last executing test programs: 2m6.146476651s ago: executing program 3 (id=310): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) file_setattr(0xffffffffffffff9c, 0x0, &(0x7f0000000580)={0x0, 0xfff, 0x245b1f2a, 0x8000, 0x10000}, 0x18, 0x1000) 2m6.104493369s ago: executing program 3 (id=311): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r1 = syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f00000000c0)='wchan\x00') pread64(r2, &(0x7f00000002c0)=""/5, 0x5, 0x7fffffff) 2m6.049272499s ago: executing program 3 (id=314): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x9, 0x7}, 0x282a8, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2m6.004792338s ago: executing program 3 (id=315): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0xa05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x2b5b093, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 2m5.971170984s ago: executing program 3 (id=317): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="8ef34bb2bac8"], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) 2m5.702933985s ago: executing program 3 (id=327): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xe}, {0x5, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x200, 0xc0000000, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x2, 0x3}, {0x6, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x3641}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40894}, 0x200040d5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m5.658038834s ago: executing program 32 (id=327): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xe}, {0x5, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x200, 0xc0000000, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x2, 0x3}, {0x6, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x3641}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40894}, 0x200040d5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m57.278783327s ago: executing program 2 (id=491): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x75, 0x109301) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x54, r2, 0x113, 0x70bd2c, 0x0, {0x41}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x87}, {0xc}, {0xc}}]}, 0x54}}, 0x0) 1m57.222862908s ago: executing program 2 (id=492): r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x40042, 0x1) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000003a40)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000003a80)='./pipefs\x00', &(0x7f0000003ac0)='rpc_pipefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000003b00)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000003b40)='./file0\x00', &(0x7f0000003b80), 0x14c98, &(0x7f0000003bc0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 1m57.155425461s ago: executing program 2 (id=493): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000f40)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000280)="c5", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)="e4", 0x1}], 0x1}}], 0x2, 0x8020) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="030001"], 0xa) 1m56.451765744s ago: executing program 2 (id=503): mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./binfmt\x00', 0x1ff) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0x0, 0x387, 0x2, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x3000000, &(0x7f00000001c0)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x4, 0x521, &(0x7f0000000580)="$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") ppoll(0x0, 0x0, &(0x7f00000002c0)={0x0, 0x3938700}, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000ac0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) 1m55.874239814s ago: executing program 2 (id=512): sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x84}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 1m55.329513798s ago: executing program 2 (id=519): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000008000000b7030000000800008500000070000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x10, 0x70, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1m55.278966218s ago: executing program 33 (id=519): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000008000000b7030000000800008500000070000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x10, 0x70, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1m36.781312842s ago: executing program 6 (id=807): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) r0 = open(&(0x7f0000000440)='./file0\x00', 0x1c9800, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x2, r0, 0x0, 0x0, 0x0, 0x0, 0x4}]) r2 = open(&(0x7f0000000280)='./file0\x00', 0x1a1b42, 0x104) vmsplice(r2, &(0x7f0000000400)=[{&(0x7f0000000340)="8e59", 0x2}], 0x1, 0x5) 1m36.551315512s ago: executing program 6 (id=814): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r1) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, r2, 0x101, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) 1m36.525764576s ago: executing program 6 (id=818): setns(0xc9, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000a29a75ac180000000200000000ddffff00000004010100000000000002"], 0x0, 0x32, 0x0, 0x1}, 0x28) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket(0x8, 0x2, 0x0) setsockopt(r0, 0x108, 0x42020054, &(0x7f0000000000)="010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000", 0x54) 1m36.375329072s ago: executing program 6 (id=819): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000500)='./file0/../file0/file0\x00', 0x0, 0x2127099, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x84000, 0x0) 1m36.362636974s ago: executing program 6 (id=822): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000004780)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000040)=0x400, 0x4) 1m36.187256714s ago: executing program 6 (id=828): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x7fffffffffffffff]}, 0x8, 0x80000) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r1, 0x47f, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000003c0)="951aa14bd6f68579cac67c83bf8d4500e5cea1bb1596d4ee6645fa16fa7cacb9214070a622a2c57b89075f59b85c7b5b2c41edc9d2cd5a2c95ed1c2cf72425be9c1a2df1b60a309bc3228d7e85b300f0d7a042a40166b9208e9d2e423c32ad8e47adedf5dc425c6bcb031fb2230835d41afc23476eae602bad3246417e5ac757", 0x80}]) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 1m36.145421691s ago: executing program 34 (id=828): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x7fffffffffffffff]}, 0x8, 0x80000) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r1, 0x47f, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000003c0)="951aa14bd6f68579cac67c83bf8d4500e5cea1bb1596d4ee6645fa16fa7cacb9214070a622a2c57b89075f59b85c7b5b2c41edc9d2cd5a2c95ed1c2cf72425be9c1a2df1b60a309bc3228d7e85b300f0d7a042a40166b9208e9d2e423c32ad8e47adedf5dc425c6bcb031fb2230835d41afc23476eae602bad3246417e5ac757", 0x80}]) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 1m5.526932933s ago: executing program 7 (id=1480): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000009b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1m5.396623375s ago: executing program 7 (id=1482): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r2, 0x506c3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c014}, 0x40800) sendmmsg$inet(r0, &(0x7f0000000300)=[{{&(0x7f00000002c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @remote}}}], 0x20}}], 0x1, 0x40000) 1m5.331913846s ago: executing program 7 (id=1485): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e20, 0x440007, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xd7}, 0x1c) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8}, 0x1c) 1m5.271017787s ago: executing program 7 (id=1488): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x67) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='devpts\x00', 0x0, 0x0) chroot(&(0x7f0000000180)='./file0\x00') mount$bind(&(0x7f00000001c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1d000, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/../file0\x00') 1m5.226899134s ago: executing program 7 (id=1492): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) tkill(r0, 0x7) wait4(r0, 0x0, 0x0, 0x0) setpriority(0x0, r0, 0x49a9b6bc) 1m5.100585096s ago: executing program 7 (id=1495): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000480)='yeah', 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000004c0)=0xce, 0x4) connect$inet(r0, &(0x7f0000000500)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f0000000580)={0x0, 0x14, &(0x7f00000005c0)=[{&(0x7f0000000600)=' ', 0x100120}], 0x1}, 0x0) 1m5.039722096s ago: executing program 35 (id=1495): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000480)='yeah', 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000004c0)=0xce, 0x4) connect$inet(r0, &(0x7f0000000500)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f0000000580)={0x0, 0x14, &(0x7f00000005c0)=[{&(0x7f0000000600)=' ', 0x100120}], 0x1}, 0x0) 35.038490053s ago: executing program 8 (id=1955): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000040)={0x77359400}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 34.11886067s ago: executing program 8 (id=1982): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000005c0)={'syzkaller0\x00', 0x1001}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newtfilter={0x34, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}}, 0x24}}, 0x0) 34.072446948s ago: executing program 8 (id=1984): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x0) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='27', 0x2) sendmsg$NFT_BATCH(r0, 0x0, 0x40000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='numa_maps\x00') 34.031308135s ago: executing program 8 (id=1985): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) unshare(0x6020400) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b1052, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) 33.433868847s ago: executing program 8 (id=1989): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x47f0, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, 0x0, 0x0) perf_event_open(&(0x7f0000000b00)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x1d, 0x945fd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x400007, 0x100}, 0x204, 0x4, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000b80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0xe, &(0x7f00000001c0)=ANY=[@ANYBLOB="bf16000000000000b70100003b0204007b1ae0ff00000000b7010000000000007b1ae8ff000000007b1af0ff00000000bf61000000000000b702000001000000bfa300000000000007030000e0ffffffb7040000180000008500000049000000b70000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x36, 0x0, &(0x7f0000000340)="52540012345652540012345786dd6000000000003b400000000000000000000000000000000100000000000000000000000000000001", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 33.269046285s ago: executing program 8 (id=1992): sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[], 0x20}}, 0x44) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./trace\x00', &(0x7f0000000480)='tracefs\x00', 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./trace/events/irq/irq_handler_entry/filter\x00', 0x2, 0x0) write(r0, &(0x7f0000000580)='name ~ \"*\"', 0xa) 33.250435318s ago: executing program 36 (id=1992): sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[], 0x20}}, 0x44) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./trace\x00', &(0x7f0000000480)='tracefs\x00', 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./trace/events/irq/irq_handler_entry/filter\x00', 0x2, 0x0) write(r0, &(0x7f0000000580)='name ~ \"*\"', 0xa) 8.969922457s ago: executing program 1 (id=2541): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) setuid(0xee00) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f680, 0x1, 0x39c}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) io_uring_enter(r0, 0x12a, 0x14, 0x17, 0x0, 0x0) 8.720491559s ago: executing program 1 (id=2536): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000001740)={0x1, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000017c0)={0x0, 0x1c, &(0x7f0000001800)=[@in6={0xa, 0x4e21, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}]}, &(0x7f0000001840)=0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, 0x0, 0x0) 1.726337455s ago: executing program 9 (id=2539): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x40880, 0x0) r2 = dup(r1) readv(r2, &(0x7f0000001340)=[{&(0x7f0000000280)=""/85, 0x55}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 1.726029965s ago: executing program 9 (id=2540): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x1, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000001ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xff00, 0xffffffffffffffff, 0x8, &(0x7f0000001b00), 0x0, 0x10, &(0x7f0000001b40), 0xfffffffffffffd00}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1.725741155s ago: executing program 5 (id=2543): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x601, 0x1000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001a00)=@newtfilter={0x58, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28, 0x2, [@TCA_CGROUP_EMATCHES={0x4}, @TCA_CGROUP_EMATCHES={0x20, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0x5, 0x0, 0xfff8}, "8da985"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7ff}}]}]}}]}, 0x58}}, 0x0) 1.724975115s ago: executing program 5 (id=2545): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x102400, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$GETPID(0x0, 0x2, 0xb, 0x0) semop(0x0, &(0x7f0000000080), 0x0) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x4199831, 0xffffffffffffffff, 0x10000000) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000000300)=0xe0, 0x4) getsockopt$inet6_tcp_int(r0, 0x6, 0x5, 0x0, 0x0) 1.724194365s ago: executing program 5 (id=2548): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000440)=[@in={0x2, 0x4e20, @remote}]}, &(0x7f00000004c0)=0x10) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001f00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000400)={r2}, 0x8) 1.008035757s ago: executing program 1 (id=2550): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xf, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x81}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x10000, 0xffffff87}]}}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x8, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x5, 0x400055}]}}}}}}}, 0x0) 1.007242808s ago: executing program 9 (id=2551): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x8d4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81ffffffffb9040a1d080300000000e8fea4a11800150006001470c1600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x20000004) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x0, @mcast1}, 0x80, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) 1.006514808s ago: executing program 5 (id=2552): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x350, 0x10000) ptrace$cont(0x7, r0, 0x0, 0x0) tkill(r0, 0x13) wait4(r0, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r0, 0x388, 0x237cd6e2) 919.530443ms ago: executing program 9 (id=2554): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)=0x8, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000240)="af", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000b80)="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", 0x390}, {&(0x7f00000003c0)="439e9c06fc666cabc8569d63a866b31ff3ceda1e28f03f455e96a02001fc3fb089ed9e5234", 0x25}], 0x2}}], 0x2, 0x0) 904.119565ms ago: executing program 1 (id=2565): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x18, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x3, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x5, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) 868.600841ms ago: executing program 5 (id=2557): perf_event_open(&(0x7f0000000e40)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x601, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x4, 0x5}, 0x10e848, 0x1224, 0x9, 0x5, 0x8, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000001c0)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000200)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000280), 0x10, 0x0}, 0x0) 810.978751ms ago: executing program 4 (id=2559): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="230000000300000002000000ffff000005"], 0x48) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x200, 0x80000000, 0x0, 0x9, 0x800001, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x6020400) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x1000410, &(0x7f0000000200)={[{@init_itable_val={'init_itable', 0x3d, 0xd4d}}, {@bsdgroups}], [{@smackfshat={'smackfshat', 0x3d, '\']'}}, {@flag='nomand'}]}, 0x1, 0x517, &(0x7f0000000dc0)="$eJzs3c9vW0kdAPDvc+Imm3XXWdgDIGDLstBFVZ0f3Y1Wy4HuBYRWKyFWnDh0Q+KNoth1FCelCT2kR+5IVOIEfwI3Dkg9ceDGDW5cygGpQAVqkDgYvefXxE3i2ml+uI0/H+n1zcx7yXcm6cz4TWtPAEPrUkRsR8SFiPg0Isp5eZIfcb19pPc9fnRnYefRnYUkWq1P/plk19Oy6Pia1Kv59xyPiB9+L+InycG4zc2tlflarbqW56fW66tTzc2tq8uFvGR2bmZu+v1r78322ZLRnne8Wf/tw+8uf/Sj3//uKw/+tP2tn6XVKv38Ynatsx0nqd30YpT21fSj0wg2IKP535/nUDzpunA0aW/7XES8lfX/coz00Y8AgJdbq1WOVrkzDwCcd+nzfymSQiVfCyhFoVCptNfw3oiJQq3RXL9SbmzcXIxsDWsyioXPlmvV6XytcDKKSZqfydJ7+dl9+WsR8XpE/GLslSxfWWjUFgf5wgcAhtir++b//4y1538A4Jwb70i3RgZYEQDgzIwPugIAwJkz/wPA8DnC/O/dgQBwTnj+B4DhY/4HgOHTc/6/ezb1AADOxA8+/jg9Wjv5518v3trc+Hbp1tXFanOlUt9YqCw01lYrS43GUq1aWWi1en2/WqOxOvPubra5uXWj3ti4uX5juT6/VL1R9YHPADB4r795/y9JRGx/8Ep2RMdeDuZqON8Kg64AMDA+7QeGl/fzwPDq4xnfMgCcc4ds0fuUrv9F6N7zb/4KDNblL1r/h2Fl/R+G1/Ot/3/nxOsBnD3r/zC8Wq2ky57/0aUcAHjZWeMHjvXv/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADCkStmRFCrZXuDb6Z+FSiXiYkRMRjH5bLlWnY6I1yLiz2PFsTQ/M+hKAwDHVPh7ku//dbn8dmn/1QvJf8eyc0T89Fef/PL2/Pr62kxa/q/d8vV7efnshUE0AADodP1gUXuezs8dD/KPH91ZeHKcZRUfftjeXDSNu5Mf7SujMZqdx6MYERP/TvJ8W/p6ZeQE4m/fjYgv7LX/dkeE0njEZL7z6f74aeyLpxB/7+efZGsze/ELT8UvZNfSczH7WXz+BOoCw+b+h+1xMu97aRfL+18hLmXnw/v/eDZCHd+T8W/nwPhX2B3/Rg7ET7I+f2k3/+yaPHz3D98/UNgqt6/djfjS6GHxk934SZfx9+0+2/jXL3/1rW7XWr+OuByHx2+rZ8Ps1Hp9daq5uXV1uT6/VF2q3pydnZuZm37/2nuzU2NRq05PZSvVfzwsxj8+uPJat/hp+ye6xB/v0f5v9Nn+3/zv0x9/7Rnx3/n64b//N54RP50Tv9ln/PmJ6122727v/r/Ypf29fv9X+oz/4G9bi33eCgCcgebm1sp8rVZd65FIX2v2uqdHolU+1pdLnFYitiNegGoMaSJ9Df4CVONAYtAjE3Da9jr9oGsCAAAAAAAAAAAAAAB009zcWhmLI79D6J2j3DzoNgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB+/T8AAP//Z6HJ8Q==") sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980), &(0x7f00000009c0), 0x7ff, r0}, 0x38) 796.405324ms ago: executing program 1 (id=2560): socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0) 795.867024ms ago: executing program 9 (id=2561): r0 = fsopen(&(0x7f0000000040)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000080)='.