last executing test programs: 8m48.405445376s ago: executing program 3 (id=145): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, r1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5) syz_open_dev$video(0x0, 0x101, 0xab02) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000003c0), 0x2, 0x141102) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000440)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$fuse(0xffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$FS_IOC_GETFSLABEL(r3, 0x800452d3, &(0x7f00000004c0)) mkdir(&(0x7f00000005c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000740)='./file0\x00') r4 = creat(&(0x7f0000000780)='./file0\x00', 0x59) quotactl_fd$Q_GETNEXTQUOTA(r4, 0xffffffff80000901, 0x0, &(0x7f00000007c0)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000ff0300000000000000000000850000001100000085000000a000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f00000002c0)="e02742e8680d85ff978276fcf294", 0x0, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8m47.851786678s ago: executing program 3 (id=147): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="310401080000030000001600000018000180140002006e657464657673696d3000000000000005000300010000000500040001000000050002"], 0x44}}, 0x40000) syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) 8m43.920144328s ago: executing program 3 (id=155): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000500)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x4e24, 0x7, @empty, 0x3aa7}, @ib={0x1b, 0xffff, 0x0, {}, 0x0, 0xfffffffffffffffc, 0x6}}}, 0x118) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) ptrace(0x4206, 0x0) tkill(0x0, 0x12) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) modify_ldt$write2(0x11, &(0x7f0000000440)={0x7d, 0x20001000, 0x4000, 0x1}, 0x10) modify_ldt$read(0x0, &(0x7f0000001640)=""/4101, 0xffffffffffffffd6) listen(0xffffffffffffffff, 0x5) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) setrlimit(0x9, &(0x7f0000000280)={0x80, 0x8}) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mount_setattr(0xffffffffffffffff, 0x0, 0x1000, &(0x7f0000000100)={0x36, 0x70, 0x20000}, 0x20) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x4000010, r3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0xc142, 0x1a2) 8m42.181947198s ago: executing program 3 (id=157): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x169802, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000580), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f00000005c0)) r2 = dup(r0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000540)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r2, 0x0) close_range(r1, 0xffffffffffffffff, 0x2) r3 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = syz_usb_connect(0x0, 0x32, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000200000040501d4d61000100000001090220000101008032090400"], 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x2018, r0, 0x8b7aa000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) setns(0xc9, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f00000002c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r4, 0x0, &(0x7f0000000380)={0x34, &(0x7f00000003c0)=ANY=[@ANYBLOB="00feffffffffff"], 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000400)=0x1000000010) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, 0xffffffffffffffff, 0xf154a000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000600)={0x0, 0x0}) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r3, 0x0, &(0x7f0000000440)={0x2e, 0xf1, 0x0, r2, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x2, 0x8e8, 0x0, 0x0, 0x1000, 0xffffffff, r5, 0x0, 0x15a}}}, &(0x7f0000000500)) setns(0xc9, 0x0) shutdown(0xffffffffffffffff, 0x0) ioctl$BLKRRPART(r2, 0x125f, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000000040)) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x40) r7 = syz_usb_connect(0x5, 0x39, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000200000040109710780001010200010902270001010080320904000003ff000000070581020002000705010200020007058203"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$uac2(r7, 0x0, &(0x7f0000000180)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="403001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(r6, &(0x7f0000000080)='./file0\x00', 0x109200, 0x48) 8m39.388725986s ago: executing program 3 (id=165): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x1294, 0x1320, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x20, "", [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x26}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0xf, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000b40)={0x2c, &(0x7f0000000880)=ANY=[@ANYBLOB="40352600000026080000000161b7"], 0x0, 0x0, 0x0, 0x0}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r5, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r6, 0xc0383e04, &(0x7f00000003c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_usb_connect$midi(0x0, 0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000209904511040000102030109022c0001010e8007090400000101032006062402036607018000070009050801000200400204250100"], &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0}) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0xb080, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r7, 0x5201) mremap(&(0x7f00003ff000/0xc00000)=nil, 0xc00000, 0x2000, 0x3, &(0x7f0000000000/0x2000)=nil) r8 = socket$kcm(0x21, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r9 = syz_clone(0x1a2400, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r10) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r11 = syz_open_procfs(r9, &(0x7f0000000100)='pagemap\x00') pread64(r11, &(0x7f0000000200)=""/102400, 0x19020, 0x1000000000) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x6, &(0x7f0000019200)=ANY=[@ANYBLOB="18400000020000000000000000000000184a000000000000020000000000000018630000020000000000000008000000"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r12) sendmsg$TIPC_NL_LINK_SET(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000019280)={0xb4, r13, 0xa3d, 0x709d28, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0xa0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ID={0x3d, 0x3, "6e8b8f3bfd664498ebffc7a33d14426d1cc54382d15caa086d605fa8f0718a696255041018d730acd4fabc3715176b28a09d9c71fbb704219f"}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "ba4db30a57428cd45c299e10be94080a3d7112270f83359643c7adb8c2"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffda67}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000}, 0x88014) 8m31.316310048s ago: executing program 3 (id=178): r0 = syz_usb_connect(0x6, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920001000109021b1901000000f30904150001da40df000905", @ANYRES32], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x1) syz_open_procfs(0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) memfd_create(&(0x7f0000000640)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1[\xd6\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05V%$6\x9fU\x86\xbe\xcbx\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\x00\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8\x83\x87+nM\x11\x1c\xb0\xber\xa6\xec\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5\xcc\x8fI\x00\xf0\xc9%\n\xa7\xd6\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2L\xac\x80\xc7\x15\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\v)\x06B\xf0\xed\x91 )y\xb4\xba\xba\xb7\xbc\xc3\xad\xf1\x92/(A=A\x8b\xa5\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\xbb\xd2\x13]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x03\xb5pe,\xdfN\x0f8\t\xe7X_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0\b\x00\x00\x00\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\r\xcd\xf0\xad\x97uh\xb2\xb8\x17S~R\x19\xa9\xc3x\xb8l\xed\xbdz#6\x9f\x94\xba[xC\xed\x12}f\x0f\xc5', 0x3) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140e000000208000a400000000205000300020000000900020073797a31000000000500010007"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) write(r1, &(0x7f0000000a00)='27', 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_usb_control_io$uac2(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000000)={0x0, 0x30, 0x37, {0x37, 0xc, "9ae4d87310d53aab160fdd02900f5f259b3b3037b627d66dc3f4a01599df958629bea6ce2f513a0d5168d0537c3863925a8f1d5550"}}, &(0x7f00000004c0)={0x0, 0x3, 0x92, @string={0x92, 0x3, "5b413efe369a5e0ce42448af9f35977a11fce4da975c1ab4b293995f7db23b605fc11b8414932524f5544c7993a697b338f26829c662f4e24dd2aee3e17d23719d0ab27bb9505747021b12a4e9c36d5ee74da9da5eb22618176d7555fdd8762645a59f33346f794322287cdcb82fd5ceb248bae2c9dc79dc6016f97c1dac795b88bf294f1e2b0e073d5a1755ea340832"}}}, &(0x7f0000000440)={0x44, &(0x7f0000000200)={0x20, 0x0, 0x5f, "44ba392729ea96fc33da03a5a407c290a35fdf7bc2eb9994eccf68e854703227f949e7144fee695bc487c74ea59b90759014ac2fb9e9f71cd3f21e9f362daa279af40adb55a88028f0e5deafe755fcfe7e69d7a73e6a9daf648b532b698724"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0xea}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000000300)={0x20, 0x81, 0x3, "f85c76"}, &(0x7f0000000340)={0x20, 0x82, 0x2, "8f75"}, &(0x7f0000000380)=ANY=[@ANYBLOB="208302eeff0055da"], &(0x7f00000003c0)={0x20, 0x84, 0x3, "27f54b"}, &(0x7f0000000400)={0x20, 0x85, 0x3, "b50500"}}) 8m16.251944725s ago: executing program 32 (id=178): r0 = syz_usb_connect(0x6, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920001000109021b1901000000f30904150001da40df000905", @ANYRES32], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x1) syz_open_procfs(0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) memfd_create(&(0x7f0000000640)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1[\xd6\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05V%$6\x9fU\x86\xbe\xcbx\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\x00\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8\x83\x87+nM\x11\x1c\xb0\xber\xa6\xec\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5\xcc\x8fI\x00\xf0\xc9%\n\xa7\xd6\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2L\xac\x80\xc7\x15\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\v)\x06B\xf0\xed\x91 )y\xb4\xba\xba\xb7\xbc\xc3\xad\xf1\x92/(A=A\x8b\xa5\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\xbb\xd2\x13]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x03\xb5pe,\xdfN\x0f8\t\xe7X_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0\b\x00\x00\x00\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\r\xcd\xf0\xad\x97uh\xb2\xb8\x17S~R\x19\xa9\xc3x\xb8l\xed\xbdz#6\x9f\x94\xba[xC\xed\x12}f\x0f\xc5', 0x3) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140e000000208000a400000000205000300020000000900020073797a31000000000500010007"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) write(r1, &(0x7f0000000a00)='27', 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_usb_control_io$uac2(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000000)={0x0, 0x30, 0x37, {0x37, 0xc, "9ae4d87310d53aab160fdd02900f5f259b3b3037b627d66dc3f4a01599df958629bea6ce2f513a0d5168d0537c3863925a8f1d5550"}}, &(0x7f00000004c0)={0x0, 0x3, 0x92, @string={0x92, 0x3, "5b413efe369a5e0ce42448af9f35977a11fce4da975c1ab4b293995f7db23b605fc11b8414932524f5544c7993a697b338f26829c662f4e24dd2aee3e17d23719d0ab27bb9505747021b12a4e9c36d5ee74da9da5eb22618176d7555fdd8762645a59f33346f794322287cdcb82fd5ceb248bae2c9dc79dc6016f97c1dac795b88bf294f1e2b0e073d5a1755ea340832"}}}, &(0x7f0000000440)={0x44, &(0x7f0000000200)={0x20, 0x0, 0x5f, "44ba392729ea96fc33da03a5a407c290a35fdf7bc2eb9994eccf68e854703227f949e7144fee695bc487c74ea59b90759014ac2fb9e9f71cd3f21e9f362daa279af40adb55a88028f0e5deafe755fcfe7e69d7a73e6a9daf648b532b698724"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0xea}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000000300)={0x20, 0x81, 0x3, "f85c76"}, &(0x7f0000000340)={0x20, 0x82, 0x2, "8f75"}, &(0x7f0000000380)=ANY=[@ANYBLOB="208302eeff0055da"], &(0x7f00000003c0)={0x20, 0x84, 0x3, "27f54b"}, &(0x7f0000000400)={0x20, 0x85, 0x3, "b50500"}}) 6m59.832014983s ago: executing program 1 (id=335): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="500100001000010000000000000000007f0000010000edffffff0000000000007f00000100000000000000000000000000000000000000000200202000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f00000100000000000000000000000000be3412320000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002000000000000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060"], 0x150}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="940000002900010000000000000000007f00000100000000000000000000000000be3412020032007f0000020000000000000000000000007f00000100000000000000000000000000000000000000007f0000010000000000000000000000007f000001000000000000000000000000000000000000000002002020000000000000000000000000010000000000000002"], 0x94}}, 0x0) 6m59.7376085s ago: executing program 1 (id=337): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, 0x0, 0x0) 6m58.189106206s ago: executing program 1 (id=339): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x10, '\x00', 0x0, 0x0}, 0x50) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000280)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000300)={0x2, 0x4e21, @local}, 0x10) shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil) ftruncate(0xffffffffffffffff, 0x51a9497) sendmsg$inet(r1, &(0x7f0000000640)={&(0x7f0000000680)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000700)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) sendmsg$rds(r1, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a40), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000a80)={{0x3, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, &(0x7f0000000ac0)) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)='4', 0x1}], 0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000001c0)) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 6m57.714308032s ago: executing program 1 (id=344): fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x1}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@setneightbl={0x12, 0x43, 0x1, 0x70bd2c, 0x25dfdbff, {0xa}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000001c0)={0x0, &(0x7f00000002c0)}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xd, 0x9, 0xfffffffffffffff9, 0x800000000040002, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x8, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2839d1}) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), 0xffffffffffffffff) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000400)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x4008054) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f0000000540)=0x0) bind$nfc_llcp(r9, &(0x7f0000000580)={0x27, r11, 0x0, 0x6, 0x0, 0x2, "d92984bd1ca44c226af5160e961711a077609475b78411e879918d20000000f2170e65e3f50327080e000000000000001900", 0x3c}, 0x60) r12 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nfc(&(0x7f0000000600), r13) ioctl$IOCTL_GET_NCIDEV_IDX(r12, 0x0, &(0x7f0000000640)=0x0) sendmsg$NFC_CMD_DEP_LINK_UP(r13, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x24, r14, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) sendmsg$NFC_CMD_DEP_LINK_UP(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000300), 0xc, &(0x7f00000007c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000225bd7000fcdbdf250400000005000a000100000005000a00213d58312d890000000005000a000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="080004000000000008000100", @ANYRES32=r15, @ANYBLOB="05000a00010000000800040001000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4c800}, 0x8000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6m57.006899824s ago: executing program 1 (id=345): r0 = fcntl$getown(0xffffffffffffffff, 0x9) pipe2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000001c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000380), 0x651, 0x0) recvmmsg(r2, &(0x7f00000003c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./proc\x00', &(0x7f00000004c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/kallsyms\x00', 0x0, 0x0) pread64(r4, &(0x7f0000000540)=""/77, 0x571da, 0x1000) prctl$PR_SCHED_CORE(0x3e, 0x2, r0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0x11, 0x4f73, 0xfffffe0000000001, 0x400fa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, 0x26, 0x1, 0x70bd1e, 0x25dfdbfb, {0x1}, [@typed={0x5, 0x163, 0x0, 0x0, @str='\x00'}]}, 0x1c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x10}]}}, @TCA_RATE={0x4, 0x5, {0x5, 0x9}}]}, 0x40}}, 0x4800) 6m56.048135882s ago: executing program 1 (id=349): r0 = syz_open_dev$dri(&(0x7f0000000300), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 2) 6m40.374676313s ago: executing program 33 (id=349): r0 = syz_open_dev$dri(&(0x7f0000000300), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 2) 2m33.169817555s ago: executing program 4 (id=1506): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000008c0)={0xa, 0x4e22, 0x4, @rand_addr, 0x7fff}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000900)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000940)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x5, 0x0, 0x6}}}}}}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000009c0)={@local, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xffffa888}]}}}}}}}, 0x0) 2m33.090997744s ago: executing program 4 (id=1508): socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmmsg(r0, &(0x7f0000003340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/64, 0x40}, 0x4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/74, 0x4a}, 0x7f}], 0x2, 0x40000002, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f2", @ANYRES64=r4], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m32.75053192s ago: executing program 4 (id=1511): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000740)=0x80000004, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bind$inet(r0, &(0x7f00000007c0)={0x2, 0x4e20, @local}, 0x10) 2m32.65110644s ago: executing program 4 (id=1513): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r1, 0x0) syz_ublk_setup_io_uring(0x352e, &(0x7f0000000040)={0x0, 0x99ee, 0x1, 0x1, 0x4001cb, 0x0, r1}, 0x0, 0x0, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, 0x0}, 0x4048043) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) getpeername(0xffffffffffffffff, 0x0, &(0x7f0000000080)) 2m32.275545115s ago: executing program 4 (id=1518): r0 = syz_clone3(&(0x7f0000000000)={0x120801400, &(0x7f0000000100), 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, 0x0}, 0x58) sched_rr_get_interval(r0, &(0x7f0000000280)) 2m31.991170378s ago: executing program 4 (id=1521): sync() mknodat$md(0xffffffffffffff9c, &(0x7f0000000080)='./md0\x00', 0x6180, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2c040941}, 0x0) r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) sendmsg$alg(r0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x4000810}, 0x88c0) r1 = openat$md_node(0xffffffffffffff9c, &(0x7f00000000c0)='./md0\x00', 0x2, 0x0) ioctl$SET_ARRAY_INFO(r1, 0x40480923, &(0x7f0000000100)={0x0, 0x5a, 0x0, 0x0, 0x5, 0x800, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000180)={0x0, {0x1, 0x0}, 0x0, 0x6}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f00000001c0)={0x1, {0x1, 0x1}, 0x1, 0x6}) ioctl$RUN_ARRAY(r1, 0x400c0930, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x7, 0x6, &(0x7f0000000540)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500"], &(0x7f0000000580)='GPL\x00', 0x5, 0xc3, &(0x7f00000005c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) ioctl$STOP_ARRAY(r1, 0x932, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000040)=0xe257) utimes(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)={{0x77359400}, {0x77359400}}) 2m16.944908817s ago: executing program 34 (id=1521): sync() mknodat$md(0xffffffffffffff9c, &(0x7f0000000080)='./md0\x00', 0x6180, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2c040941}, 0x0) r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) sendmsg$alg(r0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x4000810}, 0x88c0) r1 = openat$md_node(0xffffffffffffff9c, &(0x7f00000000c0)='./md0\x00', 0x2, 0x0) ioctl$SET_ARRAY_INFO(r1, 0x40480923, &(0x7f0000000100)={0x0, 0x5a, 0x0, 0x0, 0x5, 0x800, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000180)={0x0, {0x1, 0x0}, 0x0, 0x6}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f00000001c0)={0x1, {0x1, 0x1}, 0x1, 0x6}) ioctl$RUN_ARRAY(r1, 0x400c0930, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x7, 0x6, &(0x7f0000000540)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500"], &(0x7f0000000580)='GPL\x00', 0x5, 0xc3, &(0x7f00000005c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) ioctl$STOP_ARRAY(r1, 0x932, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000040)=0xe257) utimes(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)={{0x77359400}, {0x77359400}}) 1m26.398571109s ago: executing program 7 (id=1958): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000002c0)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000300)={0x0, 0x3}, 0x8) bind$inet6(r0, &(0x7f0000000340)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000480)={0xa, 0x4e23, 0x9, @loopback, 0x1}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000780)='\t', 0x1}], 0x1}}], 0x4000354, 0x0) sendmmsg$inet6(r0, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000003b00)=[{&(0x7f0000000900)="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", 0xa15}], 0x1}}], 0x1, 0x24048801) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000880)={0x0, 0xffff}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, 0x0, 0x0) 1m26.363138578s ago: executing program 7 (id=1960): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f00000000c0)={0xd000, 0xa000, 0x310, 0x1, 0xbc4}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000a00)='dctcp', 0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r3, 0x0, r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x10, 0x4, &(0x7f0000000440)=ANY=[], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x24004045) socket$unix(0x1, 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='net/unix\x00') r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000001100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) pread64(r4, &(0x7f0000001200)=""/164, 0x131, 0x131) 1m25.238966801s ago: executing program 7 (id=1963): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) write$eventfd(r0, 0x0, 0x0) 1m24.257024771s ago: executing program 7 (id=1969): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='\x00', 0x9801) move_mount(r0, &(0x7f0000000240)='.