last executing test programs: 3m29.708578883s ago: executing program 0 (id=80): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x10) write$9p(r0, &(0x7f0000000100)="d5", 0x1) write(r0, &(0x7f00000002c0)="8812", 0x2) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000003c0)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x40, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e22, 0xb, @mcast2, 0x7}}}, 0x118) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x9], 0x0, 0x0, 0x1, 0x1}}, 0x40) 3m29.431662409s ago: executing program 0 (id=85): r0 = add_key$keyring(&(0x7f0000000940), &(0x7f0000000980)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0x10}, {0xb, 0x7}}}, 0x24}}, 0x4008000) write(r1, &(0x7f0000000000)='3', 0x4e) add_key(&(0x7f0000000180)='syzkaller\x00', 0x0, &(0x7f00000009c0)="05bd62", 0x3, r0) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0) 3m29.295989863s ago: executing program 0 (id=86): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000400040000000400000002"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000140), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf092000000000003509010000000a009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000017010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf980000000000000d0800000000000085000000d3000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 3m28.94100569s ago: executing program 0 (id=88): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x16f0d8, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x9a100a, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020) 3m28.688904567s ago: executing program 0 (id=90): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000800400001"], 0x50) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24000000) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={0x0, &(0x7f0000000840)=""/142, &(0x7f0000000340), &(0x7f0000000440), 0x1, r0}, 0x38) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) 3m27.454986334s ago: executing program 0 (id=93): socket(0x2, 0x80805, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x16, 0x2, 0x1, 0x40000000}]}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x100, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0xc0, 0x100, @val=0x80}}}}}}}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 3m26.885632622s ago: executing program 32 (id=93): socket(0x2, 0x80805, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x16, 0x2, 0x1, 0x40000000}]}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x100, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0xc0, 0x100, @val=0x80}}}}}}}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 2m43.969626938s ago: executing program 4 (id=393): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) r1 = syz_io_uring_setup(0xf08, &(0x7f0000000300)={0x0, 0xfffffffe, 0x800, 0x3, 0x800000c3}, &(0x7f0000000580)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) io_uring_enter(r1, 0x1000000, 0xfffffffd, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) 2m43.877793607s ago: executing program 4 (id=395): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='scalable', 0x8) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 2m43.382551552s ago: executing program 4 (id=399): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) 2m43.114068105s ago: executing program 4 (id=401): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x6000, 0x0) 2m42.936687383s ago: executing program 4 (id=403): mmap$IORING_OFF_SQ_RING(0x0, 0x6, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./proc_mnt\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc_mnt/ioports\x00', 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, 0x0) 2m42.604900424s ago: executing program 4 (id=405): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4}, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000f, 0x204031, 0xffffffffffffffff, 0xec776000) mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, 0x0) 2m42.262229963s ago: executing program 33 (id=405): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4}, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000f, 0x204031, 0xffffffffffffffff, 0xec776000) mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, 0x0) 2m38.850715405s ago: executing program 1 (id=440): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) 2m38.393271391s ago: executing program 1 (id=442): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) 2m37.434111324s ago: executing program 1 (id=446): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) mmap(&(0x7f00001f8000/0x4000)=nil, 0x4000, 0x100000b, 0x12012, r1, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) writev(r2, &(0x7f0000001740)=[{&(0x7f00000000c0)="04920944475a", 0x6}], 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000040)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1f, 0x1}}, 0x40) 2m37.193610133s ago: executing program 1 (id=448): r0 = io_uring_setup(0x3c92, &(0x7f0000000100)={0x0, 0x3, 0x0, 0xffffffff, 0x2}) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f00000004c0)="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", 0xfd48, 0x90, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x2}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 2m36.913375722s ago: executing program 1 (id=451): capset(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) 2m36.500890023s ago: executing program 1 (id=454): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000080)=0x2, 0x4) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0xfffffffe, @remote}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=@setlink={0x28, 0x13, 0xbaa23f3d13f2d1f5, 0x0, 0x800000, {0x0, 0x0, 0x0, r3}, [@IFLA_MTU={0x8, 0x4, 0x7f}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x40) sendmmsg$inet6(r1, &(0x7f0000003740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x84) 2m21.080885653s ago: executing program 34 (id=454): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000080)=0x2, 0x4) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0xfffffffe, @remote}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=@setlink={0x28, 0x13, 0xbaa23f3d13f2d1f5, 0x0, 0x800000, {0x0, 0x0, 0x0, r3}, [@IFLA_MTU={0x8, 0x4, 0x7f}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x40) sendmmsg$inet6(r1, &(0x7f0000003740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x84) 2m14.455035692s ago: executing program 5 (id=598): ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x0, [{0x0, 0x4d88, 0x6, &(0x7f0000000640)="7a650e526bd0998268bb5847d9beacc47a22df873eab4b8b91133675482eaa56ace8db59bed9aa07d4e390c7c9f98c462b55612196911e3c4e510ede3efde35eec990f22a76cf752e507c1e2de2920a9fc0790cc176bd2b901e4127b09835ae6d0d196048bb19a64d26f20a05b95c69f371882ef2e20c5606ed1b2ebcf09a4a333f6e1c3c4fb64d8182df4ab09d0a381d966977fc041cea9bdf0aa31fe51efe9211b9b8e6e4551b6438f8efcc41265574ff6504435eb22a678a99768f0327ded8fdcb41f27c2024d2b923f7dc5df5bf62af447b121dd9f94d766d6cebdeb02f611ab10e57af4b3268fb3f9777373bd5fd6b82f730e67c4eab113d8e65d7405be3e5d92dc5e7e85d34bb8b7c894cbed629ecc25c288b3d4556a85a1e2150cac5b686a8de29ab7c35040b77875bfa0e451dc0869cfe105bd115e7cf48f44dfdf26be65f3b727fd88d6395d051e49c060998e84b19377fcb20fe2eb392335e5a9d84555ef037aab37169ce761aa8a8ec08ea87e3a3b896f3d1b2380bc8256e0f7ea7dc488382e6112b53a7bb269d6261f87e0e0e0cef9152f8a67f412148f34880c970101fbd7b0e8fc49d6a5c87e487b7b175b15be26b6b8e1ed8527614dcefcfd80f8392560c8b706418b7de8fbb7a666a7e7f322dc70373606bf39efa04616cb99d662dfc591061bde5ed27a66aa7edbfec1eb0b1e843c372b84c3ed514a0aadf523b8669e526765d429824aeaa0a6f4c185754d437d977a1f586431dc256ce5aa7c25be259de3a0ae6e5bcdf56b4c7e8199fe6b461e78467cfac19de6956056ef57e93d3a7df8f646f4a9002b100edb0a6caa72b3f6eb29dc54de58120d27daff9cd61c64107e1bcb3b3212e1e2aa24fb24dc2dafc636c82ad25da9d934e46c7783d8f915337612feb348857ce2262240dfe51ec94d9d61074959f167b9840b20f003883bf167149228d7f03eafde851427cd1966a96aeae05b51ae4cd82f4b4dad60a070c01a8b500e2683f7136e331602e76845262825d7f3764cf1a05ad95d88aab71d41484f63fa6a43c044c7f03130552321933bc40b888fd0cc55939ff79a5059516f3b80c7ba8188ffb6a259a34567ee52c1f9df0f6c91737d688e36d076a49d1045cac30d5ed52a10381c96d9f22e469cc531bb06853d18b8f8625d2a917e795ffa4407fa75713510a3f5370e1ecbf7a5ff68a90a1eda077531cf4d399d4908f138c936e1931c72240070c6a6255f5fd03966e9a06c1d481e8e3d128e880776e572177780a3481c49bd86c174e152bafed245d58ef3428c645b08e48833960d1b5223d7be0c67a2b2c7531390d1837a84ed004a00cb4b0cd6e78824da032b48c49ec006d14206dc3d0c67d7ca87e9ea0faddc3e0b0c917c64eefeebf79e3a16c958db63a08a5d4d7210273aba3e56a4cd4cccb044750ff97749505ff1332b2dd30990849ab1500e1947d0abfb0c59760f0a502806ee1bce56fbb42251dd6ac8b709c73a6b8c548c2b23cf351dc498810e477bd082464e76702703b56d3cd2f3d8a2e00f19d8ffa3c236d3601f169c9dfe9c316f8cbe63c3801a51ea5ac785694a0c653cd28d68c5a81c2590d2aeea8c8688b2e88f46c4f99890e51b42cce485fcb4d91557fb3912b36b0dbeac8df44e945eb9937141402fb2aa1476185e1f8c37f6c98bc937f36d9c7237135132a54a03067b002b9c657ab0daa253af66eee78b0309cb8532dd2dee800c8349b731da0efa66ead82eebe0102279df5aa281fe1d86c0dbf154910d5e8a113ecbddbd046367b9e2acfa7cc406f61b472bbec6919534615ed81b664da956ce6586bf4c92d63ef371dfec5f9ce748931d585cadc9372a95a1372c7213e2c52fca253945afeee02e9f2de2d9452c85fd2dbdc87cb6c25697dfcbed8a0eba381835e6c360f3861367ec98a9a9ccf956d6cbfb706fee0d391cf82a0d4662792274f52fc2b5d72a43ec74a86400e62d3652f607774cfad1504bc0476570d532b527bf0d7012804b2e6fdf9a9414f10b16c9374f2b065348d865b309e37750d3a7e12394e356c48c9fa0d4a9a43f689f6cbf70b09a3b9782cc3d5d93480f8a7a21a049780fc6bf21f1eca938a37afcbb2b929a0c502e164d2571e78d214b359d97e3edc0ad5c7fd1625b4ece33e1f569676e9a7262ead857873f77ef149d2f8c5a09ab19ae384a7f957f612a24283c35327aa969b20711309644c5b3e6c89da94e1f5da54246bd771468a1adc8a8d601e0b12769604f0f07ca43ce2a8a2f4b5654c0b76b146c49038e07db54dae702580b97096911f034fc1797029de8b7c213c902d1d754e77ff85e6222e745db9d5d2d45c5d29a8b6de0f27e5701fdf12b09fd6c70baa0f85a424c21ce0796dbe1fd366b94fcdf64ea232b3e88b89a38d728de77e84decc804f07a48f2716ca6f76b24923cea1a4da0d1f1dc73611269e784c4fd921f9b26c11f35b5cda45842a81b603ce2155d95c273fa0743a571b52e68c9ea3f28009fc37406b9e329ce50fedfb20dfb4cdf3a94769aee2586c2a17e68a07abfcd18aceddfd3876b14558e4d092eadb9120796c44e89610494085117bc41b5c4619a8c160b97811df49fc7d9bf222d7a002640644337ef5af53ed50661131f7c042665b276c0adf0c9a74f3542729beb7632a6027e65eddff7bb27915826701ec9b6a4c672f08877eefd859e0aa6e75a2e841e1ea98dff994e5a58be628df86bff17497a4d0f92ab39db421eb1062a2a393656bbb1d92becbb91a59619156b51585cd2eafd8a18d6326166312efeaa7258bddad63e0c7372ffb7ce1f1adf1ac2ffa0f278e4be6684d762f8971ed7bb04096b96f8126bf5fd32142e745d421f495327dde0f1e2d9a1d8ba63c1453101396a2e54e89cdabac2c6a01f23a5c1d5a2dfa2a3c634176e97c9c62b41ea28102b5a08af2fba1d311bb323df086ea97726c9d8c7b7b53a3399a80f040d434fdcc2148fb1da3b7d7f0f3e3fd56471a310ee275da611c79f86be8ed6343f6ed0ad91dfeffebc3ab6389d0566d6db904c1db499ae7d2698fdc7170320f85cc3d3d0d9d0d0c7d45db7b53c5eb79a2fed2a048d9d74419532122fac62f6315a9e13b461cb4e26514491debd366927987271be963ea5805a49b8b480c6a393fda1b11fd5634890cf02948cb5bfea237afb30d081c7403cd334a02e5bb8db542c4d5fa5ec5c8a0dd36b62156881c98e01948b4775a502c5d8453439fd930df52caac9d71c28b712000b306b913c10918ca0bc194f2533334462e5cd2b2e6c978a4838febfbc2d4375b8108bd0aa32aeaf05e7ba30c781cace6470ead574f5cbfa68aa8c8d835e9b3ab2bd7dd90b5e3e6cd62d8e04c3b45326e1f560a8dd8f3db4177e9e5ccd61f21dacb5c40c8030559cdfe88f7aa98bdcde90c1214cf293b3df093d0630bc3073cbaffa025b1f5537b49d799731745de7d36cded4a9db25915a511ba505b4ddd885cd226c24ea37fd926dbd90b887"}, {0x0, 0x0, 0x1ff, 0x0}, {0x6, 0x0, 0x4, 0x0}, {0x2, 0x0, 0xfffffff8, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x7, 0x0}, {0x0, 0x0, 0xa2d, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0x1000, 0x0}, {0x3, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x2, 0x0, 0xc, 0x0}, {0x1, 0x0, 0x40007, 0x0}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x4, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m14.071571072s ago: executing program 5 (id=601): r0 = socket(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0xe000202b}) epoll_pwait(r1, &(0x7f00000000c0)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) r3 = dup3(r0, r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000300)={0x200f}) 2m13.790802381s ago: executing program 5 (id=603): r0 = userfaultfd(0x801) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 2m13.412670016s ago: executing program 5 (id=607): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 2m13.057661556s ago: executing program 5 (id=611): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 2m12.94955399s ago: executing program 5 (id=612): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=[0x8000], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) 2m3.352354465s ago: executing program 3 (id=680): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3, 0x3}}, 0x2e) r3 = inotify_init1(0x800) r4 = fcntl$dupfd(r2, 0x406, r3) setsockopt$inet_mtu(r4, 0x111, 0xa, &(0x7f0000000000), 0x4) 2m3.143461729s ago: executing program 3 (id=682): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x1, 0x4000000000000ffd, 0x0, 0x0, 0x3, 0xc, "faf98317e5a1149989fc67be43ea6acc96e3a2503dc31c97214d58128bbad0099cebdc25f5ab60c9e69098c8b534464c516bdd8a0f350000000000000300", "32d8cc26f7061a74df2cfc06489f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x8]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x34, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m2.794024512s ago: executing program 3 (id=685): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RMKDIR(r0, &(0x7f0000000240)={0x14, 0x49, 0x2, {0x8, 0x3, 0x1}}, 0x14) write$char_usb(r0, &(0x7f0000000600)="b56511e72c6cba780ce701ed0b2db27a336692892a6491e2488652ff00c468d353d809d5b20d8ee0f9fefa6cd7bd1036ed25f0e37053d291887c707a892884c2b4aa2ebac156ef8288264449eea05c4f51c3bb4355eb108744fe34e5d0e851d51a855854135f04dd5d854459226f090b6f0d6135e8f2824eed7469236cad2251116a381d8cd30bae59c1fe71e028a667cb910d523aa5d7208286755075ee8be937304cca20e234303df72ad4e2bdc71219456229460a7c6a2df61e8b21b4a4941dcba5c257b90bbf0a976a73973319258ad7f738c04dfbdee4ea0e1b77a909a154fd934f791ebea03db6f06c8f14bc40924e46cbb9b343f25d63f332f9b3f176601f842a4e40401cbc62ee7803c3a2d71f3878f61d8fb8cb5ee90a696b22fb97bbdfd36af05c2e34dfb3d36cf7333ea9dc98af537780ae7bc701053b9009d654d84f04c851b311341efcec16ef3d5c8a7e8af494068dbad55bfa7b7bf4475ceb03a6f4ef11ce14652dc36f279671b7184586c7aab57d50ca23deaeeeaebc2ed024d91f399c84834e7802ad28b6ffec7ed089e8af35d15f2713e70ce55b3f60b9c002496e110c3a68e4c01faf901df4e39d007bf99f3a2d2e33c58b92b961937060a92ab6347995c09eb6a363092e3a45b68bd5e734d43b0bc98070d66c8d03490897a7d05e894da6d92c46cb1d961d11a7d1cd9d3c437c07e9f090690d2b344a93fdc5d7276b74231f1ad050024359e7a73ee913e9a7eba72f23482de94c572d07491328ca363762c44ddcdb1623ec6d639b368d407ffafbb265de19bd5e52ec86c12167dfe2a3de629af1d66612c3f313e07a301d8378fc6eb551196b51680d1194d682ff6cdbb0f811608d6321b41664108ef6dd1dfcc7df602901b0c0d549fb8d0c1aa9b542b99d76b6b8c360c9bcb01ed819a57441948465279d0b2652be1058065929bffae3e9c8923ba01c954f3c49298db8ffad96b73684daf2e608046be2ffb0de70237e044d4be3e6ccc1984ebd2f6e0f57e99fcb0ec30598f121bd93a4003e0ba0815e5ddbeba9f3f8600ef86258a5423fb1f30da5be531e573bf5322a5842eeb23107f02021dc332e0e687bd1f4f0ac09293c3638603279484dd552d534089e0b5b903c4ceeedef410662ec12e17e9b616950874e24d313d770e84b488544a8b829039d06637269367c108dc37712d46ef6601ef4e937a120c607e570446d6216366a72ced5d543ba92a929cef7c4fb03307e88174ad88381b16de1c3f9985f483ff75e9b40fc0e001d037dda41df9a583009baa3b246c19ab5a20cb4e62accb7a86090717c17db68b0d14905ed0ce6e49555de65448782fc0899f631393b5ccd65da59265d1b4ba9ff4d8a328cb42d2e3a465db23cfa9f159ce5716df7ccf393a561a1783679048570f2467c5336106bc8954569c047e854b2211141d169b27ca796b42c544f70123bd9f6ae23f87d1be164cd7bb2da3dc79e6f12a687296942c9c8f2d99b6961b48e046028bd69dcda162510ad235b7bf28a0ff994e23f08e807437dcd1a426a31e818b918e5c28725bf12f42d6f719d9d81100e529b9f7e4891167aef44ec7afa086e46cf832d144ebe668dbafcbf229be799f33df6c1fb3365f4cb64f360fb70ee140818503a185a44f15d3db5fd5abe8ea3c59f4120c23d3792a4ac791959858dc88286e403ad45b31716e28be7684375c2651f88ed78c2948d673ef2a8a937136ca9842717585894453a83280edc21f3fadb974c36696fe7d8bd136a005a69d14d034a869c4035282ac7c91642a05743", 0x4ff) write$UHID_INPUT(r0, &(0x7f00000014c0)={0x8, {"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", 0x1000}}, 0x1006) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0xfff], 0x0, 0x0, 0x1}}, 0x40) 2m2.625797888s ago: executing program 3 (id=687): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000, 0xfffffff5}}], 0xf00, 0x0, 0x0) shutdown(r1, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000350000000120a01010000000000000000020000000900010073797a3000000000070002006f303000080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303100080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303200080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303300080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303400080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303500080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303600080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303700080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303800080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303900080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313000080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313100080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313200080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313300080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313400080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313500080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313600080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313700080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313800080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313900080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323000080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323100080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323200080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323300080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323400080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323500080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323600080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323700080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f3238000800034000000007200004800600"], 0xcd0}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002000)=ANY=[@ANYBLOB="28000000130a01030000000000000000020000000900010073797a300000"], 0x28}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e05816d0c"], 0x7) 2m1.343989145s ago: executing program 3 (id=696): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000000)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) mount$cgroup(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@name={'name', 0x3d, '-'}}, {@name={'name', 0x3d, '-'}}]}) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r0, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 2m1.136284477s ago: executing program 3 (id=699): r0 = fanotify_init(0x40, 0x40000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') fchdir(r1) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/152, 0x98}], 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r0, 0x1, 0x48001019, r2, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) getdents64(r2, 0x0, 0x0) 1m57.714731649s ago: executing program 35 (id=612): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=[0x8000], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) 1m45.946597527s ago: executing program 36 (id=699): r0 = fanotify_init(0x40, 0x40000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') fchdir(r1) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/152, 0x98}], 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r0, 0x1, 0x48001019, r2, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) getdents64(r2, 0x0, 0x0) 1m24.661346266s ago: executing program 6 (id=901): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x6) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x14b302, 0x8c) pwritev2(r3, &(0x7f0000000480)=[{&(0x7f0000000340)="7f", 0x1}], 0x1, 0x5412, 0x5, 0x5) read$FUSE(r2, &(0x7f0000003ec0)={0x2020}, 0x2020) sendfile(r2, r2, &(0x7f00000000c0)=0x7, 0x6fecb1) 1m24.530250593s ago: executing program 2 (id=902): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, 0x0}], 0x1, 0x6d, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x3, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x0, 0xfffffffffffffe3f}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x10, 0x0, 0x8, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m24.092611351s ago: executing program 2 (id=903): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)="64b1de932e628eee8a0a89a94e5f750f399c7b1c35ac914dd6fc80d007beda93780f095b542decee786afeec8991e630bd7ebe6cdd3df5c82a54b9ba0f7e6f7cdd6729eb18e61f5296ad1df8ead0378b1cee4f7f6fef15d2b4b38d1e028e32d5584c080fcbe799a4eedfef7cbf95cb8435bf921ea828aaff4d73a74a44076e29eea4eab04413f2cc2081a0f05bec00b2ef34bd524f004ef0740ff6bc880b284742db", 0xa2}, {&(0x7f0000000700)="6731a9da84a7f1d212561a21cd729eb4a2e7f2c859d2682f4601b2befc6bfd956ab32128d13f450ac5ef76ffcf2a43f71d5011ad9e4fd63b3648cb51d902fcd1b342c28ea583d0c1bf65a670b2911e63cdc6d7ed06f73cfff3675832fce4151730f7ef2c8becc88720661c5013e176dca9141e3db9acc3293f6696364562", 0x7e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f00000008c0)="1a4327465638b8670e9ef99039dc0f60eb2cde85b2639882576537b3beb8b09ca7dd2c4972f132eb493ac7a3dd19bf1a9b8aacd86b333646a9e5342d840708bcd9aa55104cfedd028566dffeaf06fdb5f2d372c586b0b89c64700b3d9abdadd9f9fc", 