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 224.210250][ T7977] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.216988][ T8046] Call Trace: [ 224.217004][ T8046] [ 224.217012][ T8046] dump_stack_lvl+0x18c/0x250 [ 224.217035][ T8046] ? lock_chain_count+0x20/0x20 [ 224.217055][ T8046] ? show_regs_print_info+0x20/0x20 [ 224.217072][ T8046] ? load_image+0x420/0x420 [ 224.217104][ T8046] should_fail_ex+0x394/0x4c0 [ 224.217129][ T8046] get_futex_key+0x136/0x1030 [ 224.217156][ T8046] ? futex_wait+0x4a0/0x5c0 [ 224.217178][ T8046] ? futex_setup_timer+0xc0/0xc0 [ 224.217205][ T8046] futex_wake+0x127/0x4f0 [ 224.217229][ T8046] ? futex_wake_mark+0x150/0x150 [ 224.217255][ T8046] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 224.217277][ T8046] ? lockdep_hardirqs_on+0x98/0x150 [ 224.217302][ T8046] do_futex+0x35d/0x3e0 [ 224.217320][ T8046] ? _copy_from_user+0xa5/0xe0 [ 224.217342][ T8046] ? __ia32_sys_get_robust_list+0x110/0x110 [ 224.217370][ T8046] __se_sys_futex+0x3a9/0x440 [ 224.217395][ T8046] ? __x64_sys_futex+0xf0/0xf0 [ 224.217419][ T8046] ? __x64_sys_futex+0x21/0xf0 [ 224.243897][ T7977] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.246956][ T8046] do_syscall_64+0x55/0xb0 [ 224.246980][ T8046] ? clear_bhb_loop+0x40/0x90 [ 224.246999][ T8046] ? clear_bhb_loop+0x40/0x90 [ 224.247017][ T8046] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 224.247034][ T8046] RIP: 0033:0x7fa0b179de99 [ 224.247051][ T8046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.247064][ T8046] RSP: 002b:00007ffec4de8568 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 224.247083][ T8046] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa0b179de99 [ 224.247095][ T8046] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa0b1a25fa8 [ 224.247108][ T8046] RBP: 0000000000001530 R08: 0000000000000008 R09: 0000000000000000 [ 224.247119][ T8046] R10: 00007fa0b1a25fa0 R11: 0000000000000246 R12: 0000000000000000 [ 224.247137][ T8046] R13: 00007fa0b1a25fac R14: 00007fa0b1a25fa8 R15: 00007fa0b1a25fa0 [ 224.247165][ T8046] [ 224.250809][ T8046] FAULT_INJECTION: forcing a failure. [ 224.250809][ T8046] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.451899][ T8046] CPU: 1 PID: 8046 Comm: syz.3.642 Not tainted syzkaller #0 [ 224.452279][ T8034] lo speed is unknown, defaulting to 1000 [ 224.459247][ T8046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 224.459259][ T8046] Call Trace: [ 224.459266][ T8046] [ 224.459273][ T8046] dump_stack_lvl+0x18c/0x250 [ 224.459299][ T8046] ? show_regs_print_info+0x20/0x20 [ 224.459317][ T8046] ? load_image+0x420/0x420 [ 224.459341][ T8046] ? __might_fault+0xaa/0x120 [ 224.459360][ T8046] ? __lock_acquire+0x7d80/0x7d80 [ 224.459385][ T8046] should_fail_ex+0x394/0x4c0 [ 224.459412][ T8046] _copy_from_user+0x2f/0xe0 [ 224.459434][ T8046] get_timespec64+0x97/0x1b0 [ 224.459457][ T8046] ? timespec64_add_safe+0x1f0/0x1f0 [ 224.459479][ T8046] ? __lock_acquire+0x7d80/0x7d80 [ 224.459503][ T8046] __se_sys_futex+0x19b/0x440 [ 224.459526][ T8046] ? __x64_sys_futex+0xf0/0xf0 [ 224.459548][ T8046] ? __x64_sys_futex+0x21/0xf0 [ 224.459569][ T8046] do_syscall_64+0x55/0xb0 [ 224.459585][ T8046] ? clear_bhb_loop+0x40/0x90 [ 224.459603][ T8046] ? clear_bhb_loop+0x40/0x90 [ 224.459624][ T8046] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 224.459643][ T8046] RIP: 0033:0x7fa0b179de99 [ 224.459661][ T8046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.459677][ T8046] RSP: 002b:00007ffec4de8568 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 224.459698][ T8046] RAX: ffffffffffffffda RBX: 0000000000036bd7 RCX: 00007fa0b179de99 [ 224.459711][ T8046] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa0b1a25fac [ 224.459723][ T8046] RBP: 0000000000000032 R08: 0000000000745d1e R09: 0000000000000000 [ 224.459735][ T8046] R10: 00007ffec4de8670 R11: 0000000000000246 R12: 00007ffec4de8690 [ 224.459747][ T8046] R13: 00007fa0b1a25fac R14: 0000000000036c09 R15: 00007ffec4de8670 [ 224.459775][ T8046] [ 224.479287][ T8046] FAULT_INJECTION: forcing a failure. [ 224.479287][ T8046] name fail_futex, interval 1, probability 0, space 0, times 0 [ 224.479315][ T8046] CPU: 1 PID: 8046 Comm: syz.3.642 Not tainted syzkaller #0 [ 224.479333][ T8046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 224.479344][ T8046] Call Trace: [ 224.479352][ T8046] [ 224.479360][ T8046] dump_stack_lvl+0x18c/0x250 [ 224.479387][ T8046] ? show_regs_print_info+0x20/0x20 [ 224.479408][ T8046] ? load_image+0x420/0x420 [ 224.479444][ T8046] should_fail_ex+0x394/0x4c0 [ 224.479472][ T8046] get_futex_key+0x136/0x1030 [ 224.479491][ T8046] ? __lock_acquire+0x7d80/0x7d80 [ 224.479517][ T8046] ? futex_setup_timer+0xc0/0xc0 [ 224.479533][ T8046] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 224.479558][ T8046] ? lockdep_hardirqs_on+0x98/0x150 [ 224.479581][ T8046] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 224.479608][ T8046] futex_wait_setup+0xbc/0x270 [ 224.479631][ T8046] ? futex_wait_multiple+0x920/0x920 [ 224.479652][ T8046] ? ktime_add_safe+0x38/0x60 [ 224.479676][ T8046] futex_wait+0x1bc/0x5c0 [ 224.479701][ T8046] ? futex_wait_setup+0x270/0x270 [ 224.479721][ T8046] ? __remove_hrtimer+0x470/0x470 [ 224.758738][ T8046] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 224.764979][ T8046] ? lockdep_hardirqs_on+0x98/0x150 [ 224.770177][ T8046] do_futex+0x2ff/0x3e0 [ 224.774327][ T8046] ? _copy_from_user+0xa5/0xe0 [ 224.779091][ T8046] ? __ia32_sys_get_robust_list+0x110/0x110 [ 224.784981][ T8046] ? blkcg_maybe_throttle_current+0x19f/0xa90 [ 224.791051][ T8046] ? read_tsc+0x9/0x20 [ 224.795117][ T8046] ? ktime_get+0x24b/0x280 [ 224.799535][ T8046] __se_sys_futex+0x3a9/0x440 [ 224.804209][ T8046] ? __x64_sys_futex+0xf0/0xf0 [ 224.808973][ T8046] ? __x64_sys_futex+0x21/0xf0 [ 224.813729][ T8046] do_syscall_64+0x55/0xb0 [ 224.818150][ T8046] ? clear_bhb_loop+0x40/0x90 [ 224.822817][ T8046] ? clear_bhb_loop+0x40/0x90 [ 224.827489][ T8046] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 224.833378][ T8046] RIP: 0033:0x7fa0b179de99 [ 224.837784][ T8046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.857384][ T8046] RSP: 002b:00007ffec4de8568 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 224.865791][ T8046] RAX: ffffffffffffffda RBX: 0000000000036cbb RCX: 00007fa0b179de99 [ 224.873751][ T8046] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa0b1a25fac [ 224.881718][ T8046] RBP: 0000000000000032 R08: 0000000000745d1e R09: 0000000000000000 [ 224.889688][ T8046] R10: 00007ffec4de8670 R11: 0000000000000246 R12: 00007ffec4de8690 [ 224.897662][ T8046] R13: 00007fa0b1a25fac R14: 0000000000036ced R15: 00007ffec4de8670 [ 224.905639][ T8046] [ 224.945702][ T8046] FAULT_INJECTION: forcing a failure. [ 224.945702][ T8046] name fail_futex, interval 1, probability 0, space 0, times 0 [ 225.001101][ T8046] CPU: 1 PID: 8046 Comm: syz.3.642 Not tainted syzkaller #0 [ 225.008460][ T8046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 225.018533][ T8046] Call Trace: [ 225.021828][ T8046] [ 225.024759][ T8046] dump_stack_lvl+0x18c/0x250 [ 225.029784][ T8046] ? lock_chain_count+0x20/0x20 [ 225.034630][ T8046] ? show_regs_print_info+0x20/0x20 [ 225.039827][ T8046] ? load_image+0x420/0x420 [ 225.044335][ T8046] ? futex_q_unlock+0x23/0x30 [ 225.049030][ T8046] should_fail_ex+0x394/0x4c0 [ 225.053710][ T8046] get_futex_key+0x136/0x1030 [ 225.058385][ T8046] ? futex_wait+0x4a0/0x5c0 [ 225.062886][ T8046] ? futex_setup_timer+0xc0/0xc0 [ 225.067826][ T8046] futex_wake+0x127/0x4f0 [ 225.072158][ T8046] ? futex_wake_mark+0x150/0x150 [ 225.077187][ T8046] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 225.083435][ T8046] ? lockdep_hardirqs_on+0x98/0x150 [ 225.088648][ T8046] do_futex+0x35d/0x3e0 [ 225.092800][ T8046] ? _copy_from_user+0xa5/0xe0 [ 225.097566][ T8046] ? __ia32_sys_get_robust_list+0x110/0x110 [ 225.103452][ T8046] ? blkcg_maybe_throttle_current+0x19f/0xa90 [ 225.109541][ T8046] __se_sys_futex+0x3a9/0x440 [ 225.114244][ T8046] ? __x64_sys_futex+0xf0/0xf0 [ 225.119124][ T8046] ? __x64_sys_futex+0x21/0xf0 [ 225.123892][ T8046] do_syscall_64+0x55/0xb0 [ 225.128310][ T8046] ? clear_bhb_loop+0x40/0x90 [ 225.132983][ T8046] ? clear_bhb_loop+0x40/0x90 [ 225.137659][ T8046] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 225.143551][ T8046] RIP: 0033:0x7fa0b179de99 [ 225.147963][ T8046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.167601][ T8046] RSP: 002b:00007ffec4de8568 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 225.176049][ T8046] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa0b179de99 [ 225.184049][ T8046] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa0b1a25fa8 [ 225.192050][ T8046] RBP: 0000000000001ec6 R08: 