last executing test programs: 4m58.923168966s ago: executing program 32 (id=41): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9, 0x1}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x40, &(0x7f0000000100)=0xfffffffa, 0x4) bind$inet(r4, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendmsg$inet(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="17", 0x1d}], 0x1}, 0x8c0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000040)=0x193a, 0x4) recvmmsg(r4, &(0x7f0000005f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=""/31, 0x1f}, 0x7}, {{0x0, 0x0, 0x0}, 0x5}], 0x2, 0x0, 0x0) sendmsg$inet6(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0xa, 0x4e1e, 0x80000, @rand_addr=' \x01\x00', 0x5}, 0x1c, 0x0}, 0x8000) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12011000ffe700406d040cc500000000000109022400010000104009040084fe0300060009210100fc01222800090581"], 0x0) 4m52.06872559s ago: executing program 33 (id=76): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x40800}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) (fail_nth: 2) 4m42.122759292s ago: executing program 34 (id=118): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/make-it-fail\x00', 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x110}, 0x80) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r6], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4m10.110706796s ago: executing program 35 (id=359): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x2, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0x24000000) sendto$inet(r1, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) recvfrom$inet(r1, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x88}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) 3m12.931047038s ago: executing program 36 (id=852): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) keyctl$set_timeout(0xf, 0x0, 0xffffffffffffffff) 1m7.042152467s ago: executing program 7 (id=1904): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r0, 0x29, 0x40, &(0x7f0000000000)="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000040030000ffffffff00000000d00000001a010000ffffffffffffffff00000000d00000001a01000027020000ffffffff040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000280000000000000000000000000000000000000000000000000000000000000000000feffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000280000000000000000000000000000000000000000000000000000000000000000000feffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000280000000000000000000000000000000000000000000000000000000000000000000feffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000280000000000000000000000000000000000000000000000000000000000000000000feffffff00000000", 0x3a0) 1m6.801281083s ago: executing program 7 (id=1905): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000012c0)={{}, 0x0, &(0x7f0000001280)='%-010d \x00'}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000440)={0x1, 0xf4240}) close_range(r3, 0xffffffffffffffff, 0x400000000000000) 1m6.560049369s ago: executing program 7 (id=1913): mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=f', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB]) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) prctl$PR_SET_DUMPABLE(0x4, 0x0) getpid() r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000010c0)={0xa, 0x8, 0x1, @dev={0xfe, 0x80, '\x00', 0x10}, 0x7}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000040)=ANY=[], 0x6) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000008, &(0x7f0000000000), 0x2, 0x541, &(0x7f0000000600)="$eJzs3dFvG3cdAPDvOXabtinJgAeYtDHYUDtB7WZhW8TDGBIST5MQ472ExI2iOnEUO1sTTTT9FxASSDzBMxJ/ABKqxAuPCGkSPIM0BELQgQQPsENnn5PUOSfe5sSt8/lI1/v9fue77/eX+s5355/OAZxbz0XE6xHxQZqmL0bEbN5eyqfY607Z695/+M5yNiWRpm/+PYkkb+ttK8nnV/LVpiPi29+M+F5yNG5rZ/fOUqNR38rrtfb6Zq21s3tjbX1ptb5a31hYmH9l8dXFlxdvjqSfVyPitW/8OcvktV99+e0/3frr9e9nlZl8+eF+fEjl4xZ2u165ON23wtZHDPY4yvpT6VUuDbfO/VPMBwCAwbJz/E9GxBci4sWYjanjT2cBAACAJ1D6tZn4bxKRFrswoB0AAAB4gpQ6Y2CTUjUfCzATpVK12h3D++m4XGo0W+0v3W5ub6x0x8rORaV0e61Rv5mPFZ6LSpLV5zvlg/pLffWFiHgqIn44e6lTry43GyvjvvkBAAAA58SVvuv/f812r/8BAACACTM37gQAAACAU+f6HwAAACaf638AAACYaN96441sSnu/f73y1s72neZbN1bqrTvV9e3l6nJza7O62myudp7Zt37S9hrN5uZXYmP7bq1db7VrrZ3dW+vN7Y32rbWYPpMOAQAAAEc89bkHf0giYu+rlzpT5sK4kwLORHm/lOTzgr3/j1Pd+XuPtKZpeu9UcwNO19QQr3nvYnG78wR4spX7Gwbs68DkqYw7AWDskhOWDxy889t8/vnR5gMAAIzetc/2ff9f7t7XP/57gXK2RunMkgROhZ0Yzq++z/l0dlyJAGeu8/3/sAN5nCzARKkMNQIQmGQf+/v/E6Xph0oIAAAYuZnOlJSq+e29mSiVqtWIq52fBagkt9ca9ZsR8YmI+P1s5WJWn++smZx4zQAAAAAAAAAAAAAAAAAAAAAAAAAAdKVpEikAAAAw0SJKf0l+3X2W/7XZF2b67w9cSP7T+UngCxHx9k/e/NHdpXZ7az5r/8d+e/vHeftL47iDAQAAAPTrXad35v8edzYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATJr3H76z3JuGePmlUcX929cjYq4ofjmmO/PpqETE5X8mUT60XhIRUyOIv3c/Ij5TFD/J0toPWRR/FH+EE+LHXP5XKIp/ZQTx4Tx7kB1/Xi/a/0rxXGdevP+VIx6pf1SDj3+xf/ybGrD/Xx0yxtPv/qI2MP79iKfLj8Yv98VPBsR/fsj43/3O7u6gZelPI671Pn86R7zDEQ5Ktfb6Zq21s3tjbX1ptb5a31hYmH9l8dXFlxdv1m6vNer5v4UxfvDMLz84rv+XCz//kjybwf1/oWB7RZ9J/3v37sNP9Sp7R+Nff74g/m9+1pndK4hfyuN8MS9ny6/1ynvd8mHP/vx3zx7X/5WD/lcO9/+k///rgzba78iO8sywbx0A4BS0dnbvLDUa9a2JLWRX6Y9BGgqPU+FiRNS3Wvd6LZVRvEnSNE2zfapg0YOIGGY7SYy4p6XifA4KA48A4z4yAQAAo3Zw0j/uTAAAAAAAAAAAAAAAAAAAAOD8OovHrfXHPHgEcjKKR2gDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIzE/wMAAP//lDPSjg==") bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x50) read$FUSE(0xffffffffffffffff, &(0x7f0000005900)={0x2020}, 0x2020) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000000c0)=ANY=[], 0x8) write$binfmt_misc(r0, &(0x7f0000000040), 0xfe46) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) 1m5.528207215s ago: executing program 1 (id=1922): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3039, @loopback}, 0x10) listen(r0, 0x5) r1 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='vers\x00', &(0x7f0000000180)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='addr\x00', &(0x7f0000000280)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000002c0)='proto\x00', &(0x7f0000000300)='tcp\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000340)='mountaddr\x00', &(0x7f0000000380)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000380)='mountproto\x00', &(0x7f0000000400)='tcp\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000440)='timeo\x00', &(0x7f0000000480)='10\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000004c0)='retrans\x00', &(0x7f0000000500)='10\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000540)='retry\x00', &(0x7f0000000580)='10\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000005c0)='port\x00', &(0x7f0000000600)='12345\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000640)='mountport\x00', &(0x7f0000000680)='12345\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000006c0)='soft\x00', &(0x7f0000000700)='\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = accept(r0, 0x0, 0x0) close(r2) close(r0) nanosleep(&(0x7f0000000780)={0x0, 0x2faf080}, 0x0) 1m5.155308445s ago: executing program 8 (id=1927): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) epoll_create(0x2) read$FUSE(r0, &(0x7f0000000500)={0x2020}, 0x2020) 1m4.910553101s ago: executing program 8 (id=1930): syz_usb_connect(0x0, 0x6b, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 1m4.615200689s ago: executing program 1 (id=1933): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x482, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) getrlimit(0x6, &(0x7f00000001c0)) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000340)=ANY=[@ANYBLOB='+#pusQt '], 0x8) 1m4.250295068s ago: executing program 7 (id=1934): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) close(0x3) 1m3.879676268s ago: executing program 9 (id=1936): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000012c0)={{}, 0x0, &(0x7f0000001280)='%-010d \x00'}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000440)={0x1, 0xf4240}) close_range(r3, 0xffffffffffffffff, 0x400000000000000) 1m3.486299208s ago: executing program 1 (id=1941): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000000c0)={{0xaa7, 0x2000, 0x1, 0xfffe}, 'syz1\x00', 0x4}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r4, 0x0, 0x0, 0x6, 0xfffffffd) write$input_event(r1, &(0x7f0000000180)={{}, 0x12, 0xb8cb, 0xfffffe07}, 0x18) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendto$inet(r5, &(0x7f0000000700)="09268a60fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88ff4f90b1a7511bf746bec66ba1fe92e8615fc3f7af9c3310b39cc2dc3616dcdfaebc65ca325fd99357ed9d11b266a7c88722db6e38df1089394f438cb9fbc08e62754c233cced4a4d4d05a3e5029a01298d3ee87d8a0803a2d26906f42f5b5aaf47d2752a8b23954f309cae13ef250cf76775ddfd153eef2b1a8458a3cb6dc764f19b41c8c61c7305a51a4bfa0c897c7c1f438a851222a5560c0e77b0b5934296bc6f28af87d651f7348a2ba2ca67f930cc655afe0220cbeb79a2a87bba6be2de3e756e674c405bcc51843b4cc75ff7ec38a34d1a2a61f0a1223e69484b5d922b5590758c33317df18c401ff910f9b3f0eaef8b9d928392097a025b0459", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93) 1m3.281748223s ago: executing program 2 (id=1942): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100)=0x100, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000140)=0x100, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10) r2 = accept$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000200), 0x4) setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000300)=@gcm_128={{0x303}}, 0x28) sendto$inet(r1, &(0x7f0000001000)='\x00', 0x4000, 0x40, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000005000), 0x100, 0x40, 0x0, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) 1m3.259853294s ago: executing program 7 (id=1943): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x0, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}}}, 0x0) 1m3.119181397s ago: executing program 7 (id=1944): mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=f', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB]) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) prctl$PR_SET_DUMPABLE(0x4, 0x0) getpid() r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000010c0)={0xa, 0x8, 0x1, @dev={0xfe, 0x80, '\x00', 0x10}, 0x7}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000040)=ANY=[], 0x6) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000008, &(0x7f0000000000), 0x2, 0x541, &(0x7f0000000600)="$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") bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x50) read$FUSE(0xffffffffffffffff, &(0x7f0000005900)={0x2020}, 0x2020) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000000c0)=ANY=[], 0x8) write$binfmt_misc(r0, &(0x7f0000000040), 0xfe46) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) 1m3.098364197s ago: executing program 2 (id=1945): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000300)=@newpolicy={0x0, 0x0, 0x5, 0x0, 0x0, {{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}}, 0x48}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000800)='\x00', 0x1, 0x0, &(0x7f0000000900)={0x2, 0x1234, @loopback}, 0x10) 1m3.050178839s ago: executing program 2 (id=1946): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84042, 0x1fa) write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) read$char_usb(r4, &(0x7f0000000340)=""/170, 0xaa) 1m2.766496726s ago: executing program 9 (id=1947): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1002}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f0000000600)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000700)={&(0x7f0000000480), 0xc, &(0x7f0000000800)={&(0x7f0000000900)=@newtfilter={0x90, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0xfff1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x64}]}}}]}]}}]}, 0x90}}, 0x0) write(r0, &(0x7f0000000a00)="00112233445506778899aabb8847000640ff4500001400000000400100000101010102020202", 0x26) 1m2.322092117s ago: executing program 9 (id=1948): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000010)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000b0)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000d0)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000e0)) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r0, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) 1m2.272079889s ago: executing program 8 (id=1949): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syz_tun\x00', 0x2}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syz_tun\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="000000000000000000000000600d0002032f"], 0x12) write$tun(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="000000000000000000000000600d000203ff"], 0x12) 1m2.082992394s ago: executing program 1 (id=1950): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x24, r1, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x1, 0x1000001}}}, 0x18}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a5f74756e00000000000000"], 0x38}}, 0x0) syz_emit_ethernet(0x50, &(0x7f0000000300)={@random="ffffffffffff", @random="aabbccddeeff", @void, {@generic={0x88ca, "5b5000280000000000000000010000010000126700000000000000000000000011223344112233445566000000000000"}}}, 0x0) 1m2.082707943s ago: executing program 8 (id=1951): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x482, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) getrlimit(0x6, &(0x7f00000001c0)) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000340)=ANY=[@ANYBLOB='+#pusQt '], 0x8) 1m2.063970914s ago: executing program 9 (id=1952): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'ip6_vti0\x00'}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {@in6=@remote, 0x1234, 0x6c}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x40, @remote, @local, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x20, 0x6c, 0x40, @local, @remote, [], "0000123400000000"}}}}}}}, 0x0) 1m2.056960744s ago: executing program 2 (id=1953): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) epoll_create(0x2) read$FUSE(r0, &(0x7f0000000500)={0x2020}, 0x2020) 1m2.023224964s ago: executing program 8 (id=1954): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x92}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) close(0x3) 1m1.966211096s ago: executing program 1 (id=1955): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x2c, 0x1f, 0x1, 0x0, 0x0, {0x1, 0x1}, [@generic="180001801400248004000100"]}, 0x2c}}, 0x0) 1m1.965601886s ago: executing program 9 (id=1956): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) keyctl$join(0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000009b80)={0x40000012}) read$FUSE(r4, &(0x7f0000000500)={0x2020}, 0x2020) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000000)={0x2004, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c81968a19c5f20e62120d02200100000000", @ANYRES32=0x0, @ANYBLOB="312400000000000014002b8030001b0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r6, 0x89b0, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000040)=@ethtool_eee={0x0, 0x1, 0xb, 0x2, 0x8, 0x2, 0x65, 0x2, [0x3, 0xc]}}) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0x2, &(0x7f0000000040)={0x9, 0xffffffffffffffff}, 0x0) mremap(&(0x7f00008cf000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f00008cf000/0x4000)=nil) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r7) sendmsg$IEEE802154_START_REQ(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000bf56434d9700000d5a1db33dbe54fc48af", @ANYRES16=r8, @ANYBLOB="010000000000000000000d0000000500070012000000050017000000000006000a00ff324e000600080000000000"], 0x34}, 0x1, 0x0, 0x0, 0x18000}, 0x0) 1m1.678307703s ago: executing program 1 (id=1957): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000012c0)={{}, 0x0, &(0x7f0000001280)='%-010d \x00'}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000440)={0x1, 0xf4240}) close_range(r3, 0xffffffffffffffff, 0x400000000000000) 1m1.291945554s ago: executing program 2 (id=1958): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/ignore-gfp-wait\x00', 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/failslab/probability\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)='0\x00', 0x2) write(r3, &(0x7f0000000280)='100\x00', 0x4) write(r4, &(0x7f00000001c0)='100\x00', 0x4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}}) 1m1.196425236s ago: executing program 2 (id=1959): syz_usb_connect(0x0, 0x6b, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002a80)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 1m1.125533658s ago: executing program 8 (id=1960): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000000), 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x0, 0x18, 0x5, 0x1, 0x0, {0x1}, [@typed={0x0, 0x1, 0x0, 0x0, @str='ovs-dp0\x00'}, @typed={0x0, 0x2, 0x0, 0x0, @u32}]}}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000000), 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x0, 0x19, 0x5, 0x1, 0x0, {0x1}, [@typed={0x0, 0x1, 0x0, 0x0, @str='ovs-dp0\x00'}, @typed={0x0, 0x2, 0x0, 0x0, @u32}]}}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000000), 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x0, 0x1a, 0x5, 0x1, 0x0, {0x1}, [@typed={0x0, 0x1, 0x0, 0x0, @str='ovs-dp0\x00'}, @typed={0x0, 0x2, 0x0, 0x0, @u32}]}}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000000), 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x0, 0x1b, 0x5, 0x2, 0x0, {0x1}, [@typed={0x0, 0x1, 0x0, 0x0, @binary="000102030405060708090a0b0800"}, @typed={0x0, 0x2, 0x0, 0x0, @binary="0800010000000000"}, @typed={0x0, 0x3, 0x0, 0x0, @binary="1c0011001800010000003f010000000100"/28}]}}}, 0x0) 1m1.066950639s ago: executing program 9 (id=1961): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, &(0x7f0000000400)='\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/failslab/task-filter\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='N\x00', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/failslab/probability\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='100\x00', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/failslab/times\x00', 0x1, 0x0) write(r2, &(0x7f0000000100)='10\x00', 0x2) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x605, 0x1, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3e8}}}}]}, 0x134}}, 0x0) 16.798572474s ago: executing program 37 (id=1961): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, &(0x7f0000000400)='\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/failslab/task-filter\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='N\x00', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/failslab/probability\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='100\x00', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/failslab/times\x00', 0x1, 0x0) write(r2, &(0x7f0000000100)='10\x00', 0x2) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x605, 0x1, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3e8}}}}]}, 0x134}}, 0x0) 16.778597474s ago: executing program 38 (id=1957): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000012c0)={{}, 0x0, &(0x7f0000001280)='%-010d \x00'}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000440)={0x1, 0xf4240}) close_range(r3, 0xffffffffffffffff, 0x400000000000000) 16.731204246s ago: executing program 39 (id=1959): syz_usb_connect(0x0, 0x6b, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002a80)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 16.709819586s ago: executing program 40 (id=1960): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000000), 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x0, 0x18, 0x5, 0x1, 0x0, {0x1}, [@typed={0x0, 0x1, 0x0, 0x0, @str='ovs-dp0\x00'}, @typed={0x0, 0x2, 0x0, 0x0, @u32}]}}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000000), 