last executing test programs: 11m21.161880189s ago: executing program 32 (id=3857): syz_open_dev$video(&(0x7f0000000000), 0x9, 0x109000) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='fd/3\x00') r1 = socket$inet_smc(0x2b, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 10m0.651059581s ago: executing program 33 (id=5456): sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x8810) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020d0000100000002f3144a8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00000001020014bb000001000000002300001300030005000020000002"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f00000000c0), 0x2c8, 0x0) 9m52.124375764s ago: executing program 34 (id=5783): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x6, @local, 0x4e20, 0x0, 'wlc\x00', 0x1, 0x12c, 0xffffffff}, 0x2c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e20, @local}, 0x10) 6m57.448489341s ago: executing program 35 (id=8170): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newtfilter={0xb0, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x7c, 0x2, [@TCA_U32_ACT={0x54, 0x7, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0xc00}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x9, 0x20000000, 0x1, 0xd6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_U32_SEL={0x24, 0x5, {0x8, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x2, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x0) 5m46.382277558s ago: executing program 7 (id=9050): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000500)) r1 = syz_open_pts(r0, 0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000540)=0xf) ioctl$TCSBRK(r1, 0x400455c8, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000580)=0xc0) 5m43.045495263s ago: executing program 7 (id=9090): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x8000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000780)='3', 0x4e) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 5m42.915015161s ago: executing program 3 (id=9093): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x66, &(0x7f0000000080)={0x0, 0xfffffffffffffe43}, &(0x7f0000000000)=0x8) 5m42.614380805s ago: executing program 7 (id=9095): r0 = io_uring_setup(0x539a, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x2, 0x2fb}) r1 = epoll_create1(0x80000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x20) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0xe000001a}) sendfile(r1, r2, 0x0, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 5m42.489654324s ago: executing program 3 (id=9097): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r2, 0x1, 0x70bd28, 0x44, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x24}}, 0xc010) 5m42.365546168s ago: executing program 3 (id=9100): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex_waitv(&(0x7f0000004040)=[{0x3, &(0x7f0000003fc0)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x0) 5m42.319230868s ago: executing program 7 (id=9102): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x145091, 0x0) umount2(&(0x7f00000000c0)='./file0/../file0\x00', 0x0) 5m42.010162751s ago: executing program 7 (id=9107): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000022c0)=@newtfilter={0x34, 0x2c, 0xf3f, 0x70bd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r2, {0x2, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200058c0}, 0x4880) 5m41.740025771s ago: executing program 7 (id=9109): r0 = socket$nl_generic(0x10, 0x3, 0x10) write(r0, &(0x7f0000000000)="380000003f000501010000000000000001020000000000000f0001006f76732d73797374656d00000800020000000000080009002a000000", 0x38) write(r0, &(0x7f0000000100)="6000000041000901020000000000000001010000000000002c000100100004000000000000000000000000000600060008000000100007000101010102020202000040001c000200180003001400100008000200010101010500040040000000", 0x60) write(r0, &(0x7f0000000200)="4400000041000100030000000000000003010000000000002c00010010000400000000000000000000000000060006000800000010000700010101010202020200004000", 0x44) write(r0, &(0x7f0000000300)="60000000410009010200000000000000010100002a0000002c000100100004000000000000000000000000000600060008000000100007000101010102020202000040001c000200180003001400100008000200010101010500040040000000", 0x60) write(r0, &(0x7f0000000400)="44000000410001000300000000000000030100002a0000002c00010010000400000000000000000000000000060006000800000010000700010101010202020200004000", 0x44) 5m41.414025897s ago: executing program 36 (id=9109): r0 = socket$nl_generic(0x10, 0x3, 0x10) write(r0, &(0x7f0000000000)="380000003f000501010000000000000001020000000000000f0001006f76732d73797374656d00000800020000000000080009002a000000", 0x38) write(r0, &(0x7f0000000100)="6000000041000901020000000000000001010000000000002c000100100004000000000000000000000000000600060008000000100007000101010102020202000040001c000200180003001400100008000200010101010500040040000000", 0x60) write(r0, &(0x7f0000000200)="4400000041000100030000000000000003010000000000002c00010010000400000000000000000000000000060006000800000010000700010101010202020200004000", 0x44) write(r0, &(0x7f0000000300)="60000000410009010200000000000000010100002a0000002c000100100004000000000000000000000000000600060008000000100007000101010102020202000040001c000200180003001400100008000200010101010500040040000000", 0x60) write(r0, &(0x7f0000000400)="44000000410001000300000000000000030100002a0000002c00010010000400000000000000000000000000060006000800000010000700010101010202020200004000", 0x44) 5m41.371631042s ago: executing program 3 (id=9114): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x181) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0xfd, 0x4, 0x7fff7ffc}]}) mount$bind(&(0x7f00000001c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x1141099, 0x0) chroot(&(0x7f0000000240)='./file0/../file0\x00') mount$bind(&(0x7f0000000280)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/../file0\x00') 5m41.104677818s ago: executing program 3 (id=9118): r0 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x12, r0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r1, 0x541b, 0x0) 5m40.451715108s ago: executing program 3 (id=9120): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f00000001c0)="66b8090000000f23c80f21f86635040020000f23f866640f2224f2ab0f01d10fc75900660f3882a1002065650f01c366d04309d9ec0f00940028", 0x3a}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m39.935557617s ago: executing program 37 (id=9120): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f00000001c0)="66b8090000000f23c80f21f86635040020000f23f866640f2224f2ab0f01d10fc75900660f3882a1002065650f01c366d04309d9ec0f00940028", 0x3a}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m0.048940029s ago: executing program 8 (id=10878): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) ioctl$SIOCX25SDTEFACILITIES(r1, 0x89eb, 0x0) 2m59.474306765s ago: executing program 8 (id=10881): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00) bind$can_raw(r0, &(0x7f0000000080), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000040)=0xe3, 0x4) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2m59.255519299s ago: executing program 8 (id=10882): r0 = syz_ublk_setup_io_uring(0x7501, &(0x7f0000000300)={0x0, 0xba29, 0x2, 0x2, 0x29c}, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000440)={0x0, 0x1ae7, 0x0, 0x2, 0x151, 0x0, r0}, &(0x7f00000004c0)=0x0, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000580)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000600)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x45}}}, &(0x7f0000000640)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000680)={0x0, 0x6953, 0x3a, 0x0, 0x36d, 0x0, r0}, &(0x7f0000000700)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6f9a, 0x800, 0x0, 0x3b6, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3382, 0x10000, 0x2, 0x27c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x10, 0x1, 0x388, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x121e, 0x0, 0x2000002, 0x44}}], 0x1, &(0x7f0000000980)={0x2e, 0x6, 0x4500, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r5, '\x00', {0x82, 0xb66, 0x0, 0x0}}, 0x0) 2m58.605245135s ago: executing program 8 (id=10889): mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./dev\x00', &(0x7f0000000640)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000680)='./dev/mapper/control\x00', 0x2, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000700)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000780)=0x0, &(0x7f00000007c0)=0x0, &(0x7f0000000800)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000840)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r0, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 2m58.430921948s ago: executing program 8 (id=10892): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000bc0)=[@text64={0x40, &(0x7f0000000c00)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m57.706348599s ago: executing program 8 (id=10899): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='cdg', 0x3) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x49, 0x20008000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000004c0)=@ccm_128={{0x304}, '\x00', "bcf87c7910b661b4be4ae0143548a525", "07b5e559", "1aec271e54d0bbda"}, 0x28) 2m57.246015336s ago: executing program 38 (id=10899): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='cdg', 0x3) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x49, 0x20008000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000004c0)=@ccm_128={{0x304}, '\x00', "bcf87c7910b661b4be4ae0143548a525", "07b5e559", "1aec271e54d0bbda"}, 0x28) 2m40.692519357s ago: executing program 1 (id=11019): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0xfffffe07}}, 0x40440d0) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) sendto$packet(r0, &(0x7f0000000480)="7eeb99b6f78c67515ea2f0d01d76", 0xac, 0x94, &(0x7f0000019680)={0x11, 0x86dd, r2, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 2m39.978216366s ago: executing program 1 (id=11023): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='veth1_virt_wifi\x00', 0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f00000002c0)) setsockopt$inet_sctp_SCTP_ECN_SUPPORTED(r0, 0x84, 0x82, &(0x7f00000001c0)={0x0, 0x1}, 0x8) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000740)={r0, &(0x7f0000000300)='\x00', 0x5c7581, &(0x7f0000000340)={@_ha_fsid={[0x1, 0x91]}, {0xfbff, 0x8, 0x1ff, 0x8d8d}}, 0x3, &(0x7f00000006c0), &(0x7f0000000700)=0x5}) 2m39.768672565s ago: executing program 1 (id=11026): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000000)={0x1d, r2}, 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x3ffff, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xfff2, 0xffff}, {0xa}}}, 0x24}}, 0x0) 2m39.414991661s ago: executing program 1 (id=11032): r0 = syz_ublk_setup_io_uring(0x21, &(0x7f00000004c0)={0x0, 0x1b6c, 0x80, 0x1024002, 0x804d}, &(0x7f0000000540)=0x0, &(0x7f0000000580)=0x0, &(0x7f00000005c0)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000600)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xfffffffffffffffb, &(0x7f0000000680), 0x1, 0x40}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000006c0)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x98c8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000740)=@new_dev={0x4, 0x412, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x1e0}}}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_io_uring_complete(r1, r2) syz_ublk_add_dev(r0, r1, r2, r3, 0x0, 0x0) 2m39.214948082s ago: executing program 1 (id=11034): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/dev_snmp6\x00') fchdir(r0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f00000000c0)={'lo\x00', @random="01320136b1ff"}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) pread64(r1, &(0x7f0000000300)=""/206, 0xce, 0xdb) 2m39.050952527s ago: executing program 1 (id=11037): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x2a020000) mount$cgroup(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000380), 0x2008000, &(0x7f00000003c0)={[{@release_agent={'release_agent', 0x3d, './file0'}}]}) 2m23.938721451s ago: executing program 39 (id=11037): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x2a020000) mount$cgroup(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000380), 0x2008000, &(0x7f00000003c0)={[{@release_agent={'release_agent', 0x3d, './file0'}}]}) 1m34.050438702s ago: executing program 9 (id=11506): socket(0x80000000000000a, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x6) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f00000000c0), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) pselect6(0x40, &(0x7f0000000140)={0x0, 0x800000000000000, 0x0, 0x0, 0x800, 0x0, 0x8, 0xffffffffffffffff}, 0x0, &(0x7f0000000180)={0x1f, 0x0, 0x9, 0x0, 0x0, 0x3, 0x6a9, 0x3ac8}, 0x0, 0x0) recvfrom(r0, &(0x7f0000001280)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 1m33.148790463s ago: executing program 9 (id=11516): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r1}, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) 1m33.028388896s ago: executing program 9 (id=11519): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000001, 0x13, r0, 0x8cee000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendmmsg$inet(r1, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000004c0)="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", 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="8b", 0x1}], 0x1}}], 0x2, 0x4001) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000002c0)=0x40) 1m32.121158423s ago: executing program 9 (id=11529): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) 1m31.971550083s ago: executing program 9 (id=11533): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f000015c000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="2e0f785c7f06660fc7b503000000b9ec0200000f320f300f784e0026660fc7b69edf0000b8010000000f01c1ea53000000be00660f303e0fc75fab"}], 0x0, 0x9, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000001440)=@vmx={0x0, 0x0, 0x2080, {0x26000, 0xdddd1000, {}, 0x0, 0x5}, {"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00", "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f3874000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ecff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000001a49000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007b6e6f1b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000"}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m31.62964107s ago: executing program 9 (id=11538): setns(0xc9, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000600)="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", 0xcfa}], 0x1}, 0x4040000) 1m31.01311197s ago: executing program 40 (id=11538): setns(0xc9, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000600)="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", 0xcfa}], 0x1}, 0x4040000) 5.278814636s ago: executing program 5 (id=12272): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) socket$l2tp6(0xa, 0x2, 0x73) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 5.113231311s ago: executing program 5 (id=12276): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000b40)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000b80)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000bc0)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000c00)="a6", 0x1, 0x2404c081, &(0x7f0000000c40)={0xa, 0x2, 0xd, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000c80)='cdg', 0x3) shutdown(r0, 0x1) 4.778379472s ago: executing program 5 (id=12281): syz_usb_connect$printer(0x3, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00008f7000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x82150, 0xc000, 0xffffffff, 0x140}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FUTEX_WAIT={0x33, 0xb, 0x0, 0xcd, 0x0, 0x0}) 4.321479865s ago: executing program 2 (id=12288): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r3, 0x1, &(0x7f0000000000)=[&(0x7f0000000040)={0x0, 0x0, 0x20, 0x1, 0x1fff, r2, 0x0, 0xfe, 0x3}]) 4.169225337s ago: executing program 2 (id=12290): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000220edf104c05c10687c2010203010902"], 0x0) r1 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x200, 0x70bd26, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x4001800}, 0xc0) recvmmsg$unix(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000033240)=""/4084, 0xff4}], 0x1}}], 0x1, 0x121, 0x0) 3.185643004s ago: executing program 6 (id=12300): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000280)={0x0, 'veth0_macvtap\x00', {0x2}, 0x6}) 2.811442083s ago: executing program 6 (id=12303): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r3, 0x40106f52, &(0x7f0000000380)={0xa, &(0x7f00000000c0)=[{0x20, '\x00', @data, 0xfff}]}) 2.703157197s ago: executing program 6 (id=12304): symlink(0x0, &(0x7f0000000300)='./cgroup.cpu/cpuset.cpus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000021000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c00028005000100000000004700028005000100010000000600040000000000060005"], 0xe4}, 0x1, 0x0, 0x0, 0x404c080}, 0x4008840) 2.643387063s ago: executing program 5 (id=12307): r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x101c42, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xfffffee2) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000480)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000001940)=ANY=[@ANYBLOB="b4000000000b00007910000000000000c310000401000000950074000000000031fb0d3a42319fa204399d17d34e075fdcda533ab1aa71ab1d764152e6cb25dadc7ded5dbe11b62ac5ea9fca11027d29066927603deb92de3141e8ed7ac5b8902070213cdfdc5d6c4890cdeb50347c32060581172b94c6ba22a2b58eb6cbad46ed6e7965a2ba103b0b36f790bb41931f9a3d4dd127c1b4e49f7468f5e62367581c92ef9e7e8ece17d566c93a114d68c577d694b9844e0d9e306404cfc3bfbead9e1b96c6a6cb639bca6d000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) 2.603045253s ago: executing program 0 (id=12308): socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000240)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xffeff034}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.31621356s ago: executing program 6 (id=12309): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='27', 0x2) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000200)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000380)={'pcl816\x00', [0x140, 0x2, 0x3, 0x2, 0x2, 0x10000, 0x7ffd, 0x6, 0x1007, 0xc72d, 0x4, 0x10, 0xadd2, 0x8, 0x4ce, 0x9e9b, 0x101, 0x2, 0x6, 0x8, 0x4, 0x0, 0xa, 0x9, 0xffd, 0x200000, 0xaf, 0x0, 0x9, 0x0, 0x4]}) 2.195226812s ago: executing program 0 (id=12311): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000780)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000007c0)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000800)=0x8, 0x4) connect$inet6(r0, &(0x7f0000000840)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c) sendto$inet6(r0, &(0x7f0000000880)=';', 0x1, 0x4010, 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x102, 0x0, 0x0) 2.110357859s ago: executing program 0 (id=12312): capset(&(0x7f00000001c0)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x5}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89e, 0xc000, 0xb, 0x10b}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.947568501s ago: executing program 6 (id=12314): r0 = creat(&(0x7f0000000240)='./file1\x00', 0x0) io_setup(0x1002, &(0x7f0000000200)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x942, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000140)='./file1\x00') io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0x30000000}]) ioctl$KVM_CREATE_VM(r2, 0xae01, 0xf) 1.728588834s ago: executing program 0 (id=12317): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) 1.353181261s ago: executing program 4 (id=12320): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000340)={0x11, 0xc, r2, 0x1, 0xfe, 0x6, @random="000000e0ff06"}, 0x14) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) write(r0, &(0x7f0000000000)="01", 0x1) 1.320812265s ago: executing program 5 (id=12321): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0xfffffffffffffffe, 0x0) 1.244807639s ago: executing program 4 (id=12322): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/blkio.throttle.write_iops_device\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./proc\x00', &(0x7f0000000380)='proc\x00', 0x0, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r1, &(0x7f00000005c0)='7', 0x1) write(r0, &(0x7f00000002c0)='252:0 ', 0x6) 1.056499936s ago: executing program 2 (id=12323): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0x2000003, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000240)={r2, 0x7fc, 0x2, r2}) ioctl$KVM_SET_IRQCHIP(r1, 0xae64, 0x0) ioctl$KVM_SET_PIT2(r1, 0xae71, &(0x7f00000002c0)={[{0x10000, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff, 0x80, 0x1, 0x0, 0x0, 0x100000000000000}, {0xffffffff, 0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x10, 0xc}, {0x10000, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x21, 0x3, 0xfd, 0x0, 0xfe, 0x0, 0x800}]}) 614.188928ms ago: executing program 4 (id=12324): mkdir(&(0x7f0000001480)='./file0\x00', 0x97) mkdir(&(0x7f00000014c0)='./file1\x00', 0x13b) mkdir(&(0x7f0000001500)='./bus\x00', 0x4) mount$overlay(0x0, &(0x7f0000001540)='./bus\x00', &(0x7f0000001580), 0x0, &(0x7f00000015c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000001600)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183042, 0x25) fallocate(r0, 0x20, 0x0, 0x8000) 593.656297ms ago: executing program 6 (id=12325): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, &(0x7f0000000480)={{0x3, 0x200, 0x80000001, 0x8001, 0x4, 0x40}, 0x202, [0x7f, 0x81, 0xfffffc01, 0xeda, 0x37e, 0x9, 0xc, 0x3, 0x401, 0x7, 0x9, 0x2, 0x9, 0x3, 0x5, 0x6, 0x6, 0x20000000, 0x7, 0x1, 0x4, 0x9, 0xf6, 0x78316073, 0x1, 0x9, 0x80000001, 0x8, 0x3ff, 0x2f66c0, 0x0, 0xffff, 0x7, 0x6, 0x8, 0x7, 0xf, 0x0, 0x8, 0x1ff, 0x1c00, 0x9, 0x4, 0xa, 0x7, 0x7, 0xffff, 0x6b, 0x4, 0x800, 0x7, 0x0, 0x400, 0x9, 0x80, 0x3, 0xc, 0x2, 0xc, 0x27f0, 0x6, 0x5, 0x1a04, 0x0, 0xff, 0x8, 0x1, 0x1, 0xfffffff9, 0x0, 0x4, 0x1ff, 0x1, 0x101, 0x1, 0x401, 0x2, 0x8e, 0x0, 0x7, 0xa, 0x8, 0x5, 0x1, 0x3, 0x7, 0x0, 0xd, 0xf9a2, 0xb24f, 0x3, 0x4, 0x74, 0x3, 0x9, 0xe, 0x1ff, 0x2, 0x1, 0x7, 0x400, 0x6, 0x2, 0x5, 0x4, 0xa, 0x21, 0xff, 0x3, 0x8, 0x9, 0x8, 0x3, 0x6, 0x3, 0xfffffff6, 0x2, 0xee2f, 0x7fff, 0x1, 0xfffffff7, 0x200, 0x8, 0x52, 0x0, 0x9, 0x3, 0x3ff, 0x5, 0xffffff00, 0xf, 0xffffffff, 0x80000001, 0x4, 0xee, 0x370, 0x5, 0x5, 0x7ff, 0x4, 0x6, 0xae8f, 0x40, 0x6, 0x4, 0x4, 0xc0000, 0x5, 0x289e49ce, 0xb, 0x4, 0x7ff, 0x2, 0xc, 0x9, 0x6, 0xfdc5, 0x5, 0x5, 0x0, 0x7f, 0xffff, 0x6, 0x0, 0x3, 0x7fffffff, 0x8, 0x6, 0xfffffff7, 0x4, 0x40, 0x7, 0xb, 0xff, 0x1, 0x3, 0x0, 0x79, 0x3, 0x81, 0xe6af, 0x1, 0xeac, 0x9, 0x4, 0x0, 0x1, 0x100, 0x9, 0x3, 0xfffffff2, 0x9, 0xb51, 0x7, 0x4, 0xbc7, 0x7fff, 0x401, 0xb, 0x800000, 0x2, 0x4, 0x6, 0x6, 0x83b, 0x2, 0x645e, 0x81, 0x200, 0x6, 0x9, 0x2, 0x4, 0x5, 0x3, 0x8, 0x10, 0x24, 0x2, 0x4223, 0x9, 0x4, 0x2, 0x8, 0x4, 0x8, 0x5, 0x6, 0x40, 0x34, 0xb23, 0x7, 0xfffffffc, 0x80000001, 0xfffffffb, 0x3, 0x8000, 0x401, 0xfffffffd, 0x4, 0xa, 0x800, 0x80000000, 0x5, 0x3, 0x3240cbb4, 0x5, 0x3, 0xc4d, 0x2, 0x49008aa2, 0x40, 0x0, 0x1ff, 0x5, 0x6, 0x0, 0x5015, 0x5, 0x6, 0x5, 0x0, 0x200, 0x8001, 0xaab, 0xbc6, 0x3, 0x1, 0x4, 0xbc, 0x9, 0x3, 0x3ac, 0x8, 0x5, 0x2, 0x1, 0x9, 0xc6, 0x28, 0x3, 0x1ff, 0x0, 0x10000, 0x3, 0xb, 0x7, 0x2, 0xc0, 0x9, 0x0, 0x6dc4, 0x5833, 0x3, 0x0, 0xc1f9, 0x9fc, 0x6, 0x7, 0x3ff, 0x8, 0x8, 0x5, 0x401, 0x6, 0x7, 0x5, 0x2, 0x1, 0x0, 0x5, 0x5, 0x200, 0x8, 0x5, 0x7, 0x2, 0x200, 0x9, 0xfffffffc, 0x52e, 0x6, 0x7, 0x3, 0x9, 0x7c1, 0x8001, 0x852, 0x7fff, 0x0, 0x2, 0x6, 0x6, 0x7, 0x400, 0x3, 0xffffff80, 0xa, 0xc, 0xf, 0x9, 0x2, 0x2, 0x0, 0x1000, 0x5, 0x30, 0x6, 0x2, 0x3, 0x3, 0x9, 0x2, 0x3, 0x8001, 0x172, 0x8, 0x4, 0x6, 0x8000, 0x843c, 0xd2, 0x8, 0x40, 0x4, 0xfffffe01, 0x8, 0x7, 0x0, 0x0, 0x8, 0x5, 0x2, 0x10001, 0x7, 0xb419, 0x2, 0x0, 0x8, 0x8, 0x6, 0x83a6, 0x80, 0xf, 0xfffffff9, 0x3, 0x8, 0x6, 0xe006, 0x461, 0x7, 0xfffffffd, 0xfffffffb, 0xff, 0x3, 0x1ff, 0x9, 0x1, 0x6, 0xd, 0x7fffffff, 0x0, 0x0, 0x348, 0x6, 0x0, 0x8, 0x1, 0x3, 0x8, 0x0, 0xcce, 0x6, 0xa, 0x80000000, 0x2, 0x6, 0x7, 0x6, 0x0, 0x2, 0x7f, 0x4, 0x3, 0x2, 0x7, 0x3, 0x1, 0x3, 0x1ff, 0x101, 0x0, 0xdb81, 0x9, 0x2, 0x0, 0xfff, 0x1, 0x5, 0xfffffffc, 0x2f5, 0x4480, 0xff, 0x2, 0x1a, 0x8, 0x3, 0x7, 0x7fffffff, 0xdc11, 0xf, 0x4, 0x2, 0x5, 0x7f, 0x5, 0x5, 0x7, 0x9, 0x1, 0x0, 0x869, 0x3, 0xac2, 0x7, 0x80000000, 0x6, 0x1, 0x1f2, 0xf16c, 0x7fffffff, 0x3000, 0x7, 0xfeb, 0x9, 0x8, 0xc2, 0x7, 0x0, 0x1, 0x4, 0x10001, 0x4, 0x1a6, 0x6, 0x1ff, 0x7fffffff, 0x1, 0x0, 0x3, 0x1, 0x80000000, 0xffff, 0x7, 0x0, 0x5, 0xfffffeff, 0x4e2, 0xbc42, 0x5, 0x1, 0x5, 0x7, 0x3, 0x5, 0xb, 0x5, 0xfffffffc, 0x1b, 0xb, 0x80, 0x559, 0x7, 0x2, 0x0, 0x3, 0x9, 0x3, 0x6, 0x2c000000, 0xd1bb, 0xa, 0x7ff, 0x4, 0x1, 0x7, 0x1fa2, 0x2, 0x4, 0x3, 0x8, 0xe, 0x6, 0x6, 0x9, 0x7, 0x1, 0x4, 0xfffffff9, 0x7ff, 0x686, 0x0, 0xb98, 0xff, 0x4, 0x5, 0xd, 0xe3, 0x8, 0x7009ec93, 0x0, 0x949, 0xffff, 0x6, 0x2, 0x87, 0x3, 0x8000, 0xf5f, 0x8, 0xaf, 0x0, 0x6, 0xdbaf, 0x8, 0x2, 0x7, 0x6, 0x0, 0x80000001, 0x0, 0x5, 0x4, 0x0, 0xfffffff2, 0x7, 0xdc1, 0x1ff, 0x776, 0x7, 0x4, 0xffffffff, 0x6, 0x9, 0x5, 0x7fff, 0x7, 0x1, 0x1, 0x0, 0x2, 0xcd4, 0x0, 0x100, 0x1, 0x6, 0xff, 0x8000, 0x4, 0x7194, 0x0, 0x26273d73, 0x5, 0x4, 0xd, 0x4, 0x1, 0x4, 0x6, 0xb, 0x3ffc000, 0x1010, 0x2d46, 0x6, 0x7, 0x1, 0x6, 0x2, 0x400000, 0x7fffffff, 0xfff, 0x513, 0x1, 0x7fff, 0x4, 0x4e0f, 0x6, 0x1, 0x0, 0x1, 0x1, 0x3, 0x3, 0xb, 0x5, 0x0, 0x8, 0x12b7, 0xffffffff, 0x0, 0x80000001, 0x5, 0x8, 0x6, 0x0, 0x8, 0x6, 0x9589, 0x6, 0x7, 0x5c, 0xfffffff8, 0x9700, 0x24c, 0x6, 0x6, 0x8, 0x5, 0xd, 0x4f68, 0x3, 0x9, 0x800, 0x6, 0x7d, 0xa3, 0x5, 0x4, 0x4, 0xfe7b, 0x1000, 0x5, 0x400, 0x397, 0x7, 0x3, 0x6, 0x21, 0x1000, 0x4, 0x6, 0x8, 0x7, 0x4, 0x0, 0x0, 0x9, 0x0, 0x1, 0x1, 0xbfb, 0x3, 0x2, 0x9, 0x9, 0x1f35efa4, 0x4, 0x1, 0x4, 0x7f, 0x0, 0x7, 0x4, 0x9a0, 0xfffffff8, 0xffff, 0xffff, 0x5, 0xe, 0x3b, 0xf, 0x7, 0xfff, 0xa, 0xfab, 0x1, 0x100, 0xffffffff, 0x0, 0xd, 0x5, 0xffffffff, 0x3, 0x6, 0x814e, 0x7, 0x1798, 0x7, 0xbbe, 0x1ff, 0xfffffff7, 0x80000000, 0x0, 0x6, 0x7, 0x7, 0x2, 0xfffffff8, 0x7, 0x2, 0x2, 0x8, 0x8, 0x10, 0x9, 0x8, 0x9, 0x7, 0x1, 0x0, 0x411c, 0x8, 0x6, 0x7, 0x2, 0x7, 0x1, 0xa6, 0x6, 0x7, 0x6, 0x0, 0x4, 0x3ff, 0xa342, 0x509e30bf, 0x80000000, 0x4, 0x3, 0xa7, 0x4, 0x5, 0xffffff80, 0x3, 0x3, 0x80000001, 0x8, 0x5, 0x9, 0x2, 0x1, 0x62, 0xd9, 0x6, 0x94, 0x40, 0x7ff, 0xddd, 0x36b529c9, 0xad0, 0x0, 0x2, 0x4, 0x8, 0x8, 0x1, 0x8, 0xe, 0x8, 0x9b, 0x2, 0xd7, 0x0, 0x41d0, 0x9b1c, 0x9, 0x5, 0x4, 0x5, 0x0, 0x3, 0xff, 0x9, 0x8, 0x4, 0x3, 0x2, 0xffffffff, 0x490, 0x6, 0xf3, 0x8, 0xffff, 0x400, 0x7, 0x3, 0x5, 0x5, 0x1000, 0x2, 0x3, 0x2, 0x9, 0xb, 0x8, 0xcb, 0x8000, 0xa, 0x13, 0x800, 0x1, 0xa, 0x0, 0x10000, 0x9, 0xf4e, 0x8, 0x3, 0x7, 0x70, 0xa3, 0x99, 0x2, 0x8, 0xd, 0x80000001, 0x8, 0x0, 0xecf, 0x0, 0x0, 0x7, 0xffffffff, 0xffffffff, 0xfffffffe, 0xffff8777, 0xab9, 0x1, 0xf, 0xac, 0x2, 0xc0, 0x9, 0x5, 0x8, 0x6, 0x3, 0x1, 0x2, 0x3ff, 0x200, 0x2, 0x1, 0x1000, 0x6, 0x7, 0x5, 0x1, 0x6, 0x3, 0x5, 0xa, 0xe, 0x80000001, 0x40, 0x6, 0x95d8, 0x7, 0x10, 0x5, 0x0, 0xb2b, 0xfe94, 0x8, 0x8, 0xa44, 0xffffffff, 0x7fffffff, 0x1, 0x8f, 0x42c6, 0x1ff, 0x3, 0xc, 0xffffffff, 0x5, 0x8, 0x94cd, 0x9, 0x0, 0x66, 0x101, 0x1, 0x8, 0x80000000, 0x0, 0x101, 0x8, 0x5edc5dd9, 0x0, 0xdba2, 0xb, 0x200, 0x7, 0xc9, 0x101, 0x587, 0xd8, 0x3, 0x1, 0x6, 0xff, 0x9, 0x1, 0x6, 0x400, 0x6, 0xffff6f08, 0x2, 0x0, 0x3, 0x200, 0xf3, 0x7848, 0x1acb, 0x9d, 0x0, 0xfffffffe, 0x4, 0x8, 0xffff0000, 0x3, 0x5, 0x4106de98, 0x70, 0x6, 0x43, 0x6, 0x2, 0x2, 0x928, 0x5, 0x0, 0x7, 0x4, 0x0, 0x1, 0x7, 0x7, 0x0, 0x8b9, 0x3, 0xfffffff8, 0x3, 0xc5, 0x4, 0x9, 0x1ff, 0x4, 0x9, 0x5, 0x6, 0x2, 0x8, 0x9, 0x7ff, 0x5, 0x6, 0x800, 0xfffffffd, 0x5, 0x8, 0x659a8481, 0x6, 0x5, 0xfff, 0x5, 0xbdb2, 0x9, 0x7, 0x8001, 0x5, 0xffff9729, 0xffffffff, 0x40, 0x0, 0x5, 0x2, 0xdd, 0x80000001, 0x9, 0x2, 0x3, 0x10]}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) 498.153535ms ago: executing program 2 (id=12326): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xe, 0x4, 0x8, 0xd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r2, 0x0, 0x0}, 0x10) 365.119483ms ago: executing program 5 (id=12327): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000c00)={'wlan1\x00', 0x0}) setns(0xc9, 0x0) r4 = gettid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)={0x24, r1, 0xa23, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008880}, 0x20000084) 364.965645ms ago: executing program 4 (id=12328): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file1\x00', 0xa2500, 0x20) fdatasync(r0) 359.512646ms ago: executing program 2 (id=12329): sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000000)={0x34, 0x0, 0x1, 0x70bd28, 0x2, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4054}, 0x0) setns(0xc9, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000a29a75ac180000000200000000ddffff00000004010100000000000002"], 0x0, 0x32, 0x0, 0x1}, 0x28) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket(0x8, 0x2, 0x0) setsockopt(r0, 0x108, 0x42020054, &(0x7f0000000000)="010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000", 0x54) 223.515131ms ago: executing program 2 (id=12330): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r6 = dup(r0) syz_ublk_setup_queues(r6, r5, &(0x7f0000000180)={0x0, 0x3680, 0x800, 0x2, 0x32c, 0x0, r1}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x40, 0x10001, 0x2a5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x10000, 0x7, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbe, 0x0, r1}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x5c0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 210.744837ms ago: executing program 4 (id=12331): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000380)=ANY=[], 0x8) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000400)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000580)=0x8, 0x4) recvmmsg(r0, &(0x7f00000005c0), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0xa, 0x4e20, 0x2, @mcast1}, 0x1c) 113.117453ms ago: executing program 0 (id=12332): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./proc\x00', &(0x7f00000004c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001bc0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000001c00)='27', 0x2) sendto$inet(r0, 0x0, 0x0, 0x40000, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000b80)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000001b80)='./file0\x00') 57.032793ms ago: executing program 4 (id=12333): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0x1}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtfilter={0x50, 0x2c, 0x601, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x7}, {0x5, 0xffff}, {0x300}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x5, 0x0, 0x4}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x2400c8d0}, 0x0) 0s ago: executing program 0 (id=12334): syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x207, &(0x7f0000000040)={0x0, 0x30bd, 0xc000, 0x5, 0x40000183}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x6da0, 0x7721, 0x16, 0x0, 0x0) kernel console output (not intermixed with test programs): ] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1233.267143][ T2329] Call Trace: [ 1233.267148][ T2329] [ 1233.267153][ T2329] dump_stack_lvl+0x100/0x190 [ 1233.267175][ T2329] should_fail_ex.cold+0x5/0xa [ 1233.267191][ T2329] should_failslab+0xc2/0x120 [ 1233.267209][ T2329] __kmalloc_cache_noprof+0x91/0x6d0 [ 1233.267223][ T2329] ? x509_key_preparse+0x355/0x9c0 [ 1233.267242][ T2329] x509_key_preparse+0x355/0x9c0 [ 1233.267260][ T2329] asymmetric_key_preparse+0xce/0x1d0 [ 1233.267272][ T2329] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 1233.267285][ T2329] __key_create_or_update+0x413/0xe30 [ 1233.267307][ T2329] ? __pfx___key_create_or_update+0x10/0x10 [ 1233.267326][ T2329] ? lookup_user_key+0x3f3/0x1300 [ 1233.267349][ T2329] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 1233.267368][ T2329] key_create_or_update+0x42/0x60 [ 1233.267387][ T2329] __do_sys_add_key+0x2e8/0x460 [ 1233.267401][ T2329] ? __pfx___do_sys_add_key+0x10/0x10 [ 1233.267419][ T2329] do_syscall_64+0x123/0x790 [ 1233.267437][ T2329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1233.267449][ T2329] RIP: 0033:0x7f516ed9e559 [ 1233.267458][ T2329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1233.267469][ T2329] RSP: 002b:00007f516fbee028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 1233.267483][ T2329] RAX: ffffffffffffffda RBX: 00007f516f025fa0 RCX: 00007f516ed9e559 [ 1233.267490][ T2329] RDX: 0000200000000580 RSI: 0000000000000000 RDI: 0000200000000540 [ 1233.267497][ T2329] RBP: 00007f516ee358b0 R08: fffffffffffffffe R09: 0000000000000000 [ 1233.267504][ T2329] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 1233.267511][ T2329] R13: 00007f516f026038 R14: 00007f516f025fa0 R15: 00007ffebb548328 [ 1233.267526][ T2329] [ 1233.636057][ T5607] Bluetooth: hci2: command tx timeout [ 1233.671585][ T31] audit: type=1400 audit(1792131409.700:8097): avc: denied { create } for pid=2336 comm="syz.6.11551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1233.981537][ T31] audit: type=1400 audit(1792131410.010:8098): avc: denied { write } for pid=2322 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1233.981723][ T31] audit: type=1400 audit(1792131410.010:8099): avc: denied { create } for pid=2322 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1233.981995][ T31] audit: type=1400 audit(1792131410.010:8100): avc: denied { write } for pid=2322 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=8260 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1233.982236][ T31] audit: type=1400 audit(1792131410.010:8101): avc: denied { append } for pid=2322 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=8260 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1234.233165][ T31] audit: type=1400 audit(1792131410.260:8102): avc: denied { write } for pid=2358 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1234.233838][ T31] audit: type=1400 audit(1792131410.260:8103): avc: denied { unlink } for pid=2358 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=8260 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1234.394747][ T13] bond0 (unregistering): Released all slaves [ 1234.404738][ T13] bond1 (unregistering): Released all slaves [ 1234.428786][ T13] bond2 (unregistering): (slave wireguard0): Releasing backup interface [ 1234.429526][ T13] bond2 (unregistering): Released all slaves [ 1234.455199][ T1969] netdevsim netdevsim9 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1234.488615][ T2343] batadv_slave_1: entered promiscuous mode [ 1234.512236][ T2293] rxe_eth0 speed is unknown, defaulting to 1000 [ 1234.514518][ T5264] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1234.541936][ T2337] batadv_slave_1: left promiscuous mode [ 1234.759860][ T31] audit: type=1326 audit(1792131410.790:8104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2365 comm="syz.6.11556" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f516ed9e559 code=0x7ffc0000 [ 1234.759891][ T31] audit: type=1326 audit(1792131410.790:8105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2365 comm="syz.6.11556" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f516ed9e559 code=0x7ffc0000 [ 1234.762090][ T31] audit: type=1326 audit(1792131410.790:8106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2365 comm="syz.6.11556" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f516ed9e559 code=0x7ffc0000 [ 1235.098970][T15614] usb 3-1: USB disconnect, device number 51 [ 1235.207514][ T2375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11558'. [ 1235.231175][ T2379] netlink: 'syz.2.11559': attribute type 1 has an invalid length. [ 1235.398833][ T2379] bond1: entered promiscuous mode [ 1235.411757][ T2379] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1235.424226][ T2293] rxe_eth0 speed is unknown, defaulting to 1000 [ 1235.504563][ T2388] FAULT_INJECTION: forcing a failure. [ 1235.504563][ T2388] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1235.504587][ T2388] CPU: 0 UID: 0 PID: 2388 Comm: syz.0.11563 Tainted: G L syzkaller #0 PREEMPT(full) [ 1235.504606][ T2388] Tainted: [L]=SOFTLOCKUP [ 1235.504611][ T2388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1235.504620][ T2388] Call Trace: [ 1235.504625][ T2388] [ 1235.504630][ T2388] dump_stack_lvl+0x100/0x190 [ 1235.504652][ T2388] should_fail_ex.cold+0x5/0xa [ 1235.504668][ T2388] get_futex_key+0x1d0/0x14f0 [ 1235.504687][ T2388] ? __pfx_get_futex_key+0x10/0x10 [ 1235.504704][ T2388] ? xas_store+0x409/0x1a30 [ 1235.504715][ T2388] ? find_held_lock+0x2b/0x80 [ 1235.504733][ T2388] ? iommufd_object_finalize+0xf7/0x160 [ 1235.504744][ T2388] ? iommufd_object_finalize+0xf7/0x160 [ 1235.504757][ T2388] futex_wake+0xf4/0x5e0 [ 1235.504772][ T2388] ? __pfx_futex_wake+0x10/0x10 [ 1235.504783][ T2388] ? __pfx___up_read+0x10/0x10 [ 1235.504797][ T2388] ? iommufd_ioas_alloc_ioctl+0x2d3/0x3c0 [ 1235.504819][ T2388] do_futex+0x2b2/0x440 [ 1235.504836][ T2388] ? __pfx_do_futex+0x10/0x10 [ 1235.504855][ T2388] ? __fget_files+0x34/0x3d0 [ 1235.504876][ T2388] __x64_sys_futex+0x34f/0x4d0 [ 1235.504895][ T2388] ? __pfx___x64_sys_futex+0x10/0x10 [ 1235.504911][ T2388] ? selinux_file_ioctl+0xb6/0x290 [ 1235.504934][ T2388] do_syscall_64+0x123/0x790 [ 1235.504952][ T2388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1235.504971][ T2388] RIP: 0033:0x7f2da2f9e559 [ 1235.504982][ T2388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1235.504994][ T2388] RSP: 002b:00007f2da3e320e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1235.505008][ T2388] RAX: ffffffffffffffda RBX: 00007f2da3225fa8 RCX: 00007f2da2f9e559 [ 1235.505016][ T2388] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2da3225fac [ 1235.505024][ T2388] RBP: 00007f2da3225fa0 R08: 0000000000000001 R09: 0000000000000000 [ 1235.505031][ T2388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1235.505038][ T2388] R13: 00007f2da3226038 R14: 00007ffde09a48b0 R15: 00007ffde09a4998 [ 1235.505054][ T2388] [ 1235.716209][ T5607] Bluetooth: hci2: command tx timeout [ 1235.765446][ T2386] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1235.765627][ T2386] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 1235.765639][ T2386] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 1235.812266][ T2386] bond1: (slave gre1): making interface the new active one [ 1235.812281][ T2386] gre1: entered promiscuous mode [ 1235.839369][ T2386] bond1: (slave gre1): Enslaving as an active interface with an up link [ 1236.017414][ T2399] FAULT_INJECTION: forcing a failure. [ 1236.017414][ T2399] name failslab, interval 1, probability 0, space 0, times 0 [ 1236.017439][ T2399] CPU: 0 UID: 0 PID: 2399 Comm: syz.0.11565 Tainted: G L syzkaller #0 PREEMPT(full) [ 1236.017457][ T2399] Tainted: [L]=SOFTLOCKUP [ 1236.017462][ T2399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1236.017470][ T2399] Call Trace: [ 1236.017474][ T2399] [ 1236.017480][ T2399] dump_stack_lvl+0x100/0x190 [ 1236.017501][ T2399] should_fail_ex.cold+0x5/0xa [ 1236.017518][ T2399] should_failslab+0xc2/0x120 [ 1236.017536][ T2399] __kmalloc_cache_noprof+0x91/0x6d0 [ 1236.017549][ T2399] ? do_raw_spin_unlock+0x145/0x1e0 [ 1236.017564][ T2399] ? binderfs_fill_super+0x754/0x13d0 [ 1236.017581][ T2399] binderfs_fill_super+0x754/0x13d0 [ 1236.017598][ T2399] ? __pfx_binderfs_fill_super+0x10/0x10 [ 1236.017612][ T2399] ? __init_swait_queue_head+0xca/0x150 [ 1236.017640][ T2399] ? rcu_is_watching+0x13/0xc0 [ 1236.017656][ T2399] ? cap_capable+0x107/0x430 [ 1236.017672][ T2399] ? __pfx_binderfs_fill_super+0x10/0x10 [ 1236.017685][ T2399] get_tree_nodev+0xdd/0x190 [ 1236.017700][ T2399] vfs_get_tree+0x92/0x320 [ 1236.017712][ T2399] path_mount+0x7d0/0x2850 [ 1236.017728][ T2399] ? __pfx_path_mount+0x10/0x10 [ 1236.017739][ T2399] ? lockdep_hardirqs_on+0x7d/0x110 [ 1236.017757][ T2399] ? putname+0xb1/0x110 [ 1236.017767][ T2399] ? kmem_cache_free+0x127/0x6c0 [ 1236.017787][ T2399] ? __x64_sys_mount+0x293/0x310 [ 1236.017799][ T2399] __x64_sys_mount+0x293/0x310 [ 1236.017811][ T2399] ? __pfx___x64_sys_mount+0x10/0x10 [ 1236.017827][ T2399] do_syscall_64+0x123/0x790 [ 1236.017846][ T2399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1236.017858][ T2399] RIP: 0033:0x7f2da2f9e559 [ 1236.017868][ T2399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1236.017879][ T2399] RSP: 002b:00007f2da3e32028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1236.017890][ T2399] RAX: ffffffffffffffda RBX: 00007f2da3225fa0 RCX: 00007f2da2f9e559 [ 1236.017901][ T2399] RDX: 00002000000000c0 RSI: 0000200000000180 RDI: 0000000000000000 [ 1236.017908][ T2399] RBP: 00007f2da30358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1236.017915][ T2399] R10: 0000000003010000 R11: 0000000000000246 R12: 0000000000000000 [ 1236.017922][ T2399] R13: 00007f2da3226038 R14: 00007f2da3225fa0 R15: 00007ffde09a4998 [ 1236.017940][ T2399] [ 1236.623743][ T5810] rxe_eth0 speed is unknown, defaulting to 1000 [ 1236.748325][ T2293] rxe_eth0 speed is unknown, defaulting to 1000 [ 1236.867651][ T5264] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1237.269412][ T2293] rxe_eth0 speed is unknown, defaulting to 1000 [ 1237.461061][ T2452] gretap0: entered promiscuous mode [ 1237.471731][ T2452] A link change request failed with some changes committed already. Interface vlan2 may have been left with an inconsistent configuration, please check. [ 1237.795175][ T5607] Bluetooth: hci2: command tx timeout [ 1237.828012][ T2293] rxe_eth0 speed is unknown, defaulting to 1000 [ 1238.067868][ T2488] pimreg: entered allmulticast mode [ 1238.120705][ T5264] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1238.285962][ T2293] rxe_eth0 speed is unknown, defaulting to 1000 [ 1238.733532][ T2293] rxe_eth0 speed is unknown, defaulting to 1000 [ 1238.777325][ T31] kauditd_printk_skb: 12 callbacks suppressed [ 1238.777339][ T31] audit: type=1400 audit(1792131414.810:8119): avc: denied { write } for pid=2502 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1238.910230][ T2536] ip_tables: iptables: counters copy to user failed while replacing table [ 1238.972090][ T31] audit: type=1400 audit(1792131415.000:8120): avc: denied { write } for pid=2535 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1239.131161][ T5264] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1239.212690][ T2293] rxe_eth0 speed is unknown, defaulting to 1000 [ 1239.758196][ T2293] rxe_eth0 speed is unknown, defaulting to 1000 [ 1239.877003][ T5607] Bluetooth: hci2: command tx timeout [ 1240.020128][ T2293] rxe_eth0 speed is unknown, defaulting to 1000 [ 1240.348918][ T2293] rxe_eth0 speed is unknown, defaulting to 1000 [ 1240.587747][ T13] hsr_slave_0: left promiscuous mode [ 1240.734805][ T13] veth1_macvtap: left promiscuous mode [ 1240.734830][ T13] veth0_macvtap: left promiscuous mode [ 1240.734898][ T13] veth1_vlan: left promiscuous mode [ 1240.734928][ T13] veth0_vlan: left promiscuous mode [ 1240.959089][ T31] audit: type=1400 audit(1792131416.990:8121): avc: denied { execute } for pid=2600 comm="syz.2.11606" path="/file1" dev="ramfs" ino=137816 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 1241.827104][ T2638] syzkaller1: entered promiscuous mode [ 1241.827119][ T2638] syzkaller1: entered allmulticast mode [ 1241.832000][ T2638] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1241.832014][ T2638] syzkaller1: Linktype set failed because interface is up [ 1242.158120][ T2653] FAULT_INJECTION: forcing a failure. [ 1242.158120][ T2653] name failslab, interval 1, probability 0, space 0, times 0 [ 1242.158144][ T2653] CPU: 0 UID: 0 PID: 2653 Comm: syz.6.11629 Tainted: G L syzkaller #0 PREEMPT(full) [ 1242.158161][ T2653] Tainted: [L]=SOFTLOCKUP [ 1242.158166][ T2653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1242.158173][ T2653] Call Trace: [ 1242.158178][ T2653] [ 1242.158183][ T2653] dump_stack_lvl+0x100/0x190 [ 1242.158205][ T2653] should_fail_ex.cold+0x5/0xa [ 1242.158221][ T2653] should_failslab+0xc2/0x120 [ 1242.158240][ T2653] __kmalloc_cache_noprof+0x91/0x6d0 [ 1242.158254][ T2653] ? lockdep_hardirqs_on+0x7d/0x110 [ 1242.158270][ T2653] ? ip_vs_protocol_net_init+0xbe/0x300 [ 1242.158288][ T2653] ip_vs_protocol_net_init+0xbe/0x300 [ 1242.158305][ T2653] __ip_vs_init+0x239/0x520 [ 1242.158318][ T2653] ? __pfx___ip_vs_init+0x10/0x10 [ 1242.158335][ T2653] ops_init+0x1e2/0x5f0 [ 1242.158349][ T2653] setup_net+0x118/0x3a0 [ 1242.158364][ T2653] ? __pfx_setup_net+0x10/0x10 [ 1242.158382][ T2653] copy_net_ns+0x345/0x7a0 [ 1242.158403][ T2653] create_new_namespaces+0x3ea/0xac0 [ 1242.158420][ T2653] unshare_nsproxy_namespaces+0xf2/0x220 [ 1242.158435][ T2653] ksys_unshare+0x4a2/0xb30 [ 1242.158450][ T2653] ? __pfx_ksys_unshare+0x10/0x10 [ 1242.158472][ T2653] __x64_sys_unshare+0x31/0x40 [ 1242.158485][ T2653] do_syscall_64+0x123/0x790 [ 1242.158504][ T2653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1242.158517][ T2653] RIP: 0033:0x7f516ed9e559 [ 1242.158528][ T2653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1242.158538][ T2653] RSP: 002b:00007f516fbee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1242.158550][ T2653] RAX: ffffffffffffffda RBX: 00007f516f025fa0 RCX: 00007f516ed9e559 [ 1242.158557][ T2653] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1242.158564][ T2653] RBP: 00007f516ee358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1242.158571][ T2653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1242.158577][ T2653] R13: 00007f516f026038 R14: 00007f516f025fa0 R15: 00007ffebb548328 [ 1242.158592][ T2653] [ 1242.450413][ T2658] 0x000000000003-0x000000010001 : "" [ 1242.502931][ T2658] ftl_cs: FTL header corrupt! [ 1242.580885][ T2658] FAULT_INJECTION: forcing a failure. [ 1242.580885][ T2658] name failslab, interval 1, probability 0, space 0, times 0 [ 1242.580908][ T2658] CPU: 0 UID: 0 PID: 2658 Comm: syz.2.11621 Tainted: G L syzkaller #0 PREEMPT(full) [ 1242.580925][ T2658] Tainted: [L]=SOFTLOCKUP [ 1242.580930][ T2658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1242.580937][ T2658] Call Trace: [ 1242.580941][ T2658] [ 1242.580946][ T2658] dump_stack_lvl+0x100/0x190 [ 1242.580968][ T2658] should_fail_ex.cold+0x5/0xa [ 1242.580986][ T2658] should_failslab+0xc2/0x120 [ 1242.581004][ T2658] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1242.581022][ T2658] ? __kernfs_new_node+0xd2/0xa10 [ 1242.581038][ T2658] __kernfs_new_node+0xd2/0xa10 [ 1242.581053][ T2658] ? __pfx___kernfs_new_node+0x10/0x10 [ 1242.581069][ T2658] ? lock_acquire+0x1d1/0x380 [ 1242.581082][ T2658] ? kernfs_root+0x23/0x2a0 [ 1242.581093][ T2658] ? find_held_lock+0x2b/0x80 [ 1242.581110][ T2658] ? kernfs_root+0xee/0x2a0 [ 1242.581120][ T2658] ? kernfs_root+0xee/0x2a0 [ 1242.581135][ T2658] kernfs_new_node+0x117/0x150 [ 1242.581150][ T2658] __kernfs_create_file+0x53/0x350 [ 1242.581168][ T2658] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1242.581190][ T2658] internal_create_group+0x593/0xfb0 [ 1242.581205][ T2658] ? kernfs_create_dir_ns+0x16f/0x2b0 [ 1242.581219][ T2658] ? __pfx_internal_create_group+0x10/0x10 [ 1242.581232][ T2658] ? sysfs_create_dir_ns+0x14c/0x2b0 [ 1242.581243][ T2658] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1242.581257][ T2658] internal_create_groups+0x9d/0x150 [ 1242.581270][ T2658] kobject_add_internal+0x317/0x930 [ 1242.581286][ T2658] kobject_add+0x16a/0x1e0 [ 1242.581298][ T2658] ? __pfx_kobject_add+0x10/0x10 [ 1242.581313][ T2658] ? lock_acquire+0x1d1/0x380 [ 1242.581326][ T2658] ? queue_hctx+0x26/0x2a0 [ 1242.581342][ T2658] blk_mq_register_hctx+0x124/0x460 [ 1242.581360][ T2658] blk_mq_sysfs_register+0x1cc/0x480 [ 1242.581377][ T2658] blk_register_queue+0xda/0x630 [ 1242.581403][ T2658] __add_disk+0x7dd/0xf10 [ 1242.581419][ T2658] add_disk_fwnode+0x118/0x480 [ 1242.581434][ T2658] add_mtd_blktrans_dev+0xd0b/0x1520 [ 1242.581456][ T2658] ? __pfx_add_mtd_blktrans_dev+0x10/0x10 [ 1242.581481][ T2658] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 1242.581495][ T2658] ? mtdblock_add_mtd+0x4a/0x270 [ 1242.581514][ T2658] mtdblock_add_mtd+0x1cc/0x270 [ 1242.581530][ T2658] blktrans_notify_add+0xa2/0xf0 [ 1242.581545][ T2658] add_mtd_device+0xb6d/0x1820 [ 1242.581561][ T2658] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1242.581579][ T2658] ? __pfx_add_mtd_device+0x10/0x10 [ 1242.581595][ T2658] mtd_add_partition+0x376/0x6a0 [ 1242.581610][ T2658] ? __pfx_mtd_add_partition+0x10/0x10 [ 1242.581625][ T2658] ? __might_fault+0xc5/0x140 [ 1242.581636][ T2658] ? __might_fault+0xc5/0x140 [ 1242.581654][ T2658] mtdchar_blkpg_ioctl+0x207/0x250 [ 1242.581668][ T2658] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 1242.581696][ T2658] mtdchar_ioctl+0x1670/0x1fd0 [ 1242.581712][ T2658] ? __pfx_mtdchar_ioctl+0x10/0x10 [ 1242.581728][ T2658] ? lock_acquire+0x1d1/0x380 [ 1242.581740][ T2658] ? mtdchar_unlocked_ioctl+0xa2/0xf0 [ 1242.581758][ T2658] ? rcu_is_watching+0x13/0xc0 [ 1242.581774][ T2658] ? trace_contention_end+0x126/0x160 [ 1242.581790][ T2658] ? mtdchar_unlocked_ioctl+0xa2/0xf0 [ 1242.581806][ T2658] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1242.581819][ T2658] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 1242.581838][ T2658] ? __pfx___mutex_lock+0x10/0x10 [ 1242.581855][ T2658] ? __fget_files+0x34/0x3d0 [ 1242.581881][ T2658] mtdchar_unlocked_ioctl+0xb0/0xf0 [ 1242.581895][ T2658] ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10 [ 1242.581910][ T2658] __x64_sys_ioctl+0x18e/0x210 [ 1242.581925][ T2658] do_syscall_64+0x123/0x790 [ 1242.581943][ T2658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1242.581955][ T2658] RIP: 0033:0x7f4fdf59e559 [ 1242.581965][ T2658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1242.581976][ T2658] RSP: 002b:00007f4fe040d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1242.581988][ T2658] RAX: ffffffffffffffda RBX: 00007f4fdf825fa0 RCX: 00007f4fdf59e559 [ 1242.581996][ T2658] RDX: 0000200000000400 RSI: 0000000000001269 RDI: 0000000000000004 [ 1242.582002][ T2658] RBP: 00007f4fdf6358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1242.582009][ T2658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1242.582016][ T2658] R13: 00007f4fdf826038 R14: 00007f4fdf825fa0 R15: 00007ffcab971618 [ 1242.582033][ T2658] [ 1243.111555][ T2658] kobject: kobject_add_internal failed for 0 (error: -12 parent: mq) [ 1243.213310][ T2293] bridge0: port 1(bridge_slave_0) entered blocking state [ 1243.215866][ T2293] bridge0: port 1(bridge_slave_0) entered disabled state [ 1243.217694][ T2293] bridge_slave_0: entered allmulticast mode [ 1243.219923][ T2293] bridge_slave_0: entered promiscuous mode [ 1243.257010][ T2293] bridge0: port 2(bridge_slave_1) entered blocking state [ 1243.257084][ T2293] bridge0: port 2(bridge_slave_1) entered disabled state [ 1243.257158][ T2293] bridge_slave_1: entered allmulticast mode [ 1243.262455][ T2293] bridge_slave_1: entered promiscuous mode [ 1243.422488][ T2293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1243.436977][ T2293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1243.490066][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1243.490098][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1243.490301][ T1309] aoe: packet could not be sent on lowpan0. consider increasing tx_queue_len [ 1243.562782][ T2293] team0: Port device team_slave_0 added [ 1243.593148][ T2293] team0: Port device team_slave_1 added [ 1243.746156][ T2293] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1243.746169][ T2293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1243.746183][ T2293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1243.791878][ T2293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1243.791890][ T2293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1243.791904][ T2293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1243.962339][ T2293] hsr_slave_0: entered promiscuous mode [ 1243.981523][ T2293] hsr_slave_1: entered promiscuous mode [ 1243.981835][ T2293] debugfs: 'hsr0' already exists in 'hsr' [ 1243.981847][ T2293] Cannot create hsr debugfs directory [ 1244.272549][ T2690] FAULT_INJECTION: forcing a failure. [ 1244.272549][ T2690] name failslab, interval 1, probability 0, space 0, times 0 [ 1244.272572][ T2690] CPU: 0 UID: 0 PID: 2690 Comm: syz.6.11628 Tainted: G L syzkaller #0 PREEMPT(full) [ 1244.272589][ T2690] Tainted: [L]=SOFTLOCKUP [ 1244.272593][ T2690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1244.272601][ T2690] Call Trace: [ 1244.272605][ T2690] [ 1244.272611][ T2690] dump_stack_lvl+0x100/0x190 [ 1244.272634][ T2690] should_fail_ex.cold+0x5/0xa [ 1244.272651][ T2690] should_failslab+0xc2/0x120 [ 1244.272671][ T2690] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 1244.272687][ T2690] ? trace_kmem_cache_alloc+0xdd/0x100 [ 1244.272704][ T2690] ? cond_bools_copy+0x45/0xf0 [ 1244.272719][ T2690] kmemdup_noprof+0x29/0x60 [ 1244.272733][ T2690] cond_bools_copy+0x45/0xf0 [ 1244.272747][ T2690] hashtab_duplicate+0x24a/0x5c0 [ 1244.272764][ T2690] ? __pfx_cond_bools_copy+0x10/0x10 [ 1244.272779][ T2690] ? __pfx_cond_bools_destroy+0x10/0x10 [ 1244.272793][ T2690] cond_policydb_dup+0x155/0x750 [ 1244.272807][ T2690] ? security_set_bools+0x115/0x6c0 [ 1244.272820][ T2690] ? __asan_memcpy+0x3c/0x60 [ 1244.272835][ T2690] security_set_bools+0x13f/0x6c0 [ 1244.272852][ T2690] sel_commit_bools_write+0x36d/0x420 [ 1244.272866][ T2690] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 1244.272885][ T2690] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 1244.272898][ T2690] vfs_writev+0x5ed/0xdd0 [ 1244.272915][ T2690] ? __pfx_vfs_writev+0x10/0x10 [ 1244.272932][ T2690] ? lock_acquire+0x1d1/0x380 [ 1244.272944][ T2690] ? __fget_files+0x34/0x3d0 [ 1244.272966][ T2690] ? __fget_files+0x21f/0x3d0 [ 1244.272986][ T2690] ? do_writev+0x13e/0x340 [ 1244.272997][ T2690] do_writev+0x13e/0x340 [ 1244.273010][ T2690] ? __pfx_do_writev+0x10/0x10 [ 1244.273027][ T2690] do_syscall_64+0x123/0x790 [ 1244.273046][ T2690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1244.273057][ T2690] RIP: 0033:0x7f516ed9e559 [ 1244.273067][ T2690] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1244.273078][ T2690] RSP: 002b:00007f516fbee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1244.273090][ T2690] RAX: ffffffffffffffda RBX: 00007f516f025fa0 RCX: 00007f516ed9e559 [ 1244.273097][ T2690] RDX: 0000000000000001 RSI: 0000200000003600 RDI: 0000000000000004 [ 1244.273104][ T2690] RBP: 00007f516ee358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1244.273112][ T2690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1244.273120][ T2690] R13: 00007f516f026038 R14: 00007f516f025fa0 R15: 00007ffebb548328 [ 1244.273136][ T2690] [ 1244.997914][ T2708] Set syz1 is full, maxelem 65536 reached [ 1245.402536][T15614] kernel read not supported for file /dsp (pid: 15614 comm: kworker/0:8) [ 1245.619562][ T2726] netlink: 'syz.0.11638': attribute type 3 has an invalid length. [ 1245.619576][ T2726] netlink: 666 bytes leftover after parsing attributes in process `syz.0.11638'. [ 1245.744487][ T31] audit: type=1400 audit(1792131421.770:8122): avc: denied { write } for pid=2709 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1245.859170][ T2293] netdevsim netdevsim4 eth8 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1245.936128][ T2740] FAULT_INJECTION: forcing a failure. [ 1245.936128][ T2740] name failslab, interval 1, probability 0, space 0, times 0 [ 1245.936151][ T2740] CPU: 0 UID: 0 PID: 2740 Comm: syz.6.11640 Tainted: G L syzkaller #0 PREEMPT(full) [ 1245.936167][ T2740] Tainted: [L]=SOFTLOCKUP [ 1245.936171][ T2740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1245.936179][ T2740] Call Trace: [ 1245.936184][ T2740] [ 1245.936189][ T2740] dump_stack_lvl+0x100/0x190 [ 1245.936211][ T2740] should_fail_ex.cold+0x5/0xa [ 1245.936227][ T2740] should_failslab+0xc2/0x120 [ 1245.936245][ T2740] __kmalloc_cache_noprof+0x91/0x6d0 [ 1245.936275][ T2740] ? ll_open+0x4f/0x3c0 [ 1245.936294][ T2740] ll_open+0x4f/0x3c0 [ 1245.936309][ T2740] hci_uart_tty_ioctl+0x681/0xcb0 [ 1245.936327][ T2740] ? __pfx_hci_uart_tty_ioctl+0x10/0x10 [ 1245.936344][ T2740] tty_ioctl+0x12f0/0x1800 [ 1245.936364][ T2740] ? __pfx_tty_ioctl+0x10/0x10 [ 1245.936380][ T2740] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 1245.936401][ T2740] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1245.936422][ T2740] ? __fget_files+0x34/0x3d0 [ 1245.936446][ T2740] ? selinux_file_ioctl+0x13b/0x290 [ 1245.936461][ T2740] ? selinux_file_ioctl+0xb6/0x290 [ 1245.936478][ T2740] ? __pfx_tty_ioctl+0x10/0x10 [ 1245.936495][ T2740] __x64_sys_ioctl+0x18e/0x210 [ 1245.936511][ T2740] do_syscall_64+0x123/0x790 [ 1245.936528][ T2740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1245.936541][ T2740] RIP: 0033:0x7f516ed9e559 [ 1245.936551][ T2740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1245.936562][ T2740] RSP: 