\x00', 0x100000, 0x0) flock(r2, 0x1) mknod(&(0x7f0000000000)='./bus\x00', 0x1000, 0x0) 735.270374ms ago: executing program 1 (id=2562): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000008c0)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000900)='cdg', 0x3) connect$inet(r0, &(0x7f0000000940)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000dc0)="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", 0xffffff5d, 0x12, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000f80)='htcp', 0x4) recvfrom$inet(r0, &(0x7f0000001200), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 735.067714ms ago: executing program 0 (id=2563): r0 = socket$inet(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f0000000080)='127.:.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,soft,timeo=1,retrans=1\x00', 0x5e}]}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 734.906454ms ago: executing program 5 (id=2564): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2c7, &(0x7f0000000100)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}]}, &(0x7f0000000400)='GPL\x00', 0x700, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x1b, r0, 0x8, &(0x7f0000000440)={0x8, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000780)=[r0, r1, r1, r0, r0, r1], &(0x7f00000007c0)=[{0x0, 0x5, 0xf}, {0x3, 0x2, 0x11, 0x8}, {0x4, 0x3, 0xe, 0x6}], 0x10, 0x4}, 0x94) 730.107465ms ago: executing program 9 (id=2573): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) membarrier(0x10, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000140)={0x0}) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000240)) pselect6(0x40, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000003c0)={0x1f, 0x3, 0x0, 0x0, 0x1000000002, 0x0, 0x0, 0x6}, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000400)={r1, 0x3, r2, 0x27, 0x80000}) 520.206871ms ago: executing program 0 (id=2566): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x1cf) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='27', 0x2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) mknod(&(0x7f0000000000)='./proc/thread-self/fail-nth/file0\x00', 0x10, 0x7ff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000006000000000000000300009301"], &(0x7f0000019b00)=""/4089, 0x4e, 0xff9, 0x9}, 0x28) 519.626601ms ago: executing program 4 (id=2567): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x1, r1, 0x0, 0x4, 0x0) 392.252342ms ago: executing program 0 (id=2568): r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x2, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x681}]}, 0x34}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295a5, 0x0, 0x3, {0xa, 0x18, 0x46, 0xc8, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x547}]}, 0x92}, 0x1, 0x0, 0x0, 0x80}, 0x0) 179.188169ms ago: executing program 4 (id=2569): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000cc0)={r2, 0x3}, &(0x7f0000001740)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r2, @in6={{0xa, 0x4e24, 0x5, @empty, 0x2800}}, 0xb, 0x1003, 0x20000, 0x9, 0x36, 0x1000, 0x4}, 0x9c) 178.924549ms ago: executing program 0 (id=2570): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x207, &(0x7f0000000040)={0x0, 0x30bd, 0xc000, 0x5, 0x40000183}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x6da0, 0x7721, 0x16, 0x0, 0x0) 149.425854ms ago: executing program 0 (id=2571): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind(r0, &(0x7f0000000040)=@can={0x1d, r1, 0x1, 0x2}, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r2, &(0x7f0000000200)={&(0x7f0000000240)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f00000002c0)=@can={{0x1}, 0x8, 0x0, 0x0, 0x0, "0100"}, 0x10}}, 0x0) read(r0, &(0x7f0000001300)=""/100, 0x64) 140.145216ms ago: executing program 4 (id=2572): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r2, 0x2000009) sendfile(r1, r2, 0x0, 0x20000000000006) vmsplice(r0, &(0x7f0000000380)=[{&(0x7f00000002c0)='u', 0x1}, {&(0x7f0000000300)="ed4c03dc943306d1eac0551678a1567eb412e524dfc4aa81dac53c60df89e3486d3c8c8809ff64b4d8272070f6182769d2436b255e5421ccdd4db22839a8b8f6bdc7e1212fcfeb6ab15aaba7b370356ec1edae7b42df8500e628a4a39a749780126c3f067dad50", 0x67}, {&(0x7f0000000940)="0210f536833081421cac4e6b42b8d2e9a1fcf7043b5f9bde70463f6e28cc0309de398f69f23bc58dae4f5480836674a9f42fe26ea0e81b5438a187b3d37a1992bc0930e9c5b51040f9f223df4f26d239af62e58eb863952cb809b6a464b6e54116c9965970f7c3b0920b62bae97f3997bfde575de7ea297df8024f22c5fa922487ced0658e1c17cdc70638f34908d70a2c82af4132097ec9fa8c156de92fd636ec4b896e1a39d7258b8fbbf01d39334381b40d3c3b5923f911b0bbbbc37b85407b4084eb71c6aeaa54edf86918bc94b33886286e49ea7bc44bb94dfa59b86213b8b34b449d2a9f546e97580f452929f3e1b77db09d8ec4", 0xf7}, {&(0x7f0000000f00)="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", 0xea1}], 0x4, 0x0) 116.172529ms ago: executing program 0 (id=2574): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @loopback}}, 0x0, 0x0, 0x24, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f0000000140)=0x3d82, 0x4) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 241.19µs ago: executing program 4 (id=2575): alarm(0x38) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) alarm(0x7f) 0s ago: executing program 4 (id=2576): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) shutdown(r0, 0x1) timer_create(0x1, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000009c0), &(0x7f0000000a00)='./file0\x00', 0x200000, &(0x7f0000000a40)=ANY=[], 0x1, 0x392, &(0x7f0000001280)="$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") mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000d80)=0xc, 0x6, 0x2) kernel console output (not intermixed with test programs): ASK> [ 116.955031][ T8033] __dump_stack+0x1d/0x30 [ 116.955065][ T8033] dump_stack_lvl+0x95/0xd0 [ 116.955094][ T8033] dump_stack+0x15/0x1b [ 116.955119][ T8033] should_fail_ex+0x262/0x280 [ 116.955162][ T8033] ? bpf_prog_alloc_no_stats+0xc4/0x390 [ 116.955195][ T8033] should_failslab+0x8c/0xb0 [ 116.955226][ T8033] __kmalloc_cache_noprof+0x5d/0x3e0 [ 116.955261][ T8033] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 116.955378][ T8033] ? bpf_prog_alloc_no_stats+0xc4/0x390 [ 116.955415][ T8033] bpf_prog_alloc_no_stats+0xc4/0x390 [ 116.955516][ T8033] bpf_prog_alloc+0x3c/0x150 [ 116.955557][ T8033] bpf_prog_create_from_user+0x80/0x260 [ 116.955593][ T8033] ? __pfx_seccomp_check_filter+0x10/0x10 [ 116.955620][ T8033] do_seccomp+0x5ef/0xa40 [ 116.955669][ T8033] ? restore_fpregs_from_fpstate+0x61/0x110 [ 116.955711][ T8033] __x64_sys_seccomp+0x40/0x50 [ 116.955740][ T8033] x64_sys_call+0x3f0/0x2550 [ 116.955766][ T8033] do_syscall_64+0x112/0x360 [ 116.955884][ T8033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.955913][ T8033] RIP: 0033:0x7f63ec71f559 [ 116.955933][ T8033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.956109][ T8033] RSP: 002b:00007f63eb177028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 116.956135][ T8033] RAX: ffffffffffffffda RBX: 00007f63ec9a5fa0 RCX: 00007f63ec71f559 [ 116.956165][ T8033] RDX: 0000200000000040 RSI: 0000000000000000 RDI: 0000000000000001 [ 116.956187][ T8033] RBP: 00007f63ec7b6b20 R08: 0000000000000000 R09: 0000000000000000 [ 116.956231][ T8033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.956248][ T8033] R13: 00007f63ec9a6038 R14: 00007f63ec9a5fa0 R15: 00007ffef12ffe68 [ 116.956277][ T8033] [ 117.447732][ T8064] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1573'. [ 117.523720][ T8074] xt_hashlimit: size too large, truncated to 1048576 [ 117.824096][ T8100] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 117.914361][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 117.914389][ T29] audit: type=1400 audit(1792732732.886:925): avc: denied { mount } for pid=8108 comm="syz.1.1593" name="/" dev="autofs" ino=20581 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 118.075767][ T8127] rxe_eth0 speed is unknown, defaulting to 1000 [ 118.093441][ T8135] bond0: entered promiscuous mode [ 118.093467][ T8135] bond_slave_0: entered promiscuous mode [ 118.093572][ T8135] bond_slave_1: entered promiscuous mode [ 118.585520][ T29] audit: type=1400 audit(1792732733.556:926): avc: denied { create } for pid=8167 comm="syz.4.1620" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 118.587246][ T29] audit: type=1400 audit(1792732733.566:927): avc: denied { map } for pid=8167 comm="syz.4.1620" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=20702 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 118.587336][ T29] audit: type=1400 audit(1792732733.566:928): avc: denied { read write } for pid=8167 comm="syz.4.1620" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=20702 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 119.153837][ T29] audit: type=1400 audit(1792732734.126:929): avc: denied { write } for pid=8192 comm="syz.0.1629" name="mcfilter" dev="proc" ino=4026532409 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 119.464630][ T8205] bridge1: entered promiscuous mode [ 119.464655][ T8205] bridge1: entered allmulticast mode [ 119.491640][ T8201] 9pnet: p9_errstr2errno: server reported unknown error ile0 [ 119.527097][ T8212] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1637'. [ 119.671435][ T8234] FAULT_INJECTION: forcing a failure. [ 119.671435][ T8234] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.671477][ T8234] CPU: 0 UID: 0 PID: 8234 Comm: syz.8.1648 Not tainted syzkaller #0 PREEMPT(lazy) [ 119.671533][ T8234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 119.671549][ T8234] Call Trace: [ 119.671556][ T8234] [ 119.671564][ T8234] __dump_stack+0x1d/0x30 [ 119.671593][ T8234] dump_stack_lvl+0x95/0xd0 [ 119.671624][ T8234] dump_stack+0x15/0x1b [ 119.671718][ T8234] should_fail_ex+0x262/0x280 [ 119.671757][ T8234] should_fail+0xb/0x20 [ 119.671780][ T8234] should_fail_usercopy+0x1a/0x20 [ 119.671804][ T8234] copy_folio_from_iter_atomic+0x24b/0x10a0 [ 119.671873][ T8234] ? shmem_write_begin+0xfc/0x1f0 [ 119.671949][ T8234] ? shmem_write_begin+0x135/0x1f0 [ 119.672024][ T8234] generic_perform_write+0x2c4/0x490 [ 119.672099][ T8234] shmem_file_write_iter+0xc5/0xf0 [ 119.672161][ T8234] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 119.672201][ T8234] vfs_write+0x57a/0x990 [ 119.672313][ T8234] ksys_write+0xdc/0x1a0 [ 119.672337][ T8234] __x64_sys_write+0x40/0x50 [ 119.672360][ T8234] x64_sys_call+0x154e/0x2550 [ 119.672412][ T8234] do_syscall_64+0x112/0x360 [ 119.672519][ T8234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.672571][ T8234] RIP: 0033:0x7f1ebb41f559 [ 119.672600][ T8234] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.672722][ T8234] RSP: 002b:00007f1eb9e77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 119.672757][ T8234] RAX: ffffffffffffffda RBX: 00007f1ebb6a5fa0 RCX: 00007f1ebb41f559 [ 119.672776][ T8234] RDX: 000000000208e24b RSI: 0000200000000180 RDI: 0000000000000003 [ 119.672822][ T8234] RBP: 00007f1ebb4b6b20 R08: 0000000000000000 R09: 0000000000000000 [ 119.672837][ T8234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.672850][ T8234] R13: 00007f1ebb6a6038 R14: 00007f1ebb6a5fa0 R15: 00007ffd17663668 [ 119.672903][ T8234] [ 119.816673][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 119.949054][ T29] audit: type=1400 audit(1792732734.926:930): avc: denied { unlink } for pid=3294 comm="syz-executor" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="tmpfs" ino=1661 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 120.031189][ T8246] device-mapper: ioctl: Invalid ioctl structure: uuid User Inode [ 120.031189][ T8246] , name , dev 42 [ 120.114665][ T6669] Bluetooth: hci0: Frame reassembly failed (-84) [ 120.131674][ T29] audit: type=1400 audit(1792732735.106:931): avc: denied { ioctl } for pid=8252 comm="syz.0.1657" path="socket:[20889]" dev="sockfs" ino=20889 ioctlcmd=0x800448d7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 120.163601][ T8251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1656'. [ 120.163625][ T8251] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1656'. [ 120.163668][ T8251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1656'. [ 120.163711][ T8251] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1656'. [ 120.304316][ T8262] ip_tables: iptables: counters copy to user failed while replacing table [ 120.372056][ T8268] loop4: detected capacity change from 0 to 736 [ 120.374343][ T6001] udevd[6001]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 120.541965][ T8280] ip_tables: iptables: counters copy to user failed while replacing table [ 120.862003][ T29] audit: type=1400 audit(1792732735.836:932): avc: denied { connect } for pid=8298 comm="syz.1.1676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 120.903343][ T6001] udevd[6001]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 120.904956][ T6001] udevd[6001]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 121.131686][ T8313] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 121.651256][ T8394] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1690'. [ 121.651285][ T8394] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1690'. [ 122.146505][ T8254] Bluetooth: hci0: command 0x1003 tx timeout [ 122.146966][ T3983] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 122.985741][ T8505] FAULT_INJECTION: forcing a failure. [ 122.985741][ T8505] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.985845][ T8505] CPU: 1 UID: 0 PID: 8505 Comm: syz.8.1715 Not tainted syzkaller #0 PREEMPT(lazy) [ 122.985882][ T8505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 122.985975][ T8505] Call Trace: [ 122.985984][ T8505] [ 122.985994][ T8505] __dump_stack+0x1d/0x30 [ 122.986030][ T8505] dump_stack_lvl+0x95/0xd0 [ 122.986061][ T8505] dump_stack+0x15/0x1b [ 122.986163][ T8505] should_fail_ex+0x262/0x280 [ 122.986244][ T8505] should_fail+0xb/0x20 [ 122.986271][ T8505] should_fail_usercopy+0x1a/0x20 [ 122.986304][ T8505] _copy_from_user+0x1c/0xb0 [ 122.986340][ T8505] sk_getsockopt+0xcf/0x1940 [ 122.986446][ T8505] ? rep_movs_alternative+0x1e/0xa0 [ 122.986497][ T8505] do_sock_getsockopt+0x179/0x570 [ 122.986658][ T8505] __x64_sys_getsockopt+0x11d/0x1a0 [ 122.986738][ T8505] x64_sys_call+0x1032/0x2550 [ 122.986872][ T8505] do_syscall_64+0x112/0x360 [ 122.986909][ T8505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.986940][ T8505] RIP: 0033:0x7f1ebb41f559 [ 122.986961][ T8505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.986989][ T8505] RSP: 002b:00007f1eb9e77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 122.987017][ T8505] RAX: ffffffffffffffda RBX: 00007f1ebb6a5fa0 RCX: 00007f1ebb41f559 [ 122.987154][ T8505] RDX: 0000000000000011 RSI: 0000000000000001 RDI: 0000000000000003 [ 122.987188][ T8505] RBP: 00007f1ebb4b6b20 R08: 0000000000000000 R09: 0000000000000000 [ 122.987270][ T8505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.987289][ T8505] R13: 00007f1ebb6a6038 R14: 00007f1ebb6a5fa0 R15: 00007ffd17663668 [ 122.987347][ T8505] [ 123.196293][ T8511] FAULT_INJECTION: forcing a failure. [ 123.196293][ T8511] name failslab, interval 1, probability 0, space 0, times 0 [ 123.196331][ T8511] CPU: 1 UID: 0 PID: 8511 Comm: syz.8.1718 Not tainted syzkaller #0 PREEMPT(lazy) [ 123.196357][ T8511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 123.196433][ T8511] Call Trace: [ 123.196464][ T8511] [ 123.196474][ T8511] __dump_stack+0x1d/0x30 [ 123.196509][ T8511] dump_stack_lvl+0x95/0xd0 [ 123.196552][ T8511] dump_stack+0x15/0x1b [ 123.196573][ T8511] should_fail_ex+0x262/0x280 [ 123.196596][ T8511] ? security_inode_alloc+0x37/0x100 [ 123.196706][ T8511] should_failslab+0x8c/0xb0 [ 123.196817][ T8511] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 123.196849][ T8511] ? security_inode_alloc+0x37/0x100 [ 123.196932][ T8511] security_inode_alloc+0x37/0x100 [ 123.196999][ T8511] inode_init_always_gfp+0x495/0x4e0 [ 123.197055][ T8511] ? __pfx_sock_alloc_inode+0x10/0x10 [ 123.197144][ T8511] alloc_inode+0x58/0x170 [ 123.197174][ T8511] sock_create_lite+0x79/0x290 [ 123.197216][ T8511] __netlink_kernel_create+0x8d/0x550 [ 123.197319][ T8511] ? ops_init+0x4b/0x2e0 [ 123.197358][ T8511] audit_net_init+0x8b/0x180 [ 123.197447][ T8511] ? __pfx_audit_receive+0x10/0x10 [ 123.197540][ T8511] ? __pfx_audit_multicast_bind+0x10/0x10 [ 123.197576][ T8511] ? __pfx_audit_multicast_unbind+0x10/0x10 [ 123.197609][ T8511] ops_init+0x22a/0x2e0 [ 123.197758][ T8511] setup_net+0x9f/0x230 [ 123.197788][ T8511] copy_net_ns+0x333/0x490 [ 123.197899][ T8511] create_new_namespaces+0x1f6/0x420 [ 123.197928][ T8511] unshare_nsproxy_namespaces+0x115/0x150 [ 123.197950][ T8511] ksys_unshare+0x3a3/0x690 [ 123.198003][ T8511] __x64_sys_unshare+0x1f/0x30 [ 123.198045][ T8511] x64_sys_call+0x1e33/0x2550 [ 123.198114][ T8511] do_syscall_64+0x112/0x360 [ 123.198142][ T8511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.198189][ T8511] RIP: 0033:0x7f1ebb41f559 [ 123.198234][ T8511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.198256][ T8511] RSP: 002b:00007f1eb9e77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 123.198275][ T8511] RAX: ffffffffffffffda RBX: 00007f1ebb6a5fa0 RCX: 00007f1ebb41f559 [ 123.198293][ T8511] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004a000200 [ 123.198305][ T8511] RBP: 00007f1ebb4b6b20 R08: 0000000000000000 R09: 0000000000000000 [ 123.198318][ T8511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.198332][ T8511] R13: 00007f1ebb6a6038 R14: 00007f1ebb6a5fa0 R15: 00007ffd17663668 [ 123.198402][ T8511] [ 123.221863][ T8511] audit: cannot initialize netlink socket in namespace [ 123.467282][ T8514] loop0: detected capacity change from 0 to 128 [ 123.469694][ T6001] udevd[6001]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 123.473294][ T29] audit: type=1400 audit(1792732738.446:933): avc: denied { mount } for pid=8512 comm="syz.0.1720" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 123.638012][ T29] audit: type=1400 audit(1792732738.616:934): avc: denied { unmount } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 123.690196][ T6001] udevd[6001]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 123.694544][ T6001] udevd[6001]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 123.940119][ T8537] loop0: detected capacity change from 0 to 32768 [ 123.942687][ T6001] udevd[6001]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 124.117047][ T8537] loop0: p1 p3 < > [ 124.118843][ T6001] udevd[6001]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 124.121465][ T6001] udevd[6001]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 124.123680][ T6001] udevd[6001]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 124.277365][ T8557] FAULT_INJECTION: forcing a failure. [ 124.277365][ T8557] name failslab, interval 1, probability 0, space 0, times 0 [ 124.277442][ T8557] CPU: 1 UID: 0 PID: 8557 Comm: syz.8.1734 Not tainted syzkaller #0 PREEMPT(lazy) [ 124.277472][ T8557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 124.277537][ T8557] Call Trace: [ 124.277543][ T8557] [ 124.277550][ T8557] __dump_stack+0x1d/0x30 [ 124.277574][ T8557] dump_stack_lvl+0x95/0xd0 [ 124.277597][ T8557] dump_stack+0x15/0x1b [ 124.277667][ T8557] should_fail_ex+0x262/0x280 [ 124.277761][ T8557] ? __register_sysctl_table+0x52/0xbe0 [ 124.277803][ T8557] should_failslab+0x8c/0xb0 [ 124.277833][ T8557] __kmalloc_noprof+0xb6/0x4b0 [ 124.277863][ T8557] ? __register_sysctl_table+0x52/0xbe0 [ 124.277931][ T8557] __register_sysctl_table+0x52/0xbe0 [ 124.277963][ T8557] register_pidns_sysctls+0xd9/0x130 [ 124.278061][ T8557] copy_pid_ns+0x396/0x640 [ 124.278138][ T8557] ? __ns_tree_add_raw+0x66d/0x690 [ 124.278177][ T8557] create_new_namespaces+0x168/0x420 [ 124.278198][ T8557] unshare_nsproxy_namespaces+0x115/0x150 [ 124.278263][ T8557] ksys_unshare+0x3a3/0x690 [ 124.278301][ T8557] __x64_sys_unshare+0x1f/0x30 [ 124.278336][ T8557] x64_sys_call+0x1e33/0x2550 [ 124.278393][ T8557] do_syscall_64+0x112/0x360 [ 124.278423][ T8557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.278453][ T8557] RIP: 0033:0x7f1ebb41f559 [ 124.278534][ T8557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.278556][ T8557] RSP: 002b:00007f1eb9e77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 124.278650][ T8557] RAX: ffffffffffffffda RBX: 00007f1ebb6a5fa0 RCX: 00007f1ebb41f559 [ 124.278668][ T8557] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000066000200 [ 124.278684][ T8557] RBP: 00007f1ebb4b6b20 R08: 0000000000000000 R09: 0000000000000000 [ 124.278761][ T8557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.278773][ T8557] R13: 00007f1ebb6a6038 R14: 00007f1ebb6a5fa0 R15: 00007ffd17663668 [ 124.278796][ T8557] [ 124.558686][ T8570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1740'. [ 124.589042][ T8572] veth1_to_bond: entered promiscuous mode [ 124.590902][ T8572] veth1_to_bond: entered allmulticast mode [ 124.591202][ T8572] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1741'. [ 124.624755][ T8572] veth1_to_bond (unregistering): left promiscuous mode [ 124.624798][ T8572] veth1_to_bond (unregistering): left allmulticast mode [ 124.626113][ T8575] netlink: 'syz.4.1742': attribute type 9 has an invalid length. [ 124.626129][ T8575] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1742'. [ 124.669311][ T8572] bond0: (slave bond_slave_1): Releasing backup interface [ 124.671654][ T8572] bond_slave_1 (unregistering): left promiscuous mode [ 124.704938][ T8575] netlink: 'syz.4.1742': attribute type 9 has an invalid length. [ 124.704952][ T8575] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1742'. [ 124.727009][ T6671] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.727605][ T6671] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.727651][ T6671] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.727759][ T6671] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.798109][ T8581] VFS: Mount too revealing [ 124.862615][ T8590] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 125.011335][ T8602] FAULT_INJECTION: forcing a failure. [ 125.011335][ T8602] name failslab, interval 1, probability 0, space 0, times 0 [ 125.011371][ T8602] CPU: 1 UID: 0 PID: 8602 Comm: syz.5.1755 Not tainted syzkaller #0 PREEMPT(lazy) [ 125.011403][ T8602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 125.011511][ T8602] Call Trace: [ 125.011523][ T8602] [ 125.011536][ T8602] __dump_stack+0x1d/0x30 [ 125.011575][ T8602] dump_stack_lvl+0x95/0xd0 [ 125.011601][ T8602] dump_stack+0x15/0x1b [ 125.011624][ T8602] should_fail_ex+0x262/0x280 [ 125.011693][ T8602] ? assoc_array_insert+0x75/0x19a0 [ 125.011776][ T8602] should_failslab+0x8c/0xb0 [ 125.011838][ T8602] __kmalloc_cache_noprof+0x5d/0x3e0 [ 125.011867][ T8602] ? assoc_array_insert+0x75/0x19a0 [ 125.011909][ T8602] assoc_array_insert+0x75/0x19a0 [ 125.012038][ T8602] ? __kmalloc_noprof+0x1d7/0x4b0 [ 125.012104][ T8602] ? asymmetric_key_generate_id+0x63/0x140 [ 125.012171][ T8602] ? x509_free_certificate+0x8f/0xb0 [ 125.012209][ T8602] ? kfree+0x143/0x3b0 [ 125.012246][ T8602] ? __siphash_unaligned+0x158/0x2d0 [ 125.012351][ T8602] ? siphash_3u64+0x35/0x2f0 [ 125.012418][ T8602] __key_link_begin+0x84/0x130 [ 125.012519][ T8602] __key_create_or_update+0x345/0x820 [ 125.012586][ T8602] ? ktime_get_real_seconds+0x15/0x30 [ 125.012654][ T8602] key_create_or_update+0x42/0x60 [ 125.012688][ T8602] __se_sys_add_key+0x2a5/0x360 [ 125.012739][ T8602] __x64_sys_add_key+0x67/0x80 [ 125.012808][ T8602] x64_sys_call+0x1fa9/0x2550 [ 125.012847][ T8602] do_syscall_64+0x112/0x360 [ 125.012876][ T8602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.012912][ T8602] RIP: 0033:0x7f75bfe7f559 [ 125.013005][ T8602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.013034][ T8602] RSP: 002b:00007f75be8cf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 125.013062][ T8602] RAX: ffffffffffffffda RBX: 00007f75c0105fa0 RCX: 00007f75bfe7f559 [ 125.013162][ T8602] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 125.013178][ T8602] RBP: 00007f75bff16b20 R08: ffffffffffffffff R09: 0000000000000000 [ 125.013194][ T8602] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 125.013212][ T8602] R13: 00007f75c0106038 R14: 00007f75c0105fa0 R15: 00007fffc487fa68 [ 125.013310][ T8602] [ 125.120692][ T8600] bond3: option primary_reselect: invalid value (9) [ 125.143775][ T8600] bond3 (unregistering): Released all slaves [ 125.395355][ T8614] PKCS7: Unknown OID: [4] (bad) [ 125.395371][ T8614] PKCS7: Only support pkcs7_signedData type [ 125.526880][ T29] audit: type=1400 audit(1792732740.506:935): avc: denied { setopt } for pid=8626 comm="syz.4.1765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 125.566883][ T29] audit: type=1400 audit(1792732740.546:936): avc: denied { write } for pid=8623 comm="syz.1.1764" path="socket:[21880]" dev="sockfs" ino=21880 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 125.684318][ T29] audit: type=1400 audit(1792732740.656:937): avc: denied { write } for pid=8619 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.731260][ T29] audit: type=1400 audit(1792732740.706:938): avc: denied { write } for pid=8649 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.843526][ T8654] loop1: detected capacity change from 0 to 512 [ 125.846815][ T6001] udevd[6001]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 125.876791][ T8654] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.877857][ T8654] ext4 filesystem being mounted at /378/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 125.954475][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.967106][ T6001] udevd[6001]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 125.970219][ T6001] udevd[6001]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 126.000239][ T8661] netlink: 'syz.1.1771': attribute type 1 has an invalid length. [ 126.146976][ T29] audit: type=1400 audit(1792732741.126:939): avc: denied { write } for pid=8659 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.223019][ T29] audit: type=1400 audit(1792732741.196:940): avc: denied { write } for pid=8674 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.434979][ T8677] syzkaller0: entered promiscuous mode [ 126.435007][ T8677] syzkaller0: entered allmulticast mode [ 126.645446][ T8693] __nla_validate_parse: 1 callbacks suppressed [ 126.645468][ T8693] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1778'. [ 126.670028][ T8693] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1778'. [ 126.729110][ T6671] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.847116][ T29] audit: type=1400 audit(1792732741.826:941): avc: denied { write } for pid=8695 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.340062][ T282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.747633][ T8749] ip6gre2: entered promiscuous mode [ 127.756587][ T8749] ip6gre2: entered allmulticast mode [ 127.782048][ T8753] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1793'. [ 127.847741][ T6669] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.915557][ T8761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.915668][ T8761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.989980][ T8765] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1799'. [ 128.227784][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 128.227805][ T29] audit: type=1400 audit(1792732743.196:948): avc: denied { setattr } for pid=8793 comm="chmod" name="resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 128.377835][ T282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.777179][ T5648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.966578][ T6669] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.417274][ T282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.066474][ T6672] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.817256][ T5648] net_ratelimit: 3 callbacks suppressed [ 131.817299][ T5648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.276586][ T6669] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.536788][ T282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.343111][ T29] audit: type=1400 audit(1792732748.316:949): avc: denied { write } for pid=8796 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.377395][ T6672] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.421121][ T29] audit: type=1400 audit(1792732748.396:950): avc: denied { write } for pid=8796 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.468567][ T29] audit: type=1400 audit(1792732748.446:951): avc: denied { write } for pid=8810 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.576790][ T282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.897539][ T5648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.486660][ T6655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.616551][ T3394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.856567][ T5647] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.176528][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 135.540138][ T8816] ip6gre1: entered promiscuous mode [ 135.540174][ T8816] ip6gre1: entered allmulticast mode [ 135.549527][ T6672] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 135.549789][ T6672] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 135.568698][ T8816] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 135.568811][ T8816] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 135.586892][ T5648] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 135.596999][ T6669] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.646597][ T5647] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 135.896172][ T8850] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1826'. [ 135.904449][ T8850] ip6gre1: entered promiscuous mode [ 135.904518][ T8850] ip6gre1: entered allmulticast mode [ 135.924984][ T8850] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1826'. [ 136.537653][ T5647] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 136.656660][ T8912] loop0: detected capacity change from 0 to 512 [ 136.663903][ T8913] udevd[8913]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 136.690131][ T8913] udevd[8913]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 136.691631][ T8913] udevd[8913]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 136.960397][ T29] audit: type=1400 audit(1792732751.936:952): avc: denied { create } for pid=8922 comm="syz.0.1855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 136.962116][ T29] audit: type=1400 audit(1792732751.936:953): avc: denied { bind } for pid=8922 comm="syz.0.1855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 137.289118][ T29] audit: type=1400 audit(1792732752.266:954): avc: denied { append } for pid=8940 comm="syz.0.1862" name="001" dev="devtmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 137.353651][ T8947] net_ratelimit: 4 callbacks suppressed [ 137.353717][ T8947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.353820][ T8947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.353955][ T8947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.355157][ T8947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.355291][ T8947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.355456][ T8947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.360030][ T8947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.360427][ T8947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.363718][ T8943] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 137.369983][ T8943] usb usb2: Process 8943 (syz.0.1862) called USBDEVFS_RESETEP for active endpoint 0x81 [ 137.374094][ T8946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.452471][ T8949] syzkaller1: entered promiscuous mode [ 137.452543][ T8949] syzkaller1: entered allmulticast mode [ 137.673011][ T8965] rxe_eth0 speed is unknown, defaulting to 1000 [ 137.688844][ T8965] FAULT_INJECTION: forcing a failure. [ 137.688844][ T8965] name failslab, interval 1, probability 0, space 0, times 0 [ 137.688894][ T8965] CPU: 1 UID: 0 PID: 8965 Comm: syz.1.1872 Not tainted syzkaller #0 PREEMPT(lazy) [ 137.688986][ T8965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 137.689000][ T8965] Call Trace: [ 137.689008][ T8965] [ 137.689019][ T8965] __dump_stack+0x1d/0x30 [ 137.689053][ T8965] dump_stack_lvl+0x95/0xd0 [ 137.689078][ T8965] dump_stack+0x15/0x1b [ 137.689099][ T8965] should_fail_ex+0x262/0x280 [ 137.689231][ T8965] ? __kernfs_new_node+0x70/0x440 [ 137.689278][ T8965] should_failslab+0x8c/0xb0 [ 137.689312][ T8965] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 137.689337][ T8965] ? __kernfs_new_node+0x70/0x440 [ 137.689381][ T8965] __kernfs_new_node+0x70/0x440 [ 137.689438][ T8965] ? __rcu_read_unlock+0x4e/0x70 [ 137.689467][ T8965] ? up_write+0x19/0x60 [ 137.689507][ T8965] ? kernfs_link_sibling+0x2f5/0x320 [ 137.689584][ T8965] ? __rcu_read_unlock+0x4e/0x70 [ 137.689617][ T8965] kernfs_new_node+0x107/0x140 [ 137.689654][ T8965] __kernfs_create_file+0x4b/0x180 [ 137.689750][ T8965] ? __pfx_port_attr_show+0x10/0x10 [ 137.689862][ T8965] ? __pfx_port_attr_store+0x10/0x10 [ 137.689890][ T8965] sysfs_add_file_mode_ns+0x132/0x1b0 [ 137.689938][ T8965] internal_create_group+0x43e/0x9e0 [ 137.689978][ T8965] ? kernfs_create_dir_ns+0x18f/0x1c0 [ 137.690064][ T8965] sysfs_create_groups+0x3f/0xf0 [ 137.690095][ T8965] kobject_add_internal+0x49d/0x770 [ 137.690212][ T8965] kobject_add+0xdb/0x150 [ 137.690270][ T8965] ? __kmalloc_noprof+0x1d7/0x4b0 [ 137.690307][ T8965] ib_setup_port_attrs+0xa04/0x1480 [ 137.690376][ T8965] ? kobject_put+0x108/0x180 [ 137.690458][ T8965] add_one_compat_dev+0x25c/0x360 [ 137.690524][ T8965] rdma_dev_init_net+0x17d/0x210 [ 137.690561][ T8965] ops_init+0x22a/0x2e0 [ 137.690608][ T8965] setup_net+0x9f/0x230 [ 137.690649][ T8965] copy_net_ns+0x333/0x490 [ 137.690680][ T8965] create_new_namespaces+0x1f6/0x420 [ 137.690705][ T8965] unshare_nsproxy_namespaces+0x115/0x150 [ 137.690773][ T8965] ksys_unshare+0x3a3/0x690 [ 137.690872][ T8965] __x64_sys_unshare+0x1f/0x30 [ 137.690902][ T8965] x64_sys_call+0x1e33/0x2550 [ 137.690979][ T8965] do_syscall_64+0x112/0x360 [ 137.691003][ T8965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.691034][ T8965] RIP: 0033:0x7f015ebff559 [ 137.691055][ T8965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.691108][ T8965] RSP: 002b:00007f015d64f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 137.691288][ T8965] RAX: ffffffffffffffda RBX: 00007f015ee85fa0 RCX: 00007f015ebff559 [ 137.691304][ T8965] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 137.691322][ T8965] RBP: 00007f015ec96b20 R08: 0000000000000000 R09: 0000000000000000 [ 137.691350][ T8965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.691369][ T8965] R13: 00007f015ee86038 R14: 00007f015ee85fa0 R15: 00007ffc317fa8e8 [ 137.691406][ T8965] [ 137.745739][ T282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.799005][ T8965] kobject: kobject_add_internal failed for 1 (error: -12 parent: ports) [ 138.540927][ T8978] EXT4-fs warning (device sda1): verify_group_input:162: Bad blocks count 4294705151 [ 138.662757][ T8986] FAULT_INJECTION: forcing a failure. [ 138.662757][ T8986] name failslab, interval 1, probability 0, space 0, times 0 [ 138.662864][ T8986] CPU: 0 UID: 0 PID: 8986 Comm: syz.5.1881 Not tainted syzkaller #0 PREEMPT(lazy) [ 138.662896][ T8986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 138.662912][ T8986] Call Trace: [ 138.662920][ T8986] [ 138.662931][ T8986] __dump_stack+0x1d/0x30 [ 138.662960][ T8986] dump_stack_lvl+0x95/0xd0 [ 138.663046][ T8986] dump_stack+0x15/0x1b [ 138.663071][ T8986] should_fail_ex+0x262/0x280 [ 138.663099][ T8986] ? single_open+0xc4/0x170 [ 138.663197][ T8986] should_failslab+0x8c/0xb0 [ 138.663228][ T8986] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 138.663254][ T8986] ? single_open+0xc4/0x170 [ 138.663286][ T8986] single_open+0xc4/0x170 [ 138.663361][ T8986] single_open_net+0x190/0x2a0 [ 138.663431][ T8986] proc_reg_open+0x1a4/0x350 [ 138.663490][ T8986] do_dentry_open+0x496/0xa40 [ 138.663554][ T8986] ? __pfx_proc_reg_open+0x10/0x10 [ 138.663590][ T8986] vfs_open_consume+0x46/0x1f0 [ 138.663742][ T8986] path_openat+0xc16/0x11c0 [ 138.663794][ T8986] do_file_open+0x16c/0x290 [ 138.663833][ T8986] ? __pfx_kfree_link+0x10/0x10 [ 138.663929][ T8986] do_sys_openat2+0xa1/0x140 [ 138.663979][ T8986] __x64_sys_openat+0xf2/0x120 [ 138.664056][ T8986] x64_sys_call+0x1f72/0x2550 [ 138.664141][ T8986] do_syscall_64+0x112/0x360 [ 138.664179][ T8986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.664201][ T8986] RIP: 0033:0x7f75bfe3fd8e [ 138.664216][ T8986] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 138.664283][ T8986] RSP: 002b:00007f75be8ceec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 138.664316][ T8986] RAX: ffffffffffffffda RBX: 00007f75be8cf6c0 RCX: 00007f75bfe3fd8e [ 138.664342][ T8986] RDX: 0000000000000002 RSI: 00007f75be8cef90 RDI: ffffffffffffff9c [ 138.664432][ T8986] RBP: 00007f75bff16b20 R08: 0000000000000000 R09: 0000000000000000 [ 138.664446][ T8986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.664462][ T8986] R13: 00007f75c0106038 R14: 00007f75c0105fa0 R15: 00007fffc487fa68 [ 138.664513][ T8986] [ 138.837944][ T29] audit: type=1400 audit(1792732753.796:955): avc: denied { connect } for pid=8988 comm="syz.5.1883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 139.708910][ T9032] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1899'. [ 139.737149][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 140.221181][ T9061] loop4: detected capacity change from 0 to 128 [ 140.223371][ T8913] udevd[8913]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 140.331106][ T9065] bridge2: entered promiscuous mode [ 140.391233][ T8913] udevd[8913]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 140.394484][ T8913] udevd[8913]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 140.425213][ T9071] bond0: no command found in slaves file - use +ifname or -ifname [ 140.546687][ T9086] loop4: detected capacity change from 0 to 512 [ 140.548714][ T8913] udevd[8913]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 140.554537][ T8958] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 140.591969][ T9086] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.592235][ T9086] ext4 filesystem being mounted at /376/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.595660][ T9086] EXT4-fs (loop4): shut down requested (0) [ 140.643253][ T9086] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 140.643297][ T9086] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 140.643500][ T9086] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 140.670505][ T29] audit: type=1400 audit(1792732755.616:956): avc: denied { write } for pid=9085 comm="syz.4.1921" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 140.670552][ T29] audit: type=1400 audit(1792732755.616:957): avc: denied { open } for pid=9085 comm="syz.4.1921" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 140.801974][ T29] audit: type=1400 audit(1792732755.776:958): avc: denied { write } for pid=9091 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.849222][ T29] audit: type=1400 audit(1792732755.826:959): avc: denied { write } for pid=9112 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.874415][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.893282][ T8913] udevd[8913]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 140.909632][ T8913] udevd[8913]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 140.935859][ T9118] FAULT_INJECTION: forcing a failure. [ 140.935859][ T9118] name failslab, interval 1, probability 0, space 0, times 0 [ 140.935904][ T9118] CPU: 0 UID: 0 PID: 9118 Comm: syz.0.1929 Not tainted syzkaller #0 PREEMPT(lazy) [ 140.935938][ T9118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 140.936006][ T9118] Call Trace: [ 140.936015][ T9118] [ 140.936025][ T9118] __dump_stack+0x1d/0x30 [ 140.936069][ T9118] dump_stack_lvl+0x95/0xd0 [ 140.936092][ T9118] dump_stack+0x15/0x1b [ 140.936134][ T9118] should_fail_ex+0x262/0x280 [ 140.936204][ T9118] ? ipv6_flowlabel_opt+0x946/0x1b30 [ 140.936287][ T9118] should_failslab+0x8c/0xb0 [ 140.936321][ T9118] __kmalloc_noprof+0xb6/0x4b0 [ 140.936351][ T9118] ? should_fail_ex+0xdb/0x280 [ 140.936455][ T9118] ? ipv6_flowlabel_opt+0x946/0x1b30 [ 140.936491][ T9118] ipv6_flowlabel_opt+0x946/0x1b30 [ 140.936524][ T9118] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 140.936715][ T9118] do_ipv6_setsockopt+0xaed/0x2040 [ 140.936754][ T9118] ? __pfx_futex_wake_mark+0x10/0x10 [ 140.936792][ T9118] ? __rcu_read_unlock+0x4e/0x70 [ 140.936924][ T9118] ? avc_has_perm_noaudit+0xac/0x160 [ 140.937026][ T9118] ? selinux_netlbl_socket_setsockopt+0x20d/0x2f0 [ 140.937071][ T9118] ipv6_setsockopt+0x59/0x130 [ 140.937112][ T9118] rawv6_setsockopt+0x1cc/0x3f0 [ 140.937180][ T9118] sock_common_setsockopt+0x69/0x80 [ 140.937214][ T9118] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 140.937329][ T9118] __sys_setsockopt+0x184/0x200 [ 140.937437][ T9118] __x64_sys_setsockopt+0x64/0x80 [ 140.937460][ T9118] x64_sys_call+0x248f/0x2550 [ 140.937487][ T9118] do_syscall_64+0x112/0x360 [ 140.937538][ T9118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.937621][ T9118] RIP: 0033:0x7f63ec71f559 [ 140.937645][ T9118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.937666][ T9118] RSP: 002b:00007f63eb177028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 140.937689][ T9118] RAX: ffffffffffffffda RBX: 00007f63ec9a5fa0 RCX: 00007f63ec71f559 [ 140.937709][ T9118] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003 [ 140.937727][ T9118] RBP: 00007f63ec7b6b20 R08: 0000000000000032 R09: 0000000000000000 [ 140.937775][ T9118] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.937788][ T9118] R13: 00007f63ec9a6038 R14: 00007f63ec9a5fa0 R15: 00007ffef12ffe68 [ 140.937815][ T9118] [ 141.200068][ T9128] loop0: detected capacity change from 0 to 1024 [ 141.200593][ T9128] EXT4-fs: Ignoring removed bh option [ 141.218455][ T9128] EXT4-fs (loop0): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 141.220614][ T8913] udevd[8913]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 141.255916][ T9128] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.275750][ T29] audit: type=1400 audit(1792732756.246:960): avc: denied { write } for pid=9127 comm="syz.0.1932" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 141.287734][ T9128] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 141.298526][ T29] audit: type=1400 audit(1792732756.276:961): avc: denied { map } for pid=9127 comm="syz.0.1932" path="/347/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 141.298646][ T29] audit: type=1400 audit(1792732756.276:962): avc: denied { execute } for pid=9127 comm="syz.0.1932" path="/347/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 141.481683][ T29] audit: type=1400 audit(1792732756.456:963): avc: denied { write } for pid=9129 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.491913][ T9146] vhci_hcd vhci_hcd.0: Expecting SOCK_STREAM - found 3 [ 141.557853][ T29] audit: type=1400 audit(1792732756.536:964): avc: denied { write } for pid=9160 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.630431][ T3288] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.889653][ T9198] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1952'. [ 142.173257][ T9227] loop0: detected capacity change from 0 to 512 [ 142.184544][ T8913] udevd[8913]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 142.213420][ T9227] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.213700][ T9227] ext4 filesystem being mounted at /354/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.250820][ T9242] ./dev/sda1: Can't lookup blockdev [ 142.275261][ T6668] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80 [ 142.292067][ T3288] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.304639][ T8913] udevd[8913]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 142.316178][ T8913] udevd[8913]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 142.339742][ T9250] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1967'. [ 142.356443][ T6672] net_ratelimit: 18 callbacks suppressed [ 142.356465][ T6672] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.402417][ T6655] IPVS: starting estimator thread 0... [ 142.500532][ T9258] IPVS: using max 2256 ests per chain, 112800 per kthread [ 142.560239][ T9275] FAULT_INJECTION: forcing a failure. [ 142.560239][ T9275] name failslab, interval 1, probability 0, space 0, times 0 [ 142.560280][ T9275] CPU: 0 UID: 0 PID: 9275 Comm: syz.0.1977 Not tainted syzkaller #0 PREEMPT(lazy) [ 142.560344][ T9275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 142.560406][ T9275] Call Trace: [ 142.560413][ T9275] [ 142.560422][ T9275] __dump_stack+0x1d/0x30 [ 142.560508][ T9275] dump_stack_lvl+0x95/0xd0 [ 142.560537][ T9275] dump_stack+0x15/0x1b [ 142.560565][ T9275] should_fail_ex+0x262/0x280 [ 142.560596][ T9275] ? tipc_nametbl_insert_publ+0x527/0x950 [ 142.560782][ T9275] should_failslab+0x8c/0xb0 [ 142.560812][ T9275] __kmalloc_cache_noprof+0x5d/0x3e0 [ 142.560845][ T9275] ? tipc_nametbl_insert_publ+0x527/0x950 [ 142.560953][ T9275] tipc_nametbl_insert_publ+0x527/0x950 [ 142.561055][ T9275] tipc_nametbl_publish+0x155/0x210 [ 142.561099][ T9275] tipc_sk_join+0x329/0x450 [ 142.561219][ T9275] tipc_setsockopt+0x594/0x620 [ 142.561247][ T9275] ? __pfx_tipc_setsockopt+0x10/0x10 [ 142.561271][ T9275] __sys_setsockopt+0x184/0x200 [ 142.561375][ T9275] __x64_sys_setsockopt+0x64/0x80 [ 142.561398][ T9275] x64_sys_call+0x248f/0x2550 [ 142.561477][ T9275] do_syscall_64+0x112/0x360 [ 142.561535][ T9275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.561559][ T9275] RIP: 0033:0x7f63ec71f559 [ 142.561575][ T9275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.561628][ T9275] RSP: 002b:00007f63eb177028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 142.561655][ T9275] RAX: ffffffffffffffda RBX: 00007f63ec9a5fa0 RCX: 00007f63ec71f559 [ 142.561675][ T9275] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000003 [ 142.561692][ T9275] RBP: 00007f63ec7b6b20 R08: 000000000000002e R09: 0000000000000000 [ 142.561710][ T9275] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000000 [ 142.561728][ T9275] R13: 00007f63ec9a6038 R14: 00007f63ec9a5fa0 R15: 00007ffef12ffe68 [ 142.561779][ T9275] [ 142.561810][ T9275] tipc: Failed to bind to 66,4294966268,4294966268 [ 142.937408][ T3394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.968395][ T9291] FAULT_INJECTION: forcing a failure. [ 142.968395][ T9291] name failslab, interval 1, probability 0, space 0, times 0 [ 142.968437][ T9291] CPU: 0 UID: 0 PID: 9291 Comm: syz.8.1984 Not tainted syzkaller #0 PREEMPT(lazy) [ 142.968513][ T9291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 142.968531][ T9291] Call Trace: [ 142.968602][ T9291] [ 142.968609][ T9291] __dump_stack+0x1d/0x30 [ 142.968634][ T9291] dump_stack_lvl+0x95/0xd0 [ 142.968660][ T9291] dump_stack+0x15/0x1b [ 142.968689][ T9291] should_fail_ex+0x262/0x280 [ 142.968791][ T9291] should_failslab+0x8c/0xb0 [ 142.968821][ T9291] kmem_cache_alloc_lru_noprof+0x61/0x3e0 [ 142.968850][ T9291] ? __d_alloc+0x34/0x320 [ 142.968874][ T9291] ? __d_alloc+0x34/0x320 [ 142.968901][ T9291] __d_alloc+0x34/0x320 [ 142.968986][ T9291] __d_alloc_parallel+0x4f/0xd80 [ 142.969016][ T9291] ? __d_add+0x17b/0x1a0 [ 142.969047][ T9291] ? __rcu_read_unlock+0x4e/0x70 [ 142.969075][ T9291] ? __d_lookup+0x30c/0x340 [ 142.969134][ T9291] d_alloc_parallel+0x1f/0x30 [ 142.969254][ T9291] lookup_open+0x21d/0x1010 [ 142.969399][ T9291] path_openat+0x492/0x11c0 [ 142.969535][ T9291] do_file_open+0x16c/0x290 [ 142.969666][ T9291] ? __pfx_kfree_link+0x10/0x10 [ 142.969863][ T9291] do_sys_openat2+0xa1/0x140 [ 142.970092][ T9291] __x64_sys_openat+0xf2/0x120 [ 142.970200][ T9291] x64_sys_call+0x1f72/0x2550 [ 142.970284][ T9291] do_syscall_64+0x112/0x360 [ 142.970310][ T9291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.970403][ T9291] RIP: 0033:0x7f1ebb3dfd8e [ 142.970469][ T9291] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 142.970535][ T9291] RSP: 002b:00007f1eb9e76ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 142.970590][ T9291] RAX: ffffffffffffffda RBX: 00007f1eb9e776c0 RCX: 00007f1ebb3dfd8e [ 142.970610][ T9291] RDX: 0000000000000002 RSI: 00007f1eb9e76f90 RDI: ffffffffffffff9c [ 142.970629][ T9291] RBP: 00007f1ebb4b6b20 R08: 0000000000000000 R09: 0000000000000000 [ 142.970648][ T9291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.970666][ T9291] R13: 00007f1ebb6a6038 R14: 00007f1ebb6a5fa0 R15: 00007ffd17663668 [ 142.970689][ T9291] [ 143.501322][ T5648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.510719][ T6672] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.583733][ T9300] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 143.912884][ T5648] rxe_eth0 speed is unknown, defaulting to 1000 [ 143.913152][ T9308] rxe0: rxe_newlink: already configured on rxe_eth0 [ 143.929900][ T9308] rxe_eth0 speed is unknown, defaulting to 1000 [ 143.976734][ T3394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.978029][ T5648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.013091][ T9319] batman_adv: batadv0: Adding interface: syzkaller0 [ 144.013353][ T9319] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.013412][ T9319] batman_adv: batadv0: Interface activated: syzkaller0 [ 144.023705][ T9318] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 144.065130][ T9318] batman_adv: batadv0: Removing interface: syzkaller0 [ 144.140393][ T9308] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.140445][ T9308] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.140569][ T9308] bridge_slave_0: entered allmulticast mode [ 144.141161][ T9308] bridge_slave_0: entered promiscuous mode [ 144.156087][ T9308] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.156224][ T9308] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.156540][ T9308] bridge_slave_1: entered allmulticast mode [ 144.164931][ T9308] bridge_slave_1: entered promiscuous mode [ 144.189809][ T9308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.191967][ T9308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.214645][ T9308] team0: Port device team_slave_0 added [ 144.230945][ T9308] team0: Port device team_slave_1 added [ 144.251736][ T9308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.251752][ T9308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.251786][ T9308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.255143][ T9308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.255166][ T9308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.255266][ T9308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.341670][ T9308] hsr_slave_0: entered promiscuous mode [ 144.345755][ T9308] hsr_slave_1: entered promiscuous mode [ 144.346249][ T9308] debugfs: 'hsr0' already exists in 'hsr' [ 144.348408][ T9308] Cannot create hsr debugfs directory [ 144.401439][ T9338] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2000'. [ 144.409487][ T9338] 8021q: adding VLAN 0 to HW filter on device bond3 [ 144.421676][ T9338] bond3: Unable to set up delay as MII monitoring is disabled [ 144.435812][ T9341] netlink: 'syz.0.2001': attribute type 1 has an invalid length. [ 144.452926][ T9341] bond5: entered promiscuous mode [ 144.453159][ T9341] 8021q: adding VLAN 0 to HW filter on device bond5 [ 144.487598][ T9341] 8021q: adding VLAN 0 to HW filter on device bond5 [ 144.491099][ T9341] bond5: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 144.491129][ T9341] bond5: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 144.503309][ T9341] bond5: (slave ip6gre2): making interface the new active one [ 144.503332][ T9341] ip6gre2: entered promiscuous mode [ 144.515130][ T9341] bond5: (slave ip6gre2): Enslaving as an active interface with an up link [ 144.646914][ T6668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.974550][ T9360] netlink: 'syz.4.2008': attribute type 1 has an invalid length. [ 144.974636][ T9360] netlink: 'syz.4.2008': attribute type 4 has an invalid length. [ 144.974647][ T9360] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.2008'. [ 145.011265][ T9362] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 145.016477][ T282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.101204][ T6655] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.122318][ T9367] netlink: 'syz.4.2011': attribute type 1 has an invalid length. [ 145.130524][ T9367] 8021q: adding VLAN 0 to HW filter on device bond4 [ 145.139918][ T9367] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.142819][ T9367] bond4: (slave batadv0): Enslaving as a backup interface with an up link [ 145.162233][ T6655] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.187244][ T9370] loop4: detected capacity change from 0 to 512 [ 145.187893][ T9232] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 145.193711][ T9308] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 145.212023][ T8913] udevd[8913]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 145.229090][ T9308] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 145.231269][ T9308] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 145.252571][ T9370] EXT4-fs (loop4): 1 truncate cleaned up [ 145.253011][ T9370] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.253946][ T9308] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 145.262042][ T9308] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 145.264207][ T9370] EXT4-fs error (device loop4): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.4.2012: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 145.321481][ T9308] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 145.324613][ T6655] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.345611][ T9308] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 145.350861][ T9308] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 145.382497][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.396307][ T8913] udevd[8913]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 145.399518][ T8913] udevd[8913]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 145.461752][ T6655] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.507755][ T9308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.516165][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 145.516187][ T29] audit: type=1326 audit(1792732760.486:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9385 comm="syz.1.2015" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f015ebff559 code=0x0 [ 145.567795][ T9308] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.574019][ T9391] loop4: detected capacity change from 0 to 256 [ 145.589658][ T8952] udevd[8952]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 145.624372][ T6672] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.624476][ T6672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.632630][ T6669] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.632752][ T6669] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.677149][ T8913] udevd[8913]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 145.678900][ T8913] udevd[8913]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 145.679464][ T6655] bridge_slave_1: left allmulticast mode [ 145.679491][ T6655] bridge_slave_1: left promiscuous mode [ 145.679681][ T6655] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.681530][ T6655] bridge_slave_0: left allmulticast mode [ 145.681552][ T6655] bridge_slave_0: left promiscuous mode [ 145.681756][ T6655] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.728140][ T9397] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 145.832140][ T9404] xt_hashlimit: size too large, truncated to 1048576 [ 145.842881][ T6655] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.843201][ T6655] bond_slave_0: left promiscuous mode [ 145.844091][ T6655] bond0 (unregistering): Released all slaves [ 145.982376][ T6655] hsr_slave_0: left promiscuous mode [ 145.983142][ T6655] hsr_slave_1: left promiscuous mode [ 145.985310][ T6655] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.985447][ T6655] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.990972][ T6655] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.991094][ T6655] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.013047][ T6655] veth1_macvtap: left promiscuous mode [ 146.013130][ T6655] veth0_macvtap: left promiscuous mode [ 146.013326][ T6655] veth1_vlan: left promiscuous mode [ 146.013575][ T6655] veth0_vlan: left promiscuous mode [ 146.143717][ T29] audit: type=1400 audit(1792732761.116:974): avc: denied { write } for pid=9409 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.204407][ T29] audit: type=1400 audit(1792732761.176:975): avc: denied { write } for pid=9424 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.287337][ T6655] team0 (unregistering): Port device team_slave_1 removed [ 146.304412][ T6655] team0 (unregistering): Port device team_slave_0 removed [ 146.362730][ T3014] 8021q: adding VLAN 0 to HW filter on device eth17 [ 146.410908][ T9432] bond0: entered promiscuous mode [ 146.410937][ T9432] bond_slave_0: entered promiscuous mode [ 146.411118][ T9432] bond_slave_1: entered promiscuous mode [ 146.608410][ T9308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.627582][ T29] audit: type=1400 audit(1792732761.606:976): avc: denied { write } for pid=9437 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.729277][ T29] audit: type=1400 audit(1792732761.706:977): avc: denied { write } for pid=9476 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.740263][ T9478] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2035'. [ 146.843012][ T3014] 8021q: adding VLAN 0 to HW filter on device eth18 [ 146.971113][ T29] audit: type=1400 audit(1792732761.946:978): avc: denied { listen } for pid=9501 comm="syz.4.2040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 146.975938][ T9308] veth0_vlan: entered promiscuous mode [ 146.999814][ T9308] veth1_vlan: entered promiscuous mode [ 147.023516][ T29] audit: type=1400 audit(1792732761.996:979): avc: denied { accept } for pid=9501 comm="syz.4.2040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 147.055837][ T9308] veth0_macvtap: entered promiscuous mode [ 147.067197][ T9308] veth1_macvtap: entered promiscuous mode [ 147.099933][ T9308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.114034][ T9308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.197209][ T6671] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.197274][ T6671] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.197317][ T6671] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.197428][ T6671] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.251904][ T29] audit: type=1400 audit(1792732762.226:980): avc: denied { write } for pid=9499 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.333396][ T29] audit: type=1400 audit(1792732762.306:981): avc: denied { write } for pid=9522 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.367847][ T9523] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2044'. [ 147.412724][ T9523] hsr_slave_1 (unregistering): left promiscuous mode [ 147.435865][ T9526] FAULT_INJECTION: forcing a failure. [ 147.435865][ T9526] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 147.435903][ T9526] CPU: 0 UID: 0 PID: 9526 Comm: syz.9.1993 Not tainted syzkaller #0 PREEMPT(lazy) [ 147.435997][ T9526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 147.436110][ T9526] Call Trace: [ 147.436119][ T9526] [ 147.436130][ T9526] __dump_stack+0x1d/0x30 [ 147.436234][ T9526] dump_stack_lvl+0x95/0xd0 [ 147.436277][ T9526] dump_stack+0x15/0x1b [ 147.436304][ T9526] should_fail_ex+0x262/0x280 [ 147.436338][ T9526] should_fail+0xb/0x20 [ 147.436364][ T9526] should_fail_usercopy+0x1a/0x20 [ 147.436500][ T9526] _copy_to_user+0x20/0xa0 [ 147.436534][ T9526] bpf_verifier_vlog+0x2c5/0x5a0 [ 147.436578][ T9526] __btf_verifier_log+0x7f/0xb0 [ 147.436652][ T9526] __btf_verifier_log_type+0x302/0x330 [ 147.436687][ T9526] btf_enum64_check_meta+0x324/0x7d0 [ 147.436761][ T9526] ? sort+0x6a/0xa0 [ 147.436890][ T9526] btf_parse_type_sec+0x291/0x1520 [ 147.437001][ T9526] ? __kvmalloc_node_noprof+0x30d/0x5b0 [ 147.437039][ T9526] ? btf_parse_hdr+0x43a/0x440 [ 147.437086][ T9526] ? btf_parse_str_sec+0x1ae/0x1b0 [ 147.437123][ T9526] btf_new_fd+0x2ec/0x6a0 [ 147.437199][ T9526] bpf_btf_load+0x116/0x130 [ 147.437228][ T9526] __sys_bpf+0xbce/0xc30 [ 147.437274][ T9526] ? do_futex+0x310/0x460 [ 147.437384][ T9526] __x64_sys_bpf+0x69/0x80 [ 147.437489][ T9526] x64_sys_call+0xf26/0x2550 [ 147.437523][ T9526] do_syscall_64+0x112/0x360 [ 147.437553][ T9526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.437652][ T9526] RIP: 0033:0x7f16ad33f559 [ 147.437673][ T9526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.437699][ T9526] RSP: 002b:00007f16abd8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 147.437726][ T9526] RAX: ffffffffffffffda RBX: 00007f16ad5c5fa0 RCX: 00007f16ad33f559 [ 147.437745][ T9526] RDX: 0000000000000028 RSI: 0000200000000300 RDI: 0000000000000012 [ 147.437763][ T9526] RBP: 00007f16ad3d6b20 R08: 0000000000000000 R09: 0000000000000000 [ 147.437873][ T9526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.437961][ T9526] R13: 00007f16ad5c6038 R14: 00007f16ad5c5fa0 R15: 00007ffd4f4dce18 [ 147.437989][ T9526] [ 147.471272][ T3014] 8021q: adding VLAN 0 to HW filter on device eth19 [ 147.826136][ T9541] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 147.826136][ T9541] The task syz.0.2046 (9541) triggered the difference, watch for misbehavior. [ 147.901520][ T9552] netlink: 'syz.4.2051': attribute type 1 has an invalid length. [ 147.919770][ T9552] bond5: entered promiscuous mode [ 147.919899][ T9552] 8021q: adding VLAN 0 to HW filter on device bond5 [ 147.944796][ T9552] 8021q: adding VLAN 0 to HW filter on device bond5 [ 147.945257][ T9552] bond5: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 147.945278][ T9552] bond5: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode [ 147.972971][ T9552] bond5: (slave ip6gre3): making interface the new active one [ 147.973003][ T9552] ip6gre3: entered promiscuous mode [ 147.982049][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 147.982421][ C0] net_ratelimit: 8 callbacks suppressed [ 147.982490][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.988679][ T9552] bond5: (slave ip6gre3): Enslaving as an active interface with an up link [ 148.022278][ T29] audit: type=1400 audit(1792732762.996:982): avc: denied { write } for pid=9534 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.049876][ T6671] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.137476][ T286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.144004][ T3014] 8021q: adding VLAN 0 to HW filter on device eth20 [ 148.237422][ T9572] netlink: 'syz.5.2056': attribute type 4 has an invalid length. [ 148.279282][ T9572] netlink: 'syz.5.2056': attribute type 4 has an invalid length. [ 148.444521][ T9588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2062'. [ 148.444657][ T9588] gretap0: entered promiscuous mode [ 148.479935][ T9592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.499761][ T9590] gre2: entered promiscuous mode [ 148.619074][ T9600] rxe_eth0 speed is unknown, defaulting to 1000 [ 148.788704][ T9613] IPv6: NLM_F_CREATE should be specified when creating new route [ 148.788752][ T9613] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 148.788764][ T9613] IPv6: NLM_F_CREATE should be set when creating new route [ 149.147453][ T6671] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.176697][ T286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.827650][ T9710] ip_tables: iptables: counters copy to user failed while replacing table [ 150.068097][ T5648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.216618][ T3399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.246522][ T6655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.420079][ T9741] FAULT_INJECTION: forcing a failure. [ 150.420079][ T9741] name failslab, interval 1, probability 0, space 0, times 0 [ 150.420126][ T9741] CPU: 1 UID: 0 PID: 9741 Comm: syz.1.2122 Not tainted syzkaller #0 PREEMPT(lazy) [ 150.420159][ T9741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 150.420202][ T9741] Call Trace: [ 150.420211][ T9741] [ 150.420221][ T9741] __dump_stack+0x1d/0x30 [ 150.420255][ T9741] dump_stack_lvl+0x95/0xd0 [ 150.420286][ T9741] dump_stack+0x15/0x1b [ 150.420345][ T9741] should_fail_ex+0x262/0x280 [ 150.420375][ T9741] ? blk_mq_alloc_tag_set+0x321/0x640 [ 150.420504][ T9741] should_failslab+0x8c/0xb0 [ 150.420538][ T9741] __kmalloc_node_noprof+0xb8/0x4d0 [ 150.420571][ T9741] ? init_srcu_struct_fields+0x64e/0x6c0 [ 150.420632][ T9741] ? blk_mq_alloc_tag_set+0x321/0x640 [ 150.420720][ T9741] blk_mq_alloc_tag_set+0x321/0x640 [ 150.420762][ T9741] ? __pfx_loop_control_ioctl+0x10/0x10 [ 150.420823][ T9741] loop_add+0x267/0x580 [ 150.420859][ T9741] ? __pfx_loop_control_ioctl+0x10/0x10 [ 150.420889][ T9741] loop_control_ioctl+0xd0/0x3f0 [ 150.420918][ T9741] ? __pfx_loop_control_ioctl+0x10/0x10 [ 150.421031][ T9741] __se_sys_ioctl+0xce/0x140 [ 150.421064][ T9741] __x64_sys_ioctl+0x43/0x50 [ 150.421106][ T9741] x64_sys_call+0x239d/0x2550 [ 150.421158][ T9741] do_syscall_64+0x112/0x360 [ 150.421247][ T9741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.421277][ T9741] RIP: 0033:0x7f015ebff559 [ 150.421314][ T9741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.421347][ T9741] RSP: 002b:00007f015d64f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 150.421372][ T9741] RAX: ffffffffffffffda RBX: 00007f015ee85fa0 RCX: 00007f015ebff559 [ 150.421389][ T9741] RDX: 00000000ffffffe4 RSI: 0000000000004c80 RDI: 0000000000000004 [ 150.421408][ T9741] RBP: 00007f015ec96b20 R08: 0000000000000000 R09: 0000000000000000 [ 150.421427][ T9741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.421469][ T9741] R13: 00007f015ee86038 R14: 00007f015ee85fa0 R15: 00007ffc317fa8e8 [ 150.421574][ T9741] [ 150.807584][ T9756] FAULT_INJECTION: forcing a failure. [ 150.807584][ T9756] name failslab, interval 1, probability 0, space 0, times 0 [ 150.807640][ T9756] CPU: 0 UID: 0 PID: 9756 Comm: syz.9.2129 Not tainted syzkaller #0 PREEMPT(lazy) [ 150.807673][ T9756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 150.807719][ T9756] Call Trace: [ 150.807728][ T9756] [ 150.807739][ T9756] __dump_stack+0x1d/0x30 [ 150.807772][ T9756] dump_stack_lvl+0x95/0xd0 [ 150.807795][ T9756] dump_stack+0x15/0x1b [ 150.807819][ T9756] should_fail_ex+0x262/0x280 [ 150.807900][ T9756] ? shmem_init_fs_context+0x38/0x110 [ 150.807934][ T9756] should_failslab+0x8c/0xb0 [ 150.807974][ T9756] __kmalloc_cache_noprof+0x5d/0x3e0 [ 150.808049][ T9756] ? shmem_init_fs_context+0x38/0x110 [ 150.808128][ T9756] shmem_init_fs_context+0x38/0x110 [ 150.808153][ T9756] alloc_fs_context+0x490/0x570 [ 150.808314][ T9756] fs_context_for_reconfigure+0x72/0x90 [ 150.808358][ T9756] devtmpfs_init_fs_context+0x82/0xf0 [ 150.808413][ T9756] alloc_fs_context+0x490/0x570 [ 150.808453][ T9756] fs_context_for_mount+0x22/0x30 [ 150.808487][ T9756] do_new_mount+0xe7/0x730 [ 150.808597][ T9756] ? security_capable+0x7b/0x90 [ 150.808809][ T9756] path_mount+0x4ad/0xb90 [ 150.808847][ T9756] __se_sys_mount+0x28c/0x2e0 [ 150.808894][ T9756] __x64_sys_mount+0x67/0x80 [ 150.808932][ T9756] x64_sys_call+0xc3b/0x2550 [ 150.808978][ T9756] do_syscall_64+0x112/0x360 [ 150.809035][ T9756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.809066][ T9756] RIP: 0033:0x7f16ad33f559 [ 150.809088][ T9756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.809114][ T9756] RSP: 002b:00007f16abd8f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 150.809143][ T9756] RAX: ffffffffffffffda RBX: 00007f16ad5c5fa0 RCX: 00007f16ad33f559 [ 150.809241][ T9756] RDX: 0000200000000500 RSI: 00002000000004c0 RDI: 0000000000000000 [ 150.809259][ T9756] RBP: 00007f16ad3d6b20 R08: 0000000000000000 R09: 0000000000000000 [ 150.809276][ T9756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.809292][ T9756] R13: 00007f16ad5c6038 R14: 00007f16ad5c5fa0 R15: 00007ffd4f4dce18 [ 150.809317][ T9756] [ 150.924398][ T8913] udevd[8913]: inotify_add_watch(7, /dev/sda, 10) failed: No such file or directory [ 151.008458][ T8913] udevd[8913]: inotify_add_watch(7, /dev/sda1, 10) failed: No such file or directory [ 151.139504][ T9759] loop1: detected capacity change from 0 to 8192 [ 151.150131][ T8913] udevd[8913]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 151.182792][ T9759] loop1: p1 < > p2 < > p3 p4 < > [ 151.182808][ T9759] loop1: partition table partially beyond EOD, truncated [ 151.182943][ T9759] loop1: p1 start 67108864 is beyond EOD, truncated [ 151.184971][ T9759] loop1: p3 start 100859904 is beyond EOD, truncated [ 151.193379][ T8913] udevd[8913]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 151.210381][ T8913] udevd[8913]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 151.217258][ T8952] udevd[8952]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 151.581273][ T9793] bridge2: entered promiscuous mode [ 151.581300][ T9793] bridge2: entered allmulticast mode [ 151.613421][ T8913] udevd[8913]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 151.625271][ T8913] udevd[8913]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 151.818636][ T9810] FAULT_INJECTION: forcing a failure. [ 151.818636][ T9810] name failslab, interval 1, probability 0, space 0, times 0 [ 151.818781][ T9810] CPU: 1 UID: 0 PID: 9810 Comm: syz.4.2154 Not tainted syzkaller #0 PREEMPT(lazy) [ 151.818814][ T9810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 151.818832][ T9810] Call Trace: [ 151.818841][ T9810] [ 151.818851][ T9810] __dump_stack+0x1d/0x30 [ 151.818885][ T9810] dump_stack_lvl+0x95/0xd0 [ 151.818975][ T9810] dump_stack+0x15/0x1b [ 151.819003][ T9810] should_fail_ex+0x262/0x280 [ 151.819091][ T9810] ? __register_sysctl_table+0x52/0xbe0 [ 151.819138][ T9810] should_failslab+0x8c/0xb0 [ 151.819188][ T9810] __kmalloc_noprof+0xb6/0x4b0 [ 151.819218][ T9810] ? __register_sysctl_table+0x52/0xbe0 [ 151.819264][ T9810] __register_sysctl_table+0x52/0xbe0 [ 151.819363][ T9810] register_pidns_sysctls+0xd9/0x130 [ 151.819394][ T9810] copy_pid_ns+0x396/0x640 [ 151.819421][ T9810] ? __ns_tree_add_raw+0x66d/0x690 [ 151.819498][ T9810] create_new_namespaces+0x168/0x420 [ 151.819529][ T9810] unshare_nsproxy_namespaces+0x115/0x150 [ 151.819587][ T9810] ksys_unshare+0x3a3/0x690 [ 151.819618][ T9810] __x64_sys_unshare+0x1f/0x30 [ 151.819661][ T9810] x64_sys_call+0x1e33/0x2550 [ 151.819748][ T9810] do_syscall_64+0x112/0x360 [ 151.819780][ T9810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.819810][ T9810] RIP: 0033:0x7f7a16cdf559 [ 151.819904][ T9810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.819927][ T9810] RSP: 002b:00007f7a1572f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 151.819960][ T9810] RAX: ffffffffffffffda RBX: 00007f7a16f65fa0 RCX: 00007f7a16cdf559 [ 151.819979][ T9810] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000066000200 [ 151.819993][ T9810] RBP: 00007f7a16d76b20 R08: 0000000000000000 R09: 0000000000000000 [ 151.820008][ T9810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.820022][ T9810] R13: 00007f7a16f66038 R14: 00007f7a16f65fa0 R15: 00007ffffc23de28 [ 151.820072][ T9810] [ 152.094645][ T9819] netlink: 'syz.4.2156': attribute type 4 has an invalid length. [ 152.094906][ T9819] FAULT_INJECTION: forcing a failure. [ 152.094906][ T9819] name failslab, interval 1, probability 0, space 0, times 0 [ 152.094938][ T9819] CPU: 0 UID: 0 PID: 9819 Comm: syz.4.2156 Not tainted syzkaller #0 PREEMPT(lazy) [ 152.095055][ T9819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 152.095070][ T9819] Call Trace: [ 152.095078][ T9819] [ 152.095087][ T9819] __dump_stack+0x1d/0x30 [ 152.095171][ T9819] dump_stack_lvl+0x95/0xd0 [ 152.095199][ T9819] dump_stack+0x15/0x1b [ 152.095235][ T9819] should_fail_ex+0x262/0x280 [ 152.095261][ T9819] ? __alloc_skb+0x2e0/0x6f0 [ 152.095340][ T9819] should_failslab+0x8c/0xb0 [ 152.095369][ T9819] kmem_cache_alloc_node_noprof+0x60/0x3e0 [ 152.095489][ T9819] ? __rcu_read_unlock+0x4e/0x70 [ 152.095522][ T9819] ? __alloc_skb+0x2e0/0x6f0 [ 152.095572][ T9819] __alloc_skb+0x2e0/0x6f0 [ 152.095647][ T9819] ? __alloc_skb+0x209/0x6f0 [ 152.095686][ T9819] rtmsg_fib+0x99/0x230 [ 152.095828][ T9819] fib_table_delete+0x68f/0x740 [ 152.095869][ T9819] fib_magic+0x233/0x270 [ 152.095971][ T9819] fib_del_ifaddr+0x1c6/0xa90 [ 152.096002][ T9819] ? nlmsg_notify+0xcf/0x170 [ 152.096085][ T9819] ? nlmsg_notify+0x12e/0x170 [ 152.096208][ T9819] ? addr_event+0x6d/0x270 [ 152.096261][ T9819] fib_inetaddr_event+0x76/0x1e0 [ 152.096290][ T9819] ? __pfx_fib_inetaddr_event+0x10/0x10 [ 152.096387][ T9819] blocking_notifier_call_chain+0x9b/0x1e0 [ 152.096422][ T9819] __inet_del_ifa+0x45d/0x710 [ 152.096484][ T9819] inetdev_event+0x60b/0xb60 [ 152.096510][ T9819] ? __pfx_ib_netdevice_event+0x10/0x10 [ 152.096601][ T9819] ? ib_netdevice_event+0xeb/0x350 [ 152.096652][ T9819] ? __pfx_arp_netdev_event+0x10/0x10 [ 152.096699][ T9819] ? __pfx_inetdev_event+0x10/0x10 [ 152.096744][ T9819] raw_notifier_call_chain+0x72/0x1a0 [ 152.096777][ T9819] call_netdevice_notifiers_info+0x92/0xd0 [ 152.096861][ T9819] netif_set_mtu_ext+0x3da/0x510 [ 152.096984][ T9819] do_setlink+0x66e/0x2860 [ 152.097027][ T9819] ? cred_has_capability+0x224/0x2a0 [ 152.097069][ T9819] ? selinux_capable+0x31/0x40 [ 152.097172][ T9819] ? security_capable+0x7b/0x90 [ 152.097208][ T9819] ? ns_capable+0x80/0xb0 [ 152.097231][ T9819] ? netlink_ns_capable+0x86/0xa0 [ 152.097299][ T9819] rtnl_setlink+0x3a8/0x4f0 [ 152.097394][ T9819] ? selinux_capable+0x31/0x40 [ 152.097421][ T9819] ? security_capable+0x7b/0x90 [ 152.097467][ T9819] ? ns_capable+0x80/0xb0 [ 152.097491][ T9819] ? __pfx_rtnl_setlink+0x10/0x10 [ 152.097554][ T9819] rtnetlink_rcv_msg+0x64b/0x720 [ 152.097591][ T9819] ? avc_has_perm_noaudit+0xac/0x160 [ 152.097619][ T9819] netlink_rcv_skb+0x11e/0x220 [ 152.097697][ T9819] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 152.097736][ T9819] rtnetlink_rcv+0x1c/0x30 [ 152.097766][ T9819] netlink_unicast+0x665/0x740 [ 152.097803][ T9819] netlink_sendmsg+0x5ef/0x740 [ 152.097867][ T9819] ? __pfx_netlink_sendmsg+0x10/0x10 [ 152.097891][ T9819] sock_write_iter+0x2c5/0x2f0 [ 152.097929][ T9819] do_iter_readv_writev+0x4f6/0x5a0 [ 152.097975][ T9819] vfs_writev+0x2ce/0x8b0 [ 152.098067][ T9819] do_writev+0xe9/0x210 [ 152.098101][ T9819] __x64_sys_writev+0x45/0x50 [ 152.098129][ T9819] x64_sys_call+0x23c9/0x2550 [ 152.098158][ T9819] do_syscall_64+0x112/0x360 [ 152.098205][ T9819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.098235][ T9819] RIP: 0033:0x7f7a16cdf559 [ 152.098282][ T9819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.098309][ T9819] RSP: 002b:00007f7a1572f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 152.098412][ T9819] RAX: ffffffffffffffda RBX: 00007f7a16f65fa0 RCX: 00007f7a16cdf559 [ 152.098438][ T9819] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000004 [ 152.098452][ T9819] RBP: 00007f7a16d76b20 R08: 0000000000000000 R09: 0000000000000000 [ 152.098468][ T9819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.098484][ T9819] R13: 00007f7a16f66038 R14: 00007f7a16f65fa0 R15: 00007ffffc23de28 [ 152.098507][ T9819] [ 152.679088][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 152.679183][ T29] audit: type=1400 audit(1792732767.656:989): avc: denied { write } for pid=9845 comm="syz.1.2168" name="rpc" dev="proc" ino=4026532725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_rpc_t tclass=dir permissive=1 [ 152.681026][ T9846] FAULT_INJECTION: forcing a failure. [ 152.681026][ T9846] name failslab, interval 1, probability 0, space 0, times 0 [ 152.681063][ T9846] CPU: 0 UID: 0 PID: 9846 Comm: syz.1.2168 Not tainted syzkaller #0 PREEMPT(lazy) [ 152.681097][ T9846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 152.681177][ T9846] Call Trace: [ 152.681185][ T9846] [ 152.681195][ T9846] __dump_stack+0x1d/0x30 [ 152.681231][ T9846] dump_stack_lvl+0x95/0xd0 [ 152.681261][ T9846] dump_stack+0x15/0x1b [ 152.681290][ T9846] should_fail_ex+0x262/0x280 [ 152.681320][ T9846] ? alloc_empty_file+0x70/0x1e0 [ 152.681423][ T9846] should_failslab+0x8c/0xb0 [ 152.681451][ T9846] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 152.681473][ T9846] ? alloc_empty_file+0x70/0x1e0 [ 152.681514][ T9846] alloc_empty_file+0x70/0x1e0 [ 152.681649][ T9846] alloc_file_pseudo+0x92/0x120 [ 152.681695][ T9846] sock_alloc_file+0x9c/0x1e0 [ 152.681736][ T9846] xs_local_connect+0xf0/0x590 [ 152.681822][ T9846] xprt_connect+0x360/0x420 [ 152.681911][ T9846] call_connect+0x10b/0x200 [ 152.681942][ T9846] ? __pfx_call_connect+0x10/0x10 [ 152.682013][ T9846] __rpc_execute+0x252/0xa20 [ 152.682086][ T9846] rpc_execute+0x1bd/0x280 [ 152.682148][ T9846] rpc_run_task+0x34a/0x390 [ 152.682199][ T9846] rpc_create_xprt+0x279/0x620 [ 152.682246][ T9846] rpc_create+0x494/0x570 [ 152.682341][ T9846] set_gssp_clnt+0x1a9/0x250 [ 152.682527][ T9846] write_gssp+0x165/0x200 [ 152.682608][ T9846] ? __pfx_write_gssp+0x10/0x10 [ 152.682634][ T9846] proc_reg_write+0x128/0x1c0 [ 152.682662][ T9846] ? __pfx_proc_reg_write+0x10/0x10 [ 152.682684][ T9846] vfs_write+0x24f/0x990 [ 152.682783][ T9846] ? __fget_files+0x184/0x1c0 [ 152.682813][ T9846] ? mutex_lock+0x52/0x90 [ 152.682858][ T9846] ksys_write+0xdc/0x1a0 [ 152.682905][ T9846] __x64_sys_write+0x40/0x50 [ 152.682997][ T9846] x64_sys_call+0x154e/0x2550 [ 152.683113][ T9846] do_syscall_64+0x112/0x360 [ 152.683136][ T9846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.683158][ T9846] RIP: 0033:0x7f015ebff559 [ 152.683179][ T9846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.683276][ T9846] RSP: 002b:00007f015d64f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 152.683304][ T9846] RAX: ffffffffffffffda RBX: 00007f015ee85fa0 RCX: 00007f015ebff559 [ 152.683323][ T9846] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000004 [ 152.683418][ T9846] RBP: 00007f015ec96b20 R08: 0000000000000000 R09: 0000000000000000 [ 152.683436][ T9846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.683454][ T9846] R13: 00007f015ee86038 R14: 00007f015ee85fa0 R15: 00007ffc317fa8e8 [ 152.683481][ T9846] [ 153.041797][ T9855] veth1_to_bond: entered promiscuous mode [ 153.045084][ T9855] veth1_to_bond: entered allmulticast mode [ 153.047352][ T9855] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2172'. [ 153.053264][ T9855] veth1_to_bond (unregistering): left promiscuous mode [ 153.053391][ T9855] veth1_to_bond (unregistering): left allmulticast mode [ 153.071937][ T9855] bond0: (slave bond_slave_1): Releasing backup interface [ 153.089286][ T9857] netlink: 'syz.0.2171': attribute type 9 has an invalid length. [ 153.089310][ T9857] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2171'. [ 153.089652][ T9857] netlink: 'syz.0.2171': attribute type 9 has an invalid length. [ 153.089670][ T9857] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2171'. [ 153.126148][ T5647] net_ratelimit: 5 callbacks suppressed [ 153.126164][ T5647] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.126408][ T5647] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.218117][ T29] audit: type=1400 audit(1792732768.186:990): avc: denied { create } for pid=9866 comm="syz.4.2177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 153.240525][ T29] audit: type=1400 audit(1792732768.196:991): avc: denied { connect } for pid=9866 comm="syz.4.2177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 153.336479][ T3399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.458544][ T9895] FAULT_INJECTION: forcing a failure. [ 153.458544][ T9895] name failslab, interval 1, probability 0, space 0, times 0 [ 153.458580][ T9895] CPU: 0 UID: 0 PID: 9895 Comm: syz.4.2189 Not tainted syzkaller #0 PREEMPT(lazy) [ 153.458616][ T9895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 153.458689][ T9895] Call Trace: [ 153.458698][ T9895] [ 153.458709][ T9895] __dump_stack+0x1d/0x30 [ 153.458745][ T9895] dump_stack_lvl+0x95/0xd0 [ 153.458769][ T9895] dump_stack+0x15/0x1b [ 153.458790][ T9895] should_fail_ex+0x262/0x280 [ 153.458858][ T9895] ? security_inode_alloc+0x37/0x100 [ 153.458919][ T9895] should_failslab+0x8c/0xb0 [ 153.458947][ T9895] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 153.458970][ T9895] ? security_inode_alloc+0x37/0x100 [ 153.458994][ T9895] security_inode_alloc+0x37/0x100 [ 153.459076][ T9895] inode_init_always_gfp+0x495/0x4e0 [ 153.459109][ T9895] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 153.459241][ T9895] alloc_inode+0x58/0x170 [ 153.459270][ T9895] new_inode+0x1d/0xe0 [ 153.459309][ T9895] shmem_get_inode+0x250/0x7b0 [ 153.459365][ T9895] shmem_fill_super+0x4d5/0x600 [ 153.459393][ T9895] ? __pfx_shmem_fill_super+0x10/0x10 [ 153.459536][ T9895] get_tree_nodev+0x83/0x100 [ 153.459571][ T9895] shmem_get_tree+0x1c/0x30 [ 153.459603][ T9895] vfs_get_tree+0x57/0x1d0 [ 153.459627][ T9895] do_new_mount+0x288/0x730 [ 153.459733][ T9895] ? security_capable+0x7b/0x90 [ 153.459777][ T9895] path_mount+0x4ad/0xb90 [ 153.459868][ T9895] __se_sys_mount+0x28c/0x2e0 [ 153.459954][ T9895] __x64_sys_mount+0x67/0x80 [ 153.460070][ T9895] x64_sys_call+0xc3b/0x2550 [ 153.460104][ T9895] do_syscall_64+0x112/0x360 [ 153.460135][ T9895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.460231][ T9895] RIP: 0033:0x7f7a16cdf559 [ 153.460255][ T9895] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.460281][ T9895] RSP: 002b:00007f7a1572f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 153.460422][ T9895] RAX: ffffffffffffffda RBX: 00007f7a16f65fa0 RCX: 00007f7a16cdf559 [ 153.460440][ T9895] RDX: 00002000000001c0 RSI: 0000200000000180 RDI: 0000000000000000 [ 153.460530][ T9895] RBP: 00007f7a16d76b20 R08: 0000000000000000 R09: 0000000000000000 [ 153.460559][ T9895] R10: 0000000001000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.460626][ T9895] R13: 00007f7a16f66038 R14: 00007f7a16f65fa0 R15: 00007ffffc23de28 [ 153.460653][ T9895] [ 153.511905][ T9894] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 153.512097][ T9894] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 153.512568][ T9894] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 153.512639][ T9894] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 153.512761][ T9894] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 153.512920][ T9894] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 153.513027][ T9894] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 153.771319][ T29] audit: type=1326 audit(1792732768.736:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9907 comm="syz.5.2195" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75bfe7f559 code=0x7ffc0000 [ 153.771379][ T29] audit: type=1326 audit(1792732768.736:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9907 comm="syz.5.2195" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f75bfe7f559 code=0x7ffc0000 [ 153.796902][ T29] audit: type=1326 audit(1792732768.746:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9907 comm="syz.5.2195" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75bfe7f559 code=0x7ffc0000 [ 153.797002][ T29] audit: type=1326 audit(1792732768.746:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9907 comm="syz.5.2195" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75bfe7f559 code=0x7ffc0000 [ 153.893372][ T9912] syz_tun: entered promiscuous mode [ 153.893673][ T9912] bridge0: port 3(syz_tun) entered blocking state [ 153.893743][ T9912] bridge0: port 3(syz_tun) entered disabled state [ 153.893915][ T9912] syz_tun: entered allmulticast mode [ 153.899278][ T9912] bridge0: port 3(syz_tun) entered blocking state [ 153.899455][ T9912] bridge0: port 3(syz_tun) entered forwarding state [ 154.295238][ T9937] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2206'. [ 154.392204][ T9954] Invalid argument reading file caps for ./file0 [ 155.029959][ T9989] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2227'. [ 155.377764][ T29] audit: type=1400 