last executing test programs: 3.822621338s ago: executing program 4 (id=614): mkdirat(0xffffffffffffff9c, 0x0, 0x1f7) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf0\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\x05\x00\x00\x00\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000080)='4', 0x1) 3.482586979s ago: executing program 4 (id=616): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40) fcntl$setsig(r0, 0xa, 0x13) fcntl$setlease(r0, 0x400, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x4) fcntl$setlease(r0, 0x400, 0x2) 3.318186094s ago: executing program 3 (id=619): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)="64b1de932e628eee8a0a89a94e5f750f399c7b1c35ac914dd6fc80d007beda93780f095b542decee786afeec8991e630bd7ebe6cdd3df5c82a54b9ba0f7e6f7cdd6729eb18e61f5296ad1df8ead0378b1cee4f7f6fef15d2b4b38d1e028e32d5584c080fcbe799a4eedfef7cbf95cb8435bf921ea828aaff4d73a74a44076e", 0x7f}, {&(0x7f0000000700)="6731a9da84a7f1d212561a21cd729eb4a2e7f2c859d2682f4601b2befc6bfd956ab32128d13f450ac5ef76ffcf2a43f71d5011ad9e4fd63b3648cb51d902fcd1b342c28ea583", 0x46}], 0x2}}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f00000008c0)="1a4327465638b8670e9ef99039dc0f60eb2cde85b2639882576537b3beb8b09ca7dd2c4972f132eb493ac7a3dd19bf1a9b8aacd86b333646a9e5342d840708bcd9aa55104cfedd028566dffeaf06fdb5f2d372c586b0b89c64700b3d9abdadd9f9fc7a36e68d46b7c9f80f6bd9", 0x6d}], 0x1, &(0x7f0000000e00)=ANY=[@ANYBLOB="d8"], 0xd8}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) write(r0, &(0x7f0000001e00)="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", 0x3bd) 2.241884299s ago: executing program 3 (id=633): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) socket$unix(0x1, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x6}, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) bind$rds(r0, &(0x7f0000000100)={0x2, 0x4e29, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000300)=""/4, 0x1a000}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18}, 0x4000000) 2.059263985s ago: executing program 3 (id=636): semop(0x0, 0x0, 0x0) r0 = semget$private(0x0, 0x3, 0x10) semop(r0, &(0x7f0000002540)=[{0x1, 0x0, 0x1000}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) 1.717351415s ago: executing program 1 (id=651): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xc}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) futex(&(0x7f000000cffc), 0x2, 0x0, 0x0, &(0x7f0000048000), 0x1) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560702000f0200006706000020000000620a00ff0ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffcd35010000000000ce040000000000001c0000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x25, '\x00', 0x0, @fallback=0x1e}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, 0x3b) 1.180744592s ago: executing program 3 (id=660): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lseek(r1, 0x1, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) 618.7401ms ago: executing program 1 (id=663): fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0xfd2, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0x2, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x0, 0x80000002, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 501.902964ms ago: executing program 1 (id=664): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a000000560000004200000002"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x1006, r0, 0x0, 0xd88d02a0}, 0x38) 501.385134ms ago: executing program 1 (id=666): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f0000000a80)=[{&(0x7f00000009c0)=""/65, 0x41}], 0x1) socket(0x10, 0x80002, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) write$sndseq(r2, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x3, @tick, {}, {0x5}, @result={0x3, 0xbb7}}, {0x9, 0x3, 0xa, 0x14, @time={0x2, 0x7ff}, {0x85, 0x80}, {0x10, 0x5}, @queue={0xae, {0xf2, 0x5}}}, {0x6, 0x5, 0x8, 0x6, @tick=0x8, {0x5, 0x4}, {0x0, 0x6}, @note={0x1, 0xf1, 0x8, 0xf4, 0x744}}], 0x54) 496.900134ms ago: executing program 0 (id=667): socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs(0x0, 0x0) ustat(0x11, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x4}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 472.315125ms ago: executing program 0 (id=668): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x120, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000074") ioctl(r0, 0xc138fd0e, &(0x7f0000000000)="040000000000000000000000380100003801") r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r2, 0xc138fd05, &(0x7f0000000000)="040000000200000000007c2fc2") 448.378456ms ago: executing program 1 (id=669): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x2b0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff200000000002000aac14140ce060000d49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 404.300457ms ago: executing program 1 (id=670): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000010c0)={@cgroup=r0, r0, 0x2f, 0x2030, 0x4}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 388.413747ms ago: executing program 0 (id=672): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000010c0)={@cgroup=r0, r0, 0x2f, 0x2030, 0x4}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x24, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x10000840}, 0x48014) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd0}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x19, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x83, 0x0, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, 0x0, 0xfffffffffffffd6a) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x1e) write(0xffffffffffffffff, &(0x7f0000000080)="0b000300010001", 0x7) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) close(0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000200)="1d5fe8317ca952a2ba4bfee0f003", 0x0, 0x200020fe, 0x0, 0xe, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa}, 0x50) 349.321128ms ago: executing program 4 (id=673): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/mpls/conf/lo/input\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='1', 0x1) 271.310811ms ago: executing program 4 (id=674): bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0400000004000000040000000500010004080000", @ANYRES32, @ANYBLOB="000000000000000100"/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000002"], 0x50) 271.058251ms ago: executing program 2 (id=675): fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0xfd2, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0x2, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x0, 0x80000002, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 247.273612ms ago: executing program 3 (id=676): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a000000560000004200000002"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x1006, r0, 0x0, 0xd88d02a0}, 0x38) 220.715243ms ago: executing program 0 (id=677): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r0, 0x0, r0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0xfd2, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0x2, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x0, 0x80000002, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 183.721844ms ago: executing program 3 (id=678): socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x6}, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) bind$rds(r0, &(0x7f0000000100)={0x2, 0x4e29, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000300)=""/4, 0x1a000}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18}, 0x4000000) 183.445014ms ago: executing program 4 (id=679): socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs(0x0, 0x0) ustat(0x11, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x4}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 182.994254ms ago: executing program 4 (id=680): openat$sndseq(0xffffffffffffff9c, 0x0, 0x40) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) syz_usb_connect(0x6, 0x36, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x4000, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 110.649907ms ago: executing program 2 (id=681): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x2b0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff200000000002000aac14140ce060000d49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 110.392647ms ago: executing program 0 (id=682): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x4000080) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x0, 0x0}, 0x10) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0xffffffe4) 110.195976ms ago: executing program 2 (id=683): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x120, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000074") ioctl(r0, 0xc138fd0e, &(0x7f0000000000)="040000000000000000000000380100003801") r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r2, 0xc138fd05, &(0x7f0000000000)="040000000200000000007c2fc2") 102.313027ms ago: executing program 0 (id=684): mkdirat(0xffffffffffffff9c, 0x0, 0x1f7) socket$nl_route(0x10, 0x3, 0x0) r0 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf0\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\x05\x00\x00\x00\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x71f2, 0x1000007}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r1, &(0x7f0000000080)='4', 0x1) 95.688997ms ago: executing program 2 (id=685): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/mpls/conf/lo/input\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='1', 0x1) 387.41µs ago: executing program 2 (id=686): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000000580)="09000000ffffffffb79e08da88a8a5a186dd6fbde6d7dd2074904159267b95021ad33b19968050fc", 0x0, 0x1000fe1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 2 (id=687): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lseek(r1, 0x1, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) kernel console output (not intermixed with test programs): [ 21.505682][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 21.505698][ T29] audit: type=1400 audit(1789004335.849:124): avc: denied { write } for pid=3266 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 21.519838][ T29] audit: type=1400 audit(1789004335.859:125): avc: denied { write } for pid=3277 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.108' (ED25519) to the list of known hosts. [ 27.478853][ T29] audit: type=1400 audit(1789004341.819:126): avc: denied { mounton } for pid=3287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.479132][ T29] audit: type=1400 audit(1789004341.819:127): avc: denied { mount } for pid=3287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.479691][ T3287] cgroup: Unknown subsys name 'net' [ 27.479941][ T29] audit: type=1400 audit(1789004341.819:128): avc: denied { unmount } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.623757][ T3287] cgroup: Unknown subsys name 'cpuset' [ 27.624330][ T3287] cgroup: Unknown subsys name 'rlimit' [ 27.729889][ T29] audit: type=1400 audit(1789004342.069:129): avc: denied { setattr } for pid=3287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.731117][ T29] audit: type=1400 audit(1789004342.069:130): avc: denied { create } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 27.731185][ T29] audit: type=1400 audit(1789004342.069:131): avc: denied { write } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.731381][ T29] audit: type=1400 audit(1789004342.069:132): avc: denied { read } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.736544][ T29] audit: type=1400 audit(1789004342.079:133): avc: denied { mounton } for pid=3287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.736592][ T29] audit: type=1400 audit(1789004342.079:134): avc: denied { mount } for pid=3287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 27.776567][ T3290] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.778306][ T29] audit: type=1400 audit(1789004342.099:135): avc: denied { relabelto } for pid=3290 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.808818][ T3287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.774751][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.774786][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.774934][ T3298] bridge_slave_0: entered allmulticast mode [ 29.775520][ T3298] bridge_slave_0: entered promiscuous mode [ 29.777816][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.777847][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.777901][ T3298] bridge_slave_1: entered allmulticast mode [ 29.778412][ T3298] bridge_slave_1: entered promiscuous mode [ 29.814838][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.815831][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.847551][ T3298] team0: Port device team_slave_0 added [ 29.858559][ T3298] team0: Port device team_slave_1 added [ 29.902084][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.902100][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.902150][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.960101][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.960117][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.960146][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.062675][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.062706][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.062812][ T3308] bridge_slave_0: entered allmulticast mode [ 30.063307][ T3308] bridge_slave_0: entered promiscuous mode [ 30.064070][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.064174][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.064227][ T3308] bridge_slave_1: entered allmulticast mode [ 30.064793][ T3308] bridge_slave_1: entered promiscuous mode [ 30.076019][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.077261][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.088727][ T3308] team0: Port device team_slave_0 added [ 30.089774][ T3308] team0: Port device team_slave_1 added [ 30.115221][ T3298] hsr_slave_0: entered promiscuous mode [ 30.115652][ T3298] hsr_slave_1: entered promiscuous mode [ 30.119770][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.119784][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.119861][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.125940][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.125990][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.126101][ T3307] bridge_slave_0: entered allmulticast mode [ 30.126710][ T3307] bridge_slave_0: entered promiscuous mode [ 30.151686][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.151702][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.151778][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.157794][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.157826][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.158009][ T3307] bridge_slave_1: entered allmulticast mode [ 30.158451][ T3307] bridge_slave_1: entered promiscuous mode [ 30.205768][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.205791][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.205848][ T3309] bridge_slave_0: entered allmulticast mode [ 30.206257][ T3309] bridge_slave_0: entered promiscuous mode [ 30.207008][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.207042][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.207229][ T3309] bridge_slave_1: entered allmulticast mode [ 30.207727][ T3309] bridge_slave_1: entered promiscuous mode [ 30.275881][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.277077][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.289937][ T3308] hsr_slave_0: entered promiscuous mode [ 30.290386][ T3308] hsr_slave_1: entered promiscuous mode [ 30.290649][ T3308] debugfs: 'hsr0' already exists in 'hsr' [ 30.290662][ T3308] Cannot create hsr debugfs directory [ 30.306760][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.321650][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.332328][ T3307] team0: Port device team_slave_0 added [ 30.333351][ T3307] team0: Port device team_slave_1 added [ 30.362203][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.362217][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.362248][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.373395][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.373411][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.373445][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.377713][ T3309] team0: Port device team_slave_0 added [ 30.378782][ T3309] team0: Port device team_slave_1 added [ 30.418505][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.418521][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.418551][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.419184][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.419239][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.419269][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.476352][ T3307] hsr_slave_0: entered promiscuous mode [ 30.476679][ T3307] hsr_slave_1: entered promiscuous mode [ 30.476955][ T3307] debugfs: 'hsr0' already exists in 'hsr' [ 30.476968][ T3307] Cannot create hsr debugfs directory [ 30.521826][ T3309] hsr_slave_0: entered promiscuous mode [ 30.522222][ T3309] hsr_slave_1: entered promiscuous mode [ 30.523362][ T3309] debugfs: 'hsr0' already exists in 'hsr' [ 30.523376][ T3309] Cannot create hsr debugfs directory [ 30.601215][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.601250][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.601381][ T3310] bridge_slave_0: entered allmulticast mode [ 30.601975][ T3310] bridge_slave_0: entered promiscuous mode [ 30.614204][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.614248][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.614300][ T3310] bridge_slave_1: entered allmulticast mode [ 30.614801][ T3310] bridge_slave_1: entered promiscuous mode [ 30.644231][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.645583][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.646751][ T3308] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.652528][ T3308] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.687461][ T3308] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.690013][ T3308] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.691362][ T3310] team0: Port device team_slave_0 added [ 30.692267][ T3310] team0: Port device team_slave_1 added [ 30.782714][ T3308] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.784601][ T3308] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.788153][ T3308] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.791908][ T3308] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.815825][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.815840][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.815868][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.821134][ T3298] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.822909][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.823302][ T3298] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.834964][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.835555][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.835567][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.835634][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.839252][ T3298] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.858377][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.891680][ T3298] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.898927][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.930926][ T3309] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.946780][ T3309] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.949940][ T3309] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.953868][ T3309] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.956589][ T3310] hsr_slave_0: entered promiscuous mode [ 30.957038][ T3310] hsr_slave_1: entered promiscuous mode [ 30.957585][ T3310] debugfs: 'hsr0' already exists in 'hsr' [ 30.957599][ T3310] Cannot create hsr debugfs directory [ 30.964088][ T3309] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.967232][ T3309] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.984335][ T3309] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.988943][ T3309] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.018842][ T3307] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.027030][ T3307] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.039460][ T3307] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.047737][ T3307] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.060126][ T3307] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.067684][ T3307] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.080414][ T3307] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.088141][ T3307] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.095944][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.131087][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.164682][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.167656][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.184293][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.184328][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.195188][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.195221][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.196754][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.196816][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.215387][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.215422][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.232763][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.241624][ T3310] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.246658][ T3310] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.259651][ T3310] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.267203][ T3310] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.279076][ T3310] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.281020][ T3310] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.286683][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.298521][ T3310] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.305792][ T3310] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.319895][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.319917][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.321892][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.327797][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.327830][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.357648][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.372155][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.372188][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.381414][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.381448][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.443822][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.461108][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.471148][ T846] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.471184][ T846] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.477502][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.477536][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.609351][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.644576][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.696646][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.732727][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.770385][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.814805][ T3298] veth0_vlan: entered promiscuous mode [ 31.823278][ T3298] veth1_vlan: entered promiscuous mode [ 31.831675][ T3308] veth0_vlan: entered promiscuous mode [ 31.838001][ T3308] veth1_vlan: entered promiscuous mode [ 31.860977][ T3298] veth0_macvtap: entered promiscuous mode [ 31.868991][ T3298] veth1_macvtap: entered promiscuous mode [ 31.880647][ T3307] veth0_vlan: entered promiscuous mode [ 31.887298][ T3308] veth0_macvtap: entered promiscuous mode [ 31.892662][ T3307] veth1_vlan: entered promiscuous mode [ 31.896110][ T3308] veth1_macvtap: entered promiscuous mode [ 31.899892][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.913779][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.920438][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.936946][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.946473][ T3307] veth0_macvtap: entered promiscuous mode [ 31.961548][ T3307] veth1_macvtap: entered promiscuous mode [ 31.989395][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.001269][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.003896][ T330] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.004314][ T330] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.004431][ T330] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.004483][ T330] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.004635][ T330] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.004802][ T330] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.004836][ T330] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.004889][ T330] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.073298][ T330] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.097180][ T3310] veth0_vlan: entered promiscuous mode [ 32.099638][ T3308] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.108882][ T3310] veth1_vlan: entered promiscuous mode [ 32.132232][ T3310] veth0_macvtap: entered promiscuous mode [ 32.134203][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.134737][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.134952][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.141445][ T3310] veth1_macvtap: entered promiscuous mode [ 32.172208][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.180712][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.207236][ T330] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.208040][ T330] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.208148][ T330] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.208325][ T330] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.248397][ T3506] FAULT_INJECTION: forcing a failure. [ 32.248397][ T3506] name fail_futex, interval 1, probability 0, space 0, times 1 [ 32.248523][ T3506] CPU: 1 UID: 0 PID: 3506 Comm: syz.0.1 Not tainted syzkaller #0 PREEMPT(lazy) [ 32.248551][ T3506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 32.248573][ T3506] Call Trace: [ 32.248581][ T3506] [ 32.248591][ T3506] __dump_stack+0x1d/0x30 [ 32.248619][ T3506] dump_stack_lvl+0x95/0xd0 [ 32.248644][ T3506] dump_stack+0x15/0x1b [ 32.248702][ T3506] should_fail_ex+0x262/0x280 [ 32.248729][ T3506] should_fail+0xb/0x20 [ 32.248753][ T3506] get_futex_key+0x12d/0xb10 [ 32.248808][ T3506] futex_wait_setup+0x49/0x3e0 [ 32.248830][ T3506] ? __cgroup_account_cputime+0x83/0xa0 [ 32.248935][ T3506] ? update_se+0xc5/0x460 [ 32.248961][ T3506] __futex_wait+0xa9/0x260 [ 32.248981][ T3506] ? __pfx_futex_wake_mark+0x10/0x10 [ 32.249055][ T3506] futex_wait+0x98/0x1c0 [ 32.249077][ T3506] do_futex+0x391/0x460 [ 32.249106][ T3506] __se_sys_futex+0x2f6/0x370 [ 32.249136][ T3506] __x64_sys_futex+0x78/0x90 [ 32.249240][ T3506] x64_sys_call+0x22e2/0x2550 [ 32.249266][ T3506] do_syscall_64+0x112/0x360 [ 32.249298][ T3506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 32.249322][ T3506] RIP: 0033:0x7f1fd7f3e159 [ 32.249338][ T3506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.249430][ T3506] RSP: 002b:00007f1fd69970e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 32.249643][ T3506] RAX: ffffffffffffffda RBX: 00007f1fd81c5fa8 RCX: 00007f1fd7f3e159 [ 32.249661][ T3506] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1fd81c5fa8 [ 32.249677][ T3506] RBP: 00007f1fd81c5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 32.249693][ T3506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 32.249748][ T3506] R13: 00007f1fd81c6038 R14: 00007ffdb634c120 R15: 00007ffdb634c208 [ 32.249769][ T3506] [ 32.280536][ T3309] veth0_vlan: entered promiscuous mode [ 33.074883][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 33.074900][ T29] audit: type=1400 audit(1789004347.419:165): avc: denied { create } for pid=3512 comm="syz.3.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.081580][ T29] audit: type=1400 audit(1789004347.419:166): avc: denied { ioctl } for pid=3512 comm="syz.3.7" path="socket:[4711]" dev="sockfs" ino=4711 ioctlcmd=0x943d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.084008][ T29] audit: type=1400 audit(1789004347.429:167): avc: denied { create } for pid=3512 comm="syz.3.