0x62}, {&(0x7f0000000980)="70c12f0fa84f4fcbfdb9e33365085ad18b6b869d3b7d05d8f7610180cb11c7f13b66eeb4156bfbb3f635a7dfde1719e1f90fe56dbf21f901857a7eafcf9fde47342a2d78eeb82a302413a3bfdb1c939d405fa6a8234f082b80073226b42969805f104a28759b329d3b6afc406f0d36cbc7d0a61ccbfb631af5416206c4c57c76bd167a93d23cf3783c3febaf24be3685637891f8380306980cd8505739f0", 0x9e}, {&(0x7f0000000a40)="73778c0d766ea105fb79d14c301c6080916c289dc3cfad072f0c96f3fefe267e50eed86d9dfc2921cfe6832450c74b23b3053fb0b963449a26650154545ebfa628468dd509ed54f0aefa06c53ee50750a8f75171be2ccf7a0028f94b6aabf6840340d42157adb59b312e95fb21235f2218b20122fe6a70986f", 0x79}, {&(0x7f0000000b40)="abf5afe05d4f96614c55e2f4df6e139dbd36b34c6a2b15fd05000e53386f5afad3466fe4dc987d0d6f43b83de758521a3df4da6263843c6c3c449953489752d7d0dfc0a307b6413fb553528a04d888cb07cfb8b4698d47ab8d1627b4c6401e0ee5fdb4dcdbd98b78a17e8aa80d2e042f76dd6b22de5542bd5bdde2ce3e0878fe706cd0b6bcda", 0x86}, {&(0x7f0000000c00)="59a6ccfde72fa606722d721aada8234cd925b0c5b4b492432d79c736d25b702feb8b26ebb83614c28fd37b1df3d5", 0x2e}, {&(0x7f0000000c80)="9f9c29e5e85c1e9d55fbfaffee3d448faeb857fcc0f0036525836ae153f1", 0x1e}], 0x6, &(0x7f0000000e00)=ANY=[@ANYBLOB="d800"], 0xd8}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) write(r0, &(0x7f0000001e00)="39270725d93c4ab6cb559938ef75d3d7fd5c06a228a59b717b6934bdefb8b8e2dfca955f26b8cab29bdfdce27e4f9cb112fe41e0a6799578f252519cd4a289985be050d209b4c9617cfb94f1bed81696b0c741f6d366efd7ad3dc7cef66647abaf4108076fdffecb7457f5b6b01835a3c79b873f6ebbcb5ee659861a7b4cce43711bbd6b13c941fbb38ef7e1fe0c70fa4aa49b98b43615605d51cc4d742b364a4e7a2f3dee73b86af3fa4ca8f616eaaedcf155820e1767f7d66ecd818ece03f32c3367bbd9ce6656123f394b7f26f1e0420a9ac4cb25638c75fc3c487ba76fd64c26da6d7ce7f1ee8f49d6e9cc95f5c94bf93183ebf8e6be081e0b9f34bd6c2fe5f895dc1cc01e3018cef11ad9e2e1baf35254258efbaf3e8898f561bdb5c4c49f9d3146503df48e194ea3d06396e970ea9fc7c47eb9988477ed1a7e8641dfeea7b57b5a9967c58762574262efde8795f20f2d45e964ede39c7a6502c03f863e6a21a33ba324e6474d4f0495054745f3a80e6554d4d1fd5ddbca11c5e3e6f9087ca1981a14baa3a2956faa8f6b1652e8cf30d7c37a060bc6c836862451c4e76fc9cb221db8d4b449c27aa44564cb33ef144ed0c51bdd66675302692d979297f30e2d9523f85afbbf54c5b5e2261f8b792f83b33cca78c44a5c4e6ff96273979acbb447d49c0502cc9f8991e9bc784a2e978912d8102d867b631d54269936f54bb20ee57e2b4ba4b6c44e767aef24f6c3a8bb5a3b2084d793082e4c5e517694b220e35ac140913e0e55257af03c4dcf376f24773642c14279e2b55906b0b8a4a34fa4d73f37a5feeca1cf93395b998ddcc557d0e2ae112c", 0x257) 1m24.064473126s ago: executing program 8 (id=904): mkdir(&(0x7f0000000000)='./file0\x00', 0x130) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000000)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x28011, r0, 0x0) lseek(r0, 0x0, 0x4) 1m23.77138312s ago: executing program 2 (id=906): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x12, 0x8031, 0xffffffffffffffff, 0x6a855000) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="1000"], 0x513300) 1m23.469464852s ago: executing program 8 (id=908): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000dc0)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = dup(r2) r4 = dup(r3) syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000bff000/0x400000)=nil) 1m23.406222945s ago: executing program 6 (id=909): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8153, 0x2000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, r2, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xb, 0x11, r0, 0x180000000) 1m23.065294504s ago: executing program 9 (id=910): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) write$tun(r0, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x8, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x2f, 0x0, @rand_addr=0x64010101, @broadcast}, "3297e3ba0fa8a2e71bd9fe1a399b5110420b70460c0dad392d66248a43540df968e7fcaab34569c0e36170578c0d3c546a98b26295e2592f360905866eb4720fed03a977a3df4224895629fd6ccec64f13a999f18f518e3ee28798381975e862f1db9dccdb2f1c1fb60f5ffc7a339d40a8bd1f24cede8a32f186f142e194d4fb48224759faf813ea80e6a853e79b4fe27fe3e1aec5897b314a7f0d515b07b1835986b4885e9826d902c40f16cd77c58b6433ab039955ce9db11f36f459e7114ace6c9989eecea80a81fd39f339356c7c3391af83da2486503a7973f6db4806cf3e5ca94cf7e1f79fd00decd76100c18251a59d1474caabf4d3ca6a9a9885df710e68c5b0dc11832dbb5eecb5c88c2f8f02bdbd88569ad4a740359cbca8c378118220d73bdd1e661c3a74f77aa931b11cd38119b0f084bb96e84803fca6566c33ee1e4e34ab0253fbf24f9f5974af5e1fc2a43a4ec9dd9928a8f38a128ea27c429300ae5a6bd7740471f973d8224b2b07879f4fbe7dcbed776a72ebdc713bcf1d7aa45b01c32a1003e6670d58510bd79ba2fde5cb2b82cef2cc315648f4e9d96d848ba327949b8926253cbdef6888a8982108b6ac7a1108533dd3fe125002e2e286362d1055082a9d73ec5ac3080f2a501ff27250b62c8965f371cf92b32d6422d79f66261eb08a2f8fe50049e102c69ce703d116d0834208cc957d0f1376457a90245816d7642412897fdd2f982fdfbc3af65aa0446b00c767b79aec40e460887ea02188e3a0960eea39b144859467b881978378c9fd593259e0f63148179fe2c2f6d40987b63a6e384e63027f03d8039d707522942d5dc88fd842524d006290b6a65e9cc86cc5b401a60ec4aedfb3bf4d0447bb681810a16b9684b72c2f4593ef834a0203e78cd1d9dbc978e9ae8f3ab62c07f1e41d59470decee7b0cc41ac49e4b7589ab6da65849f62ec217bb39ed161e7d337822d96badbd74d66451ea9a74bed591dc9631bf639dcf7846ee428a9fa55bfceedf3b1c23642f3b58dd0a7273664c6c49c9160a4b9cc5b72d0210e305b94e2cb09ae1d4af9d365b5093851f229c8c30aef75d45ccdbab4b86d801a9ad3b27f26ba601d531c0743717aa7aae29d37f496fec7682c5a1abd321ad61941a2d23fcac6af1d1875e308c8d8c64a5152be47b59c09d293f46b857310a99f1885f0a49d432aa0d39a3e8fc885e75e66b63215133175a19267c8d0adf7d8f644e742ed5369d1405e99e63b78727f135e0243f24d9ce354a1562102ee8de4c191508343b86bf7e7519ddd770ce55e17e590561b2f437194c97ad46622a6ae3dd68d9993e6744954f4cd308bd6594fdccedc578e80aed274a65219697229059723ac37d535cca0e9c314e7941b4160bbd2ffba71f26ffe3228431bc81463078ad70583277ef18bce23ca2e5b9a00670956ea8e0e2c739c006106c8c9ee3f92ba728d8490742b74a9a18cbedfc4e69bb87e0da4c7dfb964374c28c837d4641fb99a19b233675f8526af395335e0185cf3934805442ac379980b687a7128e53284ba9e741b5fe9bc969bfbd55cbce76842915e076e2adf844338d16d3802c681bafdcc60465bd34dfc2d1c069ceee40060e0570fc1275ccabfe3f9be3e84ceedf72cd649c082232008e2b0c94594588c00e0fe911bbf1c12eb6c37ce05674a7597feecf27f5e051ffa824d9ff93638dfa9a84c77562aa2cf897f55a97b79c18544ad03480e1011b8f93e0ead9c2c6672448f585c5803ae99be777fbc662ef4450c1e936ed8b3c8047f00e72adc84561f417f8e5e1dde4967005d96a64fc75d9f486b3ebdb5904a0a56ec48542f0efce939f66fd69259e7376ad37e84434ea90f35b2d3bd63b5c36b267d8f2c7dc5a50b46e00ed086dff8b039e07b84c60611269d4f282ad04dc8e0b481eece2f8a614734be73617f0ad5be195446b09dca4cf1f32653dd3e188aece76f3014deb2ba61744835c0f735234b6a4637c948a7b4fd4203b286ca87d669e325d70277075b094f59eb1dff6c9c05c40d5e464c563df79486e1a32e6ed9bcf675aac7968b4e98dc4e210215b0d3b6a2525b2e3df11f3f1490eb39cabffbe32e23659121fde8e4e346e0f595aaf3666a5f6f118c1a1128039502ac04c40b85eb4c54e6c95b8d1c2aac74ae9e1c355ccde9d54d5d833293f5df09224482179e5bcd8e227c99172a6e14c2cd4e6462ceb0a905a1d64804840ce62e350c6efac10a7fcb029f84af64e2256d45afd3b3f59379895740e0cd2fd24c63264f785bb6e3f40ec72ed67d1a7d87dd264743d9c951cb5aa8bc6f1d1bc9b23303d5aa7f8f6f961326757456057000cb2bacf78cc229002777e932c2640b8dfa793846ca49fa93996db95104a8808a1906b19df17e754b90582b6c49efb3ddce067dd9292291cfd2bb0323ce8098f29e4fce0de31cf5c7e2e2da5d0d0996a8be776de8fecfd3ce68e80d21f1701f6b90ac51278abbd727d19415e0ebe001b990b177b8db0c592b18a4b5e4a6221902362e5b20e6e6f2131a5a5e03c1150b179ef40c933c2fef1b79de738652ec4c32565f5cf751a11db177099c4e2e5bd7616cd0dd501d5bfccf5691de3cca590365328648baf8a9487a3c212193c9bb837594460967e823067a9465eba7001eaf609a810488ef5c147aaa5e9e8c75b585ac3582b6915e20b5aa2f79b7a94857122988c56dbce1ea52de1a56652e839bb853be3ee16052b33fb83ca54d8e4e19440a5e81492107043a66286f63ca87a1f7b8a4e9547a7eb6005419cfd28cb37e9e374f4d0143973286e87070754025c1a6fccfdc6858eaca8c35ecb19584ce7141cc79a5bc813469161b87a19fc21f3373d1f25b3427916dd1be2a589b70ea3b39fcc7801e13beaf19b76164faf3dc4ab8faa5648d24eddd6caceaa0d5ac9cad633c19a4a4d059ee823a49b7cf82c5777d376c111f58ea8fd473429907852301a2c856f27bd0c687ab5be0e2bbef64ddee1601375a4440e3f59d60f57caebfe457f82432523ec4a61cdbb7f1e91e4b05fda892df131c274b19929d26f7a5a6d3ca487983f729601ed9bb4bf5c1cc3d453d406e9534688dec6a2dd0b9db149365c125a95e129565e62cc91f7d960abe1055b730ae0994e7eb08392d5745d0e4f529c4defc3d3e43d0815b0cc63effa88d20c13b14e780c2f6c89a1ee5e4db45a5c272186cc3e51b13dab3add5f467e8ca0f4c45a1fc76db2f0cbf794102946aafcd8cd8a3e935a606b9721645c4d550ae0907f345593736506efc626498c974753d474a73626041d3a54f8fb50de2a6335611a3779da3a02daceb2256d9b102d4d30dd3cd389a04b1a7a6076879f36534bb3379debb46ed1fa2c40096c752017dd024345c58313b43070ff7bef94dc3cafbe6ec20d59e5ea3c196ba3b783bfa87384407efc664cd350c80ac397516018e35371956e414755cde304d2a228c1540ba6fd6a7402d11c666964f024da4c016eb556ba2c5fab86c60c12efb1496295d80f0383526e8e0fc55a287bbd3cb966a916f57958d8b6ef97aa0c4b47f7746bab6b99698c1c96b25c4e2e084147866fe0970b109dd26984adc0758eb6442712cc46dcd8ed3038b0595252eed1b8a46525862662d1e67eba66ac341f8d27853eed54854f488f079bd48df6ce7a4be8b1b61fd23a2dc4d3ade0992011539cc63f80fcfc75008c20cb639348cb218f8f476a6d56917f4ca07e67fc20ea2e9642eaf2182b397e279f5f6c70438fb8aa39cba788588c181461ea7efe1a0dd5b95eb26f7158b91012f7ce0ee1b4e79ce4da377bea4551738a0f491a84f19b3be9827b4469c299527aa9c20b8bf12f919976a0356bba720fb91010763c79bcbb10d89280f0f97cdd19aa0d54828b308195fac170613cf4b515e340a9ef2c97f618a9f50b30ae34ebeed9a38b4c6969680accc740b154ecb014fb5d543a59ccb98a7de2823a2dec39f331cb503eb74fef61262c6d4050bc723caee834eb28c64ce007f6027375e936b62387cf1778970e88b0574a0106d4c855be7425767c551b2fa644d9d8a59f787e7610581b768057d229673344571c3d6e3f10975b2859f568398b1f38f89524d9ad0c1588617c3883a1227b714c81cdf28da54f33968c1c50f28da01c308eb31d319b3e77f96bec001c9300000000000000009cc0062283ac112868592619db14d629c47bfb793a723dcd2f7b07ae4ec14ca3ef4b955ea5b2b153a279b080f6236d418075b86850974c8850efb306d5c304e726bf2643b4403e6d46b0e0395b02e93308b4b2c3e957308d497dc51c753344a7878f1f0c91295fd76e3d1cc9ef813161c6b92b7ea6068ceb97d8f45a4ce57af7d7632d699951f7fe3c71c3a32b014c74425c67e5030546b10cf7edcec2eca5ba31dc62c08f83f35bc2e36b93f15f071bc2537ebe9ca19f86dce4e84272e10323d0ceaa2cc47fe4f6ad101d454c761f9863e94af91199ce5f12469bca7ba39314b84aa7efa4bdc18f7700c19511d48d6132450111d70401a8ac73565d5386ca12345e884d08b23f9c901000a95eb4167865e58c28b112f47c96beeaa6657c923e25e56529107c5c30e65bb485d5ed21b91332db4e09df7e59dcfa05c994570deb3f9b838e22ae4abbf9a9a8c319cc9112c8dba7c2278f78b9578b0254c46a4c04b8fa4fedad6bd275f70b1618971ef6503379bfb0a508c9944328af2c820091a89e3f75e68e7f980ddc9154d273f7f2ce7a6294aefe93136860786679b80e41f6636ff45efeacfb52e2ba2bd9bd9c9030079a46caca5c4b340c17d01ba8ecbc5c561b2038481a8321c009d12136a3ad5461881d998eeaac5236fdcd8f81fb5e53848bb096d9198fd0d38830d1809f2a632b31e2b67754140c907ed58aead048b2d8af9a1c407e48db815212cfdcca97222dabdfe01f311a73e1e82c3e189ec5add48d3f8190eb9e14b58e540f7f1388a7c687629eadb19fd8a133dc8177629270ecaabff79efb6c1f750d89b9e6c5f34c6238066f8e3e425e46a27b3c0d2e9e2ed3cffe2a6f39b8e0137ea5de689b94107fb4748a5feb3902f0feba64dae4c2e69bc8d86463575c6b0ef4a8a64fef41121e57a8c67eda07e9fc8f98299677de198ea0a649ef3c00591940b2c27ba1414aaa1633deb52e3a44cfa8d7a00d014317c026a7d7f42a34b97128e1bf9cda4d8315819ac73ed5061bf9b5631d07b09b85b78ff1b6eb86e9e8c4faa0f991cd6fa0b0eb71b39c20ca9bc7c156f3bd255a5b408df172396bafd7f0fb11c6eaf1eb0a06576d37bee00424bf699584b1dfed68f0d8d8a35f0427c783fe2d79b4373628971e87501a5e4bb05b5058d0b2132741f26e76065b6f4017d963c8ee5605c4c5b6eebb96fca0a41893cb6add3fb0d728abeb860f22cedbd36e464bdaf124a7041460f7af3d64b54e9ffd240b5afad9baf6e5dd8406bc1b205da5848f51fc9dd5197716e144e1b0386614bd3cfd5ddb80ada1e5ca74c8960093a553b1f6288aa7f53663cdd867f658e51b95772dc7a6fa45fa03e14988a33250e6c16fbf0351769080d64ddfbdbf77e1215563bf2e82ecc38a682846d7e2e2ac4e87d715f97f15e84c3df04affee49612a735907d3c4d310a54a6f609873ad56f29a138f4d5661f6865e030487"}}, 0xfce) 1m23.017947965s ago: executing program 6 (id=911): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) 1m22.423202307s ago: executing program 8 (id=912): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0xffffe000) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000080000000000000200000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000030900010073797a300000000048000000060a0104000000000000000001000000200004801c0001800b00010072656a65637400000c000280080001400000000108000b40000000000900010073797a30000000001400000011000100"/205], 0xd0}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 1m22.396549385s ago: executing program 6 (id=913): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x10, &(0x7f0000000080)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0xb}], 0x1, 0x40000021, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) 1m22.192001993s ago: executing program 9 (id=914): r0 = socket$packet(0x11, 0x3, 0x300) socket$kcm(0x2, 0x3, 0x2) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) fchmod(0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f0000000100)="1471c11be4955031894146e657b7", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) pselect6(0x40, &(0x7f0000000100)={0x7, 0x2, 0x10, 0xffffffffffffffff, 0x1, 0x2, 0x0, 0x7}, 0x0, &(0x7f0000001100)={0x1f, 0x3, 0x0, 0x2, 0xfffffffffffffffc, 0xffffffbffffffffc, 0x0, 0x1c}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 1m22.035023854s ago: executing program 2 (id=915): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 1m21.868546607s ago: executing program 7 (id=916): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000380)={0xc, 0x8, 0x144, {&(0x7f0000001140)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x1, @loopback, 0x100009}, {0xa, 0x4e22, 0xfffffffc, @mcast1}, r2}}, 0x48) 1m21.709976283s ago: executing program 7 (id=917): r0 = socket(0xa, 0x2, 0x0) r1 = inotify_init() r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @local, r4}, 0xc) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f00000000c0)={@multicast2=0xe0004000, @private=0xa010100, r4}, 0xc) close_range(r1, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @local, r4}, 0xc) 1m21.556871331s ago: executing program 8 (id=918): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x5, 0x1, 0x6}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x7, @loopback, 0x8}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000000)={@in={{0x2, 0x4e24, @rand_addr=0x64010100}}, 0x0, 0x0, 0x3a, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r0, 0xe4776000) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c) pselect6(0x40, &(0x7f0000000100)={0x0, 0x20, 0x0, 0x0, 0x800, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0) 1m21.545748398s ago: executing program 7 (id=919): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m21.196834091s ago: executing program 6 (id=920): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x6, 0x0) write$cgroup_devices(r2, 0x0, 0x6) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r3, &(0x7f0000001240)=""/102400, 0x19000, 0xfffff7ff8) 1m21.150902328s ago: executing program 9 (id=921): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) socket(0x840000000002, 0x3, 0xff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, 0x0, 0x0) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x4, 0x94, 0xfffffffd, 0x5}, 0x9c) 1m20.906718313s ago: executing program 7 (id=922): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x40) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 1m20.73602835s ago: executing program 9 (id=923): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x30000, 0x8, 0xd, 0x3, 0xe5, 0x40, 0x2d, 0x0, 0x30, 0x19}, {0x41000, 0x4, 0xe, 0x0, 0x40, 0x5, 0x7e, 0x9, 0x58, 0x3, 0x23, 0x1}, {0xdddd1000, 0xe000, 0xe, 0x5, 0x3, 0x7, 0xfe, 0x89, 0x1, 0xab, 0x5, 0x81}, {0x30000, 0x8000000, 0x3, 0x5d, 0x4, 0x43, 0x9, 0xfa, 0x80, 0x7, 0xe}, {0x0, 0x9000, 0x10, 0x1, 0x3, 0x7, 0xab, 0x7f, 0x47, 0x83, 0xf7, 0x82}, {0x1000, 0x80a0000, 0x8, 0xa0, 0xb1, 0x8, 0x1, 0xd, 0x88, 0x13, 0x1, 0xfd}, {0x54000, 0x2, 0x4, 0x5, 0x7, 0xff, 0xb, 0x0, 0x5, 0x81, 0xff, 0x70}, {0xd000, 0xb000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x18, 0x2, 0x3, 0x7, 0x9}, {0xb000, 0x2d}, {0x10000, 0x7fff}, 0x80000031, 0x0, 0x6000, 0x42024, 0x9, 0x0, 0x3000, [0x6840000000000002, 0x3, 0x91, 0xff]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m20.62511315s ago: executing program 8 (id=924): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x18, 0x2d, 0x107, 0x0, 0x25dfdbff, {0x8, 0x7c}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0xc810) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80002, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x3, 'lblc\x00', 0x4, 0x42, 0x6c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000700000001000100090000"], 0x48) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @remote, 0x4e21, 0x3, 'sed\x00', 0x10, 0x81, 0x40000077}, {@rand_addr=0x64010100, 0x4e21, 0x0, 0x6, 0x1002, 0x8}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x15, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1m20.410344815s ago: executing program 7 (id=925): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000180)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0xfffffffd, @empty, 0x5}, r1}}, 0x30) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0xfffffffd, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r3, 0x7}}, 0x48) close(r2) 1m20.393804726s ago: executing program 8 (id=926): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x100, 0x1, 0x8}, 'syz1\x00', 0x19}) ioctl$UI_DEV_CREATE(r0, 0x5501) 1m20.344949645s ago: executing program 9 (id=927): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) 1m20.274444823s ago: executing program 2 (id=928): mmap$IORING_OFF_SQ_RING(0x0, 0xc, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) futex(0x0, 0x85, 0x9, 0x0, 0x0, 0xc5fffffe) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x40086607, 0x0) 1m20.2560764s ago: executing program 6 (id=929): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000340)={0x20, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x5, 0x404, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x9, 0xa}]}) 1m20.124891606s ago: executing program 9 (id=930): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x33, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) r1 = open(&(0x7f00000002c0)='./file1\x00', 0x4c27e, 0x1bb) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x13, r1, 0x0) 1m20.113046644s ago: executing program 7 (id=940): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x20) write(r0, &(0x7f0000000000)='3', 0x4e) syz_open_dev$vim2m(0x0, 0x401, 0x2) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000100)={0x48}) 0s ago: executing program 2 (id=931): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}}, 0x20008000) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="0439000025"], 0x33fe0) kernel console output (not intermixed with test programs): tepending:1892kB zspages:0kB present:3129332kB managed:2530472kB mlocked:0kB bounce:0kB free_pcp:74800kB local_pcp:23420kB free_cma:0kB [ 152.508782][ T7616] lowmem_reserve[]: 0 0 0 0 0 [ 152.508813][ T7616] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:68kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 152.508865][ T7616] lowmem_reserve[]: 0 0 0 0 0 [ 152.508896][ T7616] Node 1 Normal free:3930832kB boost:0kB min:55908kB low:69884kB high:83860kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 152.508959][ T7616] lowmem_reserve[]: 0 0 0 0 0 [ 152.508991][ T7616] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 152.509109][ T7616] Node 0 DMA32: 1209*4kB (UME) 636*8kB (UME) 413*16kB (UME) 258*32kB (UM) 115*64kB (UME) 24*128kB (M) 7*256kB (M) 3*512kB (M) 2*1024kB (UM) 5*2048kB (ME) 248*4096kB (M) = 1066644kB [ 152.509259][ T7616] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 152.519061][ T7616] Node 1 Normal: 4*4kB (UM) 6*8kB (UM) 9*16kB (UM) 6*32kB (UM) 5*64kB (UM) 6*128kB (UM) 3*256kB (UM) 3*512kB (UM) 1*1024kB (M) 1*2048kB (U) 958*4096kB (M) = 3930832kB [ 152.521523][ T7616] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 152.521539][ T7616] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 152.521554][ T7616] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 152.521569][ T7616] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 152.521584][ T7616] 73598 total pagecache pages [ 152.521591][ T7616] 0 pages in swap cache [ 152.521597][ T7616] Free swap = 124996kB [ 152.521604][ T7616] Total swap = 124996kB [ 152.521611][ T7616] 2097051 pages RAM [ 152.521618][ T7616] 0 pages HighMem/MovableOnly [ 152.524819][ T7616] 432800 pages reserved [ 152.524829][ T7616] 0 pages cma reserved [ 153.179541][ T30] audit: type=1400 audit(1790022382.037:524): avc: denied { getopt } for pid=7623 comm="syz.6.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 153.195226][ T30] audit: type=1400 audit(1790022382.077:525): avc: denied { ioctl } for pid=7624 comm="syz.3.560" path="socket:[20935]" dev="sockfs" ino=20935 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 153.200653][ T7631] syzkaller1: entered promiscuous mode [ 153.200671][ T7631] syzkaller1: entered allmulticast mode [ 153.223472][ T5715] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 153.379892][ T5715] usb 6-1: Using ep0 maxpacket: 16 [ 153.382551][ T5715] usb 6-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 153.385056][ T5715] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.385084][ T5715] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.385116][ T5715] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.414437][ T5715] usb 6-1: config 0 descriptor?? [ 153.720050][ T30] audit: type=1400 audit(1790022382.607:526): avc: denied { setopt } for pid=7637 comm="syz.2.