0000000000000002 R09: 0000000000000000 [ 225.200053][ T8046] R10: 00007fa0b1a25fa0 R11: 0000000000000246 R12: 0000000000000000 [ 225.208040][ T8046] R13: 00007fa0b1a25fac R14: 00007fa0b1a25fa8 R15: 00007fa0b1a25fa0 [ 225.216025][ T8046] [ 225.341794][ T8046] FAULT_INJECTION: forcing a failure. [ 225.341794][ T8046] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.355931][ T1082] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.363946][ T1082] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.376381][ T8046] CPU: 0 PID: 8046 Comm: syz.3.642 Not tainted syzkaller #0 [ 225.383710][ T8046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 225.393796][ T8046] Call Trace: [ 225.397106][ T8046] [ 225.400055][ T8046] dump_stack_lvl+0x18c/0x250 [ 225.404769][ T8046] ? show_regs_print_info+0x20/0x20 [ 225.409991][ T8046] ? load_image+0x420/0x420 [ 225.414521][ T8046] ? __might_fault+0xaa/0x120 [ 225.419311][ T8046] ? __lock_acquire+0x7d80/0x7d80 [ 225.424366][ T8046] should_fail_ex+0x394/0x4c0 [ 225.427487][ T1075] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.429050][ T8046] _copy_from_user+0x2f/0xe0 [ 225.429077][ T8046] get_timespec64+0x97/0x1b0 [ 225.446066][ T8046] ? timespec64_add_safe+0x1f0/0x1f0 [ 225.451379][ T8046] __se_sys_clock_nanosleep+0x1c7/0x3a0 [ 225.456961][ T8046] ? __x64_sys_clock_nanosleep+0xb0/0xb0 [ 225.462592][ T8046] ? lockdep_hardirqs_on+0x98/0x150 [ 225.467791][ T8046] do_syscall_64+0x55/0xb0 [ 225.472221][ T8046] ? clear_bhb_loop+0x40/0x90 [ 225.476897][ T8046] ? clear_bhb_loop+0x40/0x90 [ 225.481569][ T8046] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 225.487483][ T8046] RIP: 0033:0x7fa0b175e6ce [ 225.491896][ T8046] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 225.511509][ T8046] RSP: 002b:00007ffec4de84e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 225.519923][ T8046] RAX: ffffffffffffffda RBX: 000055556948e500 RCX: 00007fa0b175e6ce [ 225.527889][ T8046] RDX: 00007ffec4de8540 RSI: 0000000000000000 RDI: 0000000000000000 [ 225.535864][ T8046] RBP: 00007fa0b1a27da0 R08: 0000000000000000 R09: 0000000000000000 [ 225.543825][ T8046] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000003707c [ 225.551791][ T8046] R13: 00007fa0b1a2609c R14: 000000000003704a R15: 00007fa0b1a26090 [ 225.559787][ T8046] [ 225.599582][ T5781] Bluetooth: hci16: command tx timeout [ 225.615999][ T1075] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.645641][ T5781] Bluetooth: hci15: command tx timeout [ 225.886082][ T8034] chnl_net:caif_netlink_parms(): no params data found [ 226.010456][ T8034] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.017883][ T8034] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.025207][ T8034] bridge_slave_0: entered allmulticast mode [ 226.032813][ T8034] bridge_slave_0: entered promiscuous mode [ 226.043737][ T8034] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.051459][ T8034] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.059375][ T8034] bridge_slave_1: entered allmulticast mode [ 226.066921][ T8034] bridge_slave_1: entered promiscuous mode [ 226.119428][ T8034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.140501][ T8034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.191326][ T8034] team0: Port device team_slave_0 added [ 226.219607][ T8034] team0: Port device team_slave_1 added [ 226.337190][ T8034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.344195][ T8034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.432402][ T8034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.433756][ T8080] netlink: 12 bytes leftover after parsing attributes in process `syz.6.650'. [ 226.479496][ T8034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.505606][ T8034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.564450][ T8034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.681342][ T8034] hsr_slave_0: entered promiscuous mode [ 226.705783][ T8034] hsr_slave_1: entered promiscuous mode [ 226.715098][ T8034] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 226.731252][ T8034] Cannot create hsr debugfs directory [ 227.069501][ T8034] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.192675][ T8034] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.317880][ T8034] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.318303][ T5781] Bluetooth: hci5: command 0x0406 tx timeout [ 227.334521][ T5771] Bluetooth: hci6: command 0x0406 tx timeout [ 227.487678][ T8034] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.528281][ T8098] netlink: 20 bytes leftover after parsing attributes in process `syz.6.657'. [ 227.538853][ T8098] netlink: 244 bytes leftover after parsing attributes in process `syz.6.657'. [ 227.552097][ T8098] netlink: 244 bytes leftover after parsing attributes in process `syz.6.657'. [ 227.637486][ T5783] Bluetooth: hci16: command tx timeout [ 227.714305][ T8100] FAULT_INJECTION: forcing a failure. [ 227.714305][ T8100] name failslab, interval 1, probability 100, space 0, times 1 [ 227.714699][ T5141] FAULT_INJECTION: forcing a failure. [ 227.714699][ T5141] name failslab, interval 1, probability 100, space 0, times 1 [ 227.727220][ C1] FAULT_INJECTION: forcing a failure. [ 227.727220][ C1] name failslab, interval 1, probability 100, space 0, times 1 [ 227.727250][ C1] CPU: 1 PID: 5141 Comm: udevd Not tainted syzkaller #0 [ 227.727268][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 227.727278][ C1] Call Trace: [ 227.727285][ C1] [ 227.727293][ C1] dump_stack_lvl+0x18c/0x250 [ 227.727322][ C0] FAULT_INJECTION: forcing a failure. [ 227.727322][ C0] name failslab, interval 1, probability 100, space 0, times 1 [ 227.727323][ C1] ? show_regs_print_info+0x20/0x20 [ 227.727346][ C1] ? load_image+0x420/0x420 [ 227.727376][ C1] ? verify_lock_unused+0x140/0x140 [ 227.727412][ C1] ? mark_lock+0x94/0x320 [ 227.727436][ C1] should_fail_ex+0x394/0x4c0 [ 227.727465][ C1] should_failslab+0x9/0x20 [ 227.727490][ C1] slab_pre_alloc_hook+0x59/0x300 [ 227.727521][ C1] kmem_cache_alloc_node+0x5e/0x310 [ 227.727546][ C1] ? __alloc_skb+0x103/0x2c0 [ 227.727569][ C1] __alloc_skb+0x103/0x2c0 [ 227.727591][ C1] wg_packet_send_keepalive+0x65/0x2b0 [ 227.727616][ C1] call_timer_fn+0x189/0x540 [ 227.727634][ C1] ? wg_expired_zero_key_material+0x2a0/0x2a0 [ 227.727653][ C1] ? call_timer_fn+0xd2/0x540 [ 227.727672][ C1] ? __run_timers+0x810/0x810 [ 227.727699][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 227.727725][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 227.727748][ C1] ? wg_expired_zero_key_material+0x2a0/0x2a0 [ 227.727769][ C1] __run_timers+0x570/0x810 [ 227.727801][ C1] ? detach_timer+0x2b0/0x2b0 [ 227.727826][ C1] ? lock_chain_count+0x20/0x20 [ 227.727853][ C1] run_timer_softirq+0x67/0xf0 [ 227.727872][ C1] handle_softirqs+0x27d/0x820 [ 227.727891][ C1] ? read_tsc+0x9/0x20 [ 227.727910][ C1] ? ktime_get+0x24b/0x280 [ 227.727935][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 227.727957][ C1] ? do_softirq+0x1a0/0x1a0 [ 227.727980][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 227.728008][ C1] __irq_exit_rcu+0xd3/0x190 [ 227.728027][ C1] ? irq_exit_rcu+0x20/0x20 [ 227.728053][ C1] irq_exit_rcu+0x9/0x20 [ 227.728070][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 227.728100][ C1] [ 227.728107][ C1] [ 227.728115][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 227.728137][ C1] RIP: 0010:vprintk_emit+0x46f/0x610 [ 227.728160][ C1] Code: 85 3f 01 00 00 e8 c1 a4 1b 00 45 89 f7 48 85 db 48 8b 1c 24 75 07 e8 b0 a4 1b 00 eb 06 e8 a9 a4 1b 00 fb 48 c7 c7 80 61 12 8d <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 b9 b4 [ 227.728175][ C1] RSP: 0018:ffffc900032c7740 EFLAGS: 00000293 [ 227.728193][ C1] RAX: ffffffff816bd027 RBX: ffffffff816bcecb RCX: ffff88807da10000 [ 227.728208][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8d126180 [ 227.728221][ C1] RBP: ffffc900032c7830 R08: ffffffff911eb527 R09: 1ffffffff223d6a4 [ 227.728235][ C1] R10: dffffc0000000000 R11: fffffbfff223d6a5 R12: dffffc0000000000 [ 227.728249][ C1] R13: 1ffff92000658eec R14: 0000000000000060 R15: 0000000000000060 [ 227.728265][ C1] ? vprintk_emit+0x30b/0x610 [ 227.728288][ C1] ? vprintk_emit+0x467/0x610 [ 227.728315][ C1] ? vprintk_emit+0x30b/0x610 [ 227.728339][ C1] ? printk_sprint+0x460/0x460 [ 227.728359][ C1] ? get_random_u8+0x4af/0x980 [ 227.728382][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 227.728405][ C1] ? get_random_u8+0x16c/0x980 [ 227.728427][ C1] ? get_random_u8+0x516/0x980 [ 227.728459][ C1] _printk+0xde/0x130 [ 227.728488][ C1] ? load_image+0x420/0x420 [ 227.728516][ C1] ? __might_sleep+0xe0/0xe0 [ 227.728538][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 227.728563][ C1] should_fail_ex+0x375/0x4c0 [ 227.728591][ C1] should_failslab+0x9/0x20 [ 227.728615][ C1] slab_pre_alloc_hook+0x59/0x300 [ 227.728646][ C1] kmem_cache_alloc_node+0x5e/0x310 [ 227.728671][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 227.728690][ C1] ? __alloc_skb+0x103/0x2c0 [ 227.728712][ C1] __alloc_skb+0x103/0x2c0 [ 227.728734][ C1] alloc_uevent_skb+0x7d/0x230 [ 227.728763][ C1] kobject_uevent_net_broadcast+0x2e6/0x530 [ 227.728795][ C1] kobject_uevent_env+0x559/0x890 [ 227.728827][ C1] kobject_synth_uevent+0x45b/0x940 [ 227.728855][ C1] ? read_lock_is_recursive+0x20/0x20 [ 227.728878][ C1] ? kset_get_ownership+0x140/0x140 [ 227.728912][ C1] ? sysfs_kf_read+0x360/0x360 [ 227.728930][ C1] uevent_store+0x26/0x60 [ 227.728954][ C1] ? sysfs_kf_read+0x360/0x360 [ 227.728970][ C1] kernfs_fop_write_iter+0x3a4/0x520 [ 227.729002][ C1] vfs_write+0x474/0x9a0 [ 227.729032][ C1] ? file_end_write+0x250/0x250 [ 227.729060][ C1] ? __x64_sys_newfstat+0x1c4/0x250 [ 227.729085][ C1] ? do_sys_openat2+0x170/0x1d0 [ 227.729117][ C1] ? __fdget_pos+0x2ba/0x330 [ 227.729145][ C1] ksys_write+0x151/0x260 [ 227.729173][ C1] ? __ia32_sys_read+0x90/0x90 [ 227.729200][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 227.729227][ C1] do_syscall_64+0x55/0xb0 [ 227.729245][ C1] ? clear_bhb_loop+0x40/0x90 [ 227.729264][ C1] ? clear_bhb_loop+0x40/0x90 [ 227.729286][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 227.729305][ C1] RIP: 0033:0x7fa3706a7407 [ 227.729320][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 227.729336][ C1] RSP: 002b:00007ffc083add70 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 227.729355][ C1] RAX: ffffffffffffffda RBX: 00007fa370e84880 RCX: 00007fa3706a7407 [ 227.729369][ C1] RDX: 0000000000000007 RSI: 0000562683c82d90 RDI: 000000000000000c [ 227.729381][ C1] RBP: 0000562683c82d90 R08: 0000000000000000 R09: 0000000000000000 [ 227.729393][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000007 [ 227.729405][ C1] R13: 0000562683c6f7a0 R14: 00007fa3707efea0 R15: 00007ffc083ae0b0 [ 227.729432][ C1] [ 227.729440][ C0] CPU: 0 PID: 8100 Comm: syz.6.658 Not tainted syzkaller #0 [ 227.729458][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 227.729468][ C0] Call Trace: [ 227.729475][ C0] [ 227.729482][ C0] dump_stack_lvl+0x18c/0x250 [ 227.729507][ C0] ? show_regs_print_info+0x20/0x20 [ 227.729527][ C0] ? load_image+0x420/0x420 [ 227.729555][ C0] ? mark_lock+0x94/0x320 [ 227.729578][ C0] ? verify_lock_unused+0x140/0x140 [ 227.729609][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 227.729633][ C0] should_fail_ex+0x394/0x4c0 [ 227.729661][ C0] should_failslab+0x9/0x20 [ 227.729688][ C0] slab_pre_alloc_hook+0x59/0x300 [ 227.729718][ C0] kmem_cache_alloc_node+0x5e/0x310 [ 227.729744][ C0] ? __alloc_skb+0x103/0x2c0 [ 227.729767][ C0] __alloc_skb+0x103/0x2c0 [ 227.729790][ C0] wg_packet_send_keepalive+0x65/0x2b0 [ 227.729813][ C0] call_timer_fn+0x189/0x540 [ 227.729834][ C0] ? wg_expired_zero_key_material+0x2a0/0x2a0 [ 227.729852][ C0] ? call_timer_fn+0xd2/0x540 [ 227.729873][ C0] ? __run_timers+0x810/0x810 [ 227.729904][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 227.729930][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 227.729955][ C0] ? wg_expired_zero_key_material+0x2a0/0x2a0 [ 227.729976][ C0] __run_timers+0x570/0x810 [ 227.730007][ C0] ? detach_timer+0x2b0/0x2b0 [ 227.730042][ C0] run_timer_softirq+0x67/0xf0 [ 227.730063][ C0] handle_softirqs+0x27d/0x820 [ 227.730083][ C0] ? read_tsc+0x9/0x20 [ 227.730104][ C0] ? ktime_get+0x24b/0x280 [ 227.730128][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 227.730150][ C0] ? do_softirq+0x1a0/0x1a0 [ 227.730174][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 227.730201][ C0] __irq_exit_rcu+0xd3/0x190 [ 227.730223][ C0] ? irq_exit_rcu+0x20/0x20 [ 227.730252][ C0] irq_exit_rcu+0x9/0x20 [ 227.730270][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 227.730297][ C0] [ 227.730304][ C0] [ 227.730312][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 227.730339][ C0] RIP: 0010:console_flush_all+0x883/0xcf0 [ 227.730367][ C0] Code: ed 01 00 00 e8 be 81 1b 00 4d 85 ff 48 8b 5c 24 38 75 07 e8 af 81 1b 00 eb 06 e8 a8 81 1b 00 fb 49 bf 00 00 00 00 00 fc ff df <48> 8b 44 24 58 42 0f b6 04 38 84 c0 0f 85 2f 02 00 00 80 3b 01 0f [ 227.730383][ C0] RSP: 0018:ffffc9000479ee40 EFLAGS: 00000283 [ 227.730400][ C0] RAX: ffffffff816bf328 RBX: ffffc9000479efbf RCX: 0000000000080000 [ 227.730416][ C0] RDX: ffffc900052b9000 RSI: 0000000000004b97 RDI: 0000000000004b98 [ 227.730429][ C0] RBP: ffffc9000479ef90 R08: ffffffff8e8c7caf R09: 1ffffffff1d18f95 [ 227.730445][ C0] R10: dffffc0000000000 R11: fffffbfff1d18f96 R12: ffffffff8d8cdf60 [ 227.730460][ C0] R13: 1ffffffff19f96d8 R14: ffffffff8d8cdfb8 R15: dffffc0000000000 [ 227.730483][ C0] ? console_flush_all+0x878/0xcf0 [ 227.730515][ C0] ? console_flush_all+0x10b/0xcf0 [ 227.730550][ C0] ? is_console_locked+0x20/0x20 [ 227.730574][ C0] ? lock_chain_count+0x20/0x20 [ 227.730601][ C0] ? __lock_acquire+0x1336/0x7d80 [ 227.730627][ C0] ? __down_trylock_console_sem+0xf6/0x1f0 [ 227.730651][ C0] console_unlock+0xad/0x350 [ 227.730673][ C0] ? other_cpu_in_panic+0xf0/0xf0 [ 228.615150][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 228.621148][ C0] vprintk_emit+0x497/0x610 [ 228.625670][ C0] ? printk_sprint+0x460/0x460 [ 228.630464][ C0] ? get_random_u8+0x4af/0x980 [ 228.635267][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 228.640492][ C0] ? get_random_u8+0x16c/0x980 [ 228.645277][ C0] ? get_random_u8+0x516/0x980 [ 228.650068][ C0] _printk+0xde/0x130 [ 228.654103][ C0] ? load_image+0x420/0x420 [ 228.658623][ C0] ? __might_sleep+0xe0/0xe0 [ 228.663217][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 228.668266][ C0] should_fail_ex+0x375/0x4c0 [ 228.672971][ C0] should_failslab+0x9/0x20 [ 228.677501][ C0] slab_pre_alloc_hook+0x59/0x300 [ 228.682557][ C0] ? verify_lock_unused+0x140/0x140 [ 228.687810][ C0] kmem_cache_alloc_node+0x5e/0x310 [ 228.693040][ C0] ? __alloc_skb+0x103/0x2c0 [ 228.697649][ C0] __alloc_skb+0x103/0x2c0 [ 228.702083][ C0] alloc_skb_with_frags+0xcd/0x7a0 [ 228.707304][ C0] ? mark_lock+0x94/0x320 [ 228.711669][ C0] ? __lock_acquire+0x1262/0x7d80 [ 228.716709][ C0] sock_alloc_send_pskb+0x883/0x9a0 [ 228.721944][ C0] ? sock_kzfree_s+0x50/0x50 [ 228.726559][ C0] ? verify_lock_unused+0x140/0x140 [ 228.731795][ C0] __ip_append_data+0x2a08/0x3bf0 [ 228.736867][ C0] ? rt_is_expired+0x1c/0x2d0 [ 228.741567][ C0] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 228.746521][ C0] ? ip_setup_cork+0x840/0x840 [ 228.751314][ C0] ? ip_setup_cork+0x527/0x840 [ 228.756092][ C0] ip_make_skb+0x22b/0x440 [ 228.760531][ C0] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 228.765392][ C0] ? ip_flush_pending_frames+0x250/0x250 [ 228.771046][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 228.776101][ C0] udp_sendmsg+0x1ae1/0x23d0 [ 228.780738][ C0] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 228.785625][ C0] ? udp_cmsg_send+0x350/0x350 [ 228.790442][ C0] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 228.796887][ C0] ? sock_rps_record_flow+0x19/0x3f0 [ 228.802180][ C0] ? inet_sendmsg+0x7e/0x2a0 [ 228.806810][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 228.812108][ C0] __sys_sendto+0x4a9/0x6b0 [ 228.816703][ C0] ? __ia32_sys_getpeername+0x90/0x90 [ 228.822096][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 228.828094][ C0] ? lock_chain_count+0x20/0x20 [ 228.832970][ C0] __x64_sys_sendto+0xde/0xf0 [ 228.837667][ C0] do_syscall_64+0x55/0xb0 [ 228.842097][ C0] ? clear_bhb_loop+0x40/0x90 [ 228.846791][ C0] ? clear_bhb_loop+0x40/0x90 [ 228.851479][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 228.857374][ C0] RIP: 0033:0x7fa42cf9de99 [ 228.861794][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.881426][ C0] RSP: 002b:00007fa42de07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 228.889875][ C0] RAX: ffffffffffffffda RBX: 00007fa42d225fa0 RCX: 00007fa42cf9de99 [ 228.897869][ C0] RDX: 0000000000000010 RSI: 0000200000000200 RDI: 0000000000000005 [ 228.905861][ C0] RBP: 00007fa42d033eaf R08: 0000200000000300 R09: 0000000000000010 [ 228.913932][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.921914][ C0] R13: 00007fa42d226038 R14: 00007fa42d225fa0 R15: 00007ffca9a6a998 [ 228.929959][ C0] [ 228.934640][ T5783] Bluetooth: hci15: command tx timeout [ 228.960488][ T8100] CPU: 0 PID: 8100 Comm: syz.6.658 Not tainted syzkaller #0 [ 228.967834][ T8100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 228.977921][ T8100] Call Trace: [ 228.981235][ T8100] [ 228.984182][ T8100] dump_stack_lvl+0x18c/0x250 [ 228.988884][ T8100] ? show_regs_print_info+0x20/0x20 [ 228.994096][ T8100] ? load_image+0x420/0x420 [ 228.998646][ T8100] ? __might_sleep+0xe0/0xe0 [ 229.003355][ T8100] ? __lock_acquire+0x7d80/0x7d80 [ 229.008421][ T8100] should_fail_ex+0x394/0x4c0 [ 229.013135][ T8100] should_failslab+0x9/0x20 [ 229.017670][ T8100] slab_pre_alloc_hook+0x59/0x300 [ 229.022737][ T8100] ? verify_lock_unused+0x140/0x140 [ 229.027977][ T8100] kmem_cache_alloc_node+0x5e/0x310 [ 229.033216][ T8100] ? __alloc_skb+0x103/0x2c0 [ 229.037831][ T8100] __alloc_skb+0x103/0x2c0 [ 229.042265][ T8100] alloc_skb_with_frags+0xcd/0x7a0 [ 229.047412][ T8100] ? mark_lock+0x94/0x320 [ 229.051779][ T8100] ? __lock_acquire+0x1262/0x7d80 [ 229.056849][ T8100] sock_alloc_send_pskb+0x883/0x9a0 [ 229.062101][ T8100] ? sock_kzfree_s+0x50/0x50 [ 229.066709][ T8100] ? verify_lock_unused+0x140/0x140 [ 229.071923][ T8100] __ip_append_data+0x2a08/0x3bf0 [ 229.076977][ T8100] ? rt_is_expired+0x1c/0x2d0 [ 229.081708][ T8100] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 229.086579][ T8100] ? ip_setup_cork+0x840/0x840 [ 229.091356][ T8100] ? ip_setup_cork+0x527/0x840 [ 229.096123][ T8100] ip_make_skb+0x22b/0x440 [ 229.100544][ T8100] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 229.105393][ T8100] ? ip_flush_pending_frames+0x250/0x250 [ 229.111032][ T8100] ? __lock_acquire+0x7d80/0x7d80 [ 229.116156][ T8100] udp_sendmsg+0x1ae1/0x23d0 [ 229.120764][ T8100] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 229.125616][ T8100] ? udp_cmsg_send+0x350/0x350 [ 229.130406][ T8100] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 229.136851][ T8100] ? sock_rps_record_flow+0x19/0x3f0 [ 229.142177][ T8100] ? inet_sendmsg+0x7e/0x2a0 [ 229.146780][ T8100] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 229.152097][ T8100] __sys_sendto+0x4a9/0x6b0 [ 229.156606][ T8100] ? __ia32_sys_getpeername+0x90/0x90 [ 229.162081][ T8100] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 229.168089][ T8100] ? lock_chain_count+0x20/0x20 [ 229.172951][ T8100] __x64_sys_sendto+0xde/0xf0 [ 229.177635][ T8100] do_syscall_64+0x55/0xb0 [ 229.182055][ T8100] ? clear_bhb_loop+0x40/0x90 [ 229.186738][ T8100] ? clear_bhb_loop+0x40/0x90 [ 229.191531][ T8100] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 229.197465][ T8100] RIP: 0033:0x7fa42cf9de99 [ 229.201898][ T8100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.221515][ T8100] RSP: 002b:00007fa42de07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 229.229938][ T8100] RAX: ffffffffffffffda RBX: 00007fa42d225fa0 RCX: 00007fa42cf9de99 [ 229.237912][ T8100] RDX: 0000000000000010 RSI: 0000200000000200 RDI: 0000000000000005 [ 229.245881][ T8100] RBP: 00007fa42d033eaf R08: 0000200000000300 R09: 0000000000000010 [ 229.253853][ T8100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 229.261824][ T8100] R13: 00007fa42d226038 R14: 00007fa42d225fa0 R15: 00007ffca9a6a998 [ 229.269829][ T8100] [ 229.293770][ T5141] CPU: 1 PID: 5141 Comm: udevd Not tainted syzkaller #0 [ 229.300773][ T5141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 229.310857][ T5141] Call Trace: [ 229.314144][ T5141] [ 229.317086][ T5141] dump_stack_lvl+0x18c/0x250 [ 229.321791][ T5141] ? show_regs_print_info+0x20/0x20 [ 229.327018][ T5141] ? load_image+0x420/0x420 [ 229.331555][ T5141] ? __might_sleep+0xe0/0xe0 [ 229.336170][ T5141] ? __lock_acquire+0x7d80/0x7d80 [ 229.341217][ T5141] should_fail_ex+0x394/0x4c0 [ 229.345919][ T5141] should_failslab+0x9/0x20 [ 229.350439][ T5141] slab_pre_alloc_hook+0x59/0x300 [ 229.355487][ T5141] kmem_cache_alloc_node+0x5e/0x310 [ 229.360705][ T5141] ? __lock_acquire+0x7d80/0x7d80 [ 229.365740][ T5141] ? __alloc_skb+0x103/0x2c0 [ 229.370336][ T5141] __alloc_skb+0x103/0x2c0 [ 229.374750][ T5141] alloc_uevent_skb+0x7d/0x230 [ 229.379519][ T5141] kobject_uevent_net_broadcast+0x2e6/0x530 [ 229.385430][ T5141] kobject_uevent_env+0x559/0x890 [ 229.390474][ T5141] kobject_synth_uevent+0x45b/0x940 [ 229.395689][ T5141] ? read_lock_is_recursive+0x20/0x20 [ 229.401076][ T5141] ? kset_get_ownership+0x140/0x140 [ 229.406288][ T5141] ? sysfs_kf_read+0x360/0x360 [ 229.411047][ T5141] uevent_store+0x26/0x60 [ 229.415384][ T5141] ? sysfs_kf_read+0x360/0x360 [ 229.420156][ T5141] kernfs_fop_write_iter+0x3a4/0x520 [ 229.425452][ T5141] vfs_write+0x474/0x9a0 [ 229.429703][ T5141] ? file_end_write+0x250/0x250 [ 229.434559][ T5141] ? __x64_sys_newfstat+0x1c4/0x250 [ 229.439759][ T5141] ? do_sys_openat2+0x170/0x1d0 [ 229.444613][ T5141] ? __fdget_pos+0x2ba/0x330 [ 229.449204][ T5141] ksys_write+0x151/0x260 [ 229.453562][ T5141] ? __ia32_sys_read+0x90/0x90 [ 229.458333][ T5141] ? lockdep_hardirqs_on+0x98/0x150 [ 229.463535][ T5141] do_syscall_64+0x55/0xb0 [ 229.467948][ T5141] ? clear_bhb_loop+0x40/0x90 [ 229.472621][ T5141] ? clear_bhb_loop+0x40/0x90 [ 229.477296][ T5141] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 229.483199][ T5141] RIP: 0033:0x7fa3706a7407 [ 229.487617][ T5141] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 229.507240][ T5141] RSP: 002b:00007ffc083add70 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 229.515668][ T5141] RAX: ffffffffffffffda RBX: 00007fa370e84880 RCX: 00007fa3706a7407 [ 229.523686][ T5141] RDX: 0000000000000007 RSI: 0000562683c82d90 RDI: 000000000000000c [ 229.531674][ T5141] RBP: 0000562683c82d90 R08: 0000000000000000 R09: 0000000000000000 [ 229.539653][ T5141] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000007 [ 229.547630][ T5141] R13: 0000562683c6f7a0 R14: 00007fa3707efea0 R15: 00007ffc083ae0b0 [ 229.555617][ T5141] [ 229.687746][ T8034] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 229.717645][ T8034] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 229.725175][ T5783] Bluetooth: hci16: command tx timeout [ 229.741398][ T8034] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 229.758588][ T8034] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 229.870417][ T8034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.891799][ T8034] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.920272][ T1075] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.927484][ T1075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.941404][ T1075] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.948610][ T1075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.086736][ T8116] tipc: Enabled bearer , priority 10 [ 230.112136][ T8115] tipc: Disabling bearer [ 230.268208][ T8122] netlink: 12 bytes leftover after parsing attributes in process `syz.3.663'. [ 230.302844][ T8034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.723341][ T8034] veth0_vlan: entered promiscuous mode [ 230.755294][ T8034] veth1_vlan: entered promiscuous mode [ 230.887618][ T8034] veth0_macvtap: entered promiscuous mode [ 230.903159][ T8034] veth1_macvtap: entered promiscuous mode [ 230.905649][ T8] libceph: mon0 (2)127.0.0.1:6789 socket closed (con state V2_BANNER_PREFIX) [ 230.919142][ T28] INFO: task syz.1.75:6100 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 230.927360][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.927383][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.927394][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.927409][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.927419][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.927433][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.927444][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.927458][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.927471][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.927484][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.927496][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.927510][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.927521][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.927534][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.927546][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.927560][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.927572][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.927586][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.927598][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.927612][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.927624][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.927637][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.927648][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.927662][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.927673][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.927687][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.927782][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.927797][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.927808][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.927822][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.927834][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.927847][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.929605][ T8034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.000117][ T28] Not tainted syzkaller #0 [ 231.283632][ T8] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 231.340495][ T8134] ceph: No mds server is up or the cluster is laggy [ 231.347176][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 231.347192][ T28] task:syz.1.75 state:D stack:27016 pid:6100 ppid:5769 flags:0x00004004 [ 231.347232][ T28] Call Trace: [ 231.347240][ T28] [ 231.347253][ T28] __schedule+0x15ae/0x4660 [ 231.347302][ T28] ? asan.module_dtor+0x20/0x20 [ 231.387051][ T28] ? __mutex_lock+0x66e/0xc80 [ 231.391806][ T28] ? __mutex_trylock_common+0x8a/0x270 [ 231.397383][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 231.403540][ T28] schedule+0xbd/0x170 [ 231.407856][ T28] schedule_preempt_disabled+0x13/0x20 [ 231.413374][ T28] __mutex_lock+0x673/0xc80 [ 231.418898][ T28] ? __mutex_lock+0x4d2/0xc80 [ 231.423629][ T28] ? nfsd_svc+0x65/0xab0 [ 231.428140][ T28] ? mutex_lock_nested+0x20/0x20 [ 231.436698][ T28] ? net_generic+0x1e/0x240 [ 231.441252][ T28] ? net_generic+0x1e/0x240 [ 231.445868][ T28] nfsd_svc+0x65/0xab0 [ 231.449957][ T28] ? qword_get+0x5a9/0x640 [ 231.454399][ T28] write_threads+0x393/0x510 [ 231.459463][ T28] ? write_unlock_fs+0x450/0x450 [ 231.464431][ T28] ? __might_fault+0xaa/0x120 [ 231.469181][ T28] ? __might_fault+0xaa/0x120 [ 231.473875][ T28] ? simple_transaction_get+0x11d/0x140 [ 231.479606][ T28] nfsctl_transaction_write+0x10c/0x150 [ 231.485188][ T28] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 231.490956][ T28] vfs_write+0x299/0x9a0 [ 231.495269][ T28] ? file_end_write+0x250/0x250 [ 231.500464][ T28] ? __fget_files+0x28/0x460 [ 231.505080][ T28] ? __fget_files+0x3fc/0x460 [ 231.510232][ T28] ? __fdget_pos+0x2a3/0x330 [ 231.514872][ T28] ? ksys_write+0x74/0x260 [ 231.519470][ T28] ksys_write+0x151/0x260 [ 231.523812][ T28] ? __ia32_sys_read+0x90/0x90 [ 231.528726][ T28] ? lockdep_hardirqs_on+0x98/0x150 [ 231.533960][ T28] do_syscall_64+0x55/0xb0 [ 231.543711][ T28] ? clear_bhb_loop+0x40/0x90 [ 231.548549][ T28] ? clear_bhb_loop+0x40/0x90 [ 231.553285][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 231.564357][ T28] RIP: 0033:0x7fc53d39de99 [ 231.568920][ T28] RSP: 002b:00007fc53e337028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 231.577439][ T28] RAX: ffffffffffffffda RBX: 00007fc53d626090 RCX: 00007fc53d39de99 [ 231.585635][ T28] RDX: 0000000000000002 RSI: 0000200000000200 RDI: 0000000000000005 [ 231.593651][ T28] RBP: 00007fc53d433eaf R08: 0000000000000000 R09: 0000000000000000 [ 231.601833][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 231.610140][ T28] R13: 00007fc53d626128 R14: 00007fc53d626090 R15: 00007ffea3785868 [ 231.618227][ T28] [ 231.621324][ T28] INFO: task syz.2.91:6133 blocked for more than 144 seconds. [ 231.628971][ T28] Not tainted syzkaller #0 [ 231.633933][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 231.667598][ T28] task:syz.2.91 state:D stack:27912 pid:6133 ppid:5777 flags:0x00004004 [ 231.686915][ T28] Call Trace: [ 231.690249][ T28] [ 231.693197][ T28] __schedule+0x15ae/0x4660 [ 231.698038][ T28] ? asan.module_dtor+0x20/0x20 [ 231.702927][ T28] ? __mutex_lock+0x66e/0xc80 [ 231.707744][ T28] ? __mutex_trylock_common+0x8a/0x270 [ 231.713235][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 231.724228][ T28] schedule+0xbd/0x170 [ 231.728668][ T28] schedule_preempt_disabled+0x13/0x20 [ 231.734169][ T28] __mutex_lock+0x673/0xc80 [ 231.744814][ T28] ? __mutex_lock+0x4d2/0xc80 [ 231.749649][ T28] ? write_versions+0x96/0xe00 [ 231.754441][ T28] ? mutex_lock_nested+0x20/0x20 [ 231.760367][ T28] write_versions+0x96/0xe00 [ 231.764995][ T28] ? __lock_acquire+0x7d80/0x7d80 [ 231.785502][ T28] ? __virt_addr_valid+0x10c/0x380 [ 231.790691][ T28] ? write_pool_threads+0x7d0/0x7d0 [ 231.797937][ T5811] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 231.814047][ T51] Bluetooth: hci16: command tx timeout [ 231.815432][ T28] ? __might_fault+0xaa/0x120 [ 231.824236][ T28] ? __might_fault+0xc6/0x120 [ 231.855503][ T28] ? __might_fault+0xaa/0x120 [ 231.860258][ T28] ? simple_transaction_get+0x11d/0x140 [ 231.866396][ T28] nfsctl_transaction_write+0x10c/0x150 [ 231.871984][ T28] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 231.878800][ T28] vfs_write+0x299/0x9a0 [ 231.883102][ T28] ? file_end_write+0x250/0x250 [ 231.889048][ T28] ? __fget_files+0x28/0x460 [ 231.893682][ T28] ? __fget_files+0x3fc/0x460 [ 231.898946][ T28] ? __fdget_pos+0x2a3/0x330 [ 231.903561][ T28] ? ksys_write+0x74/0x260 [ 231.908397][ T28] ksys_write+0x151/0x260 [ 231.912762][ T28] ? __ia32_sys_read+0x90/0x90 [ 231.918194][ T28] ? lockdep_hardirqs_on+0x98/0x150 [ 231.923432][ T28] do_syscall_64+0x55/0xb0 [ 231.928418][ T28] ? clear_bhb_loop+0x40/0x90 [ 231.933123][ T28] ? clear_bhb_loop+0x40/0x90 [ 231.938352][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 231.947111][ T28] RIP: 0033:0x7fd5e439de99 [ 231.951568][ T28] RSP: 002b:00007fd5e51d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 231.960839][ T28] RAX: ffffffffffffffda RBX: 00007fd5e4625fa0 RCX: 00007fd5e439de99 [ 231.969471][ T28] RDX: 0000000000000009 RSI: 0000200000000100 RDI: 0000000000000003 [ 231.977833][ T28] RBP: 00007fd5e4433eaf R08: 0000000000000000 R09: 0000000000000000 [ 231.986214][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 231.994257][ T28] R13: 00007fd5e4626038 R14: 00007fd5e4625fa0 R15: 00007ffd96f056c8 [ 232.003518][ T28] [ 232.055429][ T28] INFO: task syz.2.91:6135 blocked for more than 144 seconds. [ 232.062947][ T28] Not tainted syzkaller #0 [ 232.116065][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 232.124795][ T28] task:syz.2.91 state:D stack:27912 pid:6135 ppid:5777 flags:0x00004004 [ 232.185676][ T28] Call Trace: [ 232.189030][ T28] [ 232.192089][ T28] __schedule+0x15ae/0x4660 [ 232.216528][ T28] ? asan.module_dtor+0x20/0x20 [ 232.221466][ T28] ? __mutex_lock+0x66e/0xc80 [ 232.257859][ T28] ? __mutex_trylock_common+0x8a/0x270 [ 232.263391][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 232.295717][ T28] schedule+0xbd/0x170 [ 232.299904][ T28] schedule_preempt_disabled+0x13/0x20 [ 232.315678][ T28] __mutex_lock+0x673/0xc80 [ 232.320254][ T28] ? __mutex_lock+0x4d2/0xc80 [ 232.324963][ T28] ? write_ports+0xb7/0xfa0 [ 232.345520][ T28] ? mutex_lock_nested+0x20/0x20 [ 232.350545][ T28] write_ports+0xb7/0xfa0 [ 232.369666][ T51] Bluetooth: hci7: command 0x0406 tx timeout [ 232.376545][ T28] ? write_versions+0xe00/0xe00 [ 232.381441][ T28] ? __might_fault+0xaa/0x120 [ 232.395797][ T28] ? __lock_acquire+0x7d80/0x7d80 [ 232.400876][ T28] ? __virt_addr_valid+0x10c/0x380 [ 232.418349][ T28] ? __virt_addr_valid+0x10c/0x380 [ 232.423525][ T28] ? __might_fault+0xaa/0x120 [ 232.429667][ T28] ? __might_fault+0xc6/0x120 [ 232.434400][ T28] ? __might_fault+0xaa/0x120 [ 232.442395][ T28] ? simple_transaction_get+0x11d/0x140 [ 232.477357][ T28] nfsctl_transaction_write+0x10c/0x150 [ 232.482966][ T28] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 232.489303][ T28] vfs_write+0x299/0x9a0 [ 232.493695][ T28] ? file_end_write+0x250/0x250 [ 232.499043][ T28] ? __fget_files+0x28/0x460 [ 232.503671][ T28] ? __fget_files+0x3fc/0x460 [ 232.509453][ T28] ? __fdget_pos+0x2a3/0x330 [ 232.514104][ T28] ? ksys_write+0x74/0x260 [ 232.518838][ T28] ksys_write+0x151/0x260 [ 232.523195][ T28] ? __ia32_sys_read+0x90/0x90 [ 232.528478][ T28] ? lockdep_hardirqs_on+0x98/0x150 [ 232.533716][ T28] do_syscall_64+0x55/0xb0 [ 232.539565][ T28] ? clear_bhb_loop+0x40/0x90 [ 232.544340][ T28] ? clear_bhb_loop+0x40/0x90 [ 232.549296][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 232.555249][ T28] RIP: 0033:0x7fd5e439de99 [ 232.565837][ T28] RSP: 002b:00007fd5e51b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 232.574317][ T28] RAX: ffffffffffffffda RBX: 00007fd5e4626090 RCX: 00007fd5e439de99 [ 232.582524][ T28] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000004 [ 232.590605][ T28] RBP: 00007fd5e4433eaf R08: 0000000000000000 R09: 0000000000000000 [ 232.599782][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 232.607843][ T28] R13: 00007fd5e4626128 R14: 00007fd5e4626090 R15: 00007ffd96f056c8 [ 232.615910][ T28] [ 232.650763][ T28] INFO: task syz.2.91:6138 blocked for more than 145 seconds. [ 232.674493][ T28] Not tainted syzkaller #0 [ 232.680259][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 232.689028][ T28] task:syz.2.91 state:D stack:27912 pid:6138 ppid:5777 flags:0x00004004 [ 232.698368][ T28] Call Trace: [ 232.701668][ T28] [ 232.704614][ T28] __schedule+0x15ae/0x4660 [ 232.709340][ T28] ? asan.module_dtor+0x20/0x20 [ 232.714222][ T28] ? __mutex_lock+0x66e/0xc80 [ 232.718937][ T28] ? __mutex_trylock_common+0x8a/0x270 [ 232.724422][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 232.730735][ T28] schedule+0xbd/0x170 [ 232.734832][ T28] schedule_preempt_disabled+0x13/0x20 [ 232.740488][ T28] __mutex_lock+0x673/0xc80 [ 232.745038][ T28] ? __mutex_lock+0x4d2/0xc80 [ 232.749826][ T28] ? nfsd_svc+0x65/0xab0 [ 232.754096][ T28] ? mutex_lock_nested+0x20/0x20 [ 232.760517][ T28] ? net_generic+0x1e/0x240 [ 232.767456][ T28] ? net_generic+0x1e/0x240 [ 232.772014][ T28] nfsd_svc+0x65/0xab0 [ 232.776394][ T28] ? qword_get+0x5a9/0x640 [ 232.780849][ T28] write_threads+0x393/0x510 [ 232.795526][ T28] ? write_unlock_fs+0x450/0x450 [ 232.800542][ T28] ? __might_fault+0xaa/0x120 [ 232.805273][ T28] ? __might_fault+0xaa/0x120 [ 232.811486][ T28] ? simple_transaction_get+0x11d/0x140 [ 232.817157][ T28] nfsctl_transaction_write+0x10c/0x150 [ 232.822732][ T28] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 232.829086][ T28] vfs_write+0x299/0x9a0 [ 232.833371][ T28] ? file_end_write+0x250/0x250 [ 232.848291][ T28] ? __fget_files+0x28/0x460 [ 232.852952][ T28] ? __fget_files+0x3fc/0x460 [ 232.857840][ T28] ? __fdget_pos+0x2a3/0x330 [ 232.862461][ T28] ? ksys_write+0x74/0x260 [ 232.869168][ T28] ksys_write+0x151/0x260 [ 232.873553][ T28] ? __ia32_sys_read+0x90/0x90 [ 232.878426][ T28] ? lockdep_hardirqs_on+0x98/0x150 [ 232.883660][ T28] do_syscall_64+0x55/0xb0 [ 232.888928][ T28] ? clear_bhb_loop+0x40/0x90 [ 232.893645][ T28] ? clear_bhb_loop+0x40/0x90 [ 232.898500][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 232.904410][ T28] RIP: 0033:0x7fd5e439de99 [ 232.910757][ T28] RSP: 002b:00007fd5e5195028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 232.920389][ T28] RAX: ffffffffffffffda RBX: 00007fd5e4626180 RCX: 00007fd5e439de99 [ 232.929297][ T28] RDX: 0000000000000002 RSI: 0000200000000240 RDI: 0000000000000004 [ 232.937379][ T28] RBP: 00007fd5e4433eaf R08: 0000000000000000 R09: 0000000000000000 [ 232.945567][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 232.953568][ T28] R13: 00007fd5e4626218 R14: 00007fd5e4626180 R15: 00007ffd96f056c8 [ 232.961669][ T28] [ 232.987318][ T28] INFO: task syz.3.99:6155 blocked for more than 145 seconds. [ 232.994838][ T28] Not tainted syzkaller #0 [ 233.000829][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 233.014748][ T28] task:syz.3.99 state:D stack:27016 pid:6155 ppid:5773 flags:0x00004004 [ 233.030456][ T28] Call Trace: [ 233.033783][ T28] [ 233.055193][ T28] __schedule+0x15ae/0x4660 [ 233.065775][ T28] ? asan.module_dtor+0x20/0x20 [ 233.086318][ T28] ? __mutex_lock+0x66e/0xc80 [ 233.091087][ T28] ? __mutex_trylock_common+0x8a/0x270 [ 233.105966][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 233.112279][ T28] schedule+0xbd/0x170 [ 233.118665][ T28] schedule_preempt_disabled+0x13/0x20 [ 233.124172][ T28] __mutex_lock+0x673/0xc80 [ 233.128829][ T28] ? __mutex_lock+0x4d2/0xc80 [ 233.133535][ T28] ? write_ports+0xb7/0xfa0 [ 233.138180][ T28] ? mutex_lock_nested+0x20/0x20 [ 233.143160][ T28] write_ports+0xb7/0xfa0 [ 233.147642][ T28] ? write_versions+0xe00/0xe00 [ 233.152520][ T28] ? __might_fault+0xaa/0x120 [ 233.157521][ T28] ? __lock_acquire+0x7d80/0x7d80 [ 233.162578][ T28] ? __virt_addr_valid+0x10c/0x380 [ 233.168061][ T28] ? __virt_addr_valid+0x10c/0x380 [ 233.178997][ T28] ? __might_fault+0xaa/0x120 [ 233.183726][ T28] ? __might_fault+0xc6/0x120 [ 233.188734][ T28] ? __might_fault+0xaa/0x120 [ 233.193449][ T28] ? simple_transaction_get+0x11d/0x140 [ 233.199467][ T28] nfsctl_transaction_write+0x10c/0x150 [ 233.205045][ T28] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 233.210777][ T28] vfs_write+0x299/0x9a0 [ 233.215046][ T28] ? file_end_write+0x250/0x250 [ 233.220014][ T28] ? __fget_files+0x28/0x460 [ 233.224642][ T28] ? __fget_files+0x3fc/0x460 [ 233.229483][ T28] ? __fdget_pos+0x2a3/0x330 [ 233.234155][ T28] ? ksys_write+0x74/0x260 [ 233.239398][ T28] ksys_write+0x151/0x260 [ 233.243781][ T28] ? __ia32_sys_read+0x90/0x90 [ 233.248677][ T28] ? lockdep_hardirqs_on+0x98/0x150 [ 233.253893][ T28] do_syscall_64+0x55/0xb0 [ 233.258388][ T28] ? clear_bhb_loop+0x40/0x90 [ 233.263081][ T28] ? clear_bhb_loop+0x40/0x90 [ 233.267862][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 233.281843][ T28] RIP: 0033:0x7f80a739de99 [ 233.286706][ T28] RSP: 002b:00007f80a82a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 233.295154][ T28] RAX: ffffffffffffffda RBX: 00007f80a7625fa0 RCX: 00007f80a739de99 [ 233.303362][ T28] RDX: 0000000000000009 RSI: 0000200000000240 RDI: 0000000000000007 [ 233.311674][ T28] RBP: 00007f80a7433eaf R08: 0000000000000000 R09: 0000000000000000 [ 233.319962][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.328029][ T28] R13: 00007f80a7626038 R14: 00007f80a7625fa0 R15: 00007ffce6d6e6b8 [ 233.336152][ T28] [ 233.339234][ T28] INFO: task syz.3.99:6156 blocked for more than 145 seconds. [ 233.347059][ T28] Not tainted syzkaller #0 [ 233.352015][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 233.361097][ T28] task:syz.3.99 state:D stack:26832 pid:6156 ppid:5773 flags:0x00004004 [ 233.370542][ T28] Call Trace: [ 233.373830][ T28] [ 233.383245][ T28] __schedule+0x15ae/0x4660 [ 233.387932][ T28] ? asan.module_dtor+0x20/0x20 [ 233.392815][ T28] ? __mutex_lock+0x66e/0xc80 [ 233.398950][ T28] ? __mutex_trylock_common+0x8a/0x270 [ 233.404457][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 233.410807][ T28] schedule+0xbd/0x170 [ 233.414988][ T28] schedule_preempt_disabled+0x13/0x20 [ 233.420716][ T28] __mutex_lock+0x673/0xc80 [ 233.425246][ T28] ? __mutex_lock+0x4d2/0xc80 [ 233.430040][ T28] ? nfsd_svc+0x65/0xab0 [ 233.434297][ T28] ? mutex_lock_nested+0x20/0x20 [ 233.439337][ T28] ? net_generic+0x1e/0x240 [ 233.443859][ T28] ? net_generic+0x1e/0x240 [ 233.448807][ T28] nfsd_svc+0x65/0xab0 [ 233.452899][ T28] ? qword_get+0x5a9/0x640 [ 233.457471][ T28] write_threads+0x393/0x510 [ 233.462085][ T28] ? write_unlock_fs+0x450/0x450 [ 233.467139][ T28] ? __might_fault+0xaa/0x120 [ 233.471839][ T28] ? __might_fault+0xaa/0x120 [ 233.477344][ T28] ? simple_transaction_get+0x11d/0x140 [ 233.486583][ T28] nfsctl_transaction_write+0x10c/0x150 [ 233.492188][ T28] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 233.498150][ T28] vfs_write+0x299/0x9a0 [ 233.502435][ T28] ? file_end_write+0x250/0x250 [ 233.507665][ T28] ? __fget_files+0x28/0x460 [ 233.512296][ T28] ? __fget_files+0x3fc/0x460 [ 233.517366][ T28] ? __fdget_pos+0x2a3/0x330 [ 233.521979][ T28] ? ksys_write+0x74/0x260 [ 233.526884][ T28] ksys_write+0x151/0x260 [ 233.531238][ T28] ? __ia32_sys_read+0x90/0x90 [ 233.536388][ T28] ? lockdep_hardirqs_on+0x98/0x150 [ 233.541613][ T28] do_syscall_64+0x55/0xb0 [ 233.547281][ T28] ? clear_bhb_loop+0x40/0x90 [ 233.551983][ T28] ? clear_bhb_loop+0x40/0x90 [ 233.556988][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 233.562898][ T28] RIP: 0033:0x7f80a739de99 [ 233.567629][ T28] RSP: 002b:00007f80a8280028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 233.576355][ T28] RAX: ffffffffffffffda RBX: 00007f80a7626090 RCX: 00007f80a739de99 [ 233.587886][ T28] RDX: 0000000000000002 RSI: 00002000000002c0 RDI: 0000000000000008 [ 233.596237][ T28] RBP: 00007f80a7433eaf R08: 0000000000000000 R09: 0000000000000000 [ 233.604240][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.617243][ T28] R13: 00007f80a7626128 R14: 00007f80a7626090 R15: 00007ffce6d6e6b8 [ 233.625262][ T28] [ 233.629709][ T28] [ 233.629709][ T28] Showing all locks held in the system: [ 233.638306][ T28] 1 lock held by khungtaskd/28: [ 233.654949][ T28] #0: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 233.669349][ T28] 3 locks held by kworker/1:1/42: [ 233.674387][ T28] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 233.688823][ T28] #1: ffffc90000b2fd00 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 233.704067][ T28] #2: ffff88805bda1240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x285/0x32c0 [ 233.718085][ T28] 3 locks held by kworker/u4:5/1075: [ 233.723416][ T28] #0: ffff88802c900538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 233.735153][ T28] #1: ffffc90004a8fd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 233.748300][ T28] #2: ffffffff8e3d6b08 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xce/0x1550 [ 233.757833][ T28] 2 locks held by getty/5524: [ 233.762520][ T28] #0: ffff88823bda00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 233.772416][ T28] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 [ 233.782897][ T28] 3 locks held by kworker/0:3/5811: [ 233.791222][ T28] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 233.802516][ T28] #1: ffffc900046efd00 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 233.815606][ T28] #2: ffff8880303b6240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x285/0x32c0 [ 233.826157][ T28] 3 locks held by kworker/u4:16/5898: [ 233.831580][ T28] 3 locks held by kworker/u4:17/5901: [ 233.837044][ T28] #0: ffff888017c71538 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 233.848815][ T28] #1: ffffc9000491fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 233.860073][ T28] #2: ffffffff8e3d6b08 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 233.869190][ T28] 3 locks held by syz.1.75/6098: [ 233.874148][ T28] #0: ffff888029de6d48 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 233.884836][ T28] #1: ffff88801e3fa418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 233.898623][ T28] #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xb7/0xfa0 [ 233.907584][ T28] 3 locks held by syz.1.75/6100: [ 233.912533][ T28] #0: ffff888029ddf748 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 233.921895][ T28] #1: ffff88801e3fa418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 233.930958][ T28] #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_svc+0x65/0xab0 [ 233.939565][ T28] 3 locks held by syz.2.91/6133: [ 233.944511][ T28] #0: ffff88807f16a348 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 233.953909][ T28] #1: ffff8880250dc418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 233.962995][ T28] #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: write_versions+0x96/0xe00 [ 233.972333][ T28] 3 locks held by syz.2.91/6135: [ 233.977376][ T28] #0: ffff8880214d79c8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 233.986720][ T28] #1: ffff8880250dc418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 234.001664][ T28] #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xb7/0xfa0 [ 234.010584][ T28] 3 locks held by syz.2.91/6138: [ 234.015685][ T28] #0: ffff8880306880c8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 234.024949][ T28] #1: ffff8880250dc418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 234.037474][ T28] #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_svc+0x65/0xab0 [ 234.046345][ T28] 3 locks held by syz.3.99/6155: [ 234.051303][ T28] #0: ffff88802cf16d48 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 234.061667][ T28] #1: ffff88802eff0418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 234.071150][ T28] #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xb7/0xfa0 [ 234.080447][ T28] 3 locks held by syz.3.99/6156: [ 234.085467][ T28] #0: ffff88802cf16848 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 234.097214][ T28] #1: ffff88802eff0418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 234.106716][ T28] #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_svc+0x65/0xab0 [ 234.115301][ T28] 3 locks held by syz.0.133/6230: [ 234.124775][ T28] #0: ffff88802d391248 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 234.134352][ T28] #1: ffff888030ad4418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 234.144667][ T28] #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_svc+0x65/0xab0 [ 234.153409][ T28] 3 locks held by syz.6.159/6355: [ 234.158572][ T28] #0: ffff88807c27b248 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 234.168051][ T28] #1: ffff88807ed6a418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 234.177135][ T28] #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xb7/0xfa0 [ 234.186075][ T28] 3 locks held by syz.5.178/6426: [ 234.191109][ T28] #0: ffff88802f4b8348 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 234.204785][ T28] #1: ffff88804ecc8418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 234.213987][ T28] #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: write_versions+0x96/0xe00 [ 234.223168][ T28] 3 locks held by syz.5.178/6427: [ 234.228400][ T28] #0: ffff88802bbe54c8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 234.237883][ T28] #1: ffff88804ecc8418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 234.247308][ T28] #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xb7/0xfa0 [ 234.259114][ T28] 3 locks held by syz.5.178/6429: [ 234.264178][ T28] #0: ffff88807f9c1c48 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 234.274596][ T28] #1: ffff88804ecc8418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 234.283973][ T28] #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_svc+0x65/0xab0 [ 234.292873][ T28] 3 locks held by syz.7.181/6444: [ 234.298367][ T28] #0: ffff888023ca9748 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 234.311258][ T28] #1: ffff88805a2f4418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 234.320378][ T28] #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xb7/0xfa0 [ 234.329317][ T28] 1 lock held by syz.7.181/6447: [ 234.334285][ T28] #0: ffff888023ca9748 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 234.343584][ T28] 1 lock held by syz.7.181/6450: [ 234.348599][ T28] #0: ffff888023ca9748 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 234.358517][ T28] 1 lock held by syz.7.181/6453: [ 234.363497][ T28] #0: ffff888023ca9748 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 234.372921][ T28] 3 locks held by syz.7.181/6455: [ 234.379065][ T28] #0: ffff888031005c48 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 234.388579][ T28] #1: ffff88805a2f4418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 234.397688][ T28] #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: write_versions+0x96/0xe00 [ 234.411837][ T28] 3 locks held by syz.7.181/6457: [ 234.416977][ T28] #0: ffff88807f77efc8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 234.426353][ T28] #1: ffff88805a2f4418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 234.435932][ T28] #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_svc+0x65/0xab0 [ 234.444526][ T28] 3 locks held by syz.4.184/6452: [ 234.449724][ T28] #0: ffff888031004fc8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 234.459035][ T28] #1: ffff88805ab2e418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 234.468142][ T28] #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: write_versions+0x96/0xe00 [ 234.477293][ T28] 3 locks held by syz.4.184/6454: [ 234.482366][ T28] #0: ffff888031005248 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 234.491817][ T28] #1: ffff88805ab2e418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 234.500946][ T28] #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xb7/0xfa0 [ 234.514045][ T28] 3 locks held by syz.4.184/6456: [ 234.519361][ T28] #0: ffff88807eb300c8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 234.528918][ T28] #1: ffff88805ab2e418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 234.538191][ T28] #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_svc+0x65/0xab0 [ 234.546859][ T28] 3 locks held by syz.8.186/6486: [ 234.551913][ T28] #0: ffff8880292a6d48 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 234.561245][ T28] #1: ffff888058a10418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 234.570362][ T28] #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xb7/0xfa0 [ 234.579250][ T28] 3 locks held by syz.9.190/6520: [ 234.584376][ T28] #0: ffff8880274394c8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 234.593712][ T28] #1: ffff88807ad8e418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 234.603074][ T28] #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: write_versions+0x96/0xe00 [ 234.618057][ T28] 3 locks held by syz.9.190/6525: [ 234.623126][ T28] #0: ffff888031a04348 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 234.632855][ T28] #1: ffff88807ad8e418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 234.642244][ T28] #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xb7/0xfa0 [ 234.651494][ T28] 3 locks held by syz.9.190/6526: [ 234.656842][ T28] #0: ffff888027438d48 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 234.666392][ T28] #1: ffff88807ad8e418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 234.683751][ T28] #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_svc+0x65/0xab0 [ 234.692435][ T28] 3 locks held by syz.9.190/6528: [ 234.697850][ T28] #0: ffff888031a04848 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 234.714590][ T28] #1: ffff88807ad8e418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 234.723696][ T28] #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xb7/0xfa0 [ 234.741557][ T28] 3 locks held by syz.9.190/6530: [ 234.746922][ T28] #0: ffff888027439748 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 234.757557][ T28] #1: ffff88807ad8e418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 234.766670][ T28] #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_svc+0x65/0xab0 [ 234.775252][ T28] 2 locks held by syz-executor/6729: [ 234.780699][ T28] #0: ffffffff8e3d6b08 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x41/0x1c0 [ 234.789975][ T28] #1: ffffffff8d137778 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3da/0x880 [ 234.800969][ T28] 3 locks held by syz.1.284/6782: [ 234.807996][ T28] #0: ffff8880434f2fc8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 234.822478][ T28] #1: ffff88804aa30418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 234.832035][ T28] #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: write_versions+0x96/0xe00 [ 234.841364][ T28] 3 locks held by syz.1.284/6784: [ 234.853310][ T28] #0: ffff8880434f4848 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 234.862818][ T28] #1: ffff88804aa30418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 234.872212][ T28] #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xb7/0xfa0 [ 234.881216][ T28] 3 locks held by syz.1.284/6786: [ 234.886326][ T28] #0: ffff888031005748 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 234.895723][ T28] #1: ffff88804aa30418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 234.904742][ T28] #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_svc+0x65/0xab0 [ 234.913421][ T28] 3 locks held by syz.2.583/7801: [ 234.924238][ T28] #0: ffff88807dec14c8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 234.936321][ T28] #1: ffff8880800be418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 234.945488][ T28] #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_svc+0x65/0xab0 [ 234.954061][ T28] 3 locks held by syz.0.597/7852: [ 234.959290][ T28] #0: ffff88802162d748 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 234.968845][ T28] #1: ffff88802f5a0418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 234.978031][ T28] #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: write_versions+0x96/0xe00 [ 234.987221][ T28] 3 locks held by syz.0.597/7854: [ 234.992255][ T28] #0: ffff88802162c5c8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 235.001720][ T28] #1: ffff88802f5a0418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 235.010838][ T28] #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xb7/0xfa0 [ 235.024070][ T28] 3 locks held by syz.0.597/7855: [ 235.029327][ T28] #0: ffff888030b9f4c8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 235.038876][ T28] #1: ffff88802f5a0418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 235.048126][ T28] #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_svc+0x65/0xab0 [ 235.056856][ T28] 1 lock held by syz-executor/8034: [ 235.062082][ T28] #0: ffffffff8e3d6b08 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x41/0x1c0 [ 235.071257][ T28] 3 locks held by syz.5.665/8134: [ 235.077570][ T28] #0: ffff8880254f4e70 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x212/0x500 [ 235.087655][ T28] #1: ffff8880254f40b8 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x552/0x1130 [ 235.097477][ T28] #2: ffffffff8d137778 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3da/0x880 [ 235.108538][ T28] 1 lock held by syz.6.666/8135: [ 235.113491][ T28] #0: ffffffff8e3d6b08 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x41/0x1c0 [ 235.130457][ T28] [ 235.132841][ T28] ============================================= [ 235.132841][ T28] [ 235.159803][ T28] NMI backtrace for cpu 0 [ 235.164187][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 235.171405][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 235.181475][ T28] Call Trace: [ 235.184754][ T28] [ 235.187676][ T28] dump_stack_lvl+0x18c/0x250 [ 235.192342][ T28] ? __wake_up_klogd+0xd9/0x100 [ 235.197200][ T28] ? show_regs_print_info+0x20/0x20 [ 235.202386][ T28] ? load_image+0x420/0x420 [ 235.206902][ T28] nmi_cpu_backtrace+0x3a6/0x3e0 [ 235.211864][ T28] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 235.218036][ T28] ? load_image+0x420/0x420 [ 235.222567][ T28] ? wq_watchdog_touch+0xef/0x170 [ 235.227615][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 235.233827][ T28] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 235.239815][ T28] watchdog+0xf59/0xfa0 [ 235.243980][ T28] ? watchdog+0x1e1/0xfa0 [ 235.248302][ T28] kthread+0x2fa/0x390 [ 235.252351][ T28] ? hungtask_pm_notify+0x50/0x50 [ 235.257379][ T28] ? kthread_blkcg+0xd0/0xd0 [ 235.261987][ T28] ret_from_fork+0x48/0x80 [ 235.266424][ T28] ? kthread_blkcg+0xd0/0xd0 [ 235.271013][ T28] ret_from_fork_asm+0x11/0x20 [ 235.275782][ T28] [ 235.282112][ T28] Sending NMI from CPU 0 to CPUs 1: [ 235.288701][ C1] NMI backtrace for cpu 1 [ 235.288712][ C1] CPU: 1 PID: 5905 Comm: kworker/u4:19 Not tainted syzkaller #0 [ 235.288727][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 235.288737][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 235.288759][ C1] RIP: 0010:unwind_next_frame+0x4ac/0x2990 [ 235.288777][ C1] Code: c1 48 c1 f9 02 48 c1 e8 3f 48 01 c8 48 83 e0 fe 4d 8d 7c 45 00 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 <84> c0 75 34 4d 63 27 4d 01 fc 4c 89 e7 4c 89 f6 e8 4f ce 4b 00 49 [ 235.288790][ C1] RSP: 0018:ffffc90004b1f518 EFLAGS: 00000a07 [ 235.288802][ C1] RAX: 0000000000000000 RBX: ffffffff8ea471cc RCX: dffffc0000000000 [ 235.288813][ C1] RDX: ffff888023b11e00 RSI: 000000000002db1b RDI: 000000000002db2c [ 235.288823][ C1] RBP: ffffffff8ea4718c R08: ffffc90004b1f6b0 R09: 0000000000000000 [ 235.288834][ C1] R10: 0000000000000004 R11: 0000000000000000 R12: 000000000002db1b [ 235.288844][ C1] R13: ffffffff8ea4718c R14: ffffffff81dfc65d R15: ffffffff8ea471ac [ 235.288855][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 235.288868][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 235.288879][ C1] CR2: 000055ce5db19000 CR3: 000000000cf32000 CR4: 00000000003506e0 [ 235.288893][ C1] Call Trace: [ 235.288898][ C1] [ 235.288909][ C1] ? kasan_set_track+0x4d/0x70 [ 235.288928][ C1] ? kasan_set_track+0x4e/0x70 [ 235.288945][ C1] ? kasan_set_track+0x4e/0x70 [ 235.288960][ C1] ? stack_trace_save+0x100/0x100 [ 235.288978][ C1] arch_stack_walk+0x144/0x190 [ 235.289003][ C1] ? kasan_set_track+0x4e/0x70 [ 235.289021][ C1] stack_trace_save+0xaa/0x100 [ 235.289038][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 235.289055][ C1] ? __asan_memset+0x22/0x40 [ 235.289074][ C1] ? chacha_block_generic+0x5ea/0xda0 [ 235.289097][ C1] kasan_set_track+0x4e/0x70 [ 235.289112][ C1] ? kasan_set_track+0x4e/0x70 [ 235.289154][ C1] ? __kmem_cache_free+0xba/0x1f0 [ 235.289174][ C1] kasan_save_free_info+0x28/0x40 [ 235.289192][ C1] ____kasan_slab_free+0x126/0x1f0 [ 235.289211][ C1] slab_free_freelist_hook+0x130/0x1a0 [ 235.289229][ C1] ? skb_release_data+0x609/0x7f0 [ 235.289245][ C1] __kmem_cache_free+0xba/0x1f0 [ 235.289268][ C1] skb_release_data+0x609/0x7f0 [ 235.289288][ C1] consume_skb+0xb2/0x110 [ 235.289304][ C1] nsim_dev_trap_report_work+0x723/0xa90 [ 235.289325][ C1] ? process_scheduled_works+0x975/0x1600 [ 235.289346][ C1] process_scheduled_works+0xa60/0x1600 [ 235.289378][ C1] ? worker_attach_to_pool+0x370/0x370 [ 235.289400][ C1] ? assign_work+0x3cc/0x5d0 [ 235.289420][ C1] worker_thread+0xa5e/0xfe0 [ 235.289451][ C1] kthread+0x2fa/0x390 [ 235.289465][ C1] ? pr_cont_work+0x550/0x550 [ 235.289483][ C1] ? kthread_blkcg+0xd0/0xd0 [ 235.289499][ C1] ret_from_fork+0x48/0x80 [ 235.289516][ C1] ? kthread_blkcg+0xd0/0xd0 [ 235.289531][ C1] ret_from_fork_asm+0x11/0x20 [ 235.289558][ C1] [ 235.599571][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 235.606470][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 235.613708][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 235.623775][ T28] Call Trace: [ 235.627067][ T28] [ 235.630003][ T28] dump_stack_lvl+0x18c/0x250 [ 235.634716][ T28] ? show_regs_print_info+0x20/0x20 [ 235.639948][ T28] ? load_image+0x420/0x420 [ 235.644506][ T28] panic+0x2ca/0x720 [ 235.648465][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 235.653011][ T28] ? __irq_work_queue_local+0x13a/0x3b0 [ 235.658583][ T28] ? preempt_schedule_thunk+0x1a/0x30 [ 235.663993][ T28] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 235.670183][ T28] watchdog+0xf98/0xfa0 [ 235.674359][ T28] ? watchdog+0x1e1/0xfa0 [ 235.678717][ T28] kthread+0x2fa/0x390 [ 235.682802][ T28] ? hungtask_pm_notify+0x50/0x50 [ 235.687846][ T28] ? kthread_blkcg+0xd0/0xd0 [ 235.692448][ T28] ret_from_fork+0x48/0x80 [ 235.696864][ T28] ? kthread_blkcg+0xd0/0xd0 [ 235.701452][ T28] ret_from_fork_asm+0x11/0x20 [ 235.706251][ T28] [ 235.709470][ T28] Kernel Offset: disabled [ 235.713782][ T28] Rebooting in 86400 seconds..