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 33.145626][ T29] audit: type=1400 audit(1789004347.479:168): avc: denied { write } for pid=3512 comm="syz.3.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 33.190637][ T3309] veth1_vlan: entered promiscuous mode [ 33.216862][ T3309] veth0_macvtap: entered promiscuous mode [ 33.217487][ T29] audit: type=1400 audit(1789004347.559:169): avc: denied { bind } for pid=3516 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.233282][ T3309] veth1_macvtap: entered promiscuous mode [ 33.272008][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.273695][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.383660][ T70] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.383922][ T70] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.384312][ T70] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.384684][ T70] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.385697][ T29] audit: type=1400 audit(1789004347.729:170): avc: denied { name_bind } for pid=3521 comm="syz.3.9" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 33.385784][ T29] audit: type=1400 audit(1789004347.729:171): avc: denied { node_bind } for pid=3521 comm="syz.3.9" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 33.475037][ T29] audit: type=1400 audit(1789004347.819:172): avc: denied { create } for pid=3526 comm="syz.0.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 33.489091][ T29] audit: type=1400 audit(1789004347.829:173): avc: denied { setopt } for pid=3526 comm="syz.0.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 33.490163][ T29] audit: type=1400 audit(1789004347.829:174): avc: denied { bind } for pid=3526 comm="syz.0.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 33.919298][ T3525] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 33.919335][ T3525] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 35.025582][ T3554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.025687][ T3554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.007228][ T3585] process 'syz.1.26' launched './file0' with NULL argv: empty string added [ 36.532459][ T3567] syz.0.19 (3567) used greatest stack depth: 10752 bytes left [ 38.175922][ T29] kauditd_printk_skb: 121 callbacks suppressed [ 38.175937][ T29] audit: type=1400 audit(1789004352.519:296): avc: denied { unmount } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 39.261552][ T29] audit: type=1400 audit(1789004352.729:297): avc: denied { create } for pid=3616 comm="syz.4.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 39.261597][ T29] audit: type=1400 audit(1789004352.739:298): avc: denied { bind } for pid=3616 comm="syz.4.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 39.261650][ T29] audit: type=1400 audit(1789004352.739:299): avc: denied { listen } for pid=3616 comm="syz.4.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 39.261687][ T29] audit: type=1400 audit(1789004352.739:300): avc: denied { connect } for pid=3616 comm="syz.4.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 39.261723][ T29] audit: type=1400 audit(1789004353.119:301): avc: denied { read } for pid=3616 comm="syz.4.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 39.846176][ T3619] netlink: 'syz.3.37': attribute type 39 has an invalid length. [ 40.008817][ T29] audit: type=1400 audit(1789004354.349:302): avc: denied { read } for pid=3630 comm="syz.3.40" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 40.073343][ T29] audit: type=1400 audit(1789004354.419:303): avc: denied { create } for pid=3632 comm="syz.3.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 40.079365][ T29] audit: type=1400 audit(1789004354.419:304): avc: denied { setopt } for pid=3632 comm="syz.3.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 40.081271][ T29] audit: type=1400 audit(1789004354.419:305): avc: denied { connect } for pid=3632 comm="syz.3.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 40.504280][ T3646] netlink: 12 bytes leftover after parsing attributes in process `syz.0.44'. [ 40.659544][ T3649] FAULT_INJECTION: forcing a failure. [ 40.659544][ T3649] name failslab, interval 1, probability 0, space 0, times 1 [ 40.659688][ T3649] CPU: 1 UID: 0 PID: 3649 Comm: syz.4.46 Not tainted syzkaller #0 PREEMPT(lazy) [ 40.659786][ T3649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 40.659802][ T3649] Call Trace: [ 40.659811][ T3649] [ 40.659820][ T3649] __dump_stack+0x1d/0x30 [ 40.659849][ T3649] dump_stack_lvl+0x95/0xd0 [ 40.659913][ T3649] dump_stack+0x15/0x1b [ 40.660000][ T3649] should_fail_ex+0x262/0x280 [ 40.660030][ T3649] ? __do_once_done+0x62/0x110 [ 40.660055][ T3649] should_failslab+0x8c/0xb0 [ 40.660092][ T3649] __kmalloc_cache_noprof+0x7a/0x400 [ 40.660133][ T3649] ? __do_once_done+0x62/0x110 [ 40.660163][ T3649] __do_once_done+0x62/0x110 [ 40.660187][ T3649] __rds_conn_create+0x115f/0x11a0 [ 40.660295][ T3649] ? should_fail_ex+0xdb/0x280 [ 40.660322][ T3649] ? rds_message_alloc+0x45/0x120 [ 40.660344][ T3649] ? should_failslab+0x8c/0xb0 [ 40.660379][ T3649] rds_conn_create_outgoing+0x43/0x60 [ 40.660433][ T3649] rds_sendmsg+0xbf0/0x1580 [ 40.660462][ T3649] ? __pfx_rds_sendmsg+0x10/0x10 [ 40.660492][ T3649] ____sys_sendmsg+0x532/0x580 [ 40.660549][ T3649] ___sys_sendmsg+0x195/0x1e0 [ 40.660579][ T3649] __x64_sys_sendmsg+0xd4/0x160 [ 40.660605][ T3649] x64_sys_call+0x22ab/0x2550 [ 40.660631][ T3649] do_syscall_64+0x112/0x360 [ 40.660679][ T3649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.660702][ T3649] RIP: 0033:0x7fb6350fe159 [ 40.660722][ T3649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.660741][ T3649] RSP: 002b:00007fb633b57028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 40.660785][ T3649] RAX: ffffffffffffffda RBX: 00007fb635385fa0 RCX: 00007fb6350fe159 [ 40.660845][ T3649] RDX: 0000000000000040 RSI: 00002000000002c0 RDI: 0000000000000003 [ 40.660859][ T3649] RBP: 00007fb63519503b R08: 0000000000000000 R09: 0000000000000000 [ 40.660872][ T3649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 40.660960][ T3649] R13: 00007fb635386038 R14: 00007fb635385fa0 R15: 00007ffeba92a218 [ 40.660979][ T3649] [ 41.971949][ T3662] syz.2.39 (3662) used greatest stack depth: 10552 bytes left [ 45.012379][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 45.012395][ T29] audit: type=1400 audit(1789004359.349:326): avc: denied { ioctl } for pid=3694 comm="syz.4.60" path="socket:[5254]" dev="sockfs" ino=5254 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 45.012797][ T29] audit: type=1400 audit(1789004359.349:327): avc: denied { bind } for pid=3694 comm="syz.4.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 45.013057][ T29] audit: type=1400 audit(1789004359.349:328): avc: denied { setopt } for pid=3694 comm="syz.4.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 45.185327][ T29] audit: type=1400 audit(1789004359.519:329): avc: denied { read } for pid=3687 comm="syz.0.58" name="control" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 45.185413][ T29] audit: type=1400 audit(1789004359.519:330): avc: denied { open } for pid=3687 comm="syz.0.58" path="/13/dev/mapper/control" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 45.185478][ T29] audit: type=1400 audit(1789004359.529:331): avc: denied { ioctl } for pid=3687 comm="syz.0.58" path="/13/dev/mapper/control" dev="devtmpfs" ino=247 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 45.228446][ T29] audit: type=1400 audit(1789004359.569:332): avc: denied { write } for pid=3694 comm="syz.4.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 45.479321][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b4f7e00: rx timeout, send abort [ 45.488228][ T29] audit: type=1400 audit(1789004359.829:333): avc: denied { read } for pid=2966 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 45.488254][ T29] audit: type=1400 audit(1789004359.829:334): avc: denied { search } for pid=2966 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.488301][ T29] audit: type=1400 audit(1789004359.829:335): avc: denied { write search } for pid=2966 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.497956][ T3695] netlink: 4 bytes leftover after parsing attributes in process `syz.4.60'. [ 46.584760][ T3715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.584933][ T3715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.680726][ T3724] netlink: 52 bytes leftover after parsing attributes in process `syz.0.68'. [ 46.741743][ T3706] syz.1.62 (3706) used greatest stack depth: 10288 bytes left [ 47.781659][ T3749] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 47.965606][ T3762] FAULT_INJECTION: forcing a failure. [ 47.965606][ T3762] name failslab, interval 1, probability 0, space 0, times 0 [ 47.965670][ T3762] CPU: 1 UID: 0 PID: 3762 Comm: syz.1.82 Not tainted syzkaller #0 PREEMPT(lazy) [ 47.965696][ T3762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 47.965712][ T3762] Call Trace: [ 47.965720][ T3762] [ 47.965728][ T3762] __dump_stack+0x1d/0x30 [ 47.965760][ T3762] dump_stack_lvl+0x95/0xd0 [ 47.965832][ T3762] dump_stack+0x15/0x1b [ 47.965855][ T3762] should_fail_ex+0x262/0x280 [ 47.965896][ T3762] ? xfrm_state_alloc+0x2c/0x190 [ 47.965918][ T3762] should_failslab+0x8c/0xb0 [ 47.965953][ T3762] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 47.965987][ T3762] ? xfrm_state_alloc+0x2c/0x190 [ 47.966071][ T3762] xfrm_state_alloc+0x2c/0x190 [ 47.966093][ T3762] pfkey_add+0x3c4/0x12b0 [ 47.966204][ T3762] pfkey_sendmsg+0x839/0x970 [ 47.966243][ T3762] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 