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 153.728126][ T30] audit: type=1400 audit(1790022382.607:527): avc: denied { map } for pid=7637 comm="syz.2.563" path="socket:[20956]" dev="sockfs" ino=20956 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 153.870037][ T5715] apple 0003:05AC:024B.0008: unknown global tag 0xe [ 153.870061][ T5715] apple 0003:05AC:024B.0008: item 0 1 1 14 parsing failed [ 153.870623][ T5715] apple 0003:05AC:024B.0008: parse failed [ 153.870707][ T5715] apple 0003:05AC:024B.0008: probe with driver apple failed with error -22 [ 154.087037][ T2273] usb 6-1: USB disconnect, device number 10 [ 154.098814][ T7657] device-mapper: table: 248:0: too large device [ 154.098830][ T7657] device-mapper: ioctl: error adding target to table [ 154.172158][ T5616] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 154.180618][ T5616] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 154.188996][ T5616] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 154.205665][ T5616] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 154.208533][ T5616] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 154.514873][ T7122] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.842194][ T7122] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.856944][ T7678] FAULT_INJECTION: forcing a failure. [ 154.856944][ T7678] name failslab, interval 1, probability 0, space 0, times 0 [ 154.856977][ T7678] CPU: 0 UID: 0 PID: 7678 Comm: syz.5.572 Tainted: G L syzkaller #0 PREEMPT(full) [ 154.857006][ T7678] Tainted: [L]=SOFTLOCKUP [ 154.857013][ T7678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 154.857026][ T7678] Call Trace: [ 154.857033][ T7678] [ 154.857043][ T7678] dump_stack_lvl+0x100/0x190 [ 154.857078][ T7678] should_fail_ex.cold+0x5/0xa [ 154.857107][ T7678] should_failslab+0xc2/0x120 [ 154.857133][ T7678] __kmalloc_cache_noprof+0x91/0x6d0 [ 154.857161][ T7678] ? gadget_bind_driver+0x100/0xbf0 [ 154.857185][ T7678] ? dummy_alloc_request+0xa9/0x1b0 [ 154.857209][ T7678] dummy_alloc_request+0xa9/0x1b0 [ 154.857231][ T7678] usb_ep_alloc_request+0x6e/0x2e0 [ 154.857262][ T7678] gadget_bind+0xe7/0x660 [ 154.857283][ T7678] ? kernfs_create_link+0x1bd/0x240 [ 154.857313][ T7678] gadget_bind_driver+0x28c/0xbf0 [ 154.857335][ T7678] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 154.857366][ T7678] ? __pfx_gadget_bind_driver+0x10/0x10 [ 154.857392][ T7678] really_probe+0x241/0xa60 [ 154.857420][ T7678] __driver_probe_device+0x210/0x460 [ 154.857443][ T7678] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 154.857473][ T7678] driver_probe_device+0x4a/0x140 [ 154.857498][ T7678] __driver_attach+0x21f/0x5b0 [ 154.857521][ T7678] ? __pfx___driver_attach+0x10/0x10 [ 154.857544][ T7678] bus_for_each_dev+0x13e/0x1d0 [ 154.857564][ T7678] ? __pfx_bus_for_each_dev+0x10/0x10 [ 154.857581][ T7678] ? bus_add_driver+0x2b5/0x5b0 [ 154.857609][ T7678] bus_add_driver+0x305/0x5b0 [ 154.857634][ T7678] driver_register+0x1e2/0x360 [ 154.857658][ T7678] ? rcu_is_watching+0x13/0xc0 [ 154.857686][ T7678] usb_gadget_register_driver_owner+0x132/0x210 [ 154.857711][ T7678] raw_ioctl+0x1a85/0x2b80 [ 154.857738][ T7678] ? __pfx_raw_ioctl+0x10/0x10 [ 154.857762][ T7678] ? selinux_file_ioctl+0x13b/0x290 [ 154.857787][ T7678] ? selinux_file_ioctl+0xb6/0x290 [ 154.857813][ T7678] ? __pfx_raw_ioctl+0x10/0x10 [ 154.857836][ T7678] __x64_sys_ioctl+0x18e/0x210 [ 154.857861][ T7678] do_syscall_64+0x123/0x790 [ 154.857893][ T7678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.857914][ T7678] RIP: 0033:0x7fe6a499ddeb [ 154.857930][ T7678] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 154.857948][ T7678] RSP: 002b:00007fe6a579ef00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 154.857967][ T7678] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fe6a499ddeb [ 154.857981][ T7678] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 154.857993][ T7678] RBP: 00007fe6a579ffd0 R08: 0000000000000001 R09: 00000000ffffffff [ 154.858007][ T7678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.858020][ T7678] R13: 0000200000000500 R14: 0000000000000002 R15: 0000000000000000 [ 154.858049][ T7678] [ 154.858146][ T7678] raw-gadget.0 gadget.5: usb_ep_alloc_request failed [ 154.858163][ T7678] udc dummy_udc.5: failed to start USB Raw Gadget: -12 [ 154.858182][ T7678] raw-gadget.0 gadget.5: probe with driver raw-gadget.0 failed with error -12 [ 154.862534][ T7678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.864838][ T7678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.870588][ T7676] FAULT_INJECTION: forcing a failure. [ 154.870588][ T7676] name failslab, interval 1, probability 0, space 0, times 0 [ 154.870615][ T7676] CPU: 0 UID: 0 PID: 7676 Comm: syz.6.571 Tainted: G L syzkaller #0 PREEMPT(full) [ 154.870644][ T7676] Tainted: [L]=SOFTLOCKUP [ 154.870652][ T7676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 154.870665][ T7676] Call Trace: [ 154.870672][ T7676] [ 154.870679][ T7676] dump_stack_lvl+0x100/0x190 [ 154.870712][ T7676] should_fail_ex.cold+0x5/0xa [ 154.870741][ T7676] should_failslab+0xc2/0x120 [ 154.870775][ T7676] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 154.870799][ T7676] ? __alloc_skb+0x5b7/0x710 [ 154.870823][ T7676] ? __alloc_skb+0x140/0x710 [ 154.870854][ T7676] __alloc_skb+0x140/0x710 [ 154.870875][ T7676] ? __alloc_skb+0x5b7/0x710 [ 154.870899][ T7676] ? __pfx___alloc_skb+0x10/0x10 [ 154.870925][ T7676] ? __pfx_nf_tables_abort+0x10/0x10 [ 154.870952][ T7676] netlink_ack+0x117/0xb80 [ 154.870977][ T7676] ? __nla_parse+0x40/0x60 [ 154.871011][ T7676] nfnetlink_rcv_batch+0x1d52/0x2880 [ 154.871054][ T7676] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 154.871087][ T7676] ? lock_acquire+0x1d1/0x380 [ 154.871108][ T7676] ? avc_has_perm_noaudit+0x56/0x470 [ 154.871145][ T7676] ? avc_has_perm_noaudit+0x145/0x470 [ 154.871199][ T7676] ? __nla_parse+0x40/0x60 [ 154.871232][ T7676] nfnetlink_rcv+0x3bd/0x440 [ 154.871258][ T7676] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 154.871294][ T7676] netlink_unicast+0x585/0x850 [ 154.871320][ T7676] ? __pfx_netlink_unicast+0x10/0x10 [ 154.871350][ T7676] netlink_sendmsg+0x8b0/0xda0 [ 154.871378][ T7676] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.871403][ T7676] ? selinux_socket_sendmsg+0x198/0x2f0 [ 154.871430][ T7676] ____sys_sendmsg+0xa4d/0xbe0 [ 154.871457][ T7676] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.871482][ T7676] ? __pfx_____sys_sendmsg+0x10/0x10 [ 154.871524][ T7676] ___sys_sendmsg+0x190/0x1e0 [ 154.871545][ T7676] ? __pfx____sys_sendmsg+0x10/0x10 [ 154.871565][ T7676] ? futex_wait+0x11e/0x370 [ 154.871594][ T7676] ? find_held_lock+0x2b/0x80 [ 154.871639][ T7676] __sys_sendmsg+0x160/0x210 [ 154.871664][ T7676] ? __pfx___sys_sendmsg+0x10/0x10 [ 154.871703][ T7676] do_syscall_64+0x123/0x790 [ 154.871735][ T7676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.871755][ T7676] RIP: 0033:0x7f7f3219e159 [ 154.871778][ T7676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.871799][ T7676] RSP: 002b:00007f7f33107028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.871819][ T7676] RAX: ffffffffffffffda RBX: 00007f7f32425fa0 RCX: 00007f7f3219e159 [ 154.871834][ T7676] RDX: 0000000000000080 RSI: 0000200000000c40 RDI: 0000000000000004 [ 154.871847][ T7676] RBP: 00007f7f3223506b R08: 0000000000000000 R09: 0000000000000000 [ 154.871860][ T7676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.871872][ T7676] R13: 00007f7f32426038 R14: 00007f7f32425fa0 R15: 00007ffff129c898 [ 154.871901][ T7676] [ 155.345070][ T7122] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.555698][ T7691] lo speed is unknown, defaulting to 1000 [ 155.555753][ T7691] lo speed is unknown, defaulting to 1000 [ 155.556432][ T7691] lo speed is unknown, defaulting to 1000 [ 155.557833][ T7691] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 155.557870][ T7691] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 155.557915][ T7691] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 155.597682][ T7691] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 155.728392][ T7697] xt_hashlimit: size too large, truncated to 1048576 [ 155.777054][ T7122] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.215419][ T7691] lo speed is unknown, defaulting to 1000 [ 156.254780][ T4922] Bluetooth: hci3: command tx timeout [ 156.384745][ T7691] lo speed is unknown, defaulting to 1000 [ 156.657203][ T7691] lo speed is unknown, defaulting to 1000 [ 156.849628][ T7691] lo speed is unknown, defaulting to 1000 [ 156.874467][ T7691] lo speed is unknown, defaulting to 1000 [ 156.916851][ T7660] lo speed is unknown, defaulting to 1000 [ 157.165804][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 157.165823][ T30] audit: type=1400 audit(1790022386.047:538): avc: denied { read } for pid=7711 comm="syz.6.580" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 157.170212][ T30] audit: type=1400 audit(1790022386.047:539): avc: denied { open } for pid=7711 comm="syz.6.580" path="/39/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 157.336322][ T7714] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 157.336433][ T7714] block device autoloading is deprecated and will be removed. [ 157.364996][ T30] audit: type=1400 audit(1790022386.247:540): avc: denied { write } for pid=7673 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 157.670441][ T30] audit: type=1400 audit(1790022386.557:541): avc: denied { write } for pid=7724 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 157.828096][ T30] audit: type=1400 audit(1790022386.707:542): avc: denied { read write } for pid=7738 comm="syz.5.585" name="rtc0" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 157.832461][ T30] audit: type=1400 audit(1790022386.707:543): avc: denied { open } for pid=7738 comm="syz.5.585" path="/dev/rtc0" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 157.842200][ T7122] bridge_slave_1: left allmulticast mode [ 157.842221][ T7122] bridge_slave_1: left promiscuous mode [ 157.844377][ T7122] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.909877][ T30] audit: type=1400 audit(1790022386.797:544): avc: denied { read } for pid=7738 comm="syz.5.585" name="usbmon7" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 157.910221][ T30] audit: type=1400 audit(1790022386.797:545): avc: denied { open } for pid=7738 comm="syz.5.585" path="/dev/usbmon7" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 157.937432][ T7122] bridge_slave_0: left allmulticast mode [ 157.940832][ T7122] bridge_slave_0: left promiscuous mode [ 157.941005][ T7122] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.007848][ T7744] process 'syz.3.587' launched './file0' with NULL argv: empty string added [ 158.329471][ T4922] Bluetooth: hci3: command tx timeout [ 158.364565][ T30] audit: type=1400 audit(1790022387.237:546): avc: denied { mounton } for pid=7753 comm="syz.5.589" path="/proc/285/task" dev="proc" ino=21306 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 158.491070][ T30] audit: type=1400 audit(1790022387.377:547): avc: denied { associate } for pid=7755 comm="syz.5.589" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 159.716671][ T7122] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.732656][ T7122] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.736826][ T7122] bond0 (unregistering): Released all slaves [ 159.762216][ T7772] ip_tables: iptables: counters copy to user failed while replacing table [ 160.260897][ T7660] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.261078][ T7660] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.261224][ T7660] bridge_slave_0: entered allmulticast mode [ 160.267787][ T7660] bridge_slave_0: entered promiscuous mode [ 160.272869][ T7660] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.272950][ T7660] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.273048][ T7660] bridge_slave_1: entered allmulticast mode [ 160.280536][ T7660] bridge_slave_1: entered promiscuous mode [ 160.396160][ T7660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.412572][ T4922] Bluetooth: hci3: command tx timeout [ 160.419213][ T7660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.562724][ T7660] team0: Port device team_slave_0 added [ 160.568937][ T7660] team0: Port device team_slave_1 added [ 160.700683][ T7797] netlink: 256 bytes leftover after parsing attributes in process `syz.6.602'. [ 160.701449][ T7797] unsupported nlmsg_type 40 [ 160.745710][ T7660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.745723][ T7660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 160.745745][ T7660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.781762][ T7660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.781777][ T7660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 160.781799][ T7660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.004145][ T7122] hsr_slave_0: left promiscuous mode [ 161.015256][ T7122] hsr_slave_1: left promiscuous mode [ 161.017866][ T7122] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.018978][ T7122] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.045960][ T7122] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.047364][ T7122] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.085175][ T7122] veth1_macvtap: left promiscuous mode [ 161.085206][ T7122] veth0_macvtap: left promiscuous mode [ 161.085302][ T7122] veth1_vlan: left promiscuous mode [ 161.085361][ T7122] veth0_vlan: left promiscuous mode [ 161.607778][ T7122] team0 (unregistering): Port device team_slave_1 removed [ 161.617150][ T7122] team0 (unregistering): Port device team_slave_0 removed [ 161.756892][ T5268] 8021q: adding VLAN 0 to HW filter on device eth9 [ 161.780607][ T7826] FAULT_INJECTION: forcing a failure. [ 161.780607][ T7826] name failslab, interval 1, probability 0, space 0, times 0 [ 161.780643][ T7826] CPU: 1 UID: 0 PID: 7826 Comm: syz.3.610 Tainted: G L syzkaller #0 PREEMPT(full) [ 161.780675][ T7826] Tainted: [L]=SOFTLOCKUP [ 161.780684][ T7826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 161.780697][ T7826] Call Trace: [ 161.780705][ T7826] [ 161.780714][ T7826] dump_stack_lvl+0x100/0x190 [ 161.780750][ T7826] should_fail_ex.cold+0x5/0xa [ 161.780782][ T7826] should_failslab+0xc2/0x120 [ 161.780811][ T7826] __kmalloc_cache_noprof+0x91/0x6d0 [ 161.780842][ T7826] ? qdisc_get_rtab+0x37f/0x810 [ 161.780866][ T7826] ? qdisc_get_rtab+0x14d/0x810 [ 161.780894][ T7826] qdisc_get_rtab+0x14d/0x810 [ 161.780921][ T7826] tcf_police_init+0xec9/0x1690 [ 161.780959][ T7826] ? __pfx_tcf_police_init+0x10/0x10 [ 161.781015][ T7826] ? tcf_action_init_1+0x2d8/0x6c0 [ 161.781043][ T7826] ? __asan_memcpy+0x3c/0x60 [ 161.781069][ T7826] tcf_action_init_1+0x466/0x6c0 [ 161.781099][ T7826] ? __pfx_tcf_action_init_1+0x10/0x10 [ 161.781124][ T7826] ? tc_action_load_ops+0x1f5/0x3e0 [ 161.781166][ T7826] ? __nla_parse+0x40/0x60 [ 161.781199][ T7826] tcf_action_init+0x43f/0xa60 [ 161.781237][ T7826] ? __pfx_tcf_action_init+0x10/0x10 [ 161.781270][ T7826] ? __lock_acquire+0x5c0/0x1f40 [ 161.781351][ T7826] ? __lock_acquire+0x5c0/0x1f40 [ 161.781378][ T7826] tcf_action_add+0xed/0x5c0 [ 161.781410][ T7826] ? __pfx_tcf_action_add+0x10/0x10 [ 161.781481][ T7826] ? __nla_parse+0x40/0x60 [ 161.781515][ T7826] tc_ctl_action+0x2e3/0x470 [ 161.781543][ T7826] ? __pfx_tc_ctl_action+0x10/0x10 [ 161.781580][ T7826] ? __pfx_tc_ctl_action+0x10/0x10 [ 161.781608][ T7826] rtnetlink_rcv_msg+0x3c9/0xe90 [ 161.781639][ T7826] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 161.781675][ T7826] ? ref_tracker_free+0x37e/0x6c0 [ 161.781706][ T7826] netlink_rcv_skb+0x159/0x420 [ 161.781730][ T7826] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 161.781759][ T7826] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 161.781794][ T7826] ? netlink_deliver_tap+0x1ae/0xcc0 [ 161.781823][ T7826] netlink_unicast+0x585/0x850 [ 161.781852][ T7826] ? __pfx_netlink_unicast+0x10/0x10 [ 161.781884][ T7826] netlink_sendmsg+0x8b0/0xda0 [ 161.781913][ T7826] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.781940][ T7826] ? selinux_socket_sendmsg+0x198/0x2f0 [ 161.781969][ T7826] ____sys_sendmsg+0xa4d/0xbe0 [ 161.781997][ T7826] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.782024][ T7826] ? __pfx_____sys_sendmsg+0x10/0x10 [ 161.782068][ T7826] ___sys_sendmsg+0x190/0x1e0 [ 161.782090][ T7826] ? __pfx____sys_sendmsg+0x10/0x10 [ 161.782111][ T7826] ? futex_wait+0x11e/0x370 [ 161.782140][ T7826] ? find_held_lock+0x2b/0x80 [ 161.782185][ T7826] __sys_sendmsg+0x160/0x210 [ 161.782212][ T7826] ? __pfx___sys_sendmsg+0x10/0x10 [ 161.782261][ T7826] do_syscall_64+0x123/0x790 [ 161.782296][ T7826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.782319][ T7826] RIP: 0033:0x7f79cc19e159 [ 161.782338][ T7826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.782357][ T7826] RSP: 002b:00007f79cd0dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.782378][ T7826] RAX: ffffffffffffffda RBX: 00007f79cc425fa0 RCX: 00007f79cc19e159 [ 161.782393][ T7826] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000005 [ 161.782406][ T7826] RBP: 00007f79cc23506b R08: 0000000000000000 R09: 0000000000000000 [ 161.782420][ T7826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 161.782433][ T7826] R13: 00007f79cc426038 R14: 00007f79cc425fa0 R15: 00007ffe0a667e08 [ 161.782465][ T7826] [ 161.948280][ T7660] hsr_slave_0: entered promiscuous mode [ 161.951400][ T7660] hsr_slave_1: entered promiscuous mode [ 161.953376][ T7660] debugfs: 'hsr0' already exists in 'hsr' [ 161.953392][ T7660] Cannot create hsr debugfs directory [ 162.489804][ T4922] Bluetooth: hci3: command tx timeout [ 162.565995][ T1425] IPVS: starting estimator thread 0... [ 162.567816][ T7846] netlink: 24 bytes leftover after parsing attributes in process `syz.2.618'. [ 162.649692][ T7847] IPVS: using max 33 ests per chain, 79200 per kthread [ 162.737326][ T7846] netlink: 4 bytes leftover after parsing attributes in process `syz.2.618'. [ 162.794430][ T7851] FAULT_INJECTION: forcing a failure. [ 162.794430][ T7851] name failslab, interval 1, probability 0, space 0, times 0 [ 162.794465][ T7851] CPU: 0 UID: 0 PID: 7851 Comm: syz.6.619 Tainted: G L syzkaller #0 PREEMPT(full) [ 162.794496][ T7851] Tainted: [L]=SOFTLOCKUP [ 162.794504][ T7851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 162.794518][ T7851] Call Trace: [ 162.794526][ T7851] [ 162.794534][ T7851] dump_stack_lvl+0x100/0x190 [ 162.794570][ T7851] should_fail_ex.cold+0x5/0xa [ 162.794599][ T7851] should_failslab+0xc2/0x120 [ 162.794626][ T7851] __kmalloc_cache_node_noprof+0x94/0x720 [ 162.794654][ T7851] ? register_lock_class+0x3f/0x7b0 [ 162.794679][ T7851] ? __get_vm_area_node+0x124/0x350 [ 162.794710][ T7851] __get_vm_area_node+0x124/0x350 [ 162.794740][ T7851] __vmalloc_node_range_noprof+0x268/0x1420 [ 162.794769][ T7851] ? n_tty_open+0x1a/0x170 [ 162.794800][ T7851] ? lock_acquire+0x1d1/0x380 [ 162.794826][ T7851] ? n_tty_open+0x1a/0x170 [ 162.794859][ T7851] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 162.794892][ T7851] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 162.794924][ T7851] ? n_tty_open+0x1a/0x170 [ 162.794951][ T7851] __vmalloc_node_noprof+0xad/0xf0 [ 162.794977][ T7851] ? n_tty_open+0x1a/0x170 [ 162.795005][ T7851] ? __pfx_n_tty_open+0x10/0x10 [ 162.795032][ T7851] n_tty_open+0x1a/0x170 [ 162.795059][ T7851] tty_ldisc_open+0xa2/0x120 [ 162.795082][ T7851] tty_ldisc_setup+0x40/0xf0 [ 162.795106][ T7851] tty_init_dev.part.0+0x1b5/0x470 [ 162.795135][ T7851] tty_init_dev+0x60/0x80 [ 162.795161][ T7851] ? __pfx_ptmx_open+0x10/0x10 [ 162.795186][ T7851] ptmx_open+0x128/0x360 [ 162.795208][ T7851] ? __pfx_ptmx_open+0x10/0x10 [ 162.795228][ T7851] chrdev_open+0x234/0x6a0 [ 162.795256][ T7851] ? __pfx_chrdev_open+0x10/0x10 [ 162.795285][ T7851] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 162.795322][ T7851] do_dentry_open+0x6ab/0x14d0 [ 162.795343][ T7851] ? __pfx_chrdev_open+0x10/0x10 [ 162.795375][ T7851] vfs_open+0x82/0x3f0 [ 162.795405][ T7851] path_openat+0x19fa/0x2440 [ 162.795436][ T7851] ? __pfx_path_openat+0x10/0x10 [ 162.795470][ T7851] do_file_open+0x20e/0x430 [ 162.795498][ T7851] ? __pfx_do_file_open+0x10/0x10 [ 162.795547][ T7851] ? _raw_spin_unlock+0x28/0x50 [ 162.795572][ T7851] ? alloc_fd+0x471/0x7a0 [ 162.795608][ T7851] do_sys_openat2+0x10f/0x1e0 [ 162.795635][ T7851] ? __pfx_do_sys_openat2+0x10/0x10 [ 162.795664][ T7851] ? do_sock_setsockopt+0x101/0x1d0 [ 162.795693][ T7851] ? kfree+0x1e5/0x6d0 [ 162.795720][ T7851] ? udp_setsockopt+0x6b/0xb0 [ 162.795754][ T7851] __x64_sys_openat+0x12d/0x210 [ 162.795783][ T7851] ? __pfx___x64_sys_openat+0x10/0x10 [ 162.795823][ T7851] do_syscall_64+0x123/0x790 [ 162.795856][ T7851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.795877][ T7851] RIP: 0033:0x7f7f3219e159 [ 162.795895][ T7851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.795913][ T7851] RSP: 002b:00007f7f33107028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 162.795933][ T7851] RAX: ffffffffffffffda RBX: 00007f7f32425fa0 RCX: 00007f7f3219e159 [ 162.795948][ T7851] RDX: 0000000000080782 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 162.795962][ T7851] RBP: 00007f7f3223506b R08: 0000000000000000 R09: 0000000000000000 [ 162.795975][ T7851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.795989][ T7851] R13: 00007f7f32426038 R14: 00007f7f32425fa0 R15: 00007ffff129c898 [ 162.796020][ T7851] [ 162.819211][ T7851] syz.6.619: vmalloc error: size 9112, align 0x1, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 162.819300][ T7851] CPU: 0 UID: 0 PID: 7851 Comm: syz.6.619 Tainted: G L syzkaller #0 PREEMPT(full) [ 162.819329][ T7851] Tainted: [L]=SOFTLOCKUP [ 162.819337][ T7851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 162.819352][ T7851] Call Trace: [ 162.819358][ T7851] [ 162.819366][ T7851] dump_stack_lvl+0x100/0x190 [ 162.819401][ T7851] warn_alloc.cold+0x9e/0xb2 [ 162.819426][ T7851] ? __pfx_warn_alloc+0x10/0x10 [ 162.819444][ T7851] ? __kasan_kmalloc+0x8a/0xb0 [ 162.819470][ T7851] ? register_lock_class+0x3f/0x7b0 [ 162.819500][ T7851] ? __get_vm_area_node+0x22b/0x350 [ 162.819531][ T7851] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 162.819562][ T7851] ? lock_acquire+0x1d1/0x380 [ 162.819587][ T7851] ? n_tty_open+0x1a/0x170 [ 162.819619][ T7851] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 162.819652][ T7851] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 162.819683][ T7851] ? n_tty_open+0x1a/0x170 [ 162.819707][ T7851] __vmalloc_node_noprof+0xad/0xf0 [ 162.819733][ T7851] ? n_tty_open+0x1a/0x170 [ 162.819760][ T7851] ? __pfx_n_tty_open+0x10/0x10 [ 162.819786][ T7851] n_tty_open+0x1a/0x170 [ 162.819813][ T7851] tty_ldisc_open+0xa2/0x120 [ 162.819835][ T7851] tty_ldisc_setup+0x40/0xf0 [ 162.819857][ T7851] tty_init_dev.part.0+0x1b5/0x470 [ 162.819885][ T7851] tty_init_dev+0x60/0x80 [ 162.819910][ T7851] ? __pfx_ptmx_open+0x10/0x10 [ 162.819927][ T7851] ptmx_open+0x128/0x360 [ 162.819947][ T7851] ? __pfx_ptmx_open+0x10/0x10 [ 162.819965][ T7851] chrdev_open+0x234/0x6a0 [ 162.819990][ T7851] ? __pfx_chrdev_open+0x10/0x10 [ 162.820016][ T7851] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 162.820052][ T7851] do_dentry_open+0x6ab/0x14d0 [ 162.820072][ T7851] ? __pfx_chrdev_open+0x10/0x10 [ 162.820103][ T7851] vfs_open+0x82/0x3f0 [ 162.820133][ T7851] path_openat+0x19fa/0x2440 [ 162.820162][ T7851] ? __pfx_path_openat+0x10/0x10 [ 162.820203][ T7851] do_file_open+0x20e/0x430 [ 162.820231][ T7851] ? __pfx_do_file_open+0x10/0x10 [ 162.820280][ T7851] ? _raw_spin_unlock+0x28/0x50 [ 162.820305][ T7851] ? alloc_fd+0x471/0x7a0 [ 162.820338][ T7851] do_sys_openat2+0x10f/0x1e0 [ 162.820367][ T7851] ? __pfx_do_sys_openat2+0x10/0x10 [ 162.820395][ T7851] ? do_sock_setsockopt+0x101/0x1d0 [ 162.820421][ T7851] ? kfree+0x1e5/0x6d0 [ 162.820447][ T7851] ? udp_setsockopt+0x6b/0xb0 [ 162.820483][ T7851] __x64_sys_openat+0x12d/0x210 [ 162.820511][ T7851] ? __pfx___x64_sys_openat+0x10/0x10 [ 162.820551][ T7851] do_syscall_64+0x123/0x790 [ 162.820581][ T7851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.820603][ T7851] RIP: 0033:0x7f7f3219e159 [ 162.820620][ T7851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.820639][ T7851] RSP: 002b:00007f7f33107028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 162.820658][ T7851] RAX: ffffffffffffffda RBX: 00007f7f32425fa0 RCX: 00007f7f3219e159 [ 162.820670][ T7851] RDX: 0000000000080782 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 162.820684][ T7851] RBP: 00007f7f3223506b R08: 0000000000000000 R09: 0000000000000000 [ 162.820696][ T7851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.820707][ T7851] R13: 00007f7f32426038 R14: 00007f7f32425fa0 R15: 00007ffff129c898 [ 162.820737][ T7851] [ 162.832357][ T7851] Mem-Info: [ 162.832369][ T7851] active_anon:27824 inactive_anon:0 isolated_anon:0 [ 162.832369][ T7851] active_file:129 inactive_file:56052 isolated_file:0 [ 162.832369][ T7851] unevictable:0 dirty:535 writeback:0 [ 162.832369][ T7851] slab_reclaimable:18650 slab_unreclaimable:90284 [ 162.832369][ T7851] mapped:30561 shmem:17495 pagetables:1472 [ 162.832369][ T7851] sec_pagetables:0 bounce:0 [ 162.832369][ T7851] kernel_misc_reclaimable:0 [ 162.832369][ T7851] free:1265593 free_pcp:15864 free_cma:0 [ 162.832423][ T7851] Node 0 active_anon:111296kB inactive_anon:0kB active_file:516kB inactive_file:224008kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:122244kB dirty:2140kB writeback:0kB shmem:69980kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:12856kB pagetables:5768kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 162.832479][ T7851] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 162.832528][ T7851] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 162.832582][ T7851] lowmem_reserve[]: 0 2471 2471 2471 2471 [ 162.832617][ T7851] Node 0 DMA32 free:1116180kB boost:0kB min:33992kB low:42488kB high:50984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:111296kB inactive_anon:0kB active_file:516kB inactive_file:224008kB unevictable:0kB writepending:2140kB zspages:0kB present:3129332kB managed:2530472kB mlocked:0kB bounce:0kB free_pcp:63456kB local_pcp:39112kB free_cma:0kB [ 162.832674][ T7851] lowmem_reserve[]: 0 0 0 0 0 [ 162.832705][ T7851] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:68kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 162.832759][ T7851] lowmem_reserve[]: 0 0 0 0 0 [ 162.832791][ T7851] Node 1 Normal free:3930832kB boost:0kB min:55908kB low:69884kB high:83860kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 162.832845][ T7851] lowmem_reserve[]: 0 0 0 0 0 [ 162.832877][ T7851] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 162.833016][ T7851] Node 0 DMA32: 889*4kB (UME) 782*8kB (UME) 458*16kB (UM) 587*32kB (UME) 226*64kB (UME) 115*128kB (UME) 42*256kB (UM) 8*512kB (UM) 6*1024kB (UME) 3*2048kB (UM) 250*4096kB (UM) = 1116244kB [ 162.845112][ T7851] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 162.845227][ T7851] Node 1 Normal: 4*4kB (UM) 6*8kB (UM) 9*16kB (UM) 6*32kB (UM) 5*64kB (UM) 6*128kB (UM) 3*256kB (UM) 3*512kB (UM) 1*1024kB (M) 1*2048kB (U) 958*4096kB (M) = 3930832kB [ 162.845386][ T7851] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 162.845402][ T7851] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 162.845417][ T7851] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 162.845433][ T7851] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 162.845449][ T7851] 73672 total pagecache pages [ 162.845456][ T7851] 0 pages in swap cache [ 162.845461][ T7851] Free swap = 124996kB [ 162.845468][ T7851] Total swap = 124996kB [ 162.845476][ T7851] 2097051 pages RAM [ 162.845483][ T7851] 0 pages HighMem/MovableOnly [ 162.845489][ T7851] 432800 pages reserved [ 162.845496][ T7851] 0 pages cma reserved [ 162.845718][ T7851] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 162.923544][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 162.923560][ T30] audit: type=1400 audit(1790022391.807:561): avc: denied { append } for pid=7855 comm="syz.2.621" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 162.926337][ T7660] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 162.950432][ T7660] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 162.974009][ T7660] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 163.001485][ T7660] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 163.014553][ T7660] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 163.043127][ T7660] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 163.046325][ T7660] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 163.065768][ T7660] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 163.582129][ T7660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.697939][ T7660] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.738604][ T208] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.738693][ T208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.751612][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.751699][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.835591][ T30] audit: type=1400 audit(1790022392.717:562): avc: denied { ioctl } for pid=7877 comm="syz.6.626" path="/dev/uinput" dev="devtmpfs" ino=914 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 163.846040][ T7878] FAULT_INJECTION: forcing a failure. [ 163.846040][ T7878] name failslab, interval 1, probability 0, space 0, times 0 [ 163.846068][ T7878] CPU: 1 UID: 0 PID: 7878 Comm: syz.6.626 Tainted: G L syzkaller #0 PREEMPT(full) [ 163.846096][ T7878] Tainted: [L]=SOFTLOCKUP [ 163.846104][ T7878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 163.846118][ T7878] Call Trace: [ 163.846126][ T7878] [ 163.846134][ T7878] dump_stack_lvl+0x100/0x190 [ 163.846170][ T7878] should_fail_ex.cold+0x5/0xa [ 163.846198][ T7878] should_failslab+0xc2/0x120 [ 163.846227][ T7878] __kmalloc_noprof+0xfc/0x840 [ 163.846250][ T7878] ? input_ff_create+0x60/0x310 [ 163.846279][ T7878] input_ff_create+0x60/0x310 [ 163.846305][ T7878] uinput_ioctl_handler.isra.0+0x70c/0x1d20 [ 163.846336][ T7878] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 163.846358][ T7878] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 163.846386][ T7878] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 163.846412][ T7878] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 163.846441][ T7878] ? __fget_files+0x34/0x3d0 [ 163.846478][ T7878] ? selinux_file_ioctl+0x13b/0x290 [ 163.846500][ T7878] ? selinux_file_ioctl+0xb6/0x290 [ 163.846524][ T7878] ? __pfx_uinput_ioctl+0x10/0x10 [ 163.846547][ T7878] __x64_sys_ioctl+0x18e/0x210 [ 163.846571][ T7878] do_syscall_64+0x123/0x790 [ 163.846610][ T7878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.846632][ T7878] RIP: 0033:0x7f7f3219e159 [ 163.846650][ T7878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.846669][ T7878] RSP: 002b:00007f7f33107028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 163.846688][ T7878] RAX: ffffffffffffffda RBX: 00007f7f32425fa0 RCX: 00007f7f3219e159 [ 163.846702][ T7878] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 163.846713][ T7878] RBP: 00007f7f3223506b R08: 0000000000000000 R09: 0000000000000000 [ 163.846725][ T7878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.846737][ T7878] R13: 00007f7f32426038 R14: 00007f7f32425fa0 R15: 00007ffff129c898 [ 163.846766][ T7878] [ 164.020530][ T30] audit: type=1400 audit(1790022392.907:563): avc: denied { write } for pid=7835 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.365213][ T30] audit: type=1400 audit(1790022393.247:564): avc: denied { write } for pid=7889 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.419966][ T5781] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 164.466004][ T5268] 8021q: adding VLAN 0 to HW filter on device eth10 [ 164.572682][ T5781] usb 7-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 164.574727][ T5781] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 134, changing to 11 [ 164.574780][ T5781] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8410, setting to 1024 [ 164.577121][ T5781] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.577143][ T5781] usb 7-1: Product: syz [ 164.577158][ T5781] usb 7-1: Manufacturer: syz [ 164.577172][ T5781] usb 7-1: SerialNumber: syz [ 164.602152][ T5781] symbolserial 7-1:1.0: symbol converter detected [ 164.613581][ T5781] usb 7-1: symbol converter now attached to ttyUSB0 [ 164.881836][ T30] audit: type=1400 audit(1790022393.767:565): avc: denied { read } for pid=7884 comm="syz.6.628" path="socket:[22626]" dev="sockfs" ino=22626 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 164.983052][ T30] audit: type=1400 audit(1790022393.867:566): avc: denied { write } for pid=7899 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 165.125365][ T5715] usb 7-1: USB disconnect, device number 3 [ 165.755705][ T5715] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 165.865196][ T5715] symbolserial 7-1:1.0: device disconnected [ 165.951098][ T30] audit: type=1400 audit(1790022394.827:567): avc: denied { write } for pid=7924 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 166.020226][ T7931] netlink: 'syz.6.636': attribute type 1 has an invalid length. [ 166.054112][ T7929] FAULT_INJECTION: forcing a failure. [ 166.054112][ T7929] name failslab, interval 1, probability 0, space 0, times 0 [ 166.054146][ T7929] CPU: 1 UID: 0 PID: 7929 Comm: syz.2.634 Tainted: G L syzkaller #0 PREEMPT(full) [ 166.054177][ T7929] Tainted: [L]=SOFTLOCKUP [ 166.054185][ T7929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 166.054197][ T7929] Call Trace: [ 166.054205][ T7929] [ 166.054213][ T7929] dump_stack_lvl+0x100/0x190 [ 166.054251][ T7929] should_fail_ex.cold+0x5/0xa [ 166.054282][ T7929] should_failslab+0xc2/0x120 [ 166.054309][ T7929] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 166.054335][ T7929] ? proc_alloc_inode+0x25/0x200 [ 166.054368][ T7929] ? __pfx_proc_alloc_inode+0x10/0x10 [ 166.054401][ T7929] proc_alloc_inode+0x25/0x200 [ 166.054428][ T7929] alloc_inode+0x68/0x250 [ 166.054449][ T7929] new_inode+0x22/0x1c0 [ 166.054472][ T7929] proc_pid_make_inode+0x22/0x160 [ 166.054502][ T7929] proc_map_files_instantiate+0x72/0x1a0 [ 166.054532][ T7929] proc_fill_cache+0x2a3/0x3a0 [ 166.054561][ T7929] ? __pfx_proc_map_files_instantiate+0x10/0x10 [ 166.054591][ T7929] ? __pfx_proc_fill_cache+0x10/0x10 [ 166.054618][ T7929] ? __pfx___up_read+0x10/0x10 [ 166.054644][ T7929] ? proc_map_files_readdir+0x457/0xb10 [ 166.054680][ T7929] proc_map_files_readdir+0x5b5/0xb10 [ 166.054718][ T7929] ? __pfx_proc_map_files_readdir+0x10/0x10 [ 166.054747][ T7929] ? lock_acquire+0x1d1/0x380 [ 166.054782][ T7929] ? down_read_killable+0x35d/0x520 [ 166.054805][ T7929] ? __ww_mutex_lock.constprop.0+0x570/0x3f00 [ 166.054838][ T7929] ? avc_policy_seqno+0x9/0x20 [ 166.054867][ T7929] ? selinux_file_permission+0x8f/0x6d0 [ 166.054899][ T7929] iterate_dir+0x296/0xae0 [ 166.054926][ T7929] __x64_sys_getdents64+0x13b/0x2c0 [ 166.054949][ T7929] ? __x64_sys_futex+0x358/0x4d0 [ 166.054977][ T7929] ? __pfx___x64_sys_getdents64+0x10/0x10 [ 166.055002][ T7929] ? __pfx_filldir64+0x10/0x10 [ 166.055035][ T7929] do_syscall_64+0x123/0x790 [ 166.055068][ T7929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.055097][ T7929] RIP: 0033:0x7f54b7b9e159 [ 166.055115][ T7929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.055135][ T7929] RSP: 002b:00007f54b8aa1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 166.055155][ T7929] RAX: ffffffffffffffda RBX: 00007f54b7e25fa0 RCX: 00007f54b7b9e159 [ 166.055170][ T7929] RDX: 0000000000001002 RSI: 0000200000002f40 RDI: 0000000000000004 [ 166.055184][ T7929] RBP: 00007f54b7c3506b R08: 0000000000000000 R09: 0000000000000000 [ 166.055197][ T7929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.055209][ T7929] R13: 00007f54b7e26038 R14: 00007f54b7e25fa0 R15: 00007fff1752b3b8 [ 166.055240][ T7929] [ 166.138469][ T7931] 8021q: adding VLAN 0 to HW filter on device bond1 [ 166.225939][ T7934] 8021q: adding VLAN 0 to HW filter on device bond1 [ 166.238585][ T7934] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 166.240520][ T7934] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 166.345977][ T5268] 8021q: adding VLAN 0 to HW filter on device eth11 [ 166.346697][ T7938] xt_hashlimit: size too large, truncated to 1048576 [ 166.389962][ T30] audit: type=1400 audit(1790022395.267:568): avc: denied { write } for pid=7937 comm="syz.3.638" laddr=::1 lport=60 faddr=::1 fport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 166.424145][ T7931] mac80211_hwsim hwsim16 wlan1: entered promiscuous mode [ 166.427247][ T7931] bond1: (slave wlan1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 166.473684][ T7660] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.927190][ T30] audit: type=1400 audit(1790022395.807:569): avc: denied { create } for pid=7966 comm="syz.6.642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 166.949313][ T30] audit: type=1400 audit(1790022395.817:570): avc: denied { bind } for pid=7966 comm="syz.6.642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 167.098406][ T7660] veth0_vlan: entered promiscuous mode [ 167.124045][ T7979] netlink: 20 bytes leftover after parsing attributes in process `syz.3.643'. [ 167.125597][ T7979] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 167.125609][ T7979] IPv6: NLM_F_CREATE should be set when creating new route [ 167.125860][ T7979] netlink: 20 bytes leftover after parsing attributes in process `syz.3.643'. [ 167.126237][ T7979] Zero length message leads to an empty skb [ 167.135010][ T7660] veth1_vlan: entered promiscuous mode [ 167.233622][ T7660] veth0_macvtap: entered promiscuous mode [ 167.251879][ T7660] veth1_macvtap: entered promiscuous mode [ 167.282811][ T7660] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.304201][ T7660] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.329954][ T208] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.329992][ T208] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.330023][ T208] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.330055][ T208] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.444001][ T5268] 8021q: adding VLAN 0 to HW filter on device eth12 [ 167.665502][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.665522][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.852016][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.852037][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.006601][ T4922] Bluetooth: hci4: unexpected cc 0x0c05 length: 4 > 1 [ 168.638627][ T8013] openvswitch: netlink: Duplicate or invalid key (type 0). [ 168.788558][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 168.788574][ T30] audit: type=1400 audit(1790022397.667:576): avc: denied { listen } for pid=8014 comm="syz.2.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 168.824800][ T30] audit: type=1400 audit(1790022397.707:577): avc: denied { accept } for pid=8014 comm="syz.2.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 168.991121][ T30] audit: type=1400 audit(1790022397.877:578): avc: denied { connect } for pid=8019 comm="syz.2.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 169.213417][ T8027] netlink: 'syz.2.656': attribute type 1 has an invalid length. [ 169.311772][ T8031] bond1: (slave veth0_to_bond): making interface the new active one [ 169.319303][ T8031] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 169.338120][ T30] audit: type=1400 audit(1790022398.207:579): avc: denied { remount } for pid=8024 comm="syz.7.655" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 169.660294][ T8042] FAULT_INJECTION: forcing a failure. [ 169.660294][ T8042] name fail_futex, interval 1, probability 0, space 0, times 1 [ 169.660328][ T8042] CPU: 1 UID: 0 PID: 8042 Comm: syz.2.661 Tainted: G L syzkaller #0 PREEMPT(full) [ 169.660355][ T8042] Tainted: [L]=SOFTLOCKUP [ 169.660362][ T8042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 169.660375][ T8042] Call Trace: [ 169.660381][ T8042] [ 169.660402][ T8042] dump_stack_lvl+0x100/0x190 [ 169.660437][ T8042] should_fail_ex.cold+0x5/0xa [ 169.660461][ T8042] ? look_up_lock_class+0x55/0x120 [ 169.660493][ T8042] get_futex_key+0x1d0/0x14f0 [ 169.660523][ T8042] ? __pfx_get_futex_key+0x10/0x10 [ 169.660550][ T8042] ? __lock_acquire+0x5c0/0x1f40 [ 169.660579][ T8042] futex_wait_setup+0x91/0x540 [ 169.660607][ T8042] __futex_wait+0x19f/0x300 [ 169.660629][ T8042] ? __pfx___futex_wait+0x10/0x10 [ 169.660647][ T8042] ? futex_hash+0x311/0x400 [ 169.660674][ T8042] ? __pfx_futex_wake_mark+0x10/0x10 [ 169.660709][ T8042] ? __pfx_futex_hash+0x10/0x10 [ 169.660732][ T8042] ? __lock_acquire+0x5c0/0x1f40 [ 169.660756][ T8042] ? __lock_acquire+0x5c0/0x1f40 [ 169.660784][ T8042] futex_wait+0xe6/0x370 [ 169.660803][ T8042] ? __pfx_futex_wait+0x10/0x10 [ 169.660821][ T8042] ? __might_fault+0xc5/0x140 [ 169.660864][ T8042] do_futex+0x265/0x440 [ 169.660892][ T8042] ? __pfx_do_futex+0x10/0x10 [ 169.660918][ T8042] ? __fget_files+0x34/0x3d0 [ 169.660948][ T8042] __x64_sys_futex+0x34f/0x4d0 [ 169.660979][ T8042] ? __pfx___x64_sys_futex+0x10/0x10 [ 169.661003][ T8042] ? selinux_file_ioctl+0xb6/0x290 [ 169.661036][ T8042] do_syscall_64+0x123/0x790 [ 169.661068][ T8042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.661088][ T8042] RIP: 0033:0x7f54b7b9e159 [ 169.661104][ T8042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.661122][ T8042] RSP: 002b:00007f54b8aa10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 169.661141][ T8042] RAX: ffffffffffffffda RBX: 00007f54b7e25fa8 RCX: 00007f54b7b9e159 [ 169.661162][ T8042] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f54b7e25fa8 [ 169.661175][ T8042] RBP: 00007f54b7e25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 169.661187][ T8042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.661200][ T8042] R13: 00007f54b7e26038 R14: 00007fff1752b2d0 R15: 00007fff1752b3b8 [ 169.661229][ T8042] [ 169.973505][ T30] audit: type=1400 audit(1790022398.857:580): avc: denied { accept } for pid=8045 comm="syz.2.663" lport=43087 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 170.202160][ T30] audit: type=1400 audit(1790022399.077:581): avc: denied { load_policy } for pid=8047 comm="syz.3.665" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 170.208943][ T8048] SELinux: failed to load policy [ 170.554654][ T8061] FAULT_INJECTION: forcing a failure. [ 170.554654][ T8061] name failslab, interval 1, probability 0, space 0, times 0 [ 170.554687][ T8061] CPU: 0 UID: 60928 PID: 8061 Comm: syz.3.671 Tainted: G L syzkaller #0 PREEMPT(full) [ 170.554716][ T8061] Tainted: [L]=SOFTLOCKUP [ 170.554724][ T8061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 170.554737][ T8061] Call Trace: [ 170.554743][ T8061] [ 170.554751][ T8061] dump_stack_lvl+0x100/0x190 [ 170.554787][ T8061] should_fail_ex.cold+0x5/0xa [ 170.554816][ T8061] should_failslab+0xc2/0x120 [ 170.554843][ T8061] __kmalloc_flags_noprof+0x122/0x8e0 [ 170.554876][ T8061] ? alloc_slab_obj_exts+0x6a/0x170 [ 170.554900][ T8061] alloc_slab_obj_exts+0x6a/0x170 [ 170.554921][ T8061] __memcg_slab_post_alloc_hook+0x3fc/0x10c0 [ 170.554961][ T8061] ? kasan_save_track+0x14/0x30 [ 170.554988][ T8061] kmem_cache_alloc_noprof+0x4fa/0x6a0 [ 170.555011][ T8061] ? copy_utsname+0x1a8/0x690 [ 170.555038][ T8061] copy_utsname+0x1a8/0x690 [ 170.555061][ T8061] create_new_namespaces+0x16a/0xac0 [ 170.555084][ T8061] ? bpf_lsm_capable+0x9/0x10 [ 170.555110][ T8061] ? security_capable+0x80/0x260 [ 170.555143][ T8061] unshare_nsproxy_namespaces+0xf2/0x220 [ 170.555169][ T8061] ksys_unshare+0x4a2/0xa70 [ 170.555193][ T8061] ? __pfx_ksys_unshare+0x10/0x10 [ 170.555226][ T8061] __x64_sys_unshare+0x31/0x40 [ 170.555250][ T8061] do_syscall_64+0x123/0x790 [ 170.555286][ T8061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.555308][ T8061] RIP: 0033:0x7f79cc19e159 [ 170.555325][ T8061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.555343][ T8061] RSP: 002b:00007f79cd0dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 170.555363][ T8061] RAX: ffffffffffffffda RBX: 00007f79cc425fa0 RCX: 00007f79cc19e159 [ 170.555376][ T8061] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000006000080 [ 170.555389][ T8061] RBP: 00007f79cc23506b R08: 0000000000000000 R09: 0000000000000000 [ 170.555402][ T8061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.555415][ T8061] R13: 00007f79cc426038 R14: 00007f79cc425fa0 R15: 00007ffe0a667e08 [ 170.555443][ T8061] [ 170.880585][ T8069] sctp: [Deprecated]: syz.3.673 (pid 8069) Use of int in max_burst socket option deprecated. [ 170.880585][ T8069] Use struct sctp_assoc_value instead [ 171.100536][ T8079] i2c i2c-0: new_device: Instantiated device maxtcpc at 0x50 [ 171.103775][ T8079] i2c i2c-0: delete_device: Deleting device maxtcpc at 0x50 [ 171.126368][ T7122] maxtcpc 0-0050: error -EIO: Failed to read TCPC_POWER_STATUS [ 171.143074][ T7122] maxtcpc 0-0050: probe with driver maxtcpc failed with error -5 [ 171.202074][ T30] audit: type=1400 audit(1790022400.087:582): avc: denied { ioctl } for pid=8081 comm="syz.7.678" path="socket:[23378]" dev="sockfs" ino=23378 ioctlcmd=0x8905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 171.351451][ T30] audit: type=1400 audit(1790022400.237:583): avc: denied { setopt } for pid=8085 comm="syz.3.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 171.391190][ T8084] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 171.391217][ T8084] overlayfs: missing 'lowerdir' [ 171.418951][ T8084] SELinux: Context system_u:object_r:modem_device_t:s0 is not valid (left unmapped). [ 171.473977][ T30] audit: type=1400 audit(1790022400.347:584): avc: denied { relabelto } for pid=8083 comm="syz.2.679" name="file0" dev="cgroup2" ino=338 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:modem_device_t:s0" [ 171.506060][ T30] audit: type=1400 audit(1790022400.367:585): avc: denied { associate } for pid=8083 comm="syz.2.679" name="file0" dev="cgroup2" ino=338 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:modem_device_t:s0" [ 171.543691][ T8088] device-mapper: table: 248:1: thin-pool: Gap in table (-EINVAL) [ 171.543710][ T8088] device-mapper: ioctl: error adding target to table [ 172.115202][ T8108] netlink: 20 bytes leftover after parsing attributes in process `syz.3.687'. [ 172.145088][ T8111] netlink: 8 bytes leftover after parsing attributes in process `syz.3.687'. [ 172.327842][ T8107] smpboot: CPU 1 is now offline [ 173.470980][ T8132] FAULT_INJECTION: forcing a failure. [ 173.470980][ T8132] name failslab, interval 1, probability 0, space 0, times 0 [ 173.471002][ T8132] CPU: 0 UID: 0 PID: 8132 Comm: syz.6.697 Tainted: G L syzkaller #0 PREEMPT(full) [ 173.471020][ T8132] Tainted: [L]=SOFTLOCKUP [ 173.471024][ T8132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 173.471032][ T8132] Call Trace: [ 173.471037][ T8132] [ 173.471042][ T8132] dump_stack_lvl+0x100/0x190 [ 173.471065][ T8132] should_fail_ex.cold+0x5/0xa [ 173.471083][ T8132] should_failslab+0xc2/0x120 [ 173.471099][ T8132] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 173.471114][ T8132] ? __d_alloc+0x35/0xa50 [ 173.471132][ T8132] __d_alloc+0x35/0xa50 [ 173.471149][ T8132] d_alloc+0x4a/0x1e0 [ 173.471166][ T8132] lookup_one_qstr_excl+0x171/0x250 [ 173.471186][ T8132] start_dirop+0x59/0xb0 [ 173.471199][ T8132] simple_start_creating+0xf9/0x110 [ 173.471214][ T8132] ? __pfx_simple_start_creating+0x10/0x10 [ 173.471229][ T8132] ? _raw_spin_unlock+0x28/0x50 [ 173.471244][ T8132] ? d_instantiate+0x8f/0xb0 [ 173.471262][ T8132] devpts_fill_super+0x387/0x610 [ 173.471282][ T8132] ? __pfx_devpts_fill_super+0x10/0x10 [ 173.471297][ T8132] get_tree_nodev+0xdd/0x190 [ 173.471310][ T8132] vfs_get_tree+0x92/0x320 [ 173.471328][ T8132] path_mount+0x7d0/0x24c0 [ 173.471350][ T8132] ? __pfx_path_mount+0x10/0x10 [ 173.471374][ T8132] ? lockdep_hardirqs_on+0x7d/0x110 [ 173.471394][ T8132] ? putname+0xb1/0x110 [ 173.471408][ T8132] ? kmem_cache_free+0x127/0x6c0 [ 173.471432][ T8132] ? __x64_sys_mount+0x293/0x310 [ 173.471448][ T8132] __x64_sys_mount+0x293/0x310 [ 173.471465][ T8132] ? __pfx___x64_sys_mount+0x10/0x10 [ 173.471487][ T8132] do_syscall_64+0x123/0x790 [ 173.471505][ T8132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.471517][ T8132] RIP: 0033:0x7f7f3219e159 [ 173.471527][ T8132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.471538][ T8132] RSP: 002b:00007f7f33107028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 173.471550][ T8132] RAX: ffffffffffffffda RBX: 00007f7f32425fa0 RCX: 00007f7f3219e159 [ 173.471557][ T8132] RDX: 0000200000000040 RSI: 00002000000000c0 RDI: 0000000000000000 [ 173.471565][ T8132] RBP: 00007f7f3223506b R08: 0000000000000000 R09: 0000000000000000 [ 173.471572][ T8132] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 173.471580][ T8132] R13: 00007f7f32426038 R14: 00007f7f32425fa0 R15: 00007ffff129c898 [ 173.471596][ T8132] [ 173.471602][ T8132] devpts: Unable to alloc dentry for ptmx node [ 173.868173][ T8135] FAULT_INJECTION: forcing a failure. [ 173.868173][ T8135] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 173.868195][ T8135] CPU: 0 UID: 0 PID: 8135 Comm: syz.2.698 Tainted: G L syzkaller #0 PREEMPT(full) [ 173.868212][ T8135] Tainted: [L]=SOFTLOCKUP [ 173.868217][ T8135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 173.868225][ T8135] Call Trace: [ 173.868230][ T8135] [ 173.868234][ T8135] dump_stack_lvl+0x100/0x190 [ 173.868257][ T8135] should_fail_ex.cold+0x5/0xa [ 173.868272][ T8135] ? prepare_alloc_pages+0x16d/0x5b0 [ 173.868289][ T8135] should_fail_alloc_page+0xeb/0x140 [ 173.868305][ T8135] prepare_alloc_pages+0x1f0/0x5b0 [ 173.868323][ T8135] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 173.868347][ T8135] ? __lock_acquire+0x5c0/0x1f40 [ 173.868363][ T8135] ? is_bpf_text_address+0x94/0x1a0 [ 173.868380][ T8135] ? kernel_text_address+0x8d/0x100 [ 173.868400][ T8135] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 173.868415][ T8135] ? do_raw_spin_lock+0x128/0x260 [ 173.868430][ T8135] ? find_held_lock+0x2b/0x80 [ 173.868448][ T8135] ? mark_held_locks+0x40/0x70 [ 173.868460][ T8135] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 173.868476][ T8135] ? lockdep_hardirqs_on+0x7d/0x110 [ 173.868492][ T8135] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 173.868511][ T8135] ? kasan_save_stack+0x3f/0x50 [ 173.868524][ T8135] ? kasan_save_stack+0x30/0x50 [ 173.868537][ T8135] ? kasan_save_track+0x14/0x30 [ 173.868550][ T8135] ? __kasan_slab_alloc+0x89/0x90 [ 173.868564][ T8135] ? kmem_cache_alloc_noprof+0x269/0x6a0 [ 173.868576][ T8135] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 173.868591][ T8135] ? policy_nodemask+0xed/0x4f0 [ 173.868608][ T8135] alloc_pages_mpol+0x201/0x550 [ 173.868624][ T8135] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 173.868644][ T8135] alloc_pages_noprof+0x1a/0x160 [ 173.868661][ T8135] pte_alloc_one+0x1c/0x3d0 [ 173.868678][ T8135] __pte_alloc+0x6d/0x380 [ 173.868691][ T8135] ? __pfx___pte_alloc+0x10/0x10 [ 173.868707][ T8135] do_anonymous_page+0x1307/0x2050 [ 173.868725][ T8135] ? find_held_lock+0x2b/0x80 [ 173.868740][ T8135] ? __pmd_alloc+0x3f6/0x950 [ 173.868753][ T8135] ? __pmd_alloc+0x3f6/0x950 [ 173.868768][ T8135] ? __pfx_do_anonymous_page+0x10/0x10 [ 173.868783][ T8135] ? do_raw_spin_unlock+0x145/0x1e0 [ 173.868798][ T8135] ? _raw_spin_unlock+0x28/0x50 [ 173.868812][ T8135] ? __pmd_alloc+0x3fb/0x950 [ 173.868828][ T8135] __handle_mm_fault+0x1ff3/0x2f60 [ 173.868848][ T8135] ? __pfx___handle_mm_fault+0x10/0x10 [ 173.868863][ T8135] ? __pfx_mt_find+0x10/0x10 [ 173.868887][ T8135] handle_mm_fault+0x363/0xa20 [ 173.868907][ T8135] __get_user_pages+0x8ae/0x2c30 [ 173.868927][ T8135] ? __pfx___get_user_pages+0x10/0x10 [ 173.868941][ T8135] ? lock_acquire+0x1d1/0x380 [ 173.868952][ T8135] ? mmap_read_lock_maybe_expand+0x1e2/0x3d0 [ 173.868972][ T8135] get_user_pages_remote+0x3d2/0xb10 [ 173.868989][ T8135] ? __pfx_get_user_pages_remote+0x10/0x10 [ 173.869008][ T8135] get_arg_page+0xf4/0x310 [ 173.869021][ T8135] ? __pfx_get_arg_page+0x10/0x10 [ 173.869031][ T8135] ? do_raw_spin_lock+0x128/0x260 [ 173.869046][ T8135] ? alloc_bprm+0x54e/0x9e0 [ 173.869058][ T8135] ? alloc_bprm+0x54e/0x9e0 [ 173.869071][ T8135] copy_string_kernel+0x17d/0x3f0 [ 173.869083][ T8135] ? alloc_bprm+0x596/0x9e0 [ 173.869097][ T8135] do_execveat_common.isra.0+0x2e6/0x580 [ 173.869113][ T8135] __x64_sys_execveat+0xdf/0x130 [ 173.869128][ T8135] do_syscall_64+0x123/0x790 [ 173.869146][ T8135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.869158][ T8135] RIP: 0033:0x7f54b7b9e159 [ 173.869168][ T8135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.869180][ T8135] RSP: 002b:00007f54b8aa1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 173.869192][ T8135] RAX: ffffffffffffffda RBX: 00007f54b7e25fa0 RCX: 00007f54b7b9e159 [ 173.869199][ T8135] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 173.869206][ T8135] RBP: 00007f54b7c3506b R08: 0000000000001000 R09: 0000000000000000 [ 173.869214][ T8135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.869221][ T8135] R13: 00007f54b7e26038 R14: 00007f54b7e25fa0 R15: 00007fff1752b3b8 [ 173.869238][ T8135] [ 174.746391][ T8152] FAULT_INJECTION: forcing a failure. [ 174.746391][ T8152] name failslab, interval 1, probability 0, space 0, times 0 [ 174.746414][ T8152] CPU: 0 UID: 0 PID: 8152 Comm: syz.7.704 Tainted: G L syzkaller #0 PREEMPT(full) [ 174.746431][ T8152] Tainted: [L]=SOFTLOCKUP [ 174.746436][ T8152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 174.746443][ T8152] Call Trace: [ 174.746448][ T8152] [ 174.746457][ T8152] dump_stack_lvl+0x100/0x190 [ 174.746480][ T8152] should_fail_ex.cold+0x5/0xa [ 174.746498][ T8152] should_failslab+0xc2/0x120 [ 174.746514][ T8152] __kmalloc_noprof+0xfc/0x840 [ 174.746527][ T8152] ? asymmetric_key_generate_id+0x7e/0x180 [ 174.746549][ T8152] asymmetric_key_generate_id+0x7e/0x180 [ 174.746568][ T8152] x509_akid_note_kid+0x100/0x260 [ 174.746582][ T8152] asn1_ber_decoder+0x12b3/0x2170 [ 174.746607][ T8152] ? __pfx_asn1_ber_decoder+0x10/0x10 [ 174.746627][ T8152] ? kasan_save_track+0x14/0x30 [ 174.746640][ T8152] ? __kasan_kmalloc+0xaa/0xb0 [ 174.746653][ T8152] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 174.746672][ T8152] ? x509_cert_parse+0x162/0x910 [ 174.746688][ T8152] x509_cert_parse+0x24b/0x910 [ 174.746701][ T8152] x509_key_preparse+0x65/0x9c0 [ 174.746717][ T8152] asymmetric_key_preparse+0xce/0x1d0 [ 174.746733][ T8152] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 174.746751][ T8152] __key_create_or_update+0x463/0xe30 [ 174.746769][ T8152] ? __pfx___key_create_or_update+0x10/0x10 [ 174.746784][ T8152] ? lookup_user_key+0x3f3/0x1300 [ 174.746805][ T8152] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 174.746821][ T8152] key_create_or_update+0x42/0x60 [ 174.746838][ T8152] __do_sys_add_key+0x2e8/0x460 [ 174.746856][ T8152] ? __pfx___do_sys_add_key+0x10/0x10 [ 174.746879][ T8152] do_syscall_64+0x123/0x790 [ 174.746898][ T8152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.746910][ T8152] RIP: 0033:0x7fc161b9e159 [ 174.746921][ T8152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.746931][ T8152] RSP: 002b:00007fc162aa7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 174.746943][ T8152] RAX: ffffffffffffffda RBX: 00007fc161e25fa0 RCX: 00007fc161b9e159 [ 174.746951][ T8152] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 174.746958][ T8152] RBP: 00007fc161c3506b R08: ffffffffffffffff R09: 0000000000000000 [ 174.746965][ T8152] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 174.746972][ T8152] R13: 00007fc161e26038 R14: 00007fc161e25fa0 R15: 00007ffd318f1be8 [ 174.746993][ T8152] [ 174.746998][ T8152] X.509: Couldn't decode AuthKeyIdentifier [ 175.480461][ T8146] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 176.099634][ T5715] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 176.250317][ T5715] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 176.250763][ T5715] usb 7-1: config 0 has no interfaces? [ 176.250782][ T5715] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.253061][ T5715] usb 7-1: config 0 descriptor?? [ 176.460826][ T8177] kvm [8176]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 176.460936][ T8177] kvm [8176]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 176.597248][ T5715] usb 7-1: USB disconnect, device number 4 [ 177.076369][ T8186] FAULT_INJECTION: forcing a failure. [ 177.076369][ T8186] name failslab, interval 1, probability 0, space 0, times 0 [ 177.076393][ T8186] CPU: 0 UID: 0 PID: 8186 Comm: syz.7.717 Tainted: G L syzkaller #0 PREEMPT(full) [ 177.076410][ T8186] Tainted: [L]=SOFTLOCKUP [ 177.076415][ T8186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 177.076422][ T8186] Call Trace: [ 177.076427][ T8186] [ 177.076431][ T8186] dump_stack_lvl+0x100/0x190 [ 177.076455][ T8186] should_fail_ex.cold+0x5/0xa [ 177.076473][ T8186] should_failslab+0xc2/0x120 [ 177.076488][ T8186] __kmalloc_cache_noprof+0x91/0x6d0 [ 177.076507][ T8186] ? landlock_restrict_sibling_threads+0x50d/0x14c0 [ 177.076529][ T8186] landlock_restrict_sibling_threads+0x50d/0x14c0 [ 177.076551][ T8186] ? __pfx_landlock_restrict_sibling_threads+0x10/0x10 [ 177.076569][ T8186] ? lock_acquire+0x1d1/0x380 [ 177.076598][ T8186] ? __pfx___might_resched+0x10/0x10 [ 177.076612][ T8186] ? landlock_merge_ruleset+0x3c0/0xd10 [ 177.076625][ T8186] __do_sys_landlock_restrict_self+0x9bf/0x10a0 [ 177.076644][ T8186] do_syscall_64+0x123/0x790 [ 177.076663][ T8186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.076675][ T8186] RIP: 0033:0x7fc161b9e159 [ 177.076685][ T8186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.076696][ T8186] RSP: 002b:00007fc162aa7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 177.076709][ T8186] RAX: ffffffffffffffda RBX: 00007fc161e25fa0 RCX: 00007fc161b9e159 [ 177.076716][ T8186] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000004 [ 177.076723][ T8186] RBP: 00007fc161c3506b R08: 0000000000000000 R09: 0000000000000000 [ 177.076730][ T8186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.076736][ T8186] R13: 00007fc161e26038 R14: 00007fc161e25fa0 R15: 00007ffd318f1be8 [ 177.076753][ T8186] [ 177.348506][ T5616] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 177.359565][ T5616] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 177.361999][ T5616] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 177.366691][ T5616] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 177.392923][ T5616] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 177.658694][ T8192] netlink: 8 bytes leftover after parsing attributes in process `syz.7.718'. [ 177.658709][ T8192] netlink: 8 bytes leftover after parsing attributes in process `syz.7.718'. [ 177.730680][ T6067] bridge0: port 3(syz_tun) entered disabled state [ 177.775935][ T8196] ERROR: Out of memory at tomoyo_memory_ok. [ 177.775945][ T8196] ERROR: Domain ' /sbin/init /sbin/init /etc/init.d/rcS /etc/init.d/S50sshd /sbin/start-stop-daemon /usr/sbin/sshd /usr/libexec/sshd-session /bin/sh /root/ci-upstream-kasan-gce-selinux-root/syz-executor /root/ci-upstream-kasan-gce-selinux-root/syz-executor /newroot/172/file0' not defined. [ 177.844540][ T6067] syz_tun (unregistering): left allmulticast mode [ 177.844556][ T6067] syz_tun (unregistering): left promiscuous mode [ 177.844594][ T6067] bridge0: port 3(syz_tun) entered disabled state [ 178.143125][ T2273] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 178.193334][ T1165] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.287159][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 178.287170][ T30] audit: type=1400 audit(1790022407.167:588): avc: denied { ioctl } for pid=8207 comm="syz.2.725" path="mnt:[4026532787]" dev="nsfs" ino=4026532787 ioctlcmd=0xb705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 178.320988][ T2273] usb 7-1: Using ep0 maxpacket: 32 [ 178.323260][ T2273] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 178.339201][ T2273] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 178.339217][ T2273] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 178.339228][ T2273] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 178.339252][ T2273] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 178.339263][ T2273] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 178.339275][ T2273] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 178.339296][ T2273] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.405645][ T2273] usb 7-1: config 0 descriptor?? [ 178.562108][ T1165] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.664766][ T2273] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 178.692501][ T2273] usb 7-1: USB disconnect, device number 5 [ 178.697663][ T1165] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.724149][ T2273] usblp0: removed [ 178.862348][ T1165] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.002668][ T8187] lo speed is unknown, defaulting to 1000 [ 179.026220][ T8221] sctp: [Deprecated]: syz.7.728 (pid 8221) Use of int in max_burst socket option deprecated. [ 179.026220][ T8221] Use struct sctp_assoc_value instead [ 179.129472][ T5715] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 179.131521][ T30] audit: type=1400 audit(1790022408.017:589): avc: denied { getattr } for pid=8223 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1808 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 179.280491][ T5715] usb 7-1: Using ep0 maxpacket: 32 [ 179.280905][ T5715] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 179.282081][ T5715] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 179.282095][ T5715] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 179.282107][ T5715] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 179.282133][ T5715] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 179.282145][ T5715] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 179.282157][ T5715] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 179.282179][ T5715] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.306998][ T5715] usb 7-1: config 0 descriptor?? [ 179.450193][ T4922] Bluetooth: hci5: command tx timeout [ 179.458525][ T30] audit: type=1400 audit(1790022408.337:590): avc: denied { read } for pid=8225 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1808 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 179.490785][ T30] audit: type=1400 audit(1790022408.377:591): avc: denied { open } for pid=8225 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1808 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 179.584090][ T5715] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 179.695657][ T8228] FAULT_INJECTION: forcing a failure. [ 179.695657][ T8228] name failslab, interval 1, probability 0, space 0, times 0 [ 179.695690][ T8228] CPU: 0 UID: 0 PID: 8228 Comm: syz.7.729 Tainted: G L syzkaller #0 PREEMPT(full) [ 179.695707][ T8228] Tainted: [L]=SOFTLOCKUP [ 179.695712][ T8228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 179.695719][ T8228] Call Trace: [ 179.695724][ T8228] [ 179.695729][ T8228] dump_stack_lvl+0x100/0x190 [ 179.695752][ T8228] should_fail_ex.cold+0x5/0xa [ 179.695769][ T8228] should_failslab+0xc2/0x120 [ 179.695785][ T8228] __kmalloc_cache_noprof+0x91/0x6d0 [ 179.695803][ T8228] ? get_mountpoint+0x174/0x4f0 [ 179.695818][ T8228] get_mountpoint+0x174/0x4f0 [ 179.695831][ T8228] attach_recursive_mnt.isra.0+0x21f/0x1c50 [ 179.695852][ T8228] ? __pfx_attach_recursive_mnt.isra.0+0x10/0x10 [ 179.695870][ T8228] ? find_held_lock+0x2b/0x80 [ 179.695890][ T8228] ? do_raw_spin_unlock+0x145/0x1e0 [ 179.695907][ T8228] ? graft_tree+0x19f/0x250 [ 179.695928][ T8228] ? do_lock_mount.part.0+0x40b/0xb10 [ 179.695944][ T8228] graft_tree+0x19f/0x250 [ 179.695962][ T8228] do_add_mount+0x1e2/0x360 [ 179.695981][ T8228] path_mount+0x907/0x24c0 [ 179.696001][ T8228] ? __pfx_path_mount+0x10/0x10 [ 179.696019][ T8228] ? lockdep_hardirqs_on+0x7d/0x110 [ 179.696045][ T8228] ? __x64_sys_mount+0x293/0x310 [ 179.696061][ T8228] __x64_sys_mount+0x293/0x310 [ 179.696078][ T8228] ? __pfx___x64_sys_mount+0x10/0x10 [ 179.696100][ T8228] do_syscall_64+0x123/0x790 [ 179.696118][ T8228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.696130][ T8228] RIP: 0033:0x7fc161b9e159 [ 179.696140][ T8228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.696151][ T8228] RSP: 002b:00007fc162aa7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 179.696163][ T8228] RAX: ffffffffffffffda RBX: 00007fc161e25fa0 RCX: 00007fc161b9e159 [ 179.696170][ T8228] RDX: 0000200000000200 RSI: 0000200000000100 RDI: 0000000000000000 [ 179.696178][ T8228] RBP: 00007fc161c3506b R08: 0000000000000000 R09: 0000000000000000 [ 179.696184][ T8228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.696191][ T8228] R13: 00007fc161e26038 R14: 00007fc161e25fa0 R15: 00007ffd318f1be8 [ 179.696208][ T8228] [ 179.986381][ T1165] bridge_slave_1: left allmulticast mode [ 179.986398][ T1165] bridge_slave_1: left promiscuous mode [ 179.986519][ T1165] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.016522][ T1165] bridge_slave_0: left allmulticast mode [ 180.016539][ T1165] bridge_slave_0: left promiscuous mode [ 180.016661][ T1165] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.109385][ C0] usblp0: nonzero read bulk status received: -71 [ 180.113808][ T5715] usb 7-1: USB disconnect, device number 6 [ 180.115460][ T8198] usblp0: error -71 reading from printer [ 180.207548][ T8240] fuse: Bad value for 'fd' [ 180.321832][ T30] audit: type=1400 audit(1790022409.207:592): avc: denied { write } for pid=8222 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 180.321872][ T30] audit: type=1400 audit(1790022409.207:593): avc: denied { create } for pid=8222 comm="dhcpcd-run-hook" name="resolv.conf.eth11.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 180.322075][ T30] audit: type=1400 audit(1790022409.207:594): avc: denied { write } for pid=8222 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth11.ipv4ll" dev="tmpfs" ino=4988 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 180.322441][ T30] audit: type=1400 audit(1790022409.207:595): avc: denied { append } for pid=8222 comm="dhcpcd-run-hook" name="resolv.conf.eth11.ipv4ll" dev="tmpfs" ino=4988 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 180.461177][ T8197] usblp0: removed [ 180.604195][ T30] audit: type=1400 audit(1790022409.487:596): avc: denied { write } for pid=8245 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 180.648845][ T30] audit: type=1400 audit(1790022409.487:597): avc: denied { unlink } for pid=8245 comm="rm" name="resolv.conf.eth11.ipv4ll" dev="tmpfs" ino=4988 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 180.708788][ T1165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.724273][ T1165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.727881][ T1165] bond0 (unregistering): Released all slaves [ 180.766920][ T1165] bond1 (unregistering): Released all slaves [ 181.357885][ T1165] hsr_slave_0: left promiscuous mode [ 181.376937][ T1165] hsr_slave_1: left promiscuous mode [ 181.377403][ T1165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.377415][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.409261][ T1165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.409274][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.486620][ T1165] veth1_macvtap: left promiscuous mode [ 181.486645][ T1165] veth0_macvtap: left promiscuous mode [ 181.486700][ T1165] veth1_vlan: left promiscuous mode [ 181.486734][ T1165] veth0_vlan: left promiscuous mode [ 181.529828][ T4922] Bluetooth: hci5: command tx timeout [ 181.733821][ T8275] ip_tables: iptables: counters copy to user failed while replacing table [ 182.263180][ T1165] team0 (unregistering): Port device team_slave_1 removed [ 182.293231][ T1165] team0 (unregistering): Port device team_slave_0 removed [ 182.432447][ T8296] netlink: 4 bytes leftover after parsing attributes in process `syz.7.744'. [ 182.559044][ T8296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.589283][ T8296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.921631][ T8187] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.921726][ T8187] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.921788][ T8187] bridge_slave_0: entered allmulticast mode [ 182.954851][ T8187] bridge_slave_0: entered promiscuous mode [ 182.956051][ T8187] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.956114][ T8187] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.956169][ T8187] bridge_slave_1: entered allmulticast mode [ 182.992671][ T8187] bridge_slave_1: entered promiscuous mode [ 183.034069][ T8310] FAULT_INJECTION: forcing a failure. [ 183.034069][ T8310] name failslab, interval 1, probability 0, space 0, times 0 [ 183.034090][ T8310] CPU: 0 UID: 0 PID: 8310 Comm: syz.7.747 Tainted: G L syzkaller #0 PREEMPT(full) [ 183.034107][ T8310] Tainted: [L]=SOFTLOCKUP [ 183.034111][ T8310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 183.034119][ T8310] Call Trace: [ 183.034123][ T8310] [ 183.034128][ T8310] dump_stack_lvl+0x100/0x190 [ 183.034150][ T8310] should_fail_ex.cold+0x5/0xa [ 183.034167][ T8310] should_failslab+0xc2/0x120 [ 183.034183][ T8310] __kmalloc_cache_noprof+0x91/0x6d0 [ 183.034201][ T8310] ? afs_get_tree+0x380/0x1420 [ 183.034220][ T8310] afs_get_tree+0x380/0x1420 [ 183.034239][ T8310] vfs_get_tree+0x92/0x320 [ 183.034258][ T8310] path_mount+0x7d0/0x24c0 [ 183.034277][ T8310] ? __pfx_path_mount+0x10/0x10 [ 183.034293][ T8310] ? lockdep_hardirqs_on+0x7d/0x110 [ 183.034312][ T8310] ? putname+0xb1/0x110 [ 183.034326][ T8310] ? kmem_cache_free+0x127/0x6c0 [ 183.034349][ T8310] ? __x64_sys_mount+0x293/0x310 [ 183.034366][ T8310] __x64_sys_mount+0x293/0x310 [ 183.034383][ T8310] ? __pfx___x64_sys_mount+0x10/0x10 [ 183.034404][ T8310] do_syscall_64+0x123/0x790 [ 183.034422][ T8310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.034434][ T8310] RIP: 0033:0x7fc161b9e159 [ 183.034444][ T8310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.034455][ T8310] RSP: 002b:00007fc162aa7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 183.034466][ T8310] RAX: ffffffffffffffda RBX: 00007fc161e25fa0 RCX: 00007fc161b9e159 [ 183.034473][ T8310] RDX: 00002000000002c0 RSI: 0000200000000180 RDI: 0000000000000000 [ 183.034481][ T8310] RBP: 00007fc161c3506b R08: 0000200000000200 R09: 0000000000000000 [ 183.034487][ T8310] R10: 0000000002000400 R11: 0000000000000246 R12: 0000000000000000 [ 183.034494][ T8310] R13: 00007fc161e26038 R14: 00007fc161e25fa0 R15: 00007ffd318f1be8 [ 183.034509][ T8310] [ 183.348409][ T8187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.374442][ T8187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.512861][ T8187] team0: Port device team_slave_0 added [ 183.532965][ T8187] team0: Port device team_slave_1 added [ 183.604729][ T8317] netlink: 24 bytes leftover after parsing attributes in process `syz.7.748'. [ 183.611656][ T4922] Bluetooth: hci5: command tx timeout [ 183.829220][ T8187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.829231][ T8187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.829245][ T8187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.903481][ T8187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.903492][ T8187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.903507][ T8187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.998141][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 183.998152][ T30] audit: type=1400 audit(1790022412.877:601): avc: denied { write } for pid=8298 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 184.137607][ T8187] hsr_slave_0: entered promiscuous mode [ 184.148643][ T8187] hsr_slave_1: entered promiscuous mode [ 184.311326][ T30] audit: type=1400 audit(1790022413.197:602): avc: denied { write } for pid=8338 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 184.961778][ T8187] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 184.993544][ T8187] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 184.994156][ T8187] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 185.026418][ T8187] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 185.027047][ T8187] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 185.069269][ T8187] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 185.081173][ T8187] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 185.089303][ T8187] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 185.202012][ T30] audit: type=1400 audit(1790022414.087:603): avc: denied { write } for pid=8344 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 185.371605][ T8187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.411413][ T8187] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.418756][ T208] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.418818][ T208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.454485][ T1425] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.454537][ T1425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.515604][ T30] audit: type=1400 audit(1790022414.397:604): avc: denied { write } for pid=8369 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 185.605004][ T8187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 185.689508][ T4922] Bluetooth: hci5: command tx timeout [ 186.596641][ T8412] netlink: 4 bytes leftover after parsing attributes in process `syz.6.768'. [ 186.711799][ T30] audit: type=1400 audit(1790022415.597:605): avc: denied { write } for pid=8387 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.715410][ T8187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.008296][ T30] audit: type=1400 audit(1790022415.887:606): avc: denied { write } for pid=8420 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 187.115985][ T8333] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 187.306104][ T5268] 8021q: adding VLAN 0 to HW filter on device eth13 [ 187.583285][ T8187] veth0_vlan: entered promiscuous mode [ 187.630897][ T8187] veth1_vlan: entered promiscuous mode [ 187.726075][ T8187] veth0_macvtap: entered promiscuous mode [ 187.742919][ T8187] veth1_macvtap: entered promiscuous mode [ 187.813079][ T8187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.836011][ T8187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.879480][ T1165] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.879946][ T1165] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.879966][ T1165] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.879984][ T1165] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.918180][ T30] audit: type=1400 audit(1790022416.807:607): avc: denied { read } for pid=8443 comm="syz.6.774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 187.983720][ T30] audit: type=1400 audit(1790022416.867:608): avc: denied { getopt } for pid=8443 comm="syz.6.774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 188.204237][ T30] audit: type=1400 audit(1790022417.087:609): avc: denied { write } for pid=8434 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 188.337307][ T30] audit: type=1400 audit(1790022417.217:610): avc: denied { write } for pid=8454 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 188.582650][ T5268] 8021q: adding VLAN 0 to HW filter on device eth14 [ 188.802925][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.802939][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.907045][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.907076][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.987655][ T1458] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.987667][ T1458] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.182143][ T5610] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 189.183654][ T5610] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 189.187403][ T5610] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 189.216527][ T5610] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 189.232604][ T5610] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 189.427887][ T30] audit: type=1400 audit(1790022418.307:611): avc: denied { connect } for pid=8473 comm="syz.2.780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 189.508639][ T30] audit: type=1800 audit(1790022418.387:612): pid=8480 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.779" name="file1" dev="tmpfs" ino=278 res=0 errno=0 [ 189.563615][ T8476] input: syz0 as /devices/virtual/input/input23 [ 189.709896][ T9] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 189.861567][ T9] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 189.862593][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.862607][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 189.865987][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=249 [ 189.866001][ T9] usb 3-1: SerialNumber: syz [ 189.961562][ T9] usb 3-1: config 0 descriptor?? [ 189.968711][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 190.001331][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 190.037078][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 190.038041][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 190.038068][ T9] usb 3-1: media controller created [ 190.080512][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 190.190220][ T8477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.190441][ T8477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.197867][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 190.197930][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 190.225038][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input24 [ 190.252243][ T30] audit: type=1400 audit(1790022419.137:613): avc: denied { write } for pid=8464 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 190.259017][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 190.259029][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 190.417301][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 190.417326][ T9] dvb-usb: error while querying for an remote control event. [ 190.475522][ T9] usb 3-1: USB disconnect, device number 10 [ 190.655023][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 190.686491][ T30] audit: type=1400 audit(1790022419.567:614): avc: denied { write } for pid=8497 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 190.790912][ T8466] lo speed is unknown, defaulting to 1000 [ 190.837655][ T30] audit: type=1400 audit(1790022419.717:615): avc: denied { mount } for pid=8498 comm="syz.7.782" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 190.967999][ T30] audit: type=1400 audit(1790022419.847:616): avc: denied { unmount } for pid=7660 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 190.976088][ T5616] Bluetooth: hci4: command 0x0406 tx timeout [ 191.066435][ T5268] 8021q: adding VLAN 0 to HW filter on device eth15 [ 191.289960][ T4922] Bluetooth: hci0: command tx timeout [ 191.307945][ T7725] bridge0: port 3(syz_tun) entered disabled state [ 191.363545][ T7725] syz_tun (unregistering): left allmulticast mode [ 191.363560][ T7725] syz_tun (unregistering): left promiscuous mode [ 191.363601][ T7725] bridge0: port 3(syz_tun) entered disabled state [ 191.883380][ T8526] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 191.928172][ T208] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.270284][ T208] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.355672][ T30] audit: type=1400 audit(1790022421.237:617): avc: denied { write } for pid=8515 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 192.680848][ T30] audit: type=1400 audit(1790022421.567:618): avc: denied { write } for pid=8552 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 192.723553][ T208] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.783224][ T8555] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8555 comm=syz.6.797 [ 192.975216][ T208] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.017492][ T5268] 8021q: adding VLAN 0 to HW filter on device eth16 [ 193.117648][ T8466] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.128232][ T8466] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.128308][ T8466] bridge_slave_0: entered allmulticast mode [ 193.150991][ T8466] bridge_slave_0: entered promiscuous mode [ 193.163421][ T8466] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.168444][ T8466] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.168564][ T8466] bridge_slave_1: entered allmulticast mode [ 193.199048][ T8466] bridge_slave_1: entered promiscuous mode [ 193.336200][ T8466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.373298][ T4922] Bluetooth: hci0: command tx timeout [ 193.381099][ T8466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.471939][ T30] audit: type=1400 audit(1790022422.357:619): avc: denied { read } for pid=8568 comm="syz.2.800" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 193.475781][ T30] audit: type=1400 audit(1790022422.357:620): avc: denied { open } for pid=8568 comm="syz.2.800" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 193.552028][ T8466] team0: Port device team_slave_0 added [ 193.568985][ T8466] team0: Port device team_slave_1 added [ 193.642117][ T8571] fuse: Bad value for 'fd' [ 193.785827][ T8466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.785847][ T8466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 193.785861][ T8466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.857745][ T8466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.857756][ T8466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 193.857771][ T8466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.464896][ T8466] hsr_slave_0: entered promiscuous mode [ 194.465374][ T8466] hsr_slave_1: entered promiscuous mode [ 194.465717][ T8466] debugfs: 'hsr0' already exists in 'hsr' [ 194.465728][ T8466] Cannot create hsr debugfs directory [ 194.594529][ T8584] netlink: 4 bytes leftover after parsing attributes in process `syz.8.806'. [ 194.721871][ T8590] netlink: 20 bytes leftover after parsing attributes in process `syz.7.809'. [ 194.844767][ T208] bridge_slave_1: left allmulticast mode [ 194.844785][ T208] bridge_slave_1: left promiscuous mode [ 194.844896][ T208] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.873965][ T208] bridge_slave_0: left allmulticast mode [ 194.873981][ T208] bridge_slave_0: left promiscuous mode [ 194.874101][ T208] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.027916][ T8597] FAULT_INJECTION: forcing a failure. [ 195.027916][ T8597] name failslab, interval 1, probability 0, space 0, times 0 [ 195.027939][ T8597] CPU: 0 UID: 0 PID: 8597 Comm: syz.7.810 Tainted: G L syzkaller #0 PREEMPT(full) [ 195.027956][ T8597] Tainted: [L]=SOFTLOCKUP [ 195.027961][ T8597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 195.027969][ T8597] Call Trace: [ 195.027973][ T8597] [ 195.027978][ T8597] dump_stack_lvl+0x100/0x190 [ 195.028000][ T8597] should_fail_ex.cold+0x5/0xa [ 195.028017][ T8597] should_failslab+0xc2/0x120 [ 195.028033][ T8597] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 195.028048][ T8597] ? hashlimit_mt_check_common+0x947/0x1420 [ 195.028071][ T8597] kstrdup+0x51/0xe0 [ 195.028083][ T8597] hashlimit_mt_check_common+0x947/0x1420 [ 195.028106][ T8597] hashlimit_mt_check+0x71/0x90 [ 195.028122][ T8597] ? __pfx_hashlimit_mt_check+0x10/0x10 [ 195.028138][ T8597] xt_check_match+0x117/0x1c0 [ 195.028155][ T8597] find_check_entry.isra.0+0x323/0x990 [ 195.028176][ T8597] ? __pfx_find_check_entry.isra.0+0x10/0x10 [ 195.028199][ T8597] ? kasan_quarantine_put+0x104/0x240 [ 195.028211][ T8597] ? lockdep_hardirqs_on+0x7d/0x110 [ 195.028229][ T8597] ? translate_table+0xad0/0x1630 [ 195.028245][ T8597] ? translate_table+0xaf2/0x1630 [ 195.028262][ T8597] ? kfree+0x22b/0x6d0 [ 195.028277][ T8597] ? xt_check_table_hooks+0x206/0x330 [ 195.028294][ T8597] translate_table+0xbcd/0x1630 [ 195.028318][ T8597] ? __pfx_translate_table+0x10/0x10 [ 195.028341][ T8597] do_ipt_set_ctl+0x689/0xcf0 [ 195.028351][ T8597] ? nf_sockopt_find.isra.0+0x222/0x290 [ 195.028367][ T8597] ? nf_sockopt_find.isra.0+0x222/0x290 [ 195.028384][ T8597] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 195.028395][ T8597] ? __mutex_unlock_slowpath+0x35d/0x930 [ 195.028412][ T8597] ? sockopt_release_sock+0x5c/0x70 [ 195.028429][ T8597] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 195.028454][ T8597] ? nf_sockopt_find.isra.0+0x222/0x290 [ 195.028471][ T8597] nf_setsockopt+0x8d/0xf0 [ 195.028487][ T8597] ip_setsockopt+0xcb/0xf0 [ 195.028500][ T8597] udp_setsockopt+0x64/0xb0 [ 195.028515][ T8597] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 195.028534][ T8597] do_sock_setsockopt+0xf3/0x1d0 [ 195.028552][ T8597] __sys_setsockopt+0x195/0x220 [ 195.028569][ T8597] __x64_sys_setsockopt+0xbd/0x160 [ 195.028582][ T8597] ? do_syscall_64+0xae/0x790 [ 195.028598][ T8597] ? lockdep_hardirqs_on+0x7d/0x110 [ 195.028613][ T8597] do_syscall_64+0x123/0x790 [ 195.028631][ T8597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.028644][ T8597] RIP: 0033:0x7fc161b9e159 [ 195.028654][ T8597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.028665][ T8597] RSP: 002b:00007fc162aa7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 195.028676][ T8597] RAX: ffffffffffffffda RBX: 00007fc161e25fa0 RCX: 00007fc161b9e159 [ 195.028684][ T8597] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004 [ 195.028690][ T8597] RBP: 00007fc161c3506b R08: 00000000000003d0 R09: 0000000000000000 [ 195.028698][ T8597] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000000 [ 195.028705][ T8597] R13: 00007fc161e26038 R14: 00007fc161e25fa0 R15: 00007ffd318f1be8 [ 195.028722][ T8597] [ 195.449740][ T4922] Bluetooth: hci0: command tx timeout [ 195.721281][ T208] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 195.748273][ T208] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 195.749158][ T208] bond0 (unregistering): Released all slaves [ 196.039088][ T4922] Bluetooth: hci3: Invalid handle: 0xed88 > 0x0eff [ 196.487464][ T8631] netlink: 12 bytes leftover after parsing attributes in process `syz.2.821'. [ 196.511057][ T208] hsr_slave_0: left promiscuous mode [ 196.518614][ T208] hsr_slave_1: left promiscuous mode [ 196.519059][ T208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.519071][ T208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.550275][ T208] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.550290][ T208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.628941][ T208] veth1_macvtap: left promiscuous mode [ 196.628966][ T208] veth0_macvtap: left promiscuous mode [ 196.629038][ T208] veth1_vlan: left promiscuous mode [ 196.629082][ T208] veth0_vlan: left promiscuous mode [ 196.887304][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 196.887316][ T30] audit: type=1400 audit(1790022425.767:622): avc: denied { write } for pid=8615 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 197.159196][ T30] audit: type=1400 audit(1790022426.037:623): avc: denied { write } for pid=8646 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 197.532019][ T4922] Bluetooth: hci0: command tx timeout [ 197.656504][ T8653] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 197.771508][ T208] team0 (unregistering): Port device team_slave_1 removed [ 197.813180][ T208] team0 (unregistering): Port device team_slave_0 removed [ 198.116799][ T5268] 8021q: adding VLAN 0 to HW filter on device eth17 [ 198.361705][ T8666] FAULT_INJECTION: forcing a failure. [ 198.361705][ T8666] name failslab, interval 1, probability 0, space 0, times 0 [ 198.361728][ T8666] CPU: 0 UID: 0 PID: 8666 Comm: syz.2.832 Tainted: G L syzkaller #0 PREEMPT(full) [ 198.361745][ T8666] Tainted: [L]=SOFTLOCKUP [ 198.361749][ T8666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 198.361757][ T8666] Call Trace: [ 198.361761][ T8666] [ 198.361767][ T8666] dump_stack_lvl+0x100/0x190 [ 198.361789][ T8666] should_fail_ex.cold+0x5/0xa [ 198.361806][ T8666] should_failslab+0xc2/0x120 [ 198.361823][ T8666] __kvmalloc_node_noprof+0x113/0x9b0 [ 198.361838][ T8666] ? bpf_check+0x1b8e/0xa980 [ 198.361856][ T8666] bpf_check+0x1b8e/0xa980 [ 198.361871][ T8666] ? __css_rstat_updated+0x1ce/0x590 [ 198.361885][ T8666] ? __lock_acquire+0x5c0/0x1f40 [ 198.361898][ T8666] ? __pfx___css_rstat_updated+0x10/0x10 [ 198.361922][ T8666] ? __pfx_bpf_check+0x10/0x10 [ 198.361937][ T8666] ? lock_acquire+0x1d1/0x380 [ 198.361949][ T8666] ? bpf_prog_load+0x1a09/0x2a80 [ 198.361964][ T8666] ? find_held_lock+0x2b/0x80 [ 198.361979][ T8666] ? bpf_prog_load+0x1a09/0x2a80 [ 198.361997][ T8666] ? __asan_memset+0x23/0x50 [ 198.362010][ T8666] ? bpf_prog_load+0x1ac3/0x2a80 [ 198.362025][ T8666] bpf_prog_load+0x1ac3/0x2a80 [ 198.362052][ T8666] ? __pfx_bpf_prog_load+0x10/0x10 [ 198.362082][ T8666] __sys_bpf+0x1f46/0x4a30 [ 198.362098][ T8666] ? __pfx___sys_bpf+0x10/0x10 [ 198.362109][ T8666] ? find_held_lock+0x2b/0x80 [ 198.362125][ T8666] ? futex_wake+0x4ea/0x5e0 [ 198.362147][ T8666] ? __lock_acquire+0x5c0/0x1f40 [ 198.362160][ T8666] ? do_vfs_ioctl+0x226/0x13e0 [ 198.362181][ T8666] ? __x64_sys_futex+0x34f/0x4d0 [ 198.362196][ T8666] ? __x64_sys_futex+0x358/0x4d0 [ 198.362213][ T8666] ? xfd_validate_state+0x129/0x190 [ 198.362228][ T8666] ? __x64_sys_bpf+0xce/0x140 [ 198.362239][ T8666] __x64_sys_bpf+0xce/0x140 [ 198.362251][ T8666] ? do_syscall_64+0xae/0x790 [ 198.362268][ T8666] do_syscall_64+0x123/0x790 [ 198.362286][ T8666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.362298][ T8666] RIP: 0033:0x7f54b7b9e159 [ 198.362308][ T8666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.362319][ T8666] RSP: 002b:00007f54b8aa1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 198.362331][ T8666] RAX: ffffffffffffffda RBX: 00007f54b7e25fa0 RCX: 00007f54b7b9e159 [ 198.362338][ T8666] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 198.362345][ T8666] RBP: 00007f54b7c3506b R08: 0000000000000000 R09: 0000000000000000 [ 198.362352][ T8666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 198.362359][ T8666] R13: 00007f54b7e26038 R14: 00007f54b7e25fa0 R15: 00007fff1752b3b8 [ 198.362376][ T8666] [ 198.721397][ T8669] netlink: 4 bytes leftover after parsing attributes in process `syz.7.831'. [ 199.033142][ T8466] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 199.051735][ T8466] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 199.052166][ T8466] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 199.076960][ T8466] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 199.091153][ T8466] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 199.125998][ T8466] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 199.144032][ T8466] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 199.171590][ T8466] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 199.536586][ T8466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.581240][ T8466] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.607615][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.607667][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.653279][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.653331][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.831363][ T30] audit: type=1400 audit(1790022428.717:624): avc: denied { write } for pid=8672 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.077988][ T30] audit: type=1400 audit(1790022428.957:625): avc: denied { write } for pid=8713 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.290595][ T5268] 8021q: adding VLAN 0 to HW filter on device eth18 [ 200.449857][ T2273] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 200.599552][ T2273] usb 9-1: Using ep0 maxpacket: 16 [ 200.601765][ T2273] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 200.603367][ T2273] usb 9-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.603386][ T2273] usb 9-1: config 0 interface 0 has no altsetting 0 [ 200.603404][ T2273] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.604789][ T2273] usb 9-1: config 0 descriptor?? [ 201.075586][ T8466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.116156][ T2273] mcp2221 0003:04D8:00DD.0009: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.8-1/input0 [ 201.629025][ T2273] usb 9-1: USB disconnect, device number 2 [ 201.680410][ T30] audit: type=1400 audit(1790022430.567:626): avc: denied { write } for pid=8724 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.970649][ T30] audit: type=1400 audit(1790022430.857:627): avc: denied { write } for pid=8759 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 202.116353][ T8466] veth0_vlan: entered promiscuous mode [ 202.148980][ T8466] veth1_vlan: entered promiscuous mode [ 202.188152][ T5268] 8021q: adding VLAN 0 to HW filter on device eth19 [ 202.262878][ T8466] veth0_macvtap: entered promiscuous mode [ 202.283431][ T8466] veth1_macvtap: entered promiscuous mode [ 202.338901][ T8466] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.358512][ T8466] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.570246][ T208] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.570487][ T208] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.570508][ T208] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.570525][ T208] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.736322][ T208] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.736335][ T208] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.926739][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.926754][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.957013][ T8783] netlink: 'syz.8.854': attribute type 1 has an invalid length. [ 202.957026][ T8783] netlink: 224 bytes leftover after parsing attributes in process `syz.8.854'. [ 203.501969][ T30] audit: type=1400 audit(1790022432.387:628): avc: denied { write } for pid=8774 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.775281][ T30] audit: type=1400 audit(1790022432.657:629): avc: denied { write } for pid=8805 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.967019][ T5268] 8021q: adding VLAN 0 to HW filter on device eth20 [ 204.882488][ T8822] FAULT_INJECTION: forcing a failure. [ 204.882488][ T8822] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.882513][ T8822] CPU: 0 UID: 0 PID: 8822 Comm: syz.9.863 Tainted: G L syzkaller #0 PREEMPT(full) [ 204.882531][ T8822] Tainted: [L]=SOFTLOCKUP [ 204.882535][ T8822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 204.882543][ T8822] Call Trace: [ 204.882547][ T8822] [ 204.882552][ T8822] dump_stack_lvl+0x100/0x190 [ 204.882573][ T8822] should_fail_ex.cold+0x5/0xa [ 204.882591][ T8822] _copy_from_user+0x2e/0xd0 [ 204.882605][ T8822] restore_altstack+0x98/0x170 [ 204.882623][ T8822] ? __pfx_restore_altstack+0x10/0x10 [ 204.882639][ T8822] ? _raw_spin_unlock_irq+0x23/0x50 [ 204.882655][ T8822] ? lockdep_hardirqs_on+0x7d/0x110 [ 204.882671][ T8822] ? _raw_spin_unlock_irq+0x2e/0x50 [ 204.882687][ T8822] __do_sys_rt_sigreturn+0x1ab/0x2c0 [ 204.882705][ T8822] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 204.882723][ T8822] ? trace_hardirqs_off+0x70/0x170 [ 204.882741][ T8822] do_syscall_64+0x123/0x790 [ 204.882760][ T8822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.882771][ T8822] RIP: 0033:0x7f425413f4d9 [ 204.882781][ T8822] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 204.882792][ T8822] RSP: 002b:00007f4255101340 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 204.882808][ T8822] RAX: ffffffffffffffda RBX: 00007f4254425fa0 RCX: 00007f425413f4d9 [ 204.882816][ T8822] RDX: 00007f4255101340 RSI: 00007f4255101470 RDI: 0000000000000011 [ 204.882824][ T8822] RBP: 00007f425423506b R08: 0000000000000000 R09: 0000000000000000 [ 204.882832][ T8822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 204.882839][ T8822] R13: 00007f4254426038 R14: 00007f4254425fa0 R15: 00007fff39cccf08 [ 204.882855][ T8822] [ 205.302401][ T8833] Bluetooth: MGMT ver 1.23 [ 205.455611][ T8837] xs_local_setup_socket: unhandled error (91) connecting to /var/run/gssproxy.sock [ 205.780744][ T2273] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 205.935068][ T2273] usb 3-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 205.937179][ T2273] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 205.937203][ T2273] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.939111][ T8843] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 205.942197][ T2273] opticon 3-1:1.0: opticon converter detected [ 205.996081][ T2273] usb 3-1: opticon converter now attached to ttyUSB0 [ 206.479538][ T10] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 206.629587][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 206.641035][ T10] usb 7-1: New USB device found, idVendor=1b1c, idProduct=0a17, bcdDevice= 0.00 [ 206.641923][ T10] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.641940][ T10] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.641953][ T10] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 206.641968][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 206.641985][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.658784][ T10] usb 7-1: config 0 descriptor?? [ 206.737836][ T10] usbhid 7-1:0.0: fixing wrong optional hid class descriptors count [ 206.869762][ T5702] usb 3-1: USB disconnect, device number 11 [ 206.877694][ T5702] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 206.878035][ T5702] opticon 3-1:1.0: device disconnected [ 207.043408][ T30] audit: type=1400 audit(1790022435.927:630): avc: denied { write } for pid=8859 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 207.229289][ T10] input: HID 1b1c:0a17 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:1B1C:0A17.000A/input/input25 [ 207.404494][ T30] audit: type=1400 audit(1790022436.287:631): avc: denied { write } for pid=8884 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 207.506591][ T10] hid-corsair-void 0003:1B1C:0A17.000A: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 1b1c:0a17] on usb-dummy_hcd.6-1/input0 [ 207.538654][ T10] usb 7-1: USB disconnect, device number 7 [ 207.742111][ T8890] fido_id[8890]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 208.291228][ T8911] fuse: Bad value for 'fd' [ 208.467441][ T8909] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.468078][ T8909] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.783820][ T8889] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 208.919282][ T30] audit: type=1400 audit(1790022437.797:632): avc: denied { append } for pid=8887 comm="syz.8.881" name="trigger" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 209.000745][ T8909] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.023955][ T8909] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.535317][ T10] lo speed is unknown, defaulting to 1000 [ 209.535351][ T10] syz_device_name_32_chars_1234567: Port: 1 Link DOWN [ 209.546352][ T1483] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.546803][ T1483] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.546824][ T1483] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.546842][ T1483] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.876163][ T8936] lo speed is unknown, defaulting to 1000 [ 210.582375][ T30] audit: type=1400 audit(1790022439.467:633): avc: denied { write } for pid=8934 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.654045][ T8961] overlayfs: failed to clone upperpath [ 210.942136][ T30] audit: type=1400 audit(1790022439.807:634): avc: denied { write } for pid=8966 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.337706][ T30] audit: type=1400 audit(1790022440.217:635): avc: denied { map } for pid=8979 comm="syz.6.909" path="socket:[29407]" dev="sockfs" ino=29407 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 211.337739][ T30] audit: type=1400 audit(1790022440.217:636): avc: denied { write } for pid=8979 comm="syz.6.909" path="socket:[29407]" dev="sockfs" ino=29407 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 211.616184][ T30] audit: type=1400 audit(1790022440.497:637): avc: denied { create } for pid=8986 comm="syz.6.911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 211.666913][ T30] audit: type=1400 audit(1790022440.547:638): avc: denied { connect } for pid=8986 comm="syz.6.911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 211.668843][ T30] audit: type=1400 audit(1790022440.547:639): avc: denied { bind } for pid=8986 comm="syz.6.911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 211.737302][ T8988] FAULT_INJECTION: forcing a failure. [ 211.737302][ T8988] name failslab, interval 1, probability 0, space 0, times 0 [ 211.737323][ T8988] CPU: 0 UID: 0 PID: 8988 Comm: syz.6.911 Tainted: G L syzkaller #0 PREEMPT(full) [ 211.737340][ T8988] Tainted: [L]=SOFTLOCKUP [ 211.737344][ T8988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 211.737352][ T8988] Call Trace: [ 211.737356][ T8988] [ 211.737361][ T8988] dump_stack_lvl+0x100/0x190 [ 211.737384][ T8988] should_fail_ex.cold+0x5/0xa [ 211.737402][ T8988] should_failslab+0xc2/0x120 [ 211.737417][ T8988] __kmalloc_cache_node_noprof+0x94/0x720 [ 211.737431][ T8988] ? lockdep_init_map_type+0x5c/0x250 [ 211.737446][ T8988] ? __alloc_workqueue+0x1211/0x1950 [ 211.737464][ T8988] __alloc_workqueue+0x1211/0x1950 [ 211.737490][ T8988] alloc_workqueue_noprof+0xc7/0x130 [ 211.737506][ T8988] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 211.737524][ T8988] ? lockdep_init_map_type+0x5c/0x250 [ 211.737538][ T8988] ? lockdep_init_map_type+0x5c/0x250 [ 211.737554][ T8988] __rds_conn_create+0x1234/0x25a0 [ 211.737579][ T8988] ? __pfx___rds_conn_create+0x10/0x10 [ 211.737595][ T8988] ? trace_kmalloc+0xeb/0x110 [ 211.737609][ T8988] ? __kasan_kmalloc+0xaa/0xb0 [ 211.737622][ T8988] ? lockdep_init_map_type+0x5c/0x250 [ 211.737637][ T8988] rds_conn_create_outgoing+0x44/0x60 [ 211.737660][ T8988] rds_sendmsg+0x10da/0x34d0 [ 211.737673][ T8988] ? trace_sched_exit_tp+0x120/0x160 [ 211.737696][ T8988] ? __pfx_rds_sendmsg+0x10/0x10 [ 211.737719][ T8988] ? selinux_socket_sendmsg+0x198/0x2f0 [ 211.737735][ T8988] ? ____sys_sendmsg+0xa4d/0xbe0 [ 211.737752][ T8988] ____sys_sendmsg+0xa4d/0xbe0 [ 211.737770][ T8988] ? __pfx_rds_sendmsg+0x10/0x10 [ 211.737784][ T8988] ? __pfx_____sys_sendmsg+0x10/0x10 [ 211.737808][ T8988] ___sys_sendmsg+0x190/0x1e0 [ 211.737820][ T8988] ? __pfx____sys_sendmsg+0x10/0x10 [ 211.737832][ T8988] ? futex_wait+0x11e/0x370 [ 211.737849][ T8988] ? find_held_lock+0x2b/0x80 [ 211.737875][ T8988] __sys_sendmsg+0x160/0x210 [ 211.737890][ T8988] ? __pfx___sys_sendmsg+0x10/0x10 [ 211.737912][ T8988] do_syscall_64+0x123/0x790 [ 211.737931][ T8988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.737944][ T8988] RIP: 0033:0x7f7f3219e159 [ 211.737954][ T8988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.737965][ T8988] RSP: 002b:00007f7f33107028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 211.737977][ T8988] RAX: ffffffffffffffda RBX: 00007f7f32425fa0 RCX: 00007f7f3219e159 [ 211.737985][ T8988] RDX: 0000000000000040 RSI: 00002000000002c0 RDI: 0000000000000003 [ 211.737992][ T8988] RBP: 00007f7f3223506b R08: 0000000000000000 R09: 0000000000000000 [ 211.737998][ T8988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 211.738005][ T8988] R13: 00007f7f32426038 R14: 00007f7f32425fa0 R15: 00007ffff129c898 [ 211.738021][ T8988] [ 211.974033][ T8987] syzkaller1: entered promiscuous mode [ 211.974046][ T8987] syzkaller1: entered allmulticast mode [ 212.446713][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 212.446725][ T30] audit: type=1400 audit(1790022441.327:641): avc: denied { write } for pid=8977 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.624085][ T30] audit: type=1400 audit(1790022441.507:642): avc: denied { write } for pid=9007 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.888347][ T30] audit: type=1400 audit(1790022441.767:643): avc: denied { ioctl } for pid=9019 comm="syz.7.917" path="socket:[29494]" dev="sockfs" ino=29494 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 213.423236][ T9029] futex_wake_op: syz.2.915 tries to shift op by 144; fix this program [ 213.423869][ T9029] futex_wake_op: syz.2.915 tries to shift op by 144; fix this program [ 213.708567][ T9038] netlink: 'syz.7.922': attribute type 1 has an invalid length. [ 213.758774][ T9038] 8021q: adding VLAN 0 to HW filter on device bond1 [ 213.840388][ T9038] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 213.892762][ T1483] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 213.973040][ T9038] bond1: (slave dummy0): Enslaving as a backup interface with an up link [ 214.014651][ T9038] netlink: 'syz.7.922': attribute type 10 has an invalid length. [ 214.014664][ T9038] netlink: 40 bytes leftover after parsing attributes in process `syz.7.922'. [ 214.014705][ T9038] dummy0: entered promiscuous mode [ 214.017194][ T9038] bond1: (slave dummy0): Releasing backup interface [ 214.049302][ T1483] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 214.091687][ T1483] IPVS: starting estimator thread 0... [ 214.097517][ T9041] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 214.179982][ T9045] IPVS: using max 62 ests per chain, 148800 per kthread [ 214.396031][ T9055] futex_wake_op: syz.2.928 tries to shift op by -1; fix this program [ 214.396124][ T9055] futex_wake_op: syz.2.928 tries to shift op by -1; fix this program [ 214.428439][ T9055] EXT4-fs warning (device sda1): ext4_group_extend:1869: need to use ext2online to resize further [ 219.759352][ C0] sched: DL replenish lagged too much [ 252.361701][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 252.374570][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.084147][ T5608] Bluetooth: hci1: command 0x0406 tx timeout [ 284.241830][ T5616] Bluetooth: hci3: command 0x0406 tx timeout [ 304.338515][ T5610] Bluetooth: hci5: command 0x0406 tx timeout [ 311.927574][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.933341][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 313.858507][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 368.469265][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 368.476242][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P9058/1:b..l P4973/1:b..l P9056/1:b..l [ 368.488820][ C0] rcu: (detected by 0, t=10502 jiffies, g=49233, q=1317071 ncpus=1) [ 368.496854][ C0] task:syz.6.929 state:R running task stack:25560 pid:9056 tgid:9054 ppid:7101 task_flags:0x40054c flags:0x00080002 [ 368.510310][ C0] Call Trace: [ 368.513562][ C0] [ 368.516473][ C0] __schedule+0x1259/0x6920 [ 368.520974][ C0] ? page_table_check_clear+0x119/0x540 [ 368.526499][ C0] ? __pfx___schedule+0x10/0x10 [ 368.531329][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 368.536690][ C0] preempt_schedule_common+0x3c/0xb0 [ 368.541959][ C0] preempt_schedule_thunk+0x16/0x40 [ 368.547133][ C0] _raw_spin_unlock+0x3e/0x50 [ 368.551795][ C0] __zap_vma_range+0x16b0/0x48e0 [ 368.556719][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 368.561976][ C0] ? mas_next_slot+0xc05/0x13a0 [ 368.566817][ C0] unmap_vmas+0x299/0x5f0 [ 368.571121][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 368.575943][ C0] ? mas_next_slot+0xc05/0x13a0 [ 368.580770][ C0] exit_mmap+0x1ef/0xa00 [ 368.584994][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 368.589727][ C0] ? rcu_is_watching+0x13/0xc0 [ 368.594470][ C0] ? find_held_lock+0x2b/0x80 [ 368.599133][ C0] ? uprobe_clear_state+0x5f/0x250 [ 368.604220][ C0] ? __mutex_unlock_slowpath+0x35d/0x930 [ 368.609840][ C0] __mmput+0x12a/0x410 [ 368.613893][ C0] mmput+0x67/0x80 [ 368.617584][ C0] do_exit+0x8b1/0x2ae0 [ 368.621713][ C0] ? rcu_is_watching+0x13/0xc0 [ 368.626452][ C0] ? __pfx_do_exit+0x10/0x10 [ 368.631014][ C0] ? do_raw_spin_lock+0x128/0x260 [ 368.636013][ C0] ? find_held_lock+0x2b/0x80 [ 368.640663][ C0] ? get_signal+0x7e0/0x21e0 [ 368.645227][ C0] do_group_exit+0xd5/0x2a0 [ 368.649705][ C0] get_signal+0x1ec7/0x21e0 [ 368.654193][ C0] ? up_write+0x2dc/0x5b0 [ 368.658497][ C0] ? __pfx_get_signal+0x10/0x10 [ 368.663318][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 368.668414][ C0] arch_do_signal_or_restart+0x91/0x7e0 [ 368.673938][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 368.680069][ C0] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 368.685341][ C0] exit_to_user_mode_loop+0x139/0x700 [ 368.690685][ C0] ? rcu_is_watching+0x13/0xc0 [ 368.695423][ C0] do_syscall_64+0x661/0x790 [ 368.699991][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.705864][ C0] RIP: 0033:0x7f7f3219e159 [ 368.710261][ C0] RSP: 002b:00007f7f33107028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 368.718659][ C0] RAX: 0000200000000000 RBX: 00007f7f32425fa0 RCX: 00007f7f3219e159 [ 368.726605][ C0] RDX: 0000000000000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 368.734546][ C0] RBP: 00007f7f3223506b R08: ffffffffffffffff R09: 0000000000000000 [ 368.742486][ C0] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 368.750429][ C0] R13: 00007f7f32426038 R14: 00007f7f32425fa0 R15: 00007ffff129c898 [ 368.758379][ C0] [ 368.761369][ C0] task:udevd state:R running task stack:23400 pid:4973 tgid:4973 ppid:1 task_flags:0x400140 flags:0x00080000 [ 368.774812][ C0] Call Trace: [ 368.778063][ C0] [ 368.780968][ C0] __schedule+0x1259/0x6920 [ 368.785449][ C0] ? find_held_lock+0x2b/0x80 [ 368.790112][ C0] ? __pfx___schedule+0x10/0x10 [ 368.794938][ C0] ? mark_held_locks+0x40/0x70 [ 368.799678][ C0] preempt_schedule_irq+0x4e/0x90 [ 368.804677][ C0] irqentry_exit+0x205/0xa10 [ 368.809248][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 368.815213][ C0] RIP: 0010:lock_acquire+0x5e/0x380 [ 368.820404][ C0] Code: 05 0f 7e a5 12 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 1e f2 5d 0f 0f 82 c9 02 00 00 8b 35 be 23 5e 0f 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 ad 7d a5 12 0f 85 09 03 00 00 48 83 c4 [ 368.839983][ C0] RSP: 0018:ffffc900034d7168 EFLAGS: 00000206 [ 368.846025][ C0] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000200 [ 368.853978][ C0] RDX: 0000000000000000 RSI: ffffffff8e366aae RDI: ffffffff8c623580 [ 368.861931][ C0] RBP: ffffffff8edec4e0 R08: 00000000161dbbed R09: 0000000000000007 [ 368.869883][ C0] R10: 0000000000000200 R11: 0000000000000001 R12: 0000000000000002 [ 368.877826][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 368.885778][ C0] ? unwind_next_frame+0x3be/0x2090 [ 368.890953][ C0] ? unwind_next_frame+0x3be/0x2090 [ 368.896125][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 368.902262][ C0] unwind_next_frame+0xd1/0x2090 [ 368.907189][ C0] ? unwind_next_frame+0xbd/0x2090 [ 368.912274][ C0] ? kasan_save_stack+0x30/0x50 [ 368.917099][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 368.923221][ C0] arch_stack_walk+0x94/0xf0 [ 368.927786][ C0] ? kasan_save_stack+0x30/0x50 [ 368.932612][ C0] stack_trace_save+0x8e/0xc0 [ 368.937260][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 368.942603][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 368.947511][ C0] kasan_save_stack+0x30/0x50 [ 368.952158][ C0] ? kasan_save_stack+0x30/0x50 [ 368.957002][ C0] kasan_save_track+0x14/0x30 [ 368.961653][ C0] __kasan_slab_alloc+0x89/0x90 [ 368.966477][ C0] kmem_cache_alloc_noprof+0x269/0x6a0 [ 368.971909][ C0] ? kmem_alloc_batch+0x49/0x170 [ 368.976819][ C0] kmem_alloc_batch+0x49/0x170 [ 368.981557][ C0] debug_objects_fill_pool+0x24d/0x590 [ 368.986987][ C0] ? __pfx_debug_objects_fill_pool+0x10/0x10 [ 368.992940][ C0] ? mark_held_locks+0x40/0x70 [ 368.997674][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 369.003455][ C0] ? __pfx_rcu_free_slab+0x10/0x10 [ 369.008539][ C0] debug_object_activate+0x103/0x4b0 [ 369.013798][ C0] ? do_raw_spin_lock+0x128/0x260 [ 369.018797][ C0] ? __pfx_debug_object_activate+0x10/0x10 [ 369.024577][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 369.030358][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 369.035542][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 369.041332][ C0] ? __pfx_rcu_free_slab+0x10/0x10 [ 369.046412][ C0] __call_rcu_common.constprop.0+0x35/0x9b0 [ 369.052281][ C0] qlist_free_all+0x47/0xf0 [ 369.056769][ C0] kasan_quarantine_reduce+0x1a0/0x1f0 [ 369.062201][ C0] __kasan_kmalloc+0x8a/0xb0 [ 369.066766][ C0] __kmalloc_noprof+0x32f/0x840 [ 369.071588][ C0] ? tomoyo_encode2+0xfb/0x3c0 [ 369.076331][ C0] tomoyo_encode2+0xfb/0x3c0 [ 369.080897][ C0] tomoyo_encode+0x29/0x50 [ 369.085285][ C0] tomoyo_realpath_from_path+0x18c/0x690 [ 369.090893][ C0] tomoyo_path_perm+0x276/0x460 [ 369.095712][ C0] ? tomoyo_path_perm+0x262/0x460 [ 369.100768][ C0] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 369.106123][ C0] ? filename_lookup+0x3bb/0x590 [ 369.111046][ C0] ? __might_fault+0xc5/0x140 [ 369.115695][ C0] ? find_held_lock+0x2b/0x80 [ 369.120344][ C0] ? __might_fault+0xc5/0x140 [ 369.125007][ C0] ? __might_fault+0xc5/0x140 [ 369.129659][ C0] security_inode_getattr+0x116/0x280 [ 369.135002][ C0] vfs_statx+0x11f/0x3f0 [ 369.139222][ C0] ? __pfx_vfs_statx+0x10/0x10 [ 369.143959][ C0] ? do_getname+0x191/0x390 [ 369.148470][ C0] vfs_fstatat+0x77/0xe0 [ 369.152703][ C0] __do_sys_newfstatat+0x9d/0x120 [ 369.157712][ C0] ? __pfx___do_sys_newfstatat+0x10/0x10 [ 369.163336][ C0] ? exit_to_user_mode_loop+0x166/0x700 [ 369.168866][ C0] do_syscall_64+0x123/0x790 [ 369.173440][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.179310][ C0] RIP: 0033:0x7f2733311b0a [ 369.183704][ C0] RSP: 002b:00007ffc5599e648 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 369.192091][ C0] RAX: ffffffffffffffda RBX: 0000556133769420 RCX: 00007f2733311b0a [ 369.200052][ C0] RDX: 00007ffc5599e650 RSI: 0000556133757ef3 RDI: 00000000ffffff9c [ 369.208008][ C0] RBP: 00005561465d6668 R08: 00063478c1c69200 R09: 0000000000000001 [ 369.215974][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.223920][ C0] R13: 00007ffc5599e650 R14: 0000000000000000 R15: 00063478c1c69200 [ 369.231880][ C0] [ 369.234886][ C0] task:syz.9.930 state:R running task stack:27128 pid:9058 tgid:9058 ppid:8466 task_flags:0x40044c flags:0x00080002 [ 369.248342][ C0] Call Trace: [ 369.251601][ C0] [ 369.254508][ C0] __schedule+0x1259/0x6920 [ 369.258995][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 369.265127][ C0] ? arch_stack_walk+0xa6/0xf0 [ 369.269869][ C0] ? __pfx___schedule+0x10/0x10 [ 369.274702][ C0] ? mark_held_locks+0x40/0x70 [ 369.279440][ C0] preempt_schedule_irq+0x4e/0x90 [ 369.284442][ C0] irqentry_exit+0x205/0xa10 [ 369.289014][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 369.294983][ C0] RIP: 0010:lock_acquire+0x5e/0x380 [ 369.300155][ C0] Code: 05 0f 7e a5 12 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 1e f2 5d 0f 0f 82 c9 02 00 00 8b 35 be 23 5e 0f 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 ad 7d a5 12 0f 85 09 03 00 00 48 83 c4 [ 369.319732][ C0] RSP: 0018:ffffc900041773a0 EFLAGS: 00000206 [ 369.325771][ C0] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000200 [ 369.333724][ C0] RDX: 0000000000000000 RSI: ffffffff8e366aae RDI: ffffffff8c623580 [ 369.341665][ C0] RBP: ffffffff8edec4e0 R08: 00000000d63968bf R09: 0000000000000007 [ 369.349610][ C0] R10: 0000000000000200 R11: 0000000000000001 R12: 0000000000000002 [ 369.357550][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 369.365501][ C0] ? unwind_next_frame+0x3be/0x2090 [ 369.370680][ C0] ? unwind_next_frame+0x3be/0x2090 [ 369.375862][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 369.382001][ C0] unwind_next_frame+0xd1/0x2090 [ 369.386919][ C0] ? unwind_next_frame+0xbd/0x2090 [ 369.392005][ C0] ? __mmput+0x12a/0x410 [ 369.396222][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 369.402346][ C0] arch_stack_walk+0x94/0xf0 [ 369.406917][ C0] ? __mmput+0x12a/0x410 [ 369.411134][ C0] ? tear_down_vmas+0x2a5/0x610 [ 369.415973][ C0] stack_trace_save+0x8e/0xc0 [ 369.420625][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 369.425984][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 369.430899][ C0] kasan_save_stack+0x30/0x50 [ 369.435730][ C0] ? kasan_save_stack+0x30/0x50 [ 369.440557][ C0] ? kasan_record_aux_stack+0xa7/0xc0 [ 369.445907][ C0] ? __call_rcu_common.constprop.0+0xa5/0x9b0 [ 369.451950][ C0] ? kmem_cache_free+0x43b/0x6c0 [ 369.456867][ C0] ? tear_down_vmas+0x2a5/0x610 [ 369.461692][ C0] ? exit_mmap+0x469/0xa00 [ 369.466083][ C0] ? __mmput+0x12a/0x410 [ 369.470332][ C0] kasan_record_aux_stack+0xa7/0xc0 [ 369.475515][ C0] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 369.481645][ C0] __call_rcu_common.constprop.0+0xa5/0x9b0 [ 369.487523][ C0] ? tear_down_vmas+0x2a5/0x610 [ 369.492347][ C0] kmem_cache_free+0x43b/0x6c0 [ 369.497109][ C0] tear_down_vmas+0x2a5/0x610 [ 369.501776][ C0] exit_mmap+0x469/0xa00 [ 369.506004][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 369.510760][ C0] ? rcu_is_watching+0x13/0xc0 [ 369.515510][ C0] ? find_held_lock+0x2b/0x80 [ 369.520185][ C0] ? uprobe_clear_state+0x5f/0x250 [ 369.525278][ C0] ? __mutex_unlock_slowpath+0x35d/0x930 [ 369.530900][ C0] __mmput+0x12a/0x410 [ 369.534946][ C0] mmput+0x67/0x80 [ 369.538639][ C0] do_exit+0x8b1/0x2ae0 [ 369.542780][ C0] ? __pfx_do_exit+0x10/0x10 [ 369.547357][ C0] ? do_raw_spin_lock+0x128/0x260 [ 369.552355][ C0] ? find_held_lock+0x2b/0x80 [ 369.557006][ C0] ? get_signal+0x7e0/0x21e0 [ 369.561569][ C0] do_group_exit+0xd5/0x2a0 [ 369.566048][ C0] get_signal+0x1ec7/0x21e0 [ 369.570532][ C0] ? __pfx_get_signal+0x10/0x10 [ 369.575356][ C0] arch_do_signal_or_restart+0x91/0x7e0 [ 369.580891][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 369.587030][ C0] exit_to_user_mode_loop+0x139/0x700 [ 369.592375][ C0] ? rcu_is_watching+0x13/0xc0 [ 369.597118][ C0] do_syscall_64+0x661/0x790 [ 369.601686][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.607552][ C0] RIP: 0033:0x7f425419ef49 [ 369.611938][ C0] RSP: 002b:00007fff39cccdc8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 369.620320][ C0] RAX: fffffffffffffffc RBX: 00007f425415a4e0 RCX: 00007f425419ef49 [ 369.628263][ C0] RDX: 00007f425415a4e0 RSI: 0000000000000058 RDI: 00007fff39ccce20 [ 369.636203][ C0] RBP: 00007f42550e16c0 R08: 00007f42550e16c0 R09: 00007fff39cccf07 [ 369.644143][ C0] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffe8 [ 369.652084][ C0] R13: 000000000000006e R14: 00007fff39ccce20 R15: 00007fff39cccf08 [ 369.660034][ C0] [ 369.663039][ C0] rcu: rcu_preempt kthread starved for 637 jiffies! g49233 f0x2 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0 [ 369.673853][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 369.683789][ C0] rcu: RCU grace-period kthread stack dump: [ 369.689644][ C0] task:rcu_preempt state:R running task stack:27400 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 369.703090][ C0] Call Trace: [ 369.706355][ C0] [ 369.709263][ C0] __schedule+0x1259/0x6920 [ 369.713745][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 369.718660][ C0] ? lock_acquire+0x1d1/0x380 [ 369.723306][ C0] ? __pfx___schedule+0x10/0x10 [ 369.728129][ C0] ? find_held_lock+0x2b/0x80 [ 369.732781][ C0] ? schedule+0x225/0x2c0 [ 369.737086][ C0] schedule+0xdd/0x2c0 [ 369.741129][ C0] schedule_timeout+0x127/0x280 [ 369.745953][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 369.751312][ C0] ? __pfx_process_timeout+0x10/0x10 [ 369.756581][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 369.762373][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 369.767804][ C0] rcu_gp_fqs_loop+0x1a9/0x8f0 [ 369.772540][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 369.777796][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 369.782706][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 369.787880][ C0] ? rcu_is_watching+0x13/0xc0 [ 369.792617][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 369.798409][ C0] rcu_gp_kthread+0x17a/0x220 [ 369.803058][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 369.808225][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 369.814007][ C0] ? __kthread_parkme+0x18f/0x230 [ 369.819007][ C0] ? kthread+0x13a/0x450 [ 369.823234][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 369.828415][ C0] kthread+0x373/0x450 [ 369.832472][ C0] ? __pfx_kthread+0x10/0x10 [ 369.837036][ C0] ret_from_fork+0x730/0xd60 [ 369.841601][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 369.846689][ C0] ? __switch_to+0x800/0x10f0 [ 369.851341][ C0] ? __pfx_kthread+0x10/0x10 [ 369.855907][ C0] ret_from_fork_asm+0x1a/0x30 [ 369.860662][ C0] [ 369.863654][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 369.869949][ C0] CPU: 0 UID: 0 PID: 3228 Comm: kworker/R-bat_e Tainted: G L syzkaller #0 PREEMPT(full) [ 369.881198][ C0] Tainted: [L]=SOFTLOCKUP [ 369.885501][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 369.895548][ C0] Workqueue: bat_events batadv_tt_purge [ 369.901075][ C0] RIP: 0010:lock_acquire+0x5e/0x380 [ 369.906247][ C0] Code: 05 0f 7e a5 12 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 1e f2 5d 0f 0f 82 c9 02 00 00 8b 35 be 23 5e 0f 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 ad 7d a5 12 0f 85 09 03 00 00 48 83 c4 [ 369.925825][ C0] RSP: 0018:ffffc90000006af8 EFLAGS: 00000206 [ 369.931872][ C0] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000200 [ 369.939812][ C0] RDX: 0000000000000101 RSI: ffffffff8e366aae RDI: ffffffff8c623580 [ 369.947762][ C0] RBP: ffffffff8edec4e0 R08: 000000007f1fed10 R09: 0000000000000007 [ 369.955704][ C0] R10: 0000000000000200 R11: 0000000000000001 R12: 0000000000000002 [ 369.963658][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 369.971609][ C0] FS: 0000000000000000(0000) GS:ffff888123b53000(0000) knlGS:0000000000000000 [ 369.980512][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 369.987067][ C0] CR2: 00007f94f6a0c85c CR3: 0000000073e63000 CR4: 00000000003526f0 [ 369.995008][ C0] Call Trace: [ 369.998262][ C0] [ 370.001079][ C0] ? unwind_next_frame+0x3be/0x2090 [ 370.006256][ C0] ? unwind_next_frame+0x3be/0x2090 [ 370.011429][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 370.017553][ C0] unwind_next_frame+0xd1/0x2090 [ 370.022464][ C0] ? unwind_next_frame+0xbd/0x2090 [ 370.027551][ C0] ? ip_local_deliver+0x163/0x1f0 [ 370.032552][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 370.038675][ C0] arch_stack_walk+0x94/0xf0 [ 370.043244][ C0] ? ip_local_deliver+0x163/0x1f0 [ 370.048243][ C0] stack_trace_save+0x8e/0xc0 [ 370.052899][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 370.058239][ C0] ? unwind_next_frame+0x3c8/0x2090 [ 370.063412][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 370.068322][ C0] kasan_save_stack+0x30/0x50 [ 370.072974][ C0] ? kasan_save_stack+0x30/0x50 [ 370.077799][ C0] ? kasan_save_track+0x14/0x30 [ 370.082632][ C0] ? __kasan_kmalloc+0xaa/0xb0 [ 370.087366][ C0] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 370.092898][ C0] ? ref_tracker_alloc+0x190/0x590 [ 370.097984][ C0] ? dst_init+0xda/0x5b0 [ 370.102197][ C0] ? dst_alloc+0xbb/0x1a0 [ 370.106498][ C0] ? rt_dst_alloc+0x35/0x3a0 [ 370.111061][ C0] ? ip_route_output_key_hash_rcu+0x87a/0x2870 [ 370.117185][ C0] ? ip_route_output_key_hash+0x118/0x2b0 [ 370.122870][ C0] ? ip_route_output_flow+0x27/0x150 [ 370.128136][ C0] ? ip_route_me_harder+0x562/0x1260 [ 370.133453][ C0] ? synproxy_send_tcp.isra.0+0x341/0x6e0 [ 370.139172][ C0] ? synproxy_send_client_synack+0x6ea/0x970 [ 370.145125][ C0] ? nft_synproxy_do_eval+0xa1c/0xce0 [ 370.150470][ C0] ? nft_do_chain+0x2e5/0x19d0 [ 370.155207][ C0] ? nft_do_chain_inet+0xf3/0x400 [ 370.160220][ C0] ? nf_hook_slow+0xbf/0x220 [ 370.164787][ C0] ? nf_hook.constprop.0+0x2a6/0x750 [ 370.170061][ C0] ? ip_local_deliver+0x163/0x1f0 [ 370.175088][ C0] kasan_save_track+0x14/0x30 [ 370.179742][ C0] __kasan_kmalloc+0xaa/0xb0 [ 370.184306][ C0] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 370.189657][ C0] ? ret_from_fork+0x730/0xd60 [ 370.194407][ C0] ? ref_tracker_alloc+0x190/0x590 [ 370.199495][ C0] ref_tracker_alloc+0x190/0x590 [ 370.204410][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 370.209849][ C0] ? trace_kmem_cache_alloc+0xdd/0x100 [ 370.215279][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 370.220283][ C0] dst_init+0xda/0x5b0 [ 370.224327][ C0] dst_alloc+0xbb/0x1a0 [ 370.228469][ C0] rt_dst_alloc+0x35/0x3a0 [ 370.232863][ C0] ip_route_output_key_hash_rcu+0x87a/0x2870 [ 370.238823][ C0] ip_route_output_key_hash+0x118/0x2b0 [ 370.244341][ C0] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 370.250382][ C0] ? ip_route_me_harder+0x3e4/0x1260 [ 370.255651][ C0] ? find_held_lock+0x2b/0x80 [ 370.260322][ C0] ip_route_output_flow+0x27/0x150 [ 370.265422][ C0] ip_route_me_harder+0x562/0x1260 [ 370.270525][ C0] ? __pfx_ip_route_me_harder+0x10/0x10 [ 370.276057][ C0] ? trace_kmem_cache_alloc+0xdd/0x100 [ 370.281498][ C0] ? trace_kmem_cache_alloc+0xdd/0x100 [ 370.286934][ C0] ? kmalloc_reserve+0x148/0x350 [ 370.291855][ C0] ? __pfx_cookie_hash+0x10/0x10 [ 370.296774][ C0] synproxy_send_tcp.isra.0+0x341/0x6e0 [ 370.302296][ C0] synproxy_send_client_synack+0x6ea/0x970 [ 370.308082][ C0] ? find_held_lock+0x2b/0x80 [ 370.312733][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 370.319032][ C0] ? net_generic+0xea/0x2a0 [ 370.323510][ C0] nft_synproxy_do_eval+0xa1c/0xce0 [ 370.328688][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 370.334395][ C0] ? ip_finish_output2+0x892/0x2400 [ 370.339574][ C0] ? __pfx_nft_synproxy_eval+0x10/0x10 [ 370.345018][ C0] nft_do_chain+0x2e5/0x19d0 [ 370.349598][ C0] ? ip_output+0x3cd/0xc10 [ 370.354012][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 370.359039][ C0] ? mark_held_locks+0x40/0x70 [ 370.363779][ C0] ? __local_bh_enable_ip+0xa5/0x120 [ 370.369042][ C0] ? __local_bh_enable_ip+0xa5/0x120 [ 370.374305][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 370.379504][ C0] nft_do_chain_inet+0xf3/0x400 [ 370.384334][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 370.389770][ C0] ? __pfx_ipt_do_table+0x10/0x10 [ 370.394772][ C0] ? nf_nat_ipv4_local_in+0x181/0x730 [ 370.400125][ C0] nf_hook_slow+0xbf/0x220 [ 370.404518][ C0] nf_hook.constprop.0+0x2a6/0x750 [ 370.409602][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 370.415556][ C0] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 370.421166][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 370.426251][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 370.432206][ C0] ? ip_rcv_finish_core+0x7ec/0x2c30 [ 370.437481][ C0] ip_local_deliver+0x163/0x1f0 [ 370.442303][ C0] ? __pfx_ip_local_deliver+0x10/0x10 [ 370.447661][ C0] ip_rcv+0x33a/0x3c0 [ 370.451617][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 370.456103][ C0] __netif_receive_skb_one_core+0x197/0x1e0 [ 370.461985][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 370.468372][ C0] ? lock_acquire+0x1d1/0x380 [ 370.473024][ C0] ? process_backlog+0x437/0x1600 [ 370.478021][ C0] ? process_backlog+0x437/0x1600 [ 370.483013][ C0] __netif_receive_skb+0x1f/0x120 [ 370.488008][ C0] process_backlog+0x487/0x1600 [ 370.492834][ C0] __napi_poll.constprop.0+0xaf/0x450 [ 370.498177][ C0] net_rx_action+0xa40/0xf20 [ 370.502747][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 370.507831][ C0] ? mark_held_locks+0x40/0x70 [ 370.512569][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 370.517742][ C0] ? tmigr_handle_remote+0x132/0x380 [ 370.523003][ C0] ? run_timer_base+0x121/0x190 [ 370.527832][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 370.533004][ C0] handle_softirqs+0x1e6/0x9d0 [ 370.537742][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 370.543007][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 370.548273][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 370.553881][ C0] ? batadv_tt_purge+0x25d/0xbd0 [ 370.558792][ C0] do_softirq+0xaf/0xf0 [ 370.562921][ C0] [ 370.565829][ C0] [ 370.568732][ C0] __local_bh_enable_ip+0xff/0x120 [ 370.573816][ C0] batadv_tt_purge+0x25d/0xbd0 [ 370.578558][ C0] ? __pfx_batadv_tt_purge+0x10/0x10 [ 370.583827][ C0] ? lock_acquire+0x1d1/0x380 [ 370.588477][ C0] ? process_one_work+0xa2c/0x1b10 [ 370.593565][ C0] ? process_one_work+0x906/0x1b10 [ 370.598651][ C0] ? process_one_work+0x906/0x1b10 [ 370.603741][ C0] process_one_work+0xac7/0x1b10 [ 370.608660][ C0] ? __pfx_process_one_work+0x10/0x10 [ 370.614007][ C0] ? lock_acquire+0x1d1/0x380 [ 370.618661][ C0] ? __pfx_batadv_tt_purge+0x10/0x10 [ 370.623935][ C0] rescuer_thread+0x918/0x14e0 [ 370.628679][ C0] ? rescuer_thread+0x256/0x14e0 [ 370.633590][ C0] ? rescuer_thread+0x118/0x14e0 [ 370.638502][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 370.643679][ C0] ? __kthread_parkme+0x18f/0x230 [ 370.648677][ C0] ? kthread+0x13a/0x450 [ 370.652894][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 370.658066][ C0] kthread+0x373/0x450 [ 370.662109][ C0] ? __pfx_kthread+0x10/0x10 [ 370.666685][ C0] ret_from_fork+0x730/0xd60 [ 370.671249][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 370.676335][ C0] ? __switch_to+0x800/0x10f0 [ 370.680990][ C0] ? __pfx_kthread+0x10/0x10 [ 370.685557][ C0] ret_from_fork_asm+0x1a/0x30 [ 370.690301][ C0]