audit(1792732770.356:996): avc: denied { ioctl } for pid=10009 comm="syz.1.2235" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x80404518 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 155.429032][T10010] netlink: 'syz.0.2234': attribute type 1 has an invalid length. [ 155.571557][T10021] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.571852][T10021] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.613074][T10019] loop1: detected capacity change from 0 to 512 [ 155.631190][ T8913] udevd[8913]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 155.633221][T10023] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2241'. [ 155.646160][T10023] bond4: option primary_reselect: invalid value (9) [ 155.660638][T10023] bond4 (unregistering): Released all slaves [ 155.698466][T10019] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.2239: corrupted in-inode xattr: invalid ea_ino [ 155.698625][T10019] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 155.699702][T10019] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.2239: couldn't read orphan inode 15 (err -117) [ 155.699743][T10019] loop1: lost filesystem error report for type 5 error -117 [ 155.708153][T10019] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.818618][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.832715][ T8913] udevd[8913]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 155.868870][T10045] syzkaller0: entered promiscuous mode [ 155.868895][T10045] syzkaller0: entered allmulticast mode [ 156.329216][T10066] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 156.329237][T10066] block device autoloading is deprecated and will be removed. [ 156.443874][T10080] X25: received unknown 00 with LCI 000 [ 156.833316][T10108] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2276'. [ 156.913049][T10117] FAULT_INJECTION: forcing a failure. [ 156.913049][T10117] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 156.913094][T10117] CPU: 1 UID: 0 PID: 10117 Comm: syz.9.2280 Not tainted syzkaller #0 PREEMPT(lazy) [ 156.913124][T10117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 156.913137][T10117] Call Trace: [ 156.913143][T10117] [ 156.913219][T10117] __dump_stack+0x1d/0x30 [ 156.913293][T10117] dump_stack_lvl+0x95/0xd0 [ 156.913344][T10117] dump_stack+0x15/0x1b [ 156.913364][T10117] should_fail_ex+0x262/0x280 [ 156.913393][T10117] should_fail_alloc_page+0xf2/0x100 [ 156.913426][T10117] __alloc_frozen_pages_noprof+0x132/0x3d0 [ 156.913508][T10117] alloc_pages_mpol+0xaf/0x1d0 [ 156.913611][T10117] vma_alloc_folio_noprof+0x1b3/0x300 [ 156.913649][T10117] handle_mm_fault+0x1385/0x3c60 [ 156.913755][T10117] __get_user_pages+0x12e4/0x1ea0 [ 156.913890][T10117] __gup_longterm_locked+0x963/0xed0 [ 156.914004][T10117] ? should_fail_ex+0xdb/0x280 [ 156.914031][T10117] ? process_vm_rw+0x29c/0x9c0 [ 156.914052][T10117] ? should_failslab+0x8c/0xb0 [ 156.914104][T10117] pin_user_pages_remote+0x7e/0xb0 [ 156.914172][T10117] process_vm_rw+0x49b/0x9c0 [ 156.914280][T10117] ? restore_fpregs_from_fpstate+0x61/0x110 [ 156.914305][T10117] __x64_sys_process_vm_writev+0x78/0x90 [ 156.914327][T10117] x64_sys_call+0x128f/0x2550 [ 156.914491][T10117] do_syscall_64+0x112/0x360 [ 156.914521][T10117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.914547][T10117] RIP: 0033:0x7f16ad33f559 [ 156.914568][T10117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.914604][T10117] RSP: 002b:00007f16abd8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 156.914627][T10117] RAX: ffffffffffffffda RBX: 00007f16ad5c5fa0 RCX: 00007f16ad33f559 [ 156.914644][T10117] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000088 [ 156.914661][T10117] RBP: 00007f16ad3d6b20 R08: 000000000000023a R09: 0000000000000000 [ 156.914678][T10117] R10: 0000200000121000 R11: 0000000000000246 R12: 0000000000000000 [ 156.914695][T10117] R13: 00007f16ad5c6038 R14: 00007f16ad5c5fa0 R15: 00007ffd4f4dce18 [ 156.914745][T10117] [ 157.194091][T10126] caller generic_access_phys+0x153/0x310 mapping multiple BARs [ 157.589186][T10158] PM: suspend entry (s2idle) [ 157.589200][T10158] PM: Unsupported test mode for suspend to idle, please choose none/freezer/devices/platform. [ 157.589211][T10158] PM: suspend exit [ 157.660179][T10165] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5125 sclass=netlink_route_socket pid=10165 comm=syz.9.2298 [ 158.053055][T10196] FAULT_INJECTION: forcing a failure. [ 158.053055][T10196] name failslab, interval 1, probability 0, space 0, times 0 [ 158.053095][T10196] CPU: 0 UID: 0 PID: 10196 Comm: syz.4.2314 Not tainted syzkaller #0 PREEMPT(lazy) [ 158.053134][T10196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 158.053230][T10196] Call Trace: [ 158.053240][T10196] [ 158.053255][T10196] __dump_stack+0x1d/0x30 [ 158.053290][T10196] dump_stack_lvl+0x95/0xd0 [ 158.053320][T10196] dump_stack+0x15/0x1b [ 158.053451][T10196] should_fail_ex+0x262/0x280 [ 158.053487][T10196] ? __kernfs_new_node+0x70/0x440 [ 158.053530][T10196] should_failslab+0x8c/0xb0 [ 158.053556][T10196] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 158.053622][T10196] ? __kernfs_new_node+0x70/0x440 [ 158.053655][T10196] __kernfs_new_node+0x70/0x440 [ 158.053728][T10196] ? __rcu_read_unlock+0x4e/0x70 [ 158.053763][T10196] ? kernfs_activate_one+0x10c/0x140 [ 158.053800][T10196] ? up_write+0x19/0x60 [ 158.053829][T10196] kernfs_new_node+0x107/0x140 [ 158.053869][T10196] __kernfs_create_file+0x4b/0x180 [ 158.053890][T10196] ? __pfx_dev_attr_show+0x10/0x10 [ 158.053935][T10196] ? __pfx_dev_attr_store+0x10/0x10 [ 158.054064][T10196] sysfs_add_file_mode_ns+0x132/0x1b0 [ 158.054097][T10196] sysfs_create_file_ns+0xd9/0x120 [ 158.054124][T10196] device_create_file+0xa5/0x110 [ 158.054149][T10196] device_add+0x32e/0x790 [ 158.054181][T10196] netdev_register_kobject+0x127/0x240 [ 158.054252][T10196] register_netdevice+0xaf2/0x11a0 [ 158.054280][T10196] ? batadv_meshif_newlink+0x6e/0x90 [ 158.054306][T10196] ? __pfx_batadv_meshif_newlink+0x10/0x10 [ 158.054402][T10196] batadv_meshif_newlink+0x7d/0x90 [ 158.054429][T10196] rtnl_newlink_create+0x1e4/0x4a0 [ 158.054531][T10196] ? security_capable+0x7b/0x90 [ 158.054575][T10196] ? netlink_ns_capable+0x86/0xa0 [ 158.054615][T10196] rtnl_newlink+0x1255/0x1510 [ 158.054729][T10196] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 158.054753][T10196] ? hrtimer_start_range_ns+0x108/0x120 [ 158.054781][T10196] ? _raw_spin_unlock+0x9/0x30 [ 158.054856][T10196] ? finish_task_switch+0x121/0x340 [ 158.054965][T10196] ? ktime_get+0x212/0x240 [ 158.055006][T10196] ? __rcu_read_unlock+0x4e/0x70 [ 158.055048][T10196] ? avc_has_perm_noaudit+0xac/0x160 [ 158.055076][T10196] ? cred_has_capability+0x224/0x2a0 [ 158.055156][T10196] ? selinux_capable+0x31/0x40 [ 158.055184][T10196] ? security_capable+0x7b/0x90 [ 158.055223][T10196] ? ns_capable+0x80/0xb0 [ 158.055249][T10196] ? __pfx_rtnl_newlink+0x10/0x10 [ 158.055390][T10196] rtnetlink_rcv_msg+0x64b/0x720 [ 158.055419][T10196] ? avc_has_perm_noaudit+0xac/0x160 [ 158.055482][T10196] netlink_rcv_skb+0x11e/0x220 [ 158.055548][T10196] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 158.055582][T10196] rtnetlink_rcv+0x1c/0x30 [ 158.055614][T10196] netlink_unicast+0x665/0x740 [ 158.055743][T10196] netlink_sendmsg+0x5ef/0x740 [ 158.055781][T10196] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.055805][T10196] ____sys_sendmsg+0x532/0x580 [ 158.055884][T10196] ___sys_sendmsg+0x195/0x1e0 [ 158.055922][T10196] __x64_sys_sendmsg+0xd4/0x160 [ 158.055947][T10196] x64_sys_call+0x22ab/0x2550 [ 158.056065][T10196] do_syscall_64+0x112/0x360 [ 158.056094][T10196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.056117][T10196] RIP: 0033:0x7f7a16cdf559 [ 158.056175][T10196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.056199][T10196] RSP: 002b:00007f7a1572f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.056224][T10196] RAX: ffffffffffffffda RBX: 00007f7a16f65fa0 RCX: 00007f7a16cdf559 [ 158.056242][T10196] RDX: 0000000020000840 RSI: 0000200000000300 RDI: 0000000000000005 [ 158.056256][T10196] RBP: 00007f7a16d76b20 R08: 0000000000000000 R09: 0000000000000000 [ 158.056274][T10196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.056285][T10196] R13: 00007f7a16f66038 R14: 00007f7a16f65fa0 R15: 00007ffffc23de28 [ 158.056305][T10196] [ 158.129679][ T6655] net_ratelimit: 63 callbacks suppressed [ 158.129708][ T6655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.622879][ T3394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.648382][T10208] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2318'. [ 158.889668][T10233] netlink: set zone limit has 4 unknown bytes [ 158.933100][ T29] audit: type=1400 audit(1792732773.906:997): avc: denied { write } for pid=10210 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 158.980688][ T29] audit: type=1400 audit(1792732773.956:998): avc: denied { write } for pid=10244 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.110036][T10252] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2330'. [ 159.176523][ T5649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.198807][ T29] audit: type=1400 audit(1792732774.176:999): avc: denied { write } for pid=10253 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.239484][ T6655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.285523][ T29] audit: type=1400 audit(1792732774.256:1000): avc: denied { write } for pid=10283 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.316832][T10277] VFS: Mount too revealing [ 159.496452][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 159.529073][ T29] audit: type=1400 audit(1792732774.506:1001): avc: denied { write } for pid=10290 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.533520][T10307] loop0: detected capacity change from 0 to 512 [ 159.536108][ T8913] udevd[8913]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 159.591556][T10307] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.592006][T10307] ext4 filesystem being mounted at /443/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 159.630392][ T29] audit: type=1400 audit(1792732774.606:1002): avc: denied { write } for pid=10316 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.657534][ T286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.680894][ T3288] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.713053][ T8913] udevd[8913]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 159.715679][ T8913] udevd[8913]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 159.848977][ T29] audit: type=1400 audit(1792732774.826:1003): avc: denied { getopt } for pid=10323 comm="syz.9.2345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 159.877300][T10280] loop4: detected capacity change from 0 to 32768 [ 159.885513][ T8913] udevd[8913]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 160.346965][ T6669] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.414874][ T29] audit: type=1400 audit(1792732775.386:1004): avc: denied { write } for pid=10370 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 160.499453][ T29] audit: type=1400 audit(1792732775.476:1005): avc: denied { write } for pid=10402 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 160.664742][T10280] loop4: p1 p3 < > [ 160.672241][ T8913] udevd[8913]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 160.687327][ T8913] udevd[8913]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 160.698604][ T286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.703215][ T8952] udevd[8952]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 160.760407][ T8913] udevd[8913]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 160.783885][ T8913] udevd[8913]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 161.058139][ T29] audit: type=1400 audit(1792732776.036:1006): avc: denied { write } for pid=10441 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.214174][T10476] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.214287][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.750177][ T6668] Bluetooth: hci0: Frame reassembly failed (-84) [ 161.920618][T10522] xt_hashlimit: size too large, truncated to 1048576 [ 161.959497][T10526] loop1: detected capacity change from 0 to 512 [ 161.960008][T10526] ext4: Unknown parameter 'nouser_xattr' [ 161.962186][ T8913] udevd[8913]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 161.970365][T10527] loop0: detected capacity change from 0 to 256 [ 162.298826][T10542] PKCS7: Unknown OID: [4] (bad) [ 162.298839][T10542] PKCS7: Only support pkcs7_signedData type [ 162.612307][T10577] batman_adv: batadv0: Adding interface: syzkaller0 [ 162.612327][T10577] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.612500][T10577] batman_adv: batadv0: Interface activated: syzkaller0 [ 162.613336][T10576] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 162.668664][T10576] batman_adv: batadv0: Removing interface: syzkaller0 [ 162.796204][T10588] loop0: detected capacity change from 0 to 128 [ 162.845797][T10582] loop1: detected capacity change from 0 to 32768 [ 162.867092][T10582] loop1: p1 p2 p3 < p5 p6 > p4 [ 162.869100][T10582] loop1: p2 size 16777216 extends beyond EOD, truncated [ 162.872328][T10582] loop1: p4 start 1426063360 is beyond EOD, truncated [ 162.874919][T10582] loop1: p6 start 4294974214 is beyond EOD, truncated [ 163.646831][ T6668] net_ratelimit: 8 callbacks suppressed [ 163.646920][ T6668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.817858][ T3983] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 163.818156][ T3387] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.919748][T10655] FAULT_INJECTION: forcing a failure. [ 163.919748][T10655] name failslab, interval 1, probability 0, space 0, times 0 [ 163.919781][T10655] CPU: 1 UID: 0 PID: 10655 Comm: syz.1.2435 Not tainted syzkaller #0 PREEMPT(lazy) [ 163.919881][T10655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 163.919905][T10655] Call Trace: [ 163.919914][T10655] [ 163.919925][T10655] __dump_stack+0x1d/0x30 [ 163.919969][T10655] dump_stack_lvl+0x95/0xd0 [ 163.920027][T10655] dump_stack+0x15/0x1b [ 163.920107][T10655] should_fail_ex+0x262/0x280 [ 163.920136][T10655] ? ip_mc_add_src+0x2f4/0xa30 [ 163.920155][T10655] should_failslab+0x8c/0xb0 [ 163.920178][T10655] __kmalloc_cache_noprof+0x5d/0x3e0 [ 163.920201][T10655] ? ip_mc_add_src+0x2f4/0xa30 [ 163.920282][T10655] ip_mc_add_src+0x2f4/0xa30 [ 163.920304][T10655] ip_mc_msfilter+0x3e2/0x590 [ 163.920328][T10655] ? __kmalloc_noprof+0x1d7/0x4b0 [ 163.920357][T10655] ? set_mcast_msfilter+0x3c/0x180 [ 163.920441][T10655] set_mcast_msfilter+0x15d/0x180 [ 163.920576][T10655] ip_set_mcast_msfilter+0x239/0x280 [ 163.920610][T10655] do_ip_setsockopt+0x1720/0x22f0 [ 163.920714][T10655] ip_setsockopt+0x58/0x110 [ 163.920739][T10655] udp_setsockopt+0x89/0xa0 [ 163.920781][T10655] sock_common_setsockopt+0x69/0x80 [ 163.920855][T10655] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 163.920902][T10655] __sys_setsockopt+0x184/0x200 [ 163.920974][T10655] __x64_sys_setsockopt+0x64/0x80 [ 163.921004][T10655] x64_sys_call+0x248f/0x2550 [ 163.921031][T10655] do_syscall_64+0x112/0x360 [ 163.921053][T10655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.921103][T10655] RIP: 0033:0x7f015ebff559 [ 163.921125][T10655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.921151][T10655] RSP: 002b:00007f015d64f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 163.921196][T10655] RAX: ffffffffffffffda RBX: 00007f015ee85fa0 RCX: 00007f015ebff559 [ 163.921242][T10655] RDX: 0000000000000030 RSI: 0000000000000000 RDI: 0000000000000004 [ 163.921293][T10655] RBP: 00007f015ec96b20 R08: 0000000000000310 R09: 0000000000000000 [ 163.921311][T10655] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000000 [ 163.921400][T10655] R13: 00007f015ee86038 R14: 00007f015ee85fa0 R15: 00007ffc317fa8e8 [ 163.921428][T10655] [ 163.978482][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 164.538833][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 164.538852][ T29] audit: type=1400 audit(1792733035.517:1022): avc: denied { create } for pid=10685 comm="syz.4.2448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 164.543677][ T29] audit: type=1400 audit(1792733035.517:1023): avc: denied { connect } for pid=10685 comm="syz.4.2448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 164.616432][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 164.750537][T10699] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2455'. [ 164.756900][ T6668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.856734][ T3387] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.883887][ T3394] Process accounting resumed [ 164.926512][ T6667] IPVS: starting estimator thread 0... [ 165.021478][T10721] FAULT_INJECTION: forcing a failure. [ 165.021478][T10721] name failslab, interval 1, probability 0, space 0, times 0 [ 165.021520][T10721] CPU: 1 UID: 0 PID: 10721 Comm: syz.0.2465 Not tainted syzkaller #0 PREEMPT(lazy) [ 165.021556][T10721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 165.021574][T10721] Call Trace: [ 165.021618][T10721] [ 165.021628][T10721] __dump_stack+0x1d/0x30 [ 