002b:00007f516fbee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1245.936573][ T2740] RAX: ffffffffffffffda RBX: 00007f516f025fa0 RCX: 00007f516ed9e559 [ 1245.936581][ T2740] RDX: 0000000000000004 RSI: 00000000400455c8 RDI: 0000000000000003 [ 1245.936588][ T2740] RBP: 00007f516ee358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1245.936595][ T2740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1245.936602][ T2740] R13: 00007f516f026038 R14: 00007f516f025fa0 R15: 00007ffebb548328 [ 1245.936618][ T2740] [ 1246.404400][ T31] audit: type=1400 audit(1792131422.430:8123): avc: denied { write } for pid=2743 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1246.586543][ T2754] input: syz1 as /devices/virtual/input/input138 [ 1247.286948][ T2293] netdevsim netdevsim4 eth7 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.641865][ T2797] FAULT_INJECTION: forcing a failure. [ 1247.641865][ T2797] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1247.641888][ T2797] CPU: 0 UID: 0 PID: 2797 Comm: syz.0.11652 Tainted: G L syzkaller #0 PREEMPT(full) [ 1247.641905][ T2797] Tainted: [L]=SOFTLOCKUP [ 1247.641909][ T2797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1247.641917][ T2797] Call Trace: [ 1247.641921][ T2797] [ 1247.641926][ T2797] dump_stack_lvl+0x100/0x190 [ 1247.641947][ T2797] should_fail_ex.cold+0x5/0xa [ 1247.641963][ T2797] get_futex_key+0x1d0/0x14f0 [ 1247.641981][ T2797] ? __pfx_get_futex_key+0x10/0x10 [ 1247.641998][ T2797] ? wakeup_preempt_fair+0x5c3/0xdc0 [ 1247.642015][ T2797] ? tracing_record_taskinfo_sched_switch+0xac/0x560 [ 1247.642033][ T2797] futex_wait_setup+0x91/0x540 [ 1247.642049][ T2797] __futex_wait+0x19f/0x300 [ 1247.642062][ T2797] ? __pfx___futex_wait+0x10/0x10 [ 1247.642073][ T2797] ? __pfx_try_to_wake_up+0x10/0x10 [ 1247.642086][ T2797] ? futex_hash+0x311/0x400 [ 1247.642102][ T2797] ? __pfx_futex_wake_mark+0x10/0x10 [ 1247.642116][ T2797] ? find_held_lock+0x2b/0x80 [ 1247.642133][ T2797] ? futex_wake+0x4ea/0x5e0 [ 1247.642148][ T2797] futex_wait+0xe6/0x370 [ 1247.642160][ T2797] ? __pfx_futex_wait+0x10/0x10 [ 1247.642179][ T2797] do_futex+0x265/0x440 [ 1247.642196][ T2797] ? __pfx_do_futex+0x10/0x10 [ 1247.642213][ T2797] ? kfree+0x22b/0x6d0 [ 1247.642223][ T2797] ? __pfx_udf_parse_param+0x10/0x10 [ 1247.642242][ T2797] __x64_sys_futex+0x34f/0x4d0 [ 1247.642259][ T2797] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 1247.642274][ T2797] ? __pfx___x64_sys_futex+0x10/0x10 [ 1247.642305][ T2797] do_syscall_64+0x123/0x790 [ 1247.642324][ T2797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1247.642337][ T2797] RIP: 0033:0x7f2da2f9e559 [ 1247.642349][ T2797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1247.642361][ T2797] RSP: 002b:00007f2da3e320e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1247.642373][ T2797] RAX: ffffffffffffffda RBX: 00007f2da3225fa8 RCX: 00007f2da2f9e559 [ 1247.642380][ T2797] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2da3225fa8 [ 1247.642387][ T2797] RBP: 00007f2da3225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1247.642395][ T2797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1247.642403][ T2797] R13: 00007f2da3226038 R14: 00007ffde09a48b0 R15: 00007ffde09a4998 [ 1247.642418][ T2797] [ 1248.099919][ T2293] netdevsim netdevsim4 eth6 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1248.140224][ T31] audit: type=1400 audit(1792131425.171:8124): avc: denied { write } for pid=2758 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1248.483104][ T31] audit: type=1400 audit(1792131425.511:8125): avc: denied { write } for pid=2813 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1248.533871][ T2293] netdevsim netdevsim4 eth5 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1249.463465][ T2865] FAULT_INJECTION: forcing a failure. [ 1249.463465][ T2865] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1249.463492][ T2865] CPU: 0 UID: 0 PID: 2865 Comm: syz.6.11664 Tainted: G L syzkaller #0 PREEMPT(full) [ 1249.463508][ T2865] Tainted: [L]=SOFTLOCKUP [ 1249.463513][ T2865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1249.463520][ T2865] Call Trace: [ 1249.463524][ T2865] [ 1249.463529][ T2865] dump_stack_lvl+0x100/0x190 [ 1249.463551][ T2865] should_fail_ex.cold+0x5/0xa [ 1249.463568][ T2865] _copy_from_user+0x2e/0xd0 [ 1249.463585][ T2865] copy_mount_options+0x76/0x190 [ 1249.463601][ T2865] __x64_sys_mount+0x1ab/0x310 [ 1249.463613][ T2865] ? __pfx___x64_sys_mount+0x10/0x10 [ 1249.463629][ T2865] do_syscall_64+0x123/0x790 [ 1249.463647][ T2865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1249.463659][ T2865] RIP: 0033:0x7f516ed9e559 [ 1249.463669][ T2865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1249.463680][ T2865] RSP: 002b:00007f516fbee028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1249.463691][ T2865] RAX: ffffffffffffffda RBX: 00007f516f025fa0 RCX: 00007f516ed9e559 [ 1249.463698][ T2865] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1249.463705][ T2865] RBP: 00007f516ee358b0 R08: 0000200000000400 R09: 0000000000000000 [ 1249.463712][ T2865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1249.463718][ T2865] R13: 00007f516f026038 R14: 00007f516f025fa0 R15: 00007ffebb548328 [ 1249.463734][ T2865] [ 1249.692939][ T31] audit: type=1400 audit(1792131426.721:8126): avc: denied { write } for pid=2829 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1249.963824][ T31] audit: type=1400 audit(1792131426.991:8127): avc: denied { write } for pid=2873 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1250.359318][ T2293] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1250.372641][ T2293] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1250.373205][ T2293] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1250.396414][ T2293] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1250.396953][ T2293] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1250.400098][ T2293] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1250.402541][ T2293] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1250.442920][ T2293] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1250.640218][ T2293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1250.664873][ T2293] 8021q: adding VLAN 0 to HW filter on device team0 [ 1250.679959][ T1051] bridge0: port 1(bridge_slave_0) entered blocking state [ 1250.680006][ T1051] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1250.704372][ T1944] bridge0: port 2(bridge_slave_1) entered blocking state [ 1250.704418][ T1944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1250.792205][ T31] audit: type=1400 audit(1792131427.821:8128): avc: denied { write } for pid=2886 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1250.910037][ T31] audit: type=1400 audit(1792131427.941:8129): avc: denied { write } for pid=2905 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1251.266204][ T2293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1251.312628][ T31] audit: type=1400 audit(1792131428.341:8130): avc: denied { write } for pid=2909 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1251.433010][ T31] audit: type=1400 audit(1792131428.461:8131): avc: denied { write } for pid=2930 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1251.598145][ T2293] veth0_vlan: entered promiscuous mode [ 1251.604764][ T2293] veth1_vlan: entered promiscuous mode [ 1251.649556][ T2293] veth0_macvtap: entered promiscuous mode [ 1251.662249][ T2293] veth1_macvtap: entered promiscuous mode [ 1251.685695][ T2293] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1251.690465][ T2293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1251.776570][ T1051] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.776714][ T1051] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.776909][ T1051] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.919854][T13872] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1251.919870][T13872] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1251.943483][ T1051] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1252.030925][ T1051] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1252.030939][ T1051] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1252.103419][ T31] audit: type=1400 audit(1792131429.131:8132): avc: denied { write } for pid=2935 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1252.251412][ T31] audit: type=1400 audit(1792131429.281:8133): avc: denied { write } for pid=2946 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1252.856038][ T2971] FAULT_INJECTION: forcing a failure. [ 1252.856038][ T2971] name failslab, interval 1, probability 0, space 0, times 0 [ 1252.856062][ T2971] CPU: 0 UID: 0 PID: 2971 Comm: syz.6.11676 Tainted: G L syzkaller #0 PREEMPT(full) [ 1252.856078][ T2971] Tainted: [L]=SOFTLOCKUP [ 1252.856082][ T2971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1252.856089][ T2971] Call Trace: [ 1252.856093][ T2971] [ 1252.856099][ T2971] dump_stack_lvl+0x100/0x190 [ 1252.856120][ T2971] should_fail_ex.cold+0x5/0xa [ 1252.856152][ T2971] should_failslab+0xc2/0x120 [ 1252.856170][ T2971] __kmalloc_noprof+0xfc/0x840 [ 1252.856184][ T2971] ? trace_kmalloc+0xeb/0x110 [ 1252.856203][ T2971] ? lsm_blob_alloc+0x68/0x90 [ 1252.856218][ T2971] lsm_blob_alloc+0x68/0x90 [ 1252.856231][ T2971] security_sk_alloc+0x2d/0x290 [ 1252.856247][ T2971] sk_prot_alloc+0x12a/0x2a0 [ 1252.856263][ T2971] sk_alloc+0x36/0xe80 [ 1252.856281][ T2971] bpf_prog_test_run_skb+0x4d2/0x3530 [ 1252.856300][ T2971] ? lock_acquire+0x1d1/0x380 [ 1252.856313][ T2971] ? __fget_files+0x34/0x3d0 [ 1252.856330][ T2971] ? find_held_lock+0x2b/0x80 [ 1252.856348][ T2971] ? __fget_files+0x161/0x3d0 [ 1252.856367][ T2971] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1252.856385][ T2971] ? fput+0x7c/0x100 [ 1252.856403][ T2971] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1252.856420][ T2971] __sys_bpf+0x2265/0x4a30 [ 1252.856436][ T2971] ? __pfx___sys_bpf+0x10/0x10 [ 1252.856447][ T2971] ? find_held_lock+0x2b/0x80 [ 1252.856463][ T2971] ? futex_wake+0x4ea/0x5e0 [ 1252.856484][ T2971] ? rcu_read_lock_any_held+0x6a/0x90 [ 1252.856495][ T2971] ? find_held_lock+0x2b/0x80 [ 1252.856511][ T2971] ? ksys_write+0x190/0x250 [ 1252.856524][ T2971] ? ksys_write+0x190/0x250 [ 1252.856545][ T2971] ? __x64_sys_futex+0x34f/0x4d0 [ 1252.856561][ T2971] ? __x64_sys_futex+0x358/0x4d0 [ 1252.856579][ T2971] ? xfd_validate_state+0x129/0x190 [ 1252.856593][ T2971] ? __x64_sys_bpf+0xce/0x140 [ 1252.856605][ T2971] __x64_sys_bpf+0xce/0x140 [ 1252.856618][ T2971] ? do_syscall_64+0xae/0x790 [ 1252.856635][ T2971] do_syscall_64+0x123/0x790 [ 1252.856652][ T2971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1252.856663][ T2971] RIP: 0033:0x7f516ed9e559 [ 1252.856673][ T2971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1252.856685][ T2971] RSP: 002b:00007f516fbee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1252.856697][ T2971] RAX: ffffffffffffffda RBX: 00007f516f025fa0 RCX: 00007f516ed9e559 [ 1252.856705][ T2971] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 1252.856712][ T2971] RBP: 00007f516ee358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1252.856720][ T2971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1252.856727][ T2971] R13: 00007f516f026038 R14: 00007f516f025fa0 R15: 00007ffebb548328 [ 1252.856742][ T2971] [ 1253.045686][ T31] audit: type=1400 audit(1792131430.081:8134): avc: denied { name_bind } for pid=2972 comm="syz.2.11677" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 1253.452011][ T31] audit: type=1400 audit(1792131430.481:8135): avc: denied { bind } for pid=2983 comm="syz.6.11690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1253.832251][ T31] audit: type=1400 audit(1792131430.861:8136): avc: denied { write } for pid=2962 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1254.026588][ T31] audit: type=1400 audit(1792131431.061:8137): avc: denied { watch_sb } for pid=3003 comm="syz.5.11686" path="/1821" dev="tmpfs" ino=9587 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1256.108810][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 1256.108824][ T31] audit: type=1400 audit(1792131433.141:8141): avc: denied { write } for pid=3058 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1256.231195][ T31] audit: type=1400 audit(1792131433.261:8142): avc: denied { write } for pid=3069 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1256.468462][ T31] audit: type=1400 audit(1792131433.501:8143): avc: denied { write } for pid=3071 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1256.536410][ T31] audit: type=1400 audit(1792131433.571:8144): avc: denied { write } for pid=3082 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1256.739184][ T31] audit: type=1400 audit(1792131433.771:8145): avc: denied { write } for pid=3084 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1256.812431][ T31] audit: type=1400 audit(1792131433.841:8146): avc: denied { write } for pid=3095 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1257.029715][ T31] audit: type=1400 audit(1792131434.061:8147): avc: denied { write } for pid=3098 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1257.102002][ T31] audit: type=1400 audit(1792131434.131:8148): avc: denied { write } for pid=3109 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1257.310579][ T31] audit: type=1400 audit(1792131434.341:8149): avc: denied { write } for pid=3111 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1257.381462][ T31] audit: type=1400 audit(1792131434.411:8150): avc: denied { write } for pid=3122 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1257.649278][ T3138] netlink: 'syz.0.11703': attribute type 1 has an invalid length. [ 1257.716867][ T3138] bond2: entered promiscuous mode [ 1257.717030][ T3138] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1257.863546][ T3138] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1257.863710][ T3138] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 1257.863720][ T3138] bond2: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 1257.904062][ T3138] bond2: (slave gre1): making interface the new active one [ 1257.904078][ T3138] gre1: entered promiscuous mode [ 1257.921894][ T3138] bond2: (slave gre1): Enslaving as an active interface with an up link [ 1258.360789][ T3159] FAULT_INJECTION: forcing a failure. [ 1258.360789][ T3159] name failslab, interval 1, probability 0, space 0, times 0 [ 1258.360813][ T3159] CPU: 0 UID: 0 PID: 3159 Comm: syz.0.11708 Tainted: G L syzkaller #0 PREEMPT(full) [ 1258.360831][ T3159] Tainted: [L]=SOFTLOCKUP [ 1258.360836][ T3159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1258.360843][ T3159] Call Trace: [ 1258.360848][ T3159] [ 1258.360854][ T3159] dump_stack_lvl+0x100/0x190 [ 1258.360874][ T3159] should_fail_ex.cold+0x5/0xa [ 1258.360890][ T3159] should_failslab+0xc2/0x120 [ 1258.360908][ T3159] kmem_cache_alloc_bulk_noprof+0x77/0x890 [ 1258.360927][ T3159] ? __pfx___cant_migrate+0x10/0x10 [ 1258.360945][ T3159] xdp_test_run_batch.constprop.0+0x1561/0x1ca0 [ 1258.360968][ T3159] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 1258.360983][ T3159] ? lock_acquire+0x1d1/0x380 [ 1258.360999][ T3159] ? find_held_lock+0x2b/0x80 [ 1258.361021][ T3159] ? ktime_get+0x23e/0x320 [ 1258.361033][ T3159] ? ktime_get+0x1a4/0x320 [ 1258.361049][ T3159] bpf_test_run_xdp_live+0x367/0x760 [ 1258.361066][ T3159] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 1258.361085][ T3159] ? lock_acquire+0x1d1/0x380 [ 1258.361103][ T3159] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1258.361118][ T3159] ? find_held_lock+0x2b/0x80 [ 1258.361139][ T3159] ? bpf_dispatcher_change_prog+0x6c3/0xa50 [ 1258.361160][ T3159] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 1258.361176][ T3159] ? bpf_dispatcher_xdp+0x800/0x1000 [ 1258.361188][ T3159] ? bpf_dispatcher_xdp+0x800/0x1000 [ 1258.361201][ T3159] ? bpf_dispatcher_change_prog+0x2de/0xa50 [ 1258.361217][ T3159] bpf_prog_test_run_xdp+0xd86/0x1670 [ 1258.361240][ T3159] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1258.361262][ T3159] ? fput+0x7c/0x100 [ 1258.361279][ T3159] ? __bpf_prog_get+0x97/0x290 [ 1258.361296][ T3159] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1258.361312][ T3159] __sys_bpf+0x2265/0x4a30 [ 1258.361328][ T3159] ? __pfx___sys_bpf+0x10/0x10 [ 1258.361339][ T3159] ? find_held_lock+0x2b/0x80 [ 1258.361355][ T3159] ? futex_wake+0x4ea/0x5e0 [ 1258.361377][ T3159] ? rcu_read_lock_any_held+0x6a/0x90 [ 1258.361387][ T3159] ? find_held_lock+0x2b/0x80 [ 1258.361403][ T3159] ? ksys_write+0x190/0x250 [ 1258.361415][ T3159] ? ksys_write+0x190/0x250 [ 1258.361437][ T3159] ? __x64_sys_futex+0x34f/0x4d0 [ 1258.361453][ T3159] ? __x64_sys_futex+0x358/0x4d0 [ 1258.361471][ T3159] ? xfd_validate_state+0x129/0x190 [ 1258.361486][ T3159] ? __x64_sys_bpf+0xce/0x140 [ 1258.361498][ T3159] __x64_sys_bpf+0xce/0x140 [ 1258.361511][ T3159] ? do_syscall_64+0xae/0x790 [ 1258.361528][ T3159] do_syscall_64+0x123/0x790 [ 1258.361547][ T3159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1258.361558][ T3159] RIP: 0033:0x7f2da2f9e559 [ 1258.361568][ T3159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1258.361579][ T3159] RSP: 002b:00007f2da3e32028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1258.361590][ T3159] RAX: ffffffffffffffda RBX: 00007f2da3225fa0 RCX: 00007f2da2f9e559 [ 1258.361597][ T3159] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1258.361604][ T3159] RBP: 00007f2da30358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1258.361611][ T3159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1258.361618][ T3159] R13: 00007f2da3226038 R14: 00007f2da3225fa0 R15: 00007ffde09a4998 [ 1258.361632][ T3159] [ 1259.970664][ T3207] overlayfs: failed to clone upperpath [ 1260.645350][ T3237] netlink: 'syz.4.11723': attribute type 1 has an invalid length. [ 1260.693055][ T3240] Invalid auth_tok structure returned from key query [ 1260.693067][ T3240] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 1260.693073][ T3240] One or more global auth toks could not properly register; rc = [-22] [ 1260.693092][ T3240] Error validating options; rc = [-22] [ 1261.414374][ T3252] input: syz1 as /devices/virtual/input/input139 [ 1262.032211][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 1262.032224][ T31] audit: type=1400 audit(1792131439.061:8155): avc: denied { write } for pid=3246 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1262.458810][ T31] audit: type=1400 audit(1792131439.491:8156): avc: denied { write } for pid=3282 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1262.700387][ T5607] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 1262.700406][ T5607] CPU: 0 UID: 0 PID: 5607 Comm: kworker/u9:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 1262.700424][ T5607] Tainted: [L]=SOFTLOCKUP [ 1262.700428][ T5607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1262.700438][ T5607] Workqueue: hci2 hci_rx_work [ 1262.700454][ T5607] Call Trace: [ 1262.700458][ T5607] [ 1262.700463][ T5607] dump_stack_lvl+0x100/0x190 [ 1262.700484][ T5607] sysfs_warn_dup.cold+0x1c/0x28 [ 1262.700502][ T5607] sysfs_create_dir_ns+0x24b/0x2b0 [ 1262.700514][ T5607] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1262.700524][ T5607] ? find_held_lock+0x2b/0x80 [ 1262.700541][ T5607] ? kobject_add_internal+0x25f/0x930 [ 1262.700555][ T5607] ? kobject_add_internal+0x25f/0x930 [ 1262.700570][ T5607] ? do_raw_spin_unlock+0x145/0x1e0 [ 1262.700587][ T5607] kobject_add_internal+0x2c8/0x930 [ 1262.700603][ T5607] kobject_add+0x16a/0x1e0 [ 1262.700615][ T5607] ? __pfx_kobject_add+0x10/0x10 [ 1262.700627][ T5607] ? class_to_subsys+0x10f/0x150 [ 1262.700643][ T5607] ? kobject_put+0xb9/0x640 [ 1262.700652][ T5607] ? _raw_spin_unlock+0x28/0x50 [ 1262.700670][ T5607] device_add+0x294/0x1970 [ 1262.700682][ T5607] ? __pfx_dev_set_name+0x10/0x10 [ 1262.700697][ T5607] ? __pfx_device_add+0x10/0x10 [ 1262.700709][ T5607] ? mgmt_send_event_skb+0x2fb/0x460 [ 1262.700727][ T5607] hci_conn_add_sysfs+0x1a3/0x260 [ 1262.700743][ T5607] le_conn_complete_evt+0x122f/0x2130 [ 1262.700760][ T5607] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1262.700773][ T5607] ? hci_event_packet+0x186/0xcd0 [ 1262.700785][ T5607] ? hci_event_packet+0x186/0xcd0 [ 1262.700801][ T5607] hci_le_enh_conn_complete_evt+0x23d/0x3b0 [ 1262.700815][ T5607] ? skb_pull_data+0x15f/0x1e0 [ 1262.700832][ T5607] hci_le_meta_evt+0x34a/0x5f0 [ 1262.700845][ T5607] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 1262.700861][ T5607] hci_event_packet+0x51c/0xcd0 [ 1262.700874][ T5607] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1262.700888][ T5607] ? __pfx_hci_event_packet+0x10/0x10 [ 1262.700903][ T5607] ? lockdep_hardirqs_on+0x7d/0x110 [ 1262.700922][ T5607] hci_rx_work+0x451/0xfc0 [ 1262.700937][ T5607] process_one_work+0xac7/0x1b10 [ 1262.700961][ T5607] ? __pfx_process_one_work+0x10/0x10 [ 1262.700979][ T5607] ? lock_acquire+0x1d1/0x380 [ 1262.700996][ T5607] ? __pfx_hci_rx_work+0x10/0x10 [ 1262.701009][ T5607] worker_thread+0x5ef/0xe50 [ 1262.701025][ T5607] ? kthread+0x13a/0x450 [ 1262.701044][ T5607] ? __pfx_worker_thread+0x10/0x10 [ 1262.701053][ T5607] kthread+0x373/0x450 [ 1262.701068][ T5607] ? __pfx_kthread+0x10/0x10 [ 1262.701085][ T5607] ret_from_fork+0x730/0xd60 [ 1262.701107][ T5607] ? __pfx_ret_from_fork+0x10/0x10 [ 1262.701121][ T5607] ? __switch_to+0x800/0x10f0 [ 1262.701138][ T5607] ? __pfx_kthread+0x10/0x10 [ 1262.701157][ T5607] ret_from_fork_asm+0x1a/0x30 [ 1262.701179][ T5607] [ 1262.703325][ T5607] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1262.703351][ T5607] Bluetooth: hci2: failed to register connection device [ 1263.672515][ T3312] fuse: fd is not a fuse device [ 1263.866126][ T3321] netlink: 'syz.4.11743': attribute type 1 has an invalid length. [ 1264.063560][ T31] audit: type=1400 audit(1792131441.091:8157): avc: denied { write } for pid=3293 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1264.498817][ T31] audit: type=1400 audit(1792131441.531:8158): avc: denied { write } for pid=3330 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1264.909446][ T3341] FAULT_INJECTION: forcing a failure. [ 1264.909446][ T3341] name failslab, interval 1, probability 0, space 0, times 0 [ 1264.909471][ T3341] CPU: 0 UID: 0 PID: 3341 Comm: syz.6.11747 Tainted: G L syzkaller #0 PREEMPT(full) [ 1264.909489][ T3341] Tainted: [L]=SOFTLOCKUP [ 1264.909494][ T3341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1264.909501][ T3341] Call Trace: [ 1264.909506][ T3341] [ 1264.909512][ T3341] dump_stack_lvl+0x100/0x190 [ 1264.909534][ T3341] should_fail_ex.cold+0x5/0xa [ 1264.909551][ T3341] should_failslab+0xc2/0x120 [ 1264.909570][ T3341] __kmalloc_noprof+0xfc/0x840 [ 1264.909585][ T3341] ? nsim_fib_event_nb+0x661/0xe50 [ 1264.909603][ T3341] nsim_fib_event_nb+0x661/0xe50 [ 1264.909618][ T3341] ? lock_acquire+0x1d1/0x380 [ 1264.909631][ T3341] ? atomic_notifier_call_chain+0x2f/0x1c0 [ 1264.909650][ T3341] notifier_call_chain+0x99/0x3f0 [ 1264.909668][ T3341] atomic_notifier_call_chain+0x71/0x1c0 [ 1264.909686][ T3341] call_fib_notifiers+0x33/0x70 [ 1264.909701][ T3341] fib6_add_rt2node+0x14e3/0x3df0 [ 1264.909718][ T3341] ? fib6_nh_init+0x82a/0x1d80 [ 1264.909734][ T3341] ? __pfx_fib6_add_rt2node+0x10/0x10 [ 1264.909753][ T3341] ? fib6_add+0x60e/0x1eb0 [ 1264.909763][ T3341] fib6_add+0x60e/0x1eb0 [ 1264.909776][ T3341] ? do_raw_spin_lock+0x128/0x260 [ 1264.909792][ T3341] ? __pfx_fib6_add+0x10/0x10 [ 1264.909802][ T3341] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1264.909817][ T3341] ? __asan_memcpy+0x3c/0x60 [ 1264.909833][ T3341] ip6_route_add+0xf9/0x1d0 [ 1264.909849][ T3341] rt6_add_route_info+0x2f2/0x4b0 [ 1264.909864][ T3341] ? __pfx_rt6_add_route_info+0x10/0x10 [ 1264.909887][ T3341] ? __pfx_rt6_get_dflt_router+0x10/0x10 [ 1264.909902][ T3341] ? do_raw_spin_lock+0x128/0x260 [ 1264.909917][ T3341] ? find_held_lock+0x2b/0x80 [ 1264.909937][ T3341] rt6_route_rcv+0x87b/0xf60 [ 1264.909950][ T3341] ? lock_acquire+0x1d1/0x380 [ 1264.909965][ T3341] ? __pfx_rt6_route_rcv+0x10/0x10 [ 1264.909983][ T3341] ? __ipv6_chk_addr_and_flags+0x2f4/0x750 [ 1264.910004][ T3341] ? ndisc_router_discovery+0x18fe/0x3c50 [ 1264.910019][ T3341] ndisc_router_discovery+0x18fe/0x3c50 [ 1264.910039][ T3341] ? __pfx_ndisc_router_discovery+0x10/0x10 [ 1264.910053][ T3341] ? __local_bh_enable_ip+0xa5/0x120 [ 1264.910066][ T3341] ? lockdep_hardirqs_on+0x7d/0x110 [ 1264.910082][ T3341] ? ip6t_do_table+0xbed/0x1c90 [ 1264.910101][ T3341] ? __local_bh_enable_ip+0xa5/0x120 [ 1264.910116][ T3341] ? ip6t_do_table+0xc1d/0x1c90 [ 1264.910136][ T3341] ? skb_checksum+0x7f4/0x950 [ 1264.910158][ T3341] ndisc_rcv+0x507/0x7a0 [ 1264.910174][ T3341] icmpv6_rcv+0x15ac/0x1ae0 [ 1264.910190][ T3341] ? __pfx_icmpv6_rcv+0x10/0x10 [ 1264.910203][ T3341] ip6_protocol_deliver_rcu+0x1021/0x15b0 [ 1264.910227][ T3341] ip6_input_finish+0x1e4/0x4a0 [ 1264.910245][ T3341] ip6_input+0x105/0x2f0 [ 1264.910259][ T3341] ip6_mc_input+0x513/0x1050 [ 1264.910274][ T3341] ? __pfx_ip6_mc_input+0x10/0x10 [ 1264.910289][ T3341] ? ip6_rcv_finish_core.isra.0+0x113/0x1260 [ 1264.910306][ T3341] ? __pfx_ip6_mc_input+0x10/0x10 [ 1264.910321][ T3341] ipv6_rcv+0x34c/0x3d0 [ 1264.910335][ T3341] ? __pfx_ipv6_rcv+0x10/0x10 [ 1264.910347][ T3341] __netif_receive_skb_one_core+0x12d/0x1e0 [ 1264.910365][ T3341] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 1264.910382][ T3341] ? lock_acquire+0x1d1/0x380 [ 1264.910399][ T3341] __netif_receive_skb+0x1f/0x120 [ 1264.910416][ T3341] netif_receive_skb+0x139/0x7d0 [ 1264.910433][ T3341] ? __pfx_netif_receive_skb+0x10/0x10 [ 1264.910455][ T3341] tun_rx_batched.isra.0+0x3f6/0x750 [ 1264.910474][ T3341] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 1264.910494][ T3341] ? tun_get_user+0x1dc9/0x3da0 [ 1264.910514][ T3341] tun_get_user+0x1f05/0x3da0 [ 1264.910536][ T3341] ? __lock_acquire+0x5c0/0x1f40 [ 1264.910549][ T3341] ? __pfx_tun_get_user+0x10/0x10 [ 1264.910568][ T3341] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1264.910587][ T3341] ? find_held_lock+0x2b/0x80 [ 1264.910603][ T3341] ? tun_get+0x191/0x370 [ 1264.910619][ T3341] ? tun_get+0x191/0x370 [ 1264.910638][ T3341] tun_chr_write_iter+0xdc/0x200 [ 1264.910657][ T3341] vfs_write+0x6af/0x1050 [ 1264.910672][ T3341] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1264.910692][ T3341] ? __pfx_vfs_write+0x10/0x10 [ 1264.910705][ T3341] ? find_held_lock+0x2b/0x80 [ 1264.910732][ T3341] ksys_write+0x12a/0x250 [ 1264.910745][ T3341] ? __pfx_ksys_write+0x10/0x10 [ 1264.910764][ T3341] do_syscall_64+0x123/0x790 [ 1264.910781][ T3341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1264.910794][ T3341] RIP: 0033:0x7f516ed5ed8e [ 1264.910804][ T3341] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1264.910816][ T3341] RSP: 002b:00007f516fbedfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1264.910828][ T3341] RAX: ffffffffffffffda RBX: 00007f516fbee6c0 RCX: 00007f516ed5ed8e [ 1264.910836][ T3341] RDX: 00000000000003b6 RSI: 00002000000006c0 RDI: 00000000000000c8 [ 1264.910844][ T3341] RBP: 00007f516ee358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1264.910851][ T3341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1264.910858][ T3341] R13: 00007f516f026038 R14: 00007f516f025fa0 R15: 00007ffebb548328 [ 1264.910876][ T3341] [ 1266.040232][T31454] Bluetooth: hci4: command 0x0406 tx timeout [ 1266.460732][ T3366] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1266.702018][ T3372] FAULT_INJECTION: forcing a failure. [ 1266.702018][ T3372] name failslab, interval 1, probability 0, space 0, times 0 [ 1266.702040][ T3372] CPU: 0 UID: 0 PID: 3372 Comm: syz.6.11756 Tainted: G L syzkaller #0 PREEMPT(full) [ 1266.702056][ T3372] Tainted: [L]=SOFTLOCKUP [ 1266.702067][ T3372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1266.702075][ T3372] Call Trace: [ 1266.702079][ T3372] [ 1266.702085][ T3372] dump_stack_lvl+0x100/0x190 [ 1266.702107][ T3372] should_fail_ex.cold+0x5/0xa [ 1266.702125][ T3372] should_failslab+0xc2/0x120 [ 1266.702142][ T3372] __kmalloc_cache_noprof+0x91/0x6d0 [ 1266.702158][ T3372] ? allocate_partition+0x190/0x2a0 [ 1266.702176][ T3372] allocate_partition+0x190/0x2a0 [ 1266.702190][ T3372] ? cred_has_capability.isra.0+0x186/0x300 [ 1266.702212][ T3372] mtd_add_partition+0x230/0x6a0 [ 1266.702227][ T3372] ? __pfx_mtd_add_partition+0x10/0x10 [ 1266.702242][ T3372] ? __might_fault+0xc5/0x140 [ 1266.702253][ T3372] ? __might_fault+0xc5/0x140 [ 1266.702272][ T3372] mtdchar_blkpg_ioctl+0x207/0x250 [ 1266.702287][ T3372] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 1266.702315][ T3372] mtdchar_ioctl+0x1670/0x1fd0 [ 1266.702332][ T3372] ? __pfx_mtdchar_ioctl+0x10/0x10 [ 1266.702348][ T3372] ? lock_acquire+0x1d1/0x380 [ 1266.702362][ T3372] ? mtdchar_unlocked_ioctl+0xa2/0xf0 [ 1266.702380][ T3372] ? rcu_is_watching+0x13/0xc0 [ 1266.702396][ T3372] ? trace_contention_end+0x126/0x160 [ 1266.702412][ T3372] ? mtdchar_unlocked_ioctl+0xa2/0xf0 [ 1266.702427][ T3372] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1266.702439][ T3372] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 1266.702458][ T3372] ? __pfx___mutex_lock+0x10/0x10 [ 1266.702475][ T3372] ? __fget_files+0x34/0x3d0 [ 1266.702499][ T3372] mtdchar_unlocked_ioctl+0xb0/0xf0 [ 1266.702513][ T3372] ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10 [ 1266.702529][ T3372] __x64_sys_ioctl+0x18e/0x210 [ 1266.702544][ T3372] do_syscall_64+0x123/0x790 [ 1266.702562][ T3372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1266.702574][ T3372] RIP: 0033:0x7f516ed9e559 [ 1266.702585][ T3372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1266.702596][ T3372] RSP: 002b:00007f516fbee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1266.702607][ T3372] RAX: ffffffffffffffda RBX: 00007f516f025fa0 RCX: 00007f516ed9e559 [ 1266.702615][ T3372] RDX: 0000200000000400 RSI: 0000000000001269 RDI: 0000000000000004 [ 1266.702621][ T3372] RBP: 00007f516ee358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1266.702628][ T3372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1266.702634][ T3372] R13: 00007f516f026038 R14: 00007f516f025fa0 R15: 00007ffebb548328 [ 1266.702650][ T3372] [ 1266.702661][ T3372] memory allocation error while creating partitions for "mtdram test device" [ 1267.101410][ T3375] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1268.440966][ T3410] netlink: 'syz.2.11770': attribute type 1 has an invalid length. [ 1268.633916][ T3410] bond2: (slave geneve2): making interface the new active one [ 1268.640021][ T3410] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 1268.654640][ T1050] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1268.655151][ T1050] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1268.655171][ T1050] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1268.655189][ T1050] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1269.373601][ T5616] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci6/hci6:201' [ 1269.373620][ T5616] CPU: 0 UID: 0 PID: 5616 Comm: kworker/u9:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 1269.373637][ T5616] Tainted: [L]=SOFTLOCKUP [ 1269.373642][ T5616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1269.373651][ T5616] Workqueue: hci6 hci_rx_work [ 1269.373668][ T5616] Call Trace: [ 1269.373673][ T5616] [ 1269.373678][ T5616] dump_stack_lvl+0x100/0x190 [ 1269.373698][ T5616] sysfs_warn_dup.cold+0x1c/0x28 [ 1269.373718][ T5616] sysfs_create_dir_ns+0x24b/0x2b0 [ 1269.373730][ T5616] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1269.373741][ T5616] ? find_held_lock+0x2b/0x80 [ 1269.373759][ T5616] ? kobject_add_internal+0x25f/0x930 [ 1269.373772][ T5616] ? kobject_add_internal+0x25f/0x930 [ 1269.373786][ T5616] ? do_raw_spin_unlock+0x145/0x1e0 [ 1269.373803][ T5616] kobject_add_internal+0x2c8/0x930 [ 1269.373817][ T5616] kobject_add+0x16a/0x1e0 [ 1269.373830][ T5616] ? __pfx_kobject_add+0x10/0x10 [ 1269.373843][ T5616] ? class_to_subsys+0x10f/0x150 [ 1269.373860][ T5616] ? kobject_put+0xb9/0x640 [ 1269.373871][ T5616] ? _raw_spin_unlock+0x28/0x50 [ 1269.373889][ T5616] device_add+0x294/0x1970 [ 1269.373901][ T5616] ? __pfx_dev_set_name+0x10/0x10 [ 1269.373923][ T5616] ? __pfx_device_add+0x10/0x10 [ 1269.373937][ T5616] ? mgmt_send_event_skb+0x2fb/0x460 [ 1269.373957][ T5616] hci_conn_add_sysfs+0x1a3/0x260 [ 1269.373975][ T5616] le_conn_complete_evt+0x122f/0x2130 [ 1269.373993][ T5616] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1269.374006][ T5616] ? hci_event_packet+0x186/0xcd0 [ 1269.374019][ T5616] ? hci_event_packet+0x186/0xcd0 [ 1269.374037][ T5616] hci_le_enh_conn_complete_evt+0x23d/0x3b0 [ 1269.374053][ T5616] ? skb_pull_data+0x15f/0x1e0 [ 1269.374070][ T5616] hci_le_meta_evt+0x34a/0x5f0 [ 1269.374083][ T5616] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 1269.374099][ T5616] hci_event_packet+0x51c/0xcd0 [ 1269.374112][ T5616] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1269.374125][ T5616] ? __pfx_hci_event_packet+0x10/0x10 [ 1269.374141][ T5616] ? lockdep_hardirqs_on+0x7d/0x110 [ 1269.374160][ T5616] hci_rx_work+0x451/0xfc0 [ 1269.374175][ T5616] process_one_work+0xac7/0x1b10 [ 1269.374198][ T5616] ? __pfx_process_one_work+0x10/0x10 [ 1269.374217][ T5616] ? lock_acquire+0x1d1/0x380 [ 1269.374235][ T5616] ? __pfx_hci_rx_work+0x10/0x10 [ 1269.374248][ T5616] worker_thread+0x5ef/0xe50 [ 1269.374264][ T5616] ? kthread+0x13a/0x450 [ 1269.374279][ T5616] ? __pfx_worker_thread+0x10/0x10 [ 1269.374288][ T5616] kthread+0x373/0x450 [ 1269.374304][ T5616] ? __pfx_kthread+0x10/0x10 [ 1269.374320][ T5616] ret_from_fork+0x730/0xd60 [ 1269.374335][ T5616] ? __pfx_ret_from_fork+0x10/0x10 [ 1269.374349][ T5616] ? __switch_to+0x800/0x10f0 [ 1269.374365][ T5616] ? __pfx_kthread+0x10/0x10 [ 1269.374382][ T5616] ret_from_fork_asm+0x1a/0x30 [ 1269.374401][ T5616] [ 1269.374414][ T5616] kobject: kobject_add_internal failed for hci6:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1269.374432][ T5616] Bluetooth: hci6: failed to register connection device [ 1270.612829][ T3459] Invalid auth_tok structure returned from key query [ 1270.612839][ T3459] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 1270.612846][ T3459] One or more global auth toks could not properly register; rc = [-22] [ 1270.612864][ T3459] Error validating options; rc = [-22] [ 1270.970429][ T3463] FAULT_INJECTION: forcing a failure. [ 1270.970429][ T3463] name failslab, interval 1, probability 0, space 0, times 0 [ 1270.970452][ T3463] CPU: 0 UID: 0 PID: 3463 Comm: syz.2.11794 Tainted: G L syzkaller #0 PREEMPT(full) [ 1270.970470][ T3463] Tainted: [L]=SOFTLOCKUP [ 1270.970475][ T3463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1270.970483][ T3463] Call Trace: [ 1270.970488][ T3463] [ 1270.970493][ T3463] dump_stack_lvl+0x100/0x190 [ 1270.970515][ T3463] should_fail_ex.cold+0x5/0xa [ 1270.970531][ T3463] should_failslab+0xc2/0x120 [ 1270.970550][ T3463] __kmalloc_noprof+0xfc/0x840 [ 1270.970564][ T3463] ? __register_sysctl_table+0xbc8/0x1650 [ 1270.970579][ T3463] ? __register_sysctl_table+0xbe4/0x1650 [ 1270.970597][ T3463] __register_sysctl_table+0xbe4/0x1650 [ 1270.970614][ T3463] ? __pfx___register_sysctl_table+0x10/0x10 [ 1270.970627][ T3463] ? is_module_address+0x5f/0xf0 [ 1270.970642][ T3463] ? is_module_address+0x5f/0xf0 [ 1270.970661][ T3463] register_net_sysctl_sz+0x325/0x420 [ 1270.970674][ T3463] ? nr_free_zone_pages+0xcd/0x210 [ 1270.970694][ T3463] ip_vs_control_net_init+0x1cbd/0x2740 [ 1270.970716][ T3463] __ip_vs_init+0x217/0x520 [ 1270.970727][ T3463] ? __pfx___ip_vs_init+0x10/0x10 [ 1270.970743][ T3463] ops_init+0x1e2/0x5f0 [ 1270.970757][ T3463] setup_net+0x118/0x3a0 [ 1270.970769][ T3463] ? __pfx_setup_net+0x10/0x10 [ 1270.970786][ T3463] copy_net_ns+0x345/0x7a0 [ 1270.970801][ T3463] create_new_namespaces+0x3ea/0xac0 [ 1270.970820][ T3463] unshare_nsproxy_namespaces+0xf2/0x220 [ 1270.970836][ T3463] ksys_unshare+0x4a2/0xb30 [ 1270.970851][ T3463] ? __pfx_ksys_unshare+0x10/0x10 [ 1270.970870][ T3463] __x64_sys_unshare+0x31/0x40 [ 1270.970884][ T3463] do_syscall_64+0x123/0x790 [ 1270.970901][ T3463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1270.970913][ T3463] RIP: 0033:0x7f4fdf59e559 [ 1270.970930][ T3463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1270.970941][ T3463] RSP: 002b:00007f4fe040d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1270.970954][ T3463] RAX: ffffffffffffffda RBX: 00007f4fdf825fa0 RCX: 00007f4fdf59e559 [ 1270.970962][ T3463] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1270.970969][ T3463] RBP: 00007f4fdf6358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1270.970978][ T3463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1270.970985][ T3463] R13: 00007f4fdf826038 R14: 00007f4fdf825fa0 R15: 00007ffcab971618 [ 1270.971002][ T3463] [ 1271.108742][ T3463] sysctl could not get directory: /net/ipv4/vs -12 [ 1271.157946][ T5616] Bluetooth: hci3: command 0x0406 tx timeout [ 1271.841032][ T31] audit: type=1400 audit(1792131448.871:8159): avc: denied { write } for pid=3437 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1272.142319][ T31] audit: type=1400 audit(1792131449.171:8160): avc: denied { write } for pid=3484 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1273.595178][ T31] audit: type=1400 audit(1792131450.621:8161): avc: denied { write } for pid=3512 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1273.646773][ T3538] ip_tables: iptables: counters copy to user failed while replacing table [ 1273.923999][ T31] audit: type=1400 audit(1792131450.951:8162): avc: denied { write } for pid=3544 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1274.081416][ T3551] ip_tables: iptables: counters copy to user failed while replacing table [ 1274.108752][ T3551] raw_sendmsg: syz.4.11805 forgot to set AF_INET. Fix it! [ 1275.076692][ T31] audit: type=1400 audit(1792131452.111:8163): avc: denied { write } for pid=3552 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1275.319677][ T3605] ip_tables: iptables: counters copy to user failed while replacing table [ 1275.414276][ T31] audit: type=1400 audit(1792131452.441:8164): avc: denied { write } for pid=3603 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1275.730668][ T3619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11827'. [ 1275.772322][ T3619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11827'. [ 1275.785980][ T1051] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1275.788216][ T1969] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1275.788265][ T1969] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1275.788283][ T1969] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1276.834574][ T31] audit: type=1400 audit(1792131453.861:8165): avc: denied { write } for pid=3616 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1276.959548][ T31] audit: type=1400 audit(1792131453.991:8166): avc: denied { write } for pid=3646 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1278.829413][ T3682] FAULT_INJECTION: forcing a failure. [ 1278.829413][ T3682] name failslab, interval 1, probability 0, space 0, times 0 [ 1278.829436][ T3682] CPU: 0 UID: 0 PID: 3682 Comm: syz.0.11844 Tainted: G L syzkaller #0 PREEMPT(full) [ 1278.829452][ T3682] Tainted: [L]=SOFTLOCKUP [ 1278.829456][ T3682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1278.829463][ T3682] Call Trace: [ 1278.829468][ T3682] [ 1278.829474][ T3682] dump_stack_lvl+0x100/0x190 [ 1278.829495][ T3682] should_fail_ex.cold+0x5/0xa [ 1278.829513][ T3682] should_failslab+0xc2/0x120 [ 1278.829532][ T3682] __kmalloc_cache_noprof+0x91/0x6d0 [ 1278.829546][ T3682] ? allocate_partition+0x190/0x2a0 [ 1278.829562][ T3682] allocate_partition+0x190/0x2a0 [ 1278.829576][ T3682] ? cred_has_capability.isra.0+0x186/0x300 [ 1278.829596][ T3682] mtd_add_partition+0x230/0x6a0 [ 1278.829611][ T3682] ? __pfx_mtd_add_partition+0x10/0x10 [ 1278.829624][ T3682] ? __might_fault+0xc5/0x140 [ 1278.829636][ T3682] ? __might_fault+0xc5/0x140 [ 1278.829653][ T3682] mtdchar_blkpg_ioctl+0x207/0x250 [ 1278.829668][ T3682] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 1278.829694][ T3682] mtdchar_ioctl+0x1670/0x1fd0 [ 1278.829711][ T3682] ? __pfx_mtdchar_ioctl+0x10/0x10 [ 1278.829728][ T3682] ? lock_acquire+0x1d1/0x380 [ 1278.829743][ T3682] ? mtdchar_unlocked_ioctl+0xa2/0xf0 [ 1278.829761][ T3682] ? rcu_is_watching+0x13/0xc0 [ 1278.829777][ T3682] ? trace_contention_end+0x126/0x160 [ 1278.829793][ T3682] ? mtdchar_unlocked_ioctl+0xa2/0xf0 [ 1278.829814][ T3682] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1278.829829][ T3682] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 1278.829850][ T3682] ? __pfx___mutex_lock+0x10/0x10 [ 1278.829869][ T3682] ? __fget_files+0x34/0x3d0 [ 1278.829896][ T3682] mtdchar_unlocked_ioctl+0xb0/0xf0 [ 1278.829910][ T3682] ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10 [ 1278.829925][ T3682] __x64_sys_ioctl+0x18e/0x210 [ 1278.829940][ T3682] do_syscall_64+0x123/0x790 [ 1278.829958][ T3682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1278.829970][ T3682] RIP: 0033:0x7f2da2f9e559 [ 1278.829979][ T3682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1278.829990][ T3682] RSP: 002b:00007f2da3e32028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1278.830003][ T3682] RAX: ffffffffffffffda RBX: 00007f2da3225fa0 RCX: 00007f2da2f9e559 [ 1278.830010][ T3682] RDX: 0000200000000400 RSI: 0000000000001269 RDI: 0000000000000004 [ 1278.830017][ T3682] RBP: 00007f2da30358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1278.830024][ T3682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1278.830030][ T3682] R13: 00007f2da3226038 R14: 00007f2da3225fa0 R15: 00007ffde09a4998 [ 1278.830046][ T3682] [ 1278.830382][ T3682] memory allocation error while creating partitions for "mtdram test device" [ 1279.461797][ T3693] FAULT_INJECTION: forcing a failure. [ 1279.461797][ T3693] name failslab, interval 1, probability 0, space 0, times 0 [ 1279.461822][ T3693] CPU: 0 UID: 0 PID: 3693 Comm: syz.2.11849 Tainted: G L syzkaller #0 PREEMPT(full) [ 1279.461838][ T3693] Tainted: [L]=SOFTLOCKUP [ 1279.461842][ T3693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1279.461850][ T3693] Call Trace: [ 1279.461855][ T3693] [ 1279.461860][ T3693] dump_stack_lvl+0x100/0x190 [ 1279.461880][ T3693] should_fail_ex.cold+0x5/0xa [ 1279.461897][ T3693] should_failslab+0xc2/0x120 [ 1279.461916][ T3693] __kmalloc_cache_noprof+0x91/0x6d0 [ 1279.461929][ T3693] ? ucma_alloc_ctx+0x41/0x3d0 [ 1279.461949][ T3693] ucma_alloc_ctx+0x41/0x3d0 [ 1279.461966][ T3693] ucma_create_id+0x134/0x380 [ 1279.461978][ T3693] ? __pfx_ucma_create_id+0x10/0x10 [ 1279.461989][ T3693] ? __might_fault+0xc5/0x140 [ 1279.462004][ T3693] ? __pfx_ucma_create_id+0x10/0x10 [ 1279.462016][ T3693] ucma_write+0x1fb/0x330 [ 1279.462033][ T3693] ? __pfx_ucma_write+0x10/0x10 [ 1279.462049][ T3693] ? bpf_lsm_file_permission+0x9/0x10 [ 1279.462066][ T3693] ? security_file_permission+0x76/0x210 [ 1279.462084][ T3693] ? rw_verify_area+0xce/0x6d0 [ 1279.462097][ T3693] vfs_write+0x2aa/0x1050 [ 1279.462111][ T3693] ? __pfx_ucma_write+0x10/0x10 [ 1279.462127][ T3693] ? lock_acquire+0x1d1/0x380 [ 1279.462139][ T3693] ? __fget_files+0x34/0x3d0 [ 1279.462156][ T3693] ? __pfx_vfs_write+0x10/0x10 [ 1279.462168][ T3693] ? find_held_lock+0x2b/0x80 [ 1279.462184][ T3693] ? __fget_files+0x215/0x3d0 [ 1279.462199][ T3693] ? __fget_files+0x215/0x3d0 [ 1279.462217][ T3693] ? __fget_files+0x21f/0x3d0 [ 1279.462236][ T3693] ksys_write+0x1f8/0x250 [ 1279.462250][ T3693] ? __pfx_ksys_write+0x10/0x10 [ 1279.462267][ T3693] do_syscall_64+0x123/0x790 [ 1279.462284][ T3693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1279.462296][ T3693] RIP: 0033:0x7f4fdf59e559 [ 1279.462307][ T3693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1279.462318][ T3693] RSP: 002b:00007f4fe040d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1279.462329][ T3693] RAX: ffffffffffffffda RBX: 00007f4fdf825fa0 RCX: 00007f4fdf59e559 [ 1279.462336][ T3693] RDX: 0000000000000020 RSI: 0000200000000280 RDI: 0000000000000003 [ 1279.462343][ T3693] RBP: 00007f4fdf6358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1279.462350][ T3693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1279.462357][ T3693] R13: 00007f4fdf826038 R14: 00007f4fdf825fa0 R15: 00007ffcab971618 [ 1279.462373][ T3693] [ 1280.287615][ T3714] ip_tables: iptables: counters copy to user failed while replacing table [ 1280.899907][ T3740] netlink: 'syz.6.11867': attribute type 2 has an invalid length. [ 1280.899925][ T3740] netlink: 'syz.6.11867': attribute type 2 has an invalid length. [ 1281.771416][ T3767] GRED: Warning: Destroying shadowed VQ 0xe [ 1281.876012][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1281.876719][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1282.227904][ T3781] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1282.232368][ T3781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1282.762185][T15614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1282.832271][ T3793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1282.832424][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1282.833468][ T3793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1282.833676][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1282.999473][ T3799] fuse: fd is not a fuse device [ 1283.328631][ T3813] syzkaller1: entered promiscuous mode [ 1283.328647][ T3813] syzkaller1: entered allmulticast mode [ 1283.360721][ T31] audit: type=1326 audit(1792131460.391:8167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3815 comm="syz.6.11895" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f516ed9e559 code=0x7ffc0000 [ 1283.360753][ T31] audit: type=1326 audit(1792131460.391:8168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3815 comm="syz.6.11895" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f516ed9e559 code=0x7ffc0000 [ 1283.360898][ T31] audit: type=1326 audit(1792131460.391:8169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3815 comm="syz.6.11895" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f516ed9e559 code=0x7ffc0000 [ 1283.361133][ T31] audit: type=1326 audit(1792131460.391:8170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3815 comm="syz.6.11895" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f516ed9e559 code=0x7ffc0000 [ 1283.361998][ T31] audit: type=1326 audit(1792131460.391:8171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3815 comm="syz.6.11895" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f516ed9e559 code=0x7ffc0000 [ 1283.364289][ T31] audit: type=1326 audit(1792131460.391:8172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3815 comm="syz.6.11895" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f516ed9e559 code=0x7ffc0000 [ 1283.364314][ T31] audit: type=1326 audit(1792131460.391:8173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3815 comm="syz.6.11895" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f516ed9e559 code=0x7ffc0000 [ 1283.364335][ T31] audit: type=1326 audit(1792131460.391:8174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3815 comm="syz.6.11895" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f516ed9e559 code=0x7ffc0000 [ 1283.364561][ T31] audit: type=1326 audit(1792131460.391:8175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3815 comm="syz.6.11895" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f516ed9e559 code=0x7ffc0000 [ 1283.364656][ T31] audit: type=1326 audit(1792131460.391:8176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3815 comm="syz.6.11895" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f516ed9e559 code=0x7ffc0000 [ 1283.957815][ T3827] syzkaller1: entered promiscuous mode [ 1283.957830][ T3827] syzkaller1: entered allmulticast mode [ 1284.385062][ T3844] FAULT_INJECTION: forcing a failure. [ 1284.385062][ T3844] name failslab, interval 1, probability 0, space 0, times 0 [ 1284.385086][ T3844] CPU: 0 UID: 60928 PID: 3844 Comm: syz.4.11905 Tainted: G L syzkaller #0 PREEMPT(full) [ 1284.385104][ T3844] Tainted: [L]=SOFTLOCKUP [ 1284.385109][ T3844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1284.385116][ T3844] Call Trace: [ 1284.385121][ T3844] [ 1284.385127][ T3844] dump_stack_lvl+0x100/0x190 [ 1284.385148][ T3844] should_fail_ex.cold+0x5/0xa [ 1284.385165][ T3844] should_failslab+0xc2/0x120 [ 1284.385184][ T3844] __kmalloc_cache_noprof+0x91/0x6d0 [ 1284.385198][ T3844] ? preempt_schedule_thunk+0x16/0x40 [ 1284.385213][ T3844] ? key_user_lookup+0x1a3/0x5a0 [ 1284.385233][ T3844] key_user_lookup+0x1a3/0x5a0 [ 1284.385251][ T3844] ? __pfx_key_user_lookup+0x10/0x10 [ 1284.385268][ T3844] ? security_key_permission+0x7b/0x230 [ 1284.385286][ T3844] key_alloc+0x18b/0x1310 [ 1284.385306][ T3844] ? __pfx_keyring_search+0x10/0x10 [ 1284.385318][ T3844] ? __pfx_key_alloc+0x10/0x10 [ 1284.385334][ T3844] ? __pfx_key_default_cmp+0x10/0x10 [ 1284.385345][ T3844] ? __pfx_keyring_search_iterator+0x10/0x10 [ 1284.385358][ T3844] keyring_alloc+0x44/0xc0 [ 1284.385370][ T3844] look_up_user_keyrings+0x465/0x790 [ 1284.385388][ T3844] ? __pfx_look_up_user_keyrings+0x10/0x10 [ 1284.385406][ T3844] ? find_held_lock+0x2b/0x80 [ 1284.385425][ T3844] lookup_user_key+0xbb1/0x1300 [ 1284.385442][ T3844] ? __pfx_lookup_user_key+0x10/0x10 [ 1284.385456][ T3844] ? futex_wait+0x11e/0x370 [ 1284.385472][ T3844] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 1284.385494][ T3844] keyctl_get_persistent+0x197/0x940 [ 1284.385506][ T3844] ? __pfx_keyctl_get_persistent+0x10/0x10 [ 1284.385519][ T3844] ? __x64_sys_futex+0x34f/0x4d0 [ 1284.385535][ T3844] ? __x64_sys_futex+0x358/0x4d0 [ 1284.385553][ T3844] ? xfd_validate_state+0x129/0x190 [ 1284.385571][ T3844] __do_sys_keyctl+0x3b2/0x5a0 [ 1284.385586][ T3844] do_syscall_64+0x123/0x790 [ 1284.385604][ T3844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1284.385616][ T3844] RIP: 0033:0x7f3c65f9e559 [ 1284.385627][ T3844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1284.385638][ T3844] RSP: 002b:00007f3c66eab028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1284.385649][ T3844] RAX: ffffffffffffffda RBX: 00007f3c66225fa0 RCX: 00007f3c65f9e559 [ 1284.385658][ T3844] RDX: fffffffffffffffd RSI: ffffffffffffffff RDI: 0000000000000016 [ 1284.385665][ T3844] RBP: 00007f3c660358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1284.385672][ T3844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1284.385686][ T3844] R13: 00007f3c66226038 R14: 00007f3c66225fa0 R15: 00007ffc0c166e18 [ 1284.385703][ T3844] [ 1285.544060][ T3872] trusted_key: encrypted_key: insufficient parameters specified [ 1285.784513][ T3875] Cannot find set identified by id 0 to match [ 1285.803537][ T3852] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1285.882152][T13453] net_ratelimit: 14 callbacks suppressed [ 1285.882166][T13453] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1286.035185][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1286.035779][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1286.590630][ T3909] overlayfs: failed to clone upperpath [ 1286.921187][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1287.075157][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1287.075356][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1287.476721][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1287.749900][ T3931] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1287.935348][ T3939] tipc: Enabled bearer , priority 0 [ 1287.962834][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1288.115168][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1288.115488][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1288.847951][ T3979] FAULT_INJECTION: forcing a failure. [ 1288.847951][ T3979] name failslab, interval 1, probability 0, space 0, times 0 [ 1288.847974][ T3979] CPU: 0 UID: 0 PID: 3979 Comm: syz.2.11958 Tainted: G L syzkaller #0 PREEMPT(full) [ 1288.847990][ T3979] Tainted: [L]=SOFTLOCKUP [ 1288.847994][ T3979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1288.848001][ T3979] Call Trace: [ 1288.848005][ T3979] [ 1288.848010][ T3979] dump_stack_lvl+0x100/0x190 [ 1288.848032][ T3979] should_fail_ex.cold+0x5/0xa [ 1288.848048][ T3979] should_failslab+0xc2/0x120 [ 1288.848066][ T3979] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1288.848080][ T3979] ? d_instantiate+0x8a/0xb0 [ 1288.848092][ T3979] ? alloc_empty_file+0x5b/0x1c0 [ 1288.848107][ T3979] alloc_empty_file+0x5b/0x1c0 [ 1288.848118][ T3979] alloc_file_pseudo+0x183/0x290 [ 1288.848130][ T3979] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1288.848140][ T3979] ? alloc_fd+0x471/0x7a0 [ 1288.848158][ T3979] ? do_raw_spin_unlock+0x145/0x1e0 [ 1288.848176][ T3979] __anon_inode_getfile+0xe8/0x280 [ 1288.848192][ T3979] anon_inode_getfile_fmode+0x37/0xa0 [ 1288.848208][ T3979] do_eventfd+0x159/0x2b0 [ 1288.848225][ T3979] __x64_sys_eventfd2+0x53/0x80 [ 1288.848245][ T3979] do_syscall_64+0x123/0x790 [ 1288.848264][ T3979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1288.848275][ T3979] RIP: 0033:0x7f4fdf59e559 [ 1288.848285][ T3979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1288.848296][ T3979] RSP: 002b:00007f4fe040d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000122 [ 1288.848308][ T3979] RAX: ffffffffffffffda RBX: 00007f4fdf825fa0 RCX: 00007f4fdf59e559 [ 1288.848315][ T3979] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000a1 [ 1288.848322][ T3979] RBP: 00007f4fdf6358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1288.848329][ T3979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1288.848335][ T3979] R13: 00007f4fdf826038 R14: 00007f4fdf825fa0 R15: 00007ffcab971618 [ 1288.848351][ T3979] [ 1289.834805][ T4012] trusted_key: encrypted_key: insufficient parameters specified [ 1290.435964][ T4029] FAULT_INJECTION: forcing a failure. [ 1290.435964][ T4029] name failslab, interval 1, probability 0, space 0, times 0 [ 1290.435988][ T4029] CPU: 0 UID: 0 PID: 4029 Comm: syz.6.11976 Tainted: G L syzkaller #0 PREEMPT(full) [ 1290.436005][ T4029] Tainted: [L]=SOFTLOCKUP [ 1290.436009][ T4029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1290.436016][ T4029] Call Trace: [ 1290.436020][ T4029] [ 1290.436025][ T4029] dump_stack_lvl+0x100/0x190 [ 1290.436047][ T4029] should_fail_ex.cold+0x5/0xa [ 1290.436063][ T4029] should_failslab+0xc2/0x120 [ 1290.436081][ T4029] __kvmalloc_node_noprof+0x113/0x9b0 [ 1290.436099][ T4029] ? xt_alloc_entry_offsets+0x42/0x60 [ 1290.436115][ T4029] xt_alloc_entry_offsets+0x42/0x60 [ 1290.436128][ T4029] translate_table+0x22f/0x1770 [ 1290.436143][ T4029] ? lock_acquire+0x1d1/0x380 [ 1290.436157][ T4029] ? __might_fault+0xc5/0x140 [ 1290.436168][ T4029] ? find_held_lock+0x2b/0x80 [ 1290.436187][ T4029] ? __pfx_translate_table+0x10/0x10 [ 1290.436203][ T4029] do_ip6t_set_ctl+0x689/0xd00 [ 1290.436214][ T4029] ? nf_sockopt_find.isra.0+0x222/0x290 [ 1290.436226][ T4029] ? nf_sockopt_find.isra.0+0x222/0x290 [ 1290.436240][ T4029] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 1290.436252][ T4029] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1290.436271][ T4029] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1290.436293][ T4029] ? nf_sockopt_find.isra.0+0x222/0x290 [ 1290.436306][ T4029] nf_setsockopt+0x8d/0xf0 [ 1290.436319][ T4029] ipv6_setsockopt+0x135/0x170 [ 1290.436334][ T4029] rawv6_setsockopt+0xee/0x5a0 [ 1290.436352][ T4029] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 1290.436370][ T4029] ? selinux_socket_setsockopt+0x6a/0x80 [ 1290.436385][ T4029] ? sock_common_setsockopt+0x2e/0xf0 [ 1290.436398][ T4029] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1290.436413][ T4029] do_sock_setsockopt+0xf3/0x1d0 [ 1290.436428][ T4029] __sys_setsockopt+0x195/0x220 [ 1290.436442][ T4029] __x64_sys_setsockopt+0xbd/0x160 [ 1290.436452][ T4029] ? do_syscall_64+0xae/0x790 [ 1290.436468][ T4029] ? lockdep_hardirqs_on+0x7d/0x110 [ 1290.436483][ T4029] do_syscall_64+0x123/0x790 [ 1290.436500][ T4029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1290.436512][ T4029] RIP: 0033:0x7f516ed9e559 [ 1290.436522][ T4029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1290.436533][ T4029] RSP: 002b:00007f516fbee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1290.436544][ T4029] RAX: ffffffffffffffda RBX: 00007f516f025fa0 RCX: 00007f516ed9e559 [ 1290.436551][ T4029] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004 [ 1290.436558][ T4029] RBP: 00007f516ee358b0 R08: 00000000000002d8 R09: 0000000000000000 [ 1290.436565][ T4029] R10: 0000200000002480 R11: 0000000000000246 R12: 0000000000000000 [ 1290.436571][ T4029] R13: 00007f516f026038 R14: 00007f516f025fa0 R15: 00007ffebb548328 [ 1290.436593][ T4029] [ 1291.081855][T13453] net_ratelimit: 8 callbacks suppressed [ 1291.081869][T13453] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1291.085300][ T1950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1291.101632][T15614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1291.127049][T13453] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1291.235178][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1291.235405][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1292.196423][T13453] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1292.275162][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1292.276215][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1292.767075][ T4077] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11995'. [ 1292.791418][ T4077] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11995'. [ 1292.948377][ T4081] ip_tables: iptables: counters copy to user failed while replacing table [ 1293.278760][T13453] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1293.465876][T13453] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1293.466601][T13453] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1293.466618][T13453] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1293.466631][T13453] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1293.466652][T13453] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1293.592949][ T31] kauditd_printk_skb: 128 callbacks suppressed [ 1293.592961][ T31] audit: type=1400 audit(1792131470.621:8305): avc: denied { execheap } for pid=4091 comm="syz.5.12002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1293.767455][ T4098] jffs2: notice: (4098) jffs2_build_xattr_subsystem: complete building xattr subsystem, 6 of xdatum (5 unchecked, 1 orphan) and 7 of xref (1 dead, 1 orphan) found. [ 1294.366209][ T4121] Cannot find set identified by id 0 to match [ 1294.856193][ T4138] netlink: 'syz.0.12018': attribute type 1 has an invalid length. [ 1294.904233][ T4138] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1295.001808][ T4138] bond3: (slave erspan0): making interface the new active one [ 1295.017862][ T4138] bond3: (slave erspan0): Enslaving as an active interface with an up link [ 1295.535290][ T31] audit: type=1400 audit(1792131472.571:8306): avc: denied { execute_no_trans } for pid=4157 comm="syz.4.12027" path="/file0" dev="ramfs" ino=144291 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 1295.871328][ T4172] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12032'. [ 1295.891654][ T4172] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12032'. [ 1296.027223][ T9] usb 3-1: USB disconnect, device number 52 [ 1296.070481][ T31] audit: type=1400 audit(1792131473.101:8307): avc: denied { append } for pid=4175 comm="syz.6.12034" name="event2" dev="devtmpfs" ino=3894 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1296.355435][T13453] net_ratelimit: 15 callbacks suppressed [ 1296.355465][T13453] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1296.435193][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1296.435647][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1297.113650][ T4223] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12051'. [ 1297.144669][ T4223] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12051'. [ 1297.144794][ T1046] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1297.144908][ T1046] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1297.145043][ T1046] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1297.145063][ T1046] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1297.293147][ T4232] FAULT_INJECTION: forcing a failure. [ 1297.293147][ T4232] name failslab, interval 1, probability 0, space 0, times 0 [ 1297.293169][ T4232] CPU: 0 UID: 0 PID: 4232 Comm: syz.6.12054 Tainted: G L syzkaller #0 PREEMPT(full) [ 1297.293187][ T4232] Tainted: [L]=SOFTLOCKUP [ 1297.293192][ T4232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1297.293199][ T4232] Call Trace: [ 1297.293204][ T4232] [ 1297.293210][ T4232] dump_stack_lvl+0x100/0x190 [ 1297.293232][ T4232] should_fail_ex.cold+0x5/0xa [ 1297.293249][ T4232] should_failslab+0xc2/0x120 [ 1297.293267][ T4232] __kmalloc_noprof+0xfc/0x840 [ 1297.293282][ T4232] ? apply_wqattrs_prepare+0xfe/0xbb0 [ 1297.293298][ T4232] apply_wqattrs_prepare+0xfe/0xbb0 [ 1297.293311][ T4232] ? __alloc_workqueue+0x8ca/0x1950 [ 1297.293330][ T4232] apply_workqueue_attrs_locked+0x64/0xe0 [ 1297.293344][ T4232] __alloc_workqueue+0x9a7/0x1950 [ 1297.293364][ T4232] alloc_workqueue_noprof+0xc7/0x130 [ 1297.293379][ T4232] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 1297.293399][ T4232] ? bond_init+0xc0/0xb80 [ 1297.293413][ T4232] ? find_held_lock+0x2b/0x80 [ 1297.293430][ T4232] ? bond_init+0x187/0xb80 [ 1297.293442][ T4232] ? bond_init+0x187/0xb80 [ 1297.293458][ T4232] bond_init+0x1b8/0xb80 [ 1297.293471][ T4232] ? kasan_save_track+0x14/0x30 [ 1297.293495][ T4232] ? __kasan_kmalloc+0xaa/0xb0 [ 1297.293511][ T4232] ? __pfx_bond_init+0x10/0x10 [ 1297.293524][ T4232] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 1297.293538][ T4232] ? register_netdevice+0x50c/0x25a0 [ 1297.293555][ T4232] ? __pfx_bond_init+0x10/0x10 [ 1297.293569][ T4232] register_netdevice+0x685/0x25a0 [ 1297.293584][ T4232] ? __pfx_validate_linkmsg+0x10/0x10 [ 1297.293598][ T4232] ? __pfx_register_netdevice+0x10/0x10 [ 1297.293618][ T4232] bond_newlink+0x6a/0x100 [ 1297.293635][ T4232] ? __pfx_bond_newlink+0x10/0x10 [ 1297.293652][ T4232] rtnl_newlink+0x1697/0x2620 [ 1297.293670][ T4232] ? __pfx_rtnl_newlink+0x10/0x10 [ 1297.293682][ T4232] ? avc_has_perm_noaudit+0x56/0x470 [ 1297.293695][ T4232] ? find_held_lock+0x2b/0x80 [ 1297.293711][ T4232] ? avc_has_perm_noaudit+0x11e/0x470 [ 1297.293723][ T4232] ? avc_has_perm_noaudit+0x11e/0x470 [ 1297.293749][ T4232] ? lock_acquire+0x1d1/0x380 [ 1297.293761][ T4232] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 1297.293774][ T4232] ? find_held_lock+0x2b/0x80 [ 1297.293790][ T4232] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1297.293802][ T4232] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1297.293816][ T4232] ? __pfx_rtnl_newlink+0x10/0x10 [ 1297.293829][ T4232] rtnetlink_rcv_msg+0x95e/0xe90 [ 1297.293843][ T4232] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1297.293860][ T4232] ? ref_tracker_free+0x37e/0x6c0 [ 1297.293875][ T4232] netlink_rcv_skb+0x159/0x420 [ 1297.293893][ T4232] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1297.293907][ T4232] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1297.293929][ T4232] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1297.293949][ T4232] netlink_unicast+0x65f/0x950 [ 1297.293968][ T4232] ? __pfx_netlink_unicast+0x10/0x10 [ 1297.293989][ T4232] netlink_sendmsg+0x8b0/0xda0 [ 1297.294008][ T4232] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1297.294027][ T4232] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1297.294045][ T4232] ____sys_sendmsg+0xa4d/0xbe0 [ 1297.294059][ T4232] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1297.294077][ T4232] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1297.294098][ T4232] ___sys_sendmsg+0x190/0x1e0 [ 1297.294115][ T4232] ? __pfx____sys_sendmsg+0x10/0x10 [ 1297.294130][ T4232] ? futex_wait+0x11e/0x370 [ 1297.294148][ T4232] ? find_held_lock+0x2b/0x80 [ 1297.294174][ T4232] __sys_sendmsg+0x160/0x210 [ 1297.294186][ T4232] ? __pfx___sys_sendmsg+0x10/0x10 [ 1297.294205][ T4232] do_syscall_64+0x123/0x790 [ 1297.294223][ T4232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1297.294235][ T4232] RIP: 0033:0x7f516ed9e559 [ 1297.294246][ T4232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1297.294257][ T4232] RSP: 002b:00007f516fbee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1297.294269][ T4232] RAX: ffffffffffffffda RBX: 00007f516f025fa0 RCX: 00007f516ed9e559 [ 1297.294276][ T4232] RDX: 0000000020040040 RSI: 0000200000000000 RDI: 0000000000000003 [ 1297.294286][ T4232] RBP: 00007f516ee358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1297.294294][ T4232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1297.294300][ T4232] R13: 00007f516f026038 R14: 00007f516f025fa0 R15: 00007ffebb548328 [ 1297.294317][ T4232] [ 1297.399619][T15614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1297.475174][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1297.475534][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1297.735368][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1298.436006][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1298.515205][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1298.515759][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1298.877920][ T4265] syzkaller1: entered promiscuous mode [ 1298.877936][ T4265] syzkaller1: entered allmulticast mode [ 1298.900174][ T4267] xt_hashlimit: size too large, truncated to 1048576 [ 1299.580752][ T4298] gre2: entered promiscuous mode [ 1300.043587][ T4316] netlink: 'syz.5.12083': attribute type 10 has an invalid length. [ 1300.078571][ T4316] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1300.079173][ T4316] netdevsim netdevsim5 netdevsim1: entered promiscuous mode [ 1300.116252][ T4316] team0: Port device netdevsim1 added [ 1300.694570][ T4331] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12089'. [ 1300.836479][ T1046] rpcbind: server 127.0.0.1 not responding, timed out [ 1301.559637][ T9] net_ratelimit: 11 callbacks suppressed [ 1301.559652][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1301.635034][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1301.635512][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1302.004766][ T31] audit: type=1400 audit(1792131479.031:8308): avc: denied { accept } for pid=4363 comm="syz.2.12101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1302.090341][ T31] audit: type=1326 audit(1792131479.121:8309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4352 comm="syz.5.12097" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa75c99e559 code=0x7fc00000 [ 1302.603371][T15614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1302.675026][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1302.675848][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1302.772475][ T4381] FAULT_INJECTION: forcing a failure. [ 1302.772475][ T4381] name failslab, interval 1, probability 0, space 0, times 0 [ 1302.772497][ T4381] CPU: 0 UID: 0 PID: 4381 Comm: syz.4.12109 Tainted: G L syzkaller #0 PREEMPT(full) [ 1302.772515][ T4381] Tainted: [L]=SOFTLOCKUP [ 1302.772520][ T4381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1302.772527][ T4381] Call Trace: [ 1302.772532][ T4381] [ 1302.772537][ T4381] dump_stack_lvl+0x100/0x190 [ 1302.772560][ T4381] should_fail_ex.cold+0x5/0xa [ 1302.772577][ T4381] should_failslab+0xc2/0x120 [ 1302.772596][ T4381] __kmalloc_cache_noprof+0x91/0x6d0 [ 1302.772609][ T4381] ? snd_seq_port_use_ptr+0x3c/0x300 [ 1302.772621][ T4381] ? snd_seq_port_connect+0x61/0x540 [ 1302.772636][ T4381] snd_seq_port_connect+0x61/0x540 [ 1302.772648][ T4381] ? check_subscription_permission.isra.0+0x146/0x240 [ 1302.772662][ T4381] snd_seq_ioctl_subscribe_port+0x219/0x490 [ 1302.772678][ T4381] ? __pfx_snd_seq_ioctl_subscribe_port+0x10/0x10 [ 1302.772691][ T4381] ? lock_acquire+0x1d1/0x380 [ 1302.772704][ T4381] ? clientptr+0x20/0x190 [ 1302.772715][ T4381] ? find_held_lock+0x2b/0x80 [ 1302.772733][ T4381] ? clientptr+0x80/0x190 [ 1302.772746][ T4381] call_seq_client_ctl+0xa3/0x130 [ 1302.772765][ T4381] snd_seq_kernel_client_ctl+0x35/0x50 [ 1302.772777][ T4381] snd_seq_oss_midi_open+0x465/0x680 [ 1302.772793][ T4381] ? __pfx_snd_seq_oss_midi_open+0x10/0x10 [ 1302.772814][ T4381] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 1302.772829][ T4381] snd_seq_oss_midi_open_all+0x95/0xf0 [ 1302.772846][ T4381] snd_seq_oss_open+0x81c/0xa10 [ 1302.772861][ T4381] odev_open+0x6f/0x90 [ 1302.772871][ T4381] ? __pfx_odev_open+0x10/0x10 [ 1302.772882][ T4381] soundcore_open+0x2e3/0x5a0 [ 1302.772896][ T4381] ? __pfx_soundcore_open+0x10/0x10 [ 1302.772907][ T4381] chrdev_open+0x234/0x6a0 [ 1302.772924][ T4381] ? __pfx_chrdev_open+0x10/0x10 [ 1302.772941][ T4381] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1302.772957][ T4381] do_dentry_open+0x6ab/0x14d0 [ 1302.772971][ T4381] ? __pfx_chrdev_open+0x10/0x10 [ 1302.772990][ T4381] vfs_open+0x82/0x3f0 [ 1302.773009][ T4381] path_openat+0x19fa/0x2440 [ 1302.773029][ T4381] ? __pfx_path_openat+0x10/0x10 [ 1302.773050][ T4381] do_file_open+0x20e/0x430 [ 1302.773067][ T4381] ? __pfx_do_file_open+0x10/0x10 [ 1302.773094][ T4381] ? _raw_spin_unlock+0x28/0x50 [ 1302.773108][ T4381] ? alloc_fd+0x471/0x7a0 [ 1302.773130][ T4381] do_sys_openat2+0x10f/0x1e0 [ 1302.773141][ T4381] ? __pfx_do_sys_openat2+0x10/0x10 [ 1302.773152][ T4381] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1302.773173][ T4381] __x64_sys_openat+0x12d/0x210 [ 1302.773185][ T4381] ? __pfx___x64_sys_openat+0x10/0x10 [ 1302.773202][ T4381] do_syscall_64+0x123/0x790 [ 1302.773220][ T4381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1302.773232][ T4381] RIP: 0033:0x7f3c65f9e559 [ 1302.773243][ T4381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1302.773254][ T4381] RSP: 002b:00007f3c66eab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1302.773265][ T4381] RAX: ffffffffffffffda RBX: 00007f3c66225fa0 RCX: 00007f3c65f9e559 [ 1302.773272][ T4381] RDX: 0000000000060042 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 1302.773279][ T4381] RBP: 00007f3c660358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1302.773286][ T4381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1302.773292][ T4381] R13: 00007f3c66226038 R14: 00007f3c66225fa0 R15: 00007ffc0c166e18 [ 1302.773309][ T4381] [ 1303.482352][ T31] audit: type=1400 audit(1792131480.511:8310): avc: denied { ioctl } for pid=4390 comm="syz.4.12114" path="socket:[145069]" dev="sockfs" ino=145069 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1303.484329][T13453] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1303.637718][T15614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1303.679563][ T4396] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12116'. [ 1303.715038][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1303.715457][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1303.846272][T15614] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1304.001766][T15614] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1304.001793][T15614] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1304.004076][T15614] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1304.004090][T15614] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1304.004111][T15614] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 1304.004130][T15614] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 1304.004150][T15614] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1304.004165][T15614] usb 3-1: config 1 interface 1 has no altsetting 0 [ 1304.083498][T15614] usb 3-1: string descriptor 0 read error: -22 [ 1304.083565][T15614] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1304.919119][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1304.919152][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1305.391788][ T4454] fuse: fd is not a fuse device [ 1306.625777][ T10] usb 3-1: USB disconnect, device number 53 [ 1306.768087][ T4507] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1306.769384][ T9] net_ratelimit: 40 callbacks suppressed [ 1306.769394][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1306.835284][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1306.835748][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1307.241624][ C0] Unknown status report in ack skb [ 1307.808428][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1307.875039][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1307.875433][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1307.992139][ T4523] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12161'. [ 1307.992164][ T4523] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12161'. [ 1308.072278][ T4523] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12161'. [ 1308.072301][ T4523] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12161'. [ 1308.093464][ T1950] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1308.104290][ T1960] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1308.104343][ T1960] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1308.104361][ T1960] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1308.682653][ T4541] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1308.843043][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1308.915302][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1308.915705][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1308.988534][ T4549] tipc: Enabling of bearer rejected, failed to enable media [ 1308.991552][ T4549] netlink: 256 bytes leftover after parsing attributes in process `syz.5.12172'. [ 1309.029276][ T4549] unsupported nlmsg_type 40 [ 1309.819866][ T4580] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12185'. [ 1310.514900][ T4597] SELinux: invalid class [ 1310.525362][ T4597] SELinux: failed to load policy [ 1310.809178][ T4606] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[2293] was attempted by ""[4606] [ 1310.966008][ T1969] IPVS: starting estimator thread 0... [ 1311.055287][ T4618] IPVS: using max 76 ests per chain, 182400 per kthread [ 1311.342282][ T4629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12207'. [ 1311.342298][ T4629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12207'. [ 1311.342398][ T4629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12207'. [ 1311.342407][ T4629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12207'. [ 1311.549197][ T4634] fuse: fd is not a fuse device [ 1311.840590][ T4649] overlayfs: failed to clone upperpath [ 1311.963452][ T10] net_ratelimit: 25 callbacks suppressed [ 1311.963467][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1312.035026][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1312.035459][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1312.437749][ T4685] fuse: fd is not a fuse device [ 1312.603125][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1312.997723][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1313.076396][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1313.077156][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1313.298709][ T4697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1313.298791][ T4697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1313.298900][ T4697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1313.902086][ T4734] netlink: 44 bytes leftover after parsing attributes in process `syz.2.12247'. [ 1313.902104][ T4734] netlink: 43 bytes leftover after parsing attributes in process `syz.2.12247'. [ 1313.902112][ T4734] netlink: 'syz.2.12247': attribute type 6 has an invalid length. [ 1313.902118][ T4734] netlink: 'syz.2.12247': attribute type 5 has an invalid length. [ 1313.902125][ T4734] netlink: 43 bytes leftover after parsing attributes in process `syz.2.12247'. [ 1314.023861][ T31] audit: type=1400 