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x0, 0x19, 0x5, 0x1, 0x0, {0x1}, [@typed={0x0, 0x1, 0x0, 0x0, @str='ovs-dp0\x00'}, @typed={0x0, 0x2, 0x0, 0x0, @u32}]}}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000000), 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x0, 0x1a, 0x5, 0x1, 0x0, {0x1}, [@typed={0x0, 0x1, 0x0, 0x0, @str='ovs-dp0\x00'}, @typed={0x0, 0x2, 0x0, 0x0, @u32}]}}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000000), 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x0, 0x1b, 0x5, 0x2, 0x0, {0x1}, [@typed={0x0, 0x1, 0x0, 0x0, @binary="000102030405060708090a0b0800"}, @typed={0x0, 0x2, 0x0, 0x0, @binary="0800010000000000"}, @typed={0x0, 0x3, 0x0, 0x0, @binary="1c0011001800010000003f010000000100"/28}]}}}, 0x0) 16.697034527s ago: executing program 41 (id=1944): mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=f', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB]) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) prctl$PR_SET_DUMPABLE(0x4, 0x0) getpid() r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000010c0)={0xa, 0x8, 0x1, @dev={0xfe, 0x80, '\x00', 0x10}, 0x7}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000040)=ANY=[], 0x6) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000008, &(0x7f0000000000), 0x2, 0x541, &(0x7f0000000600)="$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") bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x50) read$FUSE(0xffffffffffffffff, &(0x7f0000005900)={0x2020}, 0x2020) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000000c0)=ANY=[], 0x8) write$binfmt_misc(r0, &(0x7f0000000040), 0xfe46) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) 2.715902731s ago: executing program 3 (id=2076): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000010), 0xc, &(0x7f0000000210)={&(0x7f0000000220)=@newqdisc={0x0, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff}}, [@qdisc_kind_options=@q_ingress={0x0, 0x0}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={&(0x7f0000000010), 0xc, &(0x7f0000000310)={&(0x7f0000000320)=@newtfilter={0x0, 0x44, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff}, {0x1, 0x300}}, [@filter_kind_options=@f_matchall={{0x0, 0x0}, {0x0, 0x0, [@TCA_MATCHALL_ACT={0x0, 0x0, [@m_mpls={0x0, 0x0, 0x0, 0x0, {{0x0, 0x0}, {0x0, 0x0, 0x0, 0x1, [@TCA_MPLS_PARMS={0x0, 0x0, {{}, 0x3}}, @TCA_MPLS_LABEL={0x0, 0x0, 0x64}]}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}}}]}]}}]}, 0x90}}, 0x0) write$tun(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffff0011223344558847000641404500001400000000400100000a0000010a000002"], 0x26) 2.658838803s ago: executing program 3 (id=2081): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x482, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) getrlimit(0x6, &(0x7f00000001c0)) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000340)=ANY=[@ANYBLOB='+#pusQt '], 0x8) 1.802970875s ago: executing program 0 (id=2099): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x2000, 0x0) epoll_create(0x2) read$FUSE(r0, &(0x7f0000000500)={0x2020}, 0x2020) 1.752261086s ago: executing program 3 (id=2100): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x92}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) close(0x3) 1.59719128s ago: executing program 3 (id=2103): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x2c, 0x41, 0x1, 0x0, 0x0, {0x1, 0x1}, [@generic="0000000004000200100001000c0024800400010000000000"]}, 0x2c}}, 0x0) 1.524994342s ago: executing program 3 (id=2104): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1ff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a85, @loopback}, 0x10) listen(r0, 0x5) mount(&(0x7f0000000400)=@filename='127.0.0.1:6789:/\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ceph\x00', 0x0, &(0x7f0000000700)='ms_mode=legacy\x00') (async) r1 = accept$inet(r0, 0x0, 0x0) write(r1, &(0x7f0000000100)='ceph v027\x00'/343, 0x119) write(r1, &(0x7f0000000200)="01ffffffffffffffff010000000100000000000000000000000701000000000000000000000000000000040000000000040000000000000001000000000001000000000000000000000000006505b22100000000", 0x54) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 1.463154944s ago: executing program 4 (id=2107): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syz_tun\x00', 0x1001}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) 1.450325474s ago: executing program 4 (id=2108): r0 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'netdevsim0\x00', 0x1}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r1) sendmsg$DEVLINK_CMD_TRAP_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x58, r2, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x58}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000500), r3) sendmsg$NET_DM_CMD_START(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x0, r4, 0x5}}}, 0x0) nanosleep(&(0x7f0000000800)={0x0, 0x1dcd6500}, 0x0) 1.379278276s ago: executing program 5 (id=2110): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x482, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) getrlimit(0x6, &(0x7f00000001c0)) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000340)=ANY=[@ANYBLOB='+#pusQt '], 0x8) 1.379105316s ago: executing program 0 (id=2111): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}, @TCA_RATE={0x6, 0x5, {0xfe, 0x1}}]}, 0x50}}, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 1.035914264s ago: executing program 6 (id=2113): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/net/netfilter/nf_conntrack_helper\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='1\n', 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=@nat={'nat\x00', 0x1b, 0x5, 0x338, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x5, 0x0, {[{{@ip={@loopback, @loopback}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @loopback, @loopback}}}}, {{@ip={@loopback, @loopback}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @loopback, @loopback}}}}, {{@ip={@loopback, @loopback}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @loopback, @loopback}}}}, {{@ip={@loopback, @loopback}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @loopback, @loopback}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x180) bind$inet(r1, &(0x7f0000000400)={0x2, 0x6b8, @loopback}, 0x10) listen(r1, 0x5) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000500)={0x2, 0x6b8, @loopback}, 0x10) r3 = accept(r1, 0x0, 0x0) write(r2, &(0x7f0000000600)="0300004008020001057e003005000800010000010000800000007f0000011388", 0x20) write(r3, &(0x7f0000000700)="0300004008020001057e003005000800010000010000800000007f0000011388", 0x20) write(r2, &(0x7f0000000800)="0300004008020001057e003005000800010000010000800000007f0000011388", 0x20) 992.028466ms ago: executing program 6 (id=2114): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x92}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) close(0x3) 991.182595ms ago: executing program 6 (id=2115): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x1}, {}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0xfffffc00}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xfffffffa, 0x2, 0x10000000, 0x8, 0x3}}]}, {0x4, 0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x810}, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='syzkaller0\x00', 0xb) sendto$inet(r4, &(0x7f0000000800)="12345678", 0x8, 0x0, &(0x7f0000000900)={0x2, 0x4e20, @loopback}, 0x10) 895.247998ms ago: executing program 6 (id=2116): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=0x0, @ANYBLOB=',dmask=00000000000000000000152,iocharset=iso8859-1,gid=', @ANYRESHEX=0x0, @ANYRES32], 0x1, 0x14fc, &(0x7f0000002a80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84042, 0x1fa) write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) read$char_usb(r4, &(0x7f0000000340)=""/170, 0xaa) 895.034958ms ago: executing program 4 (id=2117): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='0 1 1\x00', 0x6) sendmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000700)="400000001000010000000000000000006a0100000f0001006e657464657673696d000000100002006e657464657673696d3000000a00950064756d6d790000", 0x40}], 0x1}, 0x0) 875.855478ms ago: executing program 4 (id=2118): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1ff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a85, @loopback}, 0x10) listen(r0, 0x5) mount(&(0x7f0000000400)=@filename='127.0.0.1:6789:/\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='ceph\x00', 0x0, &(0x7f0000000700)='ms_mode=legacy\x00') (async) r1 = accept$inet(r0, 0x0, 0x0) write(r1, &(0x7f0000000440)='ceph v027\x00'/397, 0x119) write(r1, &(0x7f0000000600)="01ffffffffffffffff01000000010000000000000000000000070100000000000000000000000000000400000000000400000000000000010000000000000000000000000000000000000000006505b22100000000", 0x54) nanosleep(&(0x7f0000000300)={0x2}, 0x0) 710.311173ms ago: executing program 3 (id=2119): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newtfilter={0x34, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) nanosleep(&(0x7f0000000900)={0x2}, 0x0) 527.228567ms ago: executing program 5 (id=2120): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv', 0x2) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000300)=0x1, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100), 0x4) sendto$inet(r0, &(0x7f0000000400)='\x00'/12, 0x18, 0x0, 0x0, 0x0) 526.977638ms ago: executing program 5 (id=2121): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x9, 0x3, 0x5f0, 0x0, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x520, 0xffffffff, 0xffffffff, 0x520, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0x0, 0x0, 0xffffff00], 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x230, 0x258, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x6, 0x5b, 0x21, 0x1a1, 0x101}}, @common=@inet=@hashlimit2={{0x150}, {'bridge0\x00', {0x3, 0x4, 0x60, 0x400, 0x1, 0xf6, 0x7fffffff, 0x20, 0x80}}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x5, 0x6}}}, {{@uncond, 0x0, 0x258, 0x2c8, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_batadv\x00', {0x0, 0x0, 0x5, 0x0, 0x3, 0x7, 0x83ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg0\x00', {0x3, 0xd, 0x41, 0x1, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x800, 0x2, 0x5, 0x1, 0x0, "ea1ee5d1c9601b30deb958a92fe3434d35835e19b49a3ba41abc1c94d6a2fafc10325c60f0f8e407c0ad2bf4a9bcbc2a6c01a85913d84289f09effeb1b724612"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x650) 526.774198ms ago: executing program 5 (id=2122): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x2000, 0x0) epoll_create(0x2) read$FUSE(r0, &(0x7f0000000500)={0x2020}, 0x2020) 521.086187ms ago: executing program 0 (id=2123): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x605, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000600)={&(0x7f0000000080), 0xc, &(0x7f0000000700)={&(0x7f0000000800)=@setlink={0x3c, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x1}]}}}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000a00)={&(0x7f0000000080), 0xc, &(0x7f0000000700)={&(0x7f0000000c00)=@setlink={0x28, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r1}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000001000)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@bridge_newvlan={0x30, 0x70, 0x605, 0x1, 0x0, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x1}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}]}, 0x30}}, 0x0) 471.624119ms ago: executing program 0 (id=2124): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@setlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_CARRIER={0x5}]}, 0x3c}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) bind$packet(r1, &(0x7f0000000280)={0x11, 0x3}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x3e8}]}}]}, 0x38}}, 0x0) sendto$packet(r1, &(0x7f0000000200)="00112233445566778899aabb08004500001c000000004011000001010101010101020001000100080000", 0x2a, 0x0, &(0x7f0000000380), 0x14) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x38}}, 0x0) 415.35208ms ago: executing program 0 (id=2125): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)={0x68, 0x30, 0x1, 0x0, 0x0, "", [@generic="600000003000000000000000000000000000000054000100500001000800010067617465380002801800010000000000000000000000000000000000000000001c0003801800018008000200000000000800030064000000"]}, 0x68}], 0x1}, 0x0) sendmsg$netlink(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)={0x68, 0x30, 0x1, 0x0, 0x0, "", [@generic="600000003000000000000000000000000000000054000100500001000800010067617465380002801800010000000000000000000000000000000000000000001c0003801800018008000200000000000800030064000000"]}, 0x68}], 0x1}, 0x0) 415.18548ms ago: executing program 0 (id=2126): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x92}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) close(0x3) 379.159421ms ago: executing program 5 (id=2127): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000800)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtfilter={0x2c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x1}, {0x3, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8}]}}, @TCA_RATE={0x6, 0x0}, @TCA_CHAIN={0x8, 0x0}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtfilter={0x2c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x1}, {0x3, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8}]}}, @TCA_RATE={0x6, 0x0}, @TCA_CHAIN={0x8, 0x0}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}]}, 0x40}}, 0x0) 345.840082ms ago: executing program 5 (id=2128): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a85, @loopback}, 0x10) listen(r0, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='127.0.0.1:6789:/\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='ceph\x00', 0x0, &(0x7f0000000400)='ms_mode=legacy\x00') (async) r1 = accept$inet(r0, 0x0, 0x0) write(r1, &(0x7f0000000500)='ceph v027\x00'/322, 0x100) write(r1, &(0x7f0000000600)="01ffffffffffffffff0000000000000000000000000000000001000000", 0x1d) write(r1, &(0x7f0000000700)="01010000000000000000000000000000000000000000000000000000001000000000000100000000000000000000008064a51e", 0x31) nanosleep(&(0x7f0000000800)={0x0, 0x1dcd6500}, 0x0) 71.331759ms ago: executing program 6 (id=2129): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0xffff0000, 0xffffffff, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_clsact={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0xffff0000}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x1, {{0x1, 0x80000001, 0x3, 0x6, 0x3fe}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x2, 0x64}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x4, 0x3}]}, {}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x20044004) write(r0, &(0x7f0000000800)="00112233445566778899aabb8100000108004500001c0000000040113cce01010101010101020001000200080000", 0x2e) 352.851µs ago: executing program 6 (id=2130): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x482, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) getrlimit(0x6, &(0x7f00000001c0)) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000340)=ANY=[@ANYBLOB='+#pusQt '], 0x8) 205.351µs ago: executing program 4 (id=2131): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0), 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000100), 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0), 0x50) 0s ago: executing program 4 (id=2132): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, &(0x7f0000000400)='\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/failslab/task-filter\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/failslab/times\x00', 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/failslab/probability\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='N\x00', 0x1) write(r1, &(0x7f0000000100)='10\x00', 0x2) write(r2, &(0x7f0000000100)='100\x00', 0x3) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x605, 0x1, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3e8}}}}]}, 0x134}}, 0x0) kernel console output (not intermixed with test programs): 75 de e8 23 ff ff ff [ 329.568814][ C1] RSP: 002b:00007ffdea926de0 EFLAGS: 00000202 ORIG_RAX: 000000000000003d [ 329.577250][ C1] RAX: ffffffffffffffda RBX: 0000555591bbe500 RCX: 00007f307e559197 [ 329.585244][ C1] RDX: 0000000040000001 RSI: 00007ffdea926e6c RDI: ffffffffffffffff [ 329.593245][ C1] RBP: 00007ffdea926e6c R08: 0000000000000000 R09: 0000000000000000 [ 329.601250][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 329.609328][ C1] R13: 00000000000927c0 R14: 0000000000046acf R15: 00007ffdea926ec0 [ 329.617351][ C1] [ 329.620389][ C0] CPU: 0 PID: 5940 Comm: syz.8.1960 Not tainted syzkaller #0 [ 329.620457][ C1] FAULT_INJECTION: forcing a failure. [ 329.620457][ C1] name failslab, interval 1, probability 100, space 0, times 8 [ 329.627796][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 329.650616][ C0] Call Trace: [ 329.653916][ C0] [ 329.656780][ C0] __dump_stack+0x21/0x24 [ 329.661226][ C0] dump_stack_lvl+0x110/0x170 [ 329.665942][ C0] ? __cfi_dump_stack_lvl+0x8/0x8 [ 329.670994][ C0] dump_stack+0x15/0x24 [ 329.675186][ C0] should_fail_ex+0x3bf/0x510 [ 329.679889][ C0] __should_failslab+0xac/0xf0 [ 329.684682][ C0] should_failslab+0x9/0x20 [ 329.689205][ C0] kmem_cache_alloc_node+0x42/0x330 [ 329.694437][ C0] ? __alloc_skb+0xe8/0x4a0 [ 329.698990][ C0] __alloc_skb+0xe8/0x4a0 [ 329.703340][ C0] ndisc_send_rs+0x31d/0x870 [ 329.707952][ C0] ? ipv6_get_lladdr+0x1be/0x200 [ 329.712948][ C0] addrconf_rs_timer+0x35a/0x600 [ 329.717916][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 329.723410][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 329.728898][ C0] call_timer_fn+0x46/0x2a0 [ 329.733426][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 329.738914][ C0] __run_timers+0x646/0x9b0 [ 329.743472][ C0] ? calc_index+0x200/0x200 [ 329.748009][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 329.753249][ C0] run_timer_softirq+0x6a/0xf0 [ 329.758065][ C0] handle_softirqs+0x1d7/0x600 [ 329.762855][ C0] __irq_exit_rcu+0x52/0xf0 [ 329.767398][ C0] irq_exit_rcu+0x9/0x10 [ 329.771667][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 329.777332][ C0] [ 329.780281][ C0] [ 329.783228][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 329.789251][ C0] RIP: 0010:_raw_write_unlock_irq+0x27/0x60 [ 329.795190][ C0] Code: 2c 51 2b 55 48 89 e5 53 48 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 75 23 c6 07 00 fb bf 01 00 00 00 04 8a 4b fc 65 8b 05 55 61 01 7b 85 c0 74 03 5b 5d c3 e8 25 70 [ 329.814847][ C0] RSP: 0018:ffffc90006c178f8 EFLAGS: 00000246 [ 329.820941][ C0] RAX: 0000000000000000 RBX: ffff8881423fe540 RCX: dffffc0000000000 [ 329.828933][ C0] RDX: 0000000000000001 RSI: 0000000000000806 RDI: 0000000000000001 [ 329.836953][ C0] RBP: ffffc90006c17900 R08: ffff888111f28000 R09: ffffc90006c176e0 [ 329.844949][ C0] R10: dffffc0000000000 R11: fffff52000d82ec0 R12: 0000000000000020 [ 329.852945][ C0] R13: 1ffff110223e50b0 R14: ffff888111f28000 R15: ffff888111f28584 [ 329.860951][ C0] release_task+0x113f/0x1200 [ 329.865679][ C0] do_exit+0x1a1d/0x2850 [ 329.869966][ C0] ? __schedule+0xbea/0x14b0 [ 329.874616][ C0] ? __cfi_do_exit+0x10/0x10 [ 329.879258][ C0] ? plist_check_list+0x255/0x270 [ 329.884319][ C0] ? _raw_spin_lock+0x94/0xf0 [ 329.889023][ C0] ? __kasan_check_write+0x14/0x20 [ 329.894167][ C0] ? _raw_spin_lock_irq+0x95/0xf0 [ 329.899245][ C0] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 329.904824][ C0] do_group_exit+0x21b/0x2e0 [ 329.909446][ C0] ? __kasan_check_write+0x14/0x20 [ 329.914586][ C0] ? recalc_sigpending+0x168/0x1c0 [ 329.919743][ C0] get_signal+0x167c/0x1700 [ 329.924372][ C0] ? __cfi_get_signal+0x10/0x10 [ 329.929251][ C0] arch_do_signal_or_restart+0xd1/0x11c0 [ 329.934929][ C0] ? do_futex+0x2e2/0x430 [ 329.939284][ C0] ? __cfi_do_futex+0x10/0x10 [ 329.943978][ C0] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 329.950157][ C0] ? __se_sys_futex+0x136/0x310 [ 329.955037][ C0] exit_to_user_mode_loop+0x7a/0xb0 [ 329.960258][ C0] exit_to_user_mode_prepare+0x87/0xd0 [ 329.965759][ C0] syscall_exit_to_user_mode+0x1a/0x30 [ 329.971237][ C0] do_syscall_64+0x58/0xa0 [ 329.975705][ C0] ? clear_bhb_loop+0x30/0x80 [ 329.980401][ C0] ? clear_bhb_loop+0x30/0x80 [ 329.985091][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 329.991009][ C0] RIP: 0033:0x7f46dad9e019 [ 329.995531][ C0] Code: Unable to access opcode bytes at 0x7f46dad9dfef. [ 330.002559][ C0] RSP: 002b:00007f46dbb850e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 330.010989][ C0] RAX: fffffffffffffe00 RBX: 00007f46db025fa8 RCX: 00007f46dad9e019 [ 330.018987][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f46db025fa8 [ 330.026977][ C0] RBP: 00007f46db025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 330.034968][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 330.043226][ C0] R13: 00007f46db026038 R14: 00007ffc37bcc6e0 R15: 00007ffc37bcc7c8 [ 330.051238][ C0] [ 330.054312][ C1] CPU: 1 PID: 289 Comm: syz-executor Not tainted syzkaller #0 [ 330.054345][ C0] FAULT_INJECTION: forcing a failure. [ 330.054345][ C0] name failslab, interval 1, probability 100, space 0, times 7 [ 330.061811][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 330.061825][ C1] Call Trace: [ 330.061833][ C1] [ 330.061841][ C1] __dump_stack+0x21/0x24 [ 330.095181][ C1] dump_stack_lvl+0x110/0x170 [ 330.099892][ C1] ? __cfi_dump_stack_lvl+0x8/0x8 [ 330.104974][ C1] ? calc_wheel_index+0x230/0x8d0 [ 330.110021][ C1] ? timer_update_keys+0xb0/0xb0 [ 330.114989][ C1] dump_stack+0x15/0x24 [ 330.119199][ C1] should_fail_ex+0x3bf/0x510 [ 330.123933][ C1] __should_failslab+0xac/0xf0 [ 330.128775][ C1] should_failslab+0x9/0x20 [ 330.133311][ C1] kmem_cache_alloc_node+0x42/0x330 [ 330.138541][ C1] ? __alloc_skb+0xe8/0x4a0 [ 330.143087][ C1] __alloc_skb+0xe8/0x4a0 [ 330.147435][ C1] ndisc_send_rs+0x31d/0x870 [ 330.152048][ C1] ? ipv6_get_lladdr+0x1be/0x200 [ 330.157022][ C1] addrconf_rs_timer+0x35a/0x600 [ 330.161982][ C1] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 330.167467][ C1] ? _raw_spin_lock_irq+0x95/0xf0 [ 330.172514][ C1] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 330.178175][ C1] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 330.183666][ C1] call_timer_fn+0x46/0x2a0 [ 330.188200][ C1] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 330.193683][ C1] __run_timers+0x646/0x9b0 [ 330.198215][ C1] ? calc_index+0x200/0x200 [ 330.202749][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 330.207977][ C1] run_timer_softirq+0x6a/0xf0 [ 330.212764][ C1] handle_softirqs+0x1d7/0x600 [ 330.217553][ C1] __irq_exit_rcu+0x52/0xf0 [ 330.222073][ C1] irq_exit_rcu+0x9/0x10 [ 330.226332][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 330.231998][ C1] [ 330.234949][ C1] [ 330.237901][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 330.243913][ C1] RIP: 0010:queued_read_lock_slowpath+0x112/0x350 [ 330.250357][ C1] Code: 00 00 49 89 df 49 c1 ef 03 43 0f b6 04 27 84 c0 74 35 89 d9 80 e1 07 80 c1 03 38 c1 7c 29 48 89 df e8 62 c9 b5 fc eb 1f f3 90 <43> 0f b6 04 27 84 c0 74 14 89 d9 80 e1 07 80 c1 03 38 c1 7c 08 48 [ 330.269986][ C1] RSP: 0018:ffffc9000dadfb00 EFLAGS: 00000286 [ 330.276076][ C1] RAX: 00000000000002ff RBX: ffffffff8700a040 RCX: ffffffff85012733 [ 330.284067][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8700a040 [ 330.292056][ C1] RBP: ffffc9000dadfb90 R08: ffffffff8700a043 R09: 1ffffffff0e01408 [ 330.300049][ C1] R10: dffffc0000000000 R11: fffffbfff0e01409 R12: dffffc0000000000 [ 330.308047][ C1] R13: 1ffff92001b5bf60 R14: ffffffff8700a044 R15: 1ffffffff0e01408 [ 330.316053][ C1] ? queued_read_lock_slowpath+0xe3/0x350 [ 330.321829][ C1] ? __cfi_queued_read_lock_slowpath+0x10/0x10 [ 330.328011][ C1] _raw_read_lock+0x3a/0x40 [ 330.332536][ C1] do_wait+0x1f9/0x9c0 [ 330.336657][ C1] kernel_wait4+0x1d1/0x2b0 [ 330.341192][ C1] ? __cfi_kernel_wait4+0x10/0x10 [ 330.346253][ C1] ? __cfi_child_wait_callback+0x10/0x10 [ 330.351911][ C1] __x64_sys_wait4+0x163/0x230 [ 330.356691][ C1] ? __cfi___x64_sys_wait4+0x10/0x10 [ 330.361997][ C1] ? __kasan_check_write+0x14/0x20 [ 330.367156][ C1] ? fpregs_restore_userregs+0x128/0x260 [ 330.372831][ C1] ? switch_fpu_return+0xe/0x10 [ 330.377703][ C1] x64_sys_call+0x927/0x9a0 [ 330.382232][ C1] do_syscall_64+0x4c/0xa0 [ 330.386670][ C1] ? clear_bhb_loop+0x30/0x80 [ 330.391363][ C1] ? clear_bhb_loop+0x30/0x80 [ 330.396058][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 330.401980][ C1] RIP: 0033:0x7f307e559197 [ 330.406409][ C1] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 330.426037][ C1] RSP: 002b:00007ffdea926de0 EFLAGS: 00000202 ORIG_RAX: 000000000000003d [ 330.434476][ C1] RAX: ffffffffffffffda RBX: 0000555591bbe500 RCX: 00007f307e559197 [ 330.442464][ C1] RDX: 0000000040000001 RSI: 00007ffdea926e6c RDI: ffffffffffffffff [ 330.450454][ C1] RBP: 00007ffdea926e6c R08: 0000000000000000 R09: 0000000000000000 [ 330.458445][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 330.466436][ C1] R13: 00000000000927c0 R14: 0000000000046acf R15: 00007ffdea926ec0 [ 330.474433][ C1] [ 330.477467][ C0] CPU: 0 PID: 5940 Comm: syz.8.1960 Not tainted syzkaller #0 [ 330.477533][ C1] FAULT_INJECTION: forcing a failure. [ 330.477533][ C1] name failslab, interval 1, probability 100, space 0, times 6 [ 330.484891][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 330.484904][ C0] Call Trace: [ 330.484912][ C0] [ 330.484919][ C0] __dump_stack+0x21/0x24 [ 330.518206][ C0] dump_stack_lvl+0x110/0x170 [ 330.522907][ C0] ? __cfi_dump_stack_lvl+0x8/0x8 [ 330.527953][ C0] ? calc_wheel_index+0x230/0x8d0 [ 330.533003][ C0] ? timer_update_keys+0xb0/0xb0 [ 330.537965][ C0] dump_stack+0x15/0x24 [ 330.542144][ C0] should_fail_ex+0x3bf/0x510 [ 330.546837][ C0] __should_failslab+0xac/0xf0 [ 330.551624][ C0] should_failslab+0x9/0x20 [ 330.556145][ C0] kmem_cache_alloc_node+0x42/0x330 [ 330.561365][ C0] ? __alloc_skb+0xe8/0x4a0 [ 330.565887][ C0] __alloc_skb+0xe8/0x4a0 [ 330.570234][ C0] ndisc_send_rs+0x31d/0x870 [ 330.575878][ C0] ? ipv6_get_lladdr+0x1be/0x200 [ 330.580860][ C0] addrconf_rs_timer+0x35a/0x600 [ 330.585840][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 330.591347][ C0] ? _raw_spin_lock_irq+0x95/0xf0 [ 330.596412][ C0] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 330.601991][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 330.607484][ C0] call_timer_fn+0x46/0x2a0 [ 330.612021][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 330.617507][ C0] __run_timers+0x646/0x9b0 [ 330.622062][ C0] ? calc_index+0x200/0x200 [ 330.626597][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 330.631865][ C0] run_timer_softirq+0x6a/0xf0 [ 330.636668][ C0] handle_softirqs+0x1d7/0x600 [ 330.641465][ C0] __irq_exit_rcu+0x52/0xf0 [ 330.646002][ C0] irq_exit_rcu+0x9/0x10 [ 330.650286][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 330.655965][ C0] [ 330.658915][ C0] [ 330.661872][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 330.667883][ C0] RIP: 0010:_raw_write_unlock_irq+0x27/0x60 [ 330.673799][ C0] Code: 2c 51 2b 55 48 89 e5 53 48 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 75 23 c6 07 00 fb bf 01 00 00 00 04 8a 4b fc 65 8b 05 55 61 01 7b 85 c0 74 03 5b 5d c3 e8 25 70 [ 330.693425][ C0] RSP: 0018:ffffc90006c178f8 EFLAGS: 00000246 [ 330.699511][ C0] RAX: 0000000000000000 RBX: ffff8881423fe540 RCX: dffffc0000000000 [ 330.707516][ C0] RDX: 0000000000000001 RSI: 0000000000000806 RDI: 0000000000000001 [ 330.715598][ C0] RBP: ffffc90006c17900 R08: ffff888111f28000 R09: ffffc90006c176e0 [ 330.723594][ C0] R10: dffffc0000000000 R11: fffff52000d82ec0 R12: 0000000000000020 [ 330.731584][ C0] R13: 1ffff110223e50b0 R14: ffff888111f28000 R15: ffff888111f28584 [ 330.739582][ C0] release_task+0x113f/0x1200 [ 330.744296][ C0] do_exit+0x1a1d/0x2850 [ 330.748593][ C0] ? __schedule+0xbea/0x14b0 [ 330.753213][ C0] ? __cfi_do_exit+0x10/0x10 [ 330.757830][ C0] ? plist_check_list+0x255/0x270 [ 330.762879][ C0] ? _raw_spin_lock+0x94/0xf0 [ 330.767582][ C0] ? __kasan_check_write+0x14/0x20 [ 330.772710][ C0] ? _raw_spin_lock_irq+0x95/0xf0 [ 330.777766][ C0] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 330.783358][ C0] do_group_exit+0x21b/0x2e0 [ 330.787985][ C0] ? __kasan_check_write+0x14/0x20 [ 330.793124][ C0] ? recalc_sigpending+0x168/0x1c0 [ 330.798272][ C0] get_signal+0x167c/0x1700 [ 330.802810][ C0] ? __cfi_get_signal+0x10/0x10 [ 330.807694][ C0] arch_do_signal_or_restart+0xd1/0x11c0 [ 330.813356][ C0] ? do_futex+0x2e2/0x430 [ 330.817715][ C0] ? __cfi_do_futex+0x10/0x10 [ 330.822432][ C0] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 330.828645][ C0] ? __se_sys_futex+0x136/0x310 [ 330.833519][ C0] exit_to_user_mode_loop+0x7a/0xb0 [ 330.838741][ C0] exit_to_user_mode_prepare+0x87/0xd0 [ 330.844233][ C0] syscall_exit_to_user_mode+0x1a/0x30 [ 330.849716][ C0] do_syscall_64+0x58/0xa0 [ 330.854166][ C0] ? clear_bhb_loop+0x30/0x80 [ 330.858862][ C0] ? clear_bhb_loop+0x30/0x80 [ 330.863558][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 330.869506][ C0] RIP: 0033:0x7f46dad9e019 [ 330.873965][ C0] Code: Unable to access opcode bytes at 0x7f46dad9dfef. [ 330.881009][ C0] RSP: 002b:00007f46dbb850e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 330.889440][ C0] RAX: fffffffffffffe00 RBX: 00007f46db025fa8 RCX: 00007f46dad9e019 [ 330.897455][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f46db025fa8 [ 330.905444][ C0] RBP: 00007f46db025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 330.913435][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 330.921432][ C0] R13: 00007f46db026038 R14: 00007ffc37bcc6e0 R15: 00007ffc37bcc7c8 [ 330.929430][ C0] [ 330.932471][ C1] CPU: 1 PID: 289 Comm: syz-executor Not tainted syzkaller #0 [ 330.932566][ C0] FAULT_INJECTION: forcing a failure. [ 330.932566][ C0] name failslab, interval 1, probability 100, space 0, times 5 [ 330.939959][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 330.939974][ C1] Call Trace: [ 330.939981][ C1] [ 330.939989][ C1] __dump_stack+0x21/0x24 [ 330.973304][ C1] dump_stack_lvl+0x110/0x170 [ 330.978012][ C1] ? __cfi_dump_stack_lvl+0x8/0x8 [ 330.983080][ C1] ? calc_wheel_index+0x230/0x8d0 [ 330.988158][ C1] ? timer_update_keys+0xb0/0xb0 [ 330.993129][ C1] dump_stack+0x15/0x24 [ 330.997307][ C1] should_fail_ex+0x3bf/0x510 [ 331.002033][ C1] __should_failslab+0xac/0xf0 [ 331.006822][ C1] should_failslab+0x9/0x20 [ 331.011340][ C1] kmem_cache_alloc_node+0x42/0x330 [ 331.016564][ C1] ? __alloc_skb+0xe8/0x4a0 [ 331.021086][ C1] __alloc_skb+0xe8/0x4a0 [ 331.025440][ C1] ndisc_send_rs+0x31d/0x870 [ 331.030055][ C1] ? ipv6_get_lladdr+0x1be/0x200 [ 331.035031][ C1] addrconf_rs_timer+0x35a/0x600 [ 331.039999][ C1] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 331.045513][ C1] ? _raw_spin_lock_irq+0x95/0xf0 [ 331.050560][ C1] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 331.056136][ C1] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 331.061626][ C1] call_timer_fn+0x46/0x2a0 [ 331.066183][ C1] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 331.071671][ C1] __run_timers+0x646/0x9b0 [ 331.076231][ C1] ? calc_index+0x200/0x200 [ 331.080764][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 331.086023][ C1] run_timer_softirq+0x6a/0xf0 [ 331.090812][ C1] handle_softirqs+0x1d7/0x600 [ 331.095598][ C1] __irq_exit_rcu+0x52/0xf0 [ 331.100131][ C1] irq_exit_rcu+0x9/0x10 [ 331.104407][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 331.110410][ C1] [ 331.113405][ C1] [ 331.116372][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 331.122394][ C1] RIP: 0010:queued_read_lock_slowpath+0x112/0x350 [ 331.128848][ C1] Code: 00 00 49 89 df 49 c1 ef 03 43 0f b6 04 27 84 c0 74 35 89 d9 80 e1 07 80 c1 03 38 c1 7c 29 48 89 df e8 62 c9 b5 fc eb 1f f3 90 <43> 0f b6 04 27 84 c0 74 14 89 d9 80 e1 07 80 c1 03 38 c1 7c 08 48 [ 331.148518][ C1] RSP: 0018:ffffc9000dadfb00 EFLAGS: 00000286 [ 331.154638][ C1] RAX: 00000000000002ff RBX: ffffffff8700a040 RCX: ffffffff85012733 [ 331.162650][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8700a040 [ 331.170666][ C1] RBP: ffffc9000dadfb90 R08: ffffffff8700a043 R09: 1ffffffff0e01408 [ 331.178663][ C1] R10: dffffc0000000000 R11: fffffbfff0e01409 R12: dffffc0000000000 [ 331.186659][ C1] R13: 1ffff92001b5bf60 R14: ffffffff8700a044 R15: 1ffffffff0e01408 [ 331.194664][ C1] ? queued_read_lock_slowpath+0xe3/0x350 [ 331.200425][ C1] ? __cfi_queued_read_lock_slowpath+0x10/0x10 [ 331.206634][ C1] _raw_read_lock+0x3a/0x40 [ 331.211337][ C1] do_wait+0x1f9/0x9c0 [ 331.215447][ C1] kernel_wait4+0x1d1/0x2b0 [ 331.219985][ C1] ? __cfi_kernel_wait4+0x10/0x10 [ 331.225035][ C1] ? __cfi_child_wait_callback+0x10/0x10 [ 331.230688][ C1] __x64_sys_wait4+0x163/0x230 [ 331.235479][ C1] ? __cfi___x64_sys_wait4+0x10/0x10 [ 331.240796][ C1] ? __kasan_check_write+0x14/0x20 [ 331.246039][ C1] ? fpregs_restore_userregs+0x128/0x260 [ 331.251709][ C1] ? switch_fpu_return+0xe/0x10 [ 331.256600][ C1] x64_sys_call+0x927/0x9a0 [ 331.261133][ C1] do_syscall_64+0x4c/0xa0 [ 331.265578][ C1] ? clear_bhb_loop+0x30/0x80 [ 331.270275][ C1] ? clear_bhb_loop+0x30/0x80 [ 331.274973][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 331.280902][ C1] RIP: 0033:0x7f307e559197 [ 331.285345][ C1] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 331.304974][ C1] RSP: 002b:00007ffdea926de0 EFLAGS: 00000202 ORIG_RAX: 000000000000003d [ 331.313416][ C1] RAX: ffffffffffffffda RBX: 0000555591bbe500 RCX: 00007f307e559197 [ 331.321413][ C1] RDX: 0000000040000001 RSI: 00007ffdea926e6c RDI: ffffffffffffffff [ 331.329416][ C1] RBP: 00007ffdea926e6c R08: 0000000000000000 R09: 0000000000000000 [ 331.337407][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 331.345425][ C1] R13: 00000000000927c0 R14: 0000000000046acf R15: 00007ffdea926ec0 [ 331.353431][ C1] [ 331.356469][ C0] CPU: 0 PID: 5940 Comm: syz.8.1960 Not tainted syzkaller #0 [ 331.356544][ C1] FAULT_INJECTION: forcing a failure. [ 331.356544][ C1] name failslab, interval 1, probability 100, space 0, times 4 [ 331.363872][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 331.363886][ C0] Call Trace: [ 331.363894][ C0] [ 331.363902][ C0] __dump_stack+0x21/0x24 [ 331.397204][ C0] dump_stack_lvl+0x110/0x170 [ 331.401919][ C0] ? __cfi_dump_stack_lvl+0x8/0x8 [ 331.406974][ C0] ? calc_wheel_index+0x230/0x8d0 [ 331.412023][ C0] ? timer_update_keys+0xb0/0xb0 [ 331.416998][ C0] dump_stack+0x15/0x24 [ 331.421197][ C0] should_fail_ex+0x3bf/0x510 [ 331.425903][ C0] __should_failslab+0xac/0xf0 [ 331.430732][ C0] should_failslab+0x9/0x20 [ 331.435261][ C0] kmem_cache_alloc_node+0x42/0x330 [ 331.440486][ C0] ? __alloc_skb+0xe8/0x4a0 [ 331.445014][ C0] __alloc_skb+0xe8/0x4a0 [ 331.449374][ C0] ndisc_send_rs+0x31d/0x870 [ 331.453983][ C0] ? ipv6_get_lladdr+0x1be/0x200 [ 331.458948][ C0] addrconf_rs_timer+0x35a/0x600 [ 331.463909][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 331.469386][ C0] ? _raw_spin_lock_irq+0x95/0xf0 [ 331.474453][ C0] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 331.480022][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 331.485527][ C0] call_timer_fn+0x46/0x2a0 [ 331.490063][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 331.495546][ C0] __run_timers+0x646/0x9b0 [ 331.500088][ C0] ? calc_index+0x200/0x200 [ 331.504623][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 331.509848][ C0] run_timer_softirq+0x6a/0xf0 [ 331.514636][ C0] handle_softirqs+0x1d7/0x600 [ 331.519450][ C0] __irq_exit_rcu+0x52/0xf0 [ 331.523974][ C0] irq_exit_rcu+0x9/0x10 [ 331.528237][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 331.533898][ C0] [ 331.536849][ C0] [ 331.539800][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 331.545836][ C0] RIP: 0010:_raw_write_unlock_irq+0x27/0x60 [ 331.551757][ C0] Code: 2c 51 2b 55 48 89 e5 53 48 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 75 23 c6 07 00 fb bf 01 00 00 00 04 8a 4b fc 65 8b 05 55 61 01 7b 85 c0 74 03 5b 5d c3 e8 25 70 [ 331.571404][ C0] RSP: 0018:ffffc90006c178f8 EFLAGS: 00000246 [ 331.577490][ C0] RAX: 0000000000000000 RBX: ffff8881423fe540 RCX: dffffc0000000000 [ 331.585477][ C0] RDX: 0000000000000001 RSI: 0000000000000806 RDI: 0000000000000001 [ 331.593463][ C0] RBP: ffffc90006c17900 R08: ffff888111f28000 R09: ffffc90006c176e0 [ 331.601459][ C0] R10: dffffc0000000000 R11: fffff52000d82ec0 R12: 0000000000000020 [ 331.609455][ C0] R13: 1ffff110223e50b0 R14: ffff888111f28000 R15: ffff888111f28584 [ 331.617563][ C0] release_task+0x113f/0x1200 [ 331.622301][ C0] do_exit+0x1a1d/0x2850 [ 331.626604][ C0] ? __schedule+0xbea/0x14b0 [ 331.631221][ C0] ? __cfi_do_exit+0x10/0x10 [ 331.635835][ C0] ? plist_check_list+0x255/0x270 [ 331.640917][ C0] ? _raw_spin_lock+0x94/0xf0 [ 331.645645][ C0] ? __kasan_check_write+0x14/0x20 [ 331.650960][ C0] ? _raw_spin_lock_irq+0x95/0xf0 [ 331.656122][ C0] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 331.661706][ C0] do_group_exit+0x21b/0x2e0 [ 331.666342][ C0] ? __kasan_check_write+0x14/0x20 [ 331.671492][ C0] ? recalc_sigpending+0x168/0x1c0 [ 331.676650][ C0] get_signal+0x167c/0x1700 [ 331.681203][ C0] ? __cfi_get_signal+0x10/0x10 [ 331.686093][ C0] arch_do_signal_or_restart+0xd1/0x11c0 [ 331.691749][ C0] ? do_futex+0x2e2/0x430 [ 331.696097][ C0] ? __cfi_do_futex+0x10/0x10 [ 331.700798][ C0] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 331.706984][ C0] ? __se_sys_futex+0x136/0x310 [ 331.711856][ C0] exit_to_user_mode_loop+0x7a/0xb0 [ 331.717084][ C0] exit_to_user_mode_prepare+0x87/0xd0 [ 331.722565][ C0] syscall_exit_to_user_mode+0x1a/0x30 [ 331.728044][ C0] do_syscall_64+0x58/0xa0 [ 331.732487][ C0] ? clear_bhb_loop+0x30/0x80 [ 331.737180][ C0] ? clear_bhb_loop+0x30/0x80 [ 331.741874][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 331.747792][ C0] RIP: 0033:0x7f46dad9e019 [ 331.752227][ C0] Code: Unable to access opcode bytes at 0x7f46dad9dfef. [ 331.759255][ C0] RSP: 002b:00007f46dbb850e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 331.767681][ C0] RAX: fffffffffffffe00 RBX: 00007f46db025fa8 RCX: 00007f46dad9e019 [ 331.775696][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f46db025fa8 [ 331.783707][ C0] RBP: 00007f46db025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 331.791699][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 331.799686][ C0] R13: 00007f46db026038 R14: 00007ffc37bcc6e0 R15: 00007ffc37bcc7c8 [ 331.807677][ C0] [ 331.810706][ C1] CPU: 1 PID: 289 Comm: syz-executor Not tainted syzkaller #0 [ 331.810769][ C0] FAULT_INJECTION: forcing a failure. [ 331.810769][ C0] name failslab, interval 1, probability 100, space 0, times 3 [ 331.818194][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 331.841003][ C1] Call Trace: [ 331.844313][ C1] [ 331.847175][ C1] __dump_stack+0x21/0x24 [ 331.851524][ C1] dump_stack_lvl+0x110/0x170 [ 331.856251][ C1] ? __cfi_dump_stack_lvl+0x8/0x8 [ 331.861291][ C1] ? calc_wheel_index+0x230/0x8d0 [ 331.866341][ C1] ? timer_update_keys+0xb0/0xb0 [ 331.871300][ C1] dump_stack+0x15/0x24 [ 331.875481][ C1] should_fail_ex+0x3bf/0x510 [ 331.880175][ C1] __should_failslab+0xac/0xf0 [ 331.884963][ C1] should_failslab+0x9/0x20 [ 331.889484][ C1] kmem_cache_alloc_node+0x42/0x330 [ 331.894706][ C1] ? __alloc_skb+0xe8/0x4a0 [ 331.899234][ C1] __alloc_skb+0xe8/0x4a0 [ 331.903621][ C1] ndisc_send_rs+0x31d/0x870 [ 331.908249][ C1] ? ipv6_get_lladdr+0x1be/0x200 [ 331.913224][ C1] addrconf_rs_timer+0x35a/0x600 [ 331.918188][ C1] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 331.923688][ C1] ? _raw_spin_lock_irq+0x95/0xf0 [ 331.928735][ C1] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 331.934299][ C1] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 331.939781][ C1] call_timer_fn+0x46/0x2a0 [ 331.944307][ C1] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 331.949785][ C1] __run_timers+0x646/0x9b0 [ 331.954317][ C1] ? calc_index+0x200/0x200 [ 331.958844][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 331.964073][ C1] run_timer_softirq+0x6a/0xf0 [ 331.968874][ C1] handle_softirqs+0x1d7/0x600 [ 331.973661][ C1] __irq_exit_rcu+0x52/0xf0 [ 331.978180][ C1] irq_exit_rcu+0x9/0x10 [ 331.982437][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 331.988097][ C1] [ 331.991042][ C1] [ 331.993984][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 331.999994][ C1] RIP: 0010:queued_read_lock_slowpath+0x112/0x350 [ 332.006434][ C1] Code: 00 00 49 89 df 49 c1 ef 03 43 0f b6 04 27 84 c0 74 35 89 d9 80 e1 07 80 c1 03 38 c1 7c 29 48 89 df e8 62 c9 b5 fc eb 1f f3 90 <43> 0f b6 04 27 84 c0 74 14 89 d9 80 e1 07 80 c1 03 38 c1 7c 08 48 [ 332.026057][ C1] RSP: 0018:ffffc9000dadfb00 EFLAGS: 00000286 [ 332.032150][ C1] RAX: 00000000000002ff RBX: ffffffff8700a040 RCX: ffffffff85012733 [ 332.040142][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8700a040 [ 332.048136][ C1] RBP: ffffc9000dadfb90 R08: ffffffff8700a043 R09: 1ffffffff0e01408 [ 332.056122][ C1] R10: dffffc0000000000 R11: fffffbfff0e01409 R12: dffffc0000000000 [ 332.064114][ C1] R13: 1ffff92001b5bf60 R14: ffffffff8700a044 R15: 1ffffffff0e01408 [ 332.072104][ C1] ? queued_read_lock_slowpath+0xe3/0x350 [ 332.077860][ C1] ? __cfi_queued_read_lock_slowpath+0x10/0x10 [ 332.084039][ C1] _raw_read_lock+0x3a/0x40 [ 332.088576][ C1] do_wait+0x1f9/0x9c0 [ 332.092679][ C1] kernel_wait4+0x1d1/0x2b0 [ 332.097209][ C1] ? __cfi_kernel_wait4+0x10/0x10 [ 332.102262][ C1] ? __cfi_child_wait_callback+0x10/0x10 [ 332.107918][ C1] __x64_sys_wait4+0x163/0x230 [ 332.112699][ C1] ? __cfi___x64_sys_wait4+0x10/0x10 [ 332.118008][ C1] ? __kasan_check_write+0x14/0x20 [ 332.123143][ C1] ? fpregs_restore_userregs+0x128/0x260 [ 332.128806][ C1] ? switch_fpu_return+0xe/0x10 [ 332.133682][ C1] x64_sys_call+0x927/0x9a0 [ 332.138212][ C1] do_syscall_64+0x4c/0xa0 [ 332.142652][ C1] ? clear_bhb_loop+0x30/0x80 [ 332.147346][ C1] ? clear_bhb_loop+0x30/0x80 [ 332.152039][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 332.157961][ C1] RIP: 0033:0x7f307e559197 [ 332.162412][ C1] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 332.182059][ C1] RSP: 002b:00007ffdea926de0 EFLAGS: 00000202 ORIG_RAX: 000000000000003d [ 332.190496][ C1] RAX: ffffffffffffffda RBX: 0000555591bbe500 RCX: 00007f307e559197 [ 332.198485][ C1] RDX: 0000000040000001 RSI: 00007ffdea926e6c RDI: ffffffffffffffff [ 332.206509][ C1] RBP: 00007ffdea926e6c R08: 0000000000000000 R09: 0000000000000000 [ 332.214497][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 332.222512][ C1] R13: 00000000000927c0 R14: 0000000000046acf R15: 00007ffdea926ec0 [ 332.230522][ C1] [ 332.233565][ C0] CPU: 0 PID: 5940 Comm: syz.8.1960 Not tainted syzkaller #0 [ 332.233649][ C1] FAULT_INJECTION: forcing a failure. [ 332.233649][ C1] name failslab, interval 1, probability 100, space 0, times 2 [ 332.240968][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 332.240983][ C0] Call Trace: [ 332.240991][ C0] [ 332.269952][ C0] __dump_stack+0x21/0x24 [ 332.274307][ C0] dump_stack_lvl+0x110/0x170 [ 332.279004][ C0] ? __cfi_dump_stack_lvl+0x8/0x8 [ 332.284075][ C0] ? calc_wheel_index+0x230/0x8d0 [ 332.289130][ C0] ? timer_update_keys+0xb0/0xb0 [ 332.294094][ C0] dump_stack+0x15/0x24 [ 332.298273][ C0] should_fail_ex+0x3bf/0x510 [ 332.303000][ C0] __should_failslab+0xac/0xf0 [ 332.307819][ C0] should_failslab+0x9/0x20 [ 332.312342][ C0] kmem_cache_alloc_node+0x42/0x330 [ 332.317570][ C0] ? __alloc_skb+0xe8/0x4a0 [ 332.322095][ C0] __alloc_skb+0xe8/0x4a0 [ 332.326445][ C0] ndisc_send_rs+0x31d/0x870 [ 332.331054][ C0] ? ipv6_get_lladdr+0x1be/0x200 [ 332.336018][ C0] addrconf_rs_timer+0x35a/0x600 [ 332.340981][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 332.346477][ C0] ? _raw_spin_lock_irq+0x95/0xf0 [ 332.351523][ C0] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 332.357114][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 332.362597][ C0] call_timer_fn+0x46/0x2a0 [ 332.367130][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 332.372609][ C0] __run_timers+0x646/0x9b0 [ 332.377144][ C0] ? calc_index+0x200/0x200 [ 332.381675][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 332.386903][ C0] run_timer_softirq+0x6a/0xf0 [ 332.391691][ C0] handle_softirqs+0x1d7/0x600 [ 332.396476][ C0] __irq_exit_rcu+0x52/0xf0 [ 332.401005][ C0] irq_exit_rcu+0x9/0x10 [ 332.405273][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 332.410932][ C0] [ 332.413881][ C0] [ 332.416825][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 332.422833][ C0] RIP: 0010:_raw_write_unlock_irq+0x27/0x60 [ 332.428760][ C0] Code: 2c 51 2b 55 48 89 e5 53 48 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 75 23 c6 07 00 fb bf 01 00 00 00 04 8a 4b fc 65 8b 05 55 61 01 7b 85 c0 74 03 5b 5d c3 e8 25 70 [ 332.448386][ C0] RSP: 0018:ffffc90006c178f8 EFLAGS: 00000246 [ 332.454472][ C0] RAX: 0000000000000000 RBX: ffff8881423fe540 RCX: dffffc0000000000 [ 332.462462][ C0] RDX: 0000000000000001 RSI: 0000000000000806 RDI: 0000000000000001 [ 332.470480][ C0] RBP: ffffc90006c17900 R08: ffff888111f28000 R09: ffffc90006c176e0 [ 332.478477][ C0] R10: dffffc0000000000 R11: fffff52000d82ec0 R12: 0000000000000020 [ 332.486476][ C0] R13: 1ffff110223e50b0 R14: ffff888111f28000 R15: ffff888111f28584 [ 332.494479][ C0] release_task+0x113f/0x1200 [ 332.499213][ C0] do_exit+0x1a1d/0x2850 [ 332.503487][ C0] ? __schedule+0xbea/0x14b0 [ 332.508108][ C0] ? __cfi_do_exit+0x10/0x10 [ 332.512723][ C0] ? plist_check_list+0x255/0x270 [ 332.517861][ C0] ? _raw_spin_lock+0x94/0xf0 [ 332.522564][ C0] ? __kasan_check_write+0x14/0x20 [ 332.527701][ C0] ? _raw_spin_lock_irq+0x95/0xf0 [ 332.532751][ C0] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 332.538318][ C0] do_group_exit+0x21b/0x2e0 [ 332.542943][ C0] ? __kasan_check_write+0x14/0x20 [ 332.548105][ C0] ? recalc_sigpending+0x168/0x1c0 [ 332.553242][ C0] get_signal+0x167c/0x1700 [ 332.557885][ C0] ? __cfi_get_signal+0x10/0x10 [ 332.562768][ C0] arch_do_signal_or_restart+0xd1/0x11c0 [ 332.568430][ C0] ? do_futex+0x2e2/0x430 [ 332.572804][ C0] ? __cfi_do_futex+0x10/0x10 [ 332.577505][ C0] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 332.583778][ C0] ? __se_sys_futex+0x136/0x310 [ 332.588657][ C0] exit_to_user_mode_loop+0x7a/0xb0 [ 332.593884][ C0] exit_to_user_mode_prepare+0x87/0xd0 [ 332.599370][ C0] syscall_exit_to_user_mode+0x1a/0x30 [ 332.604850][ C0] do_syscall_64+0x58/0xa0 [ 332.609338][ C0] ? clear_bhb_loop+0x30/0x80 [ 332.614038][ C0] ? clear_bhb_loop+0x30/0x80 [ 332.618994][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 332.624927][ C0] RIP: 0033:0x7f46dad9e019 [ 332.629370][ C0] Code: Unable to access opcode bytes at 0x7f46dad9dfef. [ 332.636414][ C0] RSP: 002b:00007f46dbb850e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 332.644877][ C0] RAX: fffffffffffffe00 RBX: 00007f46db025fa8 RCX: 00007f46dad9e019 [ 332.652894][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f46db025fa8 [ 332.660904][ C0] RBP: 00007f46db025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 332.668903][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 332.676945][ C0] R13: 00007f46db026038 R14: 00007ffc37bcc6e0 R15: 00007ffc37bcc7c8 [ 332.684962][ C0] [ 332.688023][ C1] CPU: 1 PID: 289 Comm: syz-executor Not tainted syzkaller #0 [ 332.688111][ C0] FAULT_INJECTION: forcing a failure. [ 332.688111][ C0] name failslab, interval 1, probability 100, space 0, times 1 [ 332.695511][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 332.695526][ C1] Call Trace: [ 332.695535][ C1] [ 332.724503][ C1] __dump_stack+0x21/0x24 [ 332.728863][ C1] dump_stack_lvl+0x110/0x170 [ 332.733559][ C1] ? __cfi_dump_stack_lvl+0x8/0x8 [ 332.738613][ C1] ? calc_wheel_index+0x230/0x8d0 [ 332.743668][ C1] ? timer_update_keys+0xb0/0xb0 [ 332.748636][ C1] dump_stack+0x15/0x24 [ 332.752904][ C1] should_fail_ex+0x3bf/0x510 [ 332.757601][ C1] __should_failslab+0xac/0xf0 [ 332.762392][ C1] should_failslab+0x9/0x20 [ 332.766941][ C1] kmem_cache_alloc_node+0x42/0x330 [ 332.772260][ C1] ? __alloc_skb+0xe8/0x4a0 [ 332.776782][ C1] __alloc_skb+0xe8/0x4a0 [ 332.781129][ C1] ndisc_send_rs+0x31d/0x870 [ 332.785766][ C1] ? ipv6_get_lladdr+0x1be/0x200 [ 332.790735][ C1] addrconf_rs_timer+0x35a/0x600 [ 332.795696][ C1] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 332.801183][ C1] ? _raw_spin_lock_irq+0x95/0xf0 [ 332.806241][ C1] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 332.811821][ C1] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 332.817308][ C1] call_timer_fn+0x46/0x2a0 [ 332.821846][ C1] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 332.827357][ C1] __run_timers+0x646/0x9b0 [ 332.831892][ C1] ? calc_index+0x200/0x200 [ 332.836418][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 332.841666][ C1] run_timer_softirq+0x6a/0xf0 [ 332.846482][ C1] handle_softirqs+0x1d7/0x600 [ 332.851277][ C1] __irq_exit_rcu+0x52/0xf0 [ 332.855801][ C1] irq_exit_rcu+0x9/0x10 [ 332.860078][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 332.865755][ C1] [ 332.868709][ C1] [ 332.871669][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 332.877682][ C1] RIP: 0010:queued_read_lock_slowpath+0x112/0x350 [ 332.884128][ C1] Code: 00 00 49 89 df 49 c1 ef 03 43 0f b6 04 27 84 c0 74 35 89 d9 80 e1 07 80 c1 03 38 c1 7c 29 48 89 df e8 62 c9 b5 fc eb 1f f3 90 <43> 0f b6 04 27 84 c0 74 14 89 d9 80 e1 07 80 c1 03 38 c1 7c 08 48 [ 332.903865][ C1] RSP: 0018:ffffc9000dadfb00 EFLAGS: 00000286 [ 332.909961][ C1] RAX: 00000000000002ff RBX: ffffffff8700a040 RCX: ffffffff85012733 [ 332.917961][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8700a040 [ 332.925961][ C1] RBP: ffffc9000dadfb90 R08: ffffffff8700a043 R09: 1ffffffff0e01408 [ 332.933977][ C1] R10: dffffc0000000000 R11: fffffbfff0e01409 R12: dffffc0000000000 [ 332.941983][ C1] R13: 1ffff92001b5bf60 R14: ffffffff8700a044 R15: 1ffffffff0e01408 [ 332.949989][ C1] ? queued_read_lock_slowpath+0xe3/0x350 [ 332.955776][ C1] ? __cfi_queued_read_lock_slowpath+0x10/0x10 [ 332.961960][ C1] _raw_read_lock+0x3a/0x40 [ 332.966500][ C1] do_wait+0x1f9/0x9c0 [ 332.970606][ C1] kernel_wait4+0x1d1/0x2b0 [ 332.975141][ C1] ? __cfi_kernel_wait4+0x10/0x10 [ 332.980196][ C1] ? __cfi_child_wait_callback+0x10/0x10 [ 332.985867][ C1] __x64_sys_wait4+0x163/0x230 [ 332.990648][ C1] ? __cfi___x64_sys_wait4+0x10/0x10 [ 332.995959][ C1] ? __kasan_check_write+0x14/0x20 [ 333.001096][ C1] ? fpregs_restore_userregs+0x128/0x260 [ 333.006750][ C1] ? switch_fpu_return+0xe/0x10 [ 333.011623][ C1] x64_sys_call+0x927/0x9a0 [ 333.016153][ C1] do_syscall_64+0x4c/0xa0 [ 333.020593][ C1] ? clear_bhb_loop+0x30/0x80 [ 333.025321][ C1] ? clear_bhb_loop+0x30/0x80 [ 333.030017][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 333.035942][ C1] RIP: 0033:0x7f307e559197 [ 333.040381][ C1] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 333.060005][ C1] RSP: 002b:00007ffdea926de0 EFLAGS: 00000202 ORIG_RAX: 000000000000003d [ 333.068477][ C1] RAX: ffffffffffffffda RBX: 0000555591bbe500 RCX: 00007f307e559197 [ 333.076471][ C1] RDX: 0000000040000001 RSI: 00007ffdea926e6c RDI: ffffffffffffffff [ 333.084487][ C1] RBP: 00007ffdea926e6c R08: 0000000000000000 R09: 0000000000000000 [ 333.092481][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 333.100476][ C1] R13: 00000000000927c0 R14: 0000000000046acf R15: 00007ffdea926ec0 [ 333.108473][ C1] [ 333.111515][ C0] CPU: 0 PID: 5940 Comm: syz.8.1960 Not tainted syzkaller #0 [ 333.119013][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 333.129103][ C0] Call Trace: [ 333.132412][ C0] [ 333.135278][ C0] __dump_stack+0x21/0x24 [ 333.139638][ C0] dump_stack_lvl+0x110/0x170 [ 333.144333][ C0] ? __cfi_dump_stack_lvl+0x8/0x8 [ 333.149401][ C0] ? calc_wheel_index+0x230/0x8d0 [ 333.154455][ C0] ? timer_update_keys+0xb0/0xb0 [ 333.159417][ C0] dump_stack+0x15/0x24 [ 333.163638][ C0] should_fail_ex+0x3bf/0x510 [ 333.168330][ C0] __should_failslab+0xac/0xf0 [ 333.173116][ C0] should_failslab+0x9/0x20 [ 333.177641][ C0] kmem_cache_alloc_node+0x42/0x330 [ 333.182871][ C0] ? __alloc_skb+0xe8/0x4a0 [ 333.187392][ C0] __alloc_skb+0xe8/0x4a0 [ 333.191751][ C0] ndisc_send_rs+0x31d/0x870 [ 333.196358][ C0] ? ipv6_get_lladdr+0x1be/0x200 [ 333.201328][ C0] addrconf_rs_timer+0x35a/0x600 [ 333.206284][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 333.211761][ C0] ? _raw_spin_lock_irq+0x95/0xf0 [ 333.216810][ C0] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 333.222379][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 333.227861][ C0] call_timer_fn+0x46/0x2a0 [ 333.232424][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 333.237905][ C0] __run_timers+0x646/0x9b0 [ 333.242439][ C0] ? calc_index+0x200/0x200 [ 333.246971][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 333.252194][ C0] run_timer_softirq+0x6a/0xf0 [ 333.257011][ C0] handle_softirqs+0x1d7/0x600 [ 333.261815][ C0] __irq_exit_rcu+0x52/0xf0 [ 333.266337][ C0] irq_exit_rcu+0x9/0x10 [ 333.270592][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 333.276252][ C0] [ 333.279198][ C0] [ 333.282141][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 333.288169][ C0] RIP: 0010:_raw_write_unlock_irq+0x27/0x60 [ 333.294345][ C0] Code: 2c 51 2b 55 48 89 e5 53 48 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 75 23 c6 07 00 fb bf 01 00 00 00 04 8a 4b fc 65 8b 05 55 61 01 7b 85 c0 74 03 5b 5d c3 e8 25 70 [ 333.313967][ C0] RSP: 0018:ffffc90006c178f8 EFLAGS: 00000246 [ 333.320053][ C0] RAX: 0000000000000000 RBX: ffff8881423fe540 RCX: dffffc0000000000 [ 333.328090][ C0] RDX: 0000000000000001 RSI: 0000000000000806 RDI: 0000000000000001 [ 333.336098][ C0] RBP: ffffc90006c17900 R08: ffff888111f28000 R09: ffffc90006c176e0 [ 333.344203][ C0] R10: dffffc0000000000 R11: fffff52000d82ec0 R12: 0000000000000020 [ 333.352332][ C0] R13: 1ffff110223e50b0 R14: ffff888111f28000 R15: ffff888111f28584 [ 333.360333][ C0] release_task+0x113f/0x1200 [ 333.365045][ C0] do_exit+0x1a1d/0x2850 [ 333.369320][ C0] ? __schedule+0xbea/0x14b0 [ 333.373951][ C0] ? __cfi_do_exit+0x10/0x10 [ 333.378586][ C0] ? plist_check_list+0x255/0x270 [ 333.383658][ C0] ? _raw_spin_lock+0x94/0xf0 [ 333.388382][ C0] ? __kasan_check_write+0x14/0x20 [ 333.393531][ C0] ? _raw_spin_lock_irq+0x95/0xf0 [ 333.398588][ C0] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 333.404160][ C0] do_group_exit+0x21b/0x2e0 [ 333.408774][ C0] ? __kasan_check_write+0x14/0x20 [ 333.413902][ C0] ? recalc_sigpending+0x168/0x1c0 [ 333.419038][ C0] get_signal+0x167c/0x1700 [ 333.423568][ C0] ? __cfi_get_signal+0x10/0x10 [ 333.428441][ C0] arch_do_signal_or_restart+0xd1/0x11c0 [ 333.434095][ C0] ? do_futex+0x2e2/0x430 [ 333.438465][ C0] ? __cfi_do_futex+0x10/0x10 [ 333.443158][ C0] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 333.449328][ C0] ? __se_sys_futex+0x136/0x310 [ 333.454206][ C0] exit_to_user_mode_loop+0x7a/0xb0 [ 333.459472][ C0] exit_to_user_mode_prepare+0x87/0xd0 [ 333.465403][ C0] syscall_exit_to_user_mode+0x1a/0x30 [ 333.470912][ C0] do_syscall_64+0x58/0xa0 [ 333.475362][ C0] ? clear_bhb_loop+0x30/0x80 [ 333.480081][ C0] ? clear_bhb_loop+0x30/0x80 [ 333.484779][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 333.490694][ C0] RIP: 0033:0x7f46dad9e019 [ 333.495122][ C0] Code: Unable to access opcode bytes at 0x7f46dad9dfef. [ 333.502150][ C0] RSP: 002b:00007f46dbb850e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 333.510578][ C0] RAX: fffffffffffffe00 RBX: 00007f46db025fa8 RCX: 00007f46dad9e019 [ 333.518567][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f46db025fa8 [ 333.526558][ C0] RBP: 00007f46db025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 333.534543][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 333.542527][ C0] R13: 00007f46db026038 R14: 00007ffc37bcc6e0 R15: 00007ffc37bcc7c8 [ 333.550515][ C0] [ 333.557955][ T5942] CPU: 1 PID: 5942 Comm: syz.9.1961 Not tainted syzkaller #0 [ 333.565377][ T5942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 333.575474][ T5942] Call Trace: [ 333.578822][ T5942] [ 333.581779][ T5942] __dump_stack+0x21/0x24 [ 333.586150][ T5942] dump_stack_lvl+0x110/0x170 [ 333.590860][ T5942] ? __cfi_dump_stack_lvl+0x8/0x8 [ 333.595949][ T5942] ? __cfi_futex_wake+0x10/0x10 [ 333.600827][ T5942] ? debugfs_write_file_bool+0x1b9/0x240 [ 333.606490][ T5942] dump_stack+0x15/0x24 [ 333.610675][ T5942] should_fail_ex+0x3bf/0x510 [ 333.615376][ T5942] ? getname_flags+0xba/0x510 [ 333.620081][ T5942] __should_failslab+0xac/0xf0 [ 333.625154][ T5942] should_failslab+0x9/0x20 [ 333.629690][ T5942] kmem_cache_alloc+0x3b/0x320 [ 333.634489][ T5942] getname_flags+0xba/0x510 [ 333.639024][ T5942] getname+0x19/0x20 [ 333.642949][ T5942] do_sys_openat2+0xeb/0x820 [ 333.647588][ T5942] ? __se_sys_futex+0x136/0x310 [ 333.652471][ T5942] ? do_sys_open+0xe0/0xe0 [ 333.656974][ T5942] ? __this_cpu_preempt_check+0x13/0x20 [ 333.662571][ T5942] ? xfd_validate_state+0x70/0x150 [ 333.667736][ T5942] __x64_sys_openat+0x136/0x160 [ 333.672644][ T5942] x64_sys_call+0x783/0x9a0 [ 333.677190][ T5942] do_syscall_64+0x4c/0xa0 [ 333.681644][ T5942] ? clear_bhb_loop+0x30/0x80 [ 333.686357][ T5942] ? clear_bhb_loop+0x30/0x80 [ 333.691066][ T5942] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 333.697003][ T5942] RIP: 0033:0x7f26a059e019 [ 333.701447][ T5942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 333.721096][ T5942] RSP: 002b:00007f26a14d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 333.729546][ T5942] RAX: ffffffffffffffda RBX: 00007f26a0825fa0 RCX: 00007f26a059e019 [ 333.737544][ T5942] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 333.745539][ T5942] RBP: 00007f26a063500c R08: 0000000000000000 R09: 0000000000000000 [ 333.753545][ T5942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 333.761675][ T5942] R13: 00007f26a0826038 R14: 00007f26a0825fa0 R15: 00007ffd1c4841b8 [ 333.769708][ T5942] [ 334.208856][ T287] tipc: Resetting bearer [ 334.280708][ T287] tipc: Disabling bearer [ 334.352654][ T289] tipc: Resetting bearer [ 334.361330][ T5895] EXT4-fs (loop7): unmounting filesystem. [ 334.368481][ T289] tipc: Disabling bearer [ 334.469237][ T481] tipc: Disabling bearer [ 334.474595][ T481] tipc: Left network mode [ 334.532692][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.539881][ T5949] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.547371][ T5949] device bridge_slave_0 entered promiscuous mode [ 334.568272][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.575488][ T5949] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.583331][ T5949] device bridge_slave_1 entered promiscuous mode [ 334.642889][ T5948] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.650005][ T5948] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.657407][ T5948] device bridge_slave_0 entered promiscuous mode [ 334.668120][ T5948] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.675285][ T5948] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.682849][ T5948] device bridge_slave_1 entered promiscuous mode [ 334.711886][ T5950] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.719022][ T5950] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.726527][ T5950] device bridge_slave_0 entered promiscuous mode [ 334.736645][ T5950] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.743782][ T5950] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.751296][ T5950] device bridge_slave_1 entered promiscuous mode [ 334.770530][ T5951] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.777602][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.785172][ T5951] device bridge_slave_0 entered promiscuous mode [ 334.795360][ T5951] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.802658][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.810179][ T5951] device bridge_slave_1 entered promiscuous mode [ 334.859824][ T5952] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.866913][ T5952] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.874589][ T5952] device bridge_slave_0 entered promiscuous mode [ 334.882140][ T5952] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.889289][ T5952] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.896700][ T5952] device bridge_slave_1 entered promiscuous mode [ 335.052505][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.059605][ T5949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.066918][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.074051][ T5949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.107094][ T5950] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.114210][ T5950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.121515][ T5950] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.128606][ T5950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.145271][ T5948] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.152380][ T5948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.159706][ T5948] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.166749][ T5948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.181430][ T5951] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.188512][ T5951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.195868][ T5951] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.202937][ T5951] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.223576][ T5952] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.230691][ T5952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.238001][ T5952] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.245119][ T5952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.268907][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 335.276668][ T368] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.284300][ T368] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.292132][ T368] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.299571][ T368] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.306848][ T368] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.314466][ T368] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.321758][ T368] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.329149][ T368] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.336372][ T368] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.343744][ T368] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.352549][ T481] device bridge_slave_1 left promiscuous mode [ 335.358786][ T481] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.366511][ T481] device bridge_slave_0 left promiscuous mode [ 335.372877][ T481] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.380998][ T481] device veth1_macvtap left promiscuous mode [ 335.387038][ T481] device veth0_vlan left promiscuous mode [ 335.487373][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 335.501680][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 335.511060][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 335.518935][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 335.527302][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 335.535800][ T368] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.542907][ T368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.551943][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 335.560387][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 335.568648][ T368] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.575708][ T368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.597148][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 335.605645][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 335.613953][ T368] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.621004][ T368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.629131][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 335.637596][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 335.645952][ T368] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.653018][ T368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.660653][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 335.669410][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 335.677619][ T368] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.684711][ T368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.692152][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 335.699848][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 335.708197][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 335.716784][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 335.725129][ T368] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.732371][ T368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.753959][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 335.761550][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 335.769420][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 335.777521][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 335.785842][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 335.794496][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 335.802698][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 335.811089][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 335.819333][ T368] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.826379][ T368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.833965][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 335.842446][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 335.850933][ T368] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.857980][ T368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.881152][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 335.889639][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 335.897642][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 335.906120][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 335.914677][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 335.923261][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 335.931668][ T368] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.938746][ T368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.946184][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 335.954540][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 335.962716][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 335.970918][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 335.979082][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 336.000642][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 336.009411][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 336.017706][ T368] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.024824][ T368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.032276][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 336.040887][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 336.049290][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 336.077479][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 336.086699][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 336.095249][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 336.104025][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 336.112709][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 336.123768][ T5950] device veth0_vlan entered promiscuous mode [ 336.141505][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 336.150025][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 336.158249][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 336.167201][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 336.175858][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 336.183510][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 336.191188][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 336.199303][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 336.207339][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 336.216586][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 336.224252][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 336.231959][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 336.239962][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 336.247508][ T5951] device veth0_vlan entered promiscuous mode [ 336.254443][ T5952] device veth0_vlan entered promiscuous mode [ 336.263732][ T5950] device veth1_macvtap entered promiscuous mode [ 336.277659][ T481] tipc: Disabling bearer [ 336.283181][ T481] tipc: Left network mode [ 336.288682][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 336.296731][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 336.309955][ T481] tipc: Left network mode [ 336.314659][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 336.323218][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 336.331566][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 336.339249][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 336.347516][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 336.357497][ T5949] device veth0_vlan entered promiscuous mode [ 336.364028][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 336.374103][ T5951] device veth1_macvtap entered promiscuous mode [ 336.382402][ T5948] device veth0_vlan entered promiscuous mode [ 336.389445][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 336.396959][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 336.404935][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 336.413382][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 336.435956][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 336.444559][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 336.453260][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 336.461925][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 336.523422][ T5952] device veth1_macvtap entered promiscuous mode [ 336.565103][ T5949] device veth1_macvtap entered promiscuous mode [ 336.578459][ T5948] device veth1_macvtap entered promiscuous mode [ 336.593398][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 336.605966][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 336.617028][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 336.626943][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 336.636594][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 336.658303][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 336.668173][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 336.678625][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 336.798313][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 336.814890][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 336.826208][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 336.835576][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 336.882511][ T5981] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1969'. [ 336.897198][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 336.907541][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 336.917722][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 336.927135][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 337.900177][ T6000] tipc: Started in network mode [ 337.913758][ T6000] tipc: Node identity 1, cluster identity 4711 [ 337.920270][ T6000] tipc: Node number set to 1 [ 337.961054][ T6000] tipc: New replicast peer: 127.0.0.1 [ 337.966701][ T6000] tipc: Enabled bearer , priority 10 [ 337.974201][ T6006] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1977'. [ 337.990822][ T6006] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1977'. [ 338.001601][ T6006] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1977'. [ 338.026606][ T6000] tipc: Disabling bearer [ 338.044532][ T6006] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1977'. [ 338.054433][ T6006] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1977'. [ 338.093287][ T6006] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1977'. [ 338.117615][ T6006] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1977'. [ 338.127748][ T481] device bridge_slave_1 left promiscuous mode [ 338.135307][ T481] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.144617][ T481] device bridge_slave_0 left promiscuous mode [ 338.151554][ T6006] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1977'. [ 338.162093][ T481] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.172292][ T481] device veth0 left promiscuous mode [ 338.177742][ T481] bridge0: port 1(veth0) entered disabled state [ 338.179629][ T6006] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1977'. [ 338.230528][ T103] FAULT_INJECTION: forcing a failure. [ 338.230528][ T103] name failslab, interval 1, probability 100, space 0, times 10 [ 338.230524][ T6023] FAULT_INJECTION: forcing a failure. [ 338.230524][ T6023] name failslab, interval 1, probability 100, space 0, times 10 [ 338.230561][ T103] CPU: 1 PID: 103 Comm: udevd Not tainted syzkaller #0 [ 338.245253][ T481] FAULT_INJECTION: forcing a failure. [ 338.245253][ T481] name failslab, interval 1, probability 100, space 0, times 7 [ 338.256320][ T103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 338.256338][ T103] Call Trace: [ 338.256346][ T103] [ 338.256355][ T103] __dump_stack+0x21/0x24 [ 338.263608][ T313] FAULT_INJECTION: forcing a failure. [ 338.263608][ T313] name failslab, interval 1, probability 100, space 0, times 6 [ 338.276010][ T103] dump_stack_lvl+0x110/0x170 [ 338.276048][ T103] ? __cfi_dump_stack_lvl+0x8/0x8 [ 338.276072][ T103] ? kmem_cache_free+0x12d/0x300 [ 338.324182][ T103] ? x64_sys_call+0x87f/0x9a0 [ 338.328917][ T103] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 338.335039][ T103] dump_stack+0x15/0x24 [ 338.339252][ T103] should_fail_ex+0x3bf/0x510 [ 338.343981][ T103] ? getname_flags+0xba/0x510 [ 338.348710][ T103] __should_failslab+0xac/0xf0 [ 338.353530][ T103] should_failslab+0x9/0x20 [ 338.358072][ T103] kmem_cache_alloc+0x3b/0x320 [ 338.362879][ T103] getname_flags+0xba/0x510 [ 338.367412][ T103] __se_sys_newfstatat+0x127/0x440 [ 338.372552][ T103] ? __x64_sys_newfstatat+0xb0/0xb0 [ 338.377774][ T103] ? mntput_no_expire+0x100/0x6b0 [ 338.382825][ T103] ? __cfi_lockref_put_return+0x10/0x10 [ 338.388408][ T103] ? mntput+0xc0/0xc0 [ 338.392424][ T103] ? user_path_at_empty+0x162/0x1c0 [ 338.397661][ T103] ? fpregs_restore_userregs+0x128/0x260 [ 338.403321][ T103] __x64_sys_newfstatat+0x9b/0xb0 [ 338.408380][ T103] x64_sys_call+0x77c/0x9a0 [ 338.412913][ T103] do_syscall_64+0x4c/0xa0 [ 338.417358][ T103] ? clear_bhb_loop+0x30/0x80 [ 338.422061][ T103] ? clear_bhb_loop+0x30/0x80 [ 338.426762][ T103] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 338.432686][ T103] RIP: 0033:0x7f1bc1f11b0a [ 338.437126][ T103] Code: 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 8b 15 b9 f2 0d 00 f7 [ 338.456766][ T103] RSP: 002b:00007fff76d8b7e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 338.465217][ T103] RAX: ffffffffffffffda RBX: 00007fff76d8bc80 RCX: 00007f1bc1f11b0a [ 338.473225][ T103] RDX: 00007fff76d8b7f0 RSI: 00007fff76d8bc80 RDI: 00000000ffffff9c [ 338.481231][ T103] RBP: 000055a6cccc72c0 R08: 0000000000000000 R09: 0000000000000001 [ 338.489230][ T103] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff76d8b880 [ 338.497226][ T103] R13: 00000000000000ff R14: 000055a69a793be0 R15: 00007fff76d8c340 [ 338.505225][ T103] [ 338.515292][ T6023] CPU: 1 PID: 6023 Comm: syz.0.1985 Not tainted syzkaller #0 [ 338.522749][ T6023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 338.532847][ T6023] Call Trace: [ 338.536166][ T6023] [ 338.539136][ T6023] __dump_stack+0x21/0x24 [ 338.543525][ T6023] dump_stack_lvl+0x110/0x170 [ 338.548257][ T6023] ? __cfi_dump_stack_lvl+0x8/0x8 [ 338.553339][ T6023] ? avc_has_perm+0x163/0x250 [ 338.558063][ T6023] dump_stack+0x15/0x24 [ 338.562263][ T6023] should_fail_ex+0x3bf/0x510 [ 338.566984][ T6023] __should_failslab+0xac/0xf0 [ 338.571795][ T6023] should_failslab+0x9/0x20 [ 338.576347][ T6023] slab_pre_alloc_hook+0x30/0x1d0 [ 338.581428][ T6023] kmem_cache_alloc_lru+0x49/0x280 [ 338.586588][ T6023] ? sock_alloc_inode+0x28/0xc0 [ 338.591498][ T6023] sock_alloc_inode+0x28/0xc0 [ 338.596237][ T6023] ? __cfi_sock_alloc_inode+0x10/0x10 [ 338.601711][ T6023] new_inode_pseudo+0x70/0x1f0 [ 338.606526][ T6023] __sock_create+0x12c/0x7c0 [ 338.611177][ T6023] __sys_socket+0xcd/0x1a0 [ 338.615639][ T6023] __x64_sys_socket+0x7a/0x90 [ 338.620369][ T6023] x64_sys_call+0x449/0x9a0 [ 338.624926][ T6023] do_syscall_64+0x4c/0xa0 [ 338.629399][ T6023] ? clear_bhb_loop+0x30/0x80 [ 338.634209][ T6023] ? clear_bhb_loop+0x30/0x80 [ 338.638927][ T6023] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 338.644882][ T6023] RIP: 0033:0x7fab7db9e019 [ 338.649334][ T6023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 338.668978][ T6023] RSP: 002b:00007fab7eaab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 338.677428][ T6023] RAX: ffffffffffffffda RBX: 00007fab7de25fa0 RCX: 00007fab7db9e019 [ 338.685425][ T6023] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 338.693422][ T6023] RBP: 00007fab7dc3500c R08: 0000000000000000 R09: 0000000000000000 [ 338.701418][ T6023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 338.709421][ T6023] R13: 00007fab7de26038 R14: 00007fab7de25fa0 R15: 00007ffed1528ca8 [ 338.717471][ T6023] [ 338.720538][ T313] CPU: 0 PID: 313 Comm: kworker/0:3 Not tainted syzkaller #0 [ 338.727962][ T313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 338.738049][ T313] Workqueue: mld mld_dad_work [ 338.742773][ T313] Call Trace: [ 338.746078][ T313] [ 338.749031][ T313] __dump_stack+0x21/0x24 [ 338.753392][ T313] dump_stack_lvl+0x110/0x170 [ 338.758093][ T313] ? __cfi_dump_stack_lvl+0x8/0x8 [ 338.763140][ T313] ? kasan_save_free_info+0x2b/0x40 [ 338.768361][ T313] dump_stack+0x15/0x24 [ 338.772538][ T313] should_fail_ex+0x3bf/0x510 [ 338.777238][ T313] __should_failslab+0xac/0xf0 [ 338.782030][ T313] should_failslab+0x9/0x20 [ 338.786563][ T313] kmem_cache_alloc_node+0x42/0x330 [ 338.791811][ T313] ? __alloc_skb+0xe8/0x4a0 [ 338.796347][ T313] ? kvm_sched_clock_read+0x18/0x40 [ 338.801601][ T313] __alloc_skb+0xe8/0x4a0 [ 338.805958][ T313] mld_newpack+0x143/0xa30 [ 338.810401][ T313] ? __kasan_check_write+0x14/0x20 [ 338.815537][ T313] ? __switch_to+0x56f/0x1070 [ 338.820244][ T313] ? mld_sendpack+0xda0/0xda0 [ 338.824947][ T313] add_grec+0xf26/0x13f0 [ 338.829214][ T313] ? __kasan_check_write+0x14/0x20 [ 338.834349][ T313] ? __cfi_mutex_lock+0x10/0x10 [ 338.839295][ T313] mld_dad_work+0x205/0x670 [ 338.843820][ T313] process_one_work+0x717/0xc30 [ 338.848695][ T313] worker_thread+0xa4d/0x11d0 [ 338.853406][ T313] kthread+0x281/0x320 [ 338.857502][ T313] ? __cfi_worker_thread+0x10/0x10 [ 338.862656][ T313] ? __cfi_kthread+0x10/0x10 [ 338.867278][ T313] ret_from_fork+0x1f/0x30 [ 338.871725][ T313] [ 338.874780][ T481] CPU: 1 PID: 481 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 338.882366][ T481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 338.892451][ T481] Workqueue: netns cleanup_net [ 338.897246][ T481] Call Trace: [ 338.900544][ T481] [ 338.903486][ T481] __dump_stack+0x21/0x24 [ 338.907841][ T481] dump_stack_lvl+0x110/0x170 [ 338.912539][ T481] ? __cfi_dump_stack_lvl+0x8/0x8 [ 338.917584][ T481] ? __kasan_check_write+0x14/0x20 [ 338.922713][ T481] ? _raw_spin_lock+0x94/0xf0 [ 338.927411][ T481] ? __cfi__raw_spin_lock+0x10/0x10 [ 338.932624][ T481] dump_stack+0x15/0x24 [ 338.936794][ T481] should_fail_ex+0x3bf/0x510 [ 338.941498][ T481] __should_failslab+0xac/0xf0 [ 338.946313][ T481] should_failslab+0x9/0x20 [ 338.950864][ T481] kmem_cache_alloc_node+0x42/0x330 [ 338.956098][ T481] ? __alloc_skb+0xe8/0x4a0 [ 338.960666][ T481] __alloc_skb+0xe8/0x4a0 [ 338.965025][ T481] rtmsg_ifinfo_build_skb+0x75/0x180 [ 338.970345][ T481] rtnetlink_event+0xd2/0x1a0 [ 338.975054][ T481] raw_notifier_call_chain+0xa1/0x110 [ 338.980450][ T481] __netdev_upper_dev_unlink+0x33e/0x7a0 [ 338.986118][ T481] ? netdev_upper_dev_unlink+0xe0/0xe0 [ 338.991600][ T481] ? kernfs_put+0x315/0x480 [ 338.996135][ T481] ? kmem_cache_free+0x12d/0x300 [ 339.001104][ T481] ? memcpy+0x56/0x70 [ 339.005113][ T481] netdev_upper_dev_unlink+0x96/0xe0 [ 339.010424][ T481] ? __cfi_netdev_upper_dev_unlink+0x10/0x10 [ 339.016432][ T481] ? __kasan_check_read+0x11/0x20 [ 339.021510][ T481] unregister_vlan_dev+0x215/0x320 [ 339.026659][ T481] ? __cfi_unregister_vlan_dev+0x10/0x10 [ 339.032323][ T481] default_device_exit_batch+0x8b3/0x9f0 [ 339.037989][ T481] ? idr_destroy+0x21e/0x290 [ 339.042622][ T481] ? __cfi_netdev_run_todo+0x10/0x10 [ 339.047942][ T481] ? mutex_lock+0x93/0x1b0 [ 339.052397][ T481] ? __cfi_mutex_lock+0x10/0x10 [ 339.057280][ T481] ? __cfi_default_device_exit_batch+0x10/0x10 [ 339.063463][ T481] ? __cfi_xfrmi_exit_batch_net+0x10/0x10 [ 339.069215][ T481] ? rtnl_unlock+0xe/0x10 [ 339.073579][ T481] ? __cfi_default_device_exit_batch+0x10/0x10 [ 339.079760][ T481] cleanup_net+0x630/0xb10 [ 339.084207][ T481] ? __kasan_check_write+0x14/0x20 [ 339.089347][ T481] ? pwq_activate_inactive_work+0x2ea/0x3f0 [ 339.095270][ T481] ? __cfi_cleanup_net+0x10/0x10 [ 339.100246][ T481] process_one_work+0x717/0xc30 [ 339.105128][ T481] worker_thread+0xa4d/0x11d0 [ 339.109835][ T481] kthread+0x281/0x320 [ 339.113967][ T481] ? __cfi_worker_thread+0x10/0x10 [ 339.119136][ T481] ? __cfi_kthread+0x10/0x10 [ 339.123754][ T481] ret_from_fork+0x1f/0x30 [ 339.128210][ T481] [ 339.147207][ T6023] socket: no more sockets [ 339.147534][ T481] device bridge_slave_1 left promiscuous mode [ 339.167033][ T481] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.182288][ T6040] loop6: detected capacity change from 0 to 256 [ 339.188959][ T481] device bridge_slave_0 left promiscuous mode [ 339.195807][ T481] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.206951][ T481] device veth1_macvtap left promiscuous mode [ 339.213245][ T481] device veth0_vlan left promiscuous mode [ 339.226994][ T6040] exfat: Bad value for 'gid' [ 339.231959][ T481] device veth1_macvtap left promiscuous mode [ 339.238238][ T481] device veth0_vlan left promiscuous mode [ 339.244566][ T481] device veth1_macvtap left promiscuous mode [ 339.263733][ T481] device veth0_vlan left promiscuous mode [ 340.870081][ T6082] loop0: detected capacity change from 0 to 256 [ 341.033203][ T6082] exfat: Bad value for 'gid' [ 341.249967][ T6094] netlink: 'syz.6.2009': attribute type 1 has an invalid length. [ 342.328452][ T6105] __nla_validate_parse: 4 callbacks suppressed [ 342.328472][ T6105] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2013'. [ 342.376506][ T6105] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2013'. [ 342.398995][ T6111] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2015'. [ 342.408408][ T6105] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2013'. [ 342.417816][ T6105] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2013'. [ 342.428481][ T6105] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2013'. [ 342.437913][ T6105] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2013'. [ 342.447733][ T6105] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2013'. [ 342.588840][ T6128] loop6: detected capacity change from 0 to 256 [ 342.595652][ T6128] exfat: Bad value for 'gid' [ 345.361150][ T6170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2038'. [ 345.379486][ T6174] loop3: detected capacity change from 0 to 256 [ 345.406559][ T6174] exfat: Bad value for 'gid' [ 345.446862][ T6182] x_tables: duplicate underflow at hook 1 [ 346.830119][ T6221] tipc: New replicast peer: 127.0.0.1 [ 346.835822][ T6221] tipc: Enabled bearer , priority 10 [ 346.929038][ T6236] loop3: detected capacity change from 0 to 256 [ 346.945259][ T6236] exfat: Bad value for 'gid' [ 347.971578][ T6270] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2080'. [ 348.167497][ T6283] loop4: detected capacity change from 0 to 256 [ 348.177112][ T6283] exfat: Bad value for 'gid' [ 348.224298][ T6287] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2087'. [ 348.234811][ T527] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 349.693059][ T6353] loop6: detected capacity change from 0 to 256 [ 349.699868][ T6353] exfat: Bad value for 'gid' [ 350.077453][ T6366] x_tables: duplicate underflow at hook 3 [ 350.114551][ T6370] bridge0: port 3(veth0) entered blocking state [ 350.121067][ T6370] bridge0: port 3(veth0) entered disabled state [ 350.127947][ T6370] device veth0 entered promiscuous mode [ 350.134102][ T6370] bridge0: port 3(veth0) entered blocking state [ 350.140474][ T6370] bridge0: port 3(veth0) entered forwarding state [ 350.179221][ T6374] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2125'. [ 350.188958][ T6374] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2125'. [ 350.255824][ T6379] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2127'. [ 350.265135][ T6379] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2127'. [ 350.566199][ T6386] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2129'. [ 350.634802][ T6392] FAULT_INJECTION: forcing a failure. [ 350.634802][ T6392] name failslab, interval 1, probability 100, space 0, times 10 [ 350.647846][ T6392] CPU: 0 PID: 6392 Comm: syz.4.2132 Not tainted syzkaller #0 [ 350.655273][ T6392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 350.665334][ T6392] Call Trace: [ 350.668633][ T6392] [ 350.671572][ T6392] __dump_stack+0x21/0x24 [ 350.675911][ T6392] dump_stack_lvl+0x110/0x170 [ 350.680606][ T6392] ? __cfi_dump_stack_lvl+0x8/0x8 [ 350.685645][ T6392] ? avc_has_perm+0x163/0x250 [ 350.690328][ T6392] dump_stack+0x15/0x24 [ 350.694503][ T6392] should_fail_ex+0x3bf/0x510 [ 350.699211][ T6392] __should_failslab+0xac/0xf0 [ 350.704014][ T6392] should_failslab+0x9/0x20 [ 350.708620][ T6392] slab_pre_alloc_hook+0x30/0x1d0 [ 350.713670][ T6392] kmem_cache_alloc_lru+0x49/0x280 [ 350.718794][ T6392] ? sock_alloc_inode+0x28/0xc0 [ 350.723662][ T6392] sock_alloc_inode+0x28/0xc0 [ 350.728380][ T6392] ? __cfi_sock_alloc_inode+0x10/0x10 [ 350.733763][ T6392] new_inode_pseudo+0x70/0x1f0 [ 350.738575][ T6392] __sock_create+0x12c/0x7c0 [ 350.743188][ T6392] __sys_socket+0xcd/0x1a0 [ 350.747610][ T6392] __x64_sys_socket+0x7a/0x90 [ 350.752291][ T6392] x64_sys_call+0x449/0x9a0 [ 350.756804][ T6392] do_syscall_64+0x4c/0xa0 [ 350.761227][ T6392] ? clear_bhb_loop+0x30/0x80 [ 350.765907][ T6392] ? clear_bhb_loop+0x30/0x80 [ 350.770599][ T6392] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 350.776517][ T6392] RIP: 0033:0x7f74fed9e019 [ 350.780956][ T6392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 350.788690][ C1] FAULT_INJECTION: forcing a failure. [ 350.788690][ C1] name failslab, interval 1, probability 100, space 0, times 10 [ 350.800640][ T6392] RSP: 002b:00007f74ffcd4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 350.800668][ T6392] RAX: ffffffffffffffda RBX: 00007f74ff025fa0 RCX: 00007f74fed9e019 [ 350.800686][ T6392] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 350.837930][ T6392] RBP: 00007f74fee3500c R08: 0000000000000000 R09: 0000000000000000 [ 350.845927][ T6392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 350.853950][ T6392] R13: 00007f74ff026038 R14: 00007f74ff025fa0 R15: 00007ffd47f91178 [ 350.861964][ T6392] [ 350.865008][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 350.865775][ T6387] FAULT_INJECTION: forcing a failure. [ 350.865775][ T6387] name failslab, interval 1, probability 100, space 0, times 10 [ 350.872083][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 350.872098][ C1] Call Trace: [ 350.872105][ C1] [ 350.872115][ C0] FAULT_INJECTION: forcing a failure. [ 350.872115][ C0] name failslab, interval 1, probability 100, space 0, times 10 [ 350.872112][ C1] __dump_stack+0x21/0x24 [ 350.872143][ C1] dump_stack_lvl+0x110/0x170 [ 350.872165][ C1] ? __cfi_dump_stack_lvl+0x8/0x8 [ 350.872186][ C1] ? __kasan_check_write+0x14/0x20 [ 350.872205][ C1] ? resched_curr+0x114/0x3a0 [ 350.872226][ C1] dump_stack+0x15/0x24 [ 350.872252][ C1] should_fail_ex+0x3bf/0x510 [ 350.872271][ C1] __should_failslab+0xac/0xf0 [ 350.872293][ C1] should_failslab+0x9/0x20 [ 350.872312][ C1] kmem_cache_alloc_node+0x42/0x330 [ 350.872336][ C1] ? __alloc_skb+0xe8/0x4a0 [ 350.872354][ C1] __alloc_skb+0xe8/0x4a0 [ 350.872372][ C1] wg_packet_send_keepalive+0x62/0x1c0 [ 350.872397][ C1] ? wg_expired_send_persistent_keepalive+0x44/0x80 [ 350.872423][ C1] wg_expired_send_persistent_keepalive+0x53/0x80 [ 350.872448][ C1] ? __cfi_wg_expired_send_persistent_keepalive+0x10/0x10 [ 350.872473][ C1] call_timer_fn+0x46/0x2a0 [ 350.872502][ C1] ? __cfi_wg_expired_send_persistent_keepalive+0x10/0x10 [ 350.872534][ C1] __run_timers+0x646/0x9b0 [ 350.872560][ C1] ? calc_index+0x200/0x200 [ 350.872589][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 350.872625][ C1] run_timer_softirq+0x6a/0xf0 [ 350.872653][ C1] handle_softirqs+0x1d7/0x600 [ 350.872674][ C1] __irq_exit_rcu+0x52/0xf0 [ 350.872693][ C1] irq_exit_rcu+0x9/0x10 [ 350.872710][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 350.872739][ C1] [ 350.872745][ C1] [ 350.872751][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 350.872779][ C1] RIP: 0010:default_idle+0xf/0x20 [ 350.872802][ C1] Code: cc 00 00 cc cc 00 00 cc cc 00 00 90 90 90 90 90 90 90 90 90 90 90 b8 0c 67 40 a5 55 48 89 e5 66 90 0f 00 2d 53 5b 65 00 fb f4 <5d> c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 90 90 90 90 90 [ 350.872818][ C1] RSP: 0018:ffffc90000147dd8 EFLAGS: 00000257 [ 350.872835][ C1] RAX: ffff8881f6f00000 RBX: ffff888100331440 RCX: 8a078372513c1800 [ 350.872850][ C1] RDX: 0000000000000001 RSI: ffffffff85ca6940 RDI: ffffffff85ca6900 [ 350.872863][ C1] RBP: ffffc90000147dd8 R08: ffff8881f6f348b3 R09: 1ffff1103ede6916 [ 350.872878][ C1] R10: 0000000000000000 R11: ffffffff8500d380 R12: dffffc0000000000 [ 350.872892][ C1] R13: 0000000000000001 R14: ffff888100331440 R15: dffffc0000000000 [ 350.872906][ C1] ? __cfi_default_idle+0x10/0x10 [ 350.872928][ C1] arch_cpu_idle+0x1c/0x20 [ 350.872944][ C1] default_idle_call+0x71/0x1d0 [ 350.872965][ C1] do_idle+0x354/0x640 [ 350.872984][ C1] ? ct_irq_exit+0x9/0x10 [ 350.873002][ C1] ? sysvec_call_function_single+0x61/0xc0 [ 350.873029][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 350.873052][ C1] cpu_startup_entry+0x43/0x60 [ 350.873072][ C1] start_secondary+0x119/0x120 [ 350.873091][ C1] secondary_startup_64_no_verify+0xce/0xdb [ 350.873115][ C1] [ 350.873122][ C0] CPU: 0 PID: 6387 Comm: syz.6.2130 Not tainted syzkaller #0 [ 350.873144][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 350.873141][ C1] FAULT_INJECTION: forcing a failure. [ 350.873141][ C1] name failslab, interval 1, probability 100, space 0, times 9 [ 350.873156][ C0] Call Trace: [ 350.873163][ C0] [ 350.873169][ C0] __dump_stack+0x21/0x24 [ 350.873191][ C0] dump_stack_lvl+0x110/0x170 [ 350.873212][ C0] ? __cfi_dump_stack_lvl+0x8/0x8 [ 350.873236][ C0] dump_stack+0x15/0x24 [ 350.873256][ C0] should_fail_ex+0x3bf/0x510 [ 350.873273][ C0] __should_failslab+0xac/0xf0 [ 350.873296][ C0] should_failslab+0x9/0x20 [ 350.873314][ C0] kmem_cache_alloc_node+0x42/0x330 [ 350.873338][ C0] ? __alloc_skb+0xe8/0x4a0 [ 350.873356][ C0] __alloc_skb+0xe8/0x4a0 [ 350.873374][ C0] ndisc_send_rs+0x31d/0x870 [ 350.873392][ C0] ? ipv6_get_lladdr+0x1be/0x200 [ 350.873418][ C0] addrconf_rs_timer+0x35a/0x600 [ 350.873439][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 350.873461][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 350.873482][ C0] call_timer_fn+0x46/0x2a0 [ 350.873505][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 350.873526][ C0] __run_timers+0x646/0x9b0 [ 350.873553][ C0] ? calc_index+0x200/0x200 [ 350.873577][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 350.873604][ C0] run_timer_softirq+0x6a/0xf0 [ 350.873627][ C0] handle_softirqs+0x1d7/0x600 [ 350.873649][ C0] __irq_exit_rcu+0x52/0xf0 [ 350.873667][ C0] irq_exit_rcu+0x9/0x10 [ 350.873685][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 350.873712][ C0] [ 350.873718][ C0] [ 350.873725][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 350.873751][ C0] RIP: 0010:vprintk_emit+0x148/0x420 [ 350.873774][ C0] Code: 00 00 00 bf 01 00 00 00 e8 95 0a f5 ff e8 c0 14 00 00 89 c3 31 ff 89 c6 e8 35 e0 19 00 85 db 4c 8b 2c 24 74 0c e8 08 dc 19 00 e3 02 00 00 eb 45 48 c7 c3 80 b5 0e 87 48 c7 c7 80 b5 0e 87 be [ 350.873790][ C0] RSP: 0018:ffffc90002eb74e0 EFLAGS: 00000293 [ 350.873805][ C0] RAX: ffffffff81578bfc RBX: 0000000000000200 RCX: ffff88811fbb5100 [ 350.873818][ C0] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 350.873829][ C0] RBP: ffffc90002eb7588 R08: 0000000000000003 R09: 0000000000000004 [ 350.873841][ C0] R10: dffffc0000000000 R11: fffff520005d6e8c R12: dffffc0000000000 [ 350.873855][ C0] R13: 1ffff920005d6ea0 R14: 00000000ffffffff R15: 0000000000000061 [ 350.873870][ C0] ? vprintk_emit+0x30c/0x420 [ 350.873892][ C0] ? __cfi_vprintk_emit+0x10/0x10 [ 350.873912][ C0] ? kernel_text_address+0xa0/0xd0 [ 350.873936][ C0] vprintk_default+0x26/0x30 [ 350.873957][ C0] vprintk+0x7a/0x80 [ 350.873979][ C0] _printk+0xda/0x128 [ 350.874003][ C0] ? __cfi__printk+0x8/0x8 [ 350.874022][ C0] should_fail_ex+0x3a1/0x510 [ 350.874039][ C0] ? mas_alloc_nodes+0x2d8/0x850 [ 350.874060][ C0] __should_failslab+0xac/0xf0 [ 350.874082][ C0] should_failslab+0x9/0x20 [ 350.874100][ C0] kmem_cache_alloc+0x3b/0x320 [ 350.874124][ C0] mas_alloc_nodes+0x2d8/0x850 [ 350.874146][ C0] mas_preallocate+0xe3d/0x1430 [ 350.874167][ C0] ? __cfi_mas_preallocate+0x10/0x10 [ 350.874189][ C0] ? rwsem_write_trylock+0x136/0x300 [ 350.874216][ C0] vma_expand+0x437/0xad0 [ 350.874242][ C0] mmap_region+0xf04/0x2130 [ 350.874266][ C0] ? should_fail+0xb/0x10 [ 350.874285][ C0] ? __cfi_mmap_region+0x10/0x10 [ 350.874310][ C0] ? cap_mmap_addr+0x165/0x2e0 [ 350.874327][ C0] ? futex_wake+0x5b7/0x8e0 [ 350.874348][ C0] ? get_unmapped_area+0x30c/0x370 [ 350.874374][ C0] do_mmap+0x858/0xdd0 [ 350.874399][ C0] ? __cfi_do_mmap+0x10/0x10 [ 350.874422][ C0] ? do_futex+0x2bf/0x430 [ 350.874437][ C0] ? _copy_from_user+0x8f/0xc0 [ 350.874464][ C0] vm_mmap_pgoff+0x206/0x3f0 [ 350.874483][ C0] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 350.874502][ C0] ? __x64_sys_futex+0x100/0x100 [ 350.874518][ C0] ? xfd_validate_state+0x70/0x150 [ 350.874543][ C0] ksys_mmap_pgoff+0xf6/0x1d0 [ 350.874568][ C0] __x64_sys_mmap+0xfa/0x110 [ 350.874586][ C0] x64_sys_call+0x8fd/0x9a0 [ 350.874606][ C0] do_syscall_64+0x4c/0xa0 [ 350.874627][ C0] ? clear_bhb_loop+0x30/0x80 [ 350.874643][ C0] ? clear_bhb_loop+0x30/0x80 [ 350.874659][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 350.874685][ C0] RIP: 0033:0x7f149d99dd82 [ 350.874698][ C0] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 350.874714][ C0] RSP: 002b:00007fffdd045e68 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 350.874731][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f149d99dd82 [ 350.874743][ C0] RDX: 0000000000000000 RSI: 0000000000021000 RDI: 0000000000000000 [ 350.874755][ C0] RBP: 0000000000020022 R08: 00000000ffffffff R09: 0000000000000000 [ 350.874767][ C0] R10: 0000000000020022 R11: 0000000000000246 R12: 00007fffdd045fd0 [ 350.874779][ C0] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 350.874795][ C0] [ 350.874802][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 350.874809][ C0] FAULT_INJECTION: forcing a failure. [ 350.874809][ C0] name failslab, interval 1, probability 100, space 0, times 8 [ 350.874822][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 350.874834][ C1] Call Trace: [ 350.874839][ C1] [ 350.874845][ C1] __dump_stack+0x21/0x24 [ 350.874867][ C1] dump_stack_lvl+0x110/0x170 [ 350.874888][ C1] ? __cfi_dump_stack_lvl+0x8/0x8 [ 350.874909][ C1] ? __kasan_check_write+0x14/0x20 [ 350.874927][ C1] ? resched_curr+0x114/0x3a0 [ 350.874946][ C1] dump_stack+0x15/0x24 [ 350.874966][ C1] should_fail_ex+0x3bf/0x510 [ 350.874984][ C1] __should_failslab+0xac/0xf0 [ 350.875007][ C1] should_failslab+0x9/0x20 [ 350.875025][ C1] kmem_cache_alloc_node+0x42/0x330 [ 350.875049][ C1] ? __alloc_skb+0xe8/0x4a0 [ 350.875067][ C1] __alloc_skb+0xe8/0x4a0 [ 350.875085][ C1] wg_packet_send_keepalive+0x62/0x1c0 [ 350.875109][ C1] ? wg_expired_send_persistent_keepalive+0x44/0x80 [ 350.875136][ C1] wg_expired_send_persistent_keepalive+0x53/0x80 [ 350.875161][ C1] ? __cfi_wg_expired_send_persistent_keepalive+0x10/0x10 [ 350.875186][ C1] call_timer_fn+0x46/0x2a0 [ 350.875209][ C1] ? __cfi_wg_expired_send_persistent_keepalive+0x10/0x10 [ 350.875235][ C1] __run_timers+0x646/0x9b0 [ 350.875261][ C1] ? calc_index+0x200/0x200 [ 350.875285][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 350.875312][ C1] run_timer_softirq+0x6a/0xf0 [ 350.875335][ C1] handle_softirqs+0x1d7/0x600 [ 350.875356][ C1] __irq_exit_rcu+0x52/0xf0 [ 350.875374][ C1] irq_exit_rcu+0x9/0x10 [ 350.875392][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 350.875419][ C1] [ 350.875424][ C1] [ 350.875430][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 350.875457][ C1] RIP: 0010:default_idle+0xf/0x20 [ 350.875478][ C1] Code: cc 00 00 cc cc 00 00 cc cc 00 00 90 90 90 90 90 90 90 90 90 90 90 b8 0c 67 40 a5 55 48 89 e5 66 90 0f 00 2d 53 5b 65 00 fb f4 <5d> c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 90 90 90 90 90 [ 350.875510][ C1] RSP: 0018:ffffc90000147dd8 EFLAGS: 00000257 [ 350.875525][ C1] RAX: ffff8881f6f00000 RBX: ffff888100331440 RCX: 8a078372513c1800 [ 350.875540][ C1] RDX: 0000000000000001 RSI: ffffffff85ca6940 RDI: ffffffff85ca6900 [ 350.875553][ C1] RBP: ffffc90000147dd8 R08: ffff8881f6f348b3 R09: 1ffff1103ede6916 [ 350.875567][ C1] R10: 0000000000000000 R11: ffffffff8500d380 R12: dffffc0000000000 [ 350.875580][ C1] R13: 0000000000000001 R14: ffff888100331440 R15: dffffc0000000000 [ 350.875595][ C1] ? __cfi_default_idle+0x10/0x10 [ 350.875617][ C1] arch_cpu_idle+0x1c/0x20 [ 350.875633][ C1] default_idle_call+0x71/0x1d0 [ 350.875653][ C1] do_idle+0x354/0x640 [ 350.875672][ C1] ? ct_irq_exit+0x9/0x10 [ 350.875690][ C1] ? sysvec_call_function_single+0x61/0xc0 [ 350.875717][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 350.875740][ C1] cpu_startup_entry+0x43/0x60 [ 350.875760][ C1] start_secondary+0x119/0x120 [ 350.875778][ C1] secondary_startup_64_no_verify+0xce/0xdb [ 350.875802][ C1] [ 350.875808][ C0] CPU: 0 PID: 6387 Comm: syz.6.2130 Not tainted syzkaller #0 [ 350.875809][ C1] FAULT_INJECTION: forcing a failure. [ 350.875809][ C1] name failslab, interval 1, probability 100, space 0, times 7 [ 350.875830][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 350.875840][ C0] Call Trace: [ 350.875845][ C0] [ 350.875851][ C0] __dump_stack+0x21/0x24 [ 350.875872][ C0] dump_stack_lvl+0x110/0x170 [ 350.875893][ C0] ? __cfi_dump_stack_lvl+0x8/0x8 [ 350.875913][ C0] ? calc_wheel_index+0x1b5/0x8d0 [ 350.875937][ C0] ? timer_update_keys+0xb0/0xb0 [ 350.875961][ C0] dump_stack+0x15/0x24 [ 350.875987][ C0] should_fail_ex+0x3bf/0x510 [ 350.876004][ C0] __should_failslab+0xac/0xf0 [ 350.876027][ C0] should_failslab+0x9/0x20 [ 350.876044][ C0] kmem_cache_alloc_node+0x42/0x330 [ 350.876068][ C0] ? __alloc_skb+0xe8/0x4a0 [ 350.876086][ C0] __alloc_skb+0xe8/0x4a0 [ 350.876104][ C0] ndisc_send_rs+0x31d/0x870 [ 350.876120][ C0] ? ipv6_get_lladdr+0x1be/0x200 [ 350.876145][ C0] addrconf_rs_timer+0x35a/0x600 [ 350.876166][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 350.876186][ C0] ? _raw_spin_lock_irq+0x95/0xf0 [ 350.876208][ C0] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 350.876231][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 350.876251][ C0] call_timer_fn+0x46/0x2a0 [ 350.876274][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 350.876295][ C0] __run_timers+0x646/0x9b0 [ 350.876321][ C0] ? calc_index+0x200/0x200 [ 350.876347][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 350.876374][ C0] run_timer_softirq+0x6a/0xf0 [ 350.876397][ C0] handle_softirqs+0x1d7/0x600 [ 350.876418][ C0] __irq_exit_rcu+0x52/0xf0 [ 350.876437][ C0] irq_exit_rcu+0x9/0x10 [ 350.876454][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 350.876482][ C0] [ 350.876488][ C0] [ 350.876494][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 350.876521][ C0] RIP: 0010:vprintk_emit+0x148/0x420 [ 350.876542][ C0] Code: 00 00 00 bf 01 00 00 00 e8 95 0a f5 ff e8 c0 14 00 00 89 c3 31 ff 89 c6 e8 35 e0 19 00 85 db 4c 8b 2c 24 74 0c e8 08 dc 19 00 e3 02 00 00 eb 45 48 c7 c3 80 b5 0e 87 48 c7 c7 80 b5 0e 87 be [ 350.876558][ C0] RSP: 0018:ffffc90002eb74e0 EFLAGS: 00000293 [ 350.876573][ C0] RAX: ffffffff81578bfc RBX: 0000000000000200 RCX: ffff88811fbb5100 [ 350.876586][ C0] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 350.876598][ C0] RBP: ffffc90002eb7588 R08: 0000000000000003 R09: 0000000000000004 [ 350.876610][ C0] R10: dffffc0000000000 R11: fffff520005d6e8c R12: dffffc0000000000 [ 350.876624][ C0] R13: 1ffff920005d6ea0 R14: 00000000ffffffff R15: 0000000000000061 [ 350.876640][ C0] ? vprintk_emit+0x30c/0x420 [ 350.876661][ C0] ? __cfi_vprintk_emit+0x10/0x10 [ 350.876682][ C0] ? kernel_text_address+0xa0/0xd0 [ 350.876706][ C0] vprintk_default+0x26/0x30 [ 350.876726][ C0] vprintk+0x7a/0x80 [ 350.876749][ C0] _printk+0xda/0x128 [ 350.876765][ C0] ? __cfi__printk+0x8/0x8 [ 350.876784][ C0] should_fail_ex+0x3a1/0x510 [ 350.876800][ C0] ? mas_alloc_nodes+0x2d8/0x850 [ 350.876821][ C0] __should_failslab+0xac/0xf0 [ 350.876843][ C0] should_failslab+0x9/0x20 [ 350.876860][ C0] kmem_cache_alloc+0x3b/0x320 [ 350.876885][ C0] mas_alloc_nodes+0x2d8/0x850 [ 350.876906][ C0] mas_preallocate+0xe3d/0x1430 [ 350.876927][ C0] ? __cfi_mas_preallocate+0x10/0x10 [ 350.876948][ C0] ? rwsem_write_trylock+0x136/0x300 [ 350.876976][ C0] vma_expand+0x437/0xad0 [ 350.877038][ C0] mmap_region+0xf04/0x2130 [ 350.877062][ C0] ? should_fail+0xb/0x10 [ 350.877081][ C0] ? __cfi_mmap_region+0x10/0x10 [ 350.877106][ C0] ? cap_mmap_addr+0x165/0x2e0 [ 350.877123][ C0] ? futex_wake+0x5b7/0x8e0 [ 350.877143][ C0] ? get_unmapped_area+0x30c/0x370 [ 350.877169][ C0] do_mmap+0x858/0xdd0 [ 350.877194][ C0] ? __cfi_do_mmap+0x10/0x10 [ 350.877217][ C0] ? do_futex+0x2bf/0x430 [ 350.877232][ C0] ? _copy_from_user+0x8f/0xc0 [ 350.877259][ C0] vm_mmap_pgoff+0x206/0x3f0 [ 350.877278][ C0] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 350.877296][ C0] ? __x64_sys_futex+0x100/0x100 [ 350.877312][ C0] ? xfd_validate_state+0x70/0x150 [ 350.877336][ C0] ksys_mmap_pgoff+0xf6/0x1d0 [ 350.877361][ C0] __x64_sys_mmap+0xfa/0x110 [ 350.877379][ C0] x64_sys_call+0x8fd/0x9a0 [ 350.877400][ C0] do_syscall_64+0x4c/0xa0 [ 350.877421][ C0] ? clear_bhb_loop+0x30/0x80 [ 350.877437][ C0] ? clear_bhb_loop+0x30/0x80 [ 350.877453][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 350.877479][ C0] RIP: 0033:0x7f149d99dd82 [ 350.877494][ C0] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 350.877508][ C0] RSP: 002b:00007fffdd045e68 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 350.877525][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f149d99dd82 [ 350.877538][ C0] RDX: 0000000000000000 RSI: 0000000000021000 RDI: 0000000000000000 [ 350.877549][ C0] RBP: 0000000000020022 R08: 00000000ffffffff R09: 0000000000000000 [ 350.877561][ C0] R10: 0000000000020022 R11: 0000000000000246 R12: 00007fffdd045fd0 [ 350.877573][ C0] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 350.877590][ C0] [ 350.877596][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 350.877601][ C0] FAULT_INJECTION: forcing a failure. [ 350.877601][ C0] name failslab, interval 1, probability 100, space 0, times 6 [ 350.877616][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 350.877627][ C1] Call Trace: [ 350.877633][ C1] [ 350.877639][ C1] __dump_stack+0x21/0x24 [ 350.877661][ C1] dump_stack_lvl+0x110/0x170 [ 350.877690][ C1] ? __cfi_dump_stack_lvl+0x8/0x8 [ 350.877711][ C1] ? __kasan_check_write+0x14/0x20 [ 350.877729][ C1] ? resched_curr+0x114/0x3a0 [ 350.877749][ C1] dump_stack+0x15/0x24 [ 350.877769][ C1] should_fail_ex+0x3bf/0x510 [ 350.877787][ C1] __should_failslab+0xac/0xf0 [ 350.877810][ C1] should_failslab+0x9/0x20 [ 350.877827][ C1] kmem_cache_alloc_node+0x42/0x330 [ 350.877851][ C1] ? __alloc_skb+0xe8/0x4a0 [ 350.877870][ C1] __alloc_skb+0xe8/0x4a0 [ 350.877888][ C1] wg_packet_send_keepalive+0x62/0x1c0 [ 350.877913][ C1] ? wg_expired_send_persistent_keepalive+0x44/0x80 [ 350.877939][ C1] wg_expired_send_persistent_keepalive+0x53/0x80 [ 350.877964][ C1] ? __cfi_wg_expired_send_persistent_keepalive+0x10/0x10 [ 350.877990][ C1] call_timer_fn+0x46/0x2a0 [ 350.878013][ C1] ? __cfi_wg_expired_send_persistent_keepalive+0x10/0x10 [ 350.878039][ C1] __run_timers+0x646/0x9b0 [ 350.878066][ C1] ? calc_index+0x200/0x200 [ 350.878091][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 350.878118][ C1] run_timer_softirq+0x6a/0xf0 [ 350.878141][ C1] handle_softirqs+0x1d7/0x600 [ 350.878162][ C1] __irq_exit_rcu+0x52/0xf0 [ 350.878181][ C1] irq_exit_rcu+0x9/0x10 [ 350.878199][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 350.878227][ C1] [ 350.878232][ C1] [ 350.878239][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 350.878266][ C1] RIP: 0010:default_idle+0xf/0x20 [ 350.878287][ C1] Code: cc 00 00 cc cc 00 00 cc cc 00 00 90 90 90 90 90 90 90 90 90 90 90 b8 0c 67 40 a5 55 48 89 e5 66 90 0f 00 2d 53 5b 65 00 fb f4 <5d> c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 90 90 90 90 90 [ 350.878301][ C1] RSP: 0018:ffffc90000147dd8 EFLAGS: 00000257 [ 350.878316][ C1] RAX: ffff8881f6f00000 RBX: ffff888100331440 RCX: 8a078372513c1800 [ 350.878330][ C1] RDX: 0000000000000001 RSI: ffffffff85ca6940 RDI: ffffffff85ca6900 [ 350.878343][ C1] RBP: ffffc90000147dd8 R08: ffff8881f6f348b3 R09: 1ffff1103ede6916 [ 350.878356][ C1] R10: 0000000000000000 R11: ffffffff8500d380 R12: dffffc0000000000 [ 350.878369][ C1] R13: 0000000000000001 R14: ffff888100331440 R15: dffffc0000000000 [ 350.878383][ C1] ? __cfi_default_idle+0x10/0x10 [ 350.878405][ C1] arch_cpu_idle+0x1c/0x20 [ 350.878421][ C1] default_idle_call+0x71/0x1d0 [ 350.878442][ C1] do_idle+0x354/0x640 [ 350.878461][ C1] ? ct_irq_exit+0x9/0x10 [ 350.878478][ C1] ? sysvec_call_function_single+0x61/0xc0 [ 350.878512][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 350.878541][ C1] cpu_startup_entry+0x43/0x60 [ 350.878561][ C1] start_secondary+0x119/0x120 [ 350.878580][ C1] secondary_startup_64_no_verify+0xce/0xdb [ 350.878610][ C1] [ 350.878617][ C0] CPU: 0 PID: 6387 Comm: syz.6.2130 Not tainted syzkaller #0 [ 350.878630][ C1] FAULT_INJECTION: forcing a failure. [ 350.878630][ C1] name failslab, interval 1, probability 100, space 0, times 5 [ 350.878638][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 350.878650][ C0] Call Trace: [ 350.878656][ C0] [ 350.878662][ C0] __dump_stack+0x21/0x24 [ 350.878683][ C0] dump_stack_lvl+0x110/0x170 [ 350.878704][ C0] ? __cfi_dump_stack_lvl+0x8/0x8 [ 350.878724][ C0] ? calc_wheel_index+0x1b5/0x8d0 [ 350.878749][ C0] ? timer_update_keys+0xb0/0xb0 [ 350.878773][ C0] dump_stack+0x15/0x24 [ 350.878793][ C0] should_fail_ex+0x3bf/0x510 [ 350.878811][ C0] __should_failslab+0xac/0xf0 [ 350.878833][ C0] should_failslab+0x9/0x20 [ 350.878850][ C0] kmem_cache_alloc_node+0x42/0x330 [ 350.878874][ C0] ? __alloc_skb+0xe8/0x4a0 [ 350.878892][ C0] __alloc_skb+0xe8/0x4a0 [ 350.878910][ C0] ndisc_send_rs+0x31d/0x870 [ 350.878926][ C0] ? ipv6_get_lladdr+0x1be/0x200 [ 350.878952][ C0] addrconf_rs_timer+0x35a/0x600 [ 350.878972][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 350.879001][ C0] ? _raw_spin_lock_irq+0x95/0xf0 [ 350.879022][ C0] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 350.879045][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 350.879065][ C0] call_timer_fn+0x46/0x2a0 [ 350.879087][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 350.879108][ C0] __run_timers+0x646/0x9b0 [ 350.879134][ C0] ? calc_index+0x200/0x200 [ 350.879159][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 350.879186][ C0] run_timer_softirq+0x6a/0xf0 [ 350.879208][ C0] handle_softirqs+0x1d7/0x600 [ 350.879230][ C0] __irq_exit_rcu+0x52/0xf0 [ 350.879248][ C0] irq_exit_rcu+0x9/0x10 [ 350.879266][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 350.879293][ C0] [ 350.879298][ C0] [ 350.879304][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 350.879331][ C0] RIP: 0010:vprintk_emit+0x148/0x420 [ 350.879353][ C0] Code: 00 00 00 bf 01 00 00 00 e8 95 0a f5 ff e8 c0 14 00 00 89 c3 31 ff 89 c6 e8 35 e0 19 00 85 db 4c 8b 2c 24 74 0c e8 08 dc 19 00 e3 02 00 00 eb 45 48 c7 c3 80 b5 0e 87 48 c7 c7 80 b5 0e 87 be [ 350.879369][ C0] RSP: 0018:ffffc90002eb74e0 EFLAGS: 00000293 [ 350.879383][ C0] RAX: ffffffff81578bfc RBX: 0000000000000200 RCX: ffff88811fbb5100 [ 350.879397][ C0] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 350.879409][ C0] RBP: ffffc90002eb7588 R08: 0000000000000003 R09: 0000000000000004 [ 350.879421][ C0] R10: dffffc0000000000 R11: fffff520005d6e8c R12: dffffc0000000000 [ 350.879435][ C0] R13: 1ffff920005d6ea0 R14: 00000000ffffffff R15: 0000000000000061 [ 350.879450][ C0] ? vprintk_emit+0x30c/0x420 [ 350.879472][ C0] ? __cfi_vprintk_emit+0x10/0x10 [ 350.879493][ C0] ? kernel_text_address+0xa0/0xd0 [ 350.879517][ C0] vprintk_default+0x26/0x30 [ 350.879538][ C0] vprintk+0x7a/0x80 [ 350.879560][ C0] _printk+0xda/0x128 [ 350.879578][ C0] ? __cfi__printk+0x8/0x8 [ 350.879597][ C0] should_fail_ex+0x3a1/0x510 [ 350.879614][ C0] ? mas_alloc_nodes+0x2d8/0x850 [ 350.879634][ C0] __should_failslab+0xac/0xf0 [ 350.879657][ C0] should_failslab+0x9/0x20 [ 350.879674][ C0] kmem_cache_alloc+0x3b/0x320 [ 350.879699][ C0] mas_alloc_nodes+0x2d8/0x850 [ 350.879720][ C0] mas_preallocate+0xe3d/0x1430 [ 350.879742][ C0] ? __cfi_mas_preallocate+0x10/0x10 [ 350.879764][ C0] ? rwsem_write_trylock+0x136/0x300 [ 350.879791][ C0] vma_expand+0x437/0xad0 [ 350.879817][ C0] mmap_region+0xf04/0x2130 [ 350.879840][ C0] ? should_fail+0xb/0x10 [ 350.879859][ C0] ? __cfi_mmap_region+0x10/0x10 [ 350.879906][ C0] ? cap_mmap_addr+0x165/0x2e0 [ 350.879923][ C0] ? futex_wake+0x5b7/0x8e0 [ 350.879943][ C0] ? get_unmapped_area+0x30c/0x370 [ 350.879969][ C0] do_mmap+0x858/0xdd0 [ 350.879999][ C0] ? __cfi_do_mmap+0x10/0x10 [ 350.880022][ C0] ? do_futex+0x2bf/0x430 [ 350.880038][ C0] ? _copy_from_user+0x8f/0xc0 [ 350.880064][ C0] vm_mmap_pgoff+0x206/0x3f0 [ 350.880082][ C0] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 350.880101][ C0] ? __x64_sys_futex+0x100/0x100 [ 350.880117][ C0] ? xfd_validate_state+0x70/0x150 [ 350.880141][ C0] ksys_mmap_pgoff+0xf6/0x1d0 [ 350.880166][ C0] __x64_sys_mmap+0xfa/0x110 [ 350.880184][ C0] x64_sys_call+0x8fd/0x9a0 [ 350.880204][ C0] do_syscall_64+0x4c/0xa0 [ 350.880225][ C0] ? clear_bhb_loop+0x30/0x80 [ 350.880241][ C0] ? clear_bhb_loop+0x30/0x80 [ 350.880257][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 350.880283][ C0] RIP: 0033:0x7f149d99dd82 [ 350.880295][ C0] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 350.880311][ C0] RSP: 002b:00007fffdd045e68 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 350.880329][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f149d99dd82 [ 350.880342][ C0] RDX: 0000000000000000 RSI: 0000000000021000 RDI: 0000000000000000 [ 350.880354][ C0] RBP: 0000000000020022 R08: 00000000ffffffff R09: 0000000000000000 [ 350.880366][ C0] R10: 0000000000020022 R11: 0000000000000246 R12: 00007fffdd045fd0 [ 350.880378][ C0] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 350.880393][ C0] [ 350.880399][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 350.880405][ C0] FAULT_INJECTION: forcing a failure. [ 350.880405][ C0] name failslab, interval 1, probability 100, space 0, times 4 [ 350.880420][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 350.880431][ C1] Call Trace: [ 350.880436][ C1] [ 350.880441][ C1] __dump_stack+0x21/0x24 [ 350.880463][ C1] dump_stack_lvl+0x110/0x170 [ 350.880490][ C1] ? __cfi_dump_stack_lvl+0x8/0x8 [ 350.880512][ C1] ? __kasan_check_write+0x14/0x20 [ 350.880530][ C1] ? resched_curr+0x114/0x3a0 [ 350.880549][ C1] dump_stack+0x15/0x24 [ 350.880569][ C1] should_fail_ex+0x3bf/0x510 [ 350.880587][ C1] __should_failslab+0xac/0xf0 [ 350.880609][ C1] should_failslab+0x9/0x20 [ 350.880626][ C1] kmem_cache_alloc_node+0x42/0x330 [ 350.880650][ C1] ? __alloc_skb+0xe8/0x4a0 [ 350.880668][ C1] __alloc_skb+0xe8/0x4a0 [ 350.880685][ C1] wg_packet_send_keepalive+0x62/0x1c0 [ 350.880711][ C1] ? wg_expired_send_persistent_keepalive+0x44/0x80 [ 350.880737][ C1] wg_expired_send_persistent_keepalive+0x53/0x80 [ 350.880762][ C1] ? __cfi_wg_expired_send_persistent_keepalive+0x10/0x10 [ 350.880787][ C1] call_timer_fn+0x46/0x2a0 [ 350.880811][ C1] ? __cfi_wg_expired_send_persistent_keepalive+0x10/0x10 [ 350.880837][ C1] __run_timers+0x646/0x9b0 [ 350.880864][ C1] ? calc_index+0x200/0x200 [ 350.880888][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 350.880915][ C1] run_timer_softirq+0x6a/0xf0 [ 350.880938][ C1] handle_softirqs+0x1d7/0x600 [ 350.880959][ C1] __irq_exit_rcu+0x52/0xf0 [ 350.880978][ C1] irq_exit_rcu+0x9/0x10 [ 350.880997][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 350.881024][ C1] [ 350.881030][ C1] [ 350.881036][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 350.881063][ C1] RIP: 0010:default_idle+0xf/0x20 [ 350.881083][ C1] Code: cc 00 00 cc cc 00 00 cc cc 00 00 90 90 90 90 90 90 90 90 90 90 90 b8 0c 67 40 a5 55 48 89 e5 66 90 0f 00 2d 53 5b 65 00 fb f4 <5d> c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 90 90 90 90 90 [ 350.881098][ C1] RSP: 0018:ffffc90000147dd8 EFLAGS: 00000257 [ 350.881114][ C1] RAX: ffff8881f6f00000 RBX: ffff888100331440 RCX: 8a078372513c1800 [ 350.881128][ C1] RDX: 0000000000000001 RSI: ffffffff85ca6940 RDI: ffffffff85ca6900 [ 350.881141][ C1] RBP: ffffc90000147dd8 R08: ffff8881f6f348b3 R09: 1ffff1103ede6916 [ 350.881156][ C1] R10: 0000000000000000 R11: ffffffff8500d380 R12: dffffc0000000000 [ 350.881169][ C1] R13: 0000000000000001 R14: ffff888100331440 R15: dffffc0000000000 [ 350.881183][ C1] ? __cfi_default_idle+0x10/0x10 [ 350.881204][ C1] arch_cpu_idle+0x1c/0x20 [ 350.881219][ C1] default_idle_call+0x71/0x1d0 [ 350.881240][ C1] do_idle+0x354/0x640 [ 350.881258][ C1] ? ct_irq_exit+0x9/0x10 [ 350.881276][ C1] ? sysvec_call_function_single+0x61/0xc0 [ 350.881315][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 350.881338][ C1] cpu_startup_entry+0x43/0x60 [ 350.881357][ C1] start_secondary+0x119/0x120 [ 350.881376][ C1] secondary_startup_64_no_verify+0xce/0xdb [ 350.881399][ C1] [ 350.881405][ C0] CPU: 0 PID: 6387 Comm: syz.6.2130 Not tainted syzkaller #0 [ 350.881422][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 350.881434][ C0] Call Trace: [ 350.881427][ C1] FAULT_INJECTION: forcing a failure. [ 350.881427][ C1] name failslab, interval 1, probability 100, space 0, times 3 [ 350.881440][ C0] [ 350.881448][ C0] __dump_stack+0x21/0x24 [ 350.881470][ C0] dump_stack_lvl+0x110/0x170 [ 350.881492][ C0] ? __cfi_dump_stack_lvl+0x8/0x8 [ 350.881513][ C0] ? calc_wheel_index+0x1b5/0x8d0 [ 350.881537][ C0] ? timer_update_keys+0xb0/0xb0 [ 350.881562][ C0] dump_stack+0x15/0x24 [ 350.881582][ C0] should_fail_ex+0x3bf/0x510 [ 350.881599][ C0] __should_failslab+0xac/0xf0 [ 350.881622][ C0] should_failslab+0x9/0x20 [ 350.881639][ C0] kmem_cache_alloc_node+0x42/0x330 [ 350.881663][ C0] ? __alloc_skb+0xe8/0x4a0 [ 350.881681][ C0] __alloc_skb+0xe8/0x4a0 [ 350.881699][ C0] ndisc_send_rs+0x31d/0x870 [ 350.881717][ C0] ? ipv6_get_lladdr+0x1be/0x200 [ 350.881742][ C0] addrconf_rs_timer+0x35a/0x600 [ 350.881763][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 350.881784][ C0] ? _raw_spin_lock_irq+0x95/0xf0 [ 350.881805][ C0] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 350.881827][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 350.881848][ C0] call_timer_fn+0x46/0x2a0 [ 350.881870][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 350.881891][ C0] __run_timers+0x646/0x9b0 [ 350.881917][ C0] ? calc_index+0x200/0x200 [ 350.881941][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 350.881968][ C0] run_timer_softirq+0x6a/0xf0 [ 350.881997][ C0] handle_softirqs+0x1d7/0x600 [ 350.882018][ C0] __irq_exit_rcu+0x52/0xf0 [ 350.882037][ C0] irq_exit_rcu+0x9/0x10 [ 350.882054][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 350.882081][ C0] [ 350.882087][ C0] [ 350.882093][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 350.882120][ C0] RIP: 0010:vprintk_emit+0x148/0x420 [ 350.882141][ C0] Code: 00 00 00 bf 01 00 00 00 e8 95 0a f5 ff e8 c0 14 00 00 89 c3 31 ff 89 c6 e8 35 e0 19 00 85 db 4c 8b 2c 24 74 0c e8 08 dc 19 00 e3 02 00 00 eb 45 48 c7 c3 80 b5 0e 87 48 c7 c7 80 b5 0e 87 be [ 350.882156][ C0] RSP: 0018:ffffc90002eb74e0 EFLAGS: 00000293 [ 350.882170][ C0] RAX: ffffffff81578bfc RBX: 0000000000000200 RCX: ffff88811fbb5100 [ 350.882183][ C0] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 350.882195][ C0] RBP: ffffc90002eb7588 R08: 0000000000000003 R09: 0000000000000004 [ 350.882207][ C0] R10: dffffc0000000000 R11: fffff520005d6e8c R12: dffffc0000000000 [ 350.882221][ C0] R13: 1ffff920005d6ea0 R14: 00000000ffffffff R15: 0000000000000061 [ 350.882236][ C0] ? vprintk_emit+0x30c/0x420 [ 350.882258][ C0] ? __cfi_vprintk_emit+0x10/0x10 [ 350.882279][ C0] ? kernel_text_address+0xa0/0xd0 [ 350.882303][ C0] vprintk_default+0x26/0x30 [ 350.882323][ C0] vprintk+0x7a/0x80 [ 350.882346][ C0] _printk+0xda/0x128 [ 350.882363][ C0] ? __cfi__printk+0x8/0x8 [ 350.882382][ C0] should_fail_ex+0x3a1/0x510 [ 350.882399][ C0] ? mas_alloc_nodes+0x2d8/0x850 [ 350.882420][ C0] __should_failslab+0xac/0xf0 [ 350.882442][ C0] should_failslab+0x9/0x20 [ 350.882460][ C0] kmem_cache_alloc+0x3b/0x320 [ 350.882486][ C0] mas_alloc_nodes+0x2d8/0x850 [ 350.882508][ C0] mas_preallocate+0xe3d/0x1430 [ 350.882529][ C0] ? __cfi_mas_preallocate+0x10/0x10 [ 350.882551][ C0] ? rwsem_write_trylock+0x136/0x300 [ 350.882578][ C0] vma_expand+0x437/0xad0 [ 350.882603][ C0] mmap_region+0xf04/0x2130 [ 350.882627][ C0] ? should_fail+0xb/0x10 [ 350.882646][ C0] ? __cfi_mmap_region+0x10/0x10 [ 350.882671][ C0] ? cap_mmap_addr+0x165/0x2e0 [ 350.882687][ C0] ? futex_wake+0x5b7/0x8e0 [ 350.882707][ C0] ? get_unmapped_area+0x30c/0x370 [ 350.882734][ C0] do_mmap+0x858/0xdd0 [ 350.882759][ C0] ? __cfi_do_mmap+0x10/0x10 [ 350.882782][ C0] ? do_futex+0x2bf/0x430 [ 350.882798][ C0] ? _copy_from_user+0x8f/0xc0 [ 350.882824][ C0] vm_mmap_pgoff+0x206/0x3f0 [ 350.882843][ C0] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 350.882861][ C0] ? __x64_sys_futex+0x100/0x100 [ 350.882877][ C0] ? xfd_validate_state+0x70/0x150 [ 350.882901][ C0] ksys_mmap_pgoff+0xf6/0x1d0 [ 350.882926][ C0] __x64_sys_mmap+0xfa/0x110 [ 350.882944][ C0] x64_sys_call+0x8fd/0x9a0 [ 350.882964][ C0] do_syscall_64+0x4c/0xa0 [ 350.882990][ C0] ? clear_bhb_loop+0x30/0x80 [ 350.883006][ C0] ? clear_bhb_loop+0x30/0x80 [ 350.883022][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 350.883048][ C0] RIP: 0033:0x7f149d99dd82 [ 350.883060][ C0] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 350.883075][ C0] RSP: 002b:00007fffdd045e68 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 350.883092][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f149d99dd82 [ 350.883105][ C0] RDX: 0000000000000000 RSI: 0000000000021000 RDI: 0000000000000000 [ 350.883117][ C0] RBP: 0000000000020022 R08: 00000000ffffffff R09: 0000000000000000 [ 350.883129][ C0] R10: 0000000000020022 R11: 0000000000000246 R12: 00007fffdd045fd0 [ 350.883142][ C0] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 350.883158][ C0] [ 350.883164][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 350.883168][ C0] FAULT_INJECTION: forcing a failure. [ 350.883168][ C0] name failslab, interval 1, probability 100, space 0, times 2 [ 350.883184][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 350.883196][ C1] Call Trace: [ 350.883201][ C1] [ 350.883206][ C1] __dump_stack+0x21/0x24 [ 350.883228][ C1] dump_stack_lvl+0x110/0x170 [ 350.883249][ C1] ? __cfi_dump_stack_lvl+0x8/0x8 [ 350.883269][ C1] ? resched_curr+0xac/0x3a0 [ 350.883289][ C1] dump_stack+0x15/0x24 [ 350.883309][ C1] should_fail_ex+0x3bf/0x510 [ 350.883326][ C1] __should_failslab+0xac/0xf0 [ 350.883348][ C1] should_failslab+0x9/0x20 [ 350.883365][ C1] kmem_cache_alloc_node+0x42/0x330 [ 350.883389][ C1] ? __alloc_skb+0xe8/0x4a0 [ 350.883407][ C1] __alloc_skb+0xe8/0x4a0 [ 350.883425][ C1] ndisc_send_rs+0x31d/0x870 [ 350.883441][ C1] ? ipv6_get_lladdr+0x1be/0x200 [ 350.883467][ C1] addrconf_rs_timer+0x35a/0x600 [ 350.883493][ C1] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 350.883515][ C1] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 350.883535][ C1] call_timer_fn+0x46/0x2a0 [ 350.883558][ C1] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 350.883579][ C1] __run_timers+0x646/0x9b0 [ 350.883606][ C1] ? calc_index+0x200/0x200 [ 350.883630][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 350.883657][ C1] run_timer_softirq+0x6a/0xf0 [ 350.883679][ C1] handle_softirqs+0x1d7/0x600 [ 350.883701][ C1] __irq_exit_rcu+0x52/0xf0 [ 350.883719][ C1] irq_exit_rcu+0x9/0x10 [ 350.883736][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 350.883774][ C1] [ 350.883780][ C1] [ 350.883786][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 350.883813][ C1] RIP: 0010:default_idle+0xf/0x20 [ 350.883834][ C1] Code: cc 00 00 cc cc 00 00 cc cc 00 00 90 90 90 90 90 90 90 90 90 90 90 b8 0c 67 40 a5 55 48 89 e5 66 90 0f 00 2d 53 5b 65 00 fb f4 <5d> c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 90 90 90 90 90 [ 350.883850][ C1] RSP: 0018:ffffc90000147dd8 EFLAGS: 00000257 [ 350.883864][ C1] RAX: ffff8881f6f00000 RBX: ffff888100331440 RCX: 8a078372513c1800 [ 350.883879][ C1] RDX: 0000000000000001 RSI: ffffffff85ca6940 RDI: ffffffff85ca6900 [ 350.883892][ C1] RBP: ffffc90000147dd8 R08: ffff8881f6f348b3 R09: 1ffff1103ede6916 [ 350.883906][ C1] R10: 0000000000000000 R11: ffffffff8500d380 R12: dffffc0000000000 [ 350.883919][ C1] R13: 0000000000000001 R14: ffff888100331440 R15: dffffc0000000000 [ 350.883933][ C1] ? __cfi_default_idle+0x10/0x10 [ 350.883956][ C1] arch_cpu_idle+0x1c/0x20 [ 350.883971][ C1] default_idle_call+0x71/0x1d0 [ 350.883993][ C1] do_idle+0x354/0x640 [ 350.884012][ C1] ? ct_irq_exit+0x9/0x10 [ 350.884029][ C1] ? sysvec_call_function_single+0x61/0xc0 [ 350.884056][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 350.884079][ C1] cpu_startup_entry+0x43/0x60 [ 350.884099][ C1] start_secondary+0x119/0x120 [ 350.884118][ C1] secondary_startup_64_no_verify+0xce/0xdb [ 350.884141][ C1] [ 350.884147][ C0] CPU: 0 PID: 6387 Comm: syz.6.2130 Not tainted syzkaller #0 [ 350.884152][ C1] FAULT_INJECTION: forcing a failure. [ 350.884152][ C1] name failslab, interval 1, probability 100, space 0, times 1 [ 350.884169][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 350.884179][ C0] Call Trace: [ 350.884184][ C0] [ 350.884189][ C0] __dump_stack+0x21/0x24 [ 350.884248][ C0] dump_stack_lvl+0x110/0x170 [ 350.884270][ C0] ? __cfi_dump_stack_lvl+0x8/0x8 [ 350.884290][ C0] ? calc_wheel_index+0x1b5/0x8d0 [ 350.884314][ C0] ? timer_update_keys+0xb0/0xb0 [ 350.884338][ C0] dump_stack+0x15/0x24 [ 350.884358][ C0] should_fail_ex+0x3bf/0x510 [ 350.884376][ C0] __should_failslab+0xac/0xf0 [ 350.884399][ C0] should_failslab+0x9/0x20 [ 350.884416][ C0] kmem_cache_alloc_node+0x42/0x330 [ 350.884440][ C0] ? __alloc_skb+0xe8/0x4a0 [ 350.884457][ C0] __alloc_skb+0xe8/0x4a0 [ 350.884475][ C0] ndisc_send_rs+0x31d/0x870 [ 350.884493][ C0] ? ipv6_get_lladdr+0x1be/0x200 [ 350.884536][ C0] addrconf_rs_timer+0x35a/0x600 [ 350.884557][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 350.884578][ C0] ? _raw_spin_lock_irq+0x95/0xf0 [ 350.884600][ C0] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 350.884622][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 350.884642][ C0] call_timer_fn+0x46/0x2a0 [ 350.884665][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 350.884685][ C0] __run_timers+0x646/0x9b0 [ 350.884712][ C0] ? calc_index+0x200/0x200 [ 350.884736][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 350.884763][ C0] run_timer_softirq+0x6a/0xf0 [ 350.884785][ C0] handle_softirqs+0x1d7/0x600 [ 350.884806][ C0] __irq_exit_rcu+0x52/0xf0 [ 350.884824][ C0] irq_exit_rcu+0x9/0x10 [ 350.884842][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 350.884869][ C0] [ 350.884875][ C0] [ 350.884881][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 350.884908][ C0] RIP: 0010:vprintk_emit+0x148/0x420 [ 350.884929][ C0] Code: 00 00 00 bf 01 00 00 00 e8 95 0a f5 ff e8 c0 14 00 00 89 c3 31 ff 89 c6 e8 35 e0 19 00 85 db 4c 8b 2c 24 74 0c e8 08 dc 19 00 e3 02 00 00 eb 45 48 c7 c3 80 b5 0e 87 48 c7 c7 80 b5 0e 87 be [ 350.884945][ C0] RSP: 0018:ffffc90002eb74e0 EFLAGS: 00000293 [ 350.884960][ C0] RAX: ffffffff81578bfc RBX: 0000000000000200 RCX: ffff88811fbb5100 [ 350.884973][ C0] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 350.884990][ C0] RBP: ffffc90002eb7588 R08: 0000000000000003 R09: 0000000000000004 [ 350.885001][ C0] R10: dffffc0000000000 R11: fffff520005d6e8c R12: dffffc0000000000 [ 350.885015][ C0] R13: 1ffff920005d6ea0 R14: 00000000ffffffff R15: 0000000000000061 [ 350.885030][ C0] ? vprintk_emit+0x30c/0x420 [ 350.885052][ C0] ? __cfi_vprintk_emit+0x10/0x10 [ 350.885073][ C0] ? kernel_text_address+0xa0/0xd0 [ 350.885096][ C0] vprintk_default+0x26/0x30 [ 350.885117][ C0] vprintk+0x7a/0x80 [ 350.885140][ C0] _printk+0xda/0x128 [ 350.885157][ C0] ? __cfi__printk+0x8/0x8 [ 350.885176][ C0] should_fail_ex+0x3a1/0x510 [ 350.885192][ C0] ? mas_alloc_nodes+0x2d8/0x850 [ 350.885213][ C0] __should_failslab+0xac/0xf0 [ 350.885235][ C0] should_failslab+0x9/0x20 [ 350.885252][ C0] kmem_cache_alloc+0x3b/0x320 [ 350.885277][ C0] mas_alloc_nodes+0x2d8/0x850 [ 350.885299][ C0] mas_preallocate+0xe3d/0x1430 [ 350.885320][ C0] ? __cfi_mas_preallocate+0x10/0x10 [ 350.885342][ C0] ? rwsem_write_trylock+0x136/0x300 [ 350.885369][ C0] vma_expand+0x437/0xad0 [ 350.885395][ C0] mmap_region+0xf04/0x2130 [ 350.885418][ C0] ? should_fail+0xb/0x10 [ 350.885437][ C0] ? __cfi_mmap_region+0x10/0x10 [ 350.885462][ C0] ? cap_mmap_addr+0x165/0x2e0 [ 350.885479][ C0] ? futex_wake+0x5b7/0x8e0 [ 350.885501][ C0] ? get_unmapped_area+0x30c/0x370 [ 350.885526][ C0] do_mmap+0x858/0xdd0 [ 350.885552][ C0] ? __cfi_do_mmap+0x10/0x10 [ 350.885574][ C0] ? do_futex+0x2bf/0x430 [ 350.885590][ C0] ? _copy_from_user+0x8f/0xc0 [ 350.885616][ C0] vm_mmap_pgoff+0x206/0x3f0 [ 350.885635][ C0] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 350.885653][ C0] ? __x64_sys_futex+0x100/0x100 [ 350.885669][ C0] ? xfd_validate_state+0x70/0x150 [ 350.885693][ C0] ksys_mmap_pgoff+0xf6/0x1d0 [ 350.885719][ C0] __x64_sys_mmap+0xfa/0x110 [ 350.885737][ C0] x64_sys_call+0x8fd/0x9a0 [ 350.885757][ C0] do_syscall_64+0x4c/0xa0 [ 350.885778][ C0] ? clear_bhb_loop+0x30/0x80 [ 350.885794][ C0] ? clear_bhb_loop+0x30/0x80 [ 350.885810][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 350.885836][ C0] RIP: 0033:0x7f149d99dd82 [ 350.885849][ C0] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 350.885864][ C0] RSP: 002b:00007fffdd045e68 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 350.885882][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f149d99dd82 [ 350.885894][ C0] RDX: 0000000000000000 RSI: 0000000000021000 RDI: 0000000000000000 [ 350.885905][ C0] RBP: 0000000000020022 R08: 00000000ffffffff R09: 0000000000000000 [ 350.885917][ C0] R10: 0000000000020022 R11: 0000000000000246 R12: 00007fffdd045fd0 [ 350.885929][ C0] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 350.885945][ C0] [ 350.885952][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 350.885970][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 350.885981][ C1] Call Trace: [ 350.885987][ C1] [ 350.885993][ C1] __dump_stack+0x21/0x24 [ 350.886016][ C1] dump_stack_lvl+0x110/0x170 [ 350.886038][ C1] ? __cfi_dump_stack_lvl+0x8/0x8 [ 350.886060][ C1] ? calc_wheel_index+0x1b5/0x8d0 [ 350.886088][ C1] ? timer_update_keys+0xb0/0xb0 [ 350.886115][ C1] dump_stack+0x15/0x24 [ 350.886139][ C1] should_fail_ex+0x3bf/0x510 [ 350.886159][ C1] __should_failslab+0xac/0xf0 [ 350.886185][ C1] should_failslab+0x9/0x20 [ 350.886206][ C1] kmem_cache_alloc_node+0x42/0x330 [ 350.886233][ C1] ? __alloc_skb+0xe8/0x4a0 [ 350.886254][ C1] __alloc_skb+0xe8/0x4a0 [ 350.886276][ C1] ndisc_send_rs+0x31d/0x870 [ 350.886296][ C1] ? ipv6_get_lladdr+0x1be/0x200 [ 350.886325][ C1] addrconf_rs_timer+0x35a/0x600 [ 350.886349][ C1] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 350.886373][ C1] ? _raw_spin_lock_irq+0x95/0xf0 [ 350.886397][ C1] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 350.886424][ C1] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 350.886447][ C1] call_timer_fn+0x46/0x2a0 [ 350.886473][ C1] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 350.886505][ C1] __run_timers+0x646/0x9b0 [ 350.886536][ C1] ? calc_index+0x200/0x200 [ 350.886564][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 350.886594][ C1] run_timer_softirq+0x6a/0xf0 [ 350.886617][ C1] handle_softirqs+0x1d7/0x600 [ 350.886639][ C1] __irq_exit_rcu+0x52/0xf0 [ 350.886660][ C1] irq_exit_rcu+0x9/0x10 [ 350.886680][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 350.886711][ C1] [ 350.886717][ C1] [ 350.886724][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 355.119797][ C1] RIP: 0010:default_idle+0xf/0x20 [ 355.124987][ C1] Code: cc 00 00 cc cc 00 00 cc cc 00 00 90 90 90 90 90 90 90 90 90 90 90 b8 0c 67 40 a5 55 48 89 e5 66 90 0f 00 2d 53 5b 65 00 fb f4 <5d> c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 90 90 90 90 90 [ 355.144616][ C1] RSP: 0018:ffffc90000147dd8 EFLAGS: 00000257 [ 355.150822][ C1] RAX: ffff8881f6f00000 RBX: ffff888100331440 RCX: 8a078372513c1800 [ 355.158907][ C1] RDX: 0000000000000001 RSI: ffffffff85ca6940 RDI: ffffffff85ca6900 [ 355.166897][ C1] RBP: ffffc90000147dd8 R08: ffff8881f6f348b3 R09: 1ffff1103ede6916 [ 355.174885][ C1] R10: 0000000000000000 R11: ffffffff8500d380 R12: dffffc0000000000 [ 355.182879][ C1] R13: 0000000000000001 R14: ffff888100331440 R15: dffffc0000000000 [ 355.190895][ C1] ? __cfi_default_idle+0x10/0x10 [ 355.195944][ C1] arch_cpu_idle+0x1c/0x20 [ 355.200398][ C1] default_idle_call+0x71/0x1d0 [ 355.205267][ C1] do_idle+0x354/0x640 [ 355.209356][ C1] ? ct_irq_exit+0x9/0x10 [ 355.213772][ C1] ? sysvec_call_function_single+0x61/0xc0 [ 355.219642][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 355.224863][ C1] cpu_startup_entry+0x43/0x60 [ 355.229646][ C1] start_secondary+0x119/0x120 [ 355.234428][ C1] secondary_startup_64_no_verify+0xce/0xdb [ 355.240348][ C1] [ 355.243425][ T6387] CPU: 0 PID: 6387 Comm: syz.6.2130 Not tainted syzkaller #0 [ 355.250874][ T6387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 355.260964][ T6387] Call Trace: [ 355.264294][ T6387] [ 355.267294][ T6387] __dump_stack+0x21/0x24 [ 355.271688][ T6387] dump_stack_lvl+0x110/0x170 [ 355.276403][ T6387] ? __cfi_dump_stack_lvl+0x8/0x8 [ 355.281486][ T6387] dump_stack+0x15/0x24 [ 355.284391][ T6392] socket: no more sockets [ 355.285703][ T6387] should_fail_ex+0x3bf/0x510 [ 355.285778][ T6387] ? mas_alloc_nodes+0x2d8/0x850 [ 355.285851][ T6387] __should_failslab+0xac/0xf0 [ 355.285938][ T6387] should_failslab+0x9/0x20 [ 355.285998][ T6387] kmem_cache_alloc+0x3b/0x320 [ 355.286055][ T6387] mas_alloc_nodes+0x2d8/0x850 [ 355.286098][ T6387] mas_preallocate+0xe3d/0x1430 [ 355.286122][ T6387] ? __cfi_mas_preallocate+0x10/0x10 [ 355.286155][ T6387] ? rwsem_write_trylock+0x136/0x300 [ 355.334521][ T6387] vma_expand+0x437/0xad0 [ 355.338990][ T6387] mmap_region+0xf04/0x2130 [ 355.343535][ T6387] ? should_fail+0xb/0x10 [ 355.347907][ T6387] ? __cfi_mmap_region+0x10/0x10 [ 355.352888][ T6387] ? cap_mmap_addr+0x165/0x2e0 [ 355.357804][ T6387] ? futex_wake+0x5b7/0x8e0 [ 355.362412][ T6387] ? get_unmapped_area+0x30c/0x370 [ 355.367574][ T6387] do_mmap+0x858/0xdd0 [ 355.371716][ T6387] ? __cfi_do_mmap+0x10/0x10 [ 355.376344][ T6387] ? do_futex+0x2bf/0x430 [ 355.380706][ T6387] ? _copy_from_user+0x8f/0xc0 [ 355.385660][ T6387] vm_mmap_pgoff+0x206/0x3f0 [ 355.390360][ T6387] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 355.395502][ T6387] ? __x64_sys_futex+0x100/0x100 [ 355.400466][ T6387] ? xfd_validate_state+0x70/0x150 [ 355.405624][ T6387] ksys_mmap_pgoff+0xf6/0x1d0 [ 355.410340][ T6387] __x64_sys_mmap+0xfa/0x110 [ 355.414965][ T6387] x64_sys_call+0x8fd/0x9a0 [ 355.419524][ T6387] do_syscall_64+0x4c/0xa0 [ 355.423980][ T6387] ? clear_bhb_loop+0x30/0x80 [ 355.428762][ T6387] ? clear_bhb_loop+0x30/0x80 [ 355.433451][ T6387] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 355.439364][ T6387] RIP: 0033:0x7f149d99dd82 [ 355.443794][ T6387] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 355.463417][ T6387] RSP: 002b:00007fffdd045e68 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 355.471955][ T6387] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f149d99dd82 [ 355.479944][ T6387] RDX: 0000000000000000 RSI: 0000000000021000 RDI: 0000000000000000 [ 355.487945][ T6387] RBP: 0000000000020022 R08: 00000000ffffffff R09: 0000000000000000 [ 355.495939][ T6387] R10: 0000000000020022 R11: 0000000000000246 R12: 00007fffdd045fd0 [ 355.503930][ T6387] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 355.512632][ T6387] [ 355.516007][ T6387] ------------[ cut here ]------------ [ 355.521722][ T6387] kernel BUG at mm/mmap.c:2854! [ 355.527019][ T6387] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 355.533162][ T6387] CPU: 0 PID: 6387 Comm: syz.6.2130 Not tainted syzkaller #0 [ 355.540603][ T6387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 355.550703][ T6387] RIP: 0010:mmap_region+0x1fe8/0x2130 [ 355.556170][ T6387] Code: 50 80 e1 07 80 c1 03 38 c1 0f 8c e1 f9 ff ff 48 8b 7c 24 50 e8 69 46 09 00 e9 d2 f9 ff ff e8 ef ba c3 ff 0f 0b e8 e8 ba c3 ff <0f> 0b 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 66 e7 ff ff 48 89 df e8 [ 355.575811][ T6387] RSP: 0018:ffffc90002eb7a40 EFLAGS: 00010293 [ 355.581911][ T6387] RAX: ffffffff81adab58 RBX: 00007f149e82f000 RCX: ffff88811fbb5100 [ 355.589914][ T6387] RDX: 0000000000000000 RSI: 00007f149e82efff RDI: 00007f149e82f000 [ 355.597914][ T6387] RBP: ffffc90002eb7c30 R08: ffff88811fbb5100 R09: 0000000000000003 [ 355.605916][ T6387] R10: 0000000000000003 R11: 0000000000000000 R12: 00007f149e82efff [ 355.613927][ T6387] R13: 00007f149e82f000 R14: dffffc0000000000 R15: 00007f149e80e000 [ 355.622050][ T6387] FS: 00005555711a6500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 355.631019][ T6387] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 355.637684][ T6387] CR2: 000000110c326309 CR3: 000000013966b000 CR4: 00000000003506b0 [ 355.645708][ T6387] Call Trace: [ 355.649031][ T6387] [ 355.651992][ T6387] ? should_fail+0xb/0x10 [ 355.656361][ T6387] ? __cfi_mmap_region+0x10/0x10 [ 355.661345][ T6387] ? cap_mmap_addr+0x165/0x2e0 [ 355.666156][ T6387] ? futex_wake+0x5b7/0x8e0 [ 355.670708][ T6387] ? get_unmapped_area+0x30c/0x370 [ 355.675874][ T6387] do_mmap+0x858/0xdd0 [ 355.680038][ T6387] ? __cfi_do_mmap+0x10/0x10 [ 355.684673][ T6387] ? do_futex+0x2bf/0x430 [ 355.689042][ T6387] ? _copy_from_user+0x8f/0xc0 [ 355.693855][ T6387] vm_mmap_pgoff+0x206/0x3f0 [ 355.698491][ T6387] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 355.703692][ T6387] ? __x64_sys_futex+0x100/0x100 [ 355.708684][ T6387] ? xfd_validate_state+0x70/0x150 [ 355.713840][ T6387] ksys_mmap_pgoff+0xf6/0x1d0 [ 355.718567][ T6387] __x64_sys_mmap+0xfa/0x110 [ 355.723182][ T6387] x64_sys_call+0x8fd/0x9a0 [ 355.727708][ T6387] do_syscall_64+0x4c/0xa0 [ 355.732151][ T6387] ? clear_bhb_loop+0x30/0x80 [ 355.736840][ T6387] ? clear_bhb_loop+0x30/0x80 [ 355.741533][ T6387] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 355.747451][ T6387] RIP: 0033:0x7f149d99dd82 [ 355.751882][ T6387] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 355.771513][ T6387] RSP: 002b:00007fffdd045e68 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 355.779962][ T6387] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f149d99dd82 [ 355.787950][ T6387] RDX: 0000000000000000 RSI: 0000000000021000 RDI: 0000000000000000 [ 355.795939][ T6387] RBP: 0000000000020022 R08: 00000000ffffffff R09: 0000000000000000 [ 355.803951][ T6387] R10: 0000000000020022 R11: 0000000000000246 R12: 00007fffdd045fd0 [ 355.811962][ T6387] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 355.819956][ T6387] [ 355.822993][ T6387] Modules linked in: [ 355.827124][ T6387] ---[ end trace 0000000000000000 ]--- [ 355.833127][ T6387] RIP: 0010:mmap_region+0x1fe8/0x2130 [ 355.838584][ T6387] Code: 50 80 e1 07 80 c1 03 38 c1 0f 8c e1 f9 ff ff 48 8b 7c 24 50 e8 69 46 09 00 e9 d2 f9 ff ff e8 ef ba c3 ff 0f 0b e8 e8 ba c3 ff <0f> 0b 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 66 e7 ff ff 48 89 df e8 [ 355.858306][ T6387] RSP: 0018:ffffc90002eb7a40 EFLAGS: 00010293 [ 355.864459][ T6387] RAX: ffffffff81adab58 RBX: 00007f149e82f000 RCX: ffff88811fbb5100 [ 355.872532][ T6387] RDX: 0000000000000000 RSI: 00007f149e82efff RDI: 00007f149e82f000 [ 355.880588][ T6387] RBP: ffffc90002eb7c30 R08: ffff88811fbb5100 R09: 0000000000000003 [ 355.888624][ T6387] R10: 0000000000000003 R11: 0000000000000000 R12: 00007f149e82efff [ 355.896634][ T6387] R13: 00007f149e82f000 R14: dffffc0000000000 R15: 00007f149e80e000 [ 355.904680][ T6387] FS: 00005555711a6500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 355.913684][ T6387] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 355.920340][ T6387] CR2: 000000110c326309 CR3: 000000013966b000 CR4: 00000000003506b0 [ 355.928438][ T6387] Kernel panic - not syncing: Fatal exception [ 355.934763][ T6387] Kernel Offset: disabled [ 355.939474][ T6387] Rebooting in 86400 seconds..