\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000c00)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000009c0)='\x00', 0x89901) 1m24.132035146s ago: executing program 7 (id=1972): r0 = fsopen(&(0x7f0000000240)='cgroup2\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000380)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000440)='proc\x00', &(0x7f0000000480)='\\', 0x1) 1m23.089846892s ago: executing program 7 (id=1976): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x121) r0 = socket$inet6(0xa, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000002740)={0x0, 0x0}) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000002780)={r1, r2/1000+10000}, 0x10) bind$inet6(r0, &(0x7f00000027c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000002800)=[{{0x0, 0x0, 0x0}, 0x91}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000002840)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) r3 = fanotify_init(0xf00, 0x1000) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) fanotify_mark(r3, 0x41, 0x8000038, r4, 0x0) close(0x3) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) socket(0x28, 0x801, 0x0) close(0x3) timer_create(0x9, &(0x7f0000002640)={0x0, 0x8, 0x1}, &(0x7f0000002680)) timer_settime(0x0, 0x0, &(0x7f00000026c0)={{}, {0x77359400}}, &(0x7f0000002700)) 1m22.775085905s ago: executing program 35 (id=1976): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x121) r0 = socket$inet6(0xa, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000002740)={0x0, 0x0}) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000002780)={r1, r2/1000+10000}, 0x10) bind$inet6(r0, &(0x7f00000027c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000002800)=[{{0x0, 0x0, 0x0}, 0x91}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000002840)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) r3 = fanotify_init(0xf00, 0x1000) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) fanotify_mark(r3, 0x41, 0x8000038, r4, 0x0) close(0x3) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) socket(0x28, 0x801, 0x0) close(0x3) timer_create(0x9, &(0x7f0000002640)={0x0, 0x8, 0x1}, &(0x7f0000002680)) timer_settime(0x0, 0x0, &(0x7f00000026c0)={{}, {0x77359400}}, &(0x7f0000002700)) 6.394496947s ago: executing program 6 (id=2566): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x40010) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x100000, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0xffffff1f, 0xfffffffc, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x502e}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 6.2895829s ago: executing program 5 (id=2569): symlink(0x0, &(0x7f0000002680)='./file1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd2d, 0x25dfdbfe, {0x7, 0x0, 0xffef, r1, 0x80, 0xff, 0xa}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004040}, 0x4040000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) quotactl$Q_QUOTAOFF(0x2, 0x0, 0x0, 0x0) r2 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000140)={&(0x7f0000000000), 0x12, &(0x7f0000000080)={0x0}, 0x8}, 0x0) io_uring_setup(0x7362, &(0x7f0000000180)={0x0, 0x3859, 0x2, 0x1, 0x3d5}) munlockall() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) getsockopt(0xffffffffffffffff, 0x28, 0x0, 0x0, 0x0) r3 = creat(0x0, 0x119) write$cgroup_int(r3, &(0x7f0000000540), 0xfffffdd8) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x200000, 0x1000}, 0x20) 6.180681723s ago: executing program 6 (id=2570): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x100, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0x2}, {0x1, 0x19}, {0x1, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4044800}, 0x20000080) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f00000004c0)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmmsg$unix(r1, &(0x7f0000007b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c054}}], 0x1, 0x2000c080) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004) 6.119447595s ago: executing program 2 (id=2571): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f00000000c0)={0xd000, 0xa000, 0x310, 0x1, 0xbc4}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000a00)='dctcp', 0x5) bind$inet6(r2, &(0x7f0000000a40)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r3, 0x0, r3) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x10, 0x4, &(0x7f0000000440)=ANY=[], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x24004045) socket$unix(0x1, 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='net/unix\x00') r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000001100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) pread64(r4, &(0x7f0000001200)=""/164, 0x131, 0x131) 5.89492397s ago: executing program 2 (id=2572): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x24}}, 0x0) 5.74314537s ago: executing program 2 (id=2574): openat$adsp1(0xffffffffffffff9c, 0x0, 0x200, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = io_uring_setup(0x66a5, &(0x7f0000000100)={0x0, 0xbfb7, 0x800, 0x1, 0x87}) r3 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000000)=r3, 0x1) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4094, 0xffe}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x1000, 0x16d3, 0x5, 0x180, 0x2000000000000004, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x2, 0x4, 0xfffffffbfffffffe, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0x25000, 0x4000}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x77359400}, {0x0, 0x9}}, 0x0) timer_gettime(0x0, &(0x7f0000000240)) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, &(0x7f00000000c0)={0x2, @pix={0xa, 0x5, 0x30314142, 0x3, 0x7fff, 0x10, 0x1, 0x6, 0x1, 0x4, 0x1, 0x6}}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000003e0400000000000014000000000000005504000011edfffe2500000017ffffff460400007fffffff7b0a00fe000000006e04000000000000e5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be3619184e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9e104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f1300010000949b3aab06b1e042ff2164d80c8ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fc8706869ada11390d4dbcf840fa68e7d7071b53ac29df826f8ae6d6e18c1e0600bf870768d5217e9bb5a05d9e224e67f1231bd236ed200073824d93c4e1a0f50a74bb4850486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee6330000000000000000000000000000000000004000000000000000038600008fb854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8265e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cafffe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb66701f4578ba4cb9b706e605a88c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f6a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f80893220800c523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe917d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cf026657a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2cccb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400090300000021911480a876fbba698801937e8b4264eb6f5137bdaa075f1488d22230592a79000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783f26d0a52aefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd370c06c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c3500800000087de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c796369f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a8f01bc4b73cc31df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21c24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a3c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d68000000000099347593f67da85d1c962bfb320d1553a74ec3bf003ba62b1784dbf0168a7e85f28b77bdebce96bf386a6dd5df162a16f2b7e8a4de0ffc464a87f91f81866d2ef0af71ebb07a739c3cb1b7000000000000"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x43}, 0x48) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYRES16=r5, @ANYBLOB="01032cbd7000ffdbdf2500000000"], 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x24008080) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201510100000010da092b02000000000001090224"], 0x0) syz_usb_connect$cdc_ecm(0x1, 0x79, &(0x7f0000001280)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67, 0x1, 0x1, 0x3, 0x90, 0x9, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x2, 0x6, 0x0, 0x8, {{0x8, 0x24, 0x6, 0x0, 0x0, "ce1d63"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x4, 0xb, 0x6, 0x8}, [@mdlm={0x15, 0x24, 0x12, 0x2}, @country_functional={0x10, 0x24, 0x7, 0x40, 0x9, [0x1, 0x9, 0x8001, 0x0, 0x9]}, @acm={0x4, 0x24, 0x2, 0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x4, 0x1, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x8, 0xfb, 0x9}}}}}]}}]}}, &(0x7f0000001900)={0xa, &(0x7f0000001340)={0xa, 0x6, 0x288, 0xe7, 0x2, 0x7, 0x8, 0xc}, 0xfd, &(0x7f0000001380)=ANY=[@ANYBLOB="050ffd000407100206350000db100b58526afef842c56da2a34982483207faaa3a421a46a5e0ca440b584734843888bae23edf7603a4884438b0bd122f8b17560202dd6e9a5115a9cf8c6043d48a5fa9980192c5a7c70e111f4314a2d71f278721cc8fea3c97d1e1e2bc4a2e788e993a60bbf28857e388ad9da0949c36e1b187d01a9e324226ddb2d7bd8e5551449fdc5b36e12a36412c8b22f8711b81f9fba6b2851018c76d15d4fe3bd7a7190842b760299c5e8c47e863592894f4bf636053c2538ab9fded2d67704aae81f911164b781aa93aecbc6b485a100a681be19ef5779d1017ac181d"], 0x6, [{0xb3, &(0x7f0000002300)=ANY=[@ANYBLOB="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"]}, {0xca, &(0x7f0000001680)=ANY=[@ANYBLOB="ca03e7819bd4a88784cfda2321f0890287ce656d037a362d31c1daf92f1e6b225a399a9a0e950147c072f434dbb741c2fdf4e209d6a2dad9d91a3e5305a0d0a113bff6f56ec245509743431e02a8c06e7a99839059482629ca78a833398b66508df7c9e95e534fc8b67eb69ba4fe7349a6bdcee7c3ed69c0ffda0bc906c9db1fe86a4bf7a5bd550424fda1dbb33c3010e12917f4aaae34931cd1aae70ce50af75ad2cd009d104b315b4f766ca953e6b0421e4c7e52ca7e8cd867c6b2a098e85627e95de007137e81e16b"]}, {0x4, &(0x7f0000001780)=@lang_id={0x4, 0x3, 0xc0a}}, {0xf, &(0x7f00000017c0)=@string={0xf, 0x3, "3ab2248e488d528e5960f031c1"}}, {0x4, &(0x7f0000001800)=@lang_id={0x4, 0x3, 0x410}}, {0x74, &(0x7f0000001840)=@string={0x74, 0x3, "4f553a0e2a1edc6c656e4afec4cfa4140bae642b84d24939916b77aed8a50ff125ec27612b11054c26cb2f12f05edf1efb2f28d774600a48e5d838b72a240daa58037b78d31dd0394488ab604d0a9dcb623e392ddc92debe9dbece7b3041a3efbb5767e3bb46c83c957cd9c3f4949bc26407"}}]}) 5.574481856s ago: executing program 6 (id=2577): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x48, r1, 0x7, 0x0, 0x40000, {}, [@ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x20}, @ETHTOOL_A_BITSET_MASK={0x6, 0x5, "7180"}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) r2 = add_key(0x0, &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0xfffffffffffffedd, 0xfffffffffffffffa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x3c, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000040}, 0x20008800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x13) ioprio_set$pid(0x3, 0x0, 0x4007) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a8c000000060a0b0400000000000000000200000060000480240001800b000100736f636b65740000140002800800024000000003080001400000000228000180080001006e6174001c000280080002400000000208000140000000010800034000000003100001800900010068617368000000000900010073797a30000000000900020073797a32000000001400000011000100000000000000000003ca00"], 0xb4}}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) keyctl$search(0xa, 0x0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x1}, r2) socket$inet6(0xa, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x400c4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 5.403923773s ago: executing program 0 (id=2578): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000380)=0xc) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f00000003c0)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000400)={0xa, 0x20e6, 0x20, @empty, 0xfffffffd}, 0x1c) r2 = socket$inet6(0xa, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000440)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="010528000a00140006000000600000000008114020010000000000000000000000000001ff02000000000000000000000000000120e620e6"], 0x64) 5.364695266s ago: executing program 5 (id=2579): open(&(0x7f0000000400)='./bus\x00', 0x4ab42, 0x1c0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) r0 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05}) mq_getsetattr(r0, &(0x7f0000000040)={0x0, 0x40, 0x4, 0xffff}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mq_timedreceive(r0, &(0x7f0000000100)=""/90, 0x5a, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x5, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 5.212020604s ago: executing program 5 (id=2580): r0 = socket$nl_audit(0x10, 0x3, 0x9) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x9, 0x200002, 0x83, 0xffff, 0x4, 0xabe6, 0x0, 0x0, 0x8, 0x8001}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000ec0)={'\x00', 0x2, 0x4ad, 0x7b, 0x0, 0xe, 0x0, 0x10000, '\x00', 0xfffffd72}) writev(r2, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) dup3(r1, r2, 0x6700000000000000) close_range(r0, 0xffffffffffffffff, 0x0) 5.154927154s ago: executing program 0 (id=2581): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x44c}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000bc0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000c00)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x0, 0xf4ffffff}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 5.054717766s ago: executing program 5 (id=2582): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) r1 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x34}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1800}}, &(0x7f0000000440)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000480)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) setsockopt$inet6_int(r1, 0x29, 0x24, &(0x7f0000000100)=0x40, 0x4) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x380000, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="26e845c8bd1b81440635d9d750351d50e3e299417a0f59b13b51a29b1c0654dcc47495faabb8608a", 0x28}], 0x1, &(0x7f0000000280)=[{0x10, 0x119, 0x80000c}], 0x10}}], 0x1, 0x8020) mount(&(0x7f0000000000), &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x1001, 0x0) 4.933022553s ago: executing program 5 (id=2583): connect$can_bcm(0xffffffffffffffff, &(0x7f0000003100), 0x10) r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000e00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000e40), 0x0, 0x10, &(0x7f0000000e80), 0x45}, 0x48) write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x80010, r2, 0x7c76a000) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0x40045613, &(0x7f00000000c0)=@multiplanar_overlay={0x0, 0x2, 0x4, 0x200, 0x736a, {0x77359400}, {0x5, 0x8, 0x4, 0x8, 0x3a, 0x10, "c75cf712"}, 0x100, 0x3, {&(0x7f0000000540)=[{0x6, 0x0, {0x1}, 0x34e}, {0x6, 0x0, {0x3ff}, 0x2}]}, 0xbb, 0x0, r1}) mmap$IORING_OFF_SQ_RING(0x0, 0x0, 0x0, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6906, &(0x7f0000000140)={0x0, 0x716f, 0x0, 0x1002, 0x225}, 0x0, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x7ffc, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r5 = syz_open_dev$vim2m(0x0, 0x6, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0285628, &(0x7f0000000300)={0x3, @win={{0x7, 0x4, 0x809, 0x4}, 0x2, 0x4017, 0x0, 0x3316, 0x0, 0x8}}) socket$inet6(0xa, 0x3, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r6 = syz_open_dev$dri(&(0x7f00000004c0), 0x0, 0x402) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000500)={0x9, 0x5, 0x20ffd}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ec0)={0x1, 0x4, 0x0, 0x0, 0x5}, 0x94) r7 = creat(&(0x7f0000000f80)='./bus\x00', 0x0) set_mempolicy(0x5, &(0x7f0000000fc0)=0x2, 0x6) fsetxattr$system_posix_acl(r7, &(0x7f0000001000)='system.posix_acl_default\x00', &(0x7f0000001040)=ANY=[@ANYBLOB="02"], 0xfe44, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000e, 0x11, r6, 0x100000000) 4.391029647s ago: executing program 8 (id=2586): socket(0x2, 0x80805, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r2, &(0x7f00000005c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@loopback, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0xd, 0x800000000000, 0x4, 0xb, 0x0, 0x0, 0x0, 0x10000000000}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private=0x4, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sched_setscheduler(0x0, 0x2, 0x0) sendmmsg(r2, &(0x7f0000000700), 0x2e9, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902247251000000"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000180)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000240)=0x84) 4.23903936s ago: executing program 0 (id=2587): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x100, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0x2}, {0x1, 0x19}, {0x1, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4044800}, 0x20000080) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f00000004c0)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmmsg$unix(r1, &(0x7f0000007b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c054}}], 0x1, 0x2000c080) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004) 4.219381269s ago: executing program 2 (id=2588): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x95, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f00000002c0)={0x2000001, 0x1, [0xf72, 0x4e0, 0x4, 0x20a20]}) r2 = syz_io_uring_setup(0x617a, 0x0, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)) io_uring_enter(r2, 0x542d, 0xeaba, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) 3.95626861s ago: executing program 6 (id=2589): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) pipe(&(0x7f0000000100)) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, &(0x7f00000007c0)) r0 = syz_open_dev$video4linux(&(0x7f0000001380), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000040)={0x0, 0x0, {0x1, 0xfffffffc, 0x400}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x8, 0x6, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800008082b63428e9000000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b702000000"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r2 = syz_open_dev$loop(&(0x7f0000000540), 0xffff, 0x14f600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$VIDIOC_QBUF(r3, 0xc058565d, &(0x7f00000006c0)=@fd={0x0, 0x5, 0xa8, 0x1, 0x0, {}, {0x0, 0xb846941ed94b4582, 0x80, 0x0, 0x0, 0xa, "a900"}, 0x2000000, 0x2, {}, 0x20800}) write$binfmt_misc(r3, &(0x7f0000000740), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000780)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x31]}}) ftruncate(r1, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r1, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_buf(r4, 0x29, 0x45, 0x0, &(0x7f0000000000)=0x1e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_usb_connect(0x3, 0x32, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000128000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) socket$inet(0x2, 0x80001, 0x84) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendto(r5, &(0x7f0000000000)="240000003f0005000a0000000000000002020000000000000c0001006f76732d64703000", 0x24, 0x0, 0x0, 0x0) sendto(r5, &(0x7f0000000200)="340000003f000500010000000000000001020000000000000c0001006f76732d6470300008000200000000000800090010270000", 0x34, 0x0, 0x0, 0x0) sendto(r5, &(0x7f0000000400)="9400000042000100020000000000000003010000102700003200010000112233445566778899aabb080045000020000140004011b778c0a80101c0a8010204d2162e000c00007465737400003c00020008000300010000001000040066778899aabb001122334455060006000800000010000700c0a80101c0a801021100400008000a0004d2162e0c00030008000c0004000100", 