47.966277][ T3762] ____sys_sendmsg+0x532/0x580 [ 47.966355][ T3762] ___sys_sendmsg+0x195/0x1e0 [ 47.966387][ T3762] __x64_sys_sendmsg+0xd4/0x160 [ 47.966452][ T3762] x64_sys_call+0x22ab/0x2550 [ 47.966482][ T3762] do_syscall_64+0x112/0x360 [ 47.966537][ T3762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.966564][ T3762] RIP: 0033:0x7f0c8c92e159 [ 47.966584][ T3762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.966606][ T3762] RSP: 002b:00007f0c8b387028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 47.966711][ T3762] RAX: ffffffffffffffda RBX: 00007f0c8cbb5fa0 RCX: 00007f0c8c92e159 [ 47.966726][ T3762] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 47.966740][ T3762] RBP: 00007f0c8c9c503b R08: 0000000000000000 R09: 0000000000000000 [ 47.966770][ T3762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 47.966783][ T3762] R13: 00007f0c8cbb6038 R14: 00007f0c8cbb5fa0 R15: 00007ffc89cc87f8 [ 47.966800][ T3762] [ 48.176218][ T3762] syz.1.82 uses obsolete (PF_INET,SOCK_PACKET) [ 48.692194][ T3773] EXT4-fs warning (device sda1): ext4_resize_fs:2018: can't read last block, resize aborted [ 49.530835][ T3785] netlink: 'syz.4.88': attribute type 4 has an invalid length. [ 50.331993][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 50.332008][ T29] audit: type=1400 audit(1789004364.669:353): avc: denied { mount } for pid=3796 comm="syz.0.95" name="/" dev="ramfs" ino=6415 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 50.396087][ T29] audit: type=1400 audit(1789004364.739:354): avc: denied { execute } for pid=3796 comm="syz.0.95" path="/file1" dev="ramfs" ino=6425 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 50.531356][ T3807] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 50.531376][ T3807] audit: out of memory in audit_log_start [ 50.531457][ T29] audit: type=1400 audit(1789004364.869:355): avc: denied { read } for pid=3806 comm="syz.2.98" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 50.533729][ T29] audit: type=1400 audit(1789004364.869:356): avc: denied { ioctl } for pid=3806 comm="syz.2.98" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 51.223464][ T29] audit: type=1400 audit(1789004365.569:357): avc: denied { bind } for pid=3800 comm="syz.3.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.426856][ T29] audit: type=1400 audit(1789004365.769:358): avc: denied { shutdown } for pid=3811 comm="syz.1.101" lport=34676 faddr=fe88::402 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 51.787368][ T29] audit: type=1400 audit(1789004366.129:359): avc: denied { name_bind } for pid=3814 comm="syz.2.99" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 52.208327][ T29] audit: type=1400 audit(1789004366.549:360): avc: denied { append } for pid=3823 comm="syz.3.104" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 52.212130][ T3829] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.104' sets config #0 [ 53.045075][ T3845] netlink: 32 bytes leftover after parsing attributes in process `syz.3.112'. [ 53.045106][ T3845] netlink: 32 bytes leftover after parsing attributes in process `syz.3.112'. [ 55.524964][ T3867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.525143][ T3867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.592675][ T3867] netlink: 12 bytes leftover after parsing attributes in process `syz.1.118'. [ 55.610300][ T3867] vlan2: entered allmulticast mode [ 55.610321][ T3867] bond0: entered allmulticast mode [ 55.610334][ T3867] bond_slave_0: entered allmulticast mode [ 55.610349][ T3867] bond_slave_1: entered allmulticast mode [ 56.774219][ T3880] device-mapper: ioctl: Invalid target message parameters. [ 56.852181][ T3883] Illegal XDP return value 4294967274 on prog (id 10) dev syz_tun, expect packet loss! [ 56.892700][ T3885] netlink: 'syz.2.125': attribute type 1 has an invalid length. [ 56.905228][ T3885] ifb0: entered promiscuous mode [ 56.961974][ T3890] loop0: detected capacity change from 0 to 6 [ 56.981776][ T29] kauditd_printk_skb: 118 callbacks suppressed [ 56.981792][ T29] audit: type=1400 audit(1789004371.319:479): avc: denied { kexec_image_load } for pid=3893 comm="syz.2.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 57.137504][ T29] audit: type=1400 audit(1789004371.479:480): avc: denied { write } for pid=3891 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.139292][ T3906] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 57.343265][ T29] audit: type=1400 audit(1789004371.659:481): avc: denied { write } for pid=3911 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.764955][ T3926] FAULT_INJECTION: forcing a failure. [ 57.764955][ T3926] name failslab, interval 1, probability 0, space 0, times 0 [ 57.764991][ T3926] CPU: 0 UID: 0 PID: 3926 Comm: syz.3.134 Not tainted syzkaller #0 PREEMPT(lazy) [ 57.765043][ T3926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 57.765058][ T3926] Call Trace: [ 57.765065][ T3926] [ 57.765072][ T3926] __dump_stack+0x1d/0x30 [ 57.765100][ T3926] dump_stack_lvl+0x95/0xd0 [ 57.765163][ T3926] dump_stack+0x15/0x1b [ 57.765223][ T3926] should_fail_ex+0x262/0x280 [ 57.765247][ T3926] should_failslab+0x8c/0xb0 [ 57.765276][ T3926] __kmalloc_node_track_caller_noprof+0xd6/0x500 [ 57.765369][ T3926] ? key_alloc+0x2b2/0x940 [ 57.765411][ T3926] ? key_alloc+0x2b2/0x940 [ 57.765445][ T3926] kmemdup_noprof+0x2b/0x70 [ 57.765469][ T3926] key_alloc+0x2b2/0x940 [ 57.765601][ T3926] keyring_alloc+0x45/0xb0 [ 57.765636][ T3926] call_sbin_request_key+0x1cd/0x740 [ 57.765682][ T3926] request_key_and_link+0x95b/0xe20 [ 57.765711][ T3926] ? __pfx_key_default_cmp+0x10/0x10 [ 57.765798][ T3926] ? __pfx_keyring_search_iterator+0x10/0x10 [ 57.765842][ T3926] __se_sys_request_key+0x1e9/0x2a0 [ 57.765872][ T3926] __x64_sys_request_key+0x55/0x70 [ 57.765902][ T3926] x64_sys_call+0x1741/0x2550 [ 57.765934][ T3926] do_syscall_64+0x112/0x360 [ 57.765973][ T3926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.766026][ T3926] RIP: 0033:0x7f499e2ae159 [ 57.766042][ T3926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.766065][ T3926] RSP: 002b:00007f499cd07028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 57.766124][ T3926] RAX: ffffffffffffffda RBX: 00007f499e535fa0 RCX: 00007f499e2ae159 [ 57.766180][ T3926] RDX: 00002000000001c0 RSI: 00002000000000c0 RDI: 0000200000000040 [ 57.766197][ T3926] RBP: 00007f499e34503b R08: 0000000000000000 R09: 0000000000000000 [ 57.766214][ T3926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.766230][ T3926] R13: 00007f499e536038 R14: 00007f499e535fa0 R15: 00007ffd3e0b7b68 [ 57.766301][ T3926] [ 60.712056][ T3965] FAULT_INJECTION: forcing a failure. [ 60.712056][ T3965] name failslab, interval 1, probability 0, space 0, times 0 [ 60.712088][ T3965] CPU: 1 UID: 0 PID: 3965 Comm: syz.2.147 Not tainted syzkaller #0 PREEMPT(lazy) [ 60.712137][ T3965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 60.712227][ T3965] Call Trace: [ 60.712284][ T3965] [ 60.712294][ T3965] __dump_stack+0x1d/0x30 [ 60.712361][ T3965] dump_stack_lvl+0x95/0xd0 [ 60.712389][ T3965] dump_stack+0x15/0x1b [ 60.712415][ T3965] should_fail_ex+0x262/0x280 [ 60.712440][ T3965] ? __se_sys_futex_waitv+0x101/0x1c0 [ 60.712501][ T3965] should_failslab+0x8c/0xb0 [ 60.712535][ T3965] __kmalloc_noprof+0xd0/0x4d0 [ 60.712615][ T3965] ? do_futex+0x391/0x460 [ 60.712646][ T3965] ? __se_sys_futex_waitv+0x101/0x1c0 [ 60.712684][ T3965] __se_sys_futex_waitv+0x101/0x1c0 [ 60.712743][ T3965] __x64_sys_futex_waitv+0x67/0x80 [ 60.712779][ T3965] x64_sys_call+0x1e49/0x2550 [ 60.712824][ T3965] do_syscall_64+0x112/0x360 [ 60.712856][ T3965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.712880][ T3965] RIP: 0033:0x7ffa2927e159 [ 60.712896][ T3965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.712986][ T3965] RSP: 002b:00007ffa27cd7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001c1 [ 60.713005][ T3965] RAX: ffffffffffffffda RBX: 00007ffa29505fa0 RCX: 00007ffa2927e159 [ 60.713051][ T3965] RDX: 0000000000000000 RSI: 0000000000000031 RDI: 0000200000002dc0 [ 60.713067][ T3965] RBP: 00007ffa2931503b R08: 0000000000000000 R09: 0000000000000000 [ 60.713084][ T3965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 60.713098][ T3965] R13: 00007ffa29506038 R14: 00007ffa29505fa0 R15: 00007ffdd19f1ac8 [ 60.713117][ T3965] [ 60.809778][ T3941] syz.4.139 (3941) used greatest stack depth: 9760 bytes left [ 61.775723][ T3983] device-mapper: ioctl: Invalid ioctl structure: name t, dev fc01 [ 61.778023][ T3983] device-mapper: ioctl: Unable to change name on mapped device t to one that already exists: | [ 62.252839][ T4007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.252952][ T4007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.430882][ T29] audit: type=1400 audit(1789004376.769:482): avc: denied { module_request } for pid=4004 comm="syz.1.161" kmod="snd-card-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 63.096287][ T4019] netlink: 12 bytes leftover after parsing attributes in process `syz.3.162'. [ 63.867217][ T4030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.872076][ T4030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.927267][ T4030] Zero length message leads to an empty skb [ 67.363304][ T4124] syz.4.205 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 68.287100][ T29] audit: type=1400 audit(1789004382.629:483): avc: denied { write } for pid=4152 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.347296][ T29] audit: type=1400 audit(1789004382.689:484): avc: denied { write } for pid=4182 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.325352][ T4242] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 71.039370][ T29] audit: type=1400 audit(1789004385.379:485): avc: denied { write } for pid=4235 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.129578][ T29] audit: type=1400 audit(1789004385.469:486): avc: denied { write } for pid=4265 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.973913][ T4306] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 76.997132][ T29] audit: type=1400 audit(1789004391.339:487): avc: denied { connect } for pid=4378 comm="syz.2.