last executing test programs: 12m33.655544267s ago: executing program 3 (id=789): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000280)={0x1f, @none}, 0x8) listen(r0, 0x3) setsockopt$bt_BT_VOICE(r0, 0x112, 0x13, 0x0, 0x49) 12m33.580606128s ago: executing program 3 (id=791): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(r1, 0x8010aebb, &(0x7f0000000240)={0x9000, 0xc000}) 12m33.362740903s ago: executing program 3 (id=795): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000700)=0x254e, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000740)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000780)={&(0x7f00000007c0)={0x1d, r1}, 0x10, &(0x7f0000000800)={&(0x7f0000000840)=@can={{0x1, 0x0, 0x1, 0x1}, 0x2, 0x1, 0x0, 0x0, "68b48f76cd92b45a"}, 0x10}, 0x1, 0x0, 0x0, 0x2400c054}, 0x4000811) 12m33.172531519s ago: executing program 3 (id=799): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000180)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000280), 0x366, 0x10, &(0x7f0000000380), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)={@map=r1, r0, 0x26}, 0x10) 12m33.035853657s ago: executing program 3 (id=802): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000180)={0x2c, &(0x7f00000001c0)={0x40, 0x14, 0xc, "281e0c8808c1bf7651ef4aaa"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000480)={0x40, 0x16, 0x28, "a4a42fa1dff66a211ab74ba02e0bd76432a990db90392812079b33204cfdaa36fae30e94b3c38d27"}, 0x0, 0x0}) 12m31.105216491s ago: executing program 4 (id=832): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000500)={0x48, 0x2, r1}) ioctl(r0, 0x3b89, &(0x7f00000005c0)="30000000040000000300000001") 12m31.074276224s ago: executing program 3 (id=833): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0xf, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000640)={0x34, &(0x7f0000000340)={0x0, 0x3, 0x3, "07dec5"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 12m30.943028965s ago: executing program 4 (id=834): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 12m30.870810534s ago: executing program 4 (id=835): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x800000972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) msgrcv(0x0, 0x0, 0x0, 0x1, 0x3000) 12m30.746530891s ago: executing program 2 (id=838): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x1f, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000085000000d000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 12m30.676365217s ago: executing program 2 (id=839): r0 = io_uring_setup(0x6618, &(0x7f0000000200)={0x0, 0x0, 0x800}) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f00000002c0)={0x3e8, 0x1, 0x0, '\x00', 0x1}, 0x1) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000300)={0xff, 0x0, 0x1, '\x00', 0xb}, 0x1) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000340)={0x29a, 0xe3, 0x2, '\x00', 0xb}, 0x1) 12m30.530267971s ago: executing program 2 (id=842): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000072, 0x0, 0x3}]}) 12m30.359111615s ago: executing program 4 (id=843): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x400]}}) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000100)) 12m30.358930534s ago: executing program 2 (id=844): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="6c0000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002c00028014000180080001000800ffee08000200ac1e00010c00028005000100000000000600034000010000080007"], 0x6c}}, 0x0) 12m30.170293033s ago: executing program 2 (id=846): setresuid(0x0, 0xee00, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "26a1173fb9462d3589e67197f90b08e4230300000012a5f6a31854ec98e950cfed21fcad7ffefbcb566a1582f8938caa52dd8d39af080000006ad59300", 0xfff7fffd}, 0x4629, 0xffffffffffffffff) r0 = add_key(&(0x7f0000002340)='big_key\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r0, &(0x7f00000000c0)=""/4091, 0x912) 12m30.083149301s ago: executing program 4 (id=847): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00', 0x1}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000340)={{0x6, @loopback, 0x15, 0x0, 'wlc\x00'}, {@loopback, 0x15, 0x0, 0x1, 0x7ffd}}, 0x44) setsockopt(r0, 0x0, 0x489, &(0x7f0000000400)="060000007f00000100150000000000006d6800000000000000000000000000000000000000000000000000007f000001001500"/68, 0x44) 12m30.038817953s ago: executing program 2 (id=849): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000b00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x1a, 0xffffffffffffffee, &(0x7f0000000080)="630b008646dc3f0adf398151d9000000000000000000ea1f0000", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x2f) 12m29.856736508s ago: executing program 4 (id=850): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000980), 0x4) 11m31.555149772s ago: executing program 32 (id=841): r0 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x400, 0x4, 0x1b, 0xfe}, {0x9, 0x5, 0x8, 0x2, 0x200, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB=' \rH\x00\x00\x00H'], 0x0, 0x0, 0x0, 0x0}, 0x0) 8m30.360301769s ago: executing program 33 (id=848): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f00000001c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000780)=[{&(0x7f00000002c0)="8a0ccac1", 0x4}], 0x1}}], 0x1, 0x2000c090) close(r0) 8m30.291015756s ago: executing program 34 (id=849): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000b00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x1a, 0xffffffffffffffee, &(0x7f0000000080)="630b008646dc3f0adf398151d9000000000000000000ea1f0000", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x2f) 8m30.220663681s ago: executing program 35 (id=833): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0xf, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000640)={0x34, &(0x7f0000000340)={0x0, 0x3, 0x3, "07dec5"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 8m30.071991027s ago: executing program 36 (id=850): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000980), 0x4) 4m49.194841434s ago: executing program 7 (id=4037): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/dynamic_events\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)="653a6d7967726f7570f11f796576656ebee1b45e6231b51ba5c38b3b747f56822f07161116eb65417c389c5b2cb288608e2fe3e704292fa537c7aac1cb0ee05ba3406d2fd49a02e6c414b9b7dea4046fda64825bd98bc963580be25615068fb774", 0x61) 4m49.030479905s ago: executing program 7 (id=4040): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x2, &(0x7f0000000380)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x8, r0, 0x0, 0x0, 0x2, 0x0, 0x2}]) 4m48.008720405s ago: executing program 7 (id=4062): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001080)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x1841}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000340)={r1, 0x1}, 0x8) 4m47.786496265s ago: executing program 7 (id=4064): syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 4m46.918918641s ago: executing program 7 (id=4076): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 4m46.91794638s ago: executing program 7 (id=4077): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r2}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 4m31.803120536s ago: executing program 37 (id=4077): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r2}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 1m31.413889878s ago: executing program 9 (id=6781): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r2 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) close(r1) execveat$binfmt(r2, r0, 0x0, 0x0, 0x0) 1m31.231533608s ago: executing program 9 (id=6782): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x59) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff48, 0x0, 0x0, 0x26410, 0x0, 0x9, 0x0, &(0x7f0000000140)='\x00', 0x0}, 0x48) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000180), 0x4, 0x2000000000000357}}, 0x3c) 1m31.092716133s ago: executing program 9 (id=6785): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000640)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000680)=ANY=[@ANYBLOB="034886dd0100000000001400000060000000002806"], 0xfdef) 1m30.831050923s ago: executing program 9 (id=6790): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) open(&(0x7f0000000100)='./file0\x00', 0x1419c2, 0x1cf) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 1m30.782245917s ago: executing program 9 (id=6792): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='appraise func=FIRMWARE_CHECK', 0x1c) close(r0) 1m29.518940787s ago: executing program 9 (id=6811): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/devices/system/memory/memory41/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)='offline', 0x7) write(0xffffffffffffffff, 0x0, 0x0) 1m29.275252734s ago: executing program 38 (id=6811): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/devices/system/memory/memory41/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)='offline', 0x7) write(0xffffffffffffffff, 0x0, 0x0) 5.370141881s ago: executing program 0 (id=7685): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000000)="8b", 0x34000, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='X', 0x34000, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x1, @loopback}}, 0x100, 0x0, 0xfffffffc, 0x2, 0x54, 0x3, 0x73}, 0x9c) 4.404460312s ago: executing program 0 (id=7697): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000040)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688a84c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.835381351s ago: executing program 5 (id=7703): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x4000) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) r2 = dup3(r1, r0, 0x80000) read$msr(r2, 0x0, 0x0) 3.628847481s ago: executing program 0 (id=7708): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000000)={0x100c000, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f00000000c0)={0x1, 0x4, 0x10000, 0x1000000, &(0x7f0000000000/0x1000000)=nil, 0x0, r2}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000180)={0x10000, 0x1000000}) 3.369428924s ago: executing program 5 (id=7710): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000380)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f00000004c0)=@NCI_OP_CORE_RESET_RSP={0x0, 0x0, 0x2, 0x0, 0x3, {0x1, 0x1}}, 0x6) 3.098221286s ago: executing program 5 (id=7713): r0 = syz_clone(0x200000, 0x0, 0x36, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000400)='stat\x00') pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4) 2.685392317s ago: executing program 5 (id=7718): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x84000, 0x0) 2.473218091s ago: executing program 5 (id=7721): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_io_uring_setup(0x10, &(0x7f0000000140)={0x0, 0x0, 0x800}, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1}}) syz_io_uring_submit(r2, r3, r4, &(0x7f00000003c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x1dcd6500}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x6, 0x0, 0x0, 0x0, 0x0) 2.426218125s ago: executing program 0 (id=7722): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) listen(r0, 0x5) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="02c90012000e00050014420a008000400003e3ee"], 0x17) accept4(r0, 0x0, 0x0, 0x0) 2.414211917s ago: executing program 6 (id=7723): mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x161, 0x103) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4'], 0x34}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$cgroup_ro(r0, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 2.316628177s ago: executing program 1 (id=7725): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="0123456789abcdef0123456789abcdef", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) read$alg(r1, &(0x7f0000000700)=""/16, 0x10) 2.291115621s ago: executing program 6 (id=7726): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0xffffffff, @host}, 0x10) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000100)={0x0, 0xea60}, 0x10) connect$vsock_stream(r0, &(0x7f0000000300)={0x28, 0x0, 0xffffffff}, 0x10) connect$vsock_stream(r0, &(0x7f0000000200), 0x10) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2711, @host}, 0x10) 2.235956477s ago: executing program 1 (id=7727): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) getpriority(0x2, 0x0) 2.181092076s ago: executing program 1 (id=7728): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) 2.118923105s ago: executing program 5 (id=7729): unshare(0x6a060000) syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="120100033ca7ff1063110001bb23010203010902"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x4c}}, 0x80e0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x58, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_IFACE={0x14, 0x17, 'vlan0\x00'}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 2.112416282s ago: executing program 1 (id=7730): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x200, 0x70bd2d, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x5, 0x0, 0x3, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xae, 0xfff, 0xffffffffffffffff, 0x400, 0xffffffffffffffff, 0x7fffffff, 0x10000}, {0x2, 0xffff, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@mark={0xc, 0x15, {0x35075b, 0x1}}]}, 0xc4}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001"], 0xfc}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f00000010c0)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001180)={r1, 0x18000000000002a0, 0xfe, 0x11, &(0x7f0000001200)="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", 0x0, 0x8024, 0x60000000, 0x0, 0x0, &(0x7f0000001300), &(0x7f0000001340)}, 0x2a) 2.070635528s ago: executing program 6 (id=7731): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) socket$kcm(0x1e, 0x4, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000090601020000000000006ce6016000000900020073797a31000000000500010007000000280007800c00018008000140640101010c00148008000140ac1414bb0c00028008000140"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 1.930389255s ago: executing program 8 (id=7732): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010829bd7002000000000700000005001300091000001400080000000000000000000000000000000000050014"], 0x38}}, 0x0) 1.787216469s ago: executing program 8 (id=7733): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./mnt\x00', 0x1a7) mount(&(0x7f0000000380)=@filename='./dev/sda1\x00', &(0x7f00000005c0)='./mnt\x00', &(0x7f0000000600)='ext4\x00', 0x40, 0x0) r0 = open$dir(&(0x7f0000000640)='./mnt\x00', 0x0, 0x2) renameat2(r0, &(0x7f0000000680)='./mnt\x00', r0, &(0x7f00000006c0)='./dev\x00', 0x2) 1.729694933s ago: executing program 8 (id=7734): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000240)={@loopback, 0x800, 0x0, 0x3, 0x1, 0x8, 0x8000}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000280)=0x2005, 0x4) sendmsg$inet6(r1, &(0x7f00000002c0)={&(0x7f0000000300)={0xa, 0x4e20, 0x180000, @mcast1, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000029000000360000002f0000000000000018"], 0x30}, 0x0) 1.602365827s ago: executing program 8 (id=7735): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000e80)=@newqdisc={0x264, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x234, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x264}}, 0x0) 1.110637154s ago: executing program 1 (id=7736): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mount$fuse(0x0, &(0x7f0000000080)='./dev\x00', 0x0, 0x88820, 0x0) 1.091657022s ago: executing program 6 (id=7737): connect$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd2c, 0x25dfdc00, {0x7, 0x0, 0x0, 0x0, 0x0, 0x8e, 0x7}, [@NDA_LLADDR={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x40044805}, 0x840) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050427bd7000ffdbdf250100000008000100", @ANYRES32=r2], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4c004) 935.12728ms ago: executing program 0 (id=7738): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x40ce, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x202, 0x150) write(r0, &(0x7f0000000000)='27', 0x2) keyctl$set_reqkey_keyring(0xe, 0x4) mount$9p_unix(&(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0), 0x800000, &(0x7f0000000300)) 916.807399ms ago: executing program 8 (id=7739): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0x42799000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002000)=@delchain={0x24, 0x66, 