last executing test programs: 58.458297093s ago: executing program 32 (id=194): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='tcp 2049\n', 0x9) 54.100750746s ago: executing program 33 (id=250): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='-2 -3 +4 +4.0 -4.1 -4.2\n', 0x18) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='tcp 2049\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000700)='1\n', 0x2) 51.991269818s ago: executing program 34 (id=289): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd"], 0xcfa4) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./dev\x00', 0x1ff) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x80800, 0x10) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) ioctl(r0, 0xc138fd02, &(0x7f0000000000)="0400000000000000") 51.514912999s ago: executing program 35 (id=300): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000000)=""/29, 0x1d}], 0x1, 0x0, 0x41) 48.886837239s ago: executing program 6 (id=365): r0 = socket$unix(0x1, 0x2, 0x0) unshare(0x22020400) ftruncate(r0, 0x1db) 48.835893173s ago: executing program 6 (id=366): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1df) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000700)="0a6f1ce7", 0x4) 48.743558749s ago: executing program 6 (id=367): socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$dupfd(r0, 0x0, r0) 48.590910936s ago: executing program 6 (id=368): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) personality(0x619641b6fb4b8591) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) setpriority(0x0, r0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x2, 0x0) read(r1, &(0x7f0000000340)=""/180, 0xb4) 48.281352271s ago: executing program 6 (id=370): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000100)=0xfffffffa, 0x4) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="17", 0x1d}], 0x1}, 0x8c0) recvmmsg(r0, &(0x7f0000004900), 0x0, 0x40000000, 0x0) 48.00963062s ago: executing program 6 (id=373): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='-2 -3 +4 +4.0 -4.1', 0x12) 46.39961014s ago: executing program 36 (id=311): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000001000)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x35, 0x5, 0x57e, 0x330, 0x0, 0x0, "0600ff0901a101150026ff007508951f852009018102852109018102852209018102851609019102851709019102851509019102c0"}}, 0x14d) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000200)={0xc, {0x16, ' \x00'/22}}, 0x1c) nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000200)={0xc, {0x16, "2200001600"/22}}, 0x1c) nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000200)={0xc, {0x16, "2200001600"/22}}, 0x1c) nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000300)={0xc, {0x16, "2100005000fa00000000000500"/22}}, 0x1c) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) syz_open_dev$evdev(&(0x7f0000000500), 0x1, 0x2) syz_open_dev$evdev(&(0x7f0000000500), 0x3, 0x2) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000300)={0xc, {0x16, "2100005000fa00000000000500"/22}}, 0x1c) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) 32.942041685s ago: executing program 37 (id=373): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='-2 -3 +4 +4.0 -4.1', 0x12) 26.791218277s ago: executing program 9 (id=587): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000080000000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r0, 0x2f, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r1, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000240)=r1, 0x4) 26.579144443s ago: executing program 9 (id=591): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@bridge_setlink={0x44, 0x13, 0x8, 0x70bd6a, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x18, 0x40a}, [@IFLA_NET_NS_PID={0x8}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x16cd2}, @IFLA_IFNAME={0x14, 0x3, 'veth1_virt_wifi\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4c000}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="dc00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c000280050001000000000008000480040003800800084000000000080008400000000734"], 0xdc}}, 0x0) 26.45388361s ago: executing program 9 (id=594): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=ANY=[], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) 26.31686852s ago: executing program 9 (id=598): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) io_setup(0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x1) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 26.05231503s ago: executing program 9 (id=603): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup=r0, 0x1d, 0x0, 0x3414, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 24.963601702s ago: executing program 9 (id=618): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000100)=0x4, 0x4) 24.763694468s ago: executing program 38 (id=618): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000100)=0x4, 0x4) 22.037541704s ago: executing program 8 (id=657): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2}}, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/4, 0x4}], 0x3bc, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 21.305384377s ago: executing program 8 (id=659): r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) sendfile(r0, 0xffffffffffffffff, 0x0, 0x20000006) 21.118883281s ago: executing program 8 (id=662): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x804c040}, 0x0) sendto$inet(r0, &(0x7f0000000000)='Q', 0x1, 0x40, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) 20.918017784s ago: executing program 8 (id=668): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) io_setup(0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x1) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(0x0, 0x1, &(0x7f0000000440)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 20.600098622s ago: executing program 8 (id=670): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/devices/0000:00:01.0/d3cold_allowed\x00', 0x1, 0x0) write$binfmt_elf32(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRESHEX], 0x3fb) 18.086145707s ago: executing program 8 (id=692): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x804c040}, 0x0) sendto$inet(r0, &(0x7f0000000000)='Q', 0x1, 0x40, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) 17.876759247s ago: executing program 39 (id=692): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x804c040}, 0x0) sendto$inet(r0, &(0x7f0000000000)='Q', 0x1, 0x40, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) 15.108238178s ago: executing program 5 (id=724): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x0, 0x0}, 0x10) syz_emit_ethernet(0x22, &(0x7f0000000c00)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local, @void, {@mpls_uc={0x8847, {[], @ipv4=@generic={{0x5, 0x4, 0x0, 0x8, 0x14, 0x68, 0x0, 0x9, 0xee, 0x0, @local, @broadcast}}}}}}, 0x0) 14.956200324s ago: executing program 5 (id=726): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40000000, 0x0) 14.850742346s ago: executing program 5 (id=727): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f0000000340)={@local, @random="11ef424853d9", @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@cipso={0x86, 0x9, 0xffffffffffffffff, [{0x1, 0x3, '\b'}]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 14.721986011s ago: executing program 5 (id=728): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) io_setup(0x2, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 14.5419312s ago: executing program 5 (id=730): r0 = socket$nl_route(0x10, 0x3, 0x0) fcntl$setstatus(r0, 0x4, 0x800) write(r0, &(0x7f0000000000)="38000000240001040100000000000000000000000100000000000100ffffffff0000000008000100657473000c0002800500010010000000", 0x38) write(r0, &(0x7f0000000040)="38000000240001040200000000000000000000000100000000000200010001000000000008000100657473000c0002800500010010", 0x35) 14.315476272s ago: executing program 7 (id=731): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x102080, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0xffffffe4) 14.119279801s ago: executing program 5 (id=732): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "e907f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f8a1d34c07c3260049e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4fb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3c4891f9150d685a7d7c27df0355808390666e827d61dcc3a633bb0b1250b5a293e3877adc1a1b44b99c93d57fd720a170e7f5670e419dc64febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) mount(0x0, 0x0, &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000140), 0xd089, 0x1082) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd05, &(0x7f0000000000)="0400000002000000000000007e0100003801") 14.094833676s ago: executing program 7 (id=733): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f00000002c0)) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x3c}}, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1", 0x5ea, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, 0x0, 0x1, 0x4, 0x6, @local}, 0x14) 13.889428145s ago: executing program 40 (id=732): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "e907f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f8a1d34c07c3260049e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4fb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3c4891f9150d685a7d7c27df0355808390666e827d61dcc3a633bb0b1250b5a293e3877adc1a1b44b99c93d57fd720a170e7f5670e419dc64febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) mount(0x0, 0x0, &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000140), 0xd089, 