0x94, 0x0, 0x0, 0x0) 3.641092926s ago: executing program 0 (id=2590): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x8, 0x1, 0xd8f9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x8800, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="12011003144a4a08431950220100010203010902"], &(0x7f0000001fc0)={0x0, 0x0, 0x0, 0x0}) syz_clone3(&(0x7f000001bb00)={0x200080400, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 3.147127632s ago: executing program 5 (id=2591): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212007d5d000000"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000200), 0x1, 0x402) ioctl$I2C_FUNCS(r1, 0x705, &(0x7f0000000100)=0xff) 2.442586138s ago: executing program 8 (id=2592): r0 = socket$nl_audit(0x10, 0x3, 0x9) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x9, 0x200002, 0x83, 0xffff, 0x4, 0xabe6, 0x0, 0x0, 0x8, 0x8001}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000ec0)={'\x00', 0x2, 0x4ad, 0x7b, 0x0, 0xe, 0x0, 0x10000, '\x00', 0xfffffd72}) writev(r2, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) dup3(r1, r2, 0x6700000000000000) close_range(r0, 0xffffffffffffffff, 0x0) 2.394019493s ago: executing program 0 (id=2593): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) r1 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x34}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1800}}, &(0x7f0000000440)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000480)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) setsockopt$inet6_int(r1, 0x29, 0x24, &(0x7f0000000100)=0x40, 0x4) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x380000, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="26e845c8bd1b81440635d9d750351d50e3e299417a0f59b13b51a29b1c0654dcc47495faabb8608a", 0x28}], 0x1, &(0x7f0000000280)=[{0x10, 0x119, 0x80000c}], 0x10}}], 0x1, 0x8020) mount(&(0x7f0000000000), &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x1001, 0x0) 2.234796158s ago: executing program 8 (id=2594): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e80)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc140000000c0a010100000000000000000a000006340000000e0a010200000000000000000a0000020900010073797a31000000000900020073797a3100000000080003"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x44082) 2.163599034s ago: executing program 0 (id=2595): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000280)=""/74, 0x49) write$char_usb(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x494, &(0x7f0000000300)=ANY=[]) 2.072557403s ago: executing program 6 (id=2596): r0 = socket$packet(0x11, 0x2, 0x300) bind$packet(r0, &(0x7f0000000140)={0x11, 0x9, 0x1, 0x1, 0xfe, 0x6, @random="ee520800"}, 0x14) close(0x3) socket(0x40000000015, 0x5, 0x0) 1.93825951s ago: executing program 8 (id=2597): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0xc, 0x10, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000df00850000000500000095"], &(0x7f0000000cc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.866774768s ago: executing program 6 (id=2598): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') read$FUSE(r0, &(0x7f00000102c0)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000012300)={0x2020}, 0x2020) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000083ef0840e07d6e67db77000000a409021200010000000009040000"], 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',gr', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000008300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000004300)="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", 0x2000, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x90, 0x0, 0x3, {0x3, 0x4000000000, 0x0, 0x4000000004, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffdc, 0x103, 0x9, 0x1000, 0x0, 0x0, r3, 0x0, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000006300)="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", 0x2000, &(0x7f00000005c0)={&(0x7f00000002c0)={0x50, 0xfffffffffffffffc, 0x200, {0x7, 0x28, 0x1, 0x2008b2a4, 0xff, 0x2, 0x803, 0xb6, 0x0, 0x0, 0x10, 0xd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000e00)={0x50, 0x0, r2, {0x7, 0x28, 0x800073, 0xc0000, 0xffff, 0x5, 0x0, 0x8000}}, 0x50) unlink(&(0x7f0000000100)='./file0/file0\x00') r4 = socket$inet6(0xa, 0x2, 0x0) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r5, 0x40104593, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) close_range(r6, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r4, 0x29, 0x100000000001f, 0x0, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000002180)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) syz_usb_connect(0x3, 0x46, 0x0, 0x0) 1.796606724s ago: executing program 8 (id=2599): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000001c80)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000001cc0)={&(0x7f0000001d00)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000001d40)=[{&(0x7f0000001d80)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) read$FUSE(r2, &(0x7f0000001e00)={0x2020}, 0x2020) 1.671988094s ago: executing program 8 (id=2600): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x100, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0x2}, {0x1, 0x19}, {0x1, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4044800}, 0x20000080) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f00000004c0)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmmsg$unix(r1, &(0x7f0000007b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c054}}], 0x1, 0x2000c080) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004) 1.142956422s ago: executing program 2 (id=2601): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config\x00', 0x1c0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f00000006c0)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f00000196c0)=0x7) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000019700)={0xb, {0x1, 0xa, 0x6, 0x5, 0x5, 0x7}}) dup3(r3, r3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000019740)=@base={0x5, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mount(0x0, &(0x7f00000003c0)='./config\x00', &(0x7f0000000580)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/configs/c.1\x00', 0x1c0) symlinkat(&(0x7f0000000640)='./config/usb_gadget/g1/os_desc/../configs/c.1\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/os_desc/c.1\x00') 0s ago: executing program 2 (id=2602): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0xd2}, 0x9c) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r0, &(0x7f0000001340)='X', 0x34000, 0xe0, &(0x7f0000002440)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(0x3) kernel console output (not intermixed with test programs): 09168][ T5730] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 560.946103][ T29] audit: type=1400 audit(1792669622.479:1236): avc: denied { rename } for pid=11394 comm="syz.0.1738" name="file0" dev="tmpfs" ino=1890 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 561.042483][T11406] team0: entered promiscuous mode [ 561.042510][T11406] team_slave_0: entered promiscuous mode [ 561.042692][T11406] team_slave_1: entered promiscuous mode [ 561.042843][T11406] team0: entered allmulticast mode [ 561.042864][T11406] team_slave_0: entered allmulticast mode [ 561.042880][T11406] team_slave_1: entered allmulticast mode [ 562.629549][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.731806][ T29] audit: type=1326 audit(1792669624.269:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11407 comm="syz.2.1744" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0d82b9f559 code=0x0 [ 563.071565][T11434] FAULT_INJECTION: forcing a failure. [ 563.071565][T11434] name fail_futex, interval 1, probability 0, space 0, times 0 [ 563.071610][T11434] CPU: 0 UID: 0 PID: 11434 Comm: syz.5.1752 Tainted: G L syzkaller #0 PREEMPT(full) [ 563.071648][T11434] Tainted: [L]=SOFTLOCKUP [ 563.071657][T11434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 563.071673][T11434] Call Trace: [ 563.071681][T11434] [ 563.071690][T11434] dump_stack_lvl+0x100/0x190 [ 563.071733][T11434] should_fail_ex.cold+0x5/0xa [ 563.071769][T11434] get_futex_key+0x1c9/0x13e0 [ 563.071811][T11434] ? __pfx_get_futex_key+0x10/0x10 [ 563.071839][T11434] ? futex_wake+0x4ea/0x5e0 [ 563.071885][T11434] futex_wake+0xf4/0x5e0 [ 563.071919][T11434] ? futex_wait+0x11e/0x370 [ 563.071945][T11434] ? __pfx_futex_wake+0x10/0x10 [ 563.071982][T11434] ? rcu_read_lock_any_held+0x6a/0x90 [ 563.072015][T11434] ? find_held_lock+0x2b/0x80 [ 563.072045][T11434] ? ksys_write+0x190/0x250 [ 563.072070][T11434] ? ksys_write+0x190/0x250 [ 563.072097][T11434] do_futex+0x2b2/0x440 [ 563.072127][T11434] ? __pfx_do_futex+0x10/0x10 [ 563.072155][T11434] ? __pfx_do_sys_openat2+0x10/0x10 [ 563.072191][T11434] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 563.072233][T11434] __x64_sys_futex+0x34f/0x4d0 [ 563.072266][T11434] ? __x64_sys_openat+0x12d/0x210 [ 563.072300][T11434] ? __pfx___x64_sys_futex+0x10/0x10 [ 563.072344][T11434] do_syscall_64+0x123/0x790 [ 563.072382][T11434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.072407][T11434] RIP: 0033:0x7fb08499f559 [ 563.072426][T11434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 563.072449][T11434] RSP: 002b:00007fb0857d90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 563.072472][T11434] RAX: ffffffffffffffda RBX: 00007fb084c25fa8 RCX: 00007fb08499f559 [ 563.072489][T11434] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb084c25fac [ 563.072505][T11434] RBP: 00007fb084c25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 563.072519][T11434] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 563.072534][T11434] R13: 00007fb084c26038 R14: 00007ffd0c368c40 R15: 00007ffd0c368d28 [ 563.072567][T11434] [ 563.476726][T11442] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 563.905614][ T4931] block nbd5: Possible stuck request ffff888029b17000: control (read@0,1024B). Runtime 90 seconds [ 563.905658][ T4931] block nbd5: Possible stuck request ffff888029b171c0: control (read@1024,1024B). Runtime 90 seconds [ 563.905685][ T4931] block nbd5: Possible stuck request ffff888029b17380: control (read@2048,1024B). Runtime 90 seconds [ 563.905712][ T4931] block nbd5: Possible stuck request ffff888029b17540: control (read@3072,1024B). Runtime 90 seconds [ 564.319545][T11456] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 564.632221][T11459] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 566.053045][ T29] audit: type=1326 audit(1792669627.589:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11463 comm="syz.7.1763" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6f6f19f559 code=0x0 [ 566.689050][T11475] o2cb: This node has not been configured. [ 566.689936][T11475] o2cb: Cluster check failed. Fix errors before retrying. [ 566.690256][T11475] (syz.5.1766,11475,0):user_dlm_register:674 ERROR: status = -22 [ 566.690353][T11475] (syz.5.1766,11475,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 567.473690][ T29] audit: type=1400 audit(1792669628.229:1239): avc: denied { write } for pid=11471 comm="syz.5.1766" name="/" dev="ocfs2_dlmfs" ino=33432 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 567.910138][T11486] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1769'. [ 568.435011][ T5705] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 568.583628][ T5705] usb 8-1: Using ep0 maxpacket: 8 [ 568.584105][ T5705] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 568.585088][ T5705] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 568.585116][ T5705] usb 8-1: config 0 has no interface number 0 [ 568.585159][ T5705] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 568.585185][ T5705] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 568.585211][ T5705] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 568.585238][ T5705] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 568.585276][ T5705] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.685930][ T5705] usb 8-1: config 0 descriptor?? [ 568.703833][ T5705] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 569.210392][T11496] FAULT_INJECTION: forcing a failure. [ 569.210392][T11496] name fail_futex, interval 1, probability 0, space 0, times 0 [ 569.210432][T11496] CPU: 0 UID: 0 PID: 11496 Comm: syz.5.1768 Tainted: G L syzkaller #0 PREEMPT(full) [ 569.210464][T11496] Tainted: [L]=SOFTLOCKUP [ 569.210471][T11496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 569.210482][T11496] Call Trace: [ 569.210488][T11496] [ 569.210497][T11496] dump_stack_lvl+0x100/0x190 [ 569.210534][T11496] should_fail_ex.cold+0x5/0xa [ 569.210565][T11496] get_futex_key+0x1c9/0x13e0 [ 569.210598][T11496] ? __pfx_get_futex_key+0x10/0x10 [ 569.210634][T11496] futex_wake+0xf4/0x5e0 [ 569.210670][T11496] ? __pfx_futex_wake+0x10/0x10 [ 569.210705][T11496] ? percpu_counter_add_batch+0xb9/0x230 [ 569.210730][T11496] ? errseq_sample+0x51/0x70 [ 569.210763][T11496] ? file_init_path+0x48e/0x670 [ 569.210805][T11496] do_futex+0x2b2/0x440 [ 569.210837][T11496] ? __pfx_do_futex+0x10/0x10 [ 569.210865][T11496] ? fd_install+0x223/0x580 [ 569.210899][T11496] __x64_sys_futex+0x34f/0x4d0 [ 569.210931][T11496] ? __sys_socket+0xac/0x260 [ 569.210965][T11496] ? fput+0x7c/0x100 [ 569.210997][T11496] ? __pfx___x64_sys_futex+0x10/0x10 [ 569.211024][T11496] ? ksys_write+0x1ac/0x250 [ 569.211046][T11496] ? __pfx_ksys_write+0x10/0x10 [ 569.211095][T11496] do_syscall_64+0x123/0x790 [ 569.211137][T11496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.211161][T11496] RIP: 0033:0x7fb08499f559 [ 569.211180][T11496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 569.211204][T11496] RSP: 002b:00007fb0857d90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 569.211228][T11496] RAX: ffffffffffffffda RBX: 00007fb084c25fa8 RCX: 00007fb08499f559 [ 569.211245][T11496] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb084c25fac [ 569.211260][T11496] RBP: 00007fb084c25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 569.211275][T11496] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 569.211290][T11496] R13: 00007fb084c26038 R14: 00007ffd0c368c40 R15: 00007ffd0c368d28 [ 569.211322][T11496] [ 570.151069][ T29] audit: type=1400 audit(1792669631.689:1240): avc: denied { mounton } for pid=11511 comm="syz.2.1778" path="/455/file0" dev="tmpfs" ino=2469 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 570.151624][T11512] fuse: fd is not a fuse device [ 570.948645][ T5705] usb 8-1: USB disconnect, device number 2 [ 570.962688][ T5705] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 570.976128][ T29] audit: type=1326 audit(1792669632.519:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11513 comm="syz.2.1779" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0d82b9f559 code=0x0 [ 571.743378][T11520] FAULT_INJECTION: forcing a failure. [ 571.743378][T11520] name failslab, interval 1, probability 0, space 0, times 0 [ 571.743403][T11520] CPU: 1 UID: 0 PID: 11520 Comm: syz.7.1781 Tainted: G L syzkaller #0 PREEMPT(full) [ 571.743422][T11520] Tainted: [L]=SOFTLOCKUP [ 571.743426][T11520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 571.743435][T11520] Call Trace: [ 571.743439][T11520] [ 571.743444][T11520] dump_stack_lvl+0x100/0x190 [ 571.743470][T11520] should_fail_ex.cold+0x5/0xa [ 571.743493][T11520] should_failslab+0xc2/0x120 [ 571.743522][T11520] __kmalloc_cache_noprof+0x91/0x6d0 [ 571.743543][T11520] ? kmem_cache_alloc_node_noprof+0x2eb/0x6e0 [ 571.743570][T11520] ? blk_alloc_queue_stats+0x3f/0x110 [ 571.743603][T11520] blk_alloc_queue_stats+0x3f/0x110 [ 571.743629][T11520] blk_alloc_queue+0xda/0x790 [ 571.743662][T11520] __blk_alloc_disk+0xa0/0x170 [ 571.743687][T11520] ? __pfx___blk_alloc_disk+0x10/0x10 [ 571.743709][T11520] ? __pfx___debug_object_init+0x10/0x10 [ 571.743750][T11520] ? lockdep_init_map_type+0x5c/0x250 [ 571.743775][T11520] ? lockdep_init_map_type+0x5c/0x250 [ 571.743804][T11520] dm_create+0x5e8/0x1530 [ 571.743838][T11520] dev_create+0x121/0x2a0 [ 571.743869][T11520] ? __pfx_dev_create+0x10/0x10 [ 571.743905][T11520] ctl_ioctl+0x4d2/0xcc0 [ 571.743937][T11520] ? __pfx_dev_create+0x10/0x10 [ 571.743970][T11520] ? __pfx_ctl_ioctl+0x10/0x10 [ 571.744036][T11520] ? selinux_file_ioctl+0x1e0/0x290 [ 571.744071][T11520] dm_ctl_ioctl+0x22/0x30 [ 571.744100][T11520] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 571.744128][T11520] __x64_sys_ioctl+0x18e/0x210 [ 571.744157][T11520] do_syscall_64+0x123/0x790 [ 571.744195][T11520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.744220][T11520] RIP: 0033:0x7f6f6f19f559 [ 571.744240][T11520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 571.744262][T11520] RSP: 002b:00007f6f7000e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 571.744285][T11520] RAX: ffffffffffffffda RBX: 00007f6f6f425fa0 RCX: 00007f6f6f19f559 [ 571.744301][T11520] RDX: 00002000000018c0 RSI: 00000000c138fd03 RDI: 0000000000000004 [ 571.744324][T11520] RBP: 00007f6f6f236b20 R08: 0000000000000000 R09: 0000000000000000 [ 571.744339][T11520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 571.744353][T11520] R13: 00007f6f6f426038 R14: 00007f6f6f425fa0 R15: 00007ffec09b1148 [ 571.744387][T11520] [ 572.161033][T11527] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1785'. [ 572.230586][T11529] FAULT_INJECTION: forcing a failure. [ 572.230586][T11529] name fail_futex, interval 1, probability 0, space 0, times 0 [ 572.230624][T11529] CPU: 1 UID: 0 PID: 11529 Comm: syz.7.1786 Tainted: G L syzkaller #0 PREEMPT(full) [ 572.230655][T11529] Tainted: [L]=SOFTLOCKUP [ 572.230662][T11529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 572.230674][T11529] Call Trace: [ 572.230681][T11529] [ 572.230689][T11529] dump_stack_lvl+0x100/0x190 [ 572.230730][T11529] should_fail_ex.cold+0x5/0xa [ 572.230764][T11529] get_futex_key+0x1c9/0x13e0 [ 572.230797][T11529] ? __pfx_get_futex_key+0x10/0x10 [ 572.230835][T11529] futex_wait_setup+0x91/0x540 [ 572.230879][T11529] __futex_wait+0x19f/0x360 [ 572.230916][T11529] ? __pfx___futex_wait+0x10/0x10 [ 572.230948][T11529] ? __pfx_try_to_wake_up+0x10/0x10 [ 572.230971][T11529] ? futex_hash+0x311/0x400 [ 572.231002][T11529] ? __pfx_futex_wake_mark+0x10/0x10 [ 572.231041][T11529] ? find_held_lock+0x2b/0x80 [ 572.231070][T11529] ? futex_wake+0x4ea/0x5e0 [ 572.231110][T11529] futex_wait+0xe6/0x370 [ 572.231130][T11529] ? __pfx_futex_wait+0x10/0x10 [ 572.231169][T11529] ? rcu_read_lock_any_held+0x6a/0x90 [ 572.231200][T11529] ? find_held_lock+0x2b/0x80 [ 572.231228][T11529] ? ksys_write+0x190/0x250 [ 572.231263][T11529] ? ksys_write+0x190/0x250 [ 572.231295][T11529] do_futex+0x265/0x440 [ 572.231326][T11529] ? __pfx_do_futex+0x10/0x10 [ 572.231357][T11529] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 572.231398][T11529] __x64_sys_futex+0x34f/0x4d0 [ 572.231432][T11529] ? fput+0x7c/0x100 [ 572.231462][T11529] ? __pfx___x64_sys_futex+0x10/0x10 [ 572.231490][T11529] ? ksys_write+0x1ac/0x250 [ 572.231515][T11529] ? __pfx_ksys_write+0x10/0x10 [ 572.231549][T11529] do_syscall_64+0x123/0x790 [ 572.231586][T11529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.231608][T11529] RIP: 0033:0x7f6f6f19f559 [ 572.231629][T11529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 572.231650][T11529] RSP: 002b:00007f6f7000e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 572.231673][T11529] RAX: ffffffffffffffda RBX: 00007f6f6f425fa8 RCX: 00007f6f6f19f559 [ 572.231688][T11529] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6f6f425fa8 [ 572.231703][T11529] RBP: 00007f6f6f425fa0 R08: 0000000000000000 R09: 0000000000000000 [ 572.231717][T11529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 572.231731][T11529] R13: 00007f6f6f426038 R14: 00007ffec09b1060 R15: 00007ffec09b1148 [ 572.231761][T11529] [ 572.459254][T11529] rxe_eth0 speed is unknown, defaulting to 1000 [ 572.748807][T11538] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 574.826670][ T29] audit: type=1400 audit(1792669636.369:1242): avc: denied { getopt } for pid=11572 comm="syz.5.1803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 574.949998][T11578] overlay: Unknown parameter 'smackfstransmute' [ 574.978980][T11580] FAULT_INJECTION: forcing a failure. [ 574.978980][T11580] name failslab, interval 1, probability 0, space 0, times 0 [ 574.979022][T11580] CPU: 1 UID: 0 PID: 11580 Comm: syz.6.1805 Tainted: G L syzkaller #0 PREEMPT(full) [ 574.979056][T11580] Tainted: [L]=SOFTLOCKUP [ 574.979065][T11580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 574.979080][T11580] Call Trace: [ 574.979088][T11580] [ 574.979098][T11580] dump_stack_lvl+0x100/0x190 [ 574.979140][T11580] should_fail_ex.cold+0x5/0xa [ 574.979174][T11580] should_failslab+0xc2/0x120 [ 574.979205][T11580] __kvmalloc_node_noprof+0x113/0x9b0 [ 574.979237][T11580] ? vmemdup_user+0x2a/0xe0 [ 574.979266][T11580] vmemdup_user+0x2a/0xe0 [ 574.979290][T11580] path_setxattrat+0x29e/0x3b0 [ 574.979327][T11580] ? __pfx_path_setxattrat+0x10/0x10 [ 574.979365][T11580] ? ksys_write+0x190/0x250 [ 574.979390][T11580] ? ksys_write+0x190/0x250 [ 574.979440][T11580] ? fput+0x7c/0x100 [ 574.979470][T11580] ? __pfx___x64_sys_futex+0x10/0x10 [ 574.979501][T11580] ? ksys_write+0x1ac/0x250 [ 574.979533][T11580] __x64_sys_setxattr+0xc6/0x140 [ 574.979577][T11580] ? do_syscall_64+0xae/0x790 [ 574.979614][T11580] ? lockdep_hardirqs_on+0x7d/0x110 [ 574.979649][T11580] do_syscall_64+0x123/0x790 [ 574.979686][T11580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.979711][T11580] RIP: 0033:0x7f07fef9f559 [ 574.979730][T11580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 574.979753][T11580] RSP: 002b:00007f07ffd87028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 574.979776][T11580] RAX: ffffffffffffffda RBX: 00007f07ff225fa0 RCX: 00007f07fef9f559 [ 574.979791][T11580] RDX: 0000200000000280 RSI: 0000200000000180 RDI: 0000000000000000 [ 574.979806][T11580] RBP: 00007f07ff036b20 R08: 0000000000000001 R09: 0000000000000000 [ 574.979820][T11580] R10: 0000000000000031 R11: 0000000000000246 R12: 0000000000000000 [ 574.979833][T11580] R13: 00007f07ff226038 R14: 00007f07ff225fa0 R15: 00007fff040a9d58 [ 574.979864][T11580] [ 575.173692][ T5728] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 575.236222][T11585] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 575.326991][ T5728] usb 8-1: Using ep0 maxpacket: 8 [ 575.330797][ T5728] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 575.331898][ T5728] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 575.331925][ T5728] usb 8-1: config 0 has no interface number 0 [ 575.331960][ T5728] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 575.331987][ T5728] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 575.332015][ T5728] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 575.332043][ T5728] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 575.332082][ T5728] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.411977][ T5728] usb 8-1: config 0 descriptor?? [ 575.437540][ T5728] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 576.188421][ T29] audit: type=1400 audit(1792669637.729:1243): avc: denied { audit_write } for pid=11617 comm="syz.2.1822" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 576.241377][ T29] audit: type=1400 audit(1792669637.779:1244): avc: denied { watch watch_reads } for pid=11617 comm="syz.2.1822" path="/sys" dev="proc" ino=4026531854 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_t tclass=dir permissive=1 [ 577.829490][ T5729] usb 8-1: USB disconnect, device number 3 [ 577.854727][T11638] o2cb: This node has not been configured. [ 577.854741][T11638] o2cb: Cluster check failed. Fix errors before retrying. [ 577.854770][ T29] audit: type=1400 audit(1792669639.399:1245): avc: denied { write } for pid=11637 comm="syz.5.1828" name="/" dev="ocfs2_dlmfs" ino=33682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 577.868443][ T5729] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 577.919777][T11638] (syz.5.1828,11638,1):user_dlm_register:674 ERROR: status = -22 [ 577.921857][T11638] (syz.5.1828,11638,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 579.266131][ T9885] block nbd0: Possible stuck request ffff8880299b7000: control (read@0,1024B). Runtime 120 seconds [ 579.266251][ T9885] block nbd0: Possible stuck request ffff8880299b71c0: control (read@1024,2048B). Runtime 120 seconds [ 579.266354][ T9885] block nbd0: Possible stuck request ffff8880299b7380: control (read@3072,1024B). Runtime 120 seconds [ 579.897387][T11664] FAULT_INJECTION: forcing a failure. [ 579.897387][T11664] name failslab, interval 1, probability 0, space 0, times 0 [ 579.897433][T11664] CPU: 1 UID: 0 PID: 11664 Comm: syz.6.1839 Tainted: G L syzkaller #0 PREEMPT(full) [ 579.897469][T11664] Tainted: [L]=SOFTLOCKUP [ 579.897477][T11664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 579.897492][T11664] Call Trace: [ 579.897500][T11664] [ 579.897510][T11664] dump_stack_lvl+0x100/0x190 [ 579.897552][T11664] should_fail_ex.cold+0x5/0xa [ 579.897588][T11664] should_failslab+0xc2/0x120 [ 579.897622][T11664] __kmalloc_cache_noprof+0x91/0x6d0 [ 579.897648][T11664] ? init_srcu_struct_fields+0xa67/0xfa0 [ 579.897681][T11664] init_srcu_struct_fields+0xa67/0xfa0 [ 579.897712][T11664] dm_create+0x2a6/0x1530 [ 579.897747][T11664] dev_create+0x121/0x2a0 [ 579.897782][T11664] ? __pfx_dev_create+0x10/0x10 [ 579.897825][T11664] ctl_ioctl+0x4d2/0xcc0 [ 579.897858][T11664] ? __pfx_dev_create+0x10/0x10 [ 579.897892][T11664] ? __pfx_ctl_ioctl+0x10/0x10 [ 579.897953][T11664] ? selinux_file_ioctl+0x1e0/0x290 [ 579.897991][T11664] dm_ctl_ioctl+0x22/0x30 [ 579.898019][T11664] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 579.898048][T11664] __x64_sys_ioctl+0x18e/0x210 [ 579.898074][T11664] do_syscall_64+0x123/0x790 [ 579.898107][T11664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.898128][T11664] RIP: 0033:0x7f07fef9f559 [ 579.898144][T11664] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 579.898164][T11664] RSP: 002b:00007f07ffd87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 579.898186][T11664] RAX: ffffffffffffffda RBX: 00007f07ff225fa0 RCX: 00007f07fef9f559 [ 579.898199][T11664] RDX: 00002000000018c0 RSI: 00000000c138fd03 RDI: 0000000000000004 [ 579.898211][T11664] RBP: 00007f07ff036b20 R08: 0000000000000000 R09: 0000000000000000 [ 579.898223][T11664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 579.898234][T11664] R13: 00007f07ff226038 R14: 00007f07ff225fa0 R15: 00007fff040a9d58 [ 579.898262][T11664] [ 580.256833][T11670] bond1: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 580.274324][T11670] bond1 (unregistering): Released all slaves [ 580.589495][T11679] netlink: 'syz.6.1844': attribute type 1 has an invalid length. [ 581.188980][ T29] audit: type=1400 audit(1792669642.729:1246): avc: denied { write } for pid=11675 comm="syz.2.1843" name="/" dev="ocfs2_dlmfs" ino=33740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 581.190108][T11676] o2cb: This node has not been configured. [ 581.190117][T11676] o2cb: Cluster check failed. Fix errors before retrying. [ 581.190400][T11676] (syz.2.1843,11676,1):user_dlm_register:674 ERROR: status = -22 [ 581.190428][T11676] (syz.2.1843,11676,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 581.199729][T11679] 8021q: adding VLAN 0 to HW filter on device bond1 [ 581.216295][T11684] bond1: (slave gretap1): making interface the new active one [ 581.218741][T11684] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 581.318067][T11686] #: renamed from lo (while UP) [ 581.514047][T11694] x_tables: duplicate entry at hook 2 [ 582.416483][ T29] audit: type=1400 audit(1792669643.959:1247): avc: denied { name_bind } for pid=11703 comm="syz.5.1854" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 583.650161][T11727] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1863'. [ 583.728698][T11727] hsr_slave_1 (unregistering): left promiscuous mode [ 583.991515][T11752] FAULT_INJECTION: forcing a failure. [ 583.991515][T11752] name failslab, interval 1, probability 0, space 0, times 0 [ 583.991607][T11752] CPU: 1 UID: 0 PID: 11752 Comm: syz.5.1872 Tainted: G L syzkaller #0 PREEMPT(full) [ 583.991640][T11752] Tainted: [L]=SOFTLOCKUP [ 583.991649][T11752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 583.991663][T11752] Call Trace: [ 583.991670][T11752] [ 583.991679][T11752] dump_stack_lvl+0x100/0x190 [ 583.991722][T11752] should_fail_ex.cold+0x5/0xa [ 583.991757][T11752] should_failslab+0xc2/0x120 [ 583.991789][T11752] kmem_cache_alloc_noprof+0x92/0x6a0 [ 583.991818][T11752] ? security_file_alloc+0x34/0x2c0 [ 583.991857][T11752] security_file_alloc+0x34/0x2c0 [ 583.991890][T11752] init_file+0x95/0x480 [ 583.991930][T11752] alloc_empty_file+0x79/0x1c0 [ 583.991972][T11752] path_openat+0xd6/0x23f0 [ 583.992004][T11752] ? __pfx_path_openat+0x10/0x10 [ 583.992038][T11752] do_file_open+0x20e/0x430 [ 583.992068][T11752] ? __pfx_do_file_open+0x10/0x10 [ 583.992123][T11752] ? _raw_spin_unlock+0x28/0x50 [ 583.992151][T11752] ? alloc_fd+0x471/0x7a0 [ 583.992186][T11752] do_sys_openat2+0x163/0x1d0 [ 583.992214][T11752] ? __pfx_do_sys_openat2+0x10/0x10 [ 583.992243][T11752] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 583.992285][T11752] __x64_sys_openat+0x12d/0x210 [ 583.992318][T11752] ? __pfx___x64_sys_openat+0x10/0x10 [ 583.992359][T11752] do_syscall_64+0x123/0x790 [ 583.992395][T11752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.992417][T11752] RIP: 0033:0x7fb08499f559 [ 583.992435][T11752] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 583.992457][T11752] RSP: 002b:00007fb0857d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 583.992480][T11752] RAX: ffffffffffffffda RBX: 00007fb084c25fa0 RCX: 00007fb08499f559 [ 583.992497][T11752] RDX: 0000000000042000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 583.992511][T11752] RBP: 00007fb084a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 583.992525][T11752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 583.992539][T11752] R13: 00007fb084c26038 R14: 00007fb084c25fa0 R15: 00007ffd0c368d28 [ 583.992577][T11752] [ 584.033602][T11753] FAULT_INJECTION: forcing a failure. [ 584.033602][T11753] name failslab, interval 1, probability 0, space 0, times 0 [ 584.033639][T11753] CPU: 0 UID: 0 PID: 11753 Comm: syz.6.1871 Tainted: G L syzkaller #0 PREEMPT(full) [ 584.033671][T11753] Tainted: [L]=SOFTLOCKUP [ 584.033680][T11753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 584.033694][T11753] Call Trace: [ 584.033702][T11753] [ 584.033710][T11753] dump_stack_lvl+0x100/0x190 [ 584.033751][T11753] should_fail_ex.cold+0x5/0xa [ 584.033787][T11753] should_failslab+0xc2/0x120 [ 584.033818][T11753] __kvmalloc_node_noprof+0x113/0x9b0 [ 584.033849][T11753] ? xt_alloc_entry_offsets+0x42/0x60 [ 584.033886][T11753] xt_alloc_entry_offsets+0x42/0x60 [ 584.033916][T11753] translate_table+0x22f/0x1770 [ 584.033949][T11753] ? lock_acquire+0x1d1/0x380 [ 584.033971][T11753] ? __might_fault+0xc5/0x140 [ 584.034005][T11753] ? find_held_lock+0x2b/0x80 [ 584.034039][T11753] ? __pfx_translate_table+0x10/0x10 [ 584.034077][T11753] do_ip6t_set_ctl+0x689/0xd00 [ 584.034105][T11753] ? nf_sockopt_find.isra.0+0x222/0x290 [ 584.034133][T11753] ? nf_sockopt_find.isra.0+0x222/0x290 [ 584.034165][T11753] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 584.034194][T11753] ? __mutex_unlock_slowpath+0x35d/0x930 [ 584.034235][T11753] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 584.034284][T11753] ? nf_sockopt_find.isra.0+0x222/0x290 [ 584.034316][T11753] nf_setsockopt+0x8d/0xf0 [ 584.034347][T11753] ipv6_setsockopt+0x135/0x170 [ 584.034381][T11753] rawv6_setsockopt+0xee/0x5a0 [ 584.034409][T11753] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 584.034442][T11753] ? selinux_socket_setsockopt+0x6a/0x80 [ 584.034479][T11753] ? sock_common_setsockopt+0x2e/0xf0 [ 584.034512][T11753] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 584.034548][T11753] do_sock_setsockopt+0xf3/0x1d0 [ 584.034582][T11753] __sys_setsockopt+0x195/0x220 [ 584.034614][T11753] __x64_sys_setsockopt+0xbd/0x160 [ 584.034637][T11753] ? do_syscall_64+0xae/0x790 [ 584.034670][T11753] ? lockdep_hardirqs_on+0x7d/0x110 [ 584.034702][T11753] do_syscall_64+0x123/0x790 [ 584.034739][T11753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.034762][T11753] RIP: 0033:0x7f07fef9f559 [ 584.034782][T11753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 584.034802][T11753] RSP: 002b:00007f07ffd87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 584.034823][T11753] RAX: ffffffffffffffda RBX: 00007f07ff225fa0 RCX: 00007f07fef9f559 [ 584.034839][T11753] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000005 [ 584.034852][T11753] RBP: 00007f07ff036b20 R08: 00000000000003d0 R09: 0000000000000000 [ 584.034866][T11753] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000000 [ 584.034881][T11753] R13: 00007f07ff226038 R14: 00007f07ff225fa0 R15: 00007fff040a9d58 [ 584.034912][T11753] [ 585.172184][T11762] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1875'. [ 585.632132][T11775] FAULT_INJECTION: forcing a failure. [ 585.632132][T11775] name failslab, interval 1, probability 0, space 0, times 0 [ 585.632172][T11775] CPU: 1 UID: 0 PID: 11775 Comm: syz.0.1880 Tainted: G L syzkaller #0 PREEMPT(full) [ 585.632207][T11775] Tainted: [L]=SOFTLOCKUP [ 585.632217][T11775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 585.632231][T11775] Call Trace: [ 585.632239][T11775] [ 585.632247][T11775] dump_stack_lvl+0x100/0x190 [ 585.632287][T11775] should_fail_ex.cold+0x5/0xa [ 585.632314][T11775] should_failslab+0xc2/0x120 [ 585.632343][T11775] kmem_cache_alloc_noprof+0x92/0x6a0 [ 585.632368][T11775] ? mempool_init_node+0x2f7/0x6f0 [ 585.632393][T11775] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 585.632414][T11775] mempool_init_node+0x2f7/0x6f0 [ 585.632447][T11775] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 585.632467][T11775] ? __pfx_mempool_free_slab+0x10/0x10 [ 585.632495][T11775] mempool_init_noprof+0x3a/0x50 [ 585.632516][T11775] bioset_init+0x37e/0x8a0 [ 585.632557][T11775] ? __pfx_bioset_init+0x10/0x10 [ 585.632580][T11775] ? kasan_save_track+0x14/0x30 [ 585.632608][T11775] ? __kasan_kmalloc+0xaa/0xb0 [ 585.632637][T11775] ? __kmalloc_cache_node_noprof+0x30c/0x710 [ 585.632668][T11775] ? __alloc_disk_node+0x5a/0x6b0 [ 585.632699][T11775] __alloc_disk_node+0x83/0x6b0 [ 585.632730][T11775] __blk_alloc_disk+0xd2/0x170 [ 585.632755][T11775] ? __pfx___blk_alloc_disk+0x10/0x10 [ 585.632780][T11775] ? __pfx___debug_object_init+0x10/0x10 [ 585.632824][T11775] ? lockdep_init_map_type+0x5c/0x250 [ 585.632851][T11775] ? lockdep_init_map_type+0x5c/0x250 [ 585.632882][T11775] dm_create+0x5e8/0x1530 [ 585.632918][T11775] dev_create+0x121/0x2a0 [ 585.632951][T11775] ? __pfx_dev_create+0x10/0x10 [ 585.632993][T11775] ctl_ioctl+0x4d2/0xcc0 [ 585.633026][T11775] ? __pfx_dev_create+0x10/0x10 [ 585.633060][T11775] ? __pfx_ctl_ioctl+0x10/0x10 [ 585.633127][T11775] ? selinux_file_ioctl+0x1e0/0x290 [ 585.633163][T11775] dm_ctl_ioctl+0x22/0x30 [ 585.633191][T11775] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 585.633221][T11775] __x64_sys_ioctl+0x18e/0x210 [ 585.633250][T11775] do_syscall_64+0x123/0x790 [ 585.633291][T11775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.633317][T11775] RIP: 0033:0x7f7593f9f559 [ 585.633337][T11775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 585.633361][T11775] RSP: 002b:00007f75921f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 585.633385][T11775] RAX: ffffffffffffffda RBX: 00007f7594225fa0 RCX: 00007f7593f9f559 [ 585.633402][T11775] RDX: 00002000000018c0 RSI: 00000000c138fd03 RDI: 0000000000000004 [ 585.633418][T11775] RBP: 00007f7594036b20 R08: 0000000000000000 R09: 0000000000000000 [ 585.633439][T11775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 585.633455][T11775] R13: 00007f7594226038 R14: 00007f7594225fa0 R15: 00007ffe15d67e38 [ 585.633490][T11775] [ 585.951560][T11784] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 586.901950][T11796] FAULT_INJECTION: forcing a failure. [ 586.901950][T11796] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 586.901989][T11796] CPU: 1 UID: 0 PID: 11796 Comm: syz.5.1890 Tainted: G L syzkaller #0 PREEMPT(full) [ 586.902021][T11796] Tainted: [L]=SOFTLOCKUP [ 586.902028][T11796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 586.902041][T11796] Call Trace: [ 586.902049][T11796] [ 586.902059][T11796] dump_stack_lvl+0x100/0x190 [ 586.902099][T11796] should_fail_ex.cold+0x5/0xa [ 586.902129][T11796] _copy_to_user+0x32/0xd0 [ 586.902185][T11796] bpf_verifier_vlog+0x496/0x6d0 [ 586.902229][T11796] __btf_verifier_log+0xc3/0x100 [ 586.902263][T11796] ? __pfx___btf_verifier_log+0x10/0x10 [ 586.902303][T11796] ? bpf_verifier_vlog+0x19d/0x6d0 [ 586.902346][T11796] btf_verifier_log_vsi+0x268/0x4b0 [ 586.902373][T11796] ? __pfx_btf_verifier_log_vsi+0x10/0x10 [ 586.902406][T11796] ? __pfx_sort+0x10/0x10 [ 586.902437][T11796] ? __pfx_btf_sec_info_cmp+0x10/0x10 [ 586.902482][T11796] btf_datasec_check_meta+0x653/0x8c0 [ 586.902518][T11796] btf_check_all_metas+0x3b6/0x9d0 [ 586.902556][T11796] ? btf_parse_str_sec+0x23c/0x3a0 [ 586.902591][T11796] btf_new_fd+0xa90/0x38f0 [ 586.902625][T11796] ? cred_has_capability.isra.0+0x186/0x300 [ 586.902652][T11796] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 586.902686][T11796] ? __pfx_btf_new_fd+0x10/0x10 [ 586.902716][T11796] ? rcu_is_watching+0x13/0xc0 [ 586.902743][T11796] ? cap_capable+0x107/0x430 [ 586.902768][T11796] ? bpf_lsm_capable+0x9/0x10 [ 586.902798][T11796] ? security_capable+0x80/0x260 [ 586.902824][T11796] ? ns_capable+0xcd/0xf0 [ 586.902859][T11796] __sys_bpf+0x13ef/0x4a30 [ 586.902889][T11796] ? __pfx___sys_bpf+0x10/0x10 [ 586.902910][T11796] ? find_held_lock+0x2b/0x80 [ 586.902941][T11796] ? futex_wake+0x4ea/0x5e0 [ 586.902994][T11796] ? rcu_read_lock_any_held+0x6a/0x90 [ 586.903024][T11796] ? find_held_lock+0x2b/0x80 [ 586.903053][T11796] ? ksys_write+0x190/0x250 [ 586.903078][T11796] ? ksys_write+0x190/0x250 [ 586.903121][T11796] ? __x64_sys_futex+0x34f/0x4d0 [ 586.903148][T11796] ? __x64_sys_futex+0x358/0x4d0 [ 586.903191][T11796] ? xfd_validate_state+0x129/0x190 [ 586.903224][T11796] ? __x64_sys_bpf+0xce/0x140 [ 586.903248][T11796] __x64_sys_bpf+0xce/0x140 [ 586.903272][T11796] ? do_syscall_64+0xae/0x790 [ 586.903309][T11796] do_syscall_64+0x123/0x790 [ 586.903348][T11796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.903370][T11796] RIP: 0033:0x7fb08499f559 [ 586.903375][ T29] audit: type=1400 audit(1792669648.439:1248): avc: denied { ioctl } for pid=11794 comm="syz.6.1889" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x40089413 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 586.903398][T11796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 586.903422][T11796] RSP: 002b:00007fb0857d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 586.903444][T11796] RAX: ffffffffffffffda RBX: 00007fb084c25fa0 RCX: 00007fb08499f559 [ 586.903460][T11796] RDX: 0000000000000028 RSI: 0000200000001380 RDI: 0000000000000012 [ 586.903475][T11796] RBP: 00007fb084a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 586.903488][T11796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 586.903502][T11796] R13: 00007fb084c26038 R14: 00007fb084c25fa0 R15: 00007ffd0c368d28 [ 586.903529][T11796] [ 587.748879][ T4931] block nbd7: Possible stuck request ffff888029bc5080: control (read@0,1024B). Runtime 30 seconds [ 587.748920][ T4931] block nbd7: Possible stuck request ffff888029bc5240: control (read@1024,1024B). Runtime 30 seconds [ 587.748947][ T4931] block nbd7: Possible stuck request ffff888029bc5400: control (read@2048,1024B). Runtime 30 seconds [ 587.748972][ T4931] block nbd7: Possible stuck request ffff888029bc55c0: control (read@3072,1024B). Runtime 30 seconds [ 588.063421][T11818] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 588.976141][T11832] FAULT_INJECTION: forcing a failure. [ 588.976141][T11832] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 588.976181][T11832] CPU: 0 UID: 0 PID: 11832 Comm: syz.6.1901 Tainted: G L syzkaller #0 PREEMPT(full) [ 588.976219][T11832] Tainted: [L]=SOFTLOCKUP [ 588.976228][T11832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 588.976244][T11832] Call Trace: [ 588.976253][T11832] [ 588.976263][T11832] dump_stack_lvl+0x100/0x190 [ 588.976308][T11832] should_fail_ex.cold+0x5/0xa [ 588.976345][T11832] _copy_from_iter+0x1f4/0x1690 [ 588.976385][T11832] ? __asan_memset+0x23/0x50 [ 588.976414][T11832] ? __pfx__copy_from_iter+0x10/0x10 [ 588.976449][T11832] ? __pfx___alloc_skb+0x10/0x10 [ 588.976492][T11832] netlink_sendmsg+0x8f5/0x10c0 [ 588.976525][T11832] ? __pfx_netlink_sendmsg+0x10/0x10 [ 588.976561][T11832] ? selinux_socket_sendmsg+0x198/0x2f0 [ 588.976595][T11832] ? ____sys_sendmsg+0xa4d/0xbe0 [ 588.976630][T11832] ____sys_sendmsg+0xa4d/0xbe0 [ 588.976662][T11832] ? __pfx_netlink_sendmsg+0x10/0x10 [ 588.976693][T11832] ? __pfx_____sys_sendmsg+0x10/0x10 [ 588.976743][T11832] ___sys_sendmsg+0x190/0x1e0 [ 588.976783][T11832] ? __pfx____sys_sendmsg+0x10/0x10 [ 588.976820][T11832] ? futex_wait+0x11e/0x370 [ 588.976856][T11832] ? find_held_lock+0x2b/0x80 [ 588.976920][T11832] __sys_sendmsg+0x160/0x210 [ 588.976953][T11832] ? __pfx___sys_sendmsg+0x10/0x10 [ 588.977004][T11832] do_syscall_64+0x123/0x790 [ 588.977045][T11832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.977073][T11832] RIP: 0033:0x7f07fef9f559 [ 588.977096][T11832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 588.977120][T11832] RSP: 002b:00007f07ffd87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 588.977145][T11832] RAX: ffffffffffffffda RBX: 00007f07ff225fa0 RCX: 00007f07fef9f559 [ 588.977163][T11832] RDX: 0000000020040084 RSI: 0000200000000180 RDI: 0000000000000004 [ 588.977180][T11832] RBP: 00007f07ff036b20 R08: 0000000000000000 R09: 0000000000000000 [ 588.977198][T11832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 588.977214][T11832] R13: 00007f07ff226038 R14: 00007f07ff225fa0 R15: 00007fff040a9d58 [ 588.977249][T11832] [ 590.999564][ T29] audit: type=1400 audit(1792669652.539:1249): avc: denied { write } for pid=11861 comm="syz.6.1914" name="rtc0" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 591.933344][ T29] audit: type=1400 audit(1792669653.469:1250): avc: denied { mounton } for pid=11884 comm="syz.7.1920" path="/syzcgroup/unified/syz7" dev="cgroup2" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 592.599701][T11892] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 593.641625][ T29] audit: type=1326 audit(1792669655.179:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11905 comm="syz.0.1930" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7593f9f559 code=0x0 [ 593.989160][ T4931] block nbd5: Possible stuck request ffff888029b17000: control (read@0,1024B). Runtime 120 seconds [ 593.989206][ T4931] block nbd5: Possible stuck request ffff888029b171c0: control (read@1024,1024B). Runtime 120 seconds [ 593.989227][ T4931] block nbd5: Possible stuck request ffff888029b17380: control (read@2048,1024B). Runtime 120 seconds [ 593.989242][ T4931] block nbd5: Possible stuck request ffff888029b17540: control (read@3072,1024B). Runtime 120 seconds [ 593.991853][T11920] bonding: bond0 is being deleted... [ 595.281789][T11920] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 595.305118][T11928] netlink: 'syz.6.1940': attribute type 1 has an invalid length. [ 595.321430][T11930] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 595.426917][T11920] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 595.431012][T11920] bond0 (unregistering): Released all slaves [ 595.630748][T11928] 8021q: adding VLAN 0 to HW filter on device bond2 [ 595.671635][T11931] macvlan0: entered promiscuous mode [ 595.671662][T11931] macvlan0: entered allmulticast mode [ 595.680606][T11931] bond2: entered allmulticast mode [ 595.680649][T11931] bond2: entered promiscuous mode [ 595.681413][T11931] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 595.710752][T11931] team0: Port device macvlan0 added [ 597.170481][T11953] FAULT_INJECTION: forcing a failure. [ 597.170481][T11953] name failslab, interval 1, probability 0, space 0, times 0 [ 597.170518][T11953] CPU: 0 UID: 0 PID: 11953 Comm: syz.6.1948 Tainted: G L syzkaller #0 PREEMPT(full) [ 597.170549][T11953] Tainted: [L]=SOFTLOCKUP [ 597.170558][T11953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 597.170572][T11953] Call Trace: [ 597.170580][T11953] [ 597.170591][T11953] dump_stack_lvl+0x100/0x190 [ 597.170635][T11953] should_fail_ex.cold+0x5/0xa [ 597.170672][T11953] should_failslab+0xc2/0x120 [ 597.170705][T11953] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 597.170737][T11953] ? stack_depot_save_flags+0x27/0x9f0 [ 597.170765][T11953] ? kasprintf+0xc7/0x100 [ 597.170806][T11953] kvasprintf+0xbc/0x150 [ 597.170839][T11953] ? __pfx_kvasprintf+0x10/0x10 [ 597.170869][T11953] ? do_syscall_64+0x123/0x790 [ 597.170917][T11953] kasprintf+0xc7/0x100 [ 597.170952][T11953] ? __pfx_kasprintf+0x10/0x10 [ 597.170989][T11953] ? rcu_is_watching+0x13/0xc0 [ 597.171019][T11953] ? trace_contention_end+0x126/0x160 [ 597.171053][T11953] logfc+0x11c/0x4e0 [ 597.171085][T11953] ? __pfx_logfc+0x10/0x10 [ 597.171117][T11953] ? cgroup2_parse_param+0x127/0x2d0 [ 597.171155][T11953] ? __pfx_cgroup2_parse_param+0x10/0x10 [ 597.171199][T11953] vfs_parse_fs_param+0x2ee/0x3b0 [ 597.171226][T11953] __do_sys_fsconfig+0x617/0xcb0 [ 597.171257][T11953] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 597.171303][T11953] do_syscall_64+0x123/0x790 [ 597.171342][T11953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.171367][T11953] RIP: 0033:0x7f07fef9f559 [ 597.171387][T11953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 597.171411][T11953] RSP: 002b:00007f07ffd87028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 597.171434][T11953] RAX: ffffffffffffffda RBX: 00007f07ff225fa0 RCX: 00007f07fef9f559 [ 597.171453][T11953] RDX: 0000200000000440 RSI: 0000000000000002 RDI: 0000000000000003 [ 597.171469][T11953] RBP: 00007f07ff036b20 R08: 0000000000000001 R09: 0000000000000000 [ 597.171483][T11953] R10: 0000200000000480 R11: 0000000000000246 R12: 0000000000000000 [ 597.171498][T11953] R13: 00007f07ff226038 R14: 00007f07ff225fa0 R15: 00007fff040a9d58 [ 597.171532][T11953] [ 598.679204][ T29] audit: type=1326 audit(1792669660.219:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11958 comm="syz.6.1949" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f07fef9f559 code=0x0 [ 599.398532][T11968] nbd: nbd0 already in use [ 600.774463][T11975] FAULT_INJECTION: forcing a failure. [ 600.774463][T11975] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 600.774490][T11975] CPU: 1 UID: 0 PID: 11975 Comm: syz.7.1954 Tainted: G L syzkaller #0 PREEMPT(full) [ 600.774508][T11975] Tainted: [L]=SOFTLOCKUP [ 600.774513][T11975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 600.774522][T11975] Call Trace: [ 600.774527][T11975] [ 600.774533][T11975] dump_stack_lvl+0x100/0x190 [ 600.774560][T11975] should_fail_ex.cold+0x5/0xa [ 600.774580][T11975] _copy_from_user+0x2e/0xd0 [ 600.774598][T11975] generic_map_update_batch+0x51d/0x860 [ 600.774626][T11975] ? __pfx_generic_map_update_batch+0x10/0x10 [ 600.774650][T11975] ? __pfx_generic_map_update_batch+0x10/0x10 [ 600.774669][T11975] bpf_map_do_batch+0x66f/0x6d0 [ 600.774688][T11975] __sys_bpf+0x4ce/0x4a30 [ 600.774706][T11975] ? __pfx___sys_bpf+0x10/0x10 [ 600.774718][T11975] ? find_held_lock+0x2b/0x80 [ 600.774736][T11975] ? futex_wake+0x4ea/0x5e0 [ 600.774776][T11975] ? rcu_read_lock_any_held+0x6a/0x90 [ 600.774796][T11975] ? find_held_lock+0x2b/0x80 [ 600.774815][T11975] ? ksys_write+0x190/0x250 [ 600.774830][T11975] ? ksys_write+0x190/0x250 [ 600.774854][T11975] ? __x64_sys_futex+0x34f/0x4d0 [ 600.774869][T11975] ? __x64_sys_futex+0x358/0x4d0 [ 600.774887][T11975] ? xfd_validate_state+0x129/0x190 [ 600.774904][T11975] ? __x64_sys_bpf+0xce/0x140 [ 600.774916][T11975] __x64_sys_bpf+0xce/0x140 [ 600.774929][T11975] ? do_syscall_64+0xae/0x790 [ 600.774949][T11975] do_syscall_64+0x123/0x790 [ 600.774969][T11975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.774983][T11975] RIP: 0033:0x7f6f6f19f559 [ 600.774994][T11975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 600.775005][T11975] RSP: 002b:00007f6f7000e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 600.775018][T11975] RAX: ffffffffffffffda RBX: 00007f6f6f425fa0 RCX: 00007f6f6f19f559 [ 600.775026][T11975] RDX: 0000000000000038 RSI: 0000200000000240 RDI: 000000000000001a [ 600.775034][T11975] RBP: 00007f6f6f236b20 R08: 0000000000000000 R09: 0000000000000000 [ 600.775042][T11975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 600.775049][T11975] R13: 00007f6f6f426038 R14: 00007f6f6f425fa0 R15: 00007ffec09b1148 [ 600.775067][T11975] [ 602.184506][T11983] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 603.064141][ T29] audit: type=1400 audit(1792669664.599:1253): avc: denied { wake_alarm } for pid=11997 comm="syz.5.1964" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 604.345026][T12020] 8021q: adding VLAN 0 to HW filter on device team0 [ 604.924954][T12039] device-mapper: ioctl: Target spec extends beyond end of parameters [ 604.924972][T12039] device-mapper: ioctl: unable to find target [ 604.965718][T11113] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 604.967615][T11113] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 604.968445][T11113] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 604.969287][T11113] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 604.969829][T11113] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 605.352065][ T29] audit: type=1400 audit(1792669666.889:1254): avc: denied { write } for pid=12065 comm="syz.2.1992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 605.550330][T12081] overlayfs: failed to clone upperpath [ 605.569296][ T29] audit: type=1400 audit(1792669667.109:1255): avc: denied { unmount } for pid=12080 comm="syz.2.1999" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 605.631058][T12070] rxe_eth0 speed is unknown, defaulting to 1000 [ 605.983791][ T29] audit: type=1400 audit(1792669667.529:1256): avc: denied { create } for pid=12098 comm="syz.6.2004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 605.987387][T12044] rxe_eth0 speed is unknown, defaulting to 1000 [ 607.040891][T12044] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.040979][T12044] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.041133][T12044] bridge_slave_0: entered allmulticast mode [ 607.042809][T12044] bridge_slave_0: entered promiscuous mode [ 607.049174][T12044] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.049321][T12044] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.049469][T12044] bridge_slave_1: entered allmulticast mode [ 607.051188][T12044] bridge_slave_1: entered promiscuous mode [ 607.114833][ T5603] Bluetooth: hci3: command tx timeout [ 607.123224][T12135] FAULT_INJECTION: forcing a failure. [ 607.123224][T12135] name failslab, interval 1, probability 0, space 0, times 0 [ 607.123267][T12135] CPU: 1 UID: 0 PID: 12135 Comm: syz.6.2017 Tainted: G L syzkaller #0 PREEMPT(full) [ 607.123299][T12135] Tainted: [L]=SOFTLOCKUP [ 607.123309][T12135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 607.123325][T12135] Call Trace: [ 607.123334][T12135] [ 607.123343][T12135] dump_stack_lvl+0x100/0x190 [ 607.123399][T12135] should_fail_ex.cold+0x5/0xa [ 607.123434][T12135] should_failslab+0xc2/0x120 [ 607.123467][T12135] __kmalloc_noprof+0xfc/0x840 [ 607.123499][T12135] ? lsm_blob_alloc+0x68/0x90 [ 607.123527][T12135] lsm_blob_alloc+0x68/0x90 [ 607.123552][T12135] security_sk_alloc+0x2d/0x290 [ 607.123582][T12135] sk_prot_alloc+0x1d1/0x2a0 [ 607.123615][T12135] sk_alloc+0x36/0xe80 [ 607.123642][T12135] unix_create1+0xa6/0x700 [ 607.123673][T12135] unix_create+0x10f/0x1b0 [ 607.123704][T12135] __sock_create+0x339/0x860 [ 607.123742][T12135] p9_fd_create_unix+0x20a/0x350 [ 607.123776][T12135] ? __pfx_p9_fd_create_unix+0x10/0x10 [ 607.123825][T12135] ? lockdep_init_map_type+0x5c/0x250 [ 607.123856][T12135] p9_client_create+0x563/0xd40 [ 607.123885][T12135] ? __pfx_p9_client_create+0x10/0x10 [ 607.123919][T12135] ? lockdep_init_map_type+0x5c/0x250 [ 607.123953][T12135] ? __raw_spin_lock_init+0x3a/0x110 [ 607.123988][T12135] v9fs_session_init+0x3c/0xdd0 [ 607.124012][T12135] ? v9fs_get_tree+0x9c/0xb50 [ 607.124042][T12135] v9fs_get_tree+0xb8/0xb50 [ 607.124067][T12135] ? rcu_is_watching+0x13/0xc0 [ 607.124097][T12135] ? __pfx_v9fs_get_tree+0x10/0x10 [ 607.124125][T12135] ? bpf_lsm_capable+0x9/0x10 [ 607.124158][T12135] ? security_capable+0x80/0x260 [ 607.124186][T12135] vfs_get_tree+0x92/0x320 [ 607.124222][T12135] path_mount+0x7d0/0x2850 [ 607.124250][T12135] ? __pfx_path_mount+0x10/0x10 [ 607.124271][T12135] ? lockdep_hardirqs_on+0x7d/0x110 [ 607.124308][T12135] ? putname+0xb1/0x110 [ 607.124338][T12135] ? kmem_cache_free+0x127/0x6c0 [ 607.124372][T12135] ? __x64_sys_mount+0x293/0x310 [ 607.124393][T12135] __x64_sys_mount+0x293/0x310 [ 607.124416][T12135] ? __pfx___x64_sys_mount+0x10/0x10 [ 607.124448][T12135] do_syscall_64+0x123/0x790 [ 607.124485][T12135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.124509][T12135] RIP: 0033:0x7f07fef9f559 [ 607.124531][T12135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 607.124554][T12135] RSP: 002b:00007f07ffd87028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 607.124577][T12135] RAX: ffffffffffffffda RBX: 00007f07ff225fa0 RCX: 00007f07fef9f559 [ 607.124593][T12135] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000200000000000 [ 607.124609][T12135] RBP: 00007f07ff036b20 R08: 00002000000000c0 R09: 0000000000000000 [ 607.124625][T12135] R10: 0000000000200880 R11: 0000000000000246 R12: 0000000000000000 [ 607.124640][T12135] R13: 00007f07ff226038 R14: 00007f07ff225fa0 R15: 00007fff040a9d58 [ 607.124673][T12135] [ 607.139601][T12135] 9pnet_fd: p9_fd_create_unix (12135): problem creating socket [ 607.175904][T12044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 607.199537][T12044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 607.613946][T12044] team0: Port device team_slave_0 added [ 607.762012][T12044] team0: Port device team_slave_1 added [ 608.342649][T12044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 608.342669][T12044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 608.342693][T12044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 608.377654][T12044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 608.377672][T12044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 608.377699][T12044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 608.545825][T12044] hsr_slave_0: entered promiscuous mode [ 608.550585][T12044] hsr_slave_1: entered promiscuous mode [ 608.552505][T12044] debugfs: 'hsr0' already exists in 'hsr' [ 608.552528][T12044] Cannot create hsr debugfs directory [ 609.725123][ T5603] Bluetooth: hci3: command tx timeout [ 609.743966][ T9885] block nbd0: Possible stuck request ffff8880299b7000: control (read@0,1024B). Runtime 150 seconds [ 609.744010][ T9885] block nbd0: Possible stuck request ffff8880299b71c0: control (read@1024,2048B). Runtime 150 seconds [ 609.744039][ T9885] block nbd0: Possible stuck request ffff8880299b7380: control (read@3072,1024B). Runtime 150 seconds [ 611.015220][T12044] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 611.023032][T12044] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 611.037990][T12044] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 611.043474][T12044] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 611.056827][T12044] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 611.078444][T12044] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 611.078992][T12044] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 611.111365][T12044] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 611.169381][T12180] team0: left promiscuous mode [ 611.169408][T12180] team_slave_0: left promiscuous mode [ 611.169727][T12180] team_slave_1: left promiscuous mode [ 611.170051][T12180] team0: left allmulticast mode [ 611.170070][T12180] team_slave_0: left allmulticast mode [ 611.170088][T12180] team_slave_1: left allmulticast mode [ 611.247364][T12180] macvlan0: left promiscuous mode [ 611.247389][T12180] bond2: left promiscuous mode [ 611.247566][T12180] macvlan0: left allmulticast mode [ 611.247581][T12180] bond2: left allmulticast mode [ 611.484490][ T29] audit: type=1400 audit(1792669673.029:1257): avc: denied { append } for pid=12197 comm="syz.6.2042" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 611.515943][T12044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 611.560970][T12044] 8021q: adding VLAN 0 to HW filter on device team0 [ 611.581645][T11034] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.581745][T11034] bridge0: port 1(bridge_slave_0) entered forwarding state [ 611.594622][T11034] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.594722][T11034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 611.701913][T12204] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 611.744306][ T5603] Bluetooth: hci3: command tx timeout [ 613.823920][ T5603] Bluetooth: hci3: command tx timeout [ 614.592697][T12044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 614.711299][T12276] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 615.086519][T12044] veth0_vlan: entered promiscuous mode [ 615.106174][T12044] veth1_vlan: entered promiscuous mode [ 615.143530][T12044] veth0_macvtap: entered promiscuous mode [ 615.156429][T12044] veth1_macvtap: entered promiscuous mode [ 615.182923][T12044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 615.195635][T12044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 615.270187][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.272400][T11028] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.272444][T11028] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.272478][T11028] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.365005][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 615.365028][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 615.412387][ T8478] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 615.412409][ T8478] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 615.422025][ T29] audit: type=1400 audit(1792669676.959:1258): avc: denied { watch watch_reads } for pid=12306 comm="syz.6.2081" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 615.574335][T12314] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 615.594157][ T29] audit: type=1326 audit(1792669677.129:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12315 comm="syz.0.2084" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7593f9f559 code=0x0 [ 615.918875][ T29] audit: type=1400 audit(1792669677.459:1260): avc: denied { write } for pid=12338 comm="syz.5.2094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 615.918935][T12340] netlink: 'syz.5.2094': attribute type 2 has an invalid length. [ 615.918953][T12340] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2094'. [ 616.406966][ T29] audit: type=1400 audit(1792669677.949:1261): avc: denied { remount } for pid=12369 comm="syz.8.2107" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 616.545171][T12374] fuse: Bad value for 'fd' [ 616.824018][T12393] ipip0: entered promiscuous mode [ 616.824044][T12393] ipip0: entered allmulticast mode [ 617.009095][ T8473] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.151388][ T8473] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.181041][T12400] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 617.181064][T12400] IPv6: NLM_F_CREATE should be set when creating new route [ 617.288967][T11113] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 617.291149][T12400] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.291612][T12400] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.298212][T11113] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 617.304548][T11113] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 617.319485][T11113] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 617.321204][T11113] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 617.539123][T12400] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 617.559208][T12400] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 617.720278][T12429] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2122'. [ 617.780968][T12432] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2122'. [ 617.925027][T12437] fuse: Bad value for 'fd' [ 617.996487][ T8473] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.045202][ T59] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.055353][T11034] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.057674][ T8480] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.057716][ T8480] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.155622][ T8473] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.305865][ T4931] block nbd7: Possible stuck request ffff888029bc5080: control (read@0,1024B). Runtime 60 seconds [ 618.305906][ T4931] block nbd7: Possible stuck request ffff888029bc5240: control (read@1024,1024B). Runtime 60 seconds [ 618.305932][ T4931] block nbd7: Possible stuck request ffff888029bc5400: control (read@2048,1024B). Runtime 60 seconds [ 618.305958][ T4931] block nbd7: Possible stuck request ffff888029bc55c0: control (read@3072,1024B). Runtime 60 seconds [ 618.508571][T12459] ip_tables: iptables: counters copy to user failed while replacing table [ 618.594570][ T8473] bridge_slave_1: left allmulticast mode [ 618.594598][ T8473] bridge_slave_1: left promiscuous mode [ 618.594793][ T8473] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.641060][ T8473] bridge_slave_0: left allmulticast mode [ 618.641089][ T8473] bridge_slave_0: left promiscuous mode [ 618.641280][ T8473] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.690535][ T29] audit: type=1326 audit(1792669680.229:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12467 comm="syz.0.2136" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7593f9f559 code=0x7ffc0000 [ 618.691500][ T29] audit: type=1326 audit(1792669680.229:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12467 comm="syz.0.2136" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7593f9f559 code=0x7ffc0000 [ 618.691698][ T29] audit: type=1326 audit(1792669680.229:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12467 comm="syz.0.2136" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7593f9f559 code=0x7ffc0000 [ 618.703413][ T29] audit: type=1326 audit(1792669680.239:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12467 comm="syz.0.2136" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7593f9f559 code=0x7ffc0000 [ 618.708652][ T29] audit: type=1326 audit(1792669680.249:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12467 comm="syz.0.2136" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7593f9f559 code=0x7ffc0000 [ 618.708706][ T29] audit: type=1326 audit(1792669680.249:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12467 comm="syz.0.2136" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7593f9f559 code=0x7ffc0000 [ 618.708752][ T29] audit: type=1326 audit(1792669680.249:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12467 comm="syz.0.2136" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7593f9f559 code=0x7ffc0000 [ 618.719267][ T29] audit: type=1326 audit(1792669680.249:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12467 comm="syz.0.2136" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7593f9f559 code=0x7ffc0000 [ 618.719325][ T29] audit: type=1326 audit(1792669680.259:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12467 comm="syz.0.2136" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7593f9f559 code=0x7ffc0000 [ 618.719371][ T29] audit: type=1326 audit(1792669680.259:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12467 comm="syz.0.2136" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7593f9f559 code=0x7ffc0000 [ 619.340227][ T8473] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 619.364097][ T8473] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 619.369942][ T8473] bond0 (unregistering): Released all slaves [ 619.423627][ T5603] Bluetooth: hci3: command tx timeout [ 619.475864][T12403] rxe_eth0 speed is unknown, defaulting to 1000 [ 619.770646][T12509] FAULT_INJECTION: forcing a failure. [ 619.770646][T12509] name failslab, interval 1, probability 0, space 0, times 0 [ 619.770686][T12509] CPU: 0 UID: 0 PID: 12509 Comm: syz.6.2149 Tainted: G L syzkaller #0 PREEMPT(full) [ 619.770720][T12509] Tainted: [L]=SOFTLOCKUP [ 619.770728][T12509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 619.770743][T12509] Call Trace: [ 619.770752][T12509] [ 619.770762][T12509] dump_stack_lvl+0x100/0x190 [ 619.770804][T12509] should_fail_ex.cold+0x5/0xa [ 619.770837][T12509] should_failslab+0xc2/0x120 [ 619.770867][T12509] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 619.770894][T12509] ? selinux_inode_alloc_security+0x104/0x290 [ 619.770926][T12509] ? __d_alloc+0x34/0xad0 [ 619.770963][T12509] __d_alloc+0x34/0xad0 [ 619.770995][T12509] ? __ns_ref_active_get+0x9f/0x1b0 [ 619.771027][T12509] path_from_stashed+0x431/0x760 [ 619.771060][T12509] ns_get_path+0x60/0x80 [ 619.771093][T12509] proc_ns_get_link+0x260/0x2e0 [ 619.771130][T12509] ? __pfx_proc_ns_get_link+0x10/0x10 [ 619.771175][T12509] pick_link+0xd11/0x13c0 [ 619.771200][T12509] ? rcu_is_watching+0x13/0xc0 [ 619.771229][T12509] ? __pfx_proc_ns_get_link+0x10/0x10 [ 619.771266][T12509] step_into_slowpath+0x9ba/0xf90 [ 619.771295][T12509] ? rcu_read_lock_any_held+0x6a/0x90 [ 619.771330][T12509] ? __pfx_step_into_slowpath+0x10/0x10 [ 619.771368][T12509] path_openat+0xcc4/0x23f0 [ 619.771404][T12509] ? __pfx_path_openat+0x10/0x10 [ 619.771441][T12509] do_file_open+0x20e/0x430 [ 619.771476][T12509] ? __pfx_do_file_open+0x10/0x10 [ 619.771526][T12509] ? _raw_spin_unlock+0x28/0x50 [ 619.771559][T12509] ? alloc_fd+0x471/0x7a0 [ 619.771610][T12509] do_sys_openat2+0x163/0x1d0 [ 619.771645][T12509] ? __pfx_do_sys_openat2+0x10/0x10 [ 619.771688][T12509] __x64_sys_openat+0x12d/0x210 [ 619.771721][T12509] ? __pfx___x64_sys_openat+0x10/0x10 [ 619.771769][T12509] do_syscall_64+0x123/0x790 [ 619.771807][T12509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.771832][T12509] RIP: 0033:0x7f07fef5fd8e [ 619.771853][T12509] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 619.771875][T12509] RSP: 002b:00007f07ffd86ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 619.771900][T12509] RAX: ffffffffffffffda RBX: 00007f07ffd876c0 RCX: 00007f07fef5fd8e [ 619.771916][T12509] RDX: 0000000000000002 RSI: 00007f07ffd86f90 RDI: ffffffffffffff9c [ 619.771932][T12509] RBP: 00007f07ff036b20 R08: 0000000000000000 R09: 0000000000000000 [ 619.771946][T12509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 619.771961][T12509] R13: 00007f07ff226038 R14: 00007f07ff225fa0 R15: 00007fff040a9d58 [ 619.771994][T12509] [ 620.963196][ T5264] 8021q: adding VLAN 0 to HW filter on device eth9 [ 621.405679][ T8473] hsr_slave_0: left promiscuous mode [ 621.422740][ T8473] hsr_slave_1: left promiscuous mode [ 621.423932][ T8473] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 621.424142][ T8473] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 621.445026][ T8473] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 621.445049][ T8473] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 621.481697][ T8473] veth1_macvtap: left promiscuous mode [ 621.481734][ T8473] veth0_macvtap: left promiscuous mode [ 621.481845][ T8473] veth1_vlan: left promiscuous mode [ 621.482056][ T8473] veth0_vlan: left promiscuous mode [ 621.504847][ T5603] Bluetooth: hci3: command tx timeout [ 623.218963][ T8473] team0 (unregistering): Port device team_slave_1 removed [ 623.246052][ T8473] team0 (unregistering): Port device team_slave_0 removed [ 623.583849][ T5603] Bluetooth: hci3: command tx timeout [ 623.654942][ T5264] 8021q: adding VLAN 0 to HW filter on device eth10 [ 624.068528][ T4931] block nbd5: Possible stuck request ffff888029b17000: control (read@0,1024B). Runtime 150 seconds [ 624.068573][ T4931] block nbd5: Possible stuck request ffff888029b171c0: control (read@1024,1024B). Runtime 150 seconds [ 624.068600][ T4931] block nbd5: Possible stuck request ffff888029b17380: control (read@2048,1024B). Runtime 150 seconds [ 624.068628][ T4931] block nbd5: Possible stuck request ffff888029b17540: control (read@3072,1024B). Runtime 150 seconds [ 624.068869][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.201941][T12403] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.204188][T12403] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.204331][T12403] bridge_slave_0: entered allmulticast mode [ 624.207889][T12403] bridge_slave_0: entered promiscuous mode [ 624.244053][T12403] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.244153][T12403] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.244247][T12403] bridge_slave_1: entered allmulticast mode [ 624.247060][T12403] bridge_slave_1: entered promiscuous mode [ 624.339538][T12403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 624.342835][T12403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 624.380039][T12621] bonding: d is being created... [ 624.399029][T12403] team0: Port device team_slave_0 added [ 624.401496][T12403] team0: Port device team_slave_1 added [ 624.442646][T12613] device-mapper: table: 248:7: ram12 too small for target: start=1, len=8192, dev_size=8192 [ 624.442683][T12613] device-mapper: core: Cannot calculate initial queue limits [ 624.442693][T12613] device-mapper: ioctl: unable to set up device queue for new table. [ 624.611613][T12403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 624.611632][T12403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 624.611658][T12403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 624.618759][T12403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 624.618777][T12403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 624.618804][T12403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 624.775106][T12403] hsr_slave_0: entered promiscuous mode [ 624.779212][T12403] hsr_slave_1: entered promiscuous mode [ 624.780995][T12403] debugfs: 'hsr0' already exists in 'hsr' [ 624.781018][T12403] Cannot create hsr debugfs directory [ 624.884801][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 624.884820][ T29] audit: type=1400 audit(1792669686.429:1284): avc: denied { write } for pid=12617 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 625.110272][ T29] audit: type=1400 audit(1792669686.649:1285): avc: denied { write } for pid=12648 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 625.394156][T12658] IPv6: NLM_F_CREATE should be specified when creating new route [ 625.667217][ T5603] Bluetooth: hci3: command tx timeout [ 626.138669][T12403] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 626.160976][T12403] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 626.163436][T12403] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 626.164251][T12690] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 626.197015][T12403] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 626.201830][T12403] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 626.220485][T12403] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 626.221247][T12403] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 626.238946][T12403] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 626.410206][ T29] audit: type=1400 audit(1792669687.949:1286): avc: denied { write } for pid=12668 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 626.552515][T12403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 626.659990][T12403] 8021q: adding VLAN 0 to HW filter on device team0 [ 626.695712][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.695843][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 626.733606][T11031] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.733700][T11031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 626.828936][ T29] audit: type=1400 audit(1792669688.369:1287): avc: denied { write } for pid=12720 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 627.509365][ T29] audit: type=1400 audit(1792669689.049:1288): avc: denied { read } for pid=12750 comm="syz.5.2211" name="kcore" dev="proc" ino=4026532046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kcore_t tclass=file permissive=1 [ 627.511091][ T29] audit: type=1400 audit(1792669689.049:1289): avc: denied { open } for pid=12750 comm="syz.5.2211" path="/379/proc_mnt/kcore" dev="proc" ino=4026532046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kcore_t tclass=file permissive=1 [ 627.974228][ T29] audit: type=1400 audit(1792669689.519:1290): avc: denied { write } for pid=12734 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 628.192601][T12403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 628.235621][ T29] audit: type=1400 audit(1792669689.779:1291): avc: denied { write } for pid=12789 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 628.310204][T12796] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 628.400438][T12798] unchecked MSR access error: WRMSR to 0x404 (tried to write 0x0000000000000001) at rIP: 0xffffffff81b3b0fa (__mcheck_cpu_init_prepare_banks+0x18a/0x380) [ 628.400505][T12798] Call Trace: [ 628.400514][T12798] [ 628.400530][T12798] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 628.400567][T12798] ? __pfx_call_function_single_prep_ipi+0x10/0x10 [ 628.400610][T12798] mce_cpu_restart+0xd5/0x1f0 [ 628.400638][T12798] ? __pfx_mce_cpu_restart+0x10/0x10 [ 628.400670][T12798] smp_call_function_many_cond+0x1449/0x18c0 [ 628.400704][T12798] ? __pfx_mce_cpu_restart+0x10/0x10 [ 628.400739][T12798] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 628.400772][T12798] ? __timer_delete_sync+0x10f/0x1c0 [ 628.400803][T12798] set_bank+0x240/0x3a0 [ 628.400831][T12798] ? __pfx_set_bank+0x10/0x10 [ 628.400859][T12798] ? find_held_lock+0x2b/0x80 [ 628.400889][T12798] ? sysfs_file_kobj+0xe4/0x290 [ 628.400920][T12798] ? sysfs_file_kobj+0xe4/0x290 [ 628.400955][T12798] ? __pfx_set_bank+0x10/0x10 [ 628.400981][T12798] dev_attr_store+0x58/0x80 [ 628.401009][T12798] ? __pfx_dev_attr_store+0x10/0x10 [ 628.401056][T12798] sysfs_kf_write+0xf2/0x150 [ 628.401092][T12798] kernfs_fop_write_iter+0x3e0/0x5f0 [ 628.401122][T12798] ? __pfx_sysfs_kf_write+0x10/0x10 [ 628.401159][T12798] vfs_write+0x6af/0x1050 [ 628.401194][T12798] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 628.401234][T12798] ? __pfx_vfs_write+0x10/0x10 [ 628.401259][T12798] ? find_held_lock+0x2b/0x80 [ 628.401313][T12798] ksys_write+0x12a/0x250 [ 628.401339][T12798] ? __pfx_ksys_write+0x10/0x10 [ 628.401376][T12798] do_syscall_64+0x123/0x790 [ 628.401417][T12798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.401441][T12798] RIP: 0033:0x7fb08499f559 [ 628.401463][T12798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 628.401486][T12798] RSP: 002b:00007fb0857d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 628.401508][T12798] RAX: ffffffffffffffda RBX: 00007fb084c25fa0 RCX: 00007fb08499f559 [ 628.401524][T12798] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000003 [ 628.401539][T12798] RBP: 00007fb084a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 628.401555][T12798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 628.401570][T12798] R13: 00007fb084c26038 R14: 00007fb084c25fa0 R15: 00007ffd0c368d28 [ 628.401605][T12798] [ 628.923357][T12403] veth0_vlan: entered promiscuous mode [ 628.959619][T12403] veth1_vlan: entered promiscuous mode [ 629.026269][ T29] audit: type=1400 audit(1792669690.559:1292): avc: denied { write } for pid=12799 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 629.031785][T12403] veth0_macvtap: entered promiscuous mode [ 629.071108][T12403] veth1_macvtap: entered promiscuous mode [ 629.118323][T12403] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 629.133687][T12832] fuse: fd is not a fuse device [ 629.227180][T12403] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 629.328690][T12845] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 629.368301][T12840] netlink: 'syz.5.2234': attribute type 4 has an invalid length. [ 629.378335][T11029] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.379474][T11029] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.379544][T11029] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.379581][T11029] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.388485][T12840] netlink: 'syz.5.2234': attribute type 4 has an invalid length. [ 629.452329][ T29] audit: type=1400 audit(1792669690.989:1293): avc: denied { write } for pid=12839 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 629.622575][T12853] fuse: Bad value for 'fd' [ 629.801154][ T8473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 629.801176][ T8473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 629.983433][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 629.983461][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 630.205364][T12883] ip_tables: iptables: counters copy to user failed while replacing table [ 630.510648][ T29] audit: type=1400 audit(1792669692.049:1294): avc: denied { write } for pid=12860 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 630.971831][ T29] audit: type=1400 audit(1792669692.509:1295): avc: denied { write } for pid=12910 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 632.332815][T12937] bridge_slave_0: left allmulticast mode [ 632.332845][T12937] bridge_slave_0: left promiscuous mode [ 632.333068][T12937] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.430474][ T29] audit: type=1400 audit(1792669693.969:1296): avc: denied { read write } for pid=12936 comm="syz.0.2265" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 632.430844][ T29] audit: type=1400 audit(1792669693.969:1297): avc: denied { open } for pid=12936 comm="syz.0.2265" path="/430/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 632.461939][ T29] audit: type=1400 audit(1792669693.979:1298): avc: denied { ioctl } for pid=12936 comm="syz.0.2265" path="/430/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x40104d01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 633.208058][T12981] netlink: 'syz.8.2282': attribute type 16 has an invalid length. [ 633.208081][T12981] netlink: 'syz.8.2282': attribute type 17 has an invalid length. [ 633.454145][T12973] rxe_eth0 speed is unknown, defaulting to 1000 [ 633.608250][T12990] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12990 comm=syz.6.2284 [ 636.238044][ T29] audit: type=1400 audit(1792669697.779:1299): avc: denied { read } for pid=13017 comm="syz.5.2297" lport=37924 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 636.442855][ T4969] udevd[4969]: worker [11027] /devices/virtual/block/nbd7 is taking a long time [ 636.501460][T13024] ip_tables: iptables: counters copy to user failed while replacing table [ 636.863324][ T29] audit: type=1400 audit(1792669698.399:1300): avc: denied { setcurrent } for pid=13028 comm="syz.6.2296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 639.699871][T13059] FAULT_INJECTION: forcing a failure. [ 639.699871][T13059] name fail_futex, interval 1, probability 0, space 0, times 0 [ 639.699909][T13059] CPU: 1 UID: 0 PID: 13059 Comm: syz.5.2314 Tainted: G L syzkaller #0 PREEMPT(full) [ 639.699942][T13059] Tainted: [L]=SOFTLOCKUP [ 639.699951][T13059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 639.699966][T13059] Call Trace: [ 639.699974][T13059] [ 639.699983][T13059] dump_stack_lvl+0x100/0x190 [ 639.700026][T13059] should_fail_ex.cold+0x5/0xa [ 639.700061][T13059] get_futex_key+0x1c9/0x13e0 [ 639.700095][T13059] ? __pfx_get_futex_key+0x10/0x10 [ 639.700123][T13059] ? filename_setxattr+0xf5/0x1d0 [ 639.700159][T13059] ? path_setxattrat+0x20f/0x3b0 [ 639.700197][T13059] futex_wake+0xf4/0x5e0 [ 639.700232][T13059] ? putname+0xb6/0x110 [ 639.700265][T13059] ? __pfx_futex_wake+0x10/0x10 [ 639.700299][T13059] ? __pfx_path_setxattrat+0x10/0x10 [ 639.700338][T13059] ? ksys_write+0x190/0x250 [ 639.700362][T13059] ? ksys_write+0x190/0x250 [ 639.700392][T13059] do_futex+0x2b2/0x440 [ 639.700423][T13059] ? __pfx_do_futex+0x10/0x10 [ 639.700463][T13059] __x64_sys_futex+0x34f/0x4d0 [ 639.700498][T13059] ? __pfx___x64_sys_futex+0x10/0x10 [ 639.700538][T13059] do_syscall_64+0x123/0x790 [ 639.700573][T13059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.700595][T13059] RIP: 0033:0x7fb08499f559 [ 639.700614][T13059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 639.700638][T13059] RSP: 002b:00007fb0857d90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 639.700662][T13059] RAX: ffffffffffffffda RBX: 00007fb084c25fa8 RCX: 00007fb08499f559 [ 639.700677][T13059] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb084c25fac [ 639.700691][T13059] RBP: 00007fb084c25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 639.700704][T13059] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 639.700717][T13059] R13: 00007fb084c26038 R14: 00007ffd0c368c40 R15: 00007ffd0c368d28 [ 639.700751][T13059] [ 639.938261][T13063] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 640.065721][ T9885] block nbd0: Possible stuck request ffff8880299b7000: control (read@0,1024B). Runtime 180 seconds [ 640.065763][ T9885] block nbd0: Possible stuck request ffff8880299b71c0: control (read@1024,2048B). Runtime 180 seconds [ 640.065791][ T9885] block nbd0: Possible stuck request ffff8880299b7380: control (read@3072,1024B). Runtime 180 seconds [ 641.039493][ T4969] udevd[4969]: worker [9366] /devices/virtual/block/nbd0 timeout; kill it [ 641.039573][ T4969] udevd[4969]: seq 13288 '/devices/virtual/block/nbd0' killed [ 641.439086][T13082] xt_hashlimit: size too large, truncated to 1048576 [ 646.311499][T13120] overlayfs: failed to clone lowerpath [ 646.332356][T13120] 9p: Bad value for 'rfdno' [ 646.406891][T13126] FAULT_INJECTION: forcing a failure. [ 646.406891][T13126] name failslab, interval 1, probability 0, space 0, times 0 [ 646.406928][T13126] CPU: 1 UID: 0 PID: 13126 Comm: syz.8.2339 Tainted: G L syzkaller #0 PREEMPT(full) [ 646.406958][T13126] Tainted: [L]=SOFTLOCKUP [ 646.406966][T13126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 646.406980][T13126] Call Trace: [ 646.406987][T13126] [ 646.406996][T13126] dump_stack_lvl+0x100/0x190 [ 646.407036][T13126] should_fail_ex.cold+0x5/0xa [ 646.407068][T13126] should_failslab+0xc2/0x120 [ 646.407098][T13126] kmem_cache_alloc_noprof+0x92/0x6a0 [ 646.407126][T13126] ? do_getname+0x35/0x390 [ 646.407155][T13126] do_getname+0x35/0x390 [ 646.407181][T13126] do_sys_openat2+0xc3/0x1d0 [ 646.407211][T13126] ? __pfx_do_sys_openat2+0x10/0x10 [ 646.407244][T13126] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 646.407292][T13126] __x64_sys_openat+0x12d/0x210 [ 646.407327][T13126] ? __pfx___x64_sys_openat+0x10/0x10 [ 646.407373][T13126] do_syscall_64+0x123/0x790 [ 646.407411][T13126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.407435][T13126] RIP: 0033:0x7f44b8f9f559 [ 646.407454][T13126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 646.407476][T13126] RSP: 002b:00007f44b9ebb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 646.407500][T13126] RAX: ffffffffffffffda RBX: 00007f44b9225fa0 RCX: 00007f44b8f9f559 [ 646.407516][T13126] RDX: 0000000000000002 RSI: 0000200000000600 RDI: ffffffffffffff9c [ 646.407533][T13126] RBP: 00007f44b9036b20 R08: 0000000000000000 R09: 0000000000000000 [ 646.407548][T13126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 646.407561][T13126] R13: 00007f44b9226038 R14: 00007f44b9225fa0 R15: 00007ffef93e5bc8 [ 646.407601][T13126] [ 647.596843][ T29] audit: type=1400 audit(1792669709.139:1301): avc: denied { mount } for pid=13132 comm="syz.8.2342" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 647.602970][T13142] x_tables: unsorted underflow at hook 2 [ 648.640391][ T4931] block nbd7: Possible stuck request ffff888029bc5080: control (read@0,1024B). Runtime 90 seconds [ 648.640432][ T4931] block nbd7: Possible stuck request ffff888029bc5240: control (read@1024,1024B). Runtime 90 seconds [ 648.640458][ T4931] block nbd7: Possible stuck request ffff888029bc5400: control (read@2048,1024B). Runtime 90 seconds [ 648.640485][ T4931] block nbd7: Possible stuck request ffff888029bc55c0: control (read@3072,1024B). Runtime 90 seconds [ 650.596468][T13180] bond1: peer notification delay (280) is not a multiple of miimon (100), value rounded to 200 ms [ 650.600137][T13180] bond1: entered allmulticast mode [ 650.600529][T13180] 8021q: adding VLAN 0 to HW filter on device bond1 [ 651.027397][ T983] kernel read not supported for file /vcs (pid: 983 comm: kworker/1:2) [ 651.972408][T13201] xt_hashlimit: size too large, truncated to 1048576 [ 654.303761][ T4931] block nbd5: Possible stuck request ffff888029b17000: control (read@0,1024B). Runtime 180 seconds [ 654.303803][ T4931] block nbd5: Possible stuck request ffff888029b171c0: control (read@1024,1024B). Runtime 180 seconds [ 654.303828][ T4931] block nbd5: Possible stuck request ffff888029b17380: control (read@2048,1024B). Runtime 180 seconds [ 654.303853][ T4931] block nbd5: Possible stuck request ffff888029b17540: control (read@3072,1024B). Runtime 180 seconds [ 655.963196][T11113] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 655.968105][T11113] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 655.972909][T11113] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 655.988801][T11113] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 655.991850][T11113] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 656.006547][T13248] xt_hashlimit: size too large, truncated to 1048576 [ 656.312890][ T29] audit: type=1400 audit(1792669717.849:1302): avc: denied { watch } for pid=13259 comm="syz.6.2384" path="/sys/kernel/rcu_expedited" dev="sysfs" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 656.312945][ T29] audit: type=1400 audit(1792669717.849:1303): avc: denied { watch_sb watch_reads } for pid=13259 comm="syz.6.2384" path="/sys/kernel/rcu_expedited" dev="sysfs" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=file permissive=1 [ 656.529759][T13249] rxe_eth0 speed is unknown, defaulting to 1000 [ 657.873238][T13255] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input13 [ 658.075210][T11113] Bluetooth: hci6: command tx timeout [ 658.341568][T13286] FAULT_INJECTION: forcing a failure. [ 658.341568][T13286] name failslab, interval 1, probability 0, space 0, times 0 [ 658.341607][T13286] CPU: 0 UID: 0 PID: 13286 Comm: syz.0.2391 Tainted: G L syzkaller #0 PREEMPT(full) [ 658.341640][T13286] Tainted: [L]=SOFTLOCKUP [ 658.341649][T13286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 658.341663][T13286] Call Trace: [ 658.341670][T13286] [ 658.341683][T13286] dump_stack_lvl+0x100/0x190 [ 658.341726][T13286] should_fail_ex.cold+0x5/0xa [ 658.341760][T13286] should_failslab+0xc2/0x120 [ 658.341792][T13286] kmem_cache_alloc_noprof+0x92/0x6a0 [ 658.341822][T13286] ? mempool_init_node+0x2f7/0x6f0 [ 658.341851][T13286] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 658.341875][T13286] mempool_init_node+0x2f7/0x6f0 [ 658.341904][T13286] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 658.341926][T13286] ? __pfx_mempool_free_slab+0x10/0x10 [ 658.341962][T13286] mempool_init_noprof+0x3a/0x50 [ 658.341989][T13286] bioset_init+0x37e/0x8a0 [ 658.342015][T13286] ? __pfx_bioset_init+0x10/0x10 [ 658.342038][T13286] ? kasan_save_track+0x14/0x30 [ 658.342066][T13286] ? __kasan_kmalloc+0xaa/0xb0 [ 658.342095][T13286] ? __kmalloc_cache_node_noprof+0x30c/0x710 [ 658.342127][T13286] ? __alloc_disk_node+0x5a/0x6b0 [ 658.342159][T13286] __alloc_disk_node+0x83/0x6b0 [ 658.342190][T13286] __blk_alloc_disk+0xd2/0x170 [ 658.342216][T13286] ? __pfx___blk_alloc_disk+0x10/0x10 [ 658.342241][T13286] ? __pfx___debug_object_init+0x10/0x10 [ 658.342290][T13286] ? lockdep_init_map_type+0x5c/0x250 [ 658.342320][T13286] ? lockdep_init_map_type+0x5c/0x250 [ 658.342352][T13286] dm_create+0x5e8/0x1530 [ 658.342388][T13286] dev_create+0x121/0x2a0 [ 658.342422][T13286] ? __pfx_dev_create+0x10/0x10 [ 658.342469][T13286] ctl_ioctl+0x4d2/0xcc0 [ 658.342502][T13286] ? __pfx_dev_create+0x10/0x10 [ 658.342540][T13286] ? __pfx_ctl_ioctl+0x10/0x10 [ 658.342607][T13286] ? selinux_file_ioctl+0x1e0/0x290 [ 658.342645][T13286] dm_ctl_ioctl+0x22/0x30 [ 658.342676][T13286] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 658.342708][T13286] __x64_sys_ioctl+0x18e/0x210 [ 658.342738][T13286] do_syscall_64+0x123/0x790 [ 658.342778][T13286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.342802][T13286] RIP: 0033:0x7f7593f9f559 [ 658.342823][T13286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 658.342846][T13286] RSP: 002b:00007f75921f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 658.342870][T13286] RAX: ffffffffffffffda RBX: 00007f7594225fa0 RCX: 00007f7593f9f559 [ 658.342886][T13286] RDX: 00002000000018c0 RSI: 00000000c138fd03 RDI: 0000000000000004 [ 658.342902][T13286] RBP: 00007f7594036b20 R08: 0000000000000000 R09: 0000000000000000 [ 658.342916][T13286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 658.342930][T13286] R13: 00007f7594226038 R14: 00007f7594225fa0 R15: 00007ffe15d67e38 [ 658.342963][T13286] [ 658.968116][ T7815] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.055739][T13296] md: array md0 already has disks! [ 659.379338][T13296] md: md0 stopped. [ 659.392639][T13249] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.392718][T13249] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.393077][T13249] bridge_slave_0: entered allmulticast mode [ 659.397925][T13249] bridge_slave_0: entered promiscuous mode [ 659.400333][T13249] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.400473][T13249] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.400598][T13249] bridge_slave_1: entered allmulticast mode [ 659.404080][T13249] bridge_slave_1: entered promiscuous mode [ 659.637942][ T7815] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.674544][T13249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 659.680498][T13249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 659.737660][T13249] team0: Port device team_slave_0 added [ 659.747663][T13249] team0: Port device team_slave_1 added [ 659.840388][ T7815] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.832242][T11113] Bluetooth: hci6: command tx timeout [ 660.896409][T13249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 660.896429][T13249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 660.896456][T13249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 660.977479][ T7815] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.996626][T13249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 660.996643][T13249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 660.996670][T13249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 661.120186][ T29] audit: type=1326 audit(1792669722.659:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13320 comm="syz.5.2401" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08499f559 code=0x7ffc0000 [ 661.120322][ T29] audit: type=1326 audit(1792669722.659:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13320 comm="syz.5.2401" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08499f559 code=0x7ffc0000 [ 661.143725][ T29] audit: type=1326 audit(1792669722.669:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13320 comm="syz.5.2401" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08499f559 code=0x7ffc0000 [ 661.143782][ T29] audit: type=1326 audit(1792669722.669:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13320 comm="syz.5.2401" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb08499f559 code=0x7ffc0000 [ 661.143827][ T29] audit: type=1326 audit(1792669722.669:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13320 comm="syz.5.2401" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08499f559 code=0x7ffc0000 [ 661.143870][ T29] audit: type=1326 audit(1792669722.669:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13320 comm="syz.5.2401" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08499f559 code=0x7ffc0000 [ 661.143925][ T29] audit: type=1326 audit(1792669722.679:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13320 comm="syz.5.2401" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08499f559 code=0x7ffc0000 [ 661.143969][ T29] audit: type=1326 audit(1792669722.679:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13320 comm="syz.5.2401" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08499f559 code=0x7ffc0000 [ 661.160263][T13249] hsr_slave_0: entered promiscuous mode [ 661.163447][T13249] hsr_slave_1: entered promiscuous mode [ 661.164524][T13249] debugfs: 'hsr0' already exists in 'hsr' [ 661.164544][T13249] Cannot create hsr debugfs directory [ 661.400857][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 661.400877][ T29] audit: type=1326 audit(1792669722.939:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13324 comm="syz.6.2404" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07fef9f559 code=0x7ffc0000 [ 661.400979][ T29] audit: type=1326 audit(1792669722.939:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13324 comm="syz.6.2404" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07fef9f559 code=0x7ffc0000 [ 661.401116][ T29] audit: type=1326 audit(1792669722.939:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13324 comm="syz.6.2404" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07fef9f559 code=0x7ffc0000 [ 661.401693][ T29] audit: type=1326 audit(1792669722.939:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13324 comm="syz.6.2404" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07fef9f559 code=0x7ffc0000 [ 661.402546][ T29] audit: type=1326 audit(1792669722.939:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13324 comm="syz.6.2404" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f07fef9f559 code=0x7ffc0000 [ 661.403432][ T29] audit: type=1326 audit(1792669722.939:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13324 comm="syz.6.2404" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07fef9f559 code=0x7ffc0000 [ 661.403478][ T29] audit: type=1326 audit(1792669722.939:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13324 comm="syz.6.2404" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07fef9f559 code=0x7ffc0000 [ 661.403880][ T29] audit: type=1326 audit(1792669722.939:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13324 comm="syz.6.2404" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07fef9f559 code=0x7ffc0000 [ 661.403926][ T29] audit: type=1326 audit(1792669722.939:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13324 comm="syz.6.2404" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07fef9f559 code=0x7ffc0000 [ 661.403977][ T29] audit: type=1326 audit(1792669722.939:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13324 comm="syz.6.2404" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f07fef9f559 code=0x7ffc0000 [ 661.692327][T13329] FAULT_INJECTION: forcing a failure. [ 661.692327][T13329] name failslab, interval 1, probability 0, space 0, times 0 [ 661.692363][T13329] CPU: 1 UID: 0 PID: 13329 Comm: syz.5.2405 Tainted: G L syzkaller #0 PREEMPT(full) [ 661.692396][T13329] Tainted: [L]=SOFTLOCKUP [ 661.692404][T13329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 661.692427][T13329] Call Trace: [ 661.692435][T13329] [ 661.692444][T13329] dump_stack_lvl+0x100/0x190 [ 661.692488][T13329] should_fail_ex.cold+0x5/0xa [ 661.692519][T13329] should_failslab+0xc2/0x120 [ 661.692555][T13329] __kvmalloc_node_noprof+0x113/0x9b0 [ 661.692586][T13329] ? vfree+0x125/0x6d0 [ 661.692616][T13329] ? bpf_check_cfg+0xb4/0x990 [ 661.692655][T13329] bpf_check_cfg+0xb4/0x990 [ 661.692687][T13329] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 661.692721][T13329] bpf_check+0x7d45/0xac70 [ 661.692753][T13329] ? __css_rstat_updated+0x1ce/0x590 [ 661.692780][T13329] ? __lock_acquire+0x5c0/0x1f40 [ 661.692804][T13329] ? __pfx___css_rstat_updated+0x10/0x10 [ 661.692847][T13329] ? __pfx_bpf_check+0x10/0x10 [ 661.692876][T13329] ? lock_acquire+0x1d1/0x380 [ 661.692899][T13329] ? find_held_lock+0x2b/0x80 [ 661.692927][T13329] ? bpf_prog_load+0x1a22/0x2ab0 [ 661.692958][T13329] ? __asan_memset+0x23/0x50 [ 661.692986][T13329] ? bpf_prog_load+0x1adc/0x2ab0 [ 661.693014][T13329] bpf_prog_load+0x1adc/0x2ab0 [ 661.693052][T13329] ? __pfx_bpf_prog_load+0x10/0x10 [ 661.693111][T13329] __sys_bpf+0x1f46/0x4a30 [ 661.693143][T13329] ? __pfx___sys_bpf+0x10/0x10 [ 661.693162][T13329] ? find_held_lock+0x2b/0x80 [ 661.693191][T13329] ? futex_wake+0x4ea/0x5e0 [ 661.693249][T13329] ? rcu_read_lock_any_held+0x6a/0x90 [ 661.693281][T13329] ? find_held_lock+0x2b/0x80 [ 661.693309][T13329] ? ksys_write+0x190/0x250 [ 661.693334][T13329] ? ksys_write+0x190/0x250 [ 661.693379][T13329] ? __x64_sys_futex+0x34f/0x4d0 [ 661.693408][T13329] ? __x64_sys_futex+0x358/0x4d0 [ 661.693451][T13329] ? xfd_validate_state+0x129/0x190 [ 661.693484][T13329] ? __x64_sys_bpf+0xce/0x140 [ 661.693504][T13329] __x64_sys_bpf+0xce/0x140 [ 661.693525][T13329] ? do_syscall_64+0xae/0x790 [ 661.693559][T13329] do_syscall_64+0x123/0x790 [ 661.693593][T13329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.693617][T13329] RIP: 0033:0x7fb08499f559 [ 661.693636][T13329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 661.693657][T13329] RSP: 002b:00007fb0857d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 661.693679][T13329] RAX: ffffffffffffffda RBX: 00007fb084c25fa0 RCX: 00007fb08499f559 [ 661.693693][T13329] RDX: 0000000000000094 RSI: 00002000000004c0 RDI: 0000000000000005 [ 661.693707][T13329] RBP: 00007fb084a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 661.693721][T13329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 661.693735][T13329] R13: 00007fb084c26038 R14: 00007fb084c25fa0 R15: 00007ffd0c368d28 [ 661.693768][T13329] [ 662.863615][T11113] Bluetooth: hci6: command tx timeout [ 663.242202][ T7815] bond0 (unregistering): Released all slaves [ 663.268774][ T7815] bond1 (unregistering): (slave veth3): Releasing active interface [ 663.271976][ T7815] bond1 (unregistering): Released all slaves [ 663.941511][T13372] FAULT_INJECTION: forcing a failure. [ 663.941511][T13372] name fail_futex, interval 1, probability 0, space 0, times 0 [ 663.941550][T13372] CPU: 1 UID: 0 PID: 13372 Comm: syz.6.2414 Tainted: G L syzkaller #0 PREEMPT(full) [ 663.941582][T13372] Tainted: [L]=SOFTLOCKUP [ 663.941589][T13372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 663.941603][T13372] Call Trace: [ 663.941611][T13372] [ 663.941621][T13372] dump_stack_lvl+0x100/0x190 [ 663.941668][T13372] should_fail_ex.cold+0x5/0xa [ 663.941703][T13372] get_futex_key+0x1c9/0x13e0 [ 663.941738][T13372] ? __pfx_get_futex_key+0x10/0x10 [ 663.941763][T13372] ? futex_wake+0x4ea/0x5e0 [ 663.941795][T13372] futex_wake+0xf4/0x5e0 [ 663.941817][T13372] ? futex_wait+0x11e/0x370 [ 663.941839][T13372] ? __pfx_futex_wake+0x10/0x10 [ 663.941874][T13372] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 663.941902][T13372] ? do_vfs_ioctl+0x226/0x13e0 [ 663.941932][T13372] do_futex+0x2b2/0x440 [ 663.941964][T13372] ? __pfx_do_futex+0x10/0x10 [ 663.941990][T13372] ? __fget_files+0x34/0x3d0 [ 663.942026][T13372] __x64_sys_futex+0x34f/0x4d0 [ 663.942053][T13372] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 663.942078][T13372] ? __pfx___x64_sys_futex+0x10/0x10 [ 663.942117][T13372] do_syscall_64+0x123/0x790 [ 663.942162][T13372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.942185][T13372] RIP: 0033:0x7f07fef9f559 [ 663.942202][T13372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 663.942221][T13372] RSP: 002b:00007f07ffd870e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 663.942241][T13372] RAX: ffffffffffffffda RBX: 00007f07ff225fa8 RCX: 00007f07fef9f559 [ 663.942255][T13372] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f07ff225fac [ 663.942268][T13372] RBP: 00007f07ff225fa0 R08: 0000000000000001 R09: 0000000000000000 [ 663.942281][T13372] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 663.942293][T13372] R13: 00007f07ff226038 R14: 00007fff040a9c70 R15: 00007fff040a9d58 [ 663.942321][T13372] [ 664.300084][T13380] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 664.370723][T13382] FAULT_INJECTION: forcing a failure. [ 664.370723][T13382] name failslab, interval 1, probability 0, space 0, times 0 [ 664.370762][T13382] CPU: 1 UID: 0 PID: 13382 Comm: syz.8.2417 Tainted: G L syzkaller #0 PREEMPT(full) [ 664.370796][T13382] Tainted: [L]=SOFTLOCKUP [ 664.370804][T13382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 664.370819][T13382] Call Trace: [ 664.370828][T13382] [ 664.370838][T13382] dump_stack_lvl+0x100/0x190 [ 664.370881][T13382] should_fail_ex.cold+0x5/0xa [ 664.370914][T13382] should_failslab+0xc2/0x120 [ 664.370946][T13382] __kvmalloc_node_noprof+0x113/0x9b0 [ 664.370979][T13382] ? bpf_check_cfg+0x10f/0x990 [ 664.371028][T13382] bpf_check_cfg+0x10f/0x990 [ 664.371060][T13382] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 664.371095][T13382] bpf_check+0x7d45/0xac70 [ 664.371124][T13382] ? __css_rstat_updated+0x1ce/0x590 [ 664.371152][T13382] ? __lock_acquire+0x5c0/0x1f40 [ 664.371177][T13382] ? __pfx___css_rstat_updated+0x10/0x10 [ 664.371225][T13382] ? __pfx_bpf_check+0x10/0x10 [ 664.371251][T13382] ? lock_acquire+0x1d1/0x380 [ 664.371272][T13382] ? find_held_lock+0x2b/0x80 [ 664.371299][T13382] ? bpf_prog_load+0x1a22/0x2ab0 [ 664.371330][T13382] ? __asan_memset+0x23/0x50 [ 664.371358][T13382] ? bpf_prog_load+0x1adc/0x2ab0 [ 664.371388][T13382] bpf_prog_load+0x1adc/0x2ab0 [ 664.371422][T13382] ? __pfx_bpf_prog_load+0x10/0x10 [ 664.371473][T13382] __sys_bpf+0x1f46/0x4a30 [ 664.371504][T13382] ? __pfx___sys_bpf+0x10/0x10 [ 664.371525][T13382] ? find_held_lock+0x2b/0x80 [ 664.371555][T13382] ? futex_wake+0x4ea/0x5e0 [ 664.371606][T13382] ? rcu_read_lock_any_held+0x6a/0x90 [ 664.371648][T13382] ? find_held_lock+0x2b/0x80 [ 664.371678][T13382] ? ksys_write+0x190/0x250 [ 664.371705][T13382] ? ksys_write+0x190/0x250 [ 664.371748][T13382] ? __x64_sys_futex+0x34f/0x4d0 [ 664.371775][T13382] ? __x64_sys_futex+0x358/0x4d0 [ 664.371808][T13382] ? xfd_validate_state+0x129/0x190 [ 664.371840][T13382] ? __x64_sys_bpf+0xce/0x140 [ 664.371863][T13382] __x64_sys_bpf+0xce/0x140 [ 664.371887][T13382] ? do_syscall_64+0xae/0x790 [ 664.371925][T13382] do_syscall_64+0x123/0x790 [ 664.371961][T13382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.371985][T13382] RIP: 0033:0x7f44b8f9f559 [ 664.372006][T13382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 664.372031][T13382] RSP: 002b:00007f44b9ebb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 664.372055][T13382] RAX: ffffffffffffffda RBX: 00007f44b9225fa0 RCX: 00007f44b8f9f559 [ 664.372071][T13382] RDX: 0000000000000094 RSI: 00002000000004c0 RDI: 0000000000000005 [ 664.372085][T13382] RBP: 00007f44b9036b20 R08: 0000000000000000 R09: 0000000000000000 [ 664.372100][T13382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 664.372114][T13382] R13: 00007f44b9226038 R14: 00007f44b9225fa0 R15: 00007ffef93e5bc8 [ 664.372149][T13382] [ 664.598878][ T5264] 8021q: adding VLAN 0 to HW filter on device eth9 [ 664.767899][T13389] overlayfs: failed to verify index (index/00fb210001b322d586c66a42a291328a08e20e17ea9f2d6a34b400000000000000, ftype=8000, err=-61) [ 664.767978][T13389] overlayfs: failed index dir cleanup (-61) [ 664.767992][T13389] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 664.945823][T11113] Bluetooth: hci6: command tx timeout [ 665.050281][T13399] FAULT_INJECTION: forcing a failure. [ 665.050281][T13399] name fail_futex, interval 1, probability 0, space 0, times 0 [ 665.050318][T13399] CPU: 1 UID: 0 PID: 13399 Comm: syz.5.2425 Tainted: G L syzkaller #0 PREEMPT(full) [ 665.050349][T13399] Tainted: [L]=SOFTLOCKUP [ 665.050358][T13399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 665.050373][T13399] Call Trace: [ 665.050381][T13399] [ 665.050390][T13399] dump_stack_lvl+0x100/0x190 [ 665.050430][T13399] should_fail_ex.cold+0x5/0xa [ 665.050461][T13399] get_futex_key+0x1c9/0x13e0 [ 665.050493][T13399] ? __pfx_get_futex_key+0x10/0x10 [ 665.050520][T13399] ? futex_wake+0x4ea/0x5e0 [ 665.050569][T13399] futex_wake+0xf4/0x5e0 [ 665.050601][T13399] ? futex_wait+0x11e/0x370 [ 665.050624][T13399] ? __pfx_futex_wake+0x10/0x10 [ 665.050661][T13399] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 665.050693][T13399] ? do_vfs_ioctl+0x226/0x13e0 [ 665.050727][T13399] do_futex+0x2b2/0x440 [ 665.050762][T13399] ? __pfx_do_futex+0x10/0x10 [ 665.050789][T13399] ? __fget_files+0x34/0x3d0 [ 665.050828][T13399] __x64_sys_futex+0x34f/0x4d0 [ 665.050859][T13399] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 665.050887][T13399] ? __pfx___x64_sys_futex+0x10/0x10 [ 665.050931][T13399] do_syscall_64+0x123/0x790 [ 665.050967][T13399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.050992][T13399] RIP: 0033:0x7fb08499f559 [ 665.051011][T13399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 665.051034][T13399] RSP: 002b:00007fb0857d90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 