0x49404108a2eb2df, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {}, {0xffeb, 0x1d0c5d7c03b59b98}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) 817.168043ms ago: executing program 6 (id=7740): r0 = socket$tipc(0x1e, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='7', 0x1) bind$tipc(r0, &(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) 449.013237ms ago: executing program 0 (id=7741): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 420.692805ms ago: executing program 1 (id=7742): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./tracing\x00', &(0x7f0000000180)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x141000, 0x24) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82800, 0x0) ioctl$OCFS2_IOC_GROUP_EXTEND(r1, 0x5220, 0x0) 364.647319ms ago: executing program 8 (id=7743): pipe(0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180), 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x16, 0x14, &(0x7f0000000380)=ANY=[@ANYBLOB="18050000080000000000000003000000b7080000000000007b8af8ff00000000b70800000b5900007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r2, 0xfffff000, 0xe, 0x0, &(0x7f0000000500)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 6 (id=7744): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000040)={0x0, [[0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x2000000, 0x1, 0x0, 0x0, 0x1, 0x80000003, 0x0, 0xfffffffc], [0x8, 0xfffffffe, 0x0, 0x2, 0xfffffffd, 0x0, 0x2, 0xfffffffd]], '\x00', [{0xfffffffe, 0xf8}, {}, {0xffffffff, 0x10000}, {0xfffffff, 0x10000000, 0x0, 0x1}, {0x3, 0xffffffff}, {0x1, 0x5}, {}, {0x0, 0x4004}, {0x0, 0x7f}, {0x2}, {0x0, 0x8}, {0x401, 0xfffffffc}], '\x00', 0x1, 0x0, 0x0, 0xf8}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl(r1, 0x4048aec9, &(0x7f0000000140)="030000000000000001000000050000000000000001") kernel console output (not intermixed with test programs): queue, screwing up backlog [ 785.955544][T22283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.999389][T22283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.013885][T22283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.064447][T22281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.474656][T22307] ip6erspan0: entered allmulticast mode [ 786.847796][T22321] fuse: fd is not a fuse device [ 787.760205][ T7770] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 787.909921][ T7770] usb 6-1: Using ep0 maxpacket: 8 [ 787.910638][ T7770] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 787.911355][ T7770] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 787.911379][ T7770] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.276409][ T4924] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 788.297851][ T4924] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 788.309971][ T4924] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 788.317428][ T4924] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 788.317695][ T4924] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 788.823966][T22364] rxe_eth0 speed is unknown, defaulting to 1000 [ 789.156605][ T1375] net_ratelimit: 7 callbacks suppressed [ 789.156626][ T1375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.279762][T22387] tipc: Started in network mode [ 789.279781][T22387] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 789.280835][T22387] tipc: Enabled bearer , priority 0 [ 789.671630][T22364] bridge0: port 1(bridge_slave_0) entered blocking state [ 789.676250][T22364] bridge0: port 1(bridge_slave_0) entered disabled state [ 789.676340][T22364] bridge_slave_0: entered allmulticast mode [ 789.678487][T22364] bridge_slave_0: entered promiscuous mode [ 789.711402][T22364] bridge0: port 2(bridge_slave_1) entered blocking state [ 789.711446][T22364] bridge0: port 2(bridge_slave_1) entered disabled state [ 789.711513][T22364] bridge_slave_1: entered allmulticast mode [ 789.717019][T22364] bridge_slave_1: entered promiscuous mode [ 789.802533][T22364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 789.820746][T22364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 789.893294][T22364] team0: Port device team_slave_0 added [ 789.909036][T22364] team0: Port device team_slave_1 added [ 789.947416][ T31] audit: type=1400 audit(1792131084.056:2246): avc: denied { write } for pid=22413 comm="syz.0.6833" name="cluster" dev="configfs" ino=1150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 789.984509][T22364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 789.984521][T22364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 789.984534][T22364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 789.986948][T22364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 789.986959][T22364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 789.986972][T22364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 790.026778][ T31] audit: type=1400 audit(1792131084.136:2247): avc: denied { listen } for pid=22414 comm="syz.8.6834" lport=48580 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 790.118862][ T31] audit: type=1400 audit(1792131084.226:2248): avc: denied { write } for pid=22413 comm="syz.0.6833" name="node" dev="configfs" ino=88585 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 790.158438][ T31] audit: type=1400 audit(1792131084.266:2249): avc: denied { write } for pid=22413 comm="syz.0.6833" name="node" dev="configfs" ino=88585 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 790.158470][ T31] audit: type=1400 audit(1792131084.266:2250): avc: denied { remove_name } for pid=22413 comm="syz.0.6833" name="node0" dev="configfs" ino=88587 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 790.158492][ T31] audit: type=1400 audit(1792131084.266:2251): avc: denied { rmdir } for pid=22413 comm="syz.0.6833" name="node0" dev="configfs" ino=88587 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 790.288736][T22364] hsr_slave_0: entered promiscuous mode [ 790.289231][T22364] hsr_slave_1: entered promiscuous mode [ 790.305616][T22364] debugfs: 'hsr0' already exists in 'hsr' [ 790.305632][T22364] Cannot create hsr debugfs directory [ 790.425495][ T5883] tipc: Node number set to 43690 [ 790.432368][ T5613] Bluetooth: hci1: command tx timeout [ 790.524747][ T5883] usb 6-1: USB disconnect, device number 25 [ 790.864836][ T31] audit: type=1400 audit(1792131084.976:2252): avc: denied { mounton } for pid=22432 comm="syz.0.6843" path="/508/file0" dev="configfs" ino=1062 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 790.898468][ T31] audit: type=1400 audit(1792131085.006:2253): avc: denied { read } for pid=22432 comm="syz.0.6843" name="/" dev="configfs" ino=1062 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 790.898500][ T31] audit: type=1400 audit(1792131085.006:2254): avc: denied { read } for pid=22432 comm="syz.0.6843" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 790.898521][ T31] audit: type=1400 audit(1792131085.006:2255): avc: denied { open } for pid=22432 comm="syz.0.6843" path="/508/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 791.071605][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.071918][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.061432][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.135416][T22479] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 792.494495][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.511863][ T5613] Bluetooth: hci1: command tx timeout [ 793.270149][T22522] jffs2: notice: (22522) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (0 unchecked, 1 orphan) and 5 of xref (0 dead, 1 orphan) found. [ 794.019360][ T1399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.019503][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.259702][T22553] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 794.270855][ T45] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.315808][T22364] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 794.356315][T22364] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 794.358624][T22364] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 794.411055][T22364] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 794.418112][T22364] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 794.445826][T22364] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 794.461859][T22364] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 794.489583][T22364] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 794.590633][ T4924] Bluetooth: hci1: command tx timeout [ 794.645043][T22569] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6879'. [ 794.679034][T22572] bridge0: port 2(veth0) entered blocking state [ 794.679085][T22572] bridge0: port 2(veth0) entered disabled state [ 794.679159][T22572] veth0: entered allmulticast mode [ 794.700019][T22572] veth0: entered promiscuous mode [ 794.700367][T22572] bridge0: port 2(veth0) entered blocking state [ 794.700425][T22572] bridge0: port 2(veth0) entered forwarding state [ 794.864104][T22364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 794.914902][T22364] 8021q: adding VLAN 0 to HW filter on device team0 [ 794.944472][ T197] bridge0: port 1(bridge_slave_0) entered blocking state [ 794.944522][ T197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 794.986401][ T1399] bridge0: port 2(bridge_slave_1) entered blocking state [ 794.986448][ T1399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 795.426728][ T31] kauditd_printk_skb: 9 callbacks suppressed [ 795.426740][ T31] audit: type=1400 audit(1792131089.536:2265): avc: denied { write } for pid=22560 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 795.714930][ T31] audit: type=1400 audit(1792131089.826:2266): avc: denied { write } for pid=22608 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 796.222281][ T1415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.251737][T22364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 796.385658][T22364] veth0_vlan: entered promiscuous mode [ 796.417347][T22364] veth1_vlan: entered promiscuous mode [ 796.473932][T22364] veth0_macvtap: entered promiscuous mode [ 796.491081][T22364] veth1_macvtap: entered promiscuous mode [ 796.526141][T22364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 796.544286][T22364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 796.577164][ T31] audit: type=1400 audit(1792131090.686:2267): avc: denied { write } for pid=22620 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 796.608065][ T197] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.620195][ T1415] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.621020][ T1375] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.661457][ T197] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.675256][ T4924] Bluetooth: hci1: command 0x0419 tx timeout [ 796.870073][ T1415] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 796.870089][ T1415] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 796.966528][ T31] audit: type=1400 audit(1792131091.076:2268): avc: denied { write } for pid=22647 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 797.071957][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 797.071974][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 797.362740][ T31] audit: type=1400 audit(1792131091.476:2269): avc: denied { mounton } for pid=22364 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 797.822635][ T31] audit: type=1400 audit(1792131091.936:2270): avc: denied { write } for pid=22654 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 797.861826][T22675] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 798.052695][ T31] audit: type=1400 audit(1792131092.166:2271): avc: denied { write } for pid=22684 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 798.299556][T22694] ip_tables: iptables: counters copy to user failed while replacing table [ 798.750543][ T4924] Bluetooth: hci1: command 0x0419 tx timeout [ 799.027148][ T31] audit: type=1400 audit(1792131093.136:2272): avc: denied { write } for pid=22695 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 799.217530][T22435] syz.6.6832 (22435) used greatest stack depth: 19528 bytes left [ 799.272048][ T31] audit: type=1400 audit(1792131093.376:2273): avc: denied { write } for pid=22723 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 799.426643][ T31] audit: type=1326 audit(1792131093.536:2274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22725 comm="syz.1.6920" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16ec19e559 code=0x7ffc0000 [ 799.523089][T22730] netlink: 'syz.0.6922': attribute type 4 has an invalid length. [ 799.562083][T22730] netlink: 'syz.0.6922': attribute type 4 has an invalid length. [ 799.948167][T22747] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6929'. [ 800.032643][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.446499][ T31] kauditd_printk_skb: 19 callbacks suppressed [ 800.446512][ T31] audit: type=1400 audit(1792131094.556:2294): avc: denied { write } for pid=22765 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 800.674535][ T188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.957949][ T5613] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 800.973501][ T5613] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 800.975825][ T5613] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 801.000475][ T5613] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 801.000856][ T5613] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 801.002849][ T45] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.464230][ T31] audit: type=1400 audit(1792131095.576:2295): avc: denied { write } for pid=22776 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 801.566801][T22807] ip6erspan0: entered allmulticast mode [ 801.682385][ T45] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.771832][ T31] audit: type=1400 audit(1792131095.886:2296): avc: denied { write } for pid=22814 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 801.951044][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.059267][ T45] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.101778][ T31] audit: type=1400 audit(1792131096.216:2297): avc: denied { mounton } for pid=22827 comm="syz.0.6952" path="/533/file0" dev="tmpfs" ino=2792 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 802.264493][ T45] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.294252][T22787] rxe_eth0 speed is unknown, defaulting to 1000 [ 802.735846][ T31] audit: type=1400 audit(1792131096.846:2298): avc: denied { write } for pid=22831 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 803.032121][ T31] audit: type=1400 audit(1792131097.146:2299): avc: denied { write } for pid=22860 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 803.071110][ T4924] Bluetooth: hci0: command tx timeout [ 803.127995][T22863] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6961'. [ 803.233237][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 803.233268][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 803.269282][T22863] 8021q: VLANs not supported on lo [ 803.625024][T22851] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 803.625051][T22851] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.735895][ T45] bridge_slave_1: left promiscuous mode [ 803.736583][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.780458][ T45] bridge_slave_0: left allmulticast mode [ 803.780597][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.834678][ T45] dummy0: left allmulticast mode [ 803.853021][ T45] pimreg: left allmulticast mode [ 804.056664][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 804.058188][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 804.058985][ T45] bond0 (unregistering): Released all slaves [ 804.087589][ T45] bond1 (unregistering): Released all slaves [ 804.306025][T22851] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 804.306049][T22851] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.338319][T22879] loop5: detected capacity change from 0 to 4095 [ 804.396223][ T45] : left promiscuous mode [ 804.672476][T22879] Buffer I/O error on dev loop5, logical block 511, async page read [ 804.673287][T21728] Buffer I/O error on dev loop5, logical block 511, async page read [ 804.909186][T22899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.967437][T22899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.137584][T22851] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 805.137608][T22851] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.140917][ T31] audit: type=1400 audit(1792131099.246:2300): avc: denied { write } for pid=22882 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 805.152440][ T4924] Bluetooth: hci0: command tx timeout [ 805.212689][T22904] af_packet: tpacket_rcv: packet too big, clamped from 54 to 4294967286. macoff=82 [ 805.213694][T22905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.338697][T22897] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6972'. [ 805.339122][ T45] tipc: Left network mode [ 805.475559][ T31] audit: type=1400 audit(1792131099.586:2301): avc: denied { write } for pid=22910 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 805.684553][T22851] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 805.684579][T22851] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.711151][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.793316][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.822209][T22924] binder: 22923:22924 ioctl c0306201 20000000acc0 returned -22 [ 805.825605][T22921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 805.938837][T22921] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 806.005886][T22921] 8021q: adding VLAN 0 to HW filter on device bond1 [ 806.054345][ T197] bridge0: port 2(bridge_slave_1) entered blocking state [ 806.054411][ T197] bridge0: port 2(bridge_slave_1) entered listening state [ 806.579306][ T31] audit: type=1400 audit(1792131100.686:2302): avc: denied { write } for pid=22922 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 806.702937][T22954] rnbd_client L213: map_device: Parameters missing [ 806.749913][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.817608][ T31] audit: type=1400 audit(1792131100.926:2303): avc: denied { write } for pid=22955 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 807.071329][ T1415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.231339][ T4924] Bluetooth: hci0: command tx timeout [ 807.567165][T22787] bridge0: port 1(bridge_slave_0) entered blocking state [ 807.567211][T22787] bridge0: port 1(bridge_slave_0) entered disabled state [ 807.567319][T22787] bridge_slave_0: entered allmulticast mode [ 807.592153][T22787] bridge_slave_0: entered promiscuous mode [ 807.616978][ T45] hsr_slave_0: left promiscuous mode [ 807.617764][ T45] hsr_slave_1: left promiscuous mode [ 807.618143][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 807.618155][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 807.618570][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 807.618654][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 807.684898][T22987] jffs2: notice: (22987) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (0 unchecked, 1 orphan) and 5 of xref (0 dead, 1 orphan) found. [ 807.746550][ T45] veth1_macvtap: left promiscuous mode [ 807.746576][ T45] veth0_macvtap: left promiscuous mode [ 807.746636][ T45] veth1_vlan: left promiscuous mode [ 807.746668][ T45] veth0_vlan: left promiscuous mode [ 807.789899][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.877548][ T31] audit: type=1400 audit(1792131101.986:2304): avc: denied { write } for pid=22966 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 808.089315][T21728] udevd[21728]: 'scsi_id --export --whitelisted -d /dev/sda' [22999] terminated by signal 11 (Segmentation fault) [ 808.125759][ T31] audit: type=1400 audit(1792131102.236:2305): avc: denied { write } for pid=23002 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 808.619045][ T45] team0 (unregistering): Port device team_slave_1 removed [ 808.639550][ T45] team0 (unregistering): Port device team_slave_0 removed [ 808.918430][T22787] bridge0: port 2(bridge_slave_1) entered blocking state [ 808.918478][T22787] bridge0: port 2(bridge_slave_1) entered disabled state [ 808.918539][T22787] bridge_slave_1: entered allmulticast mode [ 808.944448][T22787] bridge_slave_1: entered promiscuous mode [ 809.087113][T22787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 809.119278][T22787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 809.250765][T22787] team0: Port device team_slave_0 added [ 809.252098][T22787] team0: Port device team_slave_1 added [ 809.315301][ T4924] Bluetooth: hci0: command tx timeout [ 809.400591][T22787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 809.400606][T22787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 809.400620][T22787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 809.401589][T22787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 809.401597][T22787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 809.401611][T22787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 809.624058][T22787] hsr_slave_0: entered promiscuous mode [ 809.624556][T22787] hsr_slave_1: entered promiscuous mode [ 809.626509][T22787] debugfs: 'hsr0' already exists in 'hsr' [ 809.626523][T22787] Cannot create hsr debugfs directory [ 809.692302][ T45] IPVS: stop unused estimator thread 0... [ 809.724767][T23028] loop5: detected capacity change from 0 to 7 [ 809.727343][T23028] Dev loop5: unable to read RDB block 7 [ 809.727366][T23028] loop5: unable to read partition table [ 809.727459][T23028] loop5: partition table beyond EOD, truncated [ 809.727476][T23028] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 810.273464][ T7771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.340485][ T31] audit: type=1400 audit(1792131104.446:2306): avc: denied { write } for pid=23021 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 810.545210][T23056] FAULT_INJECTION: forcing a failure. [ 810.545210][T23056] name failslab, interval 1, probability 0, space 0, times 0 [ 810.545235][T23056] CPU: 0 UID: 0 PID: 23056 Comm: syz.6.7014 Tainted: G L syzkaller #0 PREEMPT(full) [ 810.545252][T23056] Tainted: [L]=SOFTLOCKUP [ 810.545257][T23056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 810.545265][T23056] Call Trace: [ 810.545269][T23056] [ 810.545281][T23056] dump_stack_lvl+0x100/0x190 [ 810.545303][T23056] should_fail_ex.cold+0x5/0xa [ 810.545321][T23056] should_failslab+0xc2/0x120 [ 810.545340][T23056] __kmalloc_noprof+0xfc/0x840 [ 810.545355][T23056] ? udp_init_sock+0x24e/0x450 [ 810.545376][T23056] udp_init_sock+0x24e/0x450 [ 810.545392][T23056] ? __pfx_udp_init_sock+0x10/0x10 [ 810.545410][T23056] inet_create+0x94c/0x1060 [ 810.545427][T23056] ? inet_create+0x94/0x1060 [ 810.545446][T23056] __sock_create+0x339/0x860 [ 810.545463][T23056] __sys_socket+0x14d/0x260 [ 810.545478][T23056] ? __pfx___sys_socket+0x10/0x10 [ 810.545497][T23056] __x64_sys_socket+0x72/0xb0 [ 810.545511][T23056] ? lockdep_hardirqs_on+0x7d/0x110 [ 810.545528][T23056] do_syscall_64+0x123/0x790 [ 810.545545][T23056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.545557][T23056] RIP: 0033:0x7f5a7fb9e559 [ 810.545566][T23056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 810.545577][T23056] RSP: 002b:00007f5a80b3a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 810.545589][T23056] RAX: ffffffffffffffda RBX: 00007f5a7fe25fa0 RCX: 00007f5a7fb9e559 [ 810.545596][T23056] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 810.545603][T23056] RBP: 00007f5a7fc358b0 R08: 0000000000000000 R09: 0000000000000000 [ 810.545609][T23056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 810.545616][T23056] R13: 00007f5a7fe26038 R14: 00007f5a7fe25fa0 R15: 00007ffe8db744c8 [ 810.545630][T23056] [ 810.818255][ T31] audit: type=1400 audit(1792131104.926:2307): avc: denied { write } for pid=23058 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 811.154158][ T5269] 8021q: adding VLAN 0 to HW filter on device eth1 [ 811.223908][T23076] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 811.301545][ T31] audit: type=1400 audit(1792131105.416:2308): avc: denied { name_connect } for pid=23073 comm="syz.6.7023" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 811.309996][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.551779][ T45] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.817745][T23096] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7029'. [ 812.063615][ T31] audit: type=1400 audit(1792131106.176:2309): avc: denied { write } for pid=23083 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 812.313781][ T31] audit: type=1400 audit(1792131106.426:2310): avc: denied { write } for pid=23110 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 812.350858][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.371214][T23112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7033'. [ 812.556538][T23119] ip6erspan0: entered allmulticast mode [ 812.833633][ T45] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.393268][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.531018][ T31] audit: type=1400 audit(1792131107.636:2311): avc: denied { write } for pid=23124 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 813.900921][ T31] audit: type=1400 audit(1792131108.016:2312): avc: denied { write } for pid=23154 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 813.903129][T22787] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 814.010222][T22787] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 814.032992][T22787] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 814.058122][T22787] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 814.059030][T22787] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 814.088511][T22787] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 814.107556][T22787] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 814.138538][T22787] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 814.139412][ T5269] 8021q: adding VLAN 0 to HW filter on device eth13 [ 814.409054][T22787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 814.429930][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.466953][T22787] 8021q: adding VLAN 0 to HW filter on device team0 [ 814.508692][ T1375] bridge0: port 1(bridge_slave_0) entered blocking state [ 814.508746][ T1375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 814.529002][ T1375] bridge0: port 2(bridge_slave_1) entered blocking state [ 814.529053][ T1375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 815.335701][ T31] audit: type=1400 audit(1792131109.446:2313): avc: denied { write } for pid=23173 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 815.470002][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.598800][ T31] audit: type=1400 audit(1792131109.706:2314): avc: denied { write } for pid=23217 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 815.790828][ T5269] 8021q: adding VLAN 0 to HW filter on device eth14 [ 815.857588][T22787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 816.567985][T22787] veth0_vlan: entered promiscuous mode [ 816.603228][T22787] veth1_vlan: entered promiscuous mode [ 816.672466][T22787] veth0_macvtap: entered promiscuous mode [ 816.692918][T22787] veth1_macvtap: entered promiscuous mode [ 816.732149][ T31] audit: type=1400 audit(1792131110.846:2315): avc: denied { write } for pid=23236 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 816.767582][T22787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 816.795503][T22787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 816.849948][ T366] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.850918][ T366] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.850939][ T366] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.850974][ T366] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.135259][ T1375] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 817.135275][ T1375] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 817.139557][ T31] audit: type=1400 audit(1792131111.246:2316): avc: denied { write } for pid=23272 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 817.314101][ T1375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.374432][ T1375] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 817.374449][ T1375] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 817.486618][ T5269] 8021q: adding VLAN 0 to HW filter on device eth15 [ 817.925213][T23304] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 818.106723][T23309] FAULT_INJECTION: forcing a failure. [ 818.106723][T23309] name failslab, interval 1, probability 0, space 0, times 0 [ 818.106747][T23309] CPU: 0 UID: 0 PID: 23309 Comm: syz.5.7084 Tainted: G L syzkaller #0 PREEMPT(full) [ 818.106766][T23309] Tainted: [L]=SOFTLOCKUP [ 818.106770][T23309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 818.106777][T23309] Call Trace: [ 818.106782][T23309] [ 818.106787][T23309] dump_stack_lvl+0x100/0x190 [ 818.106809][T23309] should_fail_ex.cold+0x5/0xa [ 818.106826][T23309] should_failslab+0xc2/0x120 [ 818.106847][T23309] __kmalloc_noprof+0xfc/0x840 [ 818.106862][T23309] ? lsm_blob_alloc+0x68/0x90 [ 818.106876][T23309] lsm_blob_alloc+0x68/0x90 [ 818.106888][T23309] security_sk_alloc+0x2d/0x290 [ 818.106903][T23309] sk_prot_alloc+0x1d1/0x2a0 [ 818.106917][T23309] sk_alloc+0x36/0xe80 [ 818.106936][T23309] tipc_sk_create+0xfc/0x2400 [ 818.106950][T23309] ? selinux_inode_alloc_security+0x109/0x290 [ 818.106964][T23309] ? lock_acquire+0x1d1/0x380 [ 818.106977][T23309] ? __sock_create+0x163/0x860 [ 818.106991][T23309] ? __sock_create+0x2f3/0x860 [ 818.107005][T23309] ? __sock_create+0x2f3/0x860 [ 818.107020][T23309] __sock_create+0x339/0x860 [ 818.107037][T23309] __sys_socketpair+0x261/0x5b0 [ 818.107053][T23309] ? __pfx___sys_socketpair+0x10/0x10 [ 818.107069][T23309] ? xfd_validate_state+0x129/0x190 [ 818.107085][T23309] __x64_sys_socketpair+0x96/0x100 [ 818.107100][T23309] ? lockdep_hardirqs_on+0x7d/0x110 [ 818.107116][T23309] do_syscall_64+0x123/0x790 [ 818.107133][T23309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.107145][T23309] RIP: 0033:0x7ffa9f39e559 [ 818.107154][T23309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 818.107165][T23309] RSP: 002b:00007ffaa025c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 818.107177][T23309] RAX: ffffffffffffffda RBX: 00007ffa9f625fa0 RCX: 00007ffa9f39e559 [ 818.107184][T23309] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000001e [ 818.107190][T23309] RBP: 00007ffa9f4358b0 R08: 0000000000000000 R09: 0000000000000000 [ 818.107197][T23309] R10: 0000200000000800 R11: 0000000000000246 R12: 0000000000000000 [ 818.107203][T23309] R13: 00007ffa9f626038 R14: 00007ffa9f625fa0 R15: 00007ffe8c4b56a8 [ 818.107217][T23309] [ 818.528437][T23297] Process accounting resumed [ 818.542727][ T31] audit: type=1400 audit(1792131112.656:2317): avc: denied { write } for pid=23292 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 818.594476][ T45] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.795700][ T31] audit: type=1400 audit(1792131112.906:2318): avc: denied { write } for pid=23328 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 818.974044][ T5269] 8021q: adding VLAN 0 to HW filter on device eth16 [ 819.131786][T23342] FAULT_INJECTION: forcing a failure. [ 819.131786][T23342] name failslab, interval 1, probability 0, space 0, times 0 [ 819.131812][T23342] CPU: 0 UID: 0 PID: 23342 Comm: syz.1.7094 Tainted: G L syzkaller #0 PREEMPT(full) [ 819.131829][T23342] Tainted: [L]=SOFTLOCKUP [ 819.131834][T23342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 819.131844][T23342] Call Trace: [ 819.131848][T23342] [ 819.131854][T23342] dump_stack_lvl+0x100/0x190 [ 819.131875][T23342] should_fail_ex.cold+0x5/0xa [ 819.131893][T23342] should_failslab+0xc2/0x120 [ 819.131912][T23342] __kmalloc_noprof+0xfc/0x840 [ 819.131928][T23342] ? kasan_save_track+0x14/0x30 [ 819.131943][T23342] ? realloc_user_queue+0xe9/0x300 [ 819.131959][T23342] realloc_user_queue+0xe9/0x300 [ 819.131972][T23342] ? __pfx_snd_timer_user_open+0x10/0x10 [ 819.131986][T23342] snd_timer_user_open+0xe4/0x160 [ 819.132000][T23342] snd_open+0x201/0x450 [ 819.132012][T23342] ? __pfx_snd_open+0x10/0x10 [ 819.132023][T23342] chrdev_open+0x234/0x6a0 [ 819.132040][T23342] ? __pfx_chrdev_open+0x10/0x10 [ 819.132056][T23342] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 819.132072][T23342] do_dentry_open+0x6ab/0x14d0 [ 819.132087][T23342] ? __pfx_chrdev_open+0x10/0x10 [ 819.132107][T23342] vfs_open+0x82/0x3f0 [ 819.132127][T23342] path_openat+0x19fa/0x2440 [ 819.132145][T23342] ? __pfx_path_openat+0x10/0x10 [ 819.132165][T23342] do_file_open+0x20e/0x430 [ 819.132182][T23342] ? __pfx_do_file_open+0x10/0x10 [ 819.132207][T23342] ? _raw_spin_unlock+0x28/0x50 [ 819.132236][T23342] ? alloc_fd+0x471/0x7a0 [ 819.132258][T23342] do_sys_openat2+0x10f/0x1e0 [ 819.132269][T23342] ? __pfx_do_sys_openat2+0x10/0x10 [ 819.132282][T23342] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 819.132304][T23342] __x64_sys_openat+0x12d/0x210 [ 819.132317][T23342] ? __pfx___x64_sys_openat+0x10/0x10 [ 819.132334][T23342] do_syscall_64+0x123/0x790 [ 819.132354][T23342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.132366][T23342] RIP: 0033:0x7f16ec19e559 [ 819.132377][T23342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 819.132389][T23342] RSP: 002b:00007f16ecfe9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 819.132400][T23342] RAX: ffffffffffffffda RBX: 00007f16ec425fa0 RCX: 00007f16ec19e559 [ 819.132408][T23342] RDX: 0000000000008080 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 819.132415][T23342] RBP: 00007f16ec2358b0 R08: 0000000000000000 R09: 0000000000000000 [ 819.132422][T23342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 819.132428][T23342] R13: 00007f16ec426038 R14: 00007f16ec425fa0 R15: 00007ffe9bc349c8 [ 819.132443][T23342] [ 819.588010][ T31] audit: type=1400 audit(1792131113.696:2319): avc: denied { unmount } for pid=8839 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 819.871400][ T188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.955935][ T31] audit: type=1400 audit(1792131114.066:2320): avc: denied { write } for pid=23339 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 820.162954][ T31] audit: type=1400 audit(1792131114.276:2321): avc: denied { write } for pid=23377 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 820.887826][ T31] audit: type=1400 audit(1792131114.996:2322): avc: denied { write } for pid=23388 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 820.914386][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.076444][T23421] binder: 23420:23421 ioctl 40046205 0 returned -22 [ 821.134707][ T31] audit: type=1400 audit(1792131115.246:2323): avc: denied { write } for pid=23422 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 821.164822][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 821.630670][ T188] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 821.657804][T23446] syz_tun: entered allmulticast mode [ 821.678849][T23446] syz_tun: left allmulticast mode [ 821.781811][ T188] usb 2-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 821.782537][ T188] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 821.785380][ T188] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 821.785395][ T188] usb 2-1: Product: syz [ 821.785404][ T188] usb 2-1: Manufacturer: syz [ 821.949925][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.119640][T23459] fuse: fd is not a fuse device [ 822.730301][ T31] audit: type=1400 audit(1792131116.846:2324): avc: denied { ioctl } for pid=23479 comm="syz.6.7145" path="socket:[93438]" dev="sockfs" ino=93438 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 822.782827][ T31] audit: type=1400 audit(1792131116.896:2325): avc: denied { read } for pid=23479 comm="syz.6.7145" path="socket:[93438]" dev="sockfs" ino=93438 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 822.895266][T23486] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7147'. [ 822.922396][T23486] bond0: entered promiscuous mode [ 822.944199][T23486] gretap0: entered promiscuous mode [ 822.972400][T23486] debugfs: 'hsr0' already exists in 'hsr' [ 822.972418][T23486] Cannot create hsr debugfs directory [ 822.972455][T23486] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 822.972466][T23486] hsr0: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 822.996394][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.031688][T23486] hsr0: entered promiscuous mode [ 823.056940][T23490] FAULT_INJECTION: forcing a failure. [ 823.056940][T23490] name failslab, interval 1, probability 0, space 0, times 0 [ 823.056965][T23490] CPU: 0 UID: 0 PID: 23490 Comm: syz.6.7149 Tainted: G L syzkaller #0 PREEMPT(full) [ 823.056983][T23490] Tainted: [L]=SOFTLOCKUP [ 823.056987][T23490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 823.056994][T23490] Call Trace: [ 823.056999][T23490] [ 823.057004][T23490] dump_stack_lvl+0x100/0x190 [ 823.057026][T23490] should_fail_ex.cold+0x5/0xa [ 823.057042][T23490] should_failslab+0xc2/0x120 [ 823.057060][T23490] __kmalloc_cache_noprof+0x91/0x6d0 [ 823.057075][T23490] ? __kasan_kmalloc+0xaa/0xb0 [ 823.057089][T23490] ? ceph_init_fs_context+0x4b/0x530 [ 823.057106][T23490] ceph_init_fs_context+0x4b/0x530 [ 823.057120][T23490] alloc_fs_context+0x60c/0xf40 [ 823.057135][T23490] __x64_sys_fsopen+0xed/0x220 [ 823.057158][T23490] do_syscall_64+0x123/0x790 [ 823.057177][T23490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.057191][T23490] RIP: 0033:0x7f5a7fb9e559 [ 823.057201][T23490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 823.057214][T23490] RSP: 002b:00007f5a80b3a028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 823.057227][T23490] RAX: ffffffffffffffda RBX: 00007f5a7fe25fa0 RCX: 00007f5a7fb9e559 [ 823.057234][T23490] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00002000000001c0 [ 823.057241][T23490] RBP: 00007f5a7fc358b0 R08: 0000000000000000 R09: 0000000000000000 [ 823.057248][T23490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 823.057254][T23490] R13: 00007f5a7fe26038 R14: 00007f5a7fe25fa0 R15: 00007ffe8db744c8 [ 823.057269][T23490] [ 823.075419][ T1399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.801129][T23510] FAULT_INJECTION: forcing a failure. [ 823.801129][T23510] name failslab, interval 1, probability 0, space 0, times 0 [ 823.801154][T23510] CPU: 0 UID: 0 PID: 23510 Comm: syz.6.7155 Tainted: G L syzkaller #0 PREEMPT(full) [ 823.801171][T23510] Tainted: [L]=SOFTLOCKUP [ 823.801176][T23510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 823.801185][T23510] Call Trace: [ 823.801189][T23510] [ 823.801195][T23510] dump_stack_lvl+0x100/0x190 [ 823.801219][T23510] should_fail_ex.cold+0x5/0xa [ 823.801235][T23510] should_failslab+0xc2/0x120 [ 823.801261][T23510] __kmalloc_cache_noprof+0x91/0x6d0 [ 823.801275][T23510] ? __kasan_kmalloc+0xaa/0xb0 [ 823.801291][T23510] ? nci_allocate_device+0x105/0x410 [ 823.801310][T23510] nci_allocate_device+0x105/0x410 [ 823.801326][T23510] virtual_ncidev_open+0x6f/0x220 [ 823.801341][T23510] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 823.801353][T23510] misc_open+0x26d/0x450 [ 823.801369][T23510] ? __pfx_misc_open+0x10/0x10 [ 823.801383][T23510] chrdev_open+0x234/0x6a0 [ 823.801400][T23510] ? __pfx_chrdev_open+0x10/0x10 [ 823.801417][T23510] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 823.801434][T23510] do_dentry_open+0x6ab/0x14d0 [ 823.801449][T23510] ? __pfx_chrdev_open+0x10/0x10 [ 823.801470][T23510] vfs_open+0x82/0x3f0 [ 823.801488][T23510] path_openat+0x19fa/0x2440 [ 823.801509][T23510] ? __pfx_path_openat+0x10/0x10 [ 823.801529][T23510] do_file_open+0x20e/0x430 [ 823.801547][T23510] ? __pfx_do_file_open+0x10/0x10 [ 823.801573][T23510] ? _raw_spin_unlock+0x28/0x50 [ 823.801587][T23510] ? alloc_fd+0x471/0x7a0 [ 823.801607][T23510] do_sys_openat2+0x10f/0x1e0 [ 823.801618][T23510] ? __pfx_do_sys_openat2+0x10/0x10 [ 823.801629][T23510] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 823.801650][T23510] __x64_sys_openat+0x12d/0x210 [ 823.801662][T23510] ? __pfx___x64_sys_openat+0x10/0x10 [ 823.801678][T23510] do_syscall_64+0x123/0x790 [ 823.801696][T23510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.801708][T23510] RIP: 0033:0x7f5a7fb9e559 [ 823.801718][T23510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 823.801729][T23510] RSP: 002b:00007f5a80b3a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 823.801741][T23510] RAX: ffffffffffffffda RBX: 00007f5a7fe25fa0 RCX: 00007f5a7fb9e559 [ 823.801748][T23510] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 823.801755][T23510] RBP: 00007f5a7fc358b0 R08: 0000000000000000 R09: 0000000000000000 [ 823.801762][T23510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 823.801768][T23510] R13: 00007f5a7fe26038 R14: 00007f5a7fe25fa0 R15: 00007ffe8db744c8 [ 823.801784][T23510] [ 824.049284][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.204562][T23512] xt_hashlimit: size too large, truncated to 1048576 [ 824.269424][T23521] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7158'. [ 824.303588][ T31] audit: type=1400 audit(1792131118.416:2326): avc: denied { write } for pid=23495 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 824.351609][ T1399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.396541][ T7770] usb 2-1: USB disconnect, device number 10 [ 824.583199][ T31] audit: type=1400 audit(1792131118.696:2327): avc: denied { write } for pid=23529 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 825.069926][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.146447][T23555] rxe_eth0 speed is unknown, defaulting to 1000 [ 825.521436][T23570] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7172'. [ 825.635702][ T31] audit: type=1400 audit(1792131119.746:2328): avc: denied { write } for pid=23547 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 826.010158][ T31] audit: type=1400 audit(1792131120.126:2329): avc: denied { write } for pid=23579 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 826.937673][T23605] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.957339][T23605] bridge_slave_1 (unregistering): left allmulticast mode [ 826.957387][T23605] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.663204][T23619] FAULT_INJECTION: forcing a failure. [ 827.663204][T23619] name failslab, interval 1, probability 0, space 0, times 0 [ 827.663228][T23619] CPU: 0 UID: 0 PID: 23619 Comm: syz.5.7189 Tainted: G L syzkaller #0 PREEMPT(full) [ 827.663245][T23619] Tainted: [L]=SOFTLOCKUP [ 827.663249][T23619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 827.663256][T23619] Call Trace: [ 827.663261][T23619] [ 827.663266][T23619] dump_stack_lvl+0x100/0x190 [ 827.663288][T23619] should_fail_ex.cold+0x5/0xa [ 827.663304][T23619] should_failslab+0xc2/0x120 [ 827.663322][T23619] kmem_cache_alloc_noprof+0x92/0x6a0 [ 827.663339][T23619] ? prepare_creds+0x2c/0x950 [ 827.663353][T23619] prepare_creds+0x2c/0x950 [ 827.663366][T23619] __sys_setresgid+0x4a7/0x12f0 [ 827.663382][T23619] do_syscall_64+0x123/0x790 [ 827.663399][T23619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.663411][T23619] RIP: 0033:0x7ffa9f39e559 [ 827.663421][T23619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 827.663431][T23619] RSP: 002b:00007ffaa025c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000077 [ 827.663442][T23619] RAX: ffffffffffffffda RBX: 00007ffa9f625fa0 RCX: 00007ffa9f39e559 [ 827.663450][T23619] RDX: 000000000000ee00 RSI: 0000000000000000 RDI: 000000000000ee00 [ 827.663456][T23619] RBP: 00007ffa9f4358b0 R08: 0000000000000000 R09: 0000000000000000 [ 827.663463][T23619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 827.663470][T23619] R13: 00007ffa9f626038 R14: 00007ffa9f625fa0 R15: 00007ffe8c4b56a8 [ 827.663484][T23619] [ 827.936184][T23616] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.984252][T23616] bridge_slave_0 (unregistering): left allmulticast mode [ 827.984274][T23616] bridge_slave_0 (unregistering): left promiscuous mode [ 827.984310][T23616] bridge0: port 1(bridge_slave_0) entered disabled state [ 828.057340][T23626] FAULT_INJECTION: forcing a failure. [ 828.057340][T23626] name failslab, interval 1, probability 0, space 0, times 0 [ 828.057365][T23626] CPU: 0 UID: 0 PID: 23626 Comm: syz.0.7195 Tainted: G L syzkaller #0 PREEMPT(full) [ 828.057383][T23626] Tainted: [L]=SOFTLOCKUP [ 828.057388][T23626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 828.057397][T23626] Call Trace: [ 828.057402][T23626] [ 828.057407][T23626] dump_stack_lvl+0x100/0x190 [ 828.057429][T23626] should_fail_ex.cold+0x5/0xa [ 828.057447][T23626] should_failslab+0xc2/0x120 [ 828.057466][T23626] kmem_cache_alloc_noprof+0x92/0x6a0 [ 828.057482][T23626] ? __proc_create+0xc1/0x8f0 [ 828.057496][T23626] ? __proc_create+0x247/0x8f0 [ 828.057512][T23626] __proc_create+0x247/0x8f0 [ 828.057528][T23626] ? __pfx___proc_create+0x10/0x10 [ 828.057544][T23626] ? _raw_write_unlock+0x28/0x50 [ 828.057560][T23626] ? proc_register+0x56d/0x910 [ 828.057576][T23626] proc_create_reg+0x75/0x170 [ 828.057593][T23626] proc_create_seq_private+0x8e/0x180 [ 828.057608][T23626] ? __pfx_proc_create_seq_private+0x10/0x10 [ 828.057623][T23626] ? __pfx_proc_create_net_data+0x10/0x10 [ 828.057636][T23626] ? __pfx_uevent_net_rcv+0x10/0x10 [ 828.057651][T23626] ? __pfx_dev_proc_net_init+0x10/0x10 [ 828.057664][T23626] dev_proc_net_init+0xac/0x230 [ 828.057677][T23626] ops_init+0x1e2/0x5f0 [ 828.057691][T23626] setup_net+0x118/0x3a0 [ 828.057703][T23626] ? __pfx_setup_net+0x10/0x10 [ 828.057718][T23626] copy_net_ns+0x345/0x7a0 [ 828.057733][T23626] create_new_namespaces+0x3ea/0xac0 [ 828.057750][T23626] unshare_nsproxy_namespaces+0xf2/0x220 [ 828.057765][T23626] ksys_unshare+0x4a2/0xb30 [ 828.057781][T23626] ? __pfx_ksys_unshare+0x10/0x10 [ 828.057801][T23626] __x64_sys_unshare+0x31/0x40 [ 828.057817][T23626] do_syscall_64+0x123/0x790 [ 828.057835][T23626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.057846][T23626] RIP: 0033:0x7f236d79e559 [ 828.057856][T23626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 828.057867][T23626] RSP: 002b:00007f236e6ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 828.057879][T23626] RAX: ffffffffffffffda RBX: 00007f236da25fa0 RCX: 00007f236d79e559 [ 828.057886][T23626] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004c000680 [ 828.057893][T23626] RBP: 00007f236d8358b0 R08: 0000000000000000 R09: 0000000000000000 [ 828.057900][T23626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 828.057906][T23626] R13: 00007f236da26038 R14: 00007f236da25fa0 R15: 00007ffda49e1cd8 [ 828.057922][T23626] [ 828.423430][T23630] netlink: 'syz.8.7206': attribute type 5 has an invalid length. [ 828.423445][T23630] netlink: 'syz.8.7206': attribute type 9 has an invalid length. [ 828.423453][T23630] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7206'. [ 828.807622][T23650] rxe_eth0 speed is unknown, defaulting to 1000 [ 828.836822][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.014792][T23653] netlink: 'syz.6.7203': attribute type 12 has an invalid length. [ 829.471177][ T7772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.473888][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.195924][ T31] audit: type=1400 audit(1792131124.306:2330): avc: denied { write } for pid=23677 comm="syz.1.7215" name="kcore" dev="proc" ino=4026532046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kcore_t tclass=file permissive=1 [ 830.509937][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.654230][T23697] loop9: detected capacity change from 0 to 255852544 [ 830.951742][T23704] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 830.976579][T23704] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7225'. [ 831.325052][T23720] netlink: 348 bytes leftover after parsing attributes in process `syz.8.7233'. [ 831.549970][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.625098][ T31] audit: type=1400 audit(1792131125.736:2331): avc: denied { setopt } for pid=23732 comm="syz.6.7239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 831.656029][T23734] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7238'. [ 831.674044][T23734] netlink: 'syz.0.7238': attribute type 9 has an invalid length. [ 831.674057][T23734] netlink: 7 bytes leftover after parsing attributes in process `syz.0.7238'. [ 832.025590][T23756] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7249'. [ 832.208057][T23772] FAULT_INJECTION: forcing a failure. [ 832.208057][T23772] name failslab, interval 1, probability 0, space 0, times 0 [ 832.208081][T23772] CPU: 0 UID: 0 PID: 23772 Comm: syz.1.7256 Tainted: G L syzkaller #0 PREEMPT(full) [ 832.208096][T23772] Tainted: [L]=SOFTLOCKUP [ 832.208100][T23772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 832.208108][T23772] Call Trace: [ 832.208112][T23772] [ 832.208118][T23772] dump_stack_lvl+0x100/0x190 [ 832.208138][T23772] should_fail_ex.cold+0x5/0xa [ 832.208155][T23772] should_failslab+0xc2/0x120 [ 832.208179][T23772] kmem_cache_alloc_noprof+0x92/0x6a0 [ 832.208195][T23772] ? prepare_creds+0x2c/0x950 [ 832.208211][T23772] prepare_creds+0x2c/0x950 [ 832.208224][T23772] keyctl_set_reqkey_keyring+0x8e/0x1c0 [ 832.208244][T23772] __do_sys_keyctl+0x316/0x5a0 [ 832.208259][T23772] do_syscall_64+0x123/0x790 [ 832.208278][T23772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.208290][T23772] RIP: 0033:0x7f16ec19e559 [ 832.208301][T23772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 832.208313][T23772] RSP: 002b:00007f16ecfe9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 832.208325][T23772] RAX: ffffffffffffffda RBX: 00007f16ec425fa0 RCX: 00007f16ec19e559 [ 832.208333][T23772] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000e [ 832.208339][T23772] RBP: 00007f16ec2358b0 R08: 0000000000000000 R09: 0000000000000000 [ 832.208346][T23772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 832.208353][T23772] R13: 00007f16ec426038 R14: 00007f16ec425fa0 R15: 00007ffe9bc349c8 [ 832.208368][T23772] [ 832.539479][T23777] netlink: 'syz.1.7258': attribute type 1 has an invalid length. [ 832.590027][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.055818][ T31] audit: type=1400 audit(1792131127.166:2332): avc: denied { write } for pid=23774 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 833.267106][ T31] audit: type=1400 audit(1792131127.376:2333): avc: denied { write } for pid=23818 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 833.629914][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.667840][T22424] udevd[22424]: 'scsi_id --export --whitelisted -d /dev/sda' [23832] terminated by signal 11 (Segmentation fault) [ 833.697877][ T31] audit: type=1400 audit(1792131127.806:2334): avc: denied { bind } for pid=23836 comm="syz.0.7278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 833.969015][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.969058][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.969578][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.969984][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.970033][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.970072][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.970112][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.978591][ T7771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.978651][ T7771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.978691][ T7771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.123462][T23854] fuse: fd is not a fuse device [ 834.141524][ T31] audit: type=1400 audit(1792131128.256:2335): avc: denied { remount } for pid=23853 comm="syz.8.7283" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 834.275356][ T31] audit: type=1400 audit(1792131128.386:2336): avc: denied { connect } for pid=23847 comm="syz.0.7281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 834.436142][ T31] audit: type=1400 audit(1792131128.546:2337): avc: denied { write } for pid=23829 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 834.498805][T23868] FAULT_INJECTION: forcing a failure. [ 834.498805][T23868] name failslab, interval 1, probability 0, space 0, times 0 [ 834.498829][T23868] CPU: 0 UID: 0 PID: 23868 Comm: syz.0.7286 Tainted: G L syzkaller #0 PREEMPT(full) [ 834.498848][T23868] Tainted: [L]=SOFTLOCKUP [ 834.498852][T23868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 834.498860][T23868] Call Trace: [ 834.498865][T23868] [ 834.498871][T23868] dump_stack_lvl+0x100/0x190 [ 834.498892][T23868] should_fail_ex.cold+0x5/0xa [ 834.498908][T23868] should_failslab+0xc2/0x120 [ 834.498926][T23868] kmem_cache_alloc_noprof+0x92/0x6a0 [ 834.498942][T23868] ? security_file_alloc+0x34/0x2c0 [ 834.498963][T23868] security_file_alloc+0x34/0x2c0 [ 834.498979][T23868] init_file+0x95/0x480 [ 834.498998][T23868] alloc_empty_file+0x79/0x1c0 [ 834.499009][T23868] alloc_file_pseudo+0x183/0x290 [ 834.499021][T23868] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 834.499032][T23868] ? alloc_fd+0x471/0x7a0 [ 834.499051][T23868] sock_alloc_file+0x50/0x210 [ 834.499063][T23868] __sys_socket+0x1c0/0x260 [ 834.499079][T23868] ? __pfx___sys_socket+0x10/0x10 [ 834.499097][T23868] __x64_sys_socket+0x72/0xb0 [ 834.499111][T23868] ? lockdep_hardirqs_on+0x7d/0x110 [ 834.499130][T23868] do_syscall_64+0x123/0x790 [ 834.499149][T23868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.499168][T23868] RIP: 0033:0x7f236d79e559 [ 834.499179][T23868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 834.499192][T23868] RSP: 002b:00007f236e6aafc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 834.499205][T23868] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f236d79e559 [ 834.499213][T23868] RDX: 0000000000000002 RSI: 0000000000000005 RDI: 000000000000001f [ 834.499220][T23868] RBP: 00007f236d8358b0 R08: 0000000000000000 R09: 0000000000000000 [ 834.499228][T23868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 834.499235][T23868] R13: 00007f236da26038 R14: 00007f236da25fa0 R15: 00007ffda49e1cd8 [ 834.499250][T23868] [ 834.934121][ T31] audit: type=1400 audit(1792131129.046:2338): avc: denied { write } for pid=23873 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 835.017407][ T31] audit: type=1400 audit(1792131129.126:2339): avc: denied { getopt } for pid=23878 comm="syz.0.7290" lport=50912 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 835.444259][T23901] SELinux: ebitmap start bit (704643584) is beyond the end of the bitmap (1088) [ 835.444312][T23901] SELinux: invalid class [ 835.470064][T23901] SELinux: failed to load policy [ 835.839724][T23921] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7306'. [ 835.839750][T23921] netlink: 'syz.8.7306': attribute type 20 has an invalid length. [ 835.839759][T23921] netlink: 'syz.8.7306': attribute type 21 has an invalid length. [ 836.276969][ T31] audit: type=1400 audit(1792131130.386:2340): avc: denied { write } for pid=23908 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 836.509981][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 836.509998][ C0] bridge0: topology change detected, propagating [ 836.611632][ T31] audit: type=1400 audit(1792131130.726:2341): avc: denied { write } for pid=23938 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 837.166926][T23969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7316'. [ 837.169524][ T197] IPVS: starting estimator thread 0... [ 837.205750][T23969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7316'. [ 837.250330][T23970] IPVS: using max 76 ests per chain, 182400 per kthread [ 837.578319][ T7772] Process accounting resumed [ 837.639308][T23993] Process accounting resumed [ 837.757761][ T31] audit: type=1400 audit(1792131131.866:2342): avc: denied { write } for pid=23972 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 837.888692][T24002] rxe_eth0 speed is unknown, defaulting to 1000 [ 837.944255][ T31] audit: type=1400 audit(1792131132.056:2343): avc: denied { write } for pid=24009 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 838.221298][T24023] FAULT_INJECTION: forcing a failure. [ 838.221298][T24023] name failslab, interval 1, probability 0, space 0, times 0 [ 838.221324][T24023] CPU: 0 UID: 0 PID: 24023 Comm: syz.6.7332 Tainted: G L syzkaller #0 PREEMPT(full) [ 838.221342][T24023] Tainted: [L]=SOFTLOCKUP [ 838.221347][T24023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 838.221354][T24023] Call Trace: [ 838.221359][T24023] [ 838.221365][T24023] dump_stack_lvl+0x100/0x190 [ 838.221385][T24023] should_fail_ex.cold+0x5/0xa [ 838.221401][T24023] should_failslab+0xc2/0x120 [ 838.221421][T24023] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 838.221437][T24023] ? __d_alloc+0x35/0xa50 [ 838.221450][T24023] __d_alloc+0x35/0xa50 [ 838.221463][T24023] d_alloc_pseudo+0x1c/0xc0 [ 838.221477][T24023] alloc_file_pseudo+0x118/0x290 [ 838.221489][T24023] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 838.221502][T24023] ? alloc_fd+0x471/0x7a0 [ 838.221523][T24023] sock_alloc_file+0x50/0x210 [ 838.221536][T24023] __sys_socket+0x1c0/0x260 [ 838.221551][T24023] ? __pfx___sys_socket+0x10/0x10 [ 838.221570][T24023] __x64_sys_socket+0x72/0xb0 [ 838.221584][T24023] ? lockdep_hardirqs_on+0x7d/0x110 [ 838.221601][T24023] do_syscall_64+0x123/0x790 [ 838.221619][T24023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.221631][T24023] RIP: 0033:0x7f5a7fb9e559 [ 838.221641][T24023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 838.221652][T24023] RSP: 002b:00007f5a80b3a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 838.221665][T24023] RAX: ffffffffffffffda RBX: 00007f5a7fe25fa0 RCX: 00007f5a7fb9e559 [ 838.221674][T24023] RDX: 0000000000000001 RSI: 0000000000000003 RDI: 000000000000001d [ 838.221681][T24023] RBP: 00007f5a7fc358b0 R08: 0000000000000000 R09: 0000000000000000 [ 838.221688][T24023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 838.221703][T24023] R13: 00007f5a7fe26038 R14: 00007f5a7fe25fa0 R15: 00007ffe8db744c8 [ 838.221719][T24023] [ 838.590374][ T7772] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 838.755767][ T7772] usb 2-1: Using ep0 maxpacket: 32 [ 838.756472][ T7772] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 838.758996][ T7772] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 838.759020][ T7772] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 838.759035][ T7772] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 838.759051][ T7772] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 838.799627][ T7772] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.799644][ T7772] usb 2-1: Product: syz [ 838.799653][ T7772] usb 2-1: Manufacturer: syz [ 838.799661][ T7772] usb 2-1: SerialNumber: syz [ 839.074324][ T7772] net_ratelimit: 18 callbacks suppressed [ 839.074340][ T7772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.225625][T24045] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 839.393884][ T7771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.431072][ T5883] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 839.493718][T24057] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7346'. [ 839.591811][ T5883] usb 6-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 839.592553][ T5883] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 839.592569][ T5883] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 839.592589][ T5883] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.712892][ T1399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.713391][ T197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.713418][ T197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.715504][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.715901][ T7771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.015190][ T31] audit: type=1400 audit(1792131134.126:2344): avc: denied { write } for pid=24061 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 840.109888][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.115025][T24082] xt_hashlimit: size too large, truncated to 1048576 [ 840.137705][ T31] audit: type=1400 audit(1792131134.246:2345): avc: denied { write } for pid=24080 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 840.169778][T24083] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 840.288727][T24087] netlink: 'syz.0.7352': attribute type 1 has an invalid length. [ 840.350478][ T1399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.371191][T24087] 8021q: adding VLAN 0 to HW filter on device bond1 [ 840.422463][T24090] bond1: (slave gretap1): making interface the new active one [ 840.461641][T24090] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 840.638196][ T31] audit: type=1400 audit(1792131134.746:2346): avc: denied { setopt } for pid=24097 comm="syz.0.7354" lport=49195 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 840.875754][ T31] audit: type=1400 audit(1792131134.986:2347): avc: denied { write } for pid=24091 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 841.026979][ T31] audit: type=1400 audit(1792131135.136:2348): avc: denied { write } for pid=24119 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 841.079256][T24121] loop4: detected capacity change from 0 to 2640 [ 841.095680][T21728] Buffer I/O error on dev loop4, logical block 0, async page read [ 841.095927][T21728] Buffer I/O error on dev loop4, logical block 0, async page read [ 841.096150][T21728] Buffer I/O error on dev loop4, logical block 0, async page read [ 841.096363][T21728] Buffer I/O error on dev loop4, logical block 0, async page read [ 841.144708][T24121] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 841.144746][T24121] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 841.144768][T24121] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 841.147879][T24121] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 841.147927][T24121] Buffer I/O error on dev loop4, logical block 4, lost async page write [ 841.147941][T24121] Buffer I/O error on dev loop4, logical block 5, lost async page write [ 841.266502][ T7772] usb 2-1: USB disconnect, device number 11 [ 841.401602][ T31] audit: type=1400 audit(1792131135.516:2349): avc: denied { bind } for pid=24125 comm="syz.1.7360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 842.025069][ T31] audit: type=1400 audit(1792131136.136:2350): avc: denied { write } for pid=24130 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 842.096406][T24158] FAULT_INJECTION: forcing a failure. [ 842.096406][T24158] name failslab, interval 1, probability 0, space 0, times 0 [ 842.096430][T24158] CPU: 0 UID: 0 PID: 24158 Comm: syz.0.7368 Tainted: G L syzkaller #0 PREEMPT(full) [ 842.096447][T24158] Tainted: [L]=SOFTLOCKUP [ 842.096451][T24158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 842.096459][T24158] Call Trace: [ 842.096463][T24158] [ 842.096469][T24158] dump_stack_lvl+0x100/0x190 [ 842.096492][T24158] should_fail_ex.cold+0x5/0xa [ 842.096507][T24158] should_failslab+0xc2/0x120 [ 842.096527][T24158] __kmalloc_cache_noprof+0x91/0x6d0 [ 842.096540][T24158] ? __kasan_kmalloc+0xaa/0xb0 [ 842.096556][T24158] ? bpf_init_fs_context+0x49/0x340 [ 842.096570][T24158] bpf_init_fs_context+0x49/0x340 [ 842.096582][T24158] alloc_fs_context+0x60c/0xf40 [ 842.096597][T24158] __x64_sys_fsopen+0xed/0x220 [ 842.096612][T24158] do_syscall_64+0x123/0x790 [ 842.096630][T24158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.096641][T24158] RIP: 0033:0x7f236d79e559 [ 842.096651][T24158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 842.096662][T24158] RSP: 002b:00007f236e6ab028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 842.096674][T24158] RAX: ffffffffffffffda RBX: 00007f236da25fa0 RCX: 00007f236d79e559 [ 842.096681][T24158] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000180 [ 842.096690][T24158] RBP: 00007f236d8358b0 R08: 0000000000000000 R09: 0000000000000000 [ 842.096697][T24158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 842.096705][T24158] R13: 00007f236da26038 R14: 00007f236da25fa0 R15: 00007ffda49e1cd8 [ 842.096720][T24158] [ 842.348979][ T7772] usb 6-1: USB disconnect, device number 26 [ 842.462014][ T31] audit: type=1400 audit(1792131136.576:2351): avc: denied { write } for pid=24161 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 842.464729][T24163] netlink: 1363 bytes leftover after parsing attributes in process `syz.1.7371'. [ 842.683534][ T31] audit: type=1400 audit(1792131136.796:2352): avc: denied { mounton } for pid=24173 comm="syz.1.7376" path="/proc/270/task" dev="proc" ino=96014 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 842.762949][T24177] jffs2: notice: (24177) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (0 unchecked, 1 orphan) and 5 of xref (0 dead, 1 orphan) found. [ 843.798019][T24234] EXT4-fs warning (device sda1): ext4_group_extend:1869: need to use ext2online to resize further [ 844.190504][ C0] net_ratelimit: 21 callbacks suppressed [ 844.190519][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.269878][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.594772][ T7770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.751180][ T197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.799998][ T1399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 845.310014][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 845.392963][T18198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 845.471937][ T1399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 845.471990][ T1399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 845.473701][ T7770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.745368][ T31] audit: type=1400 audit(1792131140.856:2353): avc: denied { rename } for pid=24244 comm="syz.1.7401" name="file0" dev="tmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 847.050735][T24264] input: syz0 as /devices/virtual/input/input70 [ 847.359951][ T7772] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 847.514511][ T7772] usb 6-1: unable to get BOS descriptor or descriptor too short [ 847.515157][ T7772] usb 6-1: not running at top speed; connect to a high speed hub [ 847.515173][ T7772] usb 6-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 847.518891][ T7772] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 847.568765][ T7772] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.568785][ T7772] usb 6-1: Product: syz [ 847.568794][ T7772] usb 6-1: Manufacturer: syz [ 847.568804][ T7772] usb 6-1: SerialNumber: syz [ 847.778424][T24290] jffs2: notice: (24290) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (0 unchecked, 1 orphan) and 5 of xref (0 dead, 1 orphan) found. [ 847.846240][ T31] audit: type=1400 audit(1792131141.956:2354): avc: denied { write } for pid=24289 comm="syz.1.7420" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 847.846276][ T31] audit: type=1400 audit(1792131141.956:2355): avc: denied { append } for pid=24289 comm="syz.1.7420" path="/126/file0/cpu.stat" dev="jffs2" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 847.909195][ T31] audit: type=1400 audit(1792131142.016:2356): avc: denied { map } for pid=24289 comm="syz.1.7420" path="/126/file0/cpu.stat" dev="jffs2" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 847.909226][ T31] audit: type=1400 audit(1792131142.016:2357): avc: denied { execute } for pid=24289 comm="syz.1.7420" path="/126/file0/cpu.stat" dev="jffs2" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 848.359726][ T31] audit: type=1400 audit(1792131142.466:2358): avc: denied { write } for pid=24282 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 848.576597][ T31] audit: type=1400 audit(1792131142.686:2359): avc: denied { write } for pid=24311 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 848.822566][T24320] 8021q: adding VLAN 0 to HW filter on device bond2 [ 848.822918][T24320] bridge0: port 1(bond2) entered blocking state [ 848.823637][T24320] bridge0: port 1(bond2) entered disabled state [ 848.823704][T24320] bond2: entered allmulticast mode [ 848.825689][T24320] bond2: entered promiscuous mode [ 848.825953][T24320] bridge0: port 1(bond2) entered blocking state [ 848.826004][T24320] bridge0: port 1(bond2) entered listening state [ 848.828576][ T45] bridge0: port 1(bond2) entered disabled state [ 849.093120][T24335] batadv_slave_0: entered promiscuous mode [ 849.113930][T24335] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7433'. [ 849.114015][T24335] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 849.221266][ T45] net_ratelimit: 13 callbacks suppressed [ 849.221281][ T45] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.264082][T24341] overlayfs: failed to clone upperpath [ 849.324050][T24335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 849.470062][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.517897][ T31] audit: type=1400 audit(1792131143.626:2360): avc: denied { write } for pid=24324 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 849.690749][ T5745] libceph: connect (2)127.0.0.1:6789 error -22 [ 849.690849][ T5745] libceph: ceph_tcp_connect failed: -22 [ 849.690857][ T5745] libceph: mon0 (2)127.0.0.1:6789 connect error [ 849.724829][ T31] audit: type=1400 audit(1792131143.836:2361): avc: denied { write } for pid=24358 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 849.760214][T24361] ceph: No mds server is up or the cluster is laggy [ 849.794100][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.848133][T24368] ip_tables: iptables: counters copy to user failed while replacing table [ 849.989738][T24373] FAULT_INJECTION: forcing a failure. [ 849.989738][T24373] name failslab, interval 1, probability 0, space 0, times 0 [ 849.989763][T24373] CPU: 0 UID: 0 PID: 24373 Comm: syz.0.7444 Tainted: G L syzkaller #0 PREEMPT(full) [ 849.989780][T24373] Tainted: [L]=SOFTLOCKUP [ 849.989785][T24373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 849.989795][T24373] Call Trace: [ 849.989799][T24373] [ 849.989804][T24373] dump_stack_lvl+0x100/0x190 [ 849.989826][T24373] should_fail_ex.cold+0x5/0xa [ 849.989843][T24373] should_failslab+0xc2/0x120 [ 849.989862][T24373] __kvmalloc_node_noprof+0x113/0x9b0 [ 849.989878][T24373] ? kasan_save_stack+0x3f/0x50 [ 849.989896][T24373] ? bpf_test_run_xdp_live+0x16f/0x760 [ 849.989915][T24373] bpf_test_run_xdp_live+0x16f/0x760 [ 849.989933][T24373] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 849.989963][T24373] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 849.989997][T24373] ? bpf_test_init.isra.0+0x51/0x100 [ 849.990015][T24373] bpf_prog_test_run_xdp+0xd86/0x1670 [ 849.990039][T24373] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 849.990062][T24373] ? fput+0x7c/0x100 [ 849.990080][T24373] ? __bpf_prog_get+0x97/0x290 [ 849.990099][T24373] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 849.990118][T24373] __sys_bpf+0x2265/0x4a30 [ 849.990135][T24373] ? __pfx___sys_bpf+0x10/0x10 [ 849.990146][T24373] ? find_held_lock+0x2b/0x80 [ 849.990163][T24373] ? futex_wake+0x4ea/0x5e0 [ 849.990185][T24373] ? rcu_read_lock_any_held+0x6a/0x90 [ 849.990196][T24373] ? find_held_lock+0x2b/0x80 [ 849.990212][T24373] ? ksys_write+0x190/0x250 [ 849.990225][T24373] ? ksys_write+0x190/0x250 [ 849.990248][T24373] ? __x64_sys_futex+0x34f/0x4d0 [ 849.990263][T24373] ? __x64_sys_futex+0x358/0x4d0 [ 849.990281][T24373] ? xfd_validate_state+0x129/0x190 [ 849.990295][T24373] ? __x64_sys_bpf+0xce/0x140 [ 849.990307][T24373] __x64_sys_bpf+0xce/0x140 [ 849.990320][T24373] ? do_syscall_64+0xae/0x790 [ 849.990337][T24373] do_syscall_64+0x123/0x790 [ 849.990354][T24373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.990366][T24373] RIP: 0033:0x7f236d79e559 [ 849.990376][T24373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 849.990386][T24373] RSP: 002b:00007f236e6ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 849.990397][T24373] RAX: ffffffffffffffda RBX: 00007f236da25fa0 RCX: 00007f236d79e559 [ 849.990405][T24373] RDX: 0000000000000050 RSI: 0000200000000c00 RDI: 000000000000000a [ 849.990411][T24373] RBP: 00007f236d8358b0 R08: 0000000000000000 R09: 0000000000000000 [ 849.990418][T24373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 849.990425][T24373] R13: 00007f236da26038 R14: 00007f236da25fa0 R15: 00007ffda49e1cd8 [ 849.990442][T24373] [ 850.346753][ T7772] usb 6-1: USB disconnect, device number 27 [ 850.350920][ T5613] Bluetooth: hci7: command 0x0406 tx timeout [ 850.351248][ T1399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 850.373485][ T7771] Bluetooth: hci7: Opcode 0x0c1a failed: -110 [ 850.373499][ T7771] Bluetooth: hci7: Error when powering off device on rfkill (-110) [ 850.430627][T24378] device-mapper: ioctl: only supply one of name or uuid, cmd(4) [ 850.509923][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 850.590895][ T1375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 850.591400][ T1375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 850.644711][ T31] audit: type=1400 audit(1792131144.756:2362): avc: denied { write } for pid=24369 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 850.832118][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 851.471030][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 851.928088][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 851.928101][ T31] audit: type=1400 audit(1792131146.036:2365): avc: denied { write } for pid=24437 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 852.280705][T24454] FAULT_INJECTION: forcing a failure. [ 852.280705][T24454] name failslab, interval 1, probability 0, space 0, times 0 [ 852.280731][T24454] CPU: 0 UID: 0 PID: 24454 Comm: syz.0.7469 Tainted: G L syzkaller #0 PREEMPT(full) [ 852.280747][T24454] Tainted: [L]=SOFTLOCKUP [ 852.280752][T24454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 852.280758][T24454] Call Trace: [ 852.280762][T24454] [ 852.280767][T24454] dump_stack_lvl+0x100/0x190 [ 852.280790][T24454] should_fail_ex.cold+0x5/0xa [ 852.280805][T24454] should_failslab+0xc2/0x120 [ 852.280824][T24454] __kmalloc_cache_noprof+0x91/0x6d0 [ 852.280839][T24454] ? alloc_mnt_ns+0xce/0x520 [ 852.280858][T24454] alloc_mnt_ns+0xce/0x520 [ 852.280873][T24454] vfs_open_tree+0x486/0xaf0 [ 852.280884][T24454] ? _raw_spin_unlock+0x28/0x50 [ 852.280898][T24454] ? __pfx_vfs_open_tree+0x10/0x10 [ 852.280913][T24454] __x64_sys_open_tree+0xa3/0x150 [ 852.280932][T24454] do_syscall_64+0x123/0x790 [ 852.280950][T24454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 852.280963][T24454] RIP: 0033:0x7f236d79e559 [ 852.280973][T24454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 852.280985][T24454] RSP: 002b:00007f236e6ab028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 852.280999][T24454] RAX: ffffffffffffffda RBX: 00007f236da25fa0 RCX: 00007f236d79e559 [ 852.281007][T24454] RDX: 0000000000089901 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 852.281014][T24454] RBP: 00007f236d8358b0 R08: 0000000000000000 R09: 0000000000000000 [ 852.281021][T24454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 852.281028][T24454] R13: 00007f236da26038 R14: 00007f236da25fa0 R15: 00007ffda49e1cd8 [ 852.281043][T24454] [ 852.634439][T24466] netlink: 'syz.5.7473': attribute type 1 has an invalid length. [ 852.660331][T24464] netlink: 'syz.0.7472': attribute type 9 has an invalid length. [ 852.660347][T24464] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7472'. [ 852.726337][T24466] 8021q: adding VLAN 0 to HW filter on device bond1 [ 852.824522][T24470] 8021q: adding VLAN 0 to HW filter on device bond1 [ 852.824702][T24470] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 852.824906][T24470] bond1: (slave xfrm1): Error -95 calling set_mac_address [ 853.007041][T24483] overlayfs: failed to clone lowerpath [ 853.009218][ T31] audit: type=1400 audit(1792131147.116:2366): avc: denied { write } for pid=24449 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 853.179766][T24488] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7478'. [ 853.250771][ T31] audit: type=1400 audit(1792131147.366:2367): avc: denied { write } for pid=24490 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 853.390628][T24497] netlink: 'syz.6.7480': attribute type 2 has an invalid length. [ 853.550154][ T5613] Bluetooth: hci2: command 0x0405 tx timeout [ 853.551066][ T7771] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 853.551078][ T7771] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 853.645611][T24510] netlink: 'syz.5.7484': attribute type 4 has an invalid length. [ 854.098187][ T31] audit: type=1400 audit(1792131148.206:2368): avc: denied { write } for pid=24499 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 854.100033][ T31] audit: type=1326 audit(1792131148.206:2369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24526 comm="syz.5.7489" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa9f39e559 code=0x7ffc0000 [ 854.153364][ T31] audit: type=1326 audit(1792131148.266:2370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24526 comm="syz.5.7489" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa9f39e559 code=0x7ffc0000 [ 854.184622][T24527] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7490'. [ 854.184645][T24527] netlink: 'syz.6.7490': attribute type 20 has an invalid length. [ 854.184654][T24527] netlink: 'syz.6.7490': attribute type 21 has an invalid length. [ 854.220488][ T31] audit: type=1326 audit(1792131148.336:2371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24526 comm="syz.5.7489" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7ffa9f39e559 code=0x7ffc0000 [ 854.220519][ T31] audit: type=1326 audit(1792131148.336:2372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24526 comm="syz.5.7489" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa9f39e559 code=0x7ffc0000 [ 854.220540][ T31] audit: type=1326 audit(1792131148.336:2373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24526 comm="syz.5.7489" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa9f39e559 code=0x7ffc0000 [ 854.222964][ T31] audit: type=1326 audit(1792131148.336:2374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24526 comm="syz.5.7489" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7ffa9f39e559 code=0x7ffc0000 [ 854.432798][ C0] net_ratelimit: 8 callbacks suppressed [ 854.432812][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.768705][T24548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.890206][T18198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 855.001899][ T7772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 855.071335][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 855.349274][T24555] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[22787] was attempted by ""[24555] [ 855.391744][T24557] FAULT_INJECTION: forcing a failure. [ 855.391744][T24557] name failslab, interval 1, probability 0, space 0, times 0 [ 855.391768][T24557] CPU: 0 UID: 0 PID: 24557 Comm: syz.5.7501 Tainted: G L syzkaller #0 PREEMPT(full) [ 855.391783][T24557] Tainted: [L]=SOFTLOCKUP [ 855.391787][T24557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 855.391794][T24557] Call Trace: [ 855.391799][T24557] [ 855.391805][T24557] dump_stack_lvl+0x100/0x190 [ 855.391827][T24557] should_fail_ex.cold+0x5/0xa [ 855.391843][T24557] should_failslab+0xc2/0x120 [ 855.391862][T24557] __kmalloc_cache_noprof+0x91/0x6d0 [ 855.391875][T24557] ? __lock_acquire+0x5c0/0x1f40 [ 855.391890][T24557] ? nd_alloc_stack+0x85/0x110 [ 855.391904][T24557] nd_alloc_stack+0x85/0x110 [ 855.391916][T24557] pick_link+0xd4a/0x13c0 [ 855.391932][T24557] step_into_slowpath+0x9b3/0x1150 [ 855.391946][T24557] ? __d_lookup+0x25c/0x4a0 [ 855.391960][T24557] ? __d_lookup+0x25c/0x4a0 [ 855.391982][T24557] ? __pfx_step_into_slowpath+0x10/0x10 [ 855.391998][T24557] ? __d_lookup+0x266/0x4a0 [ 855.392014][T24557] ? lookup_fast+0x2da/0x600 [ 855.392026][T24557] ? inode_permission+0x374/0x620 [ 855.392041][T24557] link_path_walk+0xf28/0x1cc0 [ 855.392062][T24557] path_lookupat+0x74/0xc40 [ 855.392080][T24557] filename_lookup+0x202/0x590 [ 855.392098][T24557] ? __pfx_filename_lookup+0x10/0x10 [ 855.392125][T24557] ? strncpy_from_user+0x19d/0x2d0 [ 855.392144][T24557] ? do_getname+0x191/0x390 [ 855.392156][T24557] user_path_at+0x3c/0x60 [ 855.392171][T24557] __x64_sys_mount+0x1fb/0x310 [ 855.392183][T24557] ? __pfx___x64_sys_mount+0x10/0x10 [ 855.392199][T24557] do_syscall_64+0x123/0x790 [ 855.392219][T24557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.392232][T24557] RIP: 0033:0x7ffa9f39e559 [ 855.392241][T24557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 855.392251][T24557] RSP: 002b:00007ffaa025c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 855.392263][T24557] RAX: ffffffffffffffda RBX: 00007ffa9f625fa0 RCX: 00007ffa9f39e559 [ 855.392270][T24557] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000000 [ 855.392277][T24557] RBP: 00007ffa9f4358b0 R08: 0000200000000640 R09: 0000000000000000 [ 855.392284][T24557] R10: 0000000000100422 R11: 0000000000000246 R12: 0000000000000000 [ 855.392290][T24557] R13: 00007ffa9f626038 R14: 00007ffa9f625fa0 R15: 00007ffe8c4b56a8 [ 855.392304][T24557] [ 855.739550][T24559] printk: console [ttyS0] disabled [ 855.781607][T24559] printk: console [ttyS0] enabled [ 855.789919][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 855.884423][T24571] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 855.951847][ T5613] Bluetooth: hci3: command 0x040f tx timeout [ 855.959475][ T7771] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 855.959491][ T7771] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 856.034507][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.050527][T18198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.088391][T24576] 9pnet_fd: p9_fd_create_unix (24576): problem connecting socket: ./proc/thread-self/fail-nth: -2 [ 856.259648][T24586] pimreg: left allmulticast mode [ 856.352378][ T1533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.352903][ T1533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.864613][T24615] jffs2: notice: (24615) jffs2_build_xattr_subsystem: complete building xattr subsystem, 5 of xdatum (0 unchecked, 1 orphan) and 6 of xref (0 dead, 1 orphan) found. [ 857.178219][ T31] kauditd_printk_skb: 10 callbacks suppressed [ 857.178233][ T31] audit: type=1400 audit(1700000002.330:2385): avc: denied { map } for pid=24629 comm="syz.0.7541" path="/653/dev/sda" dev="devtmpfs" ino=890 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 857.215173][T24632] netlink: 'syz.8.7531': attribute type 1 has an invalid length. [ 857.238444][T24632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 857.291660][T24632] bond0: (slave gretap1): making interface the new active one [ 857.297374][T24632] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 857.555107][T21728] udevd[21728]: 'scsi_id --export --whitelisted -d /dev/sda' [24639] terminated by signal 11 (Segmentation fault) [ 857.796987][ T31] audit: type=1326 audit(1700000002.950:2386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24647 comm="syz.0.7537" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f236d79e559 code=0x7ffc0000 [ 857.797034][ T31] audit: type=1326 audit(1700000002.950:2387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24647 comm="syz.0.7537" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f236d79e559 code=0x7ffc0000 [ 857.867987][ T31] audit: type=1326 audit(1700000003.030:2388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24647 comm="syz.0.7537" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f236d79e559 code=0x7ffc0000 [ 857.868026][ T31] audit: type=1326 audit(1700000003.030:2389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24647 comm="syz.0.7537" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f236d79e559 code=0x7ffc0000 [ 857.936500][ T31] audit: type=1326 audit(1700000003.090:2390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24647 comm="syz.0.7537" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f236d79e559 code=0x7ffc0000 [ 857.936530][ T31] audit: type=1326 audit(1700000003.090:2391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24647 comm="syz.0.7537" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f236d79e559 code=0x7ffc0000 [ 857.936551][ T31] audit: type=1326 audit(1700000003.090:2392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24647 comm="syz.0.7537" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f236d79e559 code=0x7ffc0000 [ 858.035143][ T31] audit: type=1326 audit(1700000003.190:2393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24647 comm="syz.0.7537" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f236d79e559 code=0x7ffc0000 [ 858.035462][ T31] audit: type=1326 audit(1700000003.190:2394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24647 comm="syz.0.7537" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f236d79e559 code=0x7ffc0000 [ 858.188992][T24652] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 858.190353][ T5613] Bluetooth: hci1: command 0x0419 tx timeout [ 858.204342][ T7771] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 858.204357][ T7771] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 858.405778][T24661] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7543'. [ 858.527544][T24669] xt_hashlimit: size too large, truncated to 1048576 [ 858.977658][T24688] netlink: 'syz.5.7549': attribute type 21 has an invalid length. [ 858.977673][T24688] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7549'. [ 859.001155][T24688] netlink: 'syz.5.7549': attribute type 21 has an invalid length. [ 859.001168][T24688] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7549'. [ 859.027557][ T1533] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 859.037547][ T1399] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 859.037574][ T1399] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 859.037592][ T1399] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 859.522806][T24715] overlayfs: failed to clone lowerpath [ 859.523803][T24715] overlayfs: failed to clone lowerpath [ 859.949888][ C0] net_ratelimit: 9 callbacks suppressed [ 859.952210][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 860.196657][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 860.509964][ T5613] Bluetooth: hci0: command 0x0c1a tx timeout [ 860.510060][ T7771] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 860.510071][ T7771] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 860.528579][ T1533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 860.990057][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 861.235919][ T7770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 861.476707][T18198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 861.620497][T18198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.003323][T24790] SELinux: unknown common  [ 862.003357][T24790] SELinux: invalid class [ 862.003394][T24790] SELinux: failed to load policy [ 862.029886][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.112413][ T1533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.276014][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.380139][ T7772] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 862.478321][T24807] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993 [ 862.543275][ T7772] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 862.544703][ T7772] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.629784][ T31] kauditd_printk_skb: 26 callbacks suppressed [ 862.630657][ T31] audit: type=1400 audit(1700000007.780:2421): avc: denied { write } for pid=24796 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 862.671589][T24734] Bluetooth: hci4: command 0x1003 tx timeout [ 862.674584][ T5613] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 862.753097][ T4924] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 862.969927][ T31] audit: type=1400 audit(1700000008.120:2422): avc: denied { write } for pid=24821 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 863.008776][T24826] FAULT_INJECTION: forcing a failure. [ 863.008776][T24826] name failslab, interval 1, probability 0, space 0, times 0 [ 863.008798][T24826] CPU: 0 UID: 0 PID: 24826 Comm: syz.1.7588 Tainted: G L syzkaller #0 PREEMPT(full) [ 863.008815][T24826] Tainted: [L]=SOFTLOCKUP [ 863.008820][T24826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 863.008826][T24826] Call Trace: [ 863.008831][T24826] [ 863.008836][T24826] dump_stack_lvl+0x100/0x190 [ 863.008857][T24826] should_fail_ex.cold+0x5/0xa [ 863.008874][T24826] should_failslab+0xc2/0x120 [ 863.008900][T24826] kmem_cache_alloc_noprof+0x92/0x6a0 [ 863.008916][T24826] ? __kernfs_new_node+0xd2/0xa10 [ 863.008933][T24826] __kernfs_new_node+0xd2/0xa10 [ 863.008949][T24826] ? __pfx___kernfs_new_node+0x10/0x10 [ 863.008964][T24826] ? lock_acquire+0x1d1/0x380 [ 863.008979][T24826] ? kernfs_root+0x23/0x2a0 [ 863.008991][T24826] ? find_held_lock+0x2b/0x80 [ 863.009008][T24826] ? kernfs_root+0xee/0x2a0 [ 863.009018][T24826] ? kernfs_root+0xee/0x2a0 [ 863.009033][T24826] kernfs_new_node+0x117/0x150 [ 863.009050][T24826] __kernfs_create_file+0x53/0x350 [ 863.009068][T24826] sysfs_add_file_mode_ns+0x207/0x3c0 [ 863.009089][T24826] internal_create_group+0x593/0xfb0 [ 863.009104][T24826] ? __pfx_internal_create_group+0x10/0x10 [ 863.009119][T24826] ? kernfs_create_link+0x1bd/0x240 [ 863.009137][T24826] internal_create_groups+0x9d/0x150 [ 863.009150][T24826] device_add+0xf60/0x1970 [ 863.009165][T24826] ? __pfx_device_add+0x10/0x10 [ 863.009177][T24826] ? lockdep_init_map_type+0x5c/0x250 [ 863.009191][T24826] ? __init_waitqueue_head+0xca/0x150 [ 863.009210][T24826] netdev_register_kobject+0x1df/0x410 [ 863.009229][T24826] register_netdevice+0x15b6/0x25a0 [ 863.009247][T24826] ? __pfx_register_netdevice+0x10/0x10 [ 863.009262][T24826] ? dev_addr_mod+0x14f/0x2c0 [ 863.009280][T24826] ip6gre_newlink_common.isra.0+0x153/0x350 [ 863.009294][T24826] ? __pfx_ip6gre_newlink_common.isra.0+0x10/0x10 [ 863.009308][T24826] ? lockdep_rtnl_is_held+0x26/0x40 [ 863.009323][T24826] ? ip6gre_tunnel_find+0x36c/0x430 [ 863.009336][T24826] ip6gre_newlink+0x17d/0x420 [ 863.009350][T24826] ? __pfx_ip6gre_newlink+0x10/0x10 [ 863.009362][T24826] rtnl_newlink+0x1697/0x2620 [ 863.009380][T24826] ? __pfx_rtnl_newlink+0x10/0x10 [ 863.009391][T24826] ? avc_has_perm_noaudit+0x56/0x470 [ 863.009404][T24826] ? find_held_lock+0x2b/0x80 [ 863.009419][T24826] ? avc_has_perm_noaudit+0x11e/0x470 [ 863.009434][T24826] ? avc_has_perm_noaudit+0x11e/0x470 [ 863.009460][T24826] ? lock_acquire+0x1d1/0x380 [ 863.009472][T24826] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 863.009485][T24826] ? find_held_lock+0x2b/0x80 [ 863.009502][T24826] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 863.009514][T24826] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 863.009527][T24826] ? __pfx_rtnl_newlink+0x10/0x10 [ 863.009540][T24826] rtnetlink_rcv_msg+0x95e/0xe90 [ 863.009554][T24826] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 863.009571][T24826] ? ref_tracker_free+0x37e/0x6c0 [ 863.009586][T24826] netlink_rcv_skb+0x159/0x420 [ 863.009604][T24826] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 863.009618][T24826] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 863.009640][T24826] ? netlink_deliver_tap+0x1ae/0xcc0 [ 863.009659][T24826] netlink_unicast+0x65f/0x950 [ 863.009678][T24826] ? __pfx_netlink_unicast+0x10/0x10 [ 863.009700][T24826] netlink_sendmsg+0x8b0/0xda0 [ 863.009720][T24826] ? __pfx_netlink_sendmsg+0x10/0x10 [ 863.009738][T24826] ? selinux_socket_sendmsg+0x198/0x2f0 [ 863.009756][T24826] ____sys_sendmsg+0xa4d/0xbe0 [ 863.009770][T24826] ? __pfx_netlink_sendmsg+0x10/0x10 [ 863.009789][T24826] ? __pfx_____sys_sendmsg+0x10/0x10 [ 863.009810][T24826] ___sys_sendmsg+0x190/0x1e0 [ 863.009826][T24826] ? __pfx____sys_sendmsg+0x10/0x10 [ 863.009841][T24826] ? futex_wait+0x11e/0x370 [ 863.009858][T24826] ? find_held_lock+0x2b/0x80 [ 863.009884][T24826] __sys_sendmsg+0x160/0x210 [ 863.009901][T24826] ? __pfx___sys_sendmsg+0x10/0x10 [ 863.009923][T24826] do_syscall_64+0x123/0x790 [ 863.009944][T24826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.009957][T24826] RIP: 0033:0x7f16ec19e559 [ 863.009969][T24826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 863.009980][T24826] RSP: 002b:00007f16ecfe9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 863.009993][T24826] RAX: ffffffffffffffda RBX: 00007f16ec425fa0 RCX: 00007f16ec19e559 [ 863.010000][T24826] RDX: 0000000020040040 RSI: 0000200000000000 RDI: 0000000000000004 [ 863.010007][T24826] RBP: 00007f16ec2358b0 R08: 0000000000000000 R09: 0000000000000000 [ 863.010014][T24826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 863.010021][T24826] R13: 00007f16ec426038 R14: 00007f16ec425fa0 R15: 00007ffe9bc349c8 [ 863.010036][T24826] [ 863.721568][T24840] rxe_eth0 speed is unknown, defaulting to 1000 [ 863.728961][T24842] geneve2: entered promiscuous mode [ 863.728977][T24842] geneve2: entered allmulticast mode [ 863.901088][T24843] netlink: 'syz.8.7594': attribute type 12 has an invalid length. [ 864.609435][T24855] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7600'. [ 864.676481][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 864.676520][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 864.971847][ T197] net_ratelimit: 7 callbacks suppressed [ 864.971861][ T197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.055448][T24871] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 865.149923][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.151764][ T7772] usb 6-1: USB disconnect, device number 28 [ 865.262659][T24869] SELinux: ebitmap: truncated map [ 865.262863][T24869] SELinux: invalid class [ 865.280785][T24875] overlayfs: failed to clone upperpath [ 865.361837][T24869] SELinux: failed to load policy [ 865.396390][ T7771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.503445][T24879] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 865.596146][T24884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 865.677685][T24889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 865.948395][T24902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.948570][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.981554][T24899] kvm: MONITOR instruction emulated as NOP! [ 866.081196][ T1375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.191382][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.367754][T24922] 9pnet: p9_errstr2errno: server reported unknown error 000 [ 866.436304][ T7770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.676994][T24942] netlink: 8752 bytes leftover after parsing attributes in process `syz.5.7634'. [ 866.767948][T24948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7636'. [ 866.942327][T24959] fuse: fd is not a fuse device [ 867.236300][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.236941][ T197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.756053][T24989] FAULT_INJECTION: forcing a failure. [ 867.756053][T24989] name failslab, interval 1, probability 0, space 0, times 0 [ 867.756078][T24989] CPU: 0 UID: 0 PID: 24989 Comm: syz.6.7652 Tainted: G L syzkaller #0 PREEMPT(full) [ 867.756097][T24989] Tainted: [L]=SOFTLOCKUP [ 867.756102][T24989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 867.756110][T24989] Call Trace: [ 867.756114][T24989] [ 867.756121][T24989] dump_stack_lvl+0x100/0x190 [ 867.756143][T24989] should_fail_ex.cold+0x5/0xa [ 867.756160][T24989] should_failslab+0xc2/0x120 [ 867.756180][T24989] __kmalloc_cache_noprof+0x91/0x6d0 [ 867.756195][T24989] ? erofs_init_fs_context+0x94/0x360 [ 867.756210][T24989] erofs_init_fs_context+0x94/0x360 [ 867.756224][T24989] alloc_fs_context+0x60c/0xf40 [ 867.756240][T24989] __x64_sys_fsopen+0xed/0x220 [ 867.756255][T24989] do_syscall_64+0x123/0x790 [ 867.756273][T24989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.756286][T24989] RIP: 0033:0x7f5a7fb9e559 [ 867.756296][T24989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 867.756307][T24989] RSP: 002b:00007f5a80b3a028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 867.756319][T24989] RAX: ffffffffffffffda RBX: 00007f5a7fe25fa0 RCX: 00007f5a7fb9e559 [ 867.756326][T24989] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000280 [ 867.756333][T24989] RBP: 00007f5a7fc358b0 R08: 0000000000000000 R09: 0000000000000000 [ 867.756339][T24989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 867.756346][T24989] R13: 00007f5a7fe26038 R14: 00007f5a7fe25fa0 R15: 00007ffe8db744c8 [ 867.756360][T24989] [ 868.310078][ T7770] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 868.461929][ T7770] usb 2-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 868.464270][ T7770] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 868.464287][ T7770] usb 2-1: Product: syz [ 868.464296][ T7770] usb 2-1: Manufacturer: syz [ 868.552566][ T31] audit: type=1400 audit(1700000013.710:2423): avc: denied { mounton } for pid=25016 comm="syz.6.7665" path="/1292/dev/mapper/control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 868.649885][ T7771] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 868.803461][ T7771] usb 6-1: Using ep0 maxpacket: 8 [ 868.803901][ T7771] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 868.808294][ T7771] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 868.808326][ T7771] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.349979][ C0] net_ratelimit: 21 callbacks suppressed [ 870.349995][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.430037][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.569952][ T1533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.597324][ T7770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.774743][ T5883] usb 2-1: USB disconnect, device number 12 [ 870.827528][T25028] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7671'. [ 870.827564][T25028] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7671'. [ 871.389906][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.415924][ T7772] usb 6-1: USB disconnect, device number 29 [ 871.640873][ T7771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.682443][ T1533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.041987][T25066] FAULT_INJECTION: forcing a failure. [ 872.041987][T25066] name failslab, interval 1, probability 0, space 0, times 0 [ 872.042013][T25066] CPU: 0 UID: 0 PID: 25066 Comm: syz.1.7687 Tainted: G L syzkaller #0 PREEMPT(full) [ 872.042032][T25066] Tainted: [L]=SOFTLOCKUP [ 872.042037][T25066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 872.042045][T25066] Call Trace: [ 872.042050][T25066] [ 872.042056][T25066] dump_stack_lvl+0x100/0x190 [ 872.042077][T25066] should_fail_ex.cold+0x5/0xa [ 872.042093][T25066] should_failslab+0xc2/0x120 [ 872.042112][T25066] __kmalloc_noprof+0xfc/0x840 [ 872.042128][T25066] ? afs_alloc_vlserver_list+0x24/0xa0 [ 872.042146][T25066] afs_alloc_vlserver_list+0x24/0xa0 [ 872.042160][T25066] afs_lookup_cell+0x14c6/0x1940 [ 872.042183][T25066] ? __pfx_afs_lookup_cell+0x10/0x10 [ 872.042198][T25066] ? __pfx___might_resched+0x10/0x10 [ 872.042210][T25066] ? lock_acquire+0x1d1/0x380 [ 872.042226][T25066] ? down_write+0x146/0x1f0 [ 872.042246][T25066] afs_cell_init+0x17d/0x380 [ 872.042262][T25066] afs_proc_rootcell_write+0x1c9/0x280 [ 872.042278][T25066] proc_simple_write+0x10e/0x1a0 [ 872.042293][T25066] ? __pfx_proc_simple_write+0x10/0x10 [ 872.042308][T25066] proc_reg_write+0x240/0x330 [ 872.042322][T25066] vfs_write+0x2aa/0x1050 [ 872.042337][T25066] ? __pfx_proc_reg_write+0x10/0x10 [ 872.042350][T25066] ? lock_acquire+0x1d1/0x380 [ 872.042362][T25066] ? __fget_files+0x34/0x3d0 [ 872.042379][T25066] ? __pfx_vfs_write+0x10/0x10 [ 872.042391][T25066] ? find_held_lock+0x2b/0x80 [ 872.042410][T25066] ? __fget_files+0x215/0x3d0 [ 872.042430][T25066] ? __fget_files+0x21f/0x3d0 [ 872.042450][T25066] ksys_write+0x12a/0x250 [ 872.042464][T25066] ? __pfx_ksys_write+0x10/0x10 [ 872.042481][T25066] do_syscall_64+0x123/0x790 [ 872.042499][T25066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.042511][T25066] RIP: 0033:0x7f16ec19e559 [ 872.042522][T25066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 872.042532][T25066] RSP: 002b:00007f16ecfe9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 872.042544][T25066] RAX: ffffffffffffffda RBX: 00007f16ec425fa0 RCX: 00007f16ec19e559 [ 872.042551][T25066] RDX: 0000000000000001 RSI: 00002000000008c0 RDI: 0000000000000003 [ 872.042558][T25066] RBP: 00007f16ec2358b0 R08: 0000000000000000 R09: 0000000000000000 [ 872.042565][T25066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 872.042572][T25066] R13: 00007f16ec426038 R14: 00007f16ec425fa0 R15: 00007ffe9bc349c8 [ 872.042587][T25066] [ 872.351006][ T197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.424576][ T31] audit: type=1400 audit(1700000017.580:2424): avc: denied { name_bind 0x1000000 } for pid=25074 comm="syz.1.7690" path="socket:[99736]" dev="sockfs" ino=99736 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 872.450774][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.693180][ T7772] hid_parser_main: 43 callbacks suppressed [ 872.694552][ T7772] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 872.724547][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.752182][ T7772] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 872.873130][T21728] udevd[21728]: 'fido_id' [25084] terminated by signal 11 (Segmentation fault) [ 873.337552][T25101] netlink: 7 bytes leftover after parsing attributes in process `syz.8.7701'. [ 873.519463][ T7771] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 873.534250][ T7771] hid-generic 0000:0000:0000.0020: hidraw0: HID v0.00 Device [syz1] on syz0 [ 873.723252][T21728] udevd[21728]: 'fido_id' [25110] terminated by signal 11 (Segmentation fault) [ 873.872493][T25120] pimreg: entered allmulticast mode [ 873.971274][T25119] pimreg: left allmulticast mode [ 874.434999][T25139] binder: 25138:25139 ioctl c0306201 200000000080 returned -14 [ 875.213120][T25173] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7730'. [ 875.268101][T25171] rxe_eth0 speed is unknown, defaulting to 1000 [ 875.471270][ T5883] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 875.550249][ C0] net_ratelimit: 9 callbacks suppressed [ 875.550280][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.619868][ T5883] usb 6-1: Using ep0 maxpacket: 16 [ 875.872434][ T7771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.092922][ T1375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.243289][T25188] netlink: 6 bytes leftover after parsing attributes in process `syz.6.7737'. [ 876.243304][T25188] netlink: 56 bytes leftover after parsing attributes in process `syz.6.7737'. [ 876.392194][T25191] FAULT_INJECTION: forcing a failure. [ 876.392194][T25191] name failslab, interval 1, probability 0, space 0, times 0 [ 876.392219][T25191] CPU: 0 UID: 0 PID: 25191 Comm: syz.0.7738 Tainted: G L syzkaller #0 PREEMPT(full) [ 876.392237][T25191] Tainted: [L]=SOFTLOCKUP [ 876.392242][T25191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 876.392249][T25191] Call Trace: [ 876.392253][T25191] [ 876.392259][T25191] dump_stack_lvl+0x100/0x190 [ 876.392285][T25191] should_fail_ex.cold+0x5/0xa [ 876.392302][T25191] should_failslab+0xc2/0x120 [ 876.392322][T25191] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 876.392340][T25191] ? __x64_sys_mount+0x293/0x310 [ 876.392351][T25191] ? do_syscall_64+0x123/0x790 [ 876.392368][T25191] ? sock_alloc_inode+0x26/0x2c0 [ 876.392383][T25191] ? __pfx_sock_alloc_inode+0x10/0x10 [ 876.392398][T25191] sock_alloc_inode+0x26/0x2c0 [ 876.392410][T25191] ? __pfx_sock_alloc_inode+0x10/0x10 [ 876.392422][T25191] alloc_inode+0x68/0x250 [ 876.392436][T25191] sock_alloc+0x44/0x280 [ 876.392447][T25191] ? security_socket_create+0x7f/0x250 [ 876.392463][T25191] __sock_create+0xc2/0x860 [ 876.392480][T25191] p9_fd_create_unix+0x20a/0x350 [ 876.392496][T25191] ? __pfx_p9_fd_create_unix+0x10/0x10 [ 876.392517][T25191] ? lockdep_init_map_type+0x5c/0x250 [ 876.392535][T25191] p9_client_create+0x563/0xd40 [ 876.392547][T25191] ? __pfx_p9_client_create+0x10/0x10 [ 876.392561][T25191] ? lockdep_init_map_type+0x5c/0x250 [ 876.392575][T25191] ? __raw_spin_lock_init+0x3a/0x110 [ 876.392593][T25191] v9fs_session_init+0x3c/0xdd0 [ 876.392604][T25191] ? v9fs_get_tree+0x9c/0xb50 [ 876.392620][T25191] v9fs_get_tree+0xb8/0xb50 [ 876.392633][T25191] ? rcu_is_watching+0x13/0xc0 [ 876.392650][T25191] ? __pfx_v9fs_get_tree+0x10/0x10 [ 876.392665][T25191] ? bpf_lsm_capable+0x9/0x10 [ 876.392676][T25191] ? security_capable+0x80/0x260 [ 876.392690][T25191] vfs_get_tree+0x92/0x320 [ 876.392702][T25191] path_mount+0x7d0/0x2850 [ 876.392716][T25191] ? __pfx_path_mount+0x10/0x10 [ 876.392727][T25191] ? lockdep_hardirqs_on+0x7d/0x110 [ 876.392745][T25191] ? putname+0xb1/0x110 [ 876.392754][T25191] ? kmem_cache_free+0x127/0x6c0 [ 876.392771][T25191] ? __x64_sys_mount+0x293/0x310 [ 876.392788][T25191] __x64_sys_mount+0x293/0x310 [ 876.392801][T25191] ? __pfx___x64_sys_mount+0x10/0x10 [ 876.392817][T25191] do_syscall_64+0x123/0x790 [ 876.392835][T25191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.392849][T25191] RIP: 0033:0x7f236d79e559 [ 876.392860][T25191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 876.392872][T25191] RSP: 002b:00007f236e6ab028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 876.392885][T25191] RAX: ffffffffffffffda RBX: 00007f236da25fa0 RCX: 00007f236d79e559 [ 876.392893][T25191] RDX: 00002000000001c0 RSI: 0000200000000180 RDI: 00002000000000c0 [ 876.392901][T25191] RBP: 00007f236d8358b0 R08: 0000200000000300 R09: 0000000000000000 [ 876.392909][T25191] R10: 0000000000800000 R11: 0000000000000246 R12: 0000000000000000 [ 876.392917][T25191] R13: 00007f236da26038 R14: 00007f236da25fa0 R15: 00007ffda49e1cd8 [ 876.392932][T25191] [ 876.394063][T25191] socket: no more sockets [ 876.394069][T25191] 9pnet_fd: p9_fd_create_unix (25191): problem creating socket [ 876.591682][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.797710][T25189] EXT4-fs (sda1): re-mounted 4f91c6db-4997-4bb4-91b8-7e83a20c1bf1. [ 876.913217][ T7772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.930485][T25196] FAULT_INJECTION: forcing a failure. [ 876.930485][T25196] name failslab, interval 1, probability 0, space 0, times 0 [ 876.930510][T25196] CPU: 0 UID: 0 PID: 25196 Comm: syz.6.7740 Tainted: G L syzkaller #0 PREEMPT(full) [ 876.930531][T25196] Tainted: [L]=SOFTLOCKUP [ 876.930536][T25196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 876.930544][T25196] Call Trace: [ 876.930549][T25196] [ 876.930554][T25196] dump_stack_lvl+0x100/0x190 [ 876.930576][T25196] should_fail_ex.cold+0x5/0xa [ 876.930595][T25196] should_failslab+0xc2/0x120 [ 876.930613][T25196] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 876.930629][T25196] ? __lock_acquire+0x5c0/0x1f40 [ 876.930643][T25196] ? __alloc_skb+0x140/0x710 [ 876.930656][T25196] __alloc_skb+0x140/0x710 [ 876.930667][T25196] ? __pfx___alloc_skb+0x10/0x10 [ 876.930684][T25196] ? lock_acquire+0x1d1/0x380 [ 876.930697][T25196] ? do_raw_write_lock+0x11e/0x260 [ 876.930715][T25196] tipc_buf_acquire+0x26/0xe0 [ 876.930730][T25196] named_prepare_buf+0x29/0x170 [ 876.930747][T25196] tipc_named_publish+0x1f2/0x760 [ 876.930764][T25196] tipc_nametbl_publish+0x1d5/0x300 [ 876.930782][T25196] tipc_sk_publish+0x1d8/0x430 [ 876.930794][T25196] ? __pfx_tipc_sk_publish+0x10/0x10 [ 876.930807][T25196] ? __local_bh_enable_ip+0xa5/0x120 [ 876.930822][T25196] tipc_sk_bind+0x16f/0x380 [ 876.930836][T25196] tipc_bind+0x18d/0x280 [ 876.930850][T25196] __sys_bind+0x1a9/0x260 [ 876.930868][T25196] ? __pfx___sys_bind+0x10/0x10 [ 876.930894][T25196] __x64_sys_bind+0x72/0xb0 [ 876.930910][T25196] ? lockdep_hardirqs_on+0x7d/0x110 [ 876.930926][T25196] do_syscall_64+0x123/0x790 [ 876.930944][T25196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.930955][T25196] RIP: 0033:0x7f5a7fb9e559 [ 876.930965][T25196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 876.930975][T25196] RSP: 002b:00007f5a80b3a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 876.930987][T25196] RAX: ffffffffffffffda RBX: 00007f5a7fe25fa0 RCX: 00007f5a7fb9e559 [ 876.930994][T25196] RDX: 0000000000000010 RSI: 0000200000000240 RDI: 0000000000000003 [ 876.931001][T25196] RBP: 00007f5a7fc358b0 R08: 0000000000000000 R09: 0000000000000000 [ 876.931008][T25196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 876.931014][T25196] R13: 00007f5a7fe26038 R14: 00007f5a7fe25fa0 R15: 00007ffe8db744c8 [ 876.931030][T25196] [ 876.931043][T25196] tipc: Publication distribution failure [ 877.221680][ T1415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 877.283117][T25201] ------------[ cut here ]------------ [ 877.283128][T25201] !reader [ 877.283132][T25201] WARNING: kernel/trace/ring_buffer.c:8005 at ring_buffer_map_get_reader+0x5f3/0x930, CPU#0: syz.1.7742/25201 [ 877.303099][T25201] Modules linked in: [ 877.306971][T25201] CPU: 0 UID: 0 PID: 25201 Comm: syz.1.7742 Tainted: G L syzkaller #0 PREEMPT(full) [ 877.317874][T25201] Tainted: [L]=SOFTLOCKUP [ 877.322166][T25201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 877.332191][T25201] RIP: 0010:ring_buffer_map_get_reader+0x5f3/0x930 [ 877.338672][T25201] Code: ff 48 89 df e8 be 20 fe ff 48 89 c5 e8 76 86 fb ff 48 85 ed 0f 85 9f fc ff ff 4c 8b 74 24 58 4c 8b 7c 24 60 e8 5e 86 fb ff 90 <0f> 0b 90 e8 55 86 fb ff 49 8d bf d0 01 00 00 48 b8 00 00 00 00 00 [ 877.358250][T25201] RSP: 0018:ffffc90004747d98 EFLAGS: 00010087 [ 877.364290][T25201] RAX: 000000000000089c RBX: ffff88801d095000 RCX: ffffc90010449000 [ 877.372232][T25201] RDX: 0000000000080000 RSI: ffffffff8210d032 RDI: ffff8880227e4b00 [ 877.380174][T25201] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 877.388117][T25201] R10: 0000000000007ed6 R11: ffff88801d0950b0 R12: ffff88801d0950b8 [ 877.396060][T25201] R13: dffffc0000000000 R14: ffff88801d095198 R15: ffff88801d056000 [ 877.404008][T25201] FS: 00007f16ecfe96c0(0000) GS:ffff888122946000(0000) knlGS:0000000000000000 [ 877.412909][T25201] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 877.419472][T25201] CR2: 00007f5a7fdf0158 CR3: 000000008a11c000 CR4: 00000000003526f0 [ 877.427416][T25201] DR0: 0000000000000000 DR1: 0000000000000009 DR2: 0000000000000000 [ 877.435357][T25201] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 877.443300][T25201] Call Trace: [ 877.446563][T25201] [ 877.449472][T25201] ? __pfx_ring_buffer_map_get_reader+0x10/0x10 [ 877.455696][T25201] tracing_buffers_ioctl+0x2e6/0x3d0 [ 877.460951][T25201] ? __pfx_tracing_buffers_ioctl+0x10/0x10 [ 877.466736][T25201] __x64_sys_ioctl+0x18e/0x210 [ 877.471475][T25201] do_syscall_64+0x123/0x790 [ 877.476049][T25201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.481925][T25201] RIP: 0033:0x7f16ec19e559 [ 877.486310][T25201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 877.505887][T25201] RSP: 002b:00007f16ecfe9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 877.514279][T25201] RAX: ffffffffffffffda RBX: 00007f16ec425fa0 RCX: 00007f16ec19e559 [ 877.522218][T25201] RDX: 0000000000000000 RSI: 0000000000005220 RDI: 0000000000000004 [ 877.530158][T25201] RBP: 00007f16ec2358b0 R08: 0000000000000000 R09: 0000000000000000 [ 877.538098][T25201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 877.546036][T25201] R13: 00007f16ec426038 R14: 00007f16ec425fa0 R15: 00007ffe9bc349c8 [ 877.553985][T25201] [ 877.556978][T25201] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 877.564230][T25201] CPU: 0 UID: 0 PID: 25201 Comm: syz.1.7742 Tainted: G L syzkaller #0 PREEMPT(full) [ 877.575132][T25201] Tainted: [L]=SOFTLOCKUP [ 877.579425][T25201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 877.589448][T25201] Call Trace: [ 877.592699][T25201] [ 877.595601][T25201] dump_stack_lvl+0x100/0x190 [ 877.600258][T25201] vpanic+0x553/0x970 [ 877.604210][T25201] ? __pfx_vpanic+0x10/0x10 [ 877.608686][T25201] panic+0xd1/0xe0 [ 877.612382][T25201] ? __pfx_panic+0x10/0x10 [ 877.616776][T25201] check_panic_on_warn.cold+0x19/0x34 [ 877.622127][T25201] ? ring_buffer_map_get_reader+0x5f3/0x930 [ 877.627994][T25201] __warn.cold+0x191/0x318 [ 877.632389][T25201] __report_bug+0x30f/0x440 [ 877.636869][T25201] ? ring_buffer_map_get_reader+0x5f3/0x930 [ 877.642735][T25201] ? __pfx___report_bug+0x10/0x10 [ 877.647737][T25201] ? check_prev_add+0x354/0xe60 [ 877.652569][T25201] ? trace_contention_end+0x126/0x160 [ 877.657925][T25201] ? rb_set_head_page+0x1e6/0x2f0 [ 877.662926][T25201] ? ring_buffer_map_get_reader+0x5f3/0x930 [ 877.668793][T25201] report_bug+0xb3/0x220 [ 877.673017][T25201] ? ring_buffer_map_get_reader+0x5f3/0x930 [ 877.678891][T25201] handle_bug+0x16a/0x2a0 [ 877.683189][T25201] exc_invalid_op+0x17/0x50 [ 877.687661][T25201] asm_exc_invalid_op+0x1a/0x20 [ 877.692481][T25201] RIP: 0010:ring_buffer_map_get_reader+0x5f3/0x930 [ 877.698964][T25201] Code: ff 48 89 df e8 be 20 fe ff 48 89 c5 e8 76 86 fb ff 48 85 ed 0f 85 9f fc ff ff 4c 8b 74 24 58 4c 8b 7c 24 60 e8 5e 86 fb ff 90 <0f> 0b 90 e8 55 86 fb ff 49 8d bf d0 01 00 00 48 b8 00 00 00 00 00 [ 877.718554][T25201] RSP: 0018:ffffc90004747d98 EFLAGS: 00010087 [ 877.724590][T25201] RAX: 000000000000089c RBX: ffff88801d095000 RCX: ffffc90010449000 [ 877.732535][T25201] RDX: 0000000000080000 RSI: ffffffff8210d032 RDI: ffff8880227e4b00 [ 877.740486][T25201] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 877.748425][T25201] R10: 0000000000007ed6 R11: ffff88801d0950b0 R12: ffff88801d0950b8 [ 877.756365][T25201] R13: dffffc0000000000 R14: ffff88801d095198 R15: ffff88801d056000 [ 877.764311][T25201] ? ring_buffer_map_get_reader+0x5f2/0x930 [ 877.770182][T25201] ? ring_buffer_map_get_reader+0x5f2/0x930 [ 877.776061][T25201] ? __pfx_ring_buffer_map_get_reader+0x10/0x10 [ 877.782280][T25201] tracing_buffers_ioctl+0x2e6/0x3d0 [ 877.787536][T25201] ? __pfx_tracing_buffers_ioctl+0x10/0x10 [ 877.793312][T25201] __x64_sys_ioctl+0x18e/0x210 [ 877.798057][T25201] do_syscall_64+0x123/0x790 [ 877.802623][T25201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.808485][T25201] RIP: 0033:0x7f16ec19e559 [ 877.812878][T25201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 877.832466][T25201] RSP: 002b:00007f16ecfe9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 877.840847][T25201] RAX: ffffffffffffffda RBX: 00007f16ec425fa0 RCX: 00007f16ec19e559 [ 877.848788][T25201] RDX: 0000000000000000 RSI: 0000000000005220 RDI: 0000000000000004 [ 877.856730][T25201] RBP: 00007f16ec2358b0 R08: 0000000000000000 R09: 0000000000000000 [ 877.864670][T25201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 877.872622][T25201] R13: 00007f16ec426038 R14: 00007f16ec425fa0 R15: 00007ffe9bc349c8 [ 877.880571][T25201] [ 877.883605][T25201] Kernel Offset: disabled [ 877.887899][T25201] Rebooting in 86400 seconds..