0x1082) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd05, &(0x7f0000000000)="0400000002000000000000007e0100003801") 13.748055236s ago: executing program 7 (id=736): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000980)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000240)="094eb7", 0x3}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000140011f225bd7000fddbcf250284", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) read(r1, &(0x7f00000000c0)=""/171, 0xfdef) 13.410906101s ago: executing program 7 (id=738): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) io_setup(0x2, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 13.273901176s ago: executing program 7 (id=739): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x7) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0xfffffffffffffffd) 12.758022114s ago: executing program 7 (id=740): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/4, 0x4}], 0x3bc, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 12.314253727s ago: executing program 41 (id=740): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/4, 0x4}], 0x3bc, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 2.266819212s ago: executing program 1 (id=792): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000f6ffffff00000000fcffffff8500000030000000180100002020642500000000002020207b1af8ff00000000bfa110000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000004c0)='syzkaller\x00', 0xa, 0x0, 0x0, 0x41100, 0x2}, 0x94) 2.206508562s ago: executing program 1 (id=793): r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @remote}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r1, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") write(r1, &(0x7f0000000138)='\t\x00\x00\x00', 0x4) ioctl(r1, 0xc138fd05, &(0x7f0000000000)="04000000000000000000") 2.070923681s ago: executing program 2 (id=796): socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 2.040345008s ago: executing program 2 (id=797): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) close(0x3) 1.910012059s ago: executing program 3 (id=799): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/module/damon_reclaim/parameters/wmarks_interval\x00', 0x1, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/damon_reclaim/parameters/skip_anon\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='Y\n', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/damon_reclaim/parameters/enabled\x00', 0x1, 0x0) write(r2, &(0x7f0000000500)='Y\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/damon_reclaim/parameters/enabled\x00', 0x1, 0x0) write(r3, &(0x7f0000000600)='N\n', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/damon_reclaim/parameters/enabled\x00', 0x1, 0x0) write(r4, &(0x7f0000000500)='Y\n', 0x2) 1.842751906s ago: executing program 1 (id=802): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) syz_io_uring_setup(0xefe, &(0x7f0000000140)={0x0, 0xcc09, 0x10806}, &(0x7f0000000000), &(0x7f0000000380), &(0x7f0000001040)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4000, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(r2, 0xfffd, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) 1.705382193s ago: executing program 2 (id=804): r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000004d40)=[{{0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000380)=""/59, 0x3b}, {&(0x7f0000000540)=""/186, 0xba}], 0x2}, 0x10001}], 0x1, 0x21, 0x0) 1.638801904s ago: executing program 3 (id=805): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8840) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) 1.638364693s ago: executing program 4 (id=806): openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x490420, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c0a200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) lseek(r2, 0x7fff, 0x4) 1.563864732s ago: executing program 1 (id=807): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x42, 0x1ff) ftruncate(r0, 0x10000000) r1 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x42, 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r2, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d79706f6f6c00") write(r0, &(0x7f0000000138)="0000000000000000008000000000000000000000000000007468696e2d706f6f6c00000000000000373a3020373a3120313238203000", 0x36) ioctl(r2, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000006e01000038010000010000000000000000000000000000000000000000000000000000006d79706f6f6c00") 1.526987374s ago: executing program 0 (id=808): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x35dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) sendmsg$nl_route_sched(r2, 0x0, 0x404c010) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, 0x0, 0x0, 0x4041, &(0x7f00000001c0)={0x11, 0x88a8, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 1.478250092s ago: executing program 3 (id=809): openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2adc0, 0x1c1}, 0x18) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x4001ffe, 0xa68d7c519dc00fb1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x12) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) close(r0) write$vga_arbiter(r2, &(0x7f0000000000)=@unlock_all, 0xb) 1.378696977s ago: executing program 4 (id=810): r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) sendto$inet6(r0, &(0x7f0000000800)="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"/1452, 0x5ac, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x3, @mcast2}, 0x1c) recvmmsg(r0, &(0x7f0000002840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000020c0)=""/250, 0xfa}, 0x8}, {{0x0, 0x0, 0x0}, 0x1}], 0x2, 0x40001060, 0x0) 1.289582403s ago: executing program 4 (id=811): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b0000000f000000cc000200060000ec05"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x2, r0}, 0x38) 1.16906637s ago: executing program 4 (id=812): kexec_load(0x0, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x4010000}, {0x0, 0x0, 0x3e0000}], 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) syz_ublk_setup_queues(r0, 0x0, &(0x7f0000000bc0)={0x0, 0x597f, 0x800, 0x2, 0xe9}, &(0x7f0000019180)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2067, 0x8000, 0x1, 0x17, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xce5e, 0x10, 0x2, 0x2c4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xecae, 0x0, 0x3, 0x11b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcdf8, 0x40, 0x0, 0x3ae, 0x0, r0}}], 0x4, 0x0, &(0x7f000001a480)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r2, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x50, 0x3, r3}, @void}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24008001}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(r4, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r2, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4008000) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="040000000000fbdbdf25030000002c0003800800030006000000080001000100000008000100ffffffff080001000700000008000300040000002800028008000100fbffffff080001000c000000080002000100000008000200ff0f000004000400"], 0x68}, 0x1, 0x0, 0x0, 0x400c810}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000000206010800000000000000000000fffd0500010006000000050005000a0000000500e8ffffffffff0800020073797a300000000011000300686173683a6e65742c6e657400000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4080000}, 0x80) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000002060108000034e4000000000000000805000400000000000900020073797a3100000000050005000200000016000300686173683a6e65742c706f72742c6e65740000000500010007"], 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r8, &(0x7f000000c1c0)={0x0, 0x0, &(0x7f000000c080)=[{&(0x7f000000acc0)=""/4096, 0x1000}], 0x1}, 0x20) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x59, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x0, 0x8, 0x6}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) mq_open(&(0x7f00000000c0)='\x80\x00', 0x40, 0x22, &(0x7f0000000100)={0x4, 0x0, 0x504, 0x157}) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000640)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x280005}, 0xc, &(0x7f0000000600)={&(0x7f0000000880)={0x1c8, r5, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x800}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x10}]}, @TIPC_NLA_NODE={0x174, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfff}, @TIPC_NLA_NODE_ID={0xc6, 0x3, "77342dc5050a8b406121db890a8c2bc22697617a32d21a163b588d42b390699cc83f11d3abba1709dcc96f449d89b2425fb9c736ef8728dccf14dd946117cc0b98146c309a587f056c4fea2a943a383178b7c26c2fc715f43d246ec030ac67d155da76f445e7af662b99d96dc46a17c1b08df7476344ef80013daa340e7be28e2c77a78e4ff228a28b8536ad6a914a60e189bba17bf7f2204b173bd9bac6be59a26c9fc59a02a42d72444d545b4a59444e1a089f111bc2c795a1258f4d27e96e9f69"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "aee3404becd926773ccdf49df761de9100c6ba34211ca3bd"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2400000}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "da952794a11b1395ffce0c10234ae632800300a29012ba972ed59796b3"}}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x4000090}, 0x20000054) r9 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000003c0)=@base={0xa, 0x9, 0x8, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="3b0200000b0000000000000092a1ab0652924c5d", @ANYRES32=r9, @ANYBLOB="000000000000000085000000c00000009500000000000000"], &(0x7f0000001680)='syzkaller\x00'}, 0x90) 783.584169ms ago: executing program 2 (id=813): r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @remote}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r1, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") write(r1, &(0x7f0000000138)='\t\x00\x00\x00', 0x4) ioctl(r1, 0xc138fd05, &(0x7f0000000000)="04000000000000000000") 669.925845ms ago: executing program 3 (id=814): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r2], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'team0\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00'}) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_raw(r5, &(0x7f0000000080)={0x1d, r6}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r7, &(0x7f0000000300)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @remote}, 0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000980)={'gretap0\x00', &(0x7f0000000840)={'gre0\x00', 0x0, 0x1, 0x7807, 0x1000, 0x2, {{0x3d, 0x4, 0x0, 0x12, 0xf4, 0x65, 0x0, 0x1, 0x4, 0x0, @local, @empty, {[@ssrr={0x89, 0xb, 0xdc, [@empty, @rand_addr=0x64010101]}, @cipso={0x86, 0x54, 0x3, [{0x7, 0xa, "43e56888f24b9072"}, {0x5, 0x7, "9cd4fd48c3"}, {0x6, 0x10, "b3527176d88bd1d7876d2961d7ec"}, {0x7, 0xc, "c0763e9a1e75292af6cf"}, {0x6, 0xc, "e9dd945aa8e8ba814db3"}, {0x0, 0x3, "cb"}, {0x6, 0x12, "c7c837355337c78f2f63ec067307cf52"}]}, @ssrr={0x89, 0xb, 0x14, [@local, @local]}, @lsrr={0x83, 0x13, 0x1b, [@remote, @rand_addr=0x64010101, @rand_addr=0x64010101, @broadcast]}, @ra={0x94, 0x4}, @rr={0x7, 0x13, 0x90, [@rand_addr=0x64010102, @local, @dev={0xac, 0x14, 0x14, 0x38}, @multicast2]}, @timestamp_prespec={0x44, 0x3c, 0xf7, 0x3, 0x7, [{@local, 0x800}, {@private=0xa010101, 0x8}, {@rand_addr=0x64010100, 0x2471}, {@multicast1, 0x59e}, {@broadcast, 0x1}, {@multicast1, 0x69644b10}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x40}]}, @cipso={0x86, 0x10, 0x2, [{0x5, 0x2}, {0x0, 0x8, "26f3df816baf"}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000a80)={'erspan0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x40, 0x7800, 0xffffffff, 0x10, {{0x22, 0x4, 0x3, 0x5, 0x88, 0x67, 0x0, 0x2, 0x0, 0x0, @private=0xa010102, @empty, {[@generic={0x88, 0x6, "baf10328"}, @timestamp={0x44, 0x8, 0x78, 0x0, 0x0, [0x200]}, @noop, @lsrr={0x83, 0xb, 0xff, [@broadcast, @private=0xa010101]}, @ssrr={0x89, 0x1b, 0xd7, [@dev={0xac, 0x14, 0x14, 0x26}, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @dev={0xac, 0x14, 0x14, 0x20}]}, @timestamp_prespec={0x44, 0x14, 0x97, 0x3, 0x1, [{@dev={0xac, 0x14, 0x14, 0x11}, 0x4}, {@private=0xa010102, 0x9}]}, @end, @cipso={0x86, 0x19, 0x1, [{0x5, 0x3, '\''}, {0x5, 0x10, "e3848d259f69a86256642f87efb3"}]}, @lsrr={0x83, 0xf, 0x5c, [@private=0xa010102, @rand_addr=0x64010100, @rand_addr=0x64010100]}]}}}}}) 566.696401ms ago: executing program 0 (id=815): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/module/damon_reclaim/parameters/wmarks_interval\x00', 0x1, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/damon_reclaim/parameters/skip_anon\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='Y\n', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/damon_reclaim/parameters/enabled\x00', 0x1, 0x0) write(r2, &(0x7f0000000500)='Y\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/damon_reclaim/parameters/enabled\x00', 0x1, 0x0) write(r3, &(0x7f0000000600)='N\n', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/damon_reclaim/parameters/enabled\x00', 0x1, 0x0) write(r4, &(0x7f0000000500)='Y\n', 0x2) 551.011197ms ago: executing program 4 (id=816): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x2008c010) 516.746392ms ago: executing program 2 (id=817): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0xfe, 0x7fff000a}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x8200, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x209f7e, r0}) 426.377035ms ago: executing program 1 (id=818): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) syz_io_uring_setup(0xefe, &(0x7f0000000140)={0x0, 0xcc09, 0x10806}, &(0x7f0000000000), &(0x7f0000000380), &(0x7f0000001040)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4000, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(r2, 0xfffd, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) 378.777314ms ago: executing program 0 (id=819): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='3', 0x4e) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8840) r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) 374.474508ms ago: executing program 0 (id=820): socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 259.621004ms ago: executing program 0 (id=821): r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) sendto$inet6(r0, &(0x7f0000000800)="51e251578851f74182a74b89b27df427aeef44966d202e4138b5a18e75a0424e7fe93b0d32c7abba87b65f97aba1c26a06b6d94c4aefd8fdca10e744391062c8e612721c20051608d9aa6dacf61e1eb331a4daad402b9885599d56130f7149fb1111fa116e94324d585a0569fbd311dad54cb4e32ff7f02216844ec3d526c878d5135ad1c9262239339c18885e2a0a95854d6cde3dd2feeaa50216af6c5760923413af81199a65a6332b02ec7bbf79d557c033cbe032fdc44f66a5c59cc4a3c5d218f5896b359d1efd60baf98df6396567478f7b817ce6e11d59a7def452a068e9607f57f626a5b8d476636ef1ee76307524009ae49be402000000000000001e80fed632155e14da1f7324d97bc61a3c1edc4431ee8a6caa2ed9f85cea5a2a9b263630c7d6fc35dda6002da571a2e51917e7c1019d8ce21a608147e408074c7c5f444fab931bda86d977d7c9ccefd881e5ef05b287f41eea526862885881c2cdc687dfff01a9b70a9b08734ac4d62c7f34465c34aa9e9f136c7f796d9eea41aa37f61830508338bb1f887089070567a1dd96cd700e7a098dabedb60f31acd17d487bc8be1a3101d2b5ac1715003793596c6daa93a27f4adb4d6fbea5669cabc206c944317ea18a2c762457f1bc945fec8f849641d44e7e2a24faeee28f3f266395fe18b0dce20c1f64e8896c8ff0e4a44a116fb32462471a0fcde143e551723d57339722765673b4163d66f473ac10f988cb252f106632f9884a47866d284b4efc6bb1aa74ed48d4a6535795f0873a99907ebc22be2337364cf9acc063e32f7d2e02fad64d04aa405d2dbdee1128ab1e4761d2dd30885ad37dd168478f10789d172feef4c817a5cd372caade57f23300e45f47e001e3ea093680ffffff802477368b9910f4e24037c871cb8251568c792287a6f49fa61b7c2600accaa0e7b40c59d88a29af5886c1f5dfc6837c58aaef12a9e100225c70441144ffa82927fa4802ed9ebb03eea8e945af5f4993f21a7f53baf7ec5bb6cc96b917dde82c18840c3500e9565f68f687b1c73d834c0d99d4acb002dc5682dbcdb1217a98f6c3ef8318b7fa93894e8a097b4511ba5c035e27c9fe8bfe7754741ac21bbc0303b81672e3117e5590fe2d92f912759b9937f64204ec5caa92e2cccb31016b13ed8d7bcabb03e176b1c9bda3bf1c1256ab74ab6f42ed9bafbbd0096263be1a7da1e1c88deec55a653d170e1e13c77dacaa60a37a6ba2383e661ebc9f13dbaade2dd884c9951819fb4608e19e70cd2496ccfb12f24c71f496cfe90400fe1bbea1e9a24b1d4664fb0776aca6269b396779680e52f86877d9209988d12ccb137be01ab7496d00547a7d4849d365a18dbb55c429cde87d33c4b74ad2273cdfee88b5418866ef327f25e9cbcd5a64d97107339f7e4cb5f8de171d2779c0f68884ae835e398f982d5749f085628d3608986656ea04b721f828202e9342bd7d19dfa091e772aebf9718030167a8c029df7c58b7f40029d7cfcaf26fd1900d8775ef373e8e2c5bf3525f907add3be426cd5a079c49abffe933e9ee213a3baf34f932d1299312691e1c53e6247ae0989ad66070d51fad22856a8b6b28954e7d41189b11c5321789eec8670de9e8db0b0473ba2e02731e60e7222697d61e052c18d4bcc6d1572fdf426f7b2fee6c1dee66c85c497b90facaf63b8ec5cde4a73400f9180bcfc0f81eca9580a7c81462a077f9034026bf72aa7c6de4b3c15d4a2dbd6fd7d87084aea9f25fb4bf5ec83eb56874a760533792dff2695407ccdd6a7375e0007230fd3f6501c152f1c1ff279b1d67cc95f2820762b7927659368e41657bdef2dd15b63498a93b787bdb26809d734aaf98b86fcf9fc643a34d03ebbe072820662d20d4774d66c5ae270adade5b8f6242a059b926221ee3d677487471c432b0d6d64dad030703475bb3ecac39b204a814f5ece5961621358e36f8a2cf7196c76959824bbb475a7cad8f57853fe05f59f341b5207cc9bb8d686982c2f158e0d8f5c7ec6cbfd500"/1453, 0x5ad, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000020c0)=""/250, 0xfa}, 0x8}, {{0x0, 0x0, 0x0}, 0x1}], 0x2, 0x40001060, 0x0) 207.35267ms ago: executing program 4 (id=822): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x1) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 204.61991ms ago: executing program 2 (id=823): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0\n', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='external:test\n', 0xe) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='raid5\n', 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r3, &(0x7f0000000380)='2\n', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md0/md/chunk_size\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='65536\n', 0x6) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/block/md0/md/layout\x00', 0x1, 0x0) write(r5, &(0x7f0000000480)='2\n', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/block/md0/md/consistency_policy\x00', 0x1, 0x0) write(r6, &(0x7f0000000500)='ppl\n', 0x4) r7 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r7, &(0x7f0000000580)='1:0\n', 0x4) write(r7, &(0x7f00000005c0)='1:1\n', 0x4) r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md0/md/dev-ram0/size\x00', 0x1, 0x0) write(r8, &(0x7f0000000640)='1024\n', 0x5) r9 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/block/md0/md/dev-ram0/ppl_sector\x00', 0x1, 0x0) write(r9, &(0x7f00000006c0)='4096\n', 0x5) r10 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/block/md0/md/dev-ram0/ppl_size\x00', 0x1, 0x0) write(r10, &(0x7f0000000740)='128\n', 0x4) r11 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0) write(r11, &(0x7f00000007c0)='0\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/block/md0/md/dev-ram1/size\x00', 0x1, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./sys/block/md0/md/dev-ram1/ppl_sector\x00', 0x1, 0x0) write(r12, &(0x7f00000008c0)='4096\n', 0x5) r13 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/block/md0/md/dev-ram1/ppl_size\x00', 0x1, 0x0) write(r13, &(0x7f0000000940)='128\n', 0x4) r14 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./sys/block/md0/md/dev-ram1/slot\x00', 0x1, 0x0) write(r14, &(0x7f00000009c0)='1\n', 0x2) r15 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r15, &(0x7f0000000a40)='active\n', 0x7) write(r6, &(0x7f0000000500)='ppl\n', 0x4) 167.326508ms ago: executing program 3 (id=824): socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="190000000400000004"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2}, &(0x7f0000000240), &(0x7f0000000340)}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={0xffffffffffffffff, r1, 0x25, 0x2, @val=@tracing={0x0, 0x2e5b}}, 0x20) syz_emit_ethernet(0x11, &(0x7f0000000600)=ANY=[], 0x0) 122.468764ms ago: executing program 0 (id=825): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000200)) 93.496637ms ago: executing program 1 (id=826): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/target/core/rd_mcp_0/ramdisk0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='rd_pages=64\n', 0xc) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/core/rd_mcp_0/ramdisk0/enable\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='1\n', 0x2) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/target/usb_gadget/naa.6001405c935d7912\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/nexus\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='naa.6001405c935d7912\n', 0x16) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/lun/lun_0\x00', 0x1ff) symlinkat(&(0x7f0000000480)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/lun/lun_0/virtual_scsi_port\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/enable\x00', 0x1, 0x0) write(r3, &(0x7f0000000540)='1\n', 0x2) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000005c0)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/configs/c.1/tcm.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000680)='dummy_udc.0\n', 0xc) close(r4) nanosleep(&(0x7f00000006c0)={0x1}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000700), 0x1, 0x2) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000740)={0x53, 0xffffffffffffffff, 0x10, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000780)="8f000000000000000000000000010000", 0x0, 0x3e8, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000700), 0x0, 0x2) 0s ago: executing program 3 (id=827): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/target/core/rd_mcp_0/ramdisk0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='rd_pages=64\n', 0xc) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/core/rd_mcp_0/ramdisk0/enable\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='1\n', 0x2) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/target/usb_gadget/naa.6001405c935d7912\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/nexus\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='naa.6001405c935d7912\n', 0x16) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/lun/lun_0\x00', 0x1ff) symlinkat(&(0x7f0000000480)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/lun/lun_0/virtual_scsi_port\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/enable\x00', 0x1, 0x0) write(r3, &(0x7f0000000540)='1\n', 0x2) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000005c0)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/configs/c.1/tcm.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000680)='dummy_udc.0\n', 0xc) close(r4) nanosleep(&(0x7f00000006c0)={0x1}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000700), 0x1, 0x2) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000740)={0x53, 0xffffffffffffffff, 0x10, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000780)="8f000000000000000000000000010000", 0x0, 0x3e8, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000700), 0x0, 0x2) kernel console output (not intermixed with test programs): m2 [ 105.231472][ T6711] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 105.257331][ T6711] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.301170][ T6711] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.301251][ T6711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.302340][ T6711] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.302426][ T6711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.358659][ T6737] FAULT_INJECTION: forcing a failure. [ 105.358659][ T6737] name failslab, interval 1, probability 0, space 0, times 0 [ 105.358690][ T6737] CPU: 0 UID: 0 PID: 6737 Comm: syz.5.334 Not tainted syzkaller #0 PREEMPT(full) [ 105.358712][ T6737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 105.358723][ T6737] Call Trace: [ 105.358730][ T6737] [ 105.358737][ T6737] dump_stack_lvl+0x100/0x190 [ 105.358771][ T6737] should_fail_ex.cold+0x5/0xa [ 105.358799][ T6737] should_failslab+0xc2/0x120 [ 105.358823][ T6737] __kmalloc_noprof+0xfc/0x840 [ 105.358841][ T6737] ? rcu_is_watching+0x13/0xc0 [ 105.358867][ T6737] ? tomoyo_realpath_from_path+0xb6/0x690 [ 