audit(1792131491.051:8311): avc: denied { write } for pid=4702 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1314.227809][ T31] audit: type=1400 audit(1792131491.261:8312): avc: denied { write } for pid=4740 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1314.896609][T13453] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1315.045923][T13453] usb 5-1: Using ep0 maxpacket: 16 [ 1315.047830][T13453] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1315.048641][T13453] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 1315.048655][T13453] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1315.048667][T13453] usb 5-1: config 0 has no interface number 0 [ 1315.051015][T13453] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1315.051028][T13453] usb 5-1: Product: syz [ 1315.051037][T13453] usb 5-1: Manufacturer: syz [ 1315.051046][T13453] usb 5-1: SerialNumber: syz [ 1315.286808][ T31] audit: type=1400 audit(1792131492.321:8313): avc: denied { write } for pid=4755 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1315.491256][ T31] audit: type=1400 audit(1792131492.521:8314): avc: denied { write } for pid=4787 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1315.625283][ T4794] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12264'. [ 1316.391630][ T4804] FAULT_INJECTION: forcing a failure. [ 1316.391630][ T4804] name failslab, interval 1, probability 0, space 0, times 0 [ 1316.391653][ T4804] CPU: 0 UID: 0 PID: 4804 Comm: syz.6.12267 Tainted: G L syzkaller #0 PREEMPT(full) [ 1316.391670][ T4804] Tainted: [L]=SOFTLOCKUP [ 1316.391675][ T4804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1316.391682][ T4804] Call Trace: [ 1316.391687][ T4804] [ 1316.391693][ T4804] dump_stack_lvl+0x100/0x190 [ 1316.391714][ T4804] should_fail_ex.cold+0x5/0xa [ 1316.391732][ T4804] should_failslab+0xc2/0x120 [ 1316.391750][ T4804] __kvmalloc_node_noprof+0x113/0x9b0 [ 1316.391769][ T4804] ? bpf_compute_live_registers+0x159/0x1650 [ 1316.391787][ T4804] bpf_compute_live_registers+0x159/0x1650 [ 1316.391805][ T4804] ? bpf_compute_scc+0x940/0xad0 [ 1316.391819][ T4804] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 1316.391838][ T4804] bpf_check+0x7e8a/0xac70 [ 1316.391854][ T4804] ? __css_rstat_updated+0x1ce/0x590 [ 1316.391869][ T4804] ? __lock_acquire+0x5c0/0x1f40 [ 1316.391884][ T4804] ? __pfx___css_rstat_updated+0x10/0x10 [ 1316.391909][ T4804] ? __pfx_bpf_check+0x10/0x10 [ 1316.391925][ T4804] ? lock_acquire+0x1d1/0x380 [ 1316.391937][ T4804] ? bpf_prog_load+0x1a27/0x2ab0 [ 1316.391953][ T4804] ? find_held_lock+0x2b/0x80 [ 1316.391969][ T4804] ? bpf_prog_load+0x1a27/0x2ab0 [ 1316.391987][ T4804] ? __asan_memset+0x23/0x50 [ 1316.392003][ T4804] ? bpf_prog_load+0x1ae1/0x2ab0 [ 1316.392018][ T4804] bpf_prog_load+0x1ae1/0x2ab0 [ 1316.392038][ T4804] ? __pfx_bpf_prog_load+0x10/0x10 [ 1316.392066][ T4804] __sys_bpf+0x1f46/0x4a30 [ 1316.392083][ T4804] ? __pfx___sys_bpf+0x10/0x10 [ 1316.392095][ T4804] ? find_held_lock+0x2b/0x80 [ 1316.392110][ T4804] ? futex_wake+0x4ea/0x5e0 [ 1316.392133][ T4804] ? do_getname+0x191/0x390 [ 1316.392155][ T4804] ? __x64_sys_futex+0x34f/0x4d0 [ 1316.392171][ T4804] ? __x64_sys_futex+0x358/0x4d0 [ 1316.392187][ T4804] ? __pfx___x64_sys_mq_open+0x10/0x10 [ 1316.392208][ T4804] ? xfd_validate_state+0x129/0x190 [ 1316.392223][ T4804] ? __x64_sys_bpf+0xce/0x140 [ 1316.392236][ T4804] __x64_sys_bpf+0xce/0x140 [ 1316.392249][ T4804] ? do_syscall_64+0xae/0x790 [ 1316.392268][ T4804] do_syscall_64+0x123/0x790 [ 1316.392287][ T4804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1316.392299][ T4804] RIP: 0033:0x7f516ed9e559 [ 1316.392309][ T4804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1316.392319][ T4804] RSP: 002b:00007f516fbee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1316.392331][ T4804] RAX: ffffffffffffffda RBX: 00007f516f025fa0 RCX: 00007f516ed9e559 [ 1316.392339][ T4804] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 1316.392347][ T4804] RBP: 00007f516ee358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1316.392355][ T4804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1316.392362][ T4804] R13: 00007f516f026038 R14: 00007f516f025fa0 R15: 00007ffebb548328 [ 1316.392378][ T4804] [ 1316.831351][ T4809] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12269'. [ 1316.850175][ T4809] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12269'. [ 1316.908373][ T4812] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12271'. [ 1316.972701][ T4814] netlink: 'syz.0.12273': attribute type 1 has an invalid length. [ 1317.008786][ T4814] bond4: entered promiscuous mode [ 1317.013381][ T4814] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1317.030703][ T4817] netlink: 1363 bytes leftover after parsing attributes in process `syz.6.12274'. [ 1317.103494][ T4814] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1317.103654][ T4814] bond4: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 1317.103664][ T4814] bond4: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 1317.141728][ T4814] bond4: (slave ip6gre1): making interface the new active one [ 1317.141743][ T4814] ip6gre1: entered promiscuous mode [ 1317.142372][ T4814] bond4: (slave ip6gre1): Enslaving as an active interface with an up link [ 1317.235162][ C0] net_ratelimit: 15 callbacks suppressed [ 1317.235178][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1317.235843][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1317.237745][T13453] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1317.461840][ T31] audit: type=1400 audit(1792131494.491:8315): avc: denied { listen } for pid=4834 comm="syz.6.12282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1317.669447][T15613] usb 5-1: USB disconnect, device number 64 [ 1318.197510][ T4860] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1318.275167][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1318.275556][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1318.276644][T15614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1318.376827][ T10] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1318.525516][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 1318.527429][ T10] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 1318.527813][ T10] usb 3-1: config 0 has no interfaces? [ 1318.530323][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1318.530336][ T10] usb 3-1: Product: syz [ 1318.530344][ T10] usb 3-1: Manufacturer: syz [ 1318.530352][ T10] usb 3-1: SerialNumber: syz [ 1318.676231][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1319.059472][ T4883] FAULT_INJECTION: forcing a failure. [ 1319.059472][ T4883] name failslab, interval 1, probability 0, space 0, times 0 [ 1319.059495][ T4883] CPU: 0 UID: 0 PID: 4883 Comm: syz.6.12300 Tainted: G L syzkaller #0 PREEMPT(full) [ 1319.059512][ T4883] Tainted: [L]=SOFTLOCKUP [ 1319.059517][ T4883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1319.059525][ T4883] Call Trace: [ 1319.059529][ T4883] [ 1319.059535][ T4883] dump_stack_lvl+0x100/0x190 [ 1319.059556][ T4883] should_fail_ex.cold+0x5/0xa [ 1319.059572][ T4883] should_failslab+0xc2/0x120 [ 1319.059591][ T4883] __kvmalloc_node_noprof+0x113/0x9b0 [ 1319.059607][ T4883] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 1319.059620][ T4883] ? alloc_netdev_mqs+0xf5f/0x15c0 [ 1319.059634][ T4883] alloc_netdev_mqs+0xf5f/0x15c0 [ 1319.059649][ T4883] vlan_ioctl_handler+0x724/0xa70 [ 1319.059668][ T4883] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 1319.059689][ T4883] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1319.059709][ T4883] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 1319.059728][ T4883] sock_ioctl+0x5e9/0x6b0 [ 1319.059745][ T4883] ? __pfx_sock_ioctl+0x10/0x10 [ 1319.059765][ T4883] ? selinux_file_ioctl+0x13b/0x290 [ 1319.059781][ T4883] ? selinux_file_ioctl+0xb6/0x290 [ 1319.059797][ T4883] ? __pfx_sock_ioctl+0x10/0x10 [ 1319.059813][ T4883] __x64_sys_ioctl+0x18e/0x210 [ 1319.059828][ T4883] do_syscall_64+0x123/0x790 [ 1319.059846][ T4883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1319.059859][ T4883] RIP: 0033:0x7f516ed9e559 [ 1319.059869][ T4883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1319.059879][ T4883] RSP: 002b:00007f516fbee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1319.059891][ T4883] RAX: ffffffffffffffda RBX: 00007f516f025fa0 RCX: 00007f516ed9e559 [ 1319.059898][ T4883] RDX: 0000200000000280 RSI: 0000000000008982 RDI: 0000000000000004 [ 1319.059905][ T4883] RBP: 00007f516ee358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1319.059911][ T4883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1319.059918][ T4883] R13: 00007f516f026038 R14: 00007f516f025fa0 R15: 00007ffebb548328 [ 1319.059933][ T4883] [ 1319.317177][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1319.317403][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1319.317669][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1319.753826][ T4894] netlink: 44 bytes leftover after parsing attributes in process `syz.6.12304'. [ 1319.753842][ T4894] netlink: 43 bytes leftover after parsing attributes in process `syz.6.12304'. [ 1319.753851][ T4894] netlink: 'syz.6.12304': attribute type 5 has an invalid length. [ 1319.753859][ T4894] netlink: 43 bytes leftover after parsing attributes in process `syz.6.12304'. [ 1321.110829][T15613] usb 3-1: USB disconnect, device number 54 [ 1321.141796][ T4949] FAULT_INJECTION: forcing a failure. [ 1321.141796][ T4949] name failslab, interval 1, probability 0, space 0, times 0 [ 1321.141824][ T4949] CPU: 0 UID: 0 PID: 4949 Comm: syz.4.12322 Tainted: G L syzkaller #0 PREEMPT(full) [ 1321.141843][ T4949] Tainted: [L]=SOFTLOCKUP [ 1321.141848][ T4949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1321.141857][ T4949] Call Trace: [ 1321.141862][ T4949] [ 1321.141868][ T4949] dump_stack_lvl+0x100/0x190 [ 1321.141889][ T4949] should_fail_ex.cold+0x5/0xa [ 1321.141907][ T4949] should_failslab+0xc2/0x120 [ 1321.141927][ T4949] __kmalloc_cache_node_noprof+0x94/0x720 [ 1321.141946][ T4949] ? blkg_alloc+0xbd/0xf80 [ 1321.141967][ T4949] blkg_alloc+0xbd/0xf80 [ 1321.141984][ T4949] ? mark_held_locks+0x40/0x70 [ 1321.141998][ T4949] ? _raw_spin_unlock_irq+0x23/0x50 [ 1321.142016][ T4949] blkg_conf_prep+0x46e/0xf10 [ 1321.142040][ T4949] tg_set_conf.isra.0+0x1ed/0x500 [ 1321.142055][ T4949] ? __pfx_tg_set_conf.isra.0+0x10/0x10 [ 1321.142071][ T4949] ? kernfs_root+0xf8/0x2a0 [ 1321.142088][ T4949] cgroup_file_write+0x1e6/0x8a0 [ 1321.142104][ T4949] ? __pfx_tg_set_conf_uint+0x10/0x10 [ 1321.142124][ T4949] ? __pfx_cgroup_file_write+0x10/0x10 [ 1321.142140][ T4949] ? __kmalloc_noprof+0x350/0x840 [ 1321.142160][ T4949] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1321.142175][ T4949] ? __pfx_cgroup_file_write+0x10/0x10 [ 1321.142194][ T4949] vfs_write+0x6af/0x1050 [ 1321.142210][ T4949] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1321.142227][ T4949] ? __pfx_vfs_write+0x10/0x10 [ 1321.142241][ T4949] ? find_held_lock+0x2b/0x80 [ 1321.142270][ T4949] ksys_write+0x12a/0x250 [ 1321.142284][ T4949] ? __pfx_ksys_write+0x10/0x10 [ 1321.142302][ T4949] do_syscall_64+0x123/0x790 [ 1321.142320][ T4949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1321.142332][ T4949] RIP: 0033:0x7f3c65f9e559 [ 1321.142342][ T4949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1321.142353][ T4949] RSP: 002b:00007f3c66eab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1321.142365][ T4949] RAX: ffffffffffffffda RBX: 00007f3c66225fa0 RCX: 00007f3c65f9e559 [ 1321.142372][ T4949] RDX: 0000000000000006 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1321.142379][ T4949] RBP: 00007f3c660358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1321.142386][ T4949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1321.142392][ T4949] R13: 00007f3c66226038 R14: 00007f3c66225fa0 R15: 00007ffc0c166e18 [ 1321.142408][ T4949] [ 1322.196728][ T32] INFO: task syz.1.11037:691 blocked for more than 143 seconds. [ 1322.196748][ T32] Tainted: G L syzkaller #0 [ 1322.196755][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1322.196760][ T32] task:syz.1.11037 state:D stack:27032 pid:691 tgid:690 ppid:27531 task_flags:0x400140 flags:0x00080002 [ 1322.196792][ T32] Call Trace: [ 1322.196797][ T32] [ 1322.196804][ T32] __schedule+0x1259/0x6920 [ 1322.196822][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 1322.196843][ T32] ? lock_acquire+0x1d1/0x380 [ 1322.196857][ T32] ? __pfx___schedule+0x10/0x10 [ 1322.196870][ T32] ? find_held_lock+0x2b/0x80 [ 1322.196888][ T32] ? schedule+0x225/0x2c0 [ 1322.197166][ T32] schedule+0xdd/0x2c0 [ 1322.197181][ T32] cgroup_lock_and_drain_offline+0x383/0x800 [ 1322.197198][ T32] ? __pfx_cgroup_lock_and_drain_offline+0x10/0x10 [ 1322.197212][ T32] ? rcu_is_watching+0x13/0xc0 [ 1322.197229][ T32] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1322.197243][ T32] ? bpf_lsm_capable+0x9/0x10 [ 1322.197255][ T32] ? security_capable+0x80/0x260 [ 1322.197270][ T32] cgroup1_get_tree+0xc2/0x1620 [ 1322.197283][ T32] ? bpf_lsm_capable+0x9/0x10 [ 1322.197294][ T32] ? security_capable+0x80/0x260 [ 1322.197309][ T32] vfs_get_tree+0x92/0x320 [ 1322.197322][ T32] path_mount+0x7d0/0x2850 [ 1322.197337][ T32] ? __pfx_path_mount+0x10/0x10 [ 1322.197348][ T32] ? lockdep_hardirqs_on+0x7d/0x110 [ 1322.197366][ T32] ? putname+0xb1/0x110 [ 1322.197375][ T32] ? kmem_cache_free+0x127/0x6c0 [ 1322.197393][ T32] ? __x64_sys_mount+0x293/0x310 [ 1322.197405][ T32] __x64_sys_mount+0x293/0x310 [ 1322.197417][ T32] ? __pfx___x64_sys_mount+0x10/0x10 [ 1322.197434][ T32] do_syscall_64+0x123/0x790 [ 1322.197452][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1322.197464][ T32] RIP: 0033:0x7fd33d19e559 [ 1322.197473][ T32] RSP: 002b:00007fd33e04c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1322.197484][ T32] RAX: ffffffffffffffda RBX: 00007fd33d425fa0 RCX: 00007fd33d19e559 [ 1322.197492][ T32] RDX: 0000200000000380 RSI: 0000200000000340 RDI: 0000000000000000 [ 1322.197499][ T32] RBP: 00007fd33d2358b0 R08: 00002000000003c0 R09: 0000000000000000 [ 1322.197506][ T32] R10: 0000000002008000 R11: 0000000000000246 R12: 0000000000000000 [ 1322.197513][ T32] R13: 00007fd33d426038 R14: 00007fd33d425fa0 R15: 00007ffdaef2c718 [ 1322.197528][ T32] [ 1322.197562][ T32] [ 1322.197562][ T32] Showing all locks held in the system: [ 1322.197569][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 1322.197578][ T32] #0: ffffffff8fdec5e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1322.197631][ T32] locks held by dhcpcd/5264: 2, on CPU#0: [ 1322.197639][ T32] #0: ffff8880567706e8 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0x150/0x990 [ 1322.197670][ T32] #1: ffffffff91cd5a80 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dump_ifinfo+0xa53/0x14b0 [ 1322.197707][ T32] locks held by getty/21519: 2, on CPU#0: [ 1322.197715][ T32] #0: ffff888027d260a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1322.197748][ T32] #1: ffffc90004ba32e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 1322.197778][ T32] locks held by syz-executor/32618: 4, last CPU#0: [ 1322.197786][ T32] #0: ffffffff8ff3de50 (dup_mmap_sem){++++}-{0:0}, at: copy_process+0x4816/0x8380 [ 1322.197813][ T32] #1: ffff8880380ab440 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x127/0x2370 [ 1322.197843][ T32] #2: ffff8880257c7180 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x1c9/0x2370 [ 1322.197880][ T32] #3: ffffffff8fdec5e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 1322.197918][ T32] locks held by syz.5.12327/4975: 3, last CPU#0: [ 1322.197926][ T32] #0: ffffffff91d848c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1322.197950][ T32] #1: ffffffff91cd5a80 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0xb4/0xae0 [ 1322.197980][ T32] #2: ffffffff8fdf84e8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 1322.198006][ T32] locks held by syz.2.12330/4977: 1, last CPU#0: [ 1322.198014][ T32] #0: ffff88803194e0a0 (&ctx->uring_lock){+.+.}-{4:4}, at: __do_sys_io_uring_enter+0xa7e/0x1b10 [ 1322.198050][ T32] locks held by syz.4.12333/4986: 1, on CPU#0: [ 1322.198058][ T32] #0: ffffffff91cd5a80 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x23d/0x4880 [ 1322.198088][ T32] [ 1322.198091][ T32] ============================================= [ 1322.198091][ T32] [ 1322.198096][ T32] NMI backtrace for cpu 0 [ 1322.198105][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1322.198120][ T32] Tainted: [L]=SOFTLOCKUP [ 1322.198124][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1322.198130][ T32] Call Trace: [ 1322.198134][ T32] [ 1322.198138][ T32] dump_stack_lvl+0x100/0x190 [ 1322.198155][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1322.198174][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1322.198187][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 1322.198202][ T32] sys_info+0x141/0x190 [ 1322.198214][ T32] watchdog+0xcb1/0x1030 [ 1322.198231][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1322.198246][ T32] ? __pfx_watchdog+0x10/0x10 [ 1322.198260][ T32] ? __kthread_parkme+0x18f/0x230 [ 1322.198276][ T32] ? kthread+0x13a/0x450 [ 1322.198291][ T32] ? __pfx_watchdog+0x10/0x10 [ 1322.198304][ T32] kthread+0x373/0x450 [ 1322.198319][ T32] ? __pfx_kthread+0x10/0x10 [ 1322.198335][ T32] ret_from_fork+0x730/0xd60 [ 1322.198349][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1322.198363][ T32] ? __switch_to+0x800/0x10f0 [ 1322.198379][ T32] ? __pfx_kthread+0x10/0x10 [ 1322.198395][ T32] ret_from_fork_asm+0x1a/0x30 [ 1322.198413][ T32] [ 1322.198420][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1322.751606][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1322.762253][ T32] Tainted: [L]=SOFTLOCKUP [ 1322.766559][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1322.776585][ T32] Call Trace: [ 1322.779840][ T32] [ 1322.782757][ T32] dump_stack_lvl+0x100/0x190 [ 1322.787424][ T32] vpanic+0x553/0x970 [ 1322.791401][ T32] ? __pfx_vpanic+0x10/0x10 [ 1322.795896][ T32] panic+0xd1/0xe0 [ 1322.799592][ T32] ? __pfx_panic+0x10/0x10 [ 1322.803981][ T32] ? nmi_cpu_backtrace+0x79/0x200 [ 1322.808992][ T32] ? nmi_trigger_cpumask_backtrace+0x206/0x2a0 [ 1322.815120][ T32] ? watchdog.cold+0x1ec/0x234 [ 1322.819859][ T32] watchdog.cold+0x1fd/0x234 [ 1322.824429][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1322.830222][ T32] ? __pfx_watchdog+0x10/0x10 [ 1322.834887][ T32] ? __kthread_parkme+0x18f/0x230 [ 1322.839885][ T32] ? kthread+0x13a/0x450 [ 1322.844104][ T32] ? __pfx_watchdog+0x10/0x10 [ 1322.848753][ T32] kthread+0x373/0x450 [ 1322.852796][ T32] ? __pfx_kthread+0x10/0x10 [ 1322.857362][ T32] ret_from_fork+0x730/0xd60 [ 1322.861935][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1322.867028][ T32] ? __switch_to+0x800/0x10f0 [ 1322.871681][ T32] ? __pfx_kthread+0x10/0x10 [ 1322.876247][ T32] ret_from_fork_asm+0x1a/0x30 [ 1322.880998][ T32] [ 1322.884001][ T32] Kernel Offset: disabled [ 1322.888298][ T32] Rebooting in 86400 seconds..