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 77.108709][ T4381] 9p: Bad value for 'rfdno' [ 77.859753][ T29] audit: type=1400 audit(1789004392.199:488): avc: denied { write } for pid=4409 comm="syz.1.308" path="socket:[6094]" dev="sockfs" ino=6094 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 77.877142][ T4412] 9p: Bad value for 'rfdno' [ 79.949213][ T4447] 9p: Bad value for 'rfdno' [ 80.055793][ T4460] FAULT_INJECTION: forcing a failure. [ 80.055793][ T4460] name failslab, interval 1, probability 0, space 0, times 0 [ 80.055876][ T4460] CPU: 0 UID: 0 PID: 4460 Comm: syz.0.329 Not tainted syzkaller #0 PREEMPT(lazy) [ 80.055908][ T4460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 80.055925][ T4460] Call Trace: [ 80.055933][ T4460] [ 80.055941][ T4460] __dump_stack+0x1d/0x30 [ 80.055971][ T4460] dump_stack_lvl+0x95/0xd0 [ 80.055998][ T4460] dump_stack+0x15/0x1b [ 80.056026][ T4460] should_fail_ex+0x262/0x280 [ 80.056075][ T4460] ? sbitmap_queue_init_node+0x13a/0x310 [ 80.056105][ T4460] should_failslab+0x8c/0xb0 [ 80.056204][ T4460] __kmalloc_cache_node_noprof+0x81/0x420 [ 80.056245][ T4460] ? sbitmap_queue_init_node+0x13a/0x310 [ 80.056356][ T4460] sbitmap_queue_init_node+0x13a/0x310 [ 80.056386][ T4460] blk_mq_init_tags+0x149/0x1f0 [ 80.056489][ T4460] blk_mq_alloc_map_and_rqs+0x13f/0x760 [ 80.056570][ T4460] ? kfree+0x143/0x3b0 [ 80.056601][ T4460] blk_mq_alloc_set_map_and_rqs+0x120/0x4d0 [ 80.056683][ T4460] blk_mq_alloc_tag_set+0x495/0x640 [ 80.056763][ T4460] ? __pfx_loop_control_ioctl+0x10/0x10 [ 80.056789][ T4460] loop_add+0x267/0x580 [ 80.056816][ T4460] ? __pfx_loop_control_ioctl+0x10/0x10 [ 80.056839][ T4460] loop_control_ioctl+0xd0/0x3f0 [ 80.056901][ T4460] ? __pfx_loop_control_ioctl+0x10/0x10 [ 80.056923][ T4460] __se_sys_ioctl+0xce/0x140 [ 80.056953][ T4460] __x64_sys_ioctl+0x43/0x50 [ 80.056992][ T4460] x64_sys_call+0x239d/0x2550 [ 80.057039][ T4460] do_syscall_64+0x112/0x360 [ 80.057089][ T4460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.057117][ T4460] RIP: 0033:0x7f1fd7f3e159 [ 80.057211][ T4460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.057233][ T4460] RSP: 002b:00007f1fd6997028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 80.057313][ T4460] RAX: ffffffffffffffda RBX: 00007f1fd81c5fa0 RCX: 00007f1fd7f3e159 [ 80.057328][ T4460] RDX: 00000000ffffffe4 RSI: 0000000000004c80 RDI: 0000000000000005 [ 80.057345][ T4460] RBP: 00007f1fd7fd503b R08: 0000000000000000 R09: 0000000000000000 [ 80.057383][ T4460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.057396][ T4460] R13: 00007f1fd81c6038 R14: 00007f1fd81c5fa0 R15: 00007ffdb634c208 [ 80.057441][ T4460] [ 80.057746][ T4460] blk-mq: reduced tag depth (128 -> 64) [ 82.016656][ T4505] device-mapper: ioctl: Unable to change name on mapped device to one that already exists: | [ 83.151552][ T4537] device-mapper: ioctl: Invalid target message parameters. [ 83.151755][ T4537] device-mapper: ioctl: Unable to change name on mapped device t to one that already exists: | [ 83.177206][ T29] audit: type=1400 audit(1789004397.519:489): avc: denied { cmd } for pid=4528 comm="syz.0.354" path="socket:[7538]" dev="sockfs" ino=7538 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 87.262722][ T4630] netlink: 2 bytes leftover after parsing attributes in process `syz.1.392'. [ 87.388858][ T29] audit: type=1400 audit(1789004401.599:490): avc: denied { nlmsg_read } for pid=4629 comm="syz.1.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 87.437499][ T29] audit: type=1400 audit(1789004401.779:491): avc: denied { ioctl } for pid=4635 comm="syz.4.394" path="socket:[8605]" dev="sockfs" ino=8605 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 89.023493][ T4656] FAULT_INJECTION: forcing a failure. [ 89.023493][ T4656] name failslab, interval 1, probability 0, space 0, times 0 [ 89.023523][ T4656] CPU: 1 UID: 0 PID: 4656 Comm: syz.0.399 Not tainted syzkaller #0 PREEMPT(lazy) [ 89.023555][ T4656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 89.023571][ T4656] Call Trace: [ 89.023579][ T4656] [ 89.023588][ T4656] __dump_stack+0x1d/0x30 [ 89.023618][ T4656] dump_stack_lvl+0x95/0xd0 [ 89.023654][ T4656] dump_stack+0x15/0x1b [ 89.023675][ T4656] should_fail_ex+0x262/0x280 [ 89.023704][ T4656] should_failslab+0x8c/0xb0 [ 89.023739][ T4656] __kmalloc_node_noprof+0xdb/0x500 [ 89.023831][ T4656] ? __blk_mq_realloc_hw_ctxs+0x82/0x430 [ 89.023857][ T4656] ? __blk_mq_realloc_hw_ctxs+0x82/0x430 [ 89.023885][ T4656] __blk_mq_realloc_hw_ctxs+0x82/0x430 [ 89.023984][ T4656] ? kobject_init+0xa1/0x110 [ 89.024012][ T4656] ? blk_mq_sysfs_init+0xf1/0x110 [ 89.024042][ T4656] blk_mq_init_allocated_queue+0x21d/0x910 [ 89.024104][ T4656] ? blk_alloc_queue+0x314/0x320 [ 89.024205][ T4656] __blk_mq_alloc_disk+0xeb/0x1b0 [ 89.024243][ T4656] ? __pfx_loop_control_ioctl+0x10/0x10 [ 89.024263][ T4656] loop_add+0x2a1/0x580 [ 89.024294][ T4656] ? __pfx_loop_control_ioctl+0x10/0x10 [ 89.024326][ T4656] loop_control_ioctl+0xd0/0x3f0 [ 89.024349][ T4656] ? __pfx_loop_control_ioctl+0x10/0x10 [ 89.024392][ T4656] __se_sys_ioctl+0xce/0x140 [ 89.024429][ T4656] __x64_sys_ioctl+0x43/0x50 [ 89.024549][ T4656] x64_sys_call+0x239d/0x2550 [ 89.024640][ T4656] do_syscall_64+0x112/0x360 [ 89.024754][ T4656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.024804][ T4656] RIP: 0033:0x7f1fd7f3e159 [ 89.024825][ T4656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.024848][ T4656] RSP: 002b:00007f1fd6997028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 89.024871][ T4656] RAX: ffffffffffffffda RBX: 00007f1fd81c5fa0 RCX: 00007f1fd7f3e159 [ 89.024888][ T4656] RDX: 00000000ffffffe4 RSI: 0000000000004c80 RDI: 0000000000000004 [ 89.024913][ T4656] RBP: 00007f1fd7fd503b R08: 0000000000000000 R09: 0000000000000000 [ 89.024930][ T4656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.024946][ T4656] R13: 00007f1fd81c6038 R14: 00007f1fd81c5fa0 R15: 00007ffdb634c208 [ 89.024969][ T4656] [ 90.721916][ T4687] FAULT_INJECTION: forcing a failure. [ 90.721916][ T4687] name failslab, interval 1, probability 0, space 0, times 0 [ 90.722099][ T4687] CPU: 0 UID: 0 PID: 4687 Comm: syz.2.411 Not tainted syzkaller #0 PREEMPT(lazy) [ 90.722131][ T4687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 90.722146][ T4687] Call Trace: [ 90.722154][ T4687] [ 90.722192][ T4687] __dump_stack+0x1d/0x30 [ 90.722224][ T4687] dump_stack_lvl+0x95/0xd0 [ 90.722246][ T4687] dump_stack+0x15/0x1b [ 90.722266][ T4687] should_fail_ex+0x262/0x280 [ 90.722289][ T4687] ? blk_mq_init_allocated_queue+0x73/0x910 [ 90.722337][ T4687] should_failslab+0x8c/0xb0 [ 90.722403][ T4687] __kmalloc_cache_noprof+0x7a/0x400 [ 90.722437][ T4687] ? __kmalloc_cache_noprof+0x19b/0x400 [ 90.722468][ T4687] ? blk_mq_init_allocated_queue+0x73/0x910 [ 90.722599][ T4687] blk_mq_init_allocated_queue+0x73/0x910 [ 90.722721][ T4687] ? percpu_ref_init+0x1dd/0x250 [ 90.722798][ T4687] ? __pfx_blk_queue_usage_counter_release+0x10/0x10 [ 90.722841][ T4687] ? blk_alloc_queue+0x314/0x320 [ 90.722910][ T4687] __blk_mq_alloc_disk+0xeb/0x1b0 [ 90.722945][ T4687] ? __pfx_loop_control_ioctl+0x10/0x10 [ 90.722969][ T4687] loop_add+0x2a1/0x580 [ 90.722997][ T4687] ? __pfx_loop_control_ioctl+0x10/0x10 [ 90.723058][ T4687] loop_control_ioctl+0xd0/0x3f0 [ 90.723079][ T4687] ? __pfx_loop_control_ioctl+0x10/0x10 [ 90.723098][ T4687] __se_sys_ioctl+0xce/0x140 [ 90.723127][ T4687] __x64_sys_ioctl+0x43/0x50 [ 90.723189][ T4687] x64_sys_call+0x239d/0x2550 [ 90.723253][ T4687] do_syscall_64+0x112/0x360 [ 90.723291][ T4687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.723313][ T4687] RIP: 0033:0x7ffa2927e159 [ 90.723395][ T4687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.723416][ T4687] RSP: 002b:00007ffa27cd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 90.723442][ T4687] RAX: ffffffffffffffda RBX: 00007ffa29505fa0 RCX: 00007ffa2927e159 [ 90.723473][ T4687] RDX: 00000000ffffffe4 RSI: 0000000000004c80 RDI: 0000000000000004 [ 90.723486][ T4687] RBP: 00007ffa2931503b R08: 0000000000000000 R09: 0000000000000000 [ 90.723499][ T4687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.723526][ T4687] R13: 00007ffa29506038 R14: 00007ffa29505fa0 R15: 00007ffdd19f1ac8 [ 90.723549][ T4687] [ 94.004683][ T4745] netlink: 'syz.4.433': attribute type 39 has an invalid length. [ 99.316709][ T4838] device-mapper: ioctl: Invalid target message parameters. [ 99.319490][ T4838] device-mapper: ioctl: Unable to change name on mapped device t to one that already exists: | [ 100.800503][ T4874] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 102.278726][ T4893] EXT4-fs warning (device sda1): ext4_resize_fs:2018: can't read last block, resize aborted [ 103.276569][ T4935] FAULT_INJECTION: forcing a failure. [ 103.276569][ T4935] name failslab, interval 1, probability 0, space 0, times 0 [ 103.276607][ T4935] CPU: 0 UID: 0 PID: 4935 Comm: syz.0.499 Not tainted syzkaller #0 PREEMPT(lazy) [ 103.276655][ T4935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 103.276663][ T4935] Call Trace: [ 103.276668][ T4935] [ 103.276674][ T4935] __dump_stack+0x1d/0x30 [ 103.276695][ T4935] dump_stack_lvl+0x95/0xd0 [ 103.276782][ T4935] dump_stack+0x15/0x1b [ 103.276805][ T4935] should_fail_ex+0x262/0x280 [ 103.276842][ T4935] should_failslab+0x8c/0xb0 [ 103.276872][ T4935] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 103.277003][ T4935] ? sock_alloc_inode+0x36/0xf0 [ 103.277020][ T4935] ? sock_alloc_inode+0x36/0xf0 [ 103.277035][ T4935] ? selinux_socket_create+0xfd/0x180 [ 103.277052][ T4935] ? __pfx_sock_alloc_inode+0x10/0x10 [ 103.277122][ T4935] sock_alloc_inode+0x36/0xf0 [ 103.277215][ T4935] alloc_inode+0x40/0x170 [ 103.277227][ T4935] __sock_create+0x121/0x580 [ 103.277242][ T4935] ? __se_sys_futex+0x2f6/0x370 [ 103.277261][ T4935] __sys_socket+0xaf/0x180 [ 103.277286][ T4935] __x64_sys_socket+0x3f/0x50 [ 103.277316][ T4935] x64_sys_call+0x246e/0x2550 [ 103.277348][ T4935] do_syscall_64+0x112/0x360 [ 103.277397][ T4935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.277411][ T4935] RIP: 0033:0x7f1fd7f3e159 [ 103.277501][ T4935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.277513][ T4935] RSP: 002b:00007f1fd6997028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 103.277525][ T4935] RAX: ffffffffffffffda RBX: 00007f1fd81c5fa0 RCX: 00007f1fd7f3e159 [ 103.277572][ T4935] RDX: 0000000000000000 RSI: 4000000000000001 RDI: 0000000000000002 [ 103.277580][ T4935] RBP: 00007f1fd7fd503b R08: 0000000000000000 R09: 0000000000000000 [ 103.277588][ T4935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.277596][ T4935] R13: 00007f1fd81c6038 R14: 00007f1fd81c5fa0 R15: 00007ffdb634c208 [ 103.277659][ T4935] [ 103.277683][ T4935] socket: no more sockets [ 105.329881][ T4984] FAULT_INJECTION: forcing a failure. [ 105.329881][ T4984] name failslab, interval 1, probability 0, space 0, times 0 [ 105.329913][ T4984] CPU: 0 UID: 0 PID: 4984 Comm: syz.2.519 Not tainted syzkaller #0 PREEMPT(lazy) [ 105.329944][ T4984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 105.329956][ T4984] Call Trace: [ 105.329962][ T4984] [ 105.329969][ T4984] __dump_stack+0x1d/0x30 [ 105.329996][ T4984] dump_stack_lvl+0x95/0xd0 [ 105.330018][ T4984] dump_stack+0x15/0x1b [ 105.330045][ T4984] should_fail_ex+0x262/0x280 [ 105.330123][ T4984] should_failslab+0x8c/0xb0 [ 105.330157][ T4984] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 105.330187][ T4984] ? sock_alloc_inode+0x36/0xf0 [ 105.330216][ T4984] ? sock_alloc_inode+0x36/0xf0 [ 105.330321][ T4984] ? selinux_socket_create+0xfd/0x180 [ 105.330357][ T4984] ? __pfx_sock_alloc_inode+0x10/0x10 [ 105.330388][ T4984] sock_alloc_inode+0x36/0xf0 [ 105.330443][ T4984] alloc_inode+0x40/0x170 [ 105.330466][ T4984] __sock_create+0x121/0x580 [ 105.330508][ T4984] ? __se_sys_futex+0x2f6/0x370 [ 105.330544][ T4984] ? xfd_validate_state+0x45/0xf0 [ 105.330573][ T4984] __sys_socket+0xaf/0x180 [ 105.330599][ T4984] __x64_sys_socket+0x3f/0x50 [ 105.330686][ T4984] x64_sys_call+0x246e/0x2550 [ 105.330712][ T4984] do_syscall_64+0x112/0x360 [ 105.330839][ T4984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.330862][ T4984] RIP: 0033:0x7ffa2927e159 [ 105.330878][ T4984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.330897][ T4984] RSP: 002b:00007ffa27cd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 105.330938][ T4984] RAX: ffffffffffffffda RBX: 00007ffa29505fa0 RCX: 00007ffa2927e159 [ 105.330956][ T4984] RDX: 0000000000000000 RSI: 4000000000000001 RDI: 0000000000000002 [ 105.330973][ T4984] RBP: 00007ffa2931503b R08: 0000000000000000 R09: 0000000000000000 [ 105.330989][ T4984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.331005][ T4984] R13: 00007ffa29506038 R14: 00007ffa29505fa0 R15: 00007ffdd19f1ac8 [ 105.331138][ T4984] [ 105.331159][ T4984] socket: no more sockets [ 106.632629][ T5025] FAULT_INJECTION: forcing a failure. [ 106.632629][ T5025] name failslab, interval 1, probability 0, space 0, times 0 [ 106.632681][ T5025] CPU: 1 UID: 0 PID: 5025 Comm: syz.3.536 Not tainted syzkaller #0 PREEMPT(lazy) [ 106.632719][ T5025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 106.632737][ T5025] Call Trace: [ 106.632745][ T5025] [ 106.632755][ T5025] __dump_stack+0x1d/0x30 [ 106.632787][ T5025] dump_stack_lvl+0x95/0xd0 [ 106.632886][ T5025] dump_stack+0x15/0x1b [ 106.632911][ T5025] should_fail_ex+0x262/0x280 [ 106.632973][ T5025] should_failslab+0x8c/0xb0 [ 106.633087][ T5025] __kmalloc_node_noprof+0xdb/0x500 [ 106.633119][ T5025] ? crypto_create_tfm_node+0x5b/0x230 [ 106.633143][ T5025] ? crypto_create_tfm_node+0x5b/0x230 [ 106.633245][ T5025] crypto_create_tfm_node+0x5b/0x230 [ 106.633272][ T5025] ? crypto_alg_mod_lookup+0x454/0x490 [ 106.633338][ T5025] crypto_alloc_tfm_node+0xb8/0x280 [ 106.633360][ T5025] crypto_alloc_aead+0x2d/0x40 [ 106.633389][ T5025] esp6_init_state+0x3ec/0xa00 [ 106.633435][ T5025] ? should_failslab+0x8c/0xb0 [ 106.633523][ T5025] __xfrm_init_state+0x6b9/0xb40 [ 106.633662][ T5025] xfrm_init_state+0x1e/0x80 [ 106.633689][ T5025] pfkey_add+0xfc5/0x12b0 [ 106.633730][ T5025] pfkey_sendmsg+0x839/0x970 [ 106.633768][ T5025] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 106.633803][ T5025] ____sys_sendmsg+0x532/0x580 [ 106.633827][ T5025] ___sys_sendmsg+0x195/0x1e0 [ 106.633913][ T5025] ? hrtimer_start_range_ns_common+0x55c/0x860 [ 106.633952][ T5025] __x64_sys_sendmsg+0xd4/0x160 [ 106.633975][ T5025] x64_sys_call+0x22ab/0x2550 [ 106.634032][ T5025] do_syscall_64+0x112/0x360 [ 106.634139][ T5025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.634166][ T5025] RIP: 0033:0x7f499e2ae159 [ 106.634184][ T5025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.634207][ T5025] RSP: 002b:00007f499cd07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 106.634232][ T5025] RAX: ffffffffffffffda RBX: 00007f499e535fa0 RCX: 00007f499e2ae159 [ 106.634251][ T5025] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 106.634308][ T5025] RBP: 00007f499e34503b R08: 0000000000000000 R09: 0000000000000000 [ 106.634322][ T5025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.634337][ T5025] R13: 00007f499e536038 R14: 00007f499e535fa0 R15: 00007ffd3e0b7b68 [ 106.634357][ T5025] [ 111.067508][ T29] audit: type=1400 audit(1789004425.409:492): avc: denied { open } for pid=5123 comm="syz.3.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 111.067541][ T29] audit: type=1400 audit(1789004425.409:493): avc: denied { kernel } for pid=5123 comm="syz.3.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 111.083172][ T29] audit: type=1400 audit(1789004425.419:494): avc: denied { tracepoint } for pid=5123 comm="syz.3.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 111.141356][ T29] audit: type=1400 audit(1789004425.479:495): avc: denied { getopt } for pid=5123 comm="syz.3.575" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 111.210657][ T5129] loop2: detected capacity change from 0 to 256 [ 111.232911][ T5132] mmap: syz.0.578 (5132) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 111.243541][ T29] audit: type=1400 audit(1789004425.579:496): avc: denied { create } for pid=5131 comm="syz.4.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 111.250787][ T29] audit: type=1400 audit(1789004425.589:497): avc: denied { bind } for pid=5131 comm="syz.4.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 111.251152][ T29] audit: type=1400 audit(1789004425.589:498): avc: denied { listen } for pid=5131 comm="syz.4.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 111.253527][ T29] audit: type=1400 audit(1789004425.589:499): avc: denied { write } for pid=5131 comm="syz.4.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 111.279619][ T29] audit: type=1400 audit(1789004425.609:500): avc: denied { mount } for pid=5127 comm="syz.2.576" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 111.358448][ T29] audit: type=1400 audit(1789004425.699:501): avc: denied { setopt } for pid=5131 comm="syz.4.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 111.460123][ T5133] veth0_to_bond: entered promiscuous mode [ 111.460217][ T5133] macsec1: entered promiscuous mode [ 111.461752][ T5133] macsec1: entered allmulticast mode [ 111.461769][ T5133] veth0_to_bond: entered allmulticast mode [ 115.592990][ T5282] FAULT_INJECTION: forcing a failure. [ 115.592990][ T5282] name failslab, interval 1, probability 0, space 0, times 0 [ 115.593108][ T5282] CPU: 1 UID: 0 PID: 5282 Comm: syz.2.640 Not tainted syzkaller #0 PREEMPT(lazy) [ 115.593145][ T5282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 115.593159][ T5282] Call Trace: [ 115.593168][ T5282] [ 115.593177][ T5282] __dump_stack+0x1d/0x30 [ 115.593214][ T5282] dump_stack_lvl+0x95/0xd0 [ 115.593292][ T5282] dump_stack+0x15/0x1b [ 115.593313][ T5282] should_fail_ex+0x262/0x280 [ 115.593346][ T5282] ? security_inode_alloc+0x37/0x100 [ 115.593376][ T5282] should_failslab+0x8c/0xb0 [ 115.593456][ T5282] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 115.593484][ T5282] ? security_inode_alloc+0x37/0x100 [ 115.593510][ T5282] security_inode_alloc+0x37/0x100 [ 115.593544][ T5282] inode_init_always_gfp+0x495/0x4e0 [ 115.593569][ T5282] ? __pfx_sock_alloc_inode+0x10/0x10 [ 115.593601][ T5282] alloc_inode+0x58/0x170 [ 115.593622][ T5282] __sock_create+0x121/0x580 [ 115.593654][ T5282] ? xfd_validate_state+0x45/0xf0 [ 115.593745][ T5282] __sys_socket+0xaf/0x180 [ 115.593824][ T5282] __x64_sys_socket+0x3f/0x50 [ 115.593922][ T5282] x64_sys_call+0x246e/0x2550 [ 115.593947][ T5282] do_syscall_64+0x112/0x360 [ 115.593979][ T5282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.594004][ T5282] RIP: 0033:0x7ffa2927e159 [ 115.594063][ T5282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.594084][ T5282] RSP: 002b:00007ffa27cd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 115.594155][ T5282] RAX: ffffffffffffffda RBX: 00007ffa29505fa0 RCX: 00007ffa2927e159 [ 115.594172][ T5282] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 115.594187][ T5282] RBP: 00007ffa2931503b R08: 0000000000000000 R09: 0000000000000000 [ 115.594202][ T5282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.594297][ T5282] R13: 00007ffa29506038 R14: 00007ffa29505fa0 R15: 00007ffdd19f1ac8 [ 115.594386][ T5282] [ 115.597510][ T5282] socket: no more sockets [ 115.920541][ T5310] FAULT_INJECTION: forcing a failure. [ 115.920541][ T5310] name failslab, interval 1, probability 0, space 0, times 0 [ 115.920571][ T5310] CPU: 0 UID: 0 PID: 5310 Comm: syz.0.654 Not tainted syzkaller #0 PREEMPT(lazy) [ 115.920596][ T5310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 115.920610][ T5310] Call Trace: [ 115.920619][ T5310] [ 115.920676][ T5310] __dump_stack+0x1d/0x30 [ 115.920705][ T5310] dump_stack_lvl+0x95/0xd0 [ 115.920809][ T5310] dump_stack+0x15/0x1b [ 115.920877][ T5310] should_fail_ex+0x262/0x280 [ 115.920924][ T5310] ? security_inode_alloc+0x37/0x100 [ 115.920950][ T5310] should_failslab+0x8c/0xb0 [ 115.920980][ T5310] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 115.921015][ T5310] ? security_inode_alloc+0x37/0x100 [ 115.921065][ T5310] security_inode_alloc+0x37/0x100 [ 115.921090][ T5310] inode_init_always_gfp+0x495/0x4e0 [ 115.921111][ T5310] ? __pfx_sock_alloc_inode+0x10/0x10 [ 115.921142][ T5310] alloc_inode+0x58/0x170 [ 115.921163][ T5310] __sock_create+0x121/0x580 [ 115.921197][ T5310] ? xfd_validate_state+0x45/0xf0 [ 115.921231][ T5310] __sys_socket+0xaf/0x180 [ 115.921362][ T5310] __x64_sys_socket+0x3f/0x50 [ 115.921389][ T5310] x64_sys_call+0x246e/0x2550 [ 115.921479][ T5310] do_syscall_64+0x112/0x360 [ 115.921516][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.921542][ T5310] RIP: 0033:0x7f1fd7f3e159 [ 115.921561][ T5310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.921583][ T5310] RSP: 002b:00007f1fd6997028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 115.921685][ T5310] RAX: ffffffffffffffda RBX: 00007f1fd81c5fa0 RCX: 00007f1fd7f3e159 [ 115.921703][ T5310] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 115.921719][ T5310] RBP: 00007f1fd7fd503b R08: 0000000000000000 R09: 0000000000000000 [ 115.921792][ T5310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.921805][ T5310] R13: 00007f1fd81c6038 R14: 00007f1fd81c5fa0 R15: 00007ffdb634c208 [ 115.921828][ T5310] [ 115.921860][ T5310] socket: no more sockets [ 116.068259][ T5315] device-mapper: ioctl: Invalid target message parameters. [ 116.068440][ T5315] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 117.097129][ T5338] FAULT_INJECTION: forcing a failure. [ 117.097129][ T5338] name failslab, interval 1, probability 0, space 0, times 0 [ 117.097163][ T5338] CPU: 0 UID: 0 PID: 5338 Comm: syz.2.665 Not tainted syzkaller #0 PREEMPT(lazy) [ 117.097198][ T5338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 117.097213][ T5338] Call Trace: [ 117.097221][ T5338] [ 117.097230][ T5338] __dump_stack+0x1d/0x30 [ 117.097324][ T5338] dump_stack_lvl+0x95/0xd0 [ 117.097352][ T5338] dump_stack+0x15/0x1b [ 117.097377][ T5338] should_fail_ex+0x262/0x280 [ 117.097413][ T5338] should_failslab+0x8c/0xb0 [ 117.097492][ T5338] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 117.097529][ T5338] ? sock_alloc_inode+0x36/0xf0 [ 117.097625][ T5338] ? sock_alloc_inode+0x36/0xf0 [ 117.097656][ T5338] ? selinux_socket_create+0xfd/0x180 [ 117.097714][ T5338] ? __pfx_sock_alloc_inode+0x10/0x10 [ 117.097745][ T5338] sock_alloc_inode+0x36/0xf0 [ 117.097776][ T5338] alloc_inode+0x40/0x170 [ 117.097800][ T5338] __sock_create+0x121/0x580 [ 117.097832][ T5338] ? __se_sys_futex+0x2f6/0x370 [ 117.097879][ T5338] ? xfd_validate_state+0x45/0xf0 [ 117.097921][ T5338] __sys_socket+0xaf/0x180 [ 117.097990][ T5338] __x64_sys_socket+0x3f/0x50 [ 117.098024][ T5338] x64_sys_call+0x246e/0x2550 [ 117.098056][ T5338] do_syscall_64+0x112/0x360 [ 117.098097][ T5338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.098229][ T5338] RIP: 0033:0x7ffa2927e159 [ 117.098248][ T5338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.098271][ T5338] RSP: 002b:00007ffa27cd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 117.098297][ T5338] RAX: ffffffffffffffda RBX: 00007ffa29505fa0 RCX: 00007ffa2927e159 [ 117.098315][ T5338] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 117.098350][ T5338] RBP: 00007ffa2931503b R08: 0000000000000000 R09: 0000000000000000 [ 117.098390][ T5338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.098403][ T5338] R13: 00007ffa29506038 R14: 00007ffa29505fa0 R15: 00007ffdd19f1ac8 [ 117.098421][ T5338] [ 117.100376][ T5338] socket: no more sockets [ 117.156856][ T5344] device-mapper: ioctl: Invalid target message parameters. [ 117.158590][ T5344] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 117.449439][ T5374] FAULT_INJECTION: forcing a failure. [ 117.449439][ T5374] name failslab, interval 1, probability 0, space 0, times 0 [ 117.449473][ T5374] CPU: 0 UID: 0 PID: 5374 Comm: syz.0.682 Not tainted syzkaller #0 PREEMPT(lazy) [ 117.449582][ T5374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 117.449595][ T5374] Call Trace: [ 117.449602][ T5374] [ 117.449610][ T5374] __dump_stack+0x1d/0x30 [ 117.449717][ T5374] dump_stack_lvl+0x95/0xd0 [ 117.449741][ T5374] dump_stack+0x15/0x1b [ 117.449765][ T5374] should_fail_ex+0x262/0x280 [ 117.449796][ T5374] should_failslab+0x8c/0xb0 [ 117.449855][ T5374] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 117.449888][ T5374] ? sock_alloc_inode+0x36/0xf0 [ 117.449949][ T5374] ? sock_alloc_inode+0x36/0xf0 [ 117.449983][ T5374] ? selinux_socket_create+0xfd/0x180 [ 117.450017][ T5374] ? __pfx_sock_alloc_inode+0x10/0x10 [ 117.450051][ T5374] sock_alloc_inode+0x36/0xf0 [ 117.450119][ T5374] alloc_inode+0x40/0x170 [ 117.450169][ T5374] __sock_create+0x121/0x580 [ 117.450197][ T5374] ? __se_sys_futex+0x2f6/0x370 [ 117.450228][ T5374] ? xfd_validate_state+0x45/0xf0 [ 117.450307][ T5374] __sys_socket+0xaf/0x180 [ 117.450336][ T5374] __x64_sys_socket+0x3f/0x50 [ 117.450364][ T5374] x64_sys_call+0x246e/0x2550 [ 117.450392][ T5374] do_syscall_64+0x112/0x360 [ 117.450486][ T5374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.450508][ T5374] RIP: 0033:0x7f1fd7f3e159 [ 117.450550][ T5374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.450610][ T5374] RSP: 002b:00007f1fd6997028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 117.450630][ T5374] RAX: ffffffffffffffda RBX: 00007f1fd81c5fa0 RCX: 00007f1fd7f3e159 [ 117.450715][ T5374] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 117.450751][ T5374] RBP: 00007f1fd7fd503b R08: 0000000000000000 R09: 0000000000000000 [ 117.450768][ T5374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.450783][ T5374] R13: 00007f1fd81c6038 R14: 00007f1fd81c5fa0 R15: 00007ffdb634c208 [ 117.450804][ T5374] [ 117.450822][ T5374] socket: no more sockets [ 117.465523][ T5376] device-mapper: ioctl: Invalid target message parameters. [ 117.465677][ T5376] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 117.746142][ T5382] ================================================================== [ 117.746179][ T5382] BUG: KCSAN: data-race in shmem_fallocate / shmem_writeout [ 117.746211][ T5382] [ 117.746217][ T5382] read-write to 0xffffc90001783cc0 of 8 bytes by task 5385 on cpu 1: [ 117.746234][ T5382] shmem_writeout+0x2eb/0x8f0 [ 117.746259][ T5382] shrink_folio_list+0x1a81/0x26f0 [ 117.746292][ T5382] evict_folios+0x1c6e/0x2830 [ 117.746317][ T5382] try_to_shrink_lruvec+0x8fd/0xb30 [ 117.746344][ T5382] shrink_lruvec+0x252/0x1d40 [ 117.746376][ T5382] shrink_node+0x67c/0x2000 [ 117.746400][ T5382] do_try_to_free_pages+0x408/0xca0 [ 117.746431][ T5382] try_to_free_mem_cgroup_pages+0x201/0x420 [ 117.746464][ T5382] mem_cgroup_resize_max+0x13d/0x290 [ 117.746498][ T5382] mem_cgroup_write+0x132/0x1c0 [ 117.746520][ T5382] cgroup_file_write+0x197/0x350 [ 117.746549][ T5382] kernfs_fop_write_iter+0x1d2/0x2e0 [ 117.746574][ T5382] vfs_write+0x57f/0x9a0 [ 117.746606][ T5382] ksys_write+0xdc/0x1a0 [ 117.746635][ T5382] __x64_sys_write+0x40/0x50 [ 117.746661][ T5382] x64_sys_call+0x154e/0x2550 [ 117.746691][ T5382] do_syscall_64+0x112/0x360 [ 117.746726][ T5382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.746746][ T5382] [ 117.746753][ T5382] read to 0xffffc90001783cc0 of 8 bytes by task 5382 on cpu 0: [ 117.746773][ T5382] shmem_fallocate+0x5cb/0x8d0 [ 117.746794][ T5382] vfs_fallocate+0x3ac/0x400 [ 117.746829][ T5382] file_ioctl+0x4e1/0x5b0 [ 117.746861][ T5382] do_vfs_ioctl+0x7c4/0xe50 [ 117.746899][ T5382] __se_sys_ioctl+0x82/0x140 [ 117.746930][ T5382] __x64_sys_ioctl+0x43/0x50 [ 117.746957][ T5382] x64_sys_call+0x239d/0x2550 [ 117.746981][ T5382] do_syscall_64+0x112/0x360 [ 117.747009][ T5382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.747029][ T5382] [ 117.747032][ T5382] value changed: 0x00000000000006ca -> 0x00000000000006d2 [ 117.747044][ T5382] [ 117.747047][ T5382] Reported by Kernel Concurrency Sanitizer on: [ 117.747060][ T5382] CPU: 0 UID: 0 PID: 5382 Comm: syz.0.684 Not tainted syzkaller #0 PREEMPT(lazy) [ 117.747089][ T5382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 117.747102][ T5382] ==================================================================