665.051056][T13399] RAX: ffffffffffffffda RBX: 00007fb084c25fa8 RCX: 00007fb08499f559 [ 665.051072][T13399] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb084c25fac [ 665.051087][T13399] RBP: 00007fb084c25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 665.051102][T13399] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 665.051118][T13399] R13: 00007fb084c26038 R14: 00007ffd0c368c40 R15: 00007ffd0c368d28 [ 665.051152][T13399] [ 665.500476][T13405] device-mapper: table: 248:12: crypt: Invalid number of feature args (-EINVAL) [ 665.500502][T13405] device-mapper: ioctl: error adding target to table [ 665.538473][ T7815] hsr_slave_0: left promiscuous mode [ 665.550888][ T7815] hsr_slave_1: left promiscuous mode [ 665.570478][ T7815] veth1_macvtap: left promiscuous mode [ 665.570514][ T7815] veth0_macvtap: left promiscuous mode [ 665.570649][ T7815] veth1_vlan: left promiscuous mode [ 665.574641][ T7815] veth0_vlan: left promiscuous mode [ 665.931631][T13424] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=22 sclass=netlink_tcpdiag_socket pid=13424 comm=syz.0.2431 [ 666.781452][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 666.781470][ T29] audit: type=1326 audit(1792669728.319:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13459 comm="syz.5.2443" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb08499f559 code=0x0 [ 666.970242][T13249] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 666.982926][T13249] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 666.991338][T13249] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 667.018747][T13249] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 667.019404][T13249] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 667.059430][T13249] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 667.085831][T13249] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 667.116278][T13249] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 667.380046][ T7815] IPVS: stop unused estimator thread 0... [ 667.419880][T13249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 667.462630][T13249] 8021q: adding VLAN 0 to HW filter on device team0 [ 667.479426][ T8474] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.479539][ T8474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 667.499034][T11028] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.499121][T11028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 668.313240][T13511] syzkaller0: entered promiscuous mode [ 668.313266][T13511] syzkaller0: entered allmulticast mode [ 668.430799][T13249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 668.980238][T13249] veth0_vlan: entered promiscuous mode [ 669.085448][T13249] veth1_vlan: entered promiscuous mode [ 669.169643][T13249] veth0_macvtap: entered promiscuous mode [ 669.180221][T13249] veth1_macvtap: entered promiscuous mode [ 669.221451][T13249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 669.236504][T13249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 669.304704][T11028] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.307871][ T8474] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.307933][ T8474] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.307969][ T8474] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.513027][ T6486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 669.513050][ T6486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 669.626591][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 669.626616][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 670.152295][ T9885] block nbd0: Possible stuck request ffff8880299b7000: control (read@0,1024B). Runtime 210 seconds [ 670.152339][ T9885] block nbd0: Possible stuck request ffff8880299b71c0: control (read@1024,2048B). Runtime 210 seconds [ 670.152367][ T9885] block nbd0: Possible stuck request ffff8880299b7380: control (read@3072,1024B). Runtime 210 seconds [ 671.158214][T13601] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 671.158306][T13601] syzkaller0: linktype set to 777 [ 673.232965][ T29] audit: type=1326 audit(1792669734.769:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13620 comm="syz.5.2502" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb08499f559 code=0x0 [ 673.279697][T13630] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 674.175821][T13653] xt_hashlimit: size too large, truncated to 1048576 [ 674.391357][T13664] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 674.778970][T13671] 8021q: adding VLAN 0 to HW filter on device d [ 675.442991][ T29] audit: type=1326 audit(1792669736.959:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13676 comm="syz.2.2526" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5c9639f559 code=0x0 [ 675.992058][T13699] xt_hashlimit: size too large, truncated to 1048576 [ 676.396523][ T4969] udevd[4969]: worker [9406] /devices/virtual/block/nbd5 timeout; kill it [ 676.396637][ T4969] udevd[4969]: seq 13422 '/devices/virtual/block/nbd5' killed [ 677.074678][ T29] audit: type=1326 audit(1792669738.619:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13711 comm="syz.6.2541" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f07fef9f559 code=0x0 [ 677.195749][T13721] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 677.195774][T13721] block device autoloading is deprecated and will be removed. [ 677.518750][T13721] block device autoloading is deprecated and will be removed. [ 677.518874][T13721] md: invalid raid superblock magic on ram16 [ 677.518888][T13721] md: ram16 does not have a valid v0.0 superblock, not importing! [ 677.518950][T13721] md: md_import_device returned -22 [ 679.124831][ T4931] block nbd7: Possible stuck request ffff888029bc5080: control (read@0,1024B). Runtime 120 seconds [ 679.124876][ T4931] block nbd7: Possible stuck request ffff888029bc5240: control (read@1024,1024B). Runtime 120 seconds [ 679.124917][ T4931] block nbd7: Possible stuck request ffff888029bc5400: control (read@2048,1024B). Runtime 120 seconds [ 679.125061][ T4931] block nbd7: Possible stuck request ffff888029bc55c0: control (read@3072,1024B). Runtime 120 seconds [ 679.726662][T13746] xt_hashlimit: size too large, truncated to 1048576 [ 680.559120][ T29] audit: type=1326 audit(1792669742.079:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13751 comm="syz.8.2556" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f44b8f9f559 code=0x0 [ 680.990598][T13770] TCP: TCP_TX_DELAY enabled [ 681.079653][T13773] netlink: 'syz.6.2566': attribute type 1 has an invalid length. [ 681.113354][T13773] 8021q: adding VLAN 0 to HW filter on device bond3 [ 681.170276][T13773] bond3: (slave gretap2): making interface the new active one [ 681.171033][T13773] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 681.263458][ T29] audit: type=1400 audit(1792669742.799:1357): avc: denied { bind } for pid=13776 comm="syz.2.2568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 681.404040][T13783] xt_hashlimit: size too large, truncated to 1048576 [ 681.515406][T13786] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 682.184137][ T5730] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 682.334513][ T5730] usb 3-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 682.335463][ T5730] usb 3-1: config index 0 descriptor too short (expected 8228, got 36) [ 682.335490][ T5730] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 682.335511][ T5730] usb 3-1: config 0 has no interfaces? [ 682.335540][ T5730] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.353081][ T5730] usb 3-1: config 0 descriptor?? [ 682.594224][T13797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 682.596919][T13797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 682.600969][ T5730] usb 3-1: string descriptor 0 read error: -71 [ 682.627140][ T5730] usb 3-1: USB disconnect, device number 15 [ 682.779305][ T29] audit: type=1400 audit(1792669744.319:1358): avc: denied { append } for pid=13819 comm="syz.5.2583" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 682.817043][T13821] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 682.861715][ T29] audit: type=1400 audit(1792669744.399:1359): avc: denied { map } for pid=13819 comm="syz.5.2583" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 682.863333][ T29] audit: type=1400 audit(1792669744.399:1360): avc: denied { write execute } for pid=13819 comm="syz.5.2583" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 682.950615][T13823] netlink: 'syz.8.2584': attribute type 6 has an invalid length. [ 683.053267][T13825] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2585'. [ 683.327395][T13830] xt_hashlimit: size too large, truncated to 1048576 [ 683.513686][ T10] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 683.688977][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 683.699203][ T10] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 683.701187][ T10] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 683.701204][ T10] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 683.701216][ T10] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 683.701228][ T10] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 81 [ 683.701249][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.769066][ T10] usb 9-1: config 0 descriptor?? [ 683.962499][T13838] loop5: detected capacity change from 0 to 7 [ 684.018320][ T29] audit: type=1400 audit(1792669745.559:1361): avc: denied { create } for pid=13837 comm="syz.6.2589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 684.034912][T13838] Dev loop5: unable to read RDB block 7 [ 684.036647][T13838] loop5: unable to read partition table [ 684.040422][T13838] loop5: partition table beyond EOD, truncated [ 684.043225][T13838] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 684.236223][ T5822] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 684.372196][ T5729] usb 9-1: USB disconnect, device number 2 [ 684.385001][ T5822] usb 1-1: Using ep0 maxpacket: 8 [ 684.520721][ T5822] usb 1-1: unable to get BOS descriptor or descriptor too short [ 684.520768][ T5822] usb 1-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01 [ 684.521585][ T5822] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 684.521621][ T5822] usb 1-1: can't read configurations, error -71 [ 684.660579][T13838] ovs-dp0: entered promiscuous mode [ 684.665021][ T983] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 684.815299][ T983] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 684.816115][ T983] usb 6-1: config 93 has too many interfaces: 125, using maximum allowed: 32 [ 684.816130][ T983] usb 6-1: config 93 has an invalid descriptor of length 0, skipping remainder of the config [ 684.816142][ T983] usb 6-1: config 93 has 0 interfaces, different from the descriptor's value: 125 [ 684.817728][ T983] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.817743][ T983] usb 6-1: Product: syz [ 684.817752][ T983] usb 6-1: Manufacturer: syz [ 684.817762][ T983] usb 6-1: SerialNumber: syz [ 684.873339][ T4931] block nbd5: Possible stuck request ffff888029b17000: control (read@0,1024B). Runtime 210 seconds [ 684.873381][ T4931] block nbd5: Possible stuck request ffff888029b171c0: control (read@1024,1024B). Runtime 210 seconds [ 684.873409][ T4931] block nbd5: Possible stuck request ffff888029b17380: control (read@2048,1024B). Runtime 210 seconds [ 684.873436][ T4931] block nbd5: Possible stuck request ffff888029b17540: control (read@3072,1024B). Runtime 210 seconds [ 685.117296][ T29] audit: type=1400 audit(1792669746.659:1362): avc: denied { write } for pid=13844 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 685.416225][ T29] audit: type=1400 audit(1792669746.939:1363): avc: denied { write } for pid=13863 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 685.507628][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.764165][ T5822] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 685.924206][ T5822] usb 1-1: Using ep0 maxpacket: 8 [ 685.924993][ T5822] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 685.926410][ T5822] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 685.926450][ T5822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.930195][ T5822] usb 1-1: config 0 descriptor?? [ 685.950543][T12420] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 685.981288][T13882] xt_hashlimit: size too large, truncated to 1048576 [ 686.138571][ T5822] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 686.156015][T12420] usb 7-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 686.156044][T12420] usb 7-1: too many configurations: 164, using maximum allowed: 8 [ 686.217450][T12420] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.221491][T12420] usb 7-1: config 0 descriptor?? [ 687.474045][ T31] INFO: task syz.4.1521:10807 blocked for more than 144 seconds. [ 687.474065][ T31] Tainted: G L syzkaller #0 [ 687.474072][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 687.474078][ T31] task:syz.4.1521 state:D stack:28152 pid:10807 tgid:10804 ppid:5598 task_flags:0x400040 flags:0x00080002 [ 687.474127][ T31] Call Trac ** replaying previous printk message ** [ 687.474127][ T31] Call Trace: [ 687.474132][ T31] [ 687.474141][ T31] __schedule+0x125e/0x6990 [ 687.474164][ T31] ? __lock_acquire+0x5c0/0x1f40 [ 687.474188][ T31] ? __pfx___schedule+0x10/0x10 [ 687.474203][ T31] ? find_held_lock+0x2b/0x80 [ 687.474219][ T31] ? schedule+0x225/0x2c0 [ 687.474238][ T31] schedule+0xdd/0x2c0 [ 687.474267][ T31] schedule_preempt_disabled+0x13/0x30 [ 687.474284][ T31] __mutex_lock+0xcca/0x1c10 [ 687.474296][ T31] ? sync_bdevs+0x153/0x480 [ 687.474314][ T31] ? sync_bdevs+0x1ff/0x480 [ 687.474330][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 687.474348][ T31] ? iput.part.0+0x1a0/0x1050 [ 687.474360][ T31] ? sync_bdevs+0x77/0x480 [ 687.474379][ T31] ? sync_bdevs+0x153/0x480 [ 687.474405][ T31] sync_bdevs+0x153/0x480 [ 687.474424][ T31] ksys_sync+0xb0/0xf0 [ 687.474436][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 687.474447][ T31] ? kcov_ioctl+0x17a/0x760 [ 687.474463][ T31] ? do_syscall_64+0xae/0x790 [ 687.474481][ T31] __do_sys_sync+0xe/0x20 [ 687.474492][ T31] do_syscall_64+0x123/0x790 [ 687.474512][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.474525][ T31] RIP: 0033:0x7f9d8a39f559 [ 687.474558][ T31] RSP: 002b:00007f9d8b2e6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 687.474571][ T31] RAX: ffffffffffffffda RBX: 00007f9d8a625fa0 RCX: 00007f9d8a39f559 [ 687.474579][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 687.474586][ T31] RBP: 00007f9d8a625fa0 R08: 0000000000000000 R09: 0000000000000000 [ 687.474593][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 687.474601][ T31] R13: 00007f9d8a626038 R14: 00007f9d8a625fa0 R15: 00007fff0fb32c38 [ 687.474619][ T31] [ 687.474667][ T31] [ 687.474667][ T31] Showing all locks held in the system: [ 687.474675][ T31] locks held by khungtaskd/31: 1, last CPU#0: [ 687.474697][ T31] #0: ffffffff8fdeb1e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 687.474754][ T31] locks held by getty/5360: 2, on CPU#1: [ 687.474763][ T31] #0: ffff8880359320a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 687.474796][ T31] #1: ffffc9000323b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1540 [ 687.474848][ T31] locks held by udevd/9366: 1, on CPU#0: [ 687.474857][ T31] #0: ffff8880298b6350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 687.474888][ T31] locks held by udevd/9406: 1, on CPU#1: [ 687.474896][ T31] #0: ffff888029a92350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 687.474926][ T31] locks held by syz.4.1521/10807: 1, on CPU#1: [ 687.474934][ T31] #0: ffff888029a92350 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 687.474977][ T31] locks held by udevd/11027: 1, on CPU#1: [ 687.474986][ T31] #0: ffff888028fd9350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 687.475022][ T31] locks held by syz.6.2589/13840: 2, last CPU#1: [ 687.475030][ T31] #0: ffff8880561fe460 (sb_writers#6){.+.+}-{0:0}, at: get_signal+0x1f20/0x21d0 [ 687.475060][ T31] #1: ffff88803652bed8 (&sb->s_type->i_mutex_key#16){++++}-{4:4}, at: shmem_file_write_iter+0x86/0x140 [ 687.475092][ T31] locks held by syz.0.2595/13868: 1, on CPU#0: [ 687.475112][ T31] #0: ffff888039cb1068 (&dev->mutex#6){+.+.}-{4:4}, at: iowarrior_read+0x515/0xc00 [ 687.475153][ T31] locks held by sed/13888: 2, last CPU#0: [ 687.475161][ T31] #0: ffff88807abbe448 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x11d/0x590 [ 687.475194][ T31] #1: ffff88807b89ccc0 (&mm->mmap_lock){++++}-{4:4}, at: __vmf_anon_prepare+0xf2/0x250 [ 687.475224][ T31] [ 687.475227][ T31] ============================================= [ 687.475227][ T31] [ 687.475255][ T31] NMI backtrace for cpu 0 [ 687.475267][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 687.475292][ T31] Tainted: [L]=SOFTLOCKUP [ 687.475300][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 687.475310][ T31] Call Trace: [ 687.475314][ T31] [ 687.475319][ T31] dump_stack_lvl+0x100/0x190 [ 687.475340][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 687.475361][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 687.475379][ T31] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 687.475397][ T31] sys_info+0x141/0x190 [ 687.475411][ T31] watchdog+0xcb1/0x1030 [ 687.475427][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 687.475444][ T31] ? __pfx_watchdog+0x10/0x10 [ 687.475458][ T31] ? __kthread_parkme+0x18f/0x230 [ 687.475473][ T31] ? kthread+0x13a/0x450 [ 687.475487][ T31] ? __pfx_watchdog+0x10/0x10 [ 687.475499][ T31] kthread+0x373/0x450 [ 687.475513][ T31] ? __pfx_kthread+0x10/0x10 [ 687.475529][ T31] ret_from_fork+0x730/0xd60 [ 687.475544][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 687.475559][ T31] ? __switch_to+0x800/0x10e0 [ 687.475576][ T31] ? __pfx_kthread+0x10/0x10 [ 687.475591][ T31] ret_from_fork_asm+0x1a/0x30 [ 687.475612][ T31] [ 687.475634][ T31] Sending NMI from CPU 0 to CPUs 1: [ 687.475670][ C1] NMI backtrace for cpu 1 [ 687.475685][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 687.475711][ C1] Tainted: [L]=SOFTLOCKUP [ 687.475719][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 687.475731][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 687.475763][ C1] Code: 57 95 02 e9 83 55 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 9b 15 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 687.475783][ C1] RSP: 0000:ffffc90000197e00 EFLAGS: 00000242 [ 687.475799][ C1] RAX: 0000000001a68d01 RBX: ffff88801fee2580 RCX: ffffffff8bd62325 [ 687.475813][ C1] RDX: 0000000000000001 RSI: ffffffff8e3e8542 RDI: ffffffff8c627980 [ 687.475827][ C1] RBP: ffffed1003fdc4b0 R08: 0000000000000001 R09: ffffed1017066815 [ 687.475840][ C1] R10: ffff8880b83340ab R11: 0000000000000001 R12: 0000000000000000 [ 687.475853][ C1] R13: 0000000000000000 R14: 1ffff92000032fc4 R15: dffffc0000000000 [ 687.475866][ C1] FS: 0000000000000000(0000) GS:ffff888122a30000(0000) knlGS:0000000000000000 [ 687.475885][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 687.475899][ C1] CR2: 00007f5c96388b80 CR3: 000000000fb98000 CR4: 00000000003526f0 [ 687.475913][ C1] Call Trace: [ 687.475920][ C1] [ 687.475927][ C1] default_idle+0x9/0x10 [ 687.475947][ C1] default_idle_call+0x6c/0xb0 [ 687.475967][ C1] do_idle+0x3ae/0x5b0 [ 687.475990][ C1] ? __pfx_do_idle+0x10/0x10 [ 687.476012][ C1] ? finish_task_switch.isra.0+0x149/0x10d0 [ 687.476040][ C1] cpu_startup_entry+0x4f/0x60 [ 687.476065][ C1] start_secondary+0x21d/0x2d0 [ 687.476088][ C1] ? __pfx_start_secondary+0x10/0x10 [ 687.476113][ C1] common_startup_64+0x13e/0x158 [ 687.476154][ C1] [ 687.525104][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 688.191334][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 688.202082][ T31] Tainted: [L]=SOFTLOCKUP [ 688.206390][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 688.216435][ T31] Call Trace: [ 688.219712][ T31] [ 688.222633][ T31] dump_stack_lvl+0x100/0x190 [ 688.227330][ T31] vpanic+0x553/0x970 [ 688.231310][ T31] ? __pfx_vpanic+0x10/0x10 [ 688.235805][ T31] panic+0xd1/0xe0 [ 688.239512][ T31] ? __pfx_panic+0x10/0x10 [ 688.243910][ T31] ? nmi_trigger_cpumask_backtrace+0x263/0x2a0 [ 688.250078][ T31] ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0 [ 688.256242][ T31] ? watchdog.cold+0x1ec/0x234 [ 688.261005][ T31] watchdog.cold+0x1fd/0x234 [ 688.265608][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 688.271413][ T31] ? __pfx_watchdog+0x10/0x10 [ 688.276099][ T31] ? __kthread_parkme+0x18f/0x230 [ 688.281143][ T31] ? kthread+0x13a/0x450 [ 688.285379][ T31] ? __pfx_watchdog+0x10/0x10 [ 688.290058][ T31] kthread+0x373/0x450 [ 688.294129][ T31] ? __pfx_kthread+0x10/0x10 [ 688.298722][ T31] ret_from_fork+0x730/0xd60 [ 688.303301][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 688.308419][ T31] ? __switch_to+0x800/0x10e0 [ 688.313093][ T31] ? __pfx_kthread+0x10/0x10 [ 688.317671][ T31] ret_from_fork_asm+0x1a/0x30 [ 688.322444][ T31] [ 688.325669][ T31] Kernel Offset: disabled [ 688.329989][ T31] Rebooting in 86400 seconds..