165.021664][T10721] dump_stack_lvl+0x95/0xd0 [ 165.021697][T10721] dump_stack+0x15/0x1b [ 165.021725][T10721] should_fail_ex+0x262/0x280 [ 165.021800][T10721] ? uevent_net_init+0x5a/0x1c0 [ 165.021837][T10721] should_failslab+0x8c/0xb0 [ 165.021864][T10721] __kmalloc_cache_noprof+0x5d/0x3e0 [ 165.021936][T10721] ? uevent_net_init+0x5a/0x1c0 [ 165.022031][T10721] uevent_net_init+0x5a/0x1c0 [ 165.022066][T10721] ? __pfx_uevent_net_rcv+0x10/0x10 [ 165.022144][T10721] ops_init+0x22a/0x2e0 [ 165.022180][T10721] setup_net+0x9f/0x230 [ 165.022213][T10721] copy_net_ns+0x333/0x490 [ 165.022316][T10721] create_new_namespaces+0x1f6/0x420 [ 165.022340][T10721] unshare_nsproxy_namespaces+0x115/0x150 [ 165.022365][T10721] ksys_unshare+0x3a3/0x690 [ 165.022397][T10721] __x64_sys_unshare+0x1f/0x30 [ 165.022464][T10721] x64_sys_call+0x1e33/0x2550 [ 165.022492][T10721] do_syscall_64+0x112/0x360 [ 165.022565][T10721] ? generic_smp_call_function_single_interrupt+0x13/0x20 [ 165.022604][T10721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.022628][T10721] RIP: 0033:0x7f63ec71f559 [ 165.022645][T10721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.022714][T10721] RSP: 002b:00007f63eb177028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 165.022736][T10721] RAX: ffffffffffffffda RBX: 00007f63ec9a5fa0 RCX: 00007f63ec71f559 [ 165.022751][T10721] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004a000200 [ 165.022765][T10721] RBP: 00007f63ec7b6b20 R08: 0000000000000000 R09: 0000000000000000 [ 165.022816][T10721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.022830][T10721] R13: 00007f63ec9a6038 R14: 00007f63ec9a5fa0 R15: 00007ffef12ffe68 [ 165.022866][T10721] [ 165.023566][T10719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.023824][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.039181][T10715] IPVS: using max 2208 ests per chain, 110400 per kthread [ 165.262533][ T5643] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.301293][T10730] device-mapper: table: 252:2: mirror: Gap in table (-EINVAL) [ 165.301312][T10730] device-mapper: ioctl: error adding target to table [ 165.370295][ T29] audit: type=1400 audit(1792733036.347:1024): avc: denied { kexec_image_load } for pid=10739 comm="syz.0.2473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 165.541298][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b294600: rx timeout, send abort [ 165.541423][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811b294600: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 165.631195][T10751] netlink: 'syz.9.2479': attribute type 1 has an invalid length. [ 165.674646][T10751] 8021q: adding VLAN 0 to HW filter on device bond1 [ 165.720662][T10759] bond1: (slave syz_tun): making interface the new active one [ 165.752590][T10759] bond1: (slave syz_tun): Enslaving as an active interface with an up link [ 165.853955][T10771] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2482'. [ 165.857170][ T6668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.896971][ T3394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.025657][ T29] audit: type=1400 audit(1792733036.997:1025): avc: denied { write } for pid=10758 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 166.100785][ T29] audit: type=1400 audit(1792733037.077:1026): avc: denied { write } for pid=10793 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 166.127839][T10792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.191815][T10796] batadv_slave_0: entered promiscuous mode [ 166.249606][T10796] erspan0: entered promiscuous mode [ 166.249701][T10796] macsec1: entered promiscuous mode [ 166.340854][T10740] kexec: Could not allocate control_code_buffer [ 166.359845][T10796] erspan0: left promiscuous mode [ 166.410761][ T29] audit: type=1400 audit(1792733037.387:1027): avc: denied { write } for pid=10800 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 166.440771][T10795] batadv_slave_0: left promiscuous mode [ 166.528266][ T29] audit: type=1400 audit(1792733037.497:1028): avc: denied { write } for pid=10822 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 166.723204][T10836] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2500'. [ 166.723234][T10836] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2500'. [ 166.723304][T10836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2500'. [ 166.779444][ T29] audit: type=1400 audit(1792733037.757:1029): avc: denied { getopt } for pid=10841 comm="syz.4.2503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 167.019310][T10850] loop1: detected capacity change from 0 to 4096 [ 167.024720][T10593] udevd[10593]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 167.043692][T10850] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.094266][T10856] rxe_eth0 speed is unknown, defaulting to 1000 [ 167.114342][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.115197][T10856] FAULT_INJECTION: forcing a failure. [ 167.115197][T10856] name failslab, interval 1, probability 0, space 0, times 0 [ 167.115231][T10856] CPU: 1 UID: 0 PID: 10856 Comm: syz.0.2510 Not tainted syzkaller #0 PREEMPT(lazy) [ 167.115264][T10856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 167.115277][T10856] Call Trace: [ 167.115285][T10856] [ 167.115295][T10856] __dump_stack+0x1d/0x30 [ 167.115320][T10856] dump_stack_lvl+0x95/0xd0 [ 167.115422][T10856] dump_stack+0x15/0x1b [ 167.115556][T10856] should_fail_ex+0x262/0x280 [ 167.115589][T10856] ? kstrdup_const+0x3e/0x50 [ 167.115639][T10856] should_failslab+0x8c/0xb0 [ 167.115671][T10856] __kmalloc_node_track_caller_noprof+0xb6/0x4d0 [ 167.115708][T10856] ? kstrdup_const+0x3e/0x50 [ 167.115759][T10856] kstrdup+0x3e/0xd0 [ 167.115814][T10856] kstrdup_const+0x3e/0x50 [ 167.115853][T10856] __kernfs_new_node+0x42/0x440 [ 167.115893][T10856] ? rb_insert_color+0x6e/0x2a0 [ 167.115971][T10856] ? __rcu_read_unlock+0x4e/0x70 [ 167.116034][T10856] ? up_write+0x19/0x60 [ 167.116101][T10856] ? kernfs_link_sibling+0x2f5/0x320 [ 167.116155][T10856] ? __rcu_read_unlock+0x4e/0x70 [ 167.116187][T10856] kernfs_new_node+0x107/0x140 [ 167.116228][T10856] __kernfs_create_file+0x4b/0x180 [ 167.116254][T10856] ? __pfx_port_attr_show+0x10/0x10 [ 167.116337][T10856] ? __pfx_port_attr_store+0x10/0x10 [ 167.116365][T10856] sysfs_add_file_mode_ns+0x132/0x1b0 [ 167.116397][T10856] internal_create_group+0x43e/0x9e0 [ 167.116474][T10856] ? kobject_add+0xdb/0x150 [ 167.116510][T10856] sysfs_create_groups+0x3f/0xf0 [ 167.116560][T10856] ib_setup_port_attrs+0xa2c/0x1480 [ 167.116614][T10856] ? kobject_put+0x108/0x180 [ 167.116656][T10856] add_one_compat_dev+0x25c/0x360 [ 167.116775][T10856] rdma_dev_init_net+0x17d/0x210 [ 167.116828][T10856] ops_init+0x22a/0x2e0 [ 167.116875][T10856] setup_net+0x9f/0x230 [ 167.116927][T10856] copy_net_ns+0x333/0x490 [ 167.116968][T10856] create_new_namespaces+0x1f6/0x420 [ 167.116999][T10856] unshare_nsproxy_namespaces+0x115/0x150 [ 167.117049][T10856] ksys_unshare+0x3a3/0x690 [ 167.117089][T10856] __x64_sys_unshare+0x1f/0x30 [ 167.117208][T10856] x64_sys_call+0x1e33/0x2550 [ 167.117267][T10856] do_syscall_64+0x112/0x360 [ 167.117291][T10856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.117319][T10856] RIP: 0033:0x7f63ec71f559 [ 167.117373][T10856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.117392][T10856] RSP: 002b:00007f63eb177028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 167.117442][T10856] RAX: ffffffffffffffda RBX: 00007f63ec9a5fa0 RCX: 00007f63ec71f559 [ 167.117463][T10856] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 167.117480][T10856] RBP: 00007f63ec7b6b20 R08: 0000000000000000 R09: 0000000000000000 [ 167.117570][T10856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.117588][T10856] R13: 00007f63ec9a6038 R14: 00007f63ec9a5fa0 R15: 00007ffef12ffe68 [ 167.117615][T10856] [ 167.189291][T10593] udevd[10593]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 167.210316][T10593] udevd[10593]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 167.484499][T10873] 9p: Bad value for 'rfdno' [ 167.697469][T10886] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2521'. [ 167.719267][T10888] loop1: detected capacity change from 0 to 512 [ 167.720931][T10593] udevd[10593]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 167.774804][T10593] udevd[10593]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 167.776876][T10593] udevd[10593]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 168.134975][ T29] audit: type=1400 audit(1792733039.107:1030): avc: denied { write } for pid=10904 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 168.270460][ T29] audit: type=1400 audit(1792733039.247:1031): avc: denied { write } for pid=10932 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 168.429195][T10934] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2535'. [ 168.802584][T10976] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2546'. [ 168.807823][T10976] ip6gre4: entered promiscuous mode [ 168.807882][T10976] ip6gre4: entered allmulticast mode [ 168.828361][T10976] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2546'. [ 169.017227][ T3394] net_ratelimit: 16 callbacks suppressed [ 169.017260][ T3394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.207142][ T6622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.056902][ T3394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.306563][ T6622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.096773][ T3394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.336590][ T5643] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.427024][ T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.136617][ T3394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.298130][ T5649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.527217][ T6622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.098766][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 174.098874][ T29] audit: type=1400 audit(1792733045.077:1037): avc: denied { write } for pid=10991 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.176145][ T29] audit: type=1400 audit(1792733045.147:1038): avc: denied { write } for pid=10991 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.216559][ T286] net_ratelimit: 2 callbacks suppressed [ 174.216580][ T286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.242511][ T29] audit: type=1400 audit(1792733045.217:1039): avc: denied { write } for pid=11005 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.386663][ T5649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.727502][ T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.256667][ T286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.836509][ T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.068156][T11013] netlink: 'syz.9.2551': attribute type 1 has an invalid length. [ 176.068180][T11013] netlink: 'syz.9.2551': attribute type 4 has an invalid length. [ 176.068195][T11013] netlink: 9462 bytes leftover after parsing attributes in process `syz.9.2551'. [ 176.296506][ T286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.408726][T11035] loop4: detected capacity change from 0 to 512 [ 176.412447][T11035] ext4: Unknown parameter 'smackfshat' [ 176.435513][T11044] udevd[11044]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 176.448788][T11044] udevd[11044]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 176.453042][T11044] udevd[11044]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 176.524588][T11059] FAULT_INJECTION: forcing a failure. [ 176.524588][T11059] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.524726][T11059] CPU: 1 UID: 0 PID: 11059 Comm: syz.0.2566 Not tainted syzkaller #0 PREEMPT(lazy) [ 176.524831][T11059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 176.524857][T11059] Call Trace: [ 176.524884][T11059] [ 176.524892][T11059] __dump_stack+0x1d/0x30 [ 176.525063][T11059] dump_stack_lvl+0x95/0xd0 [ 176.525094][T11059] dump_stack+0x15/0x1b [ 176.525121][T11059] should_fail_ex+0x262/0x280 [ 176.525195][T11059] should_fail+0xb/0x20 [ 176.525307][T11059] should_fail_usercopy+0x1a/0x20 [ 176.525336][T11059] _copy_to_user+0x20/0xa0 [ 176.525411][T11059] bpf_verifier_vlog+0x2c5/0x5a0 [ 176.525480][T11059] __btf_verifier_log+0x7f/0xb0 [ 176.525558][T11059] __btf_verifier_log_type+0x2a9/0x330 [ 176.525594][T11059] btf_enum64_check_meta+0x165/0x7d0 [ 176.525794][T11059] btf_parse_type_sec+0x291/0x1520 [ 176.525831][T11059] ? __kvmalloc_node_noprof+0x30d/0x5b0 [ 176.525987][T11059] ? btf_parse_hdr+0x43a/0x440 [ 176.526017][T11059] ? btf_parse_str_sec+0x1ae/0x1b0 [ 176.526052][T11059] btf_new_fd+0x2ec/0x6a0 [ 176.526153][T11059] bpf_btf_load+0x116/0x130 [ 176.526195][T11059] __sys_bpf+0xbce/0xc30 [ 176.526309][T11059] ? do_futex+0x310/0x460 [ 176.526370][T11059] __x64_sys_bpf+0x69/0x80 [ 176.526405][T11059] x64_sys_call+0xf26/0x2550 [ 176.526502][T11059] do_syscall_64+0x112/0x360 [ 176.526597][T11059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.526681][T11059] RIP: 0033:0x7f63ec71f559 [ 176.526703][T11059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.526730][T11059] RSP: 002b:00007f63eb177028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 176.526816][T11059] RAX: ffffffffffffffda RBX: 00007f63ec9a5fa0 RCX: 00007f63ec71f559 [ 176.526831][T11059] RDX: 0000000000000028 RSI: 0000200000000300 RDI: 0000000000000012 [ 176.526844][T11059] RBP: 00007f63ec7b6b20 R08: 0000000000000000 R09: 0000000000000000 [ 176.526867][T11059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.526880][T11059] R13: 00007f63ec9a6038 R14: 00007f63ec9a5fa0 R15: 00007ffef12ffe68 [ 176.526900][T11059] [ 176.936836][ T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.064896][T11078] loop4: detected capacity change from 0 to 512 [ 177.078447][T11044] udevd[11044]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 177.114716][T11049] ================================================================== [ 177.114764][T11049] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 177.114807][T11049] [ 177.114814][T11049] write to 0xffff88810c270ca0 of 8 bytes by task 11043 on cpu 1: [ 177.114831][T11049] shmem_file_splice_read+0x3eb/0x570 [ 177.114897][T11049] splice_direct_to_actor+0x25d/0x680 [ 177.114967][T11049] do_splice_direct+0x119/0x1a0 [ 177.115004][T11049] do_sendfile+0x37d/0x640 [ 177.115056][T11049] __x64_sys_sendfile64+0x105/0x150 [ 177.115086][T11049] x64_sys_call+0x1015/0x2550 [ 177.115119][T11049] do_syscall_64+0x112/0x360 [ 177.115157][T11049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.115204][T11049] [ 177.115219][T11049] write to 0xffff88810c270ca0 of 8 bytes by task 11049 on cpu 0: [ 177.115235][T11049] shmem_file_splice_read+0x3eb/0x570 [ 177.115292][T11049] splice_direct_to_actor+0x25d/0x680 [ 177.115324][T11049] do_splice_direct+0x119/0x1a0 [ 177.115351][T11049] do_sendfile+0x37d/0x640 [ 177.115397][T11049] __x64_sys_sendfile64+0x105/0x150 [ 177.115432][T11049] x64_sys_call+0x1015/0x2550 [ 177.115465][T11049] do_syscall_64+0x112/0x360 [ 177.115489][T11049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.115516][T11049] [ 177.115521][T11049] value changed: 0x0000000000006986 -> 0x000000000000698d [ 177.115533][T11049] [ 177.115537][T11049] Reported by Kernel Concurrency Sanitizer on: [ 177.115550][T11049] CPU: 0 UID: 0 PID: 11049 Comm: syz.5.2564 Not tainted syzkaller #0 PREEMPT(lazy) [ 177.115583][T11049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 177.115601][T11049] ================================================================== [ 177.299095][T11044] udevd[11044]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 177.300812][T11044] udevd[11044]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 177.336979][ T286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.417343][ T5649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.036564][ T6667] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.417560][ T3387] net_ratelimit: 2 callbacks suppressed [ 179.417578][ T3387] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.236525][ T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.456519][ T3387] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.456579][ T5649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.356498][ T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.496738][ T3387] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.898113][ T5649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.466927][ T6667] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.537172][ T3387] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.496605][ T5649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.616616][ T286] net_ratelimit: 2 callbacks suppressed [ 184.616651][ T286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.696556][ T6667] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.656913][ T3387] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.796528][ T6614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.536793][ T5643] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.697036][ T3387] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.896571][ T6668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog