last executing test programs: 1m1.159663132s ago: executing program 2 (id=14): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x184) mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, r0, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in6={0xa, 0x4e20, 0x8, @empty, 0x78}}}, 0x90) 1m1.054663987s ago: executing program 2 (id=15): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') unshare(0x20000400) fchdir(r0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r1 = getpid() r2 = syz_open_procfs(r1, &(0x7f00000001c0)='projid_map\x00') setresuid(0x0, 0xee00, 0xffffffffffffffff) cachestat(r2, &(0x7f0000000000)={0x264, 0x1}, 0x0, 0x0) 1m0.871927645s ago: executing program 2 (id=19): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r4 = socket(0x10, 0x803, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x6, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r5 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r3, r6, 0x25, 0x0, @val=@netkit={@void, @value=r3}}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r2, @ANYBLOB="46ff0f00000000001c00128009000100626f6e64000000000c000280050001"], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xe2, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 1m0.685106654s ago: executing program 2 (id=24): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) pivot_root(&(0x7f0000000240)='./file0/../file0/../file0\x00', &(0x7f0000000340)='./file0\x00') 1m0.604698798s ago: executing program 2 (id=26): r0 = gettid() rt_sigtimedwait(&(0x7f00000000c0)={[0xe]}, 0x0, 0x0, 0x8) tkill(r0, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) set_mempolicy_home_node(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0) 59.659400523s ago: executing program 2 (id=39): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000738000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000530000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 59.620248815s ago: executing program 32 (id=39): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000738000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000530000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 47.659245827s ago: executing program 5 (id=238): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x7fffffff, 0x4) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000080)=0x80000000, 0x4) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x1, 0x1, 0xfc, 0x6, @random="001122334455"}, 0x14) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1}}, 0x0, 0x2}, 0x94) write(r0, &(0x7f0000000000)="01", 0x1) 47.645049228s ago: executing program 5 (id=240): r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0xc0) writev(r0, 0x0, 0x0) write$P9_RLCREATE(r0, 0x0, 0x0) 47.60009452s ago: executing program 5 (id=241): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='7', 0x1) socket$inet(0xa, 0x801, 0x84) 47.536992383s ago: executing program 5 (id=244): syz_mount_image$msdos(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x800082, &(0x7f0000000680)=ANY=[@ANYRES64=0x0], 0x1, 0x1ca, &(0x7f0000001080)="$eJzs3bGKE0EYB/AvyV4uiMXZisWCjVVQn2BVcnC4IChbaKVw2tyJ4DWrVd7CN/BVfB1JdV0kTjTkWOFENuvd/n5NPua/y3yzgUyTTF7feX9y/OHs3ddvX2IyGURWRBHngziIYYwimceWQeMoAHBlnC+X8X2ZXOLyxztoCQBo2V/u/wDANWD/B4D+sf8DQP+8ePnq6aOynD3P80nEYl5XdZVeUz6KcnY//+lgc9eirqv07cDDo3L2IOX5dr4XN9b5w8Z8HPfupnyVPXlWpjxLV9TVfhw3NVwMWngKAAAAAAAAAAAAAAAAAAAAAACwW9P8t8bzfabT8R/yVB0ejddjF8/3yeJ21jDhuJVlAAAAAAAAAAAAAAAAAAAAwJV29unzyZvT07cf2ywiYh4RxSXvimxrZPGruDX8t55HEdHySndY3Gz9Hdxfz9D1Sq97sXrO/0EbF4rY6+ozCQAAAAAAAAAAAAAAAAAA+mrzo9+uOwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA7mz+/7+9YjXPsOuFAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQaz8CAAD//6fMOv0=") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='./file0/../file0\x00') 47.412975249s ago: executing program 5 (id=245): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0xa00, 0x0, 0x101, 0x100, 0x1800}}) 47.17941281s ago: executing program 5 (id=247): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x3}, 0x8) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000240)={0x80, 0x3, 0x3, 0x3}, 0x8) sendto$inet(r0, &(0x7f00000000c0)='}', 0xff04, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) 47.17926925s ago: executing program 33 (id=247): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x3}, 0x8) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000240)={0x80, 0x3, 0x3, 0x3}, 0x8) sendto$inet(r0, &(0x7f00000000c0)='}', 0xff04, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) 42.28759988s ago: executing program 3 (id=319): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000000040)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0xfffffffd, @local, 0x2}, 0x1c) listen(r1, 0xfff) syz_emit_ethernet(0x4b, &(0x7f0000000480)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x15, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, @local, {[], {{0x2, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0xffff}, {"f1"}}}}}}}, 0x0) pipe(&(0x7f0000000000)) close_range(r0, 0xffffffffffffffff, 0x0) 42.151310497s ago: executing program 3 (id=321): r0 = socket$inet6(0xa, 0x3, 0x88) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000840)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff020000000000000000000000000001"], 0x0) 42.140012767s ago: executing program 3 (id=323): r0 = syz_pidfd_open(0x0, 0x0) setns(r0, 0x24020000) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000003c0)='.\x00', 0x28384bb, &(0x7f0000003780)=ANY=[@ANYRES8=0x0, @ANYRESHEX=r0, @ANYRES8, @ANYRESOCT=0x0, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYRESHEX, @ANYRES8, @ANYRESOCT, @ANYRES8=0x0], 0x5, 0x0, &(0x7f0000000000)) r1 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x821, 0x0) 41.968720035s ago: executing program 3 (id=328): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) pivot_root(0x0, &(0x7f0000000340)='./file0\x00') 41.818466362s ago: executing program 3 (id=335): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/console\x00', 0x0, 0x0) read(r0, 0x0, 0x0) 41.766855204s ago: executing program 0 (id=336): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='7', 0x1) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, 0x0, 0x20000000) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) 41.675199749s ago: executing program 0 (id=338): recvmmsg(0xffffffffffffffff, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}], 0x2}, 0x10009}], 0x1, 0x10000, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d000000000000000000000010040000000000000000000009030000000000000061"], 0x0, 0x52}, 0x28) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3aa4c29d320b3d5b131d1208fcf3f39279"], 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x40040) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000003000000000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="010000000300"/20], 0x5f) 41.573205874s ago: executing program 0 (id=341): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xc0, 0x49, 0x7fff0000}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) 41.530746956s ago: executing program 3 (id=344): openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x1, 0x3, 0x2}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x200000000}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r1, &(0x7f0000002140)=""/17, 0x11, 0x0) 41.530350496s ago: executing program 0 (id=345): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) pivot_root(0x0, &(0x7f0000000340)='./file0\x00') 41.481891338s ago: executing program 34 (id=344): openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x1, 0x3, 0x2}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x200000000}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r1, &(0x7f0000002140)=""/17, 0x11, 0x0) 41.468664059s ago: executing program 0 (id=348): socket(0x10, 0x803, 0x0) socket$inet(0xa, 0x801, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000ffff2abd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1503e3ffb309180008000a00", @ANYRES32, @ANYBLOB="240012800c0001006d6163766c616e00140002800800070008000000060002000100000008000500", @ANYRES16], 0x54}, 0x1, 0x0, 0x0, 0x24004845}, 0x8000002) 41.213912741s ago: executing program 0 (id=358): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) sendmsg$NFNL_MSG_CTHELPER_GET(r0, 0x0, 0x20000000) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) 41.195009142s ago: executing program 35 (id=358): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) sendmsg$NFNL_MSG_CTHELPER_GET(r0, 0x0, 0x20000000) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) 34.117991464s ago: executing program 4 (id=490): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x5, 0x1, 0x6}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000000)={@in={{0x2, 0x4e24, @rand_addr=0x64010100}}, 0x0, 0x0, 0x3a, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r0, 0xe4776000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4f8, 0x0, 0xd0, 0x1a0, 0x270, 0x428, 0x0, 0xd0, 0x1a0, 0x358, 0x428, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c) 33.213334717s ago: executing program 4 (id=497): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000018c0)={0x80000000}) 33.066182714s ago: executing program 4 (id=498): recvmmsg(0xffffffffffffffff, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001d40)=""/61, 0x46}, {0x0, 0x20}], 0x2}, 0x10009}], 0x1, 0x10000, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d00000000000000000000001004"], 0x0, 0x52}, 0x28) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3aa4c29d320b3d5b131d1208fcf3f39279"], 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x40040) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000003000000000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="010000000300"/20], 0x5f) 32.927435421s ago: executing program 4 (id=500): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) pivot_root(&(0x7f0000000240)='./file0/../file0/../file0\x00', 0x0) 32.900532362s ago: executing program 4 (id=501): r0 = socket$inet6(0xa, 0x803, 0x6) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000080)={0x2, &(0x7f00000001c0)=[{0x28, 0x0, 0x5, 0xfffff034}, {0x6, 0x1, 0x2, 0xffffffff}]}, 0x10) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) 32.367168877s ago: executing program 4 (id=512): mkdirat(0xffffffffffffff9c, 0x0, 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) shutdown(r0, 0x1) socket$inet6_sctp(0xa, 0x801, 0x11) 32.30108439s ago: executing program 36 (id=512): mkdirat(0xffffffffffffff9c, 0x0, 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) shutdown(r0, 0x1) socket$inet6_sctp(0xa, 0x801, 0x11) 2.087102232s ago: executing program 1 (id=872): mq_open(&(0x7f0000000200)=']]\x00', 0x40, 0x95, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0xce0, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x300, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x405, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r4}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x4c004) 1.956275458s ago: executing program 1 (id=876): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) openat$vcsa(0xffffffffffffff9c, 0x0, 0x100, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, 0xffffffffffffffff) 1.850213134s ago: executing program 1 (id=878): recvmmsg(0xffffffffffffffff, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001d40)=""/61, 0x46}, {0x0, 0x20}], 0x2}, 0x10009}], 0x1, 0x10000, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d000000000000000000000010040000000000000000000009030000000000000061"], 0x0, 0x52}, 0x28) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3aa4c29d320b3d5b131d1208fcf3f392"], 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x40040) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000003000000000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="010000000300"/20], 0x5f) 1.753343978s ago: executing program 7 (id=879): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x777) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000003c00070101000000f4dbdf25027c000004008c800c0001"], 0x24}}, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x802, 0x130) r2 = dup2(r0, r1) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, r2, 0x9) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0xc040480) mkdir(&(0x7f0000000000)='proc_dir\x00', 0x1ff) ioprio_set$pid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./bus\x00', 0xc6f40, 0x19b) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) getpid() setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) getpeername$packet(r3, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000400)=0x14) 1.639416913s ago: executing program 1 (id=881): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='7', 0x1) socket$inet6_sctp(0xa, 0x801, 0x11) 1.563377207s ago: executing program 9 (id=884): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) 1.562997607s ago: executing program 9 (id=885): socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socket$inet(0x2, 0x2, 0x0) socket(0x2, 0x80805, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000080010000400000007"], 0x50) pipe(&(0x7f0000000180)) socket$inet6_sctp(0xa, 0x5, 0x84) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x88) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1], 0x20) 1.561735277s ago: executing program 7 (id=886): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e24, @empty}}, 0xfffffffc, 0xea, 0x440, 0x3, 0x32, 0x8}, 0x9c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.531090858s ago: executing program 7 (id=887): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e24, @empty}}, 0xfffffffc, 0xea, 0x440, 0x3, 0x32, 0x8}, 0x9c) pipe(&(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) splice(r1, 0x0, r2, 0x0, 0x80, 0x8) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.512804819s ago: executing program 9 (id=889): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000001640)={&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.50913633s ago: executing program 1 (id=890): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socket$inet6_sctp(0xa, 0x5, 0x84) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000480), 0x600000, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 1.28854046s ago: executing program 6 (id=900): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100002}, 0x50) r2 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.257032471s ago: executing program 6 (id=901): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x56a9, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000002dc0), 0x3a, 0x408c4) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000300), 0x0, 0x0, 0x0, 0x0) close(r1) 1.184419194s ago: executing program 6 (id=903): socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x2000000, 0xffffffffffffffff, 0x8) socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x404c, 0x1001ff, 0x4, 0x4, 0x4, 0x2, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000200)}], 0x2}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}, 0x2000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 1.123127088s ago: executing program 6 (id=906): socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="12000000060000000400000004"], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x404c, 0x1001ff, 0x4, 0x4, 0x4, 0x2, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000200)}], 0x2}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}, 0x2000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 1.054669251s ago: executing program 6 (id=907): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000001b00)='./file0\x00', 0x844, &(0x7f0000000bc0)=ANY=[], 0x1, 0x267, &(0x7f0000000740)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x257) r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000009c0)={0x0, 0x1000, "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"}, &(0x7f0000001a00)=0x1008) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000001a40)={r3, @in6={{0xa, 0x4e24, 0xb, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}}}, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x60a40, 0x88) file_setattr(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x10, 0x7, 0x0, 0x8, 0x5}, 0x18, 0x1000) 739.821046ms ago: executing program 8 (id=911): recvmmsg(0xffffffffffffffff, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001d40)=""/61, 0x46}, {0x0, 0x20}], 0x2}, 0x10009}], 0x1, 0x10000, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d000000000000000000000010040000000000000000000009030000000000000061"], 0x0, 0x52}, 0x28) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3aa4c29d320b3d5b131d1208fcf3f392"], 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x40040) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000003000000000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="010000000300"/20], 0x5f) 739.486296ms ago: executing program 8 (id=912): r0 = mq_open(&(0x7f0000000200)=']]\x00', 0x40, 0x95, 0x0) lseek(r0, 0xffffffff80000001, 0x1) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0xce0, 0x4) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x300, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x405, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r4}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x4c004) 711.344477ms ago: executing program 8 (id=913): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0x2, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x6}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="89e7ee0c7cdad9b4b47380", 0xb}, {&(0x7f0000000440)="448b2e", 0x3}], 0x2) 669.973809ms ago: executing program 7 (id=914): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x7fffffff, 0x4) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000080)=0x80000000, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) write(r0, &(0x7f0000000000)="01", 0x1) 599.310072ms ago: executing program 9 (id=915): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, 0xffffffffffffffff) 598.476322ms ago: executing program 1 (id=916): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000001b00)='./file0\x00', 0x844, &(0x7f0000000bc0)=ANY=[], 0x1, 0x267, &(0x7f0000000740)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') chmod(0x0, 0x257) r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000009c0)={0x0, 0x1000, "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"}, &(0x7f0000001a00)=0x1008) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000001a40)={r3, @in6={{0xa, 0x4e24, 0xb, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}}}, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x60a40, 0x88) symlink(&(0x7f0000004040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000240)='./file0\x00') r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) file_setattr(r4, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x10, 0x7, 0x0, 0x8, 0x5}, 0x18, 0x1000) 410.920241ms ago: executing program 7 (id=917): socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="12000000060000000400000004"], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x404c, 0x1001ff, 0x4, 0x4, 0x4, 0x2, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000200)}], 0x2}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}, 0x2000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 384.605272ms ago: executing program 9 (id=918): r0 = mq_open(0x0, 0x40, 0x95, 0x0) lseek(r0, 0xffffffff80000001, 0x1) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0xce0, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x300, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r4, 0x405, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r5}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x4c004) 324.514975ms ago: executing program 8 (id=919): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYRES8=r0], 0x50) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x4000, 0x0, 0x6, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x3, 0xa, 0x0, 0x700, 0x25dfdbfc, [@sadb_address={0x5, 0x5, 0xff, 0x0, 0x0, @in6={0xa, 0x4e24, 0x400, @private2={0xfc, 0x2, '\x00', 0x1}, 0x986}}, @sadb_address={0x3, 0x5, 0x0, 0x20, 0x0, @in={0x2, 0x4e20, @rand_addr=0x64010100}}]}, 0x50}, 0x1, 0x7}, 0x800) 212.0168ms ago: executing program 8 (id=920): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100002}, 0x50) r2 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0), 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 103.762606ms ago: executing program 7 (id=921): pipe(&(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x80, 0x8) 88.781206ms ago: executing program 6 (id=922): prctl$PR_SET_SECUREBITS(0x1c, 0x11) r0 = socket$inet6(0xa, 0x3, 0xff) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x400, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ptrace(0x10, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) unshare(0x22020600) io_uring_setup(0xf08, &(0x7f00000003c0)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000000000000001"], 0x30}], 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000040)=[{{0x1}, {0x1, 0x1, 0x1, 0x1}}], 0x8) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [0x0, 0x300]}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) sendto$inet6(r0, &(0x7f0000000000)="6000000400143340000000000000ea0000c0000000000000000000a52af834000000000000000000", 0x28, 0x8000, &(0x7f0000000200)={0xa, 0x0, 0x0, @local}, 0x1c) 85.674966ms ago: executing program 8 (id=923): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) write(r0, &(0x7f0000000280)="38bff3a260fe82776a2dc2c7d75e137f9500efcd380bbbc14cd8ae9a3440b777eaf32a626f74573ee51189fea507aa4fe5d252bdd46caaf3e2f4d7c734b69340274f3a2689b2f982f0285cb0060738c20691ecf265a0bf1e7729e1f41135071961bbcb71f4a0ff7c32804df952b7", 0x6e) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) r4 = socket$unix(0x1, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) connect$unix(r4, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e) listen(r2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000009110ba000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0xf0609475d5ae7373, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036322c666c7573682c00ed65503ccec9beef4e3a71579390a78893cf794eabe67967531177a5a8a723cb36529bc238be0bc2df664dee9ab34c2269c61c143e0c11a83b8a7214e0a160bcc29b3c030bf99ccb18520651f6cb1a99bbe9b6f8235a156c38c8cb2a8312538163a9da8fb380c7caa6475b7003c0e3003e88bd4ef6abe8b7c2dad0d8e397576687df8ae41502420d0aba004f5b98e9a286"], 0x1, 0x29b, &(0x7f0000000340)="$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") rename(&(0x7f0000000000)='./file0\x00', 0x0) 0s ago: executing program 9 (id=924): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x7fffffff, 0x4) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000080)=0x80000000, 0x4) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x1, 0x1, 0xfc, 0x6, @random="001122334455"}, 0x14) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x0, 0x0, 0x0, 0x2}, 0x94) write(r0, &(0x7f0000000000)="01", 0x1) kernel console output (not intermixed with test programs): [ T4759] do_set_mempolicy+0x17c/0x3c0 [ 100.295187][ T4759] __se_sys_set_mempolicy+0x13c/0x3a0 [ 100.295262][ T4759] __x64_sys_set_mempolicy+0x43/0x50 [ 100.295326][ T4759] x64_sys_call+0x12d5/0x2550 [ 100.295423][ T4759] do_syscall_64+0x112/0x360 [ 100.295570][ T4759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.295670][ T4759] RIP: 0033:0x7fdc9c06e159 [ 100.295724][ T4759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.295787][ T4759] RSP: 002b:00007fdc9aac7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ee [ 100.295852][ T4759] RAX: ffffffffffffffda RBX: 00007fdc9c2f5fa0 RCX: 00007fdc9c06e159 [ 100.295891][ T4759] RDX: 00000000000000e0 RSI: 00002000000003c0 RDI: 0000000000000006 [ 100.295996][ T4759] RBP: 00007fdc9c10503b R08: 0000000000000000 R09: 0000000000000000 [ 100.296039][ T4759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.296083][ T4759] R13: 00007fdc9c2f6038 R14: 00007fdc9c2f5fa0 R15: 00007ffdfe083208 [ 100.296224][ T4759] [ 100.469260][ T3025] 8021q: adding VLAN 0 to HW filter on device eth9 [ 100.665457][ T29] audit: type=1400 audit(1789476951.118:324): avc: denied { mount } for pid=4780 comm="syz.3.301" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 100.665493][ T29] audit: type=1400 audit(1789476951.118:325): avc: denied { watch watch_reads } for pid=4780 comm="syz.3.301" path="/48/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 100.723913][ T29] audit: type=1400 audit(1789476951.178:326): avc: denied { unmount } for pid=3729 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 100.740526][ T4597] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 100.766605][ T4597] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.768878][ T4597] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 100.787061][ T4597] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.795488][ T4597] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 100.812287][ T4597] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.812828][ T4597] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 100.817545][ T29] audit: type=1400 audit(1789476951.268:327): avc: denied { write } for pid=4763 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.825723][ T4597] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.901136][ T4527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.071671][ T4597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.089426][ T4597] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.103986][ T1768] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.104020][ T1768] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.115230][ T1768] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.115330][ T1768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.185930][ T4597] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 101.296697][ T4843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.310'. [ 101.296753][ T4843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.310'. [ 101.348326][ T4851] FAULT_INJECTION: forcing a failure. [ 101.348326][ T4851] name failslab, interval 1, probability 0, space 0, times 0 [ 101.348427][ T4851] CPU: 0 UID: 0 PID: 4851 Comm: syz.3.311 Not tainted syzkaller #0 PREEMPT(lazy) [ 101.348463][ T4851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 101.348482][ T4851] Call Trace: [ 101.348492][ T4851] [ 101.348503][ T4851] __dump_stack+0x1d/0x30 [ 101.348572][ T4851] dump_stack_lvl+0x95/0xd0 [ 101.348605][ T4851] dump_stack+0x15/0x1b [ 101.348634][ T4851] should_fail_ex+0x262/0x280 [ 101.348670][ T4851] should_failslab+0x8c/0xb0 [ 101.348728][ T4851] __kmalloc_node_track_caller_noprof+0xd6/0x500 [ 101.348818][ T4851] ? x509_cert_parse+0x1fd/0x450 [ 101.348867][ T4851] ? x509_cert_parse+0x1fd/0x450 [ 101.348914][ T4851] kmemdup_noprof+0x2b/0x70 [ 101.348949][ T4851] x509_cert_parse+0x1fd/0x450 [ 101.348999][ T4851] x509_key_preparse+0x3c/0x420 [ 101.349071][ T4851] asymmetric_key_preparse+0x68/0xb0 [ 101.349172][ T4851] __key_create_or_update+0x2df/0x840 [ 101.349310][ T4851] key_create_or_update+0x42/0x60 [ 101.349369][ T4851] __se_sys_add_key+0x2a5/0x360 [ 101.349427][ T4851] __x64_sys_add_key+0x67/0x80 [ 101.349454][ T4851] x64_sys_call+0x1fa9/0x2550 [ 101.349570][ T4851] do_syscall_64+0x112/0x360 [ 101.349618][ T4851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.349650][ T4851] RIP: 0033:0x7fac4757e159 [ 101.349672][ T4851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.349757][ T4851] RSP: 002b:00007fac45fd7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 101.349785][ T4851] RAX: ffffffffffffffda RBX: 00007fac47805fa0 RCX: 00007fac4757e159 [ 101.349804][ T4851] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 101.349823][ T4851] RBP: 00007fac4761503b R08: ffffffffffffffff R09: 0000000000000000 [ 101.349848][ T4851] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 101.349866][ T4851] R13: 00007fac47806038 R14: 00007fac47805fa0 R15: 00007ffdc8b05ee8 [ 101.349897][ T4851] [ 101.599741][ T4527] veth0_vlan: entered promiscuous mode [ 101.611559][ T4527] veth1_vlan: entered promiscuous mode [ 101.655828][ T4527] veth0_macvtap: entered promiscuous mode [ 101.666165][ T4527] veth1_macvtap: entered promiscuous mode [ 101.699462][ T4527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.719600][ T4527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.735959][ T4597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.760866][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.761691][ T31] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.761813][ T31] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.761997][ T31] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.973260][ T4889] erspan0: entered promiscuous mode [ 101.973320][ T4889] macvlan2: entered promiscuous mode [ 101.978031][ T4889] erspan0: left promiscuous mode [ 102.078274][ T4597] veth0_vlan: entered promiscuous mode [ 102.078808][ T4903] netlink: 'syz.0.322': attribute type 4 has an invalid length. [ 102.096633][ T4597] veth1_vlan: entered promiscuous mode [ 102.117396][ T4908] netlink: 24 bytes leftover after parsing attributes in process `syz.4.324'. [ 102.175611][ T4597] veth0_macvtap: entered promiscuous mode [ 102.193208][ T4597] veth1_macvtap: entered promiscuous mode [ 102.240747][ T4597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.256663][ T4597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.281936][ T51] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.282260][ T51] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.282775][ T51] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.283024][ T51] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.343336][ T4931] program syz.4.334 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 102.480102][ T4937] loop1: detected capacity change from 0 to 512 [ 102.548590][ T4943] team0: Mode changed to "activebackup" [ 102.622357][ T31] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.711393][ T31] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.768917][ T31] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.896914][ T4979] vlan2: entered allmulticast mode [ 102.896971][ T4979] bond0: entered allmulticast mode [ 102.896990][ T4979] bond_slave_0: entered allmulticast mode [ 102.897010][ T4979] bond_slave_1: entered allmulticast mode [ 102.930151][ T31] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.978560][ T4985] program syz.1.357 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 103.092973][ T31] bridge_slave_1: left allmulticast mode [ 103.092994][ T31] bridge_slave_1: left promiscuous mode [ 103.093114][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.101560][ T31] bridge_slave_0: left allmulticast mode [ 103.101627][ T31] bridge_slave_0: left promiscuous mode [ 103.102002][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.230080][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.232663][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.244177][ T31] bond0 (unregistering): Released all slaves [ 103.275410][ T5004] loop4: detected capacity change from 0 to 8192 [ 103.333758][ T31] hsr_slave_0: left promiscuous mode [ 103.334323][ T31] hsr_slave_1: left promiscuous mode [ 103.334783][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.334918][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.336986][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.337000][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.374211][ T31] veth1_macvtap: left promiscuous mode [ 103.374348][ T31] veth0_macvtap: left promiscuous mode [ 103.374479][ T31] veth1_vlan: left promiscuous mode [ 103.374585][ T31] veth0_vlan: left promiscuous mode [ 103.618474][ T31] team0 (unregistering): Port device team_slave_1 removed [ 103.635256][ T31] team0 (unregistering): Port device team_slave_0 removed [ 103.739463][ T3025] 8021q: adding VLAN 0 to HW filter on device eth9 [ 104.005536][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 104.005554][ T29] audit: type=1400 audit(1789476954.458:336): avc: denied { write } for pid=5067 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.089825][ T29] audit: type=1400 audit(1789476954.538:337): avc: denied { write } for pid=5088 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.124602][ T5080] loop6: detected capacity change from 0 to 8192 [ 104.152448][ T5080] loop6: p4 < > [ 104.166720][ T29] audit: type=1400 audit(1789476954.608:338): avc: denied { mount } for pid=5079 comm="syz.6.386" name="/" dev="configfs" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 104.170498][ T29] audit: type=1400 audit(1789476954.628:339): avc: denied { search } for pid=5079 comm="syz.6.386" name="/" dev="configfs" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 104.190464][ T29] audit: type=1400 audit(1789476954.638:340): avc: denied { module_request } for pid=4992 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 104.195071][ T3025] 8021q: adding VLAN 0 to HW filter on device eth10 [ 104.213215][ T29] audit: type=1400 audit(1789476954.668:341): avc: denied { search } for pid=5079 comm="syz.6.386" name="/" dev="configfs" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 104.213332][ T29] audit: type=1400 audit(1789476954.668:342): avc: denied { search } for pid=5079 comm="syz.6.386" name="/" dev="configfs" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 104.310561][ T5094] bridge_slave_0: left allmulticast mode [ 104.310918][ T5094] bridge_slave_0: left promiscuous mode [ 104.311011][ T5094] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.344214][ T5094] bridge_slave_1: left allmulticast mode [ 104.344241][ T5094] bridge_slave_1: left promiscuous mode [ 104.344371][ T5094] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.373843][ T5094] bond0: (slave bond_slave_0): Releasing backup interface [ 104.389614][ T5094] bond0: (slave bond_slave_1): Releasing backup interface [ 104.409157][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 104.409329][ T5094] team0: Port device team_slave_0 removed [ 104.427975][ T5094] team0: Port device team_slave_1 removed [ 104.429024][ T5094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.429044][ T5094] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.440144][ T5094] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.443398][ T5094] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.466700][ T5094] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 104.488161][ T4960] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.488208][ T4960] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.488375][ T4960] bridge_slave_0: entered allmulticast mode [ 104.488992][ T4960] bridge_slave_0: entered promiscuous mode [ 104.528634][ T31] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.561767][ T4960] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.561809][ T4960] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.561907][ T4960] bridge_slave_1: entered allmulticast mode [ 104.562461][ T4960] bridge_slave_1: entered promiscuous mode [ 104.629698][ T31] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.684816][ T4960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.709951][ T4960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.738794][ T29] audit: type=1400 audit(1789476955.188:343): avc: denied { bind } for pid=5131 comm="syz.4.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 104.799522][ T31] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.843792][ T4960] team0: Port device team_slave_0 added [ 104.846382][ T4960] team0: Port device team_slave_1 added [ 104.847934][ T29] audit: type=1400 audit(1789476955.298:344): avc: denied { write } for pid=5126 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.892394][ T29] audit: type=1400 audit(1789476955.348:345): avc: denied { write } for pid=5151 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.924746][ T4992] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.924786][ T4992] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.925043][ T4992] bridge_slave_0: entered allmulticast mode [ 104.925568][ T4992] bridge_slave_0: entered promiscuous mode [ 104.971851][ T3025] 8021q: adding VLAN 0 to HW filter on device eth11 [ 104.972543][ T4960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.972557][ T4960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.972637][ T4960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.972837][ T4992] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.972874][ T4992] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.972965][ T4992] bridge_slave_1: entered allmulticast mode [ 104.975081][ T4992] bridge_slave_1: entered promiscuous mode [ 105.018695][ T31] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.040564][ T4960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.040582][ T4960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.040624][ T4960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.176149][ T4992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.177319][ T4992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.244930][ T4960] hsr_slave_0: entered promiscuous mode [ 105.247547][ T4960] hsr_slave_1: entered promiscuous mode [ 105.247928][ T4960] debugfs: 'hsr0' already exists in 'hsr' [ 105.247945][ T4960] Cannot create hsr debugfs directory [ 105.285173][ T4992] team0: Port device team_slave_0 added [ 105.301314][ T31] bridge_slave_1: left allmulticast mode [ 105.301339][ T31] bridge_slave_1: left promiscuous mode [ 105.301451][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.302208][ T31] bridge_slave_0: left allmulticast mode [ 105.302250][ T31] bridge_slave_0: left promiscuous mode [ 105.302355][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.306956][ T5180] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 105.461864][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.463379][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.464331][ T31] bond0 (unregistering): Released all slaves [ 105.469967][ T4992] team0: Port device team_slave_1 added [ 105.527306][ T31] hsr_slave_0: left promiscuous mode [ 105.527664][ T31] hsr_slave_1: left promiscuous mode [ 105.528065][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.528083][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.528500][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.528583][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.548754][ T31] veth1_macvtap: left promiscuous mode [ 105.548837][ T31] veth0_macvtap: left promiscuous mode [ 105.549015][ T31] veth1_vlan: left promiscuous mode [ 105.549200][ T31] veth0_vlan: left promiscuous mode [ 105.597889][ T5190] loop6: detected capacity change from 0 to 512 [ 105.674764][ T31] team0 (unregistering): Port device team_slave_1 removed [ 105.693001][ T31] team0 (unregistering): Port device team_slave_0 removed [ 105.752187][ T4992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.752204][ T4992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.752282][ T4992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.757596][ T4992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.757613][ T4992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.757697][ T4992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.889248][ T5199] loop6: detected capacity change from 0 to 8192 [ 105.923012][ T4992] hsr_slave_0: entered promiscuous mode [ 105.930746][ T4992] hsr_slave_1: entered promiscuous mode [ 105.930980][ T4992] debugfs: 'hsr0' already exists in 'hsr' [ 105.930993][ T4992] Cannot create hsr debugfs directory [ 106.034129][ T4960] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 106.047502][ T4960] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.067754][ T4960] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 106.078793][ T4960] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.087764][ T4960] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 106.100523][ T4960] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.130862][ T4960] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 106.135220][ T4960] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.186713][ T3025] 8021q: adding VLAN 0 to HW filter on device eth12 [ 106.302998][ T4960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.332841][ T4960] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.464260][ T5249] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 106.484784][ T3025] 8021q: adding VLAN 0 to HW filter on device eth13 [ 106.508324][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.508367][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.534285][ T4992] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 106.542957][ T4992] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.545999][ T4992] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 106.557993][ T4992] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.562810][ T4992] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 106.583773][ T4992] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.585326][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.585360][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.635707][ T5276] syzkaller0: entered promiscuous mode [ 106.635730][ T5276] syzkaller0: entered allmulticast mode [ 106.639274][ T4992] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 106.653593][ T4992] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.672191][ T5286] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 106.713462][ T5292] FAULT_INJECTION: forcing a failure. [ 106.713462][ T5292] name failslab, interval 1, probability 0, space 0, times 0 [ 106.713547][ T5292] CPU: 1 UID: 0 PID: 5292 Comm: syz.6.439 Not tainted syzkaller #0 PREEMPT(lazy) [ 106.713589][ T5292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 106.713607][ T5292] Call Trace: [ 106.713615][ T5292] [ 106.713624][ T5292] __dump_stack+0x1d/0x30 [ 106.713657][ T5292] dump_stack_lvl+0x95/0xd0 [ 106.713722][ T5292] dump_stack+0x15/0x1b [ 106.713750][ T5292] should_fail_ex+0x262/0x280 [ 106.713776][ T5292] should_failslab+0x8c/0xb0 [ 106.713811][ T5292] __kmalloc_node_noprof+0xdb/0x500 [ 106.713912][ T5292] ? crypto_create_tfm_node+0x5b/0x230 [ 106.713939][ T5292] ? crypto_create_tfm_node+0x5b/0x230 [ 106.713963][ T5292] crypto_create_tfm_node+0x5b/0x230 [ 106.714097][ T5292] ? crypto_alg_mod_lookup+0x2f9/0x490 [ 106.714127][ T5292] crypto_alloc_tfm_node+0xb8/0x280 [ 106.714159][ T5292] crypto_alloc_shash+0x2d/0x40 [ 106.714257][ T5292] x509_get_sig_params+0x13b/0x290 [ 106.714280][ T5292] x509_cert_parse+0x2f9/0x450 [ 106.714325][ T5292] x509_key_preparse+0x3c/0x420 [ 106.714375][ T5292] asymmetric_key_preparse+0x68/0xb0 [ 106.714418][ T5292] __key_create_or_update+0x2df/0x840 [ 106.714467][ T5292] key_create_or_update+0x42/0x60 [ 106.714532][ T5292] __se_sys_add_key+0x2a5/0x360 [ 106.714572][ T5292] __x64_sys_add_key+0x67/0x80 [ 106.714593][ T5292] x64_sys_call+0x1fa9/0x2550 [ 106.714620][ T5292] do_syscall_64+0x112/0x360 [ 106.714711][ T5292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.714742][ T5292] RIP: 0033:0x7fdee1c1e159 [ 106.714762][ T5292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.714786][ T5292] RSP: 002b:00007fdee0677028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 106.714884][ T5292] RAX: ffffffffffffffda RBX: 00007fdee1ea5fa0 RCX: 00007fdee1c1e159 [ 106.714899][ T5292] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 106.714913][ T5292] RBP: 00007fdee1cb503b R08: ffffffffffffffff R09: 0000000000000000 [ 106.714931][ T5292] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 106.714944][ T5292] R13: 00007fdee1ea6038 R14: 00007fdee1ea5fa0 R15: 00007fff2c55d488 [ 106.714979][ T5292] [ 107.019336][ T5304] netlink: 8 bytes leftover after parsing attributes in process `syz.4.443'. [ 107.059825][ T4992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.092947][ T4992] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.112515][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.112568][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.137666][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.137709][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.266206][ T3025] 8021q: adding VLAN 0 to HW filter on device eth14 [ 107.271705][ T5310] loop1: detected capacity change from 0 to 8192 [ 107.292527][ T5310] loop1: p4 < > [ 107.341109][ T5328] syzkaller0: entered promiscuous mode [ 107.341135][ T5328] syzkaller0: entered allmulticast mode [ 107.370822][ T4960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.523184][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 107.717735][ T3025] 8021q: adding VLAN 0 to HW filter on device eth15 [ 107.729682][ T4992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.812047][ T4960] veth0_vlan: entered promiscuous mode [ 107.827374][ T4960] veth1_vlan: entered promiscuous mode [ 107.866781][ T4960] veth0_macvtap: entered promiscuous mode [ 107.875735][ T4960] veth1_macvtap: entered promiscuous mode [ 107.904760][ T4960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.922666][ T4960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.962645][ T1707] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.984455][ T1707] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.994661][ T1707] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.994829][ T1707] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.187581][ T3025] 8021q: adding VLAN 0 to HW filter on device eth16 [ 108.319987][ T4992] veth0_vlan: entered promiscuous mode [ 108.354566][ T4992] veth1_vlan: entered promiscuous mode [ 108.404450][ T4992] veth0_macvtap: entered promiscuous mode [ 108.409923][ T4992] veth1_macvtap: entered promiscuous mode [ 108.440033][ T4992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.459524][ T4992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.490316][ T1707] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.491101][ T1707] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.491173][ T1707] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.491207][ T1707] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.577266][ T5434] FAULT_INJECTION: forcing a failure. [ 108.577266][ T5434] name failslab, interval 1, probability 0, space 0, times 0 [ 108.577294][ T5434] CPU: 0 UID: 0 PID: 5434 Comm: syz.6.462 Not tainted syzkaller #0 PREEMPT(lazy) [ 108.577356][ T5434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 108.577372][ T5434] Call Trace: [ 108.577379][ T5434] [ 108.577389][ T5434] __dump_stack+0x1d/0x30 [ 108.577424][ T5434] dump_stack_lvl+0x95/0xd0 [ 108.577530][ T5434] dump_stack+0x15/0x1b [ 108.577551][ T5434] should_fail_ex+0x262/0x280 [ 108.577590][ T5434] ? ____ip_mc_inc_group+0x1b8/0x590 [ 108.577696][ T5434] should_failslab+0x8c/0xb0 [ 108.577740][ T5434] __kmalloc_cache_noprof+0x7a/0x400 [ 108.577771][ T5434] ? should_failslab+0x8c/0xb0 [ 108.577813][ T5434] ? ____ip_mc_inc_group+0x1b8/0x590 [ 108.577877][ T5434] ____ip_mc_inc_group+0x1b8/0x590 [ 108.577907][ T5434] __ip_mc_join_group+0x21d/0x280 [ 108.577943][ T5434] ip_mc_join_group_ssm+0x23/0x30 [ 108.577987][ T5434] do_ip_setsockopt+0x1c8e/0x22f0 [ 108.578071][ T5434] ip_setsockopt+0x58/0x110 [ 108.578093][ T5434] udp_setsockopt+0x89/0xa0 [ 108.578179][ T5434] sock_common_setsockopt+0x69/0x80 [ 108.578226][ T5434] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 108.578266][ T5434] __sys_setsockopt+0x184/0x200 [ 108.578313][ T5434] __x64_sys_setsockopt+0x64/0x80 [ 108.578403][ T5434] x64_sys_call+0x248f/0x2550 [ 108.578444][ T5434] do_syscall_64+0x112/0x360 [ 108.578496][ T5434] ? generic_smp_call_function_single_interrupt+0x13/0x20 [ 108.578535][ T5434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.578565][ T5434] RIP: 0033:0x7fdee1c1e159 [ 108.578586][ T5434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.578649][ T5434] RSP: 002b:00007fdee0677028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 108.578674][ T5434] RAX: ffffffffffffffda RBX: 00007fdee1ea5fa0 RCX: 00007fdee1c1e159 [ 108.578692][ T5434] RDX: 0000000000000027 RSI: 0000000000000000 RDI: 0000000000000003 [ 108.578708][ T5434] RBP: 00007fdee1cb503b R08: 000000000000000c R09: 0000000000000000 [ 108.578725][ T5434] R10: 0000200000000740 R11: 0000000000000246 R12: 0000000000000000 [ 108.578797][ T5434] R13: 00007fdee1ea6038 R14: 00007fdee1ea5fa0 R15: 00007fff2c55d488 [ 108.578817][ T5434] [ 108.873096][ T5443] netlink: 136 bytes leftover after parsing attributes in process `syz.6.464'. [ 109.126369][ T5467] bridge_slave_0: left allmulticast mode [ 109.126405][ T5467] bridge_slave_0: left promiscuous mode [ 109.126567][ T5467] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.153075][ T5467] bridge_slave_1: left allmulticast mode [ 109.153172][ T5467] bridge_slave_1: left promiscuous mode [ 109.153274][ T5467] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.181039][ T5467] bond0: (slave bond_slave_0): Releasing backup interface [ 109.185821][ T5467] bond0: (slave bond_slave_1): Releasing backup interface [ 109.189853][ T5467] team0: Failed to send options change via netlink (err -105) [ 109.189952][ T5467] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 109.190168][ T5467] team0: Port device team_slave_0 removed [ 109.203309][ T5467] team0: Failed to send options change via netlink (err -105) [ 109.204795][ T5467] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 109.205032][ T5467] team0: Port device team_slave_1 removed [ 109.206837][ T5467] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.206934][ T5467] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.215129][ T5467] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.215144][ T5467] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.227517][ T5467] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 109.301406][ T5471] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 109.301424][ T5471] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 109.421241][ T5479] loop7: detected capacity change from 0 to 512 [ 109.442758][ T5479] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 109.628660][ T70] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.920785][ T70] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.063746][ T5526] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 110.166049][ T70] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.279278][ T5496] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.279316][ T5496] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.296072][ T5496] bridge_slave_0: entered allmulticast mode [ 110.296581][ T5496] bridge_slave_0: entered promiscuous mode [ 110.322853][ T5496] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.322896][ T5496] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.323013][ T5496] bridge_slave_1: entered allmulticast mode [ 110.323548][ T5496] bridge_slave_1: entered promiscuous mode [ 110.355923][ T70] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.391033][ T5496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.392642][ T5496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.461784][ T5496] team0: Port device team_slave_0 added [ 110.479680][ T5496] team0: Port device team_slave_1 added [ 110.539679][ T5496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.539699][ T5496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.539741][ T5496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.540510][ T5496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.540590][ T5496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.540697][ T5496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.618759][ T70] bridge_slave_1: left allmulticast mode [ 110.618785][ T70] bridge_slave_1: left promiscuous mode [ 110.618928][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.630020][ T70] bridge_slave_0: left allmulticast mode [ 110.630067][ T70] bridge_slave_0: left promiscuous mode [ 110.630476][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.838243][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 110.838263][ T29] audit: type=1400 audit(1789476961.288:362): avc: denied { write } for pid=5555 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.844106][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.886996][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.888102][ T70] bond0 (unregistering): Released all slaves [ 110.952364][ T29] audit: type=1400 audit(1789476961.408:363): avc: denied { read } for pid=5568 comm="syz.4.497" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 110.952456][ T29] audit: type=1400 audit(1789476961.408:364): avc: denied { open } for pid=5568 comm="syz.4.497" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 111.017181][ T70] hsr_slave_0: left promiscuous mode [ 111.022300][ T70] hsr_slave_1: left promiscuous mode [ 111.023643][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.025533][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.029454][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.029513][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.054635][ T70] veth1_macvtap: left promiscuous mode [ 111.054717][ T70] veth0_macvtap: left promiscuous mode [ 111.054895][ T70] veth1_vlan: left promiscuous mode [ 111.055011][ T70] veth0_vlan: left promiscuous mode [ 111.086694][ T29] audit: type=1400 audit(1789476961.538:365): avc: denied { write } for pid=5570 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.369005][ T70] team0 (unregistering): Port device team_slave_1 removed [ 111.382062][ T70] team0 (unregistering): Port device team_slave_0 removed [ 111.524951][ T5496] hsr_slave_0: entered promiscuous mode [ 111.528759][ T5496] hsr_slave_1: entered promiscuous mode [ 111.529348][ T5496] debugfs: 'hsr0' already exists in 'hsr' [ 111.529390][ T5496] Cannot create hsr debugfs directory [ 111.552177][ T3025] 8021q: adding VLAN 0 to HW filter on device eth17 [ 111.735738][ T29] audit: type=1400 audit(1789476962.188:366): avc: denied { write } for pid=5597 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.804149][ T29] audit: type=1400 audit(1789476962.258:367): avc: denied { write } for pid=5613 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.068639][ T70] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.093562][ T70] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.140033][ T29] audit: type=1400 audit(1789476962.588:368): avc: denied { write } for pid=5623 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.175424][ T70] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.244198][ T29] audit: type=1400 audit(1789476962.698:369): avc: denied { write } for pid=5651 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.311430][ T70] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.336662][ T5496] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 112.338090][ T29] audit: type=1400 audit(1789476962.788:370): avc: denied { mounton } for pid=5653 comm="syz.7.519" path="/syzcgroup/unified/syz7" dev="cgroup2" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 112.344141][ T5496] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 112.381379][ T5496] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 112.398674][ T5496] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 112.419469][ T5496] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 112.425505][ T5496] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 112.450137][ T5496] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 112.462086][ T5496] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 112.520285][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 112.779300][ T70] bond0 (unregistering): Released all slaves [ 112.886294][ T70] hsr_slave_0: left promiscuous mode [ 112.886894][ T70] hsr_slave_1: left promiscuous mode [ 112.905976][ T70] veth1_macvtap: left promiscuous mode [ 112.906010][ T70] veth0_macvtap: left promiscuous mode [ 112.906057][ T70] veth1_vlan: left promiscuous mode [ 112.906172][ T70] veth0_vlan: left promiscuous mode [ 113.108584][ T29] audit: type=1400 audit(1789476963.558:371): avc: denied { write } for pid=5687 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.420653][ T3025] 8021q: adding VLAN 0 to HW filter on device eth19 [ 113.426851][ T5496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.445263][ T5496] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.449551][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.449584][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.475287][ T1768] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.475328][ T1768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.691487][ T5629] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.691530][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.691634][ T5629] bridge_slave_0: entered allmulticast mode [ 113.692185][ T5629] bridge_slave_0: entered promiscuous mode [ 113.726180][ T5629] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.726221][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.726392][ T5629] bridge_slave_1: entered allmulticast mode [ 113.750980][ T5629] bridge_slave_1: entered promiscuous mode [ 113.830854][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.839629][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.907605][ T5629] team0: Port device team_slave_0 added [ 113.916227][ T5629] team0: Port device team_slave_1 added [ 114.001592][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.001611][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.001658][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.003521][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.003538][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.003564][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.143127][ T3025] 8021q: adding VLAN 0 to HW filter on device eth20 [ 114.162358][ T5629] hsr_slave_0: entered promiscuous mode [ 114.165948][ T5629] hsr_slave_1: entered promiscuous mode [ 114.166242][ T5629] debugfs: 'hsr0' already exists in 'hsr' [ 114.166255][ T5629] Cannot create hsr debugfs directory [ 114.270704][ T5496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.342991][ T5629] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 114.345321][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 114.346042][ T5629] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 114.372140][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 114.372894][ T5629] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 114.380770][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 114.402727][ T5629] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 114.407144][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 114.659144][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.688954][ T5629] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.706192][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.706229][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.727351][ T1768] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.727393][ T1768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.749580][ T5496] veth0_vlan: entered promiscuous mode [ 114.757923][ T5496] veth1_vlan: entered promiscuous mode [ 114.806137][ T5496] veth0_macvtap: entered promiscuous mode [ 114.826865][ T5496] veth1_macvtap: entered promiscuous mode [ 114.882773][ T5496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.898992][ T5496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.921585][ T1707] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.922554][ T1707] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.923013][ T1768] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.923222][ T1768] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.379126][ T5850] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 115.398758][ T5858] team0: Mode changed to "activebackup" [ 115.446256][ T5869] netlink: 8 bytes leftover after parsing attributes in process `syz.7.555'. [ 115.446292][ T5869] netlink: 40 bytes leftover after parsing attributes in process `syz.7.555'. [ 115.479277][ T5869] ip6gretap1: entered allmulticast mode [ 115.522075][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.858665][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 115.858681][ T29] audit: type=1400 audit(1789476966.308:381): avc: denied { write } for pid=5880 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.990518][ T29] audit: type=1400 audit(1789476966.448:382): avc: denied { write } for pid=5915 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.110326][ T5912] syzkaller0: entered promiscuous mode [ 116.110347][ T5912] syzkaller0: entered allmulticast mode [ 116.190201][ T5629] veth0_vlan: entered promiscuous mode [ 116.440200][ T29] audit: type=1400 audit(1789476966.888:383): avc: denied { write } for pid=5920 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.513003][ T29] audit: type=1400 audit(1789476966.968:384): avc: denied { write } for pid=5941 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.597869][ T5926] bridge_slave_0: left allmulticast mode [ 116.597891][ T5926] bridge_slave_0: left promiscuous mode [ 116.598020][ T5926] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.635170][ T5926] bridge_slave_1: left allmulticast mode [ 116.635190][ T5926] bridge_slave_1: left promiscuous mode [ 116.635296][ T5926] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.672548][ T5926] bond0: (slave bond_slave_0): Releasing backup interface [ 116.695572][ T5926] bond_slave_0: left allmulticast mode [ 116.717565][ T5926] bond0: (slave bond_slave_1): Releasing backup interface [ 116.728637][ T5926] bond_slave_1: left allmulticast mode [ 116.761351][ T5926] team0: Failed to send options change via netlink (err -105) [ 116.761502][ T5926] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 116.761715][ T5926] team0: Port device team_slave_0 removed [ 116.798081][ T5926] team0: Failed to send options change via netlink (err -105) [ 116.798294][ T5926] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 116.798547][ T5926] team0: Port device team_slave_1 removed [ 116.824211][ T5926] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.824235][ T5926] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.847416][ T5926] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.847433][ T5926] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.895577][ T5926] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 116.897143][ T5932] team0: Failed to send options change via netlink (err -105) [ 116.897175][ T5932] team0: Mode changed to "activebackup" [ 116.949393][ T5629] veth1_vlan: entered promiscuous mode [ 117.063011][ T5629] veth0_macvtap: entered promiscuous mode [ 117.083438][ T5629] veth1_macvtap: entered promiscuous mode [ 117.125485][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.157944][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.248734][ T29] audit: type=1400 audit(1789476967.698:385): avc: denied { write } for pid=5947 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.252455][ T1707] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.255823][ T31] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.255949][ T31] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.256049][ T31] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.336802][ T29] audit: type=1400 audit(1789476967.788:386): avc: denied { write } for pid=5960 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.424299][ T3025] 8021q: adding VLAN 0 to HW filter on device eth17 [ 117.669017][ T29] audit: type=1400 audit(1789476968.118:387): avc: denied { write } for pid=5972 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.693661][ T29] audit: type=1400 audit(1789476968.128:388): avc: denied { create } for pid=5973 comm="syz.9.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 117.693716][ T29] audit: type=1400 audit(1789476968.128:389): avc: denied { create } for pid=5963 comm="syz.6.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 117.778042][ T29] audit: type=1400 audit(1789476968.228:390): avc: denied { create } for pid=5988 comm="syz.6.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 117.844312][ T3025] 8021q: adding VLAN 0 to HW filter on device eth18 [ 117.998625][ T6001] loop8: detected capacity change from 0 to 512 [ 118.142989][ T6015] netlink: 40 bytes leftover after parsing attributes in process `syz.7.579'. [ 118.273972][ T6020] syzkaller0: entered promiscuous mode [ 118.274003][ T6020] syzkaller0: entered allmulticast mode [ 118.553603][ T6057] loop6: detected capacity change from 0 to 256 [ 118.739768][ T6077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.592'. [ 118.740025][ T6077] netlink: 24 bytes leftover after parsing attributes in process `syz.1.592'. [ 118.759401][ T6077] ip6gretap1: entered allmulticast mode [ 118.841201][ T6083] netlink: 8 bytes leftover after parsing attributes in process `syz.9.593'. [ 118.841239][ T6083] netlink: 12 bytes leftover after parsing attributes in process `syz.9.593'. [ 119.229751][ T6112] loop8: detected capacity change from 0 to 256 [ 119.246162][ T6111] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 119.261058][ T6104] syzkaller0: entered promiscuous mode [ 119.261084][ T6104] syzkaller0: entered allmulticast mode [ 119.603953][ T6137] loop9: detected capacity change from 0 to 256 [ 119.767219][ T6141] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 119.767294][ T6144] team0: Unable to change to the same mode the team is in [ 119.823026][ T6059] loop7: detected capacity change from 0 to 512 [ 120.292297][ T6171] syzkaller0: entered promiscuous mode [ 120.292322][ T6171] syzkaller0: entered allmulticast mode [ 120.507344][ T31] kworker/u8:1: attempt to access beyond end of device [ 120.507344][ T31] loop9: rw=1, sector=1768, nr_sectors = 32 limit=256 [ 120.507451][ T31] kworker/u8:1: attempt to access beyond end of device [ 120.507451][ T31] loop9: rw=1, sector=1832, nr_sectors = 32 limit=256 [ 120.507514][ T31] kworker/u8:1: attempt to access beyond end of device [ 120.507514][ T31] loop9: rw=1, sector=1896, nr_sectors = 32 limit=256 [ 120.507633][ T31] kworker/u8:1: attempt to access beyond end of device [ 120.507633][ T31] loop9: rw=1, sector=1960, nr_sectors = 32 limit=256 [ 120.507711][ T31] kworker/u8:1: attempt to access beyond end of device [ 120.507711][ T31] loop9: rw=1, sector=2024, nr_sectors = 32 limit=256 [ 120.507789][ T31] kworker/u8:1: attempt to access beyond end of device [ 120.507789][ T31] loop9: rw=1, sector=2088, nr_sectors = 32 limit=256 [ 120.507857][ T31] kworker/u8:1: attempt to access beyond end of device [ 120.507857][ T31] loop9: rw=1, sector=2152, nr_sectors = 32 limit=256 [ 120.508013][ T31] kworker/u8:1: attempt to access beyond end of device [ 120.508013][ T31] loop9: rw=1, sector=2216, nr_sectors = 32 limit=256 [ 120.508065][ T31] kworker/u8:1: attempt to access beyond end of device [ 120.508065][ T31] loop9: rw=1, sector=2280, nr_sectors = 32 limit=256 [ 120.508223][ T31] kworker/u8:1: attempt to access beyond end of device [ 120.508223][ T31] loop9: rw=1, sector=2344, nr_sectors = 32 limit=256 [ 120.986777][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 120.986873][ T29] audit: type=1400 audit(1789476971.438:412): avc: denied { tracepoint } for pid=6193 comm="syz.7.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 121.016913][ T29] audit: type=1400 audit(1789476971.448:413): avc: denied { create } for pid=6193 comm="syz.7.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 121.076391][ T29] audit: type=1400 audit(1789476971.498:414): avc: denied { ioctl } for pid=6193 comm="syz.7.624" path="socket:[17458]" dev="sockfs" ino=17458 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 121.105289][ T29] audit: type=1400 audit(1789476971.538:415): avc: denied { connect } for pid=6193 comm="syz.7.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 121.124878][ T29] audit: type=1400 audit(1789476971.568:416): avc: denied { write } for pid=6193 comm="syz.7.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 121.260285][ T29] audit: type=1400 audit(1789476971.708:417): avc: denied { write } for pid=6223 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.346990][ T29] audit: type=1400 audit(1789476971.798:418): avc: denied { write } for pid=6247 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.374143][ T6234] syzkaller0: entered promiscuous mode [ 121.374182][ T6234] syzkaller0: entered allmulticast mode [ 121.464104][ T6195] loop7: detected capacity change from 0 to 128 [ 121.536066][ T29] audit: type=1400 audit(1789476971.988:419): avc: denied { create } for pid=6245 comm="syz.9.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 121.536173][ T29] audit: type=1400 audit(1789476971.988:420): avc: denied { ioctl } for pid=6245 comm="syz.9.635" path="socket:[17495]" dev="sockfs" ino=17495 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 121.557462][ T6195] EXT4-fs (loop7): can't mount with data_err=abort, fs mounted w/o journal [ 121.698111][ T29] audit: type=1400 audit(1789476972.148:421): avc: denied { write } for pid=6252 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.962266][ T6267] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 121.966161][ T6274] team0: Unable to change to the same mode the team is in [ 122.068260][ T6248] syzkaller1: entered promiscuous mode [ 122.068423][ T6248] syzkaller1: entered allmulticast mode [ 122.524912][ T6304] syzkaller1: entered promiscuous mode [ 122.524949][ T6304] syzkaller1: entered allmulticast mode [ 122.928106][ T6333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.653'. [ 122.928207][ T6333] netlink: 16 bytes leftover after parsing attributes in process `syz.1.653'. [ 123.194940][ T6346] FAULT_INJECTION: forcing a failure. [ 123.194940][ T6346] name failslab, interval 1, probability 0, space 0, times 0 [ 123.194991][ T6346] CPU: 0 UID: 0 PID: 6346 Comm: syz.7.659 Not tainted syzkaller #0 PREEMPT(lazy) [ 123.195074][ T6346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 123.195090][ T6346] Call Trace: [ 123.195098][ T6346] [ 123.195106][ T6346] __dump_stack+0x1d/0x30 [ 123.195136][ T6346] dump_stack_lvl+0x95/0xd0 [ 123.195164][ T6346] dump_stack+0x15/0x1b [ 123.195189][ T6346] should_fail_ex+0x262/0x280 [ 123.195238][ T6346] ? alloc_pwq+0x629/0x670 [ 123.195351][ T6346] should_failslab+0x8c/0xb0 [ 123.195434][ T6346] kmem_cache_alloc_node_noprof+0x82/0x400 [ 123.195539][ T6346] ? pcpu_chunk_relocate+0x17a/0x2a0 [ 123.195581][ T6346] ? alloc_pwq+0x629/0x670 [ 123.195696][ T6346] alloc_pwq+0x629/0x670 [ 123.195759][ T6346] apply_wqattrs_prepare+0x1d3/0x840 [ 123.195807][ T6346] alloc_workqueue_va+0xac1/0x1630 [ 123.195838][ T6346] alloc_workqueue_noprof+0x84/0xb0 [ 123.195924][ T6346] ? nci_hci_allocate+0x33/0x180 [ 123.195991][ T6346] nci_register_device+0x11e/0x510 [ 123.196039][ T6346] virtual_ncidev_open+0xca/0x130 [ 123.196090][ T6346] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 123.196139][ T6346] misc_open+0x1df/0x220 [ 123.196168][ T6346] chrdev_open+0x2eb/0x3a0 [ 123.196209][ T6346] do_dentry_open+0x49f/0xa60 [ 123.196291][ T6346] ? __pfx_chrdev_open+0x10/0x10 [ 123.196333][ T6346] vfs_open+0x37/0x1e0 [ 123.196356][ T6346] path_openat+0xc01/0x10d0 [ 123.196392][ T6346] do_file_open+0x16c/0x290 [ 123.196481][ T6346] do_sys_openat2+0xa0/0x130 [ 123.196508][ T6346] __x64_sys_openat+0xf2/0x120 [ 123.196536][ T6346] x64_sys_call+0x1f72/0x2550 [ 123.196587][ T6346] do_syscall_64+0x112/0x360 [ 123.196624][ T6346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.196657][ T6346] RIP: 0033:0x7fbcd5b4e159 [ 123.196676][ T6346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.196708][ T6346] RSP: 002b:00007fbcd45a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 123.196731][ T6346] RAX: ffffffffffffffda RBX: 00007fbcd5dd5fa0 RCX: 00007fbcd5b4e159 [ 123.196747][ T6346] RDX: 0000000000000002 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 123.196763][ T6346] RBP: 00007fbcd5be503b R08: 0000000000000000 R09: 0000000000000000 [ 123.196778][ T6346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.196793][ T6346] R13: 00007fbcd5dd6038 R14: 00007fbcd5dd5fa0 R15: 00007ffe645065c8 [ 123.196814][ T6346] [ 123.376937][ T6348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.660'. [ 123.502857][ T6356] netlink: 8 bytes leftover after parsing attributes in process `syz.6.664'. [ 123.502916][ T6356] netlink: 16 bytes leftover after parsing attributes in process `syz.6.664'. [ 123.508909][ T6356] ip6gretap1: entered allmulticast mode [ 123.524372][ T6309] syz.8.647 (6309) used greatest stack depth: 10248 bytes left [ 123.690619][ T6364] FAULT_INJECTION: forcing a failure. [ 123.690619][ T6364] name failslab, interval 1, probability 0, space 0, times 0 [ 123.690663][ T6364] CPU: 1 UID: 0 PID: 6364 Comm: syz.9.666 Not tainted syzkaller #0 PREEMPT(lazy) [ 123.690767][ T6364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 123.690785][ T6364] Call Trace: [ 123.690794][ T6364] [ 123.690803][ T6364] __dump_stack+0x1d/0x30 [ 123.690835][ T6364] dump_stack_lvl+0x95/0xd0 [ 123.690858][ T6364] dump_stack+0x15/0x1b [ 123.690903][ T6364] should_fail_ex+0x262/0x280 [ 123.690933][ T6364] ? alloc_pwq+0x629/0x670 [ 123.690973][ T6364] should_failslab+0x8c/0xb0 [ 123.691002][ T6364] kmem_cache_alloc_node_noprof+0x82/0x400 [ 123.691058][ T6364] ? pcpu_chunk_relocate+0x17a/0x2a0 [ 123.691096][ T6364] ? alloc_pwq+0x629/0x670 [ 123.691182][ T6364] alloc_pwq+0x629/0x670 [ 123.691222][ T6364] apply_wqattrs_prepare+0x1d3/0x840 [ 123.691343][ T6364] alloc_workqueue_va+0xac1/0x1630 [ 123.691457][ T6364] alloc_workqueue_noprof+0x84/0xb0 [ 123.691486][ T6364] ? nci_hci_allocate+0x33/0x180 [ 123.691511][ T6364] nci_register_device+0x11e/0x510 [ 123.691544][ T6364] virtual_ncidev_open+0xca/0x130 [ 123.691632][ T6364] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 123.691749][ T6364] misc_open+0x1df/0x220 [ 123.691784][ T6364] chrdev_open+0x2eb/0x3a0 [ 123.691822][ T6364] do_dentry_open+0x49f/0xa60 [ 123.691844][ T6364] ? __pfx_chrdev_open+0x10/0x10 [ 123.691913][ T6364] vfs_open+0x37/0x1e0 [ 123.691935][ T6364] path_openat+0xc01/0x10d0 [ 123.691984][ T6364] do_file_open+0x16c/0x290 [ 123.692023][ T6364] do_sys_openat2+0xa0/0x130 [ 123.692046][ T6364] __x64_sys_openat+0xf2/0x120 [ 123.692073][ T6364] x64_sys_call+0x1f72/0x2550 [ 123.692144][ T6364] do_syscall_64+0x112/0x360 [ 123.692242][ T6364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.692334][ T6364] RIP: 0033:0x7f9df7dbe159 [ 123.692351][ T6364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.692369][ T6364] RSP: 002b:00007f9df6817028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 123.692410][ T6364] RAX: ffffffffffffffda RBX: 00007f9df8045fa0 RCX: 00007f9df7dbe159 [ 123.692429][ T6364] RDX: 0000000000000002 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 123.692444][ T6364] RBP: 00007f9df7e5503b R08: 0000000000000000 R09: 0000000000000000 [ 123.692457][ T6364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.692469][ T6364] R13: 00007f9df8046038 R14: 00007f9df8045fa0 R15: 00007ffde3a5bb38 [ 123.692539][ T6364] [ 124.124319][ T6382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.676'. [ 124.124440][ T6382] netlink: 16 bytes leftover after parsing attributes in process `syz.1.676'. [ 124.459429][ T6406] netlink: 'syz.8.681': attribute type 1 has an invalid length. [ 124.842861][ T6406] loop8: detected capacity change from 0 to 512 [ 124.872944][ T6406] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 124.872977][ T6406] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 124.943694][ T6406] EXT4-fs (loop8): 1 truncate cleaned up [ 124.980709][ T6406] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.040702][ T6431] FAULT_INJECTION: forcing a failure. [ 125.040702][ T6431] name fail_futex, interval 1, probability 0, space 0, times 0 [ 125.040747][ T6431] CPU: 0 UID: 0 PID: 6431 Comm: syz.6.691 Not tainted syzkaller #0 PREEMPT(lazy) [ 125.040775][ T6431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 125.040838][ T6431] Call Trace: [ 125.040845][ T6431] [ 125.040853][ T6431] __dump_stack+0x1d/0x30 [ 125.040907][ T6431] dump_stack_lvl+0x95/0xd0 [ 125.040940][ T6431] dump_stack+0x15/0x1b [ 125.040970][ T6431] should_fail_ex+0x262/0x280 [ 125.041005][ T6431] should_fail+0xb/0x20 [ 125.041033][ T6431] get_futex_key+0x12d/0xb10 [ 125.041066][ T6431] futex_wake+0x89/0x400 [ 125.041117][ T6431] do_futex+0x3f8/0x460 [ 125.041158][ T6431] ? kmem_cache_free+0x106/0x3b0 [ 125.041200][ T6431] __se_sys_futex+0x2f6/0x370 [ 125.041301][ T6431] __x64_sys_futex+0x78/0x90 [ 125.041333][ T6431] x64_sys_call+0x22e2/0x2550 [ 125.041402][ T6431] do_syscall_64+0x112/0x360 [ 125.041449][ T6431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.041480][ T6431] RIP: 0033:0x7fdee1c1e159 [ 125.041579][ T6431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.041604][ T6431] RSP: 002b:00007fdee06770e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 125.041682][ T6431] RAX: ffffffffffffffda RBX: 00007fdee1ea5fa8 RCX: 00007fdee1c1e159 [ 125.041726][ T6431] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fdee1ea5fac [ 125.041743][ T6431] RBP: 00007fdee1ea5fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 125.041757][ T6431] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 125.041769][ T6431] R13: 00007fdee1ea6038 R14: 00007fff2c55d3a0 R15: 00007fff2c55d488 [ 125.041790][ T6431] [ 127.029669][ T5496] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.312260][ T6456] netlink: 'syz.1.699': attribute type 1 has an invalid length. [ 127.449472][ T6440] syzkaller1: entered promiscuous mode [ 127.449507][ T6440] syzkaller1: entered allmulticast mode [ 127.601658][ T6456] loop1: detected capacity change from 0 to 512 [ 127.650546][ T6456] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 127.677144][ T6456] EXT4-fs (loop1): 1 truncate cleaned up [ 127.717361][ T6456] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.735140][ T6467] netlink: 4 bytes leftover after parsing attributes in process `syz.8.702'. [ 127.735211][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 127.735224][ T29] audit: type=1400 audit(1789476978.188:431): avc: denied { write } for pid=6466 comm="syz.8.702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 127.735334][ T29] audit: type=1400 audit(1789476978.188:432): avc: denied { nlmsg_write } for pid=6466 comm="syz.8.702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 127.739910][ T6467] FAULT_INJECTION: forcing a failure. [ 127.739910][ T6467] name failslab, interval 1, probability 0, space 0, times 0 [ 127.739937][ T6467] CPU: 0 UID: 0 PID: 6467 Comm: syz.8.702 Not tainted syzkaller #0 PREEMPT(lazy) [ 127.739966][ T6467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 127.739983][ T6467] Call Trace: [ 127.739991][ T6467] [ 127.740000][ T6467] __dump_stack+0x1d/0x30 [ 127.740204][ T6467] dump_stack_lvl+0x95/0xd0 [ 127.740311][ T6467] dump_stack+0x15/0x1b [ 127.740339][ T6467] should_fail_ex+0x262/0x280 [ 127.740370][ T6467] ? __kthread_create_on_node+0x80/0x240 [ 127.740429][ T6467] should_failslab+0x8c/0xb0 [ 127.740469][ T6467] __kmalloc_cache_noprof+0x7a/0x400 [ 127.740540][ T6467] ? __kthread_create_on_node+0x80/0x240 [ 127.740583][ T6467] ? __pfx_rescuer_thread+0x10/0x10 [ 127.740722][ T6467] __kthread_create_on_node+0x80/0x240 [ 127.740777][ T6467] ? __pfx_rescuer_thread+0x10/0x10 [ 127.740870][ T6467] kthread_create_on_node+0x89/0xc0 [ 127.740909][ T6467] ? scnprintf+0xb2/0xf0 [ 127.740936][ T6467] init_rescuer+0x17c/0x290 [ 127.741026][ T6467] ? __cancel_work+0x120/0x180 [ 127.741057][ T6467] alloc_workqueue_va+0x145b/0x1630 [ 127.741117][ T6467] alloc_workqueue_noprof+0x84/0xb0 [ 127.741225][ T6467] ? __pcs_replace_empty_main+0x76/0x330 [ 127.741263][ T6467] nci_register_device+0x11e/0x510 [ 127.741305][ T6467] virtual_ncidev_open+0xca/0x130 [ 127.741337][ T6467] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 127.741471][ T6467] misc_open+0x1df/0x220 [ 127.741506][ T6467] chrdev_open+0x2eb/0x3a0 [ 127.741587][ T6467] do_dentry_open+0x49f/0xa60 [ 127.741608][ T6467] ? __pfx_chrdev_open+0x10/0x10 [ 127.741656][ T6467] vfs_open+0x37/0x1e0 [ 127.741685][ T6467] path_openat+0xc01/0x10d0 [ 127.741726][ T6467] do_file_open+0x16c/0x290 [ 127.741836][ T6467] do_sys_openat2+0xa0/0x130 [ 127.741869][ T6467] __x64_sys_openat+0xf2/0x120 [ 127.741902][ T6467] x64_sys_call+0x1f72/0x2550 [ 127.741965][ T6467] do_syscall_64+0x112/0x360 [ 127.741999][ T6467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.742027][ T6467] RIP: 0033:0x7ff1f945e159 [ 127.742043][ T6467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.742131][ T6467] RSP: 002b:00007ff1f7eb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 127.742157][ T6467] RAX: ffffffffffffffda RBX: 00007ff1f96e5fa0 RCX: 00007ff1f945e159 [ 127.742176][ T6467] RDX: 0000000000000002 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 127.742252][ T6467] RBP: 00007ff1f94f503b R08: 0000000000000000 R09: 0000000000000000 [ 127.742318][ T6467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.742330][ T6467] R13: 00007ff1f96e6038 R14: 00007ff1f96e5fa0 R15: 00007fff3acea888 [ 127.742351][ T6467] [ 127.751434][ T6467] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -ENOMEM [ 127.847566][ T6469] netlink: 'syz.7.703': attribute type 1 has an invalid length. [ 127.954698][ T4597] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.967166][ T6471] FAULT_INJECTION: forcing a failure. [ 127.967166][ T6471] name failslab, interval 1, probability 0, space 0, times 0 [ 127.967262][ T6471] CPU: 1 UID: 0 PID: 6471 Comm: syz.8.704 Not tainted syzkaller #0 PREEMPT(lazy) [ 127.967344][ T6471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 127.967392][ T6471] Call Trace: [ 127.967414][ T6471] [ 127.967437][ T6471] __dump_stack+0x1d/0x30 [ 127.967523][ T6471] dump_stack_lvl+0x95/0xd0 [ 127.967553][ T6471] dump_stack+0x15/0x1b [ 127.967639][ T6471] should_fail_ex+0x262/0x280 [ 127.967667][ T6471] ? alloc_pwq+0x629/0x670 [ 127.967777][ T6471] should_failslab+0x8c/0xb0 [ 127.967888][ T6471] kmem_cache_alloc_node_noprof+0x82/0x400 [ 127.967998][ T6471] ? pcpu_chunk_relocate+0x17a/0x2a0 [ 127.968159][ T6471] ? alloc_pwq+0x629/0x670 [ 127.968274][ T6471] alloc_pwq+0x629/0x670 [ 127.968381][ T6471] apply_wqattrs_prepare+0x1d3/0x840 [ 127.968517][ T6471] alloc_workqueue_va+0xac1/0x1630 [ 127.968637][ T6471] alloc_workqueue_noprof+0x84/0xb0 [ 127.968721][ T6471] ? nci_hci_allocate+0x33/0x180 [ 127.968798][ T6471] nci_register_device+0x11e/0x510 [ 127.968983][ T6471] virtual_ncidev_open+0xca/0x130 [ 127.969089][ T6471] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 127.969250][ T6471] misc_open+0x1df/0x220 [ 127.969330][ T6471] chrdev_open+0x2eb/0x3a0 [ 127.969498][ T6471] do_dentry_open+0x49f/0xa60 [ 127.969570][ T6471] ? __pfx_chrdev_open+0x10/0x10 [ 127.969706][ T6471] vfs_open+0x37/0x1e0 [ 127.969792][ T6471] path_openat+0xc01/0x10d0 [ 127.969967][ T6471] do_file_open+0x16c/0x290 [ 127.970095][ T6471] do_sys_openat2+0xa0/0x130 [ 127.970190][ T6471] __x64_sys_openat+0xf2/0x120 [ 127.970272][ T6471] x64_sys_call+0x1f72/0x2550 [ 127.970404][ T6471] do_syscall_64+0x112/0x360 [ 127.970513][ T6471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.970629][ T6471] RIP: 0033:0x7ff1f945e159 [ 127.970690][ T6471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.970782][ T6471] RSP: 002b:00007ff1f7eb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 127.970905][ T6471] RAX: ffffffffffffffda RBX: 00007ff1f96e5fa0 RCX: 00007ff1f945e159 [ 127.970956][ T6471] RDX: 0000000000000002 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 127.971000][ T6471] RBP: 00007ff1f94f503b R08: 0000000000000000 R09: 0000000000000000 [ 127.971042][ T6471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.971083][ T6471] R13: 00007ff1f96e6038 R14: 00007ff1f96e5fa0 R15: 00007fff3acea888 [ 127.971155][ T6471] [ 128.016333][ T6469] loop7: detected capacity change from 0 to 512 [ 128.075001][ T6469] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 128.094458][ T6469] EXT4-fs (loop7): 1 truncate cleaned up [ 128.103901][ T6469] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.146035][ T29] audit: type=1400 audit(1789476978.598:433): avc: denied { write } for pid=6468 comm="syz.7.703" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 128.146078][ T29] audit: type=1400 audit(1789476978.598:434): avc: denied { add_name } for pid=6468 comm="syz.7.703" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 128.146146][ T29] audit: type=1400 audit(1789476978.598:435): avc: denied { create } for pid=6468 comm="syz.7.703" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 128.161474][ T29] audit: type=1400 audit(1789476978.608:436): avc: denied { read open } for pid=6468 comm="syz.7.703" path="/62/file1/bus" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 128.210597][ T29] audit: type=1400 audit(1789476978.658:437): avc: denied { create } for pid=6468 comm="syz.7.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 128.227218][ T29] audit: type=1400 audit(1789476978.678:438): avc: denied { connect } for pid=6468 comm="syz.7.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 128.326439][ T6479] netlink: 'syz.8.706': attribute type 1 has an invalid length. [ 128.348795][ T4960] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.551139][ T6483] loop6: detected capacity change from 0 to 256 [ 128.629756][ T6479] loop8: detected capacity change from 0 to 512 [ 128.632230][ T6486] netlink: 'syz.9.710': attribute type 1 has an invalid length. [ 128.689061][ T6479] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 128.808871][ T6479] EXT4-fs (loop8): 1 truncate cleaned up [ 128.848349][ T6479] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.990340][ T29] audit: type=1400 audit(1789476979.438:439): avc: denied { write } for pid=6475 comm="syz.8.706" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 128.995082][ T29] audit: type=1400 audit(1789476979.448:440): avc: denied { add_name } for pid=6475 comm="syz.8.706" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 129.027229][ T6486] loop9: detected capacity change from 0 to 512 [ 129.069551][ T6486] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 129.104993][ T6486] EXT4-fs (loop9): 1 truncate cleaned up [ 129.133500][ T5496] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.171356][ T6486] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.211087][ T6508] netlink: 4 bytes leftover after parsing attributes in process `syz.8.718'. [ 129.212109][ T6508] FAULT_INJECTION: forcing a failure. [ 129.212109][ T6508] name failslab, interval 1, probability 0, space 0, times 0 [ 129.212157][ T6508] CPU: 0 UID: 0 PID: 6508 Comm: syz.8.718 Not tainted syzkaller #0 PREEMPT(lazy) [ 129.212258][ T6508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 129.212273][ T6508] Call Trace: [ 129.212325][ T6508] [ 129.212334][ T6508] __dump_stack+0x1d/0x30 [ 129.212367][ T6508] dump_stack_lvl+0x95/0xd0 [ 129.212402][ T6508] dump_stack+0x15/0x1b [ 129.212500][ T6508] should_fail_ex+0x262/0x280 [ 129.212530][ T6508] ? alloc_pwq+0x629/0x670 [ 129.212568][ T6508] should_failslab+0x8c/0xb0 [ 129.212667][ T6508] kmem_cache_alloc_node_noprof+0x82/0x400 [ 129.212705][ T6508] ? pcpu_chunk_relocate+0x17a/0x2a0 [ 129.212779][ T6508] ? alloc_pwq+0x629/0x670 [ 129.212824][ T6508] alloc_pwq+0x629/0x670 [ 129.212938][ T6508] apply_wqattrs_prepare+0x1d3/0x840 [ 129.212983][ T6508] alloc_workqueue_va+0xac1/0x1630 [ 129.213051][ T6508] alloc_workqueue_noprof+0x84/0xb0 [ 129.213101][ T6508] ? nci_hci_allocate+0x33/0x180 [ 129.213134][ T6508] nci_register_device+0x11e/0x510 [ 129.213167][ T6508] virtual_ncidev_open+0xca/0x130 [ 129.213260][ T6508] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 129.213370][ T6508] misc_open+0x1df/0x220 [ 129.213422][ T6508] chrdev_open+0x2eb/0x3a0 [ 129.213468][ T6508] do_dentry_open+0x49f/0xa60 [ 129.213498][ T6508] ? __pfx_chrdev_open+0x10/0x10 [ 129.213582][ T6508] vfs_open+0x37/0x1e0 [ 129.213612][ T6508] path_openat+0xc01/0x10d0 [ 129.213651][ T6508] do_file_open+0x16c/0x290 [ 129.213689][ T6508] do_sys_openat2+0xa0/0x130 [ 129.213742][ T6508] __x64_sys_openat+0xf2/0x120 [ 129.213774][ T6508] x64_sys_call+0x1f72/0x2550 [ 129.213807][ T6508] do_syscall_64+0x112/0x360 [ 129.213895][ T6508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.213922][ T6508] RIP: 0033:0x7ff1f945e159 [ 129.213938][ T6508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.213957][ T6508] RSP: 002b:00007ff1f7eb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 129.213978][ T6508] RAX: ffffffffffffffda RBX: 00007ff1f96e5fa0 RCX: 00007ff1f945e159 [ 129.214072][ T6508] RDX: 0000000000000002 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 129.214085][ T6508] RBP: 00007ff1f94f503b R08: 0000000000000000 R09: 0000000000000000 [ 129.214099][ T6508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.214112][ T6508] R13: 00007ff1f96e6038 R14: 00007ff1f96e5fa0 R15: 00007fff3acea888 [ 129.214137][ T6508] [ 129.467625][ T5629] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.498102][ T6503] loop7: detected capacity change from 0 to 8192 [ 129.550453][ T6503] loop7: p4 < > [ 129.670327][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 131.248007][ T6546] netlink: 'syz.6.727': attribute type 1 has an invalid length. [ 131.382817][ T6546] loop6: detected capacity change from 0 to 512 [ 131.403560][ T6546] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 131.414585][ T6546] EXT4-fs (loop6): 1 truncate cleaned up [ 131.418403][ T6546] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.202559][ T4527] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.333406][ T6565] netlink: 4 bytes leftover after parsing attributes in process `syz.9.729'. [ 132.334114][ T6568] FAULT_INJECTION: forcing a failure. [ 132.334114][ T6568] name failslab, interval 1, probability 0, space 0, times 0 [ 132.334148][ T6568] CPU: 0 UID: 0 PID: 6568 Comm: syz.8.731 Not tainted syzkaller #0 PREEMPT(lazy) [ 132.334181][ T6568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 132.334246][ T6568] Call Trace: [ 132.334255][ T6568] [ 132.334265][ T6568] __dump_stack+0x1d/0x30 [ 132.334298][ T6568] dump_stack_lvl+0x95/0xd0 [ 132.334328][ T6568] dump_stack+0x15/0x1b [ 132.334361][ T6568] should_fail_ex+0x262/0x280 [ 132.334393][ T6568] ? alloc_pwq+0x629/0x670 [ 132.334508][ T6568] should_failslab+0x8c/0xb0 [ 132.334598][ T6568] kmem_cache_alloc_node_noprof+0x82/0x400 [ 132.334737][ T6568] ? pcpu_chunk_relocate+0x17a/0x2a0 [ 132.334782][ T6568] ? alloc_pwq+0x629/0x670 [ 132.334827][ T6568] alloc_pwq+0x629/0x670 [ 132.334950][ T6568] apply_wqattrs_prepare+0x1d3/0x840 [ 132.334999][ T6568] alloc_workqueue_va+0xac1/0x1630 [ 132.335147][ T6568] alloc_workqueue_noprof+0x84/0xb0 [ 132.335182][ T6568] ? nci_hci_allocate+0x33/0x180 [ 132.335217][ T6568] nci_register_device+0x11e/0x510 [ 132.335278][ T6568] virtual_ncidev_open+0xca/0x130 [ 132.335324][ T6568] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 132.335369][ T6568] misc_open+0x1df/0x220 [ 132.335460][ T6568] chrdev_open+0x2eb/0x3a0 [ 132.335510][ T6568] do_dentry_open+0x49f/0xa60 [ 132.335618][ T6568] ? __pfx_chrdev_open+0x10/0x10 [ 132.335666][ T6568] vfs_open+0x37/0x1e0 [ 132.335688][ T6568] path_openat+0xc01/0x10d0 [ 132.335766][ T6568] do_file_open+0x16c/0x290 [ 132.335817][ T6568] do_sys_openat2+0xa0/0x130 [ 132.335851][ T6568] __x64_sys_openat+0xf2/0x120 [ 132.335884][ T6568] x64_sys_call+0x1f72/0x2550 [ 132.335979][ T6568] do_syscall_64+0x112/0x360 [ 132.336027][ T6568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.336099][ T6568] RIP: 0033:0x7ff1f945e159 [ 132.336115][ T6568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.336133][ T6568] RSP: 002b:00007ff1f7eb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 132.336156][ T6568] RAX: ffffffffffffffda RBX: 00007ff1f96e5fa0 RCX: 00007ff1f945e159 [ 132.336229][ T6568] RDX: 0000000000000002 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 132.336355][ T6568] RBP: 00007ff1f94f503b R08: 0000000000000000 R09: 0000000000000000 [ 132.336374][ T6568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.336392][ T6568] R13: 00007ff1f96e6038 R14: 00007ff1f96e5fa0 R15: 00007fff3acea888 [ 132.336420][ T6568] [ 132.422747][ T6564] FAULT_INJECTION: forcing a failure. [ 132.422747][ T6564] name fail_futex, interval 1, probability 0, space 0, times 0 [ 132.422834][ T6564] CPU: 1 UID: 0 PID: 6564 Comm: syz.6.728 Not tainted syzkaller #0 PREEMPT(lazy) [ 132.422921][ T6564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 132.422964][ T6564] Call Trace: [ 132.422986][ T6564] [ 132.423016][ T6564] __dump_stack+0x1d/0x30 [ 132.423093][ T6564] dump_stack_lvl+0x95/0xd0 [ 132.423238][ T6564] dump_stack+0x15/0x1b [ 132.423304][ T6564] should_fail_ex+0x262/0x280 [ 132.423388][ T6564] should_fail+0xb/0x20 [ 132.423476][ T6564] get_futex_key+0x12d/0xb10 [ 132.423563][ T6564] ? css_set_move_task+0x36b/0x380 [ 132.423695][ T6564] futex_wake+0x89/0x400 [ 132.423752][ T6564] ? perf_lock_task_context+0x24b/0x2c0 [ 132.423850][ T6564] do_futex+0x3f8/0x460 [ 132.424024][ T6564] mm_exit_exec_release+0xab/0x190 [ 132.424117][ T6564] exit_mm+0x37/0x1a0 [ 132.424214][ T6564] do_exit+0x438/0x1510 [ 132.424382][ T6564] do_group_exit+0xfe/0x140 [ 132.424479][ T6564] ? get_signal+0xe00/0xf10 [ 132.424606][ T6564] get_signal+0xe07/0xf10 [ 132.424741][ T6564] arch_do_signal_or_restart+0x96/0x480 [ 132.424856][ T6564] exit_to_user_mode_loop+0x15d/0x8c0 [ 132.425033][ T6564] do_syscall_64+0x212/0x360 [ 132.425159][ T6564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.425233][ T6564] RIP: 0033:0x7fdee1c1e159 [ 132.425349][ T6564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.425421][ T6564] RSP: 002b:00007fdee06560e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 132.425574][ T6564] RAX: fffffffffffffe00 RBX: 00007fdee1ea6098 RCX: 00007fdee1c1e159 [ 132.425693][ T6564] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fdee1ea6098 [ 132.425758][ T6564] RBP: 00007fdee1ea6090 R08: 0000000000000000 R09: 0000000000000000 [ 132.425802][ T6564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.425845][ T6564] R13: 00007fdee1ea6128 R14: 00007fff2c55d3a0 R15: 00007fff2c55d488 [ 132.425951][ T6564] [ 132.467839][ T6565] FAULT_INJECTION: forcing a failure. [ 132.467839][ T6565] name failslab, interval 1, probability 0, space 0, times 0 [ 132.467892][ T6565] CPU: 1 UID: 0 PID: 6565 Comm: syz.9.729 Not tainted syzkaller #0 PREEMPT(lazy) [ 132.467996][ T6565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 132.468040][ T6565] Call Trace: [ 132.468070][ T6565] [ 132.468100][ T6565] __dump_stack+0x1d/0x30 [ 132.468183][ T6565] dump_stack_lvl+0x95/0xd0 [ 132.468252][ T6565] dump_stack+0x15/0x1b [ 132.468323][ T6565] should_fail_ex+0x262/0x280 [ 132.468432][ T6565] ? alloc_pwq+0x629/0x670 [ 132.468606][ T6565] should_failslab+0x8c/0xb0 [ 132.468716][ T6565] kmem_cache_alloc_node_noprof+0x82/0x400 [ 132.468883][ T6565] ? pcpu_chunk_relocate+0x17a/0x2a0 [ 132.468990][ T6565] ? alloc_pwq+0x629/0x670 [ 132.469089][ T6565] alloc_pwq+0x629/0x670 [ 132.469248][ T6565] apply_wqattrs_prepare+0x1d3/0x840 [ 132.469367][ T6565] alloc_workqueue_va+0xac1/0x1630 [ 132.469602][ T6565] alloc_workqueue_noprof+0x84/0xb0 [ 132.469695][ T6565] ? nci_hci_allocate+0x33/0x180 [ 132.469781][ T6565] nci_register_device+0x11e/0x510 [ 132.469930][ T6565] virtual_ncidev_open+0xca/0x130 [ 132.470038][ T6565] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 132.470201][ T6565] misc_open+0x1df/0x220 [ 132.470286][ T6565] chrdev_open+0x2eb/0x3a0 [ 132.470423][ T6565] do_dentry_open+0x49f/0xa60 [ 132.470600][ T6565] ? __pfx_chrdev_open+0x10/0x10 [ 132.470721][ T6565] vfs_open+0x37/0x1e0 [ 132.470814][ T6565] path_openat+0xc01/0x10d0 [ 132.470938][ T6565] do_file_open+0x16c/0x290 [ 132.471122][ T6565] do_sys_openat2+0xa0/0x130 [ 132.471212][ T6565] __x64_sys_openat+0xf2/0x120 [ 132.471289][ T6565] x64_sys_call+0x1f72/0x2550 [ 132.471437][ T6565] do_syscall_64+0x112/0x360 [ 132.471575][ T6565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.471642][ T6565] RIP: 0033:0x7f9df7dbe159 [ 132.471695][ T6565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.471757][ T6565] RSP: 002b:00007f9df6817028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 132.471822][ T6565] RAX: ffffffffffffffda RBX: 00007f9df8045fa0 RCX: 00007f9df7dbe159 [ 132.471997][ T6565] RDX: 0000000000000002 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 132.472063][ T6565] RBP: 00007f9df7e5503b R08: 0000000000000000 R09: 0000000000000000 [ 132.472107][ T6565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.472166][ T6565] R13: 00007f9df8046038 R14: 00007f9df8045fa0 R15: 00007ffde3a5bb38 [ 132.472258][ T6565] [ 132.794571][ T6577] netlink: 4 bytes leftover after parsing attributes in process `syz.6.733'. [ 132.823749][ T6578] netlink: 'syz.7.734': attribute type 1 has an invalid length. [ 132.869560][ T6577] FAULT_INJECTION: forcing a failure. [ 132.869560][ T6577] name failslab, interval 1, probability 0, space 0, times 0 [ 132.869647][ T6577] CPU: 1 UID: 0 PID: 6577 Comm: syz.6.733 Not tainted syzkaller #0 PREEMPT(lazy) [ 132.869739][ T6577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 132.869782][ T6577] Call Trace: [ 132.869826][ T6577] [ 132.869849][ T6577] __dump_stack+0x1d/0x30 [ 132.869934][ T6577] dump_stack_lvl+0x95/0xd0 [ 132.870008][ T6577] dump_stack+0x15/0x1b [ 132.870140][ T6577] should_fail_ex+0x262/0x280 [ 132.870240][ T6577] ? alloc_pwq+0x629/0x670 [ 132.870428][ T6577] should_failslab+0x8c/0xb0 [ 132.870528][ T6577] kmem_cache_alloc_node_noprof+0x82/0x400 [ 132.870634][ T6577] ? pcpu_chunk_relocate+0x17a/0x2a0 [ 132.870780][ T6577] ? alloc_pwq+0x629/0x670 [ 132.870896][ T6577] alloc_pwq+0x629/0x670 [ 132.871053][ T6577] apply_wqattrs_prepare+0x1d3/0x840 [ 132.871256][ T6577] alloc_workqueue_va+0xac1/0x1630 [ 132.871347][ T6577] alloc_workqueue_noprof+0x84/0xb0 [ 132.871433][ T6577] ? nci_hci_allocate+0x33/0x180 [ 132.871519][ T6577] nci_register_device+0x11e/0x510 [ 132.871635][ T6577] virtual_ncidev_open+0xca/0x130 [ 132.871811][ T6577] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 132.872004][ T6577] misc_open+0x1df/0x220 [ 132.872098][ T6577] chrdev_open+0x2eb/0x3a0 [ 132.872216][ T6577] do_dentry_open+0x49f/0xa60 [ 132.872360][ T6577] ? __pfx_chrdev_open+0x10/0x10 [ 132.872490][ T6577] vfs_open+0x37/0x1e0 [ 132.872565][ T6577] path_openat+0xc01/0x10d0 [ 132.872680][ T6577] do_file_open+0x16c/0x290 [ 132.872853][ T6577] do_sys_openat2+0xa0/0x130 [ 132.872939][ T6577] __x64_sys_openat+0xf2/0x120 [ 132.873016][ T6577] x64_sys_call+0x1f72/0x2550 [ 132.873165][ T6577] do_syscall_64+0x112/0x360 [ 132.873340][ T6577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.873423][ T6577] RIP: 0033:0x7fdee1c1e159 [ 132.873478][ T6577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.873583][ T6577] RSP: 002b:00007fdee0677028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 132.873650][ T6577] RAX: ffffffffffffffda RBX: 00007fdee1ea5fa0 RCX: 00007fdee1c1e159 [ 132.873697][ T6577] RDX: 0000000000000002 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 132.873741][ T6577] RBP: 00007fdee1cb503b R08: 0000000000000000 R09: 0000000000000000 [ 132.873785][ T6577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.873837][ T6577] R13: 00007fdee1ea6038 R14: 00007fdee1ea5fa0 R15: 00007fff2c55d488 [ 132.873960][ T6577] [ 133.039936][ T6578] loop7: detected capacity change from 0 to 512 [ 133.148666][ T6578] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 133.236085][ T6578] EXT4-fs (loop7): 1 truncate cleaned up [ 133.246575][ T6578] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.362352][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 133.362425][ T29] audit: type=1400 audit(1789476983.788:456): avc: denied { write } for pid=6574 comm="syz.7.734" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 133.489637][ T29] audit: type=1400 audit(1789476983.938:457): avc: denied { write } for pid=6573 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.561723][ T29] audit: type=1400 audit(1789476984.018:458): avc: denied { write } for pid=6611 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.435622][ T4960] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.606379][ T29] audit: type=1400 audit(1789476987.058:459): avc: denied { write } for pid=6617 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.652991][ T29] audit: type=1400 audit(1789476987.108:460): avc: denied { write } for pid=6649 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.845827][ T6634] syzkaller1: entered promiscuous mode [ 136.845865][ T6634] syzkaller1: entered allmulticast mode [ 136.882864][ T6664] loop8: detected capacity change from 0 to 256 [ 137.033053][ T6669] loop7: detected capacity change from 0 to 128 [ 137.050569][ T6669] EXT4-fs (loop7): can't mount with data_err=abort, fs mounted w/o journal [ 137.204083][ T6679] FAULT_INJECTION: forcing a failure. [ 137.204083][ T6679] name failslab, interval 1, probability 0, space 0, times 0 [ 137.204112][ T6679] CPU: 1 UID: 0 PID: 6679 Comm: syz.1.761 Not tainted syzkaller #0 PREEMPT(lazy) [ 137.204143][ T6679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 137.204160][ T6679] Call Trace: [ 137.204168][ T6679] [ 137.204176][ T6679] __dump_stack+0x1d/0x30 [ 137.204272][ T6679] dump_stack_lvl+0x95/0xd0 [ 137.204302][ T6679] dump_stack+0x15/0x1b [ 137.204330][ T6679] should_fail_ex+0x262/0x280 [ 137.204426][ T6679] ? do_set_mempolicy+0x17c/0x3c0 [ 137.204451][ T6679] should_failslab+0x8c/0xb0 [ 137.204482][ T6679] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 137.204523][ T6679] ? do_set_mempolicy+0x17c/0x3c0 [ 137.204633][ T6679] do_set_mempolicy+0x17c/0x3c0 [ 137.204668][ T6679] __se_sys_set_mempolicy+0x13c/0x3a0 [ 137.204694][ T6679] __x64_sys_set_mempolicy+0x43/0x50 [ 137.204715][ T6679] x64_sys_call+0x12d5/0x2550 [ 137.204827][ T6679] do_syscall_64+0x112/0x360 [ 137.204895][ T6679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.204931][ T6679] RIP: 0033:0x7ff6111be159 [ 137.204952][ T6679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.205039][ T6679] RSP: 002b:00007ff60fc17028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ee [ 137.205060][ T6679] RAX: ffffffffffffffda RBX: 00007ff611445fa0 RCX: 00007ff6111be159 [ 137.205074][ T6679] RDX: 00000000000000e0 RSI: 00002000000003c0 RDI: 0000000000000006 [ 137.205091][ T6679] RBP: 00007ff61125503b R08: 0000000000000000 R09: 0000000000000000 [ 137.205109][ T6679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.205126][ T6679] R13: 00007ff611446038 R14: 00007ff611445fa0 R15: 00007ffda8777118 [ 137.205168][ T6679] [ 137.286251][ T6682] netlink: 'syz.1.762': attribute type 4 has an invalid length. [ 137.429536][ T6687] netlink: 8 bytes leftover after parsing attributes in process `syz.9.764'. [ 137.434396][ T6687] team0: No ports can be present during mode change [ 137.827761][ T70] bio_check_eod: 196 callbacks suppressed [ 137.827777][ T70] kworker/u8:4: attempt to access beyond end of device [ 137.827777][ T70] loop8: rw=1, sector=1768, nr_sectors = 32 limit=256 [ 137.827934][ T70] kworker/u8:4: attempt to access beyond end of device [ 137.827934][ T70] loop8: rw=1, sector=1832, nr_sectors = 32 limit=256 [ 137.828004][ T70] kworker/u8:4: attempt to access beyond end of device [ 137.828004][ T70] loop8: rw=1, sector=1896, nr_sectors = 32 limit=256 [ 137.828078][ T70] kworker/u8:4: attempt to access beyond end of device [ 137.828078][ T70] loop8: rw=1, sector=1960, nr_sectors = 32 limit=256 [ 137.828190][ T70] kworker/u8:4: attempt to access beyond end of device [ 137.828190][ T70] loop8: rw=1, sector=2024, nr_sectors = 32 limit=256 [ 137.828290][ T70] kworker/u8:4: attempt to access beyond end of device [ 137.828290][ T70] loop8: rw=1, sector=2088, nr_sectors = 32 limit=256 [ 137.828650][ T70] kworker/u8:4: attempt to access beyond end of device [ 137.828650][ T70] loop8: rw=1, sector=2152, nr_sectors = 32 limit=256 [ 137.828774][ T70] kworker/u8:4: attempt to access beyond end of device [ 137.828774][ T70] loop8: rw=1, sector=2216, nr_sectors = 32 limit=256 [ 137.828976][ T70] kworker/u8:4: attempt to access beyond end of device [ 137.828976][ T70] loop8: rw=1, sector=2280, nr_sectors = 32 limit=256 [ 137.829093][ T70] kworker/u8:4: attempt to access beyond end of device [ 137.829093][ T70] loop8: rw=1, sector=2344, nr_sectors = 32 limit=256 [ 137.944932][ T6709] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 138.312105][ T6738] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 138.352211][ T6749] netlink: 8 bytes leftover after parsing attributes in process `syz.6.791'. [ 138.390821][ T6744] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 138.433885][ T6756] netlink: 136 bytes leftover after parsing attributes in process `syz.9.794'. [ 138.466104][ T6751] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 138.466220][ T6749] team0: Unable to change to the same mode the team is in [ 138.531070][ T6751] team0: Unable to change to the same mode the team is in [ 138.624408][ T6774] FAULT_INJECTION: forcing a failure. [ 138.624408][ T6774] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.624446][ T6774] CPU: 0 UID: 0 PID: 6774 Comm: syz.6.801 Not tainted syzkaller #0 PREEMPT(lazy) [ 138.624476][ T6774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 138.624493][ T6774] Call Trace: [ 138.624526][ T6774] [ 138.624536][ T6774] __dump_stack+0x1d/0x30 [ 138.624569][ T6774] dump_stack_lvl+0x95/0xd0 [ 138.624600][ T6774] dump_stack+0x15/0x1b [ 138.624628][ T6774] should_fail_ex+0x262/0x280 [ 138.624669][ T6774] should_fail+0xb/0x20 [ 138.624690][ T6774] should_fail_usercopy+0x1a/0x20 [ 138.624726][ T6774] _copy_from_user+0x1c/0xb0 [ 138.624828][ T6774] __sys_bpf+0x1e2/0xc30 [ 138.624855][ T6774] ? do_futex+0x2c0/0x460 [ 138.624947][ T6774] __x64_sys_bpf+0x69/0x80 [ 138.624977][ T6774] x64_sys_call+0xf26/0x2550 [ 138.625124][ T6774] do_syscall_64+0x112/0x360 [ 138.625248][ T6774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.625275][ T6774] RIP: 0033:0x7fdee1c1e159 [ 138.625318][ T6774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.625338][ T6774] RSP: 002b:00007fdee0677028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 138.625372][ T6774] RAX: ffffffffffffffda RBX: 00007fdee1ea5fa0 RCX: 00007fdee1c1e159 [ 138.625469][ T6774] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 138.625484][ T6774] RBP: 00007fdee1cb503b R08: 0000000000000000 R09: 0000000000000000 [ 138.625502][ T6774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.625519][ T6774] R13: 00007fdee1ea6038 R14: 00007fdee1ea5fa0 R15: 00007fff2c55d488 [ 138.625546][ T6774] [ 138.892278][ T6788] netlink: 8 bytes leftover after parsing attributes in process `syz.7.807'. [ 138.895060][ T6788] team0: Mode changed to "activebackup" [ 138.979772][ T6793] bridge_slave_0: left allmulticast mode [ 138.979867][ T6793] bridge_slave_0: left promiscuous mode [ 138.980065][ T6793] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.010883][ T6793] bridge_slave_1: left allmulticast mode [ 139.010911][ T6793] bridge_slave_1: left promiscuous mode [ 139.011053][ T6793] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.049624][ T6793] bond0: (slave bond_slave_0): Releasing backup interface [ 139.067352][ T6799] netlink: 136 bytes leftover after parsing attributes in process `syz.6.812'. [ 139.070078][ T6793] bond0: (slave bond_slave_1): Releasing backup interface [ 139.103629][ T6793] team0: Port device team_slave_0 removed [ 139.118291][ T6793] team0: Port device team_slave_1 removed [ 139.119470][ T6793] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.119488][ T6793] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.148257][ T6793] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.148362][ T6793] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.151073][ T6793] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 139.168756][ T6796] team0: Mode changed to "activebackup" [ 139.480560][ T6816] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 139.533758][ T6819] bridge_slave_0: left allmulticast mode [ 139.533787][ T6819] bridge_slave_0: left promiscuous mode [ 139.533974][ T6819] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.547665][ T6819] bridge_slave_1: left allmulticast mode [ 139.547821][ T6819] bridge_slave_1: left promiscuous mode [ 139.547936][ T6819] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.572323][ T6819] bond0: (slave bond_slave_0): Releasing backup interface [ 139.619581][ T6819] bond0: (slave bond_slave_1): Releasing backup interface [ 139.632438][ T6827] FAULT_INJECTION: forcing a failure. [ 139.632438][ T6827] name failslab, interval 1, probability 0, space 0, times 0 [ 139.632514][ T6827] CPU: 0 UID: 0 PID: 6827 Comm: syz.6.824 Not tainted syzkaller #0 PREEMPT(lazy) [ 139.632575][ T6827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 139.632594][ T6827] Call Trace: [ 139.632603][ T6827] [ 139.632613][ T6827] __dump_stack+0x1d/0x30 [ 139.632703][ T6827] dump_stack_lvl+0x95/0xd0 [ 139.632804][ T6827] dump_stack+0x15/0x1b [ 139.632835][ T6827] should_fail_ex+0x262/0x280 [ 139.632903][ T6827] ? x509_get_sig_params+0x1df/0x290 [ 139.632935][ T6827] should_failslab+0x8c/0xb0 [ 139.633056][ T6827] __kmalloc_noprof+0xd0/0x4d0 [ 139.633099][ T6827] ? crypto_alloc_tfm_node+0x24f/0x280 [ 139.633130][ T6827] ? x509_get_sig_params+0x1df/0x290 [ 139.633224][ T6827] x509_get_sig_params+0x1df/0x290 [ 139.633256][ T6827] x509_cert_parse+0x2f9/0x450 [ 139.633364][ T6827] x509_key_preparse+0x3c/0x420 [ 139.633395][ T6827] asymmetric_key_preparse+0x68/0xb0 [ 139.633439][ T6827] __key_create_or_update+0x2df/0x840 [ 139.633534][ T6827] key_create_or_update+0x42/0x60 [ 139.633583][ T6827] __se_sys_add_key+0x2a5/0x360 [ 139.633685][ T6827] __x64_sys_add_key+0x67/0x80 [ 139.633712][ T6827] x64_sys_call+0x1fa9/0x2550 [ 139.633784][ T6827] do_syscall_64+0x112/0x360 [ 139.633832][ T6827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.633864][ T6827] RIP: 0033:0x7fdee1c1e159 [ 139.633885][ T6827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.633914][ T6827] RSP: 002b:00007fdee0677028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 139.633990][ T6827] RAX: ffffffffffffffda RBX: 00007fdee1ea5fa0 RCX: 00007fdee1c1e159 [ 139.634010][ T6827] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 139.634029][ T6827] RBP: 00007fdee1cb503b R08: ffffffffffffffff R09: 0000000000000000 [ 139.634047][ T6827] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 139.634065][ T6827] R13: 00007fdee1ea6038 R14: 00007fdee1ea5fa0 R15: 00007fff2c55d488 [ 139.634092][ T6827] [ 139.665253][ T6819] team0: Port device team_slave_0 removed [ 139.740474][ T6819] team0: Port device team_slave_1 removed [ 139.752397][ T6819] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.752450][ T6819] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.758838][ T6819] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.758988][ T6819] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.771864][ T6819] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 139.772377][ T6824] team0: Mode changed to "activebackup" [ 139.961943][ T6832] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 140.050976][ T6837] team0: Unable to change to the same mode the team is in [ 140.105604][ T6841] FAULT_INJECTION: forcing a failure. [ 140.105604][ T6841] name failslab, interval 1, probability 0, space 0, times 0 [ 140.105639][ T6841] CPU: 0 UID: 0 PID: 6841 Comm: syz.8.831 Not tainted syzkaller #0 PREEMPT(lazy) [ 140.105710][ T6841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 140.105726][ T6841] Call Trace: [ 140.105734][ T6841] [ 140.105744][ T6841] __dump_stack+0x1d/0x30 [ 140.105803][ T6841] dump_stack_lvl+0x95/0xd0 [ 140.105874][ T6841] dump_stack+0x15/0x1b [ 140.105902][ T6841] should_fail_ex+0x262/0x280 [ 140.105935][ T6841] ? x509_get_sig_params+0x1df/0x290 [ 140.105960][ T6841] should_failslab+0x8c/0xb0 [ 140.106054][ T6841] __kmalloc_noprof+0xd0/0x4d0 [ 140.106127][ T6841] ? crypto_alloc_tfm_node+0x24f/0x280 [ 140.106156][ T6841] ? x509_get_sig_params+0x1df/0x290 [ 140.106189][ T6841] x509_get_sig_params+0x1df/0x290 [ 140.106221][ T6841] x509_cert_parse+0x2f9/0x450 [ 140.106335][ T6841] x509_key_preparse+0x3c/0x420 [ 140.106366][ T6841] asymmetric_key_preparse+0x68/0xb0 [ 140.106409][ T6841] __key_create_or_update+0x2df/0x840 [ 140.106544][ T6841] key_create_or_update+0x42/0x60 [ 140.106588][ T6841] __se_sys_add_key+0x2a5/0x360 [ 140.106692][ T6841] __x64_sys_add_key+0x67/0x80 [ 140.106726][ T6841] x64_sys_call+0x1fa9/0x2550 [ 140.106785][ T6841] do_syscall_64+0x112/0x360 [ 140.106833][ T6841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.106865][ T6841] RIP: 0033:0x7ff1f945e159 [ 140.106886][ T6841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.106915][ T6841] RSP: 002b:00007ff1f7eb7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 140.106980][ T6841] RAX: ffffffffffffffda RBX: 00007ff1f96e5fa0 RCX: 00007ff1f945e159 [ 140.107000][ T6841] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 140.107019][ T6841] RBP: 00007ff1f94f503b R08: ffffffffffffffff R09: 0000000000000000 [ 140.107038][ T6841] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 140.107056][ T6841] R13: 00007ff1f96e6038 R14: 00007ff1f96e5fa0 R15: 00007fff3acea888 [ 140.107082][ T6841] [ 140.268887][ T6845] FAULT_INJECTION: forcing a failure. [ 140.268887][ T6845] name failslab, interval 1, probability 0, space 0, times 0 [ 140.269026][ T6845] CPU: 0 UID: 0 PID: 6845 Comm: syz.6.832 Not tainted syzkaller #0 PREEMPT(lazy) [ 140.269111][ T6845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 140.269155][ T6845] Call Trace: [ 140.269176][ T6845] [ 140.269208][ T6845] __dump_stack+0x1d/0x30 [ 140.269305][ T6845] dump_stack_lvl+0x95/0xd0 [ 140.269432][ T6845] dump_stack+0x15/0x1b [ 140.269515][ T6845] should_fail_ex+0x262/0x280 [ 140.269603][ T6845] ? x509_get_sig_params+0x1a5/0x290 [ 140.269717][ T6845] should_failslab+0x8c/0xb0 [ 140.269834][ T6845] __kmalloc_noprof+0xd0/0x4d0 [ 140.270004][ T6845] ? crypto_alloc_tfm_node+0x24f/0x280 [ 140.270078][ T6845] ? x509_get_sig_params+0x1a5/0x290 [ 140.270159][ T6845] x509_get_sig_params+0x1a5/0x290 [ 140.270238][ T6845] x509_cert_parse+0x2f9/0x450 [ 140.270384][ T6845] x509_key_preparse+0x3c/0x420 [ 140.270461][ T6845] asymmetric_key_preparse+0x68/0xb0 [ 140.270643][ T6845] __key_create_or_update+0x2df/0x840 [ 140.270845][ T6845] key_create_or_update+0x42/0x60 [ 140.270995][ T6845] __se_sys_add_key+0x2a5/0x360 [ 140.271076][ T6845] __x64_sys_add_key+0x67/0x80 [ 140.271209][ T6845] x64_sys_call+0x1fa9/0x2550 [ 140.271363][ T6845] do_syscall_64+0x112/0x360 [ 140.271482][ T6845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.271599][ T6845] RIP: 0033:0x7fdee1c1e159 [ 140.271663][ T6845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.271749][ T6845] RSP: 002b:00007fdee0677028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 140.271815][ T6845] RAX: ffffffffffffffda RBX: 00007fdee1ea5fa0 RCX: 00007fdee1c1e159 [ 140.271928][ T6845] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 140.271973][ T6845] RBP: 00007fdee1cb503b R08: ffffffffffffffff R09: 0000000000000000 [ 140.272024][ T6845] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 140.272066][ T6845] R13: 00007fdee1ea6038 R14: 00007fdee1ea5fa0 R15: 00007fff2c55d488 [ 140.272132][ T6845] [ 140.544757][ T6851] netlink: 136 bytes leftover after parsing attributes in process `syz.7.836'. [ 140.647894][ T6865] FAULT_INJECTION: forcing a failure. [ 140.647894][ T6865] name failslab, interval 1, probability 0, space 0, times 0 [ 140.647932][ T6865] CPU: 1 UID: 0 PID: 6865 Comm: syz.8.843 Not tainted syzkaller #0 PREEMPT(lazy) [ 140.647967][ T6865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 140.647986][ T6865] Call Trace: [ 140.648039][ T6865] [ 140.648049][ T6865] __dump_stack+0x1d/0x30 [ 140.648084][ T6865] dump_stack_lvl+0x95/0xd0 [ 140.648141][ T6865] dump_stack+0x15/0x1b [ 140.648178][ T6865] should_fail_ex+0x262/0x280 [ 140.648212][ T6865] ? init_rescuer+0x93/0x290 [ 140.648249][ T6865] should_failslab+0x8c/0xb0 [ 140.648349][ T6865] __kmalloc_cache_node_noprof+0x81/0x420 [ 140.648465][ T6865] ? _raw_spin_lock_irqsave+0x58/0xb0 [ 140.648489][ T6865] ? init_rescuer+0x93/0x290 [ 140.648526][ T6865] init_rescuer+0x93/0x290 [ 140.648612][ T6865] ? __cancel_work+0x120/0x180 [ 140.648643][ T6865] alloc_workqueue_va+0x145b/0x1630 [ 140.648677][ T6865] alloc_workqueue_noprof+0x84/0xb0 [ 140.648762][ T6865] ? nci_hci_allocate+0x33/0x180 [ 140.648796][ T6865] nci_register_device+0x11e/0x510 [ 140.648850][ T6865] virtual_ncidev_open+0xca/0x130 [ 140.648887][ T6865] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 140.648976][ T6865] misc_open+0x1df/0x220 [ 140.649011][ T6865] chrdev_open+0x2eb/0x3a0 [ 140.649079][ T6865] do_dentry_open+0x49f/0xa60 [ 140.649108][ T6865] ? __pfx_chrdev_open+0x10/0x10 [ 140.649214][ T6865] vfs_open+0x37/0x1e0 [ 140.649309][ T6865] path_openat+0xc01/0x10d0 [ 140.649412][ T6865] do_file_open+0x16c/0x290 [ 140.649463][ T6865] do_sys_openat2+0xa0/0x130 [ 140.649488][ T6865] __x64_sys_openat+0xf2/0x120 [ 140.649586][ T6865] x64_sys_call+0x1f72/0x2550 [ 140.649626][ T6865] do_syscall_64+0x112/0x360 [ 140.649753][ T6865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.649786][ T6865] RIP: 0033:0x7ff1f945e159 [ 140.649808][ T6865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.649910][ T6865] RSP: 002b:00007ff1f7eb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 140.649999][ T6865] RAX: ffffffffffffffda RBX: 00007ff1f96e5fa0 RCX: 00007ff1f945e159 [ 140.650018][ T6865] RDX: 0000000000000002 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 140.650035][ T6865] RBP: 00007ff1f94f503b R08: 0000000000000000 R09: 0000000000000000 [ 140.650048][ T6865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.650060][ T6865] R13: 00007ff1f96e6038 R14: 00007ff1f96e5fa0 R15: 00007fff3acea888 [ 140.650156][ T6865] [ 140.766693][ T6865] workqueue: Failed to allocate a rescuer for wq "nfc2_nci_cmd_wq" [ 140.839362][ T6869] loop1: detected capacity change from 0 to 256 [ 141.004715][ T6877] FAULT_INJECTION: forcing a failure. [ 141.004715][ T6877] name failslab, interval 1, probability 0, space 0, times 0 [ 141.004803][ T6877] CPU: 0 UID: 0 PID: 6877 Comm: syz.8.846 Not tainted syzkaller #0 PREEMPT(lazy) [ 141.004835][ T6877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 141.004933][ T6877] Call Trace: [ 141.004942][ T6877] [ 141.004952][ T6877] __dump_stack+0x1d/0x30 [ 141.004986][ T6877] dump_stack_lvl+0x95/0xd0 [ 141.005075][ T6877] dump_stack+0x15/0x1b [ 141.005112][ T6877] should_fail_ex+0x262/0x280 [ 141.005145][ T6877] ? x509_get_sig_params+0x1df/0x290 [ 141.005220][ T6877] should_failslab+0x8c/0xb0 [ 141.005302][ T6877] __kmalloc_noprof+0xd0/0x4d0 [ 141.005344][ T6877] ? crypto_alloc_tfm_node+0x24f/0x280 [ 141.005374][ T6877] ? x509_get_sig_params+0x1df/0x290 [ 141.005480][ T6877] x509_get_sig_params+0x1df/0x290 [ 141.005512][ T6877] x509_cert_parse+0x2f9/0x450 [ 141.005548][ T6877] x509_key_preparse+0x3c/0x420 [ 141.005586][ T6877] asymmetric_key_preparse+0x68/0xb0 [ 141.005628][ T6877] __key_create_or_update+0x2df/0x840 [ 141.005673][ T6877] key_create_or_update+0x42/0x60 [ 141.005845][ T6877] __se_sys_add_key+0x2a5/0x360 [ 141.005877][ T6877] __x64_sys_add_key+0x67/0x80 [ 141.005905][ T6877] x64_sys_call+0x1fa9/0x2550 [ 141.006014][ T6877] do_syscall_64+0x112/0x360 [ 141.006061][ T6877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.006100][ T6877] RIP: 0033:0x7ff1f945e159 [ 141.006121][ T6877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.006141][ T6877] RSP: 002b:00007ff1f7eb7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 141.006180][ T6877] RAX: ffffffffffffffda RBX: 00007ff1f96e5fa0 RCX: 00007ff1f945e159 [ 141.006201][ T6877] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 141.006220][ T6877] RBP: 00007ff1f94f503b R08: ffffffffffffffff R09: 0000000000000000 [ 141.006300][ T6877] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 141.006318][ T6877] R13: 00007ff1f96e6038 R14: 00007ff1f96e5fa0 R15: 00007fff3acea888 [ 141.006345][ T6877] [ 141.262813][ T6893] netlink: 136 bytes leftover after parsing attributes in process `syz.9.850'. [ 141.733253][ T6924] FAULT_INJECTION: forcing a failure. [ 141.733253][ T6924] name failslab, interval 1, probability 0, space 0, times 0 [ 141.733284][ T6924] CPU: 1 UID: 0 PID: 6924 Comm: syz.1.862 Not tainted syzkaller #0 PREEMPT(lazy) [ 141.733318][ T6924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 141.733374][ T6924] Call Trace: [ 141.733382][ T6924] [ 141.733392][ T6924] __dump_stack+0x1d/0x30 [ 141.733423][ T6924] dump_stack_lvl+0x95/0xd0 [ 141.733479][ T6924] dump_stack+0x15/0x1b [ 141.733507][ T6924] should_fail_ex+0x262/0x280 [ 141.733537][ T6924] ? sock_kmalloc+0x85/0xc0 [ 141.733565][ T6924] should_failslab+0x8c/0xb0 [ 141.733617][ T6924] __kmalloc_noprof+0xd0/0x4d0 [ 141.733707][ T6924] ? sock_kmalloc+0x85/0xc0 [ 141.733794][ T6924] sock_kmalloc+0x85/0xc0 [ 141.733820][ T6924] ip_mc_source+0x515/0x980 [ 141.733943][ T6924] do_ip_setsockopt+0x1f39/0x22f0 [ 141.733977][ T6924] ip_setsockopt+0x58/0x110 [ 141.734006][ T6924] udp_setsockopt+0x89/0xa0 [ 141.734078][ T6924] sock_common_setsockopt+0x69/0x80 [ 141.734116][ T6924] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 141.734157][ T6924] __sys_setsockopt+0x184/0x200 [ 141.734209][ T6924] __x64_sys_setsockopt+0x64/0x80 [ 141.734332][ T6924] x64_sys_call+0x248f/0x2550 [ 141.734369][ T6924] do_syscall_64+0x112/0x360 [ 141.734430][ T6924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.734465][ T6924] RIP: 0033:0x7ff6111be159 [ 141.734493][ T6924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.734513][ T6924] RSP: 002b:00007ff60fc17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 141.734537][ T6924] RAX: ffffffffffffffda RBX: 00007ff611445fa0 RCX: 00007ff6111be159 [ 141.734552][ T6924] RDX: 0000000000000027 RSI: 0000000000000000 RDI: 0000000000000003 [ 141.734623][ T6924] RBP: 00007ff61125503b R08: 000000000000000c R09: 0000000000000000 [ 141.734642][ T6924] R10: 0000200000000740 R11: 0000000000000246 R12: 0000000000000000 [ 141.734660][ T6924] R13: 00007ff611446038 R14: 00007ff611445fa0 R15: 00007ffda8777118 [ 141.734729][ T6924] [ 142.127284][ T6946] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 142.162244][ T6946] team0: Unable to change to the same mode the team is in [ 142.212152][ T6956] FAULT_INJECTION: forcing a failure. [ 142.212152][ T6956] name failslab, interval 1, probability 0, space 0, times 0 [ 142.212246][ T6956] CPU: 0 UID: 0 PID: 6956 Comm: syz.1.876 Not tainted syzkaller #0 PREEMPT(lazy) [ 142.212372][ T6956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 142.212387][ T6956] Call Trace: [ 142.212396][ T6956] [ 142.212404][ T6956] __dump_stack+0x1d/0x30 [ 142.212429][ T6956] dump_stack_lvl+0x95/0xd0 [ 142.212453][ T6956] dump_stack+0x15/0x1b [ 142.212489][ T6956] should_fail_ex+0x262/0x280 [ 142.212514][ T6956] ? x509_get_sig_params+0x1a5/0x290 [ 142.212540][ T6956] should_failslab+0x8c/0xb0 [ 142.212578][ T6956] __kmalloc_noprof+0xd0/0x4d0 [ 142.212613][ T6956] ? crypto_alloc_tfm_node+0x24f/0x280 [ 142.212637][ T6956] ? x509_get_sig_params+0x1a5/0x290 [ 142.212664][ T6956] x509_get_sig_params+0x1a5/0x290 [ 142.212724][ T6956] x509_cert_parse+0x2f9/0x450 [ 142.212849][ T6956] x509_key_preparse+0x3c/0x420 [ 142.212876][ T6956] asymmetric_key_preparse+0x68/0xb0 [ 142.212993][ T6956] __key_create_or_update+0x2df/0x840 [ 142.213119][ T6956] key_create_or_update+0x42/0x60 [ 142.213217][ T6956] __se_sys_add_key+0x2a5/0x360 [ 142.213241][ T6956] __x64_sys_add_key+0x67/0x80 [ 142.213261][ T6956] x64_sys_call+0x1fa9/0x2550 [ 142.213295][ T6956] do_syscall_64+0x112/0x360 [ 142.213386][ T6956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.213409][ T6956] RIP: 0033:0x7ff6111be159 [ 142.213425][ T6956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.213467][ T6956] RSP: 002b:00007ff60fc17028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 142.213490][ T6956] RAX: ffffffffffffffda RBX: 00007ff611445fa0 RCX: 00007ff6111be159 [ 142.213508][ T6956] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 142.213526][ T6956] RBP: 00007ff61125503b R08: ffffffffffffffff R09: 0000000000000000 [ 142.213544][ T6956] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 142.213561][ T6956] R13: 00007ff611446038 R14: 00007ff611445fa0 R15: 00007ffda8777118 [ 142.213622][ T6956] [ 142.456797][ T6962] netlink: 'syz.7.879': attribute type 1 has an invalid length. [ 142.667290][ T6989] netlink: 8 bytes leftover after parsing attributes in process `syz.8.888'. [ 142.667330][ T6989] netlink: 24 bytes leftover after parsing attributes in process `syz.8.888'. [ 142.696273][ T6989] ip6gretap1: entered allmulticast mode [ 142.818799][ T7003] netlink: 16 bytes leftover after parsing attributes in process `syz.8.897'. [ 143.004690][ T7017] netlink: 136 bytes leftover after parsing attributes in process `syz.8.904'. [ 143.046579][ T7021] FAULT_INJECTION: forcing a failure. [ 143.046579][ T7021] name failslab, interval 1, probability 0, space 0, times 0 [ 143.046616][ T7021] CPU: 1 UID: 0 PID: 7021 Comm: syz.8.905 Not tainted syzkaller #0 PREEMPT(lazy) [ 143.046650][ T7021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 143.046688][ T7021] Call Trace: [ 143.046697][ T7021] [ 143.046705][ T7021] __dump_stack+0x1d/0x30 [ 143.046740][ T7021] dump_stack_lvl+0x95/0xd0 [ 143.046771][ T7021] dump_stack+0x15/0x1b [ 143.046798][ T7021] should_fail_ex+0x262/0x280 [ 143.046850][ T7021] ? alloc_pwq+0x629/0x670 [ 143.046893][ T7021] should_failslab+0x8c/0xb0 [ 143.046936][ T7021] kmem_cache_alloc_node_noprof+0x82/0x400 [ 143.046979][ T7021] ? pcpu_chunk_relocate+0x17a/0x2a0 [ 143.047027][ T7021] ? alloc_pwq+0x629/0x670 [ 143.047067][ T7021] alloc_pwq+0x629/0x670 [ 143.047152][ T7021] apply_wqattrs_prepare+0x1d3/0x840 [ 143.047200][ T7021] alloc_workqueue_va+0xac1/0x1630 [ 143.047239][ T7021] alloc_workqueue_noprof+0x84/0xb0 [ 143.047338][ T7021] ? nci_hci_allocate+0x33/0x180 [ 143.047370][ T7021] nci_register_device+0x11e/0x510 [ 143.047415][ T7021] virtual_ncidev_open+0xca/0x130 [ 143.047522][ T7021] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 143.047567][ T7021] misc_open+0x1df/0x220 [ 143.047610][ T7021] chrdev_open+0x2eb/0x3a0 [ 143.047659][ T7021] do_dentry_open+0x49f/0xa60 [ 143.047751][ T7021] ? __pfx_chrdev_open+0x10/0x10 [ 143.047799][ T7021] vfs_open+0x37/0x1e0 [ 143.047826][ T7021] path_openat+0xc01/0x10d0 [ 143.047877][ T7021] do_file_open+0x16c/0x290 [ 143.047928][ T7021] do_sys_openat2+0xa0/0x130 [ 143.047958][ T7021] __x64_sys_openat+0xf2/0x120 [ 143.048022][ T7021] x64_sys_call+0x1f72/0x2550 [ 143.048052][ T7021] do_syscall_64+0x112/0x360 [ 143.048100][ T7021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.048131][ T7021] RIP: 0033:0x7ff1f945e159 [ 143.048193][ T7021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.048219][ T7021] RSP: 002b:00007ff1f7eb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 143.048252][ T7021] RAX: ffffffffffffffda RBX: 00007ff1f96e5fa0 RCX: 00007ff1f945e159 [ 143.048272][ T7021] RDX: 0000000000000002 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 143.048286][ T7021] RBP: 00007ff1f94f503b R08: 0000000000000000 R09: 0000000000000000 [ 143.048330][ T7021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.048346][ T7021] R13: 00007ff1f96e6038 R14: 00007ff1f96e5fa0 R15: 00007fff3acea888 [ 143.048421][ T7021] [ 143.117761][ T7023] loop6: detected capacity change from 0 to 256 [ 143.345955][ T7028] netlink: 16 bytes leftover after parsing attributes in process `syz.8.909'. [ 143.424943][ T7034] team0: Unable to change to the same mode the team is in [ 143.560392][ T7046] loop1: detected capacity change from 0 to 256 [ 143.573472][ T7044] FAULT_INJECTION: forcing a failure. [ 143.573472][ T7044] name failslab, interval 1, probability 0, space 0, times 0 [ 143.573531][ T7044] CPU: 0 UID: 0 PID: 7044 Comm: syz.9.915 Not tainted syzkaller #0 PREEMPT(lazy) [ 143.573615][ T7044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 143.573658][ T7044] Call Trace: [ 143.573689][ T7044] [ 143.573719][ T7044] __dump_stack+0x1d/0x30 [ 143.573862][ T7044] dump_stack_lvl+0x95/0xd0 [ 143.573944][ T7044] dump_stack+0x15/0x1b [ 143.574009][ T7044] should_fail_ex+0x262/0x280 [ 143.574154][ T7044] should_failslab+0x8c/0xb0 [ 143.574349][ T7044] __kmalloc_node_noprof+0xdb/0x500 [ 143.574530][ T7044] ? crypto_create_tfm_node+0x5b/0x230 [ 143.574613][ T7044] ? crypto_create_tfm_node+0x5b/0x230 [ 143.574844][ T7044] crypto_create_tfm_node+0x5b/0x230 [ 143.574918][ T7044] ? crypto_alg_mod_lookup+0x2f9/0x490 [ 143.574994][ T7044] crypto_alloc_tfm_node+0xb8/0x280 [ 143.575101][ T7044] crypto_alloc_sig+0x2d/0x40 [ 143.575174][ T7044] public_key_verify_signature+0x142/0x4e0 [ 143.575394][ T7044] ? should_fail_ex+0xdb/0x280 [ 143.575544][ T7044] x509_check_for_self_signed+0x1c4/0x250 [ 143.575627][ T7044] x509_cert_parse+0x3bf/0x450 [ 143.575790][ T7044] x509_key_preparse+0x3c/0x420 [ 143.575950][ T7044] asymmetric_key_preparse+0x68/0xb0 [ 143.576107][ T7044] __key_create_or_update+0x2df/0x840 [ 143.576233][ T7044] key_create_or_update+0x42/0x60 [ 143.576331][ T7044] __se_sys_add_key+0x2a5/0x360 [ 143.576483][ T7044] __x64_sys_add_key+0x67/0x80 [ 143.576539][ T7044] x64_sys_call+0x1fa9/0x2550 [ 143.576596][ T7044] do_syscall_64+0x112/0x360 [ 143.576749][ T7044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.576841][ T7044] RIP: 0033:0x7f9df7dbe159 [ 143.576968][ T7044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.577038][ T7044] RSP: 002b:00007f9df6817028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 143.577103][ T7044] RAX: ffffffffffffffda RBX: 00007f9df8045fa0 RCX: 00007f9df7dbe159 [ 143.577148][ T7044] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 143.577191][ T7044] RBP: 00007f9df7e5503b R08: ffffffffffffffff R09: 0000000000000000 [ 143.577271][ T7044] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 143.577313][ T7044] R13: 00007f9df8046038 R14: 00007f9df8045fa0 R15: 00007ffde3a5bb38 [ 143.577378][ T7044] [ 143.966248][ T7052] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 143.966313][ T7055] team0: Unable to change to the same mode the team is in [ 144.072355][ T51] bio_check_eod: 517 callbacks suppressed [ 144.072375][ T51] kworker/u8:3: attempt to access beyond end of device [ 144.072375][ T51] loop6: rw=1, sector=1768, nr_sectors = 32 limit=256 [ 144.072450][ T51] kworker/u8:3: attempt to access beyond end of device [ 144.072450][ T51] loop6: rw=1, sector=1832, nr_sectors = 32 limit=256 [ 144.072581][ T51] kworker/u8:3: attempt to access beyond end of device [ 144.072581][ T51] loop6: rw=1, sector=1896, nr_sectors = 32 limit=256 [ 144.072657][ T51] kworker/u8:3: attempt to access beyond end of device [ 144.072657][ T51] loop6: rw=1, sector=1960, nr_sectors = 32 limit=256 [ 144.072797][ T51] kworker/u8:3: attempt to access beyond end of device [ 144.072797][ T51] loop6: rw=1, sector=2024, nr_sectors = 32 limit=256 [ 144.072847][ T51] kworker/u8:3: attempt to access beyond end of device [ 144.072847][ T51] loop6: rw=1, sector=2088, nr_sectors = 32 limit=256 [ 144.078604][ T51] kworker/u8:3: attempt to access beyond end of device [ 144.078604][ T51] loop6: rw=1, sector=2152, nr_sectors = 32 limit=256 [ 144.078960][ T51] kworker/u8:3: attempt to access beyond end of device [ 144.078960][ T51] loop6: rw=1, sector=2216, nr_sectors = 32 limit=256 [ 144.079146][ T51] kworker/u8:3: attempt to access beyond end of device [ 144.079146][ T51] loop6: rw=1, sector=2280, nr_sectors = 32 limit=256 [ 144.079432][ T51] kworker/u8:3: attempt to access beyond end of device [ 144.079432][ T51] loop6: rw=1, sector=2344, nr_sectors = 32 limit=256 [ 144.123160][ T51] ================================================================== [ 144.123261][ T51] BUG: KCSAN: data-race in __folio_end_writeback / writeout_period [ 144.123357][ T51] [ 144.123361][ T51] write to 0xffffffff8960b2c8 of 8 bytes by interrupt on cpu 1: [ 144.123377][ T51] writeout_period+0xa1/0xe0 [ 144.123440][ T51] call_timer_fn+0x36/0x250 [ 144.123545][ T51] __run_timer_base+0x40c/0x5f0 [ 144.123631][ T51] run_timer_softirq+0x45/0x70 [ 144.123739][ T51] handle_softirqs+0xcc/0x2a0 [ 144.123805][ T51] __irq_exit_rcu+0x44/0xe0 [ 144.123879][ T51] sysvec_apic_timer_interrupt+0x74/0x80 [ 144.123957][ T51] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 144.124032][ T51] _raw_spin_unlock_irqrestore+0x1a/0x30 [ 144.124098][ T51] univ8250_console_device_unlock+0x36/0x40 [ 144.124194][ T51] nbcon_kthread_func+0x595/0x690 [ 144.124269][ T51] kthread+0x223/0x270 [ 144.124491][ T51] ret_from_fork+0x146/0x330 [ 144.124598][ T51] ret_from_fork_asm+0x1a/0x30 [ 144.124693][ T51] [ 144.124722][ T51] read to 0xffffffff8960b2c8 of 8 bytes by task 51 on cpu 0: [ 144.124783][ T51] __folio_end_writeback+0x1aa/0x530 [ 144.124958][ T51] folio_end_writeback_no_dropbehind+0x6d/0x200 [ 144.125034][ T51] folio_end_writeback+0x1c/0x70 [ 144.125107][ T51] mpage_write_end_io+0x245/0x4c0 [ 144.125206][ T51] bio_endio+0x390/0x570 [ 144.125290][ T51] submit_bio_noacct+0x790/0x980 [ 144.125373][ T51] submit_bio+0x2a4/0x2c0 [ 144.125467][ T51] __mpage_writepages+0x946/0x1370 [ 144.125573][ T51] fat_writepages+0x26/0x30 [ 144.125636][ T51] do_writepages+0x1b9/0x300 [ 144.125722][ T51] __writeback_single_inode+0x7b/0x790 [ 144.125826][ T51] writeback_sb_inodes+0x4d9/0xaa0 [ 144.125932][ T51] wb_writeback+0x20c/0x510 [ 144.126028][ T51] wb_workfn+0x1a4/0xa50 [ 144.126119][ T51] process_scheduled_works+0x56a/0xa50 [ 144.126232][ T51] worker_thread+0x569/0x750 [ 144.126327][ T51] kthread+0x223/0x270 [ 144.126395][ T51] ret_from_fork+0x146/0x330 [ 144.126491][ T51] ret_from_fork_asm+0x1a/0x30 [ 144.126576][ T51] [ 144.126587][ T51] value changed: 0x00000000ffffc2d4 -> 0x00000000ffffc400 [ 144.126631][ T51] [ 144.126643][ T51] Reported by Kernel Concurrency Sanitizer on: [ 144.126677][ T51] CPU: 0 UID: 0 PID: 51 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(lazy) [ 144.126762][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 144.126813][ T51] Workqueue: writeback wb_workfn (flush-7:6) [ 144.126912][ T51] ================================================================== [ 144.742430][ T7061] loop8: detected capacity change from 0 to 512