105.358895][ T6737] tomoyo_realpath_from_path+0xb6/0x690 [ 105.358924][ T6737] tomoyo_check_open_permission+0x2af/0x3c0 [ 105.358953][ T6737] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 105.358982][ T6737] ? hook_file_open+0x248/0x8e0 [ 105.359029][ T6737] ? path_get+0x61/0x80 [ 105.359057][ T6737] tomoyo_file_open+0x6b/0x90 [ 105.359084][ T6737] security_file_open+0xb5/0x1e0 [ 105.359108][ T6737] do_dentry_open+0x588/0x14d0 [ 105.359132][ T6737] vfs_open+0x82/0x3f0 [ 105.359157][ T6737] path_openat+0x19fa/0x2440 [ 105.359184][ T6737] ? __pfx_path_openat+0x10/0x10 [ 105.359215][ T6737] do_file_open+0x20e/0x430 [ 105.359240][ T6737] ? __pfx_do_file_open+0x10/0x10 [ 105.359281][ T6737] ? _raw_spin_unlock+0x28/0x50 [ 105.359303][ T6737] ? alloc_fd+0x471/0x7a0 [ 105.359334][ T6737] do_sys_openat2+0x10f/0x1e0 [ 105.359360][ T6737] ? __pfx_do_sys_openat2+0x10/0x10 [ 105.359386][ T6737] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 105.359420][ T6737] __x64_sys_openat+0x12d/0x210 [ 105.359445][ T6737] ? __pfx___x64_sys_openat+0x10/0x10 [ 105.359481][ T6737] do_syscall_64+0x123/0x790 [ 105.359510][ T6737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.359527][ T6737] RIP: 0033:0x7f386995e98e [ 105.359541][ T6737] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 105.359557][ T6737] RSP: 002b:00007f386a7a6b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 105.359577][ T6737] RAX: ffffffffffffffda RBX: 00007f386a7a76c0 RCX: 00007f386995e98e [ 105.359590][ T6737] RDX: 0000000000000002 RSI: 00007f386a7a6c00 RDI: ffffffffffffff9c [ 105.359602][ T6737] RBP: 00007f3869a3506b R08: 0000000000000000 R09: 0000000000000000 [ 105.359613][ T6737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.359624][ T6737] R13: 00007f3869c26038 R14: 00007f3869c25fa0 R15: 00007ffe917fc7e8 [ 105.359647][ T6737] [ 105.359718][ T6737] ERROR: Out of memory at tomoyo_realpath_from_path. [ 105.390716][ T6711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.415832][ T1286] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.420280][ T1286] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.460290][ T6711] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.485504][ T1034] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.485579][ T1034] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.491888][ T1034] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.491961][ T1034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.888024][ T6711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.035705][ T6711] veth0_vlan: entered promiscuous mode [ 106.039836][ T6711] veth1_vlan: entered promiscuous mode [ 106.066873][ T6711] veth0_macvtap: entered promiscuous mode [ 106.069494][ T6711] veth1_macvtap: entered promiscuous mode [ 106.090750][ T6711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.102367][ T6711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.114561][ T52] Bluetooth: hci5: command tx timeout [ 106.117102][ T43] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.117150][ T43] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.117189][ T43] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.134418][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.202367][ T1286] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.202386][ T1286] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.237142][ T1286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.237161][ T1286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.369228][ T52] Bluetooth: hci6: command tx timeout [ 106.472484][ T5598] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 106.475642][ T5598] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 106.481963][ T5598] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 106.499825][ T5598] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 106.500355][ T5598] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 106.958886][ T5598] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 106.962599][ T5598] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 106.970906][ T5598] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 106.972009][ T5598] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 106.972365][ T5598] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 107.358138][ T6769] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.358260][ T6769] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.358596][ T6769] bridge_slave_0: entered allmulticast mode [ 107.360819][ T6769] bridge_slave_0: entered promiscuous mode [ 107.364864][ T6769] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.364929][ T6769] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.365012][ T6769] bridge_slave_1: entered allmulticast mode [ 107.367290][ T6769] bridge_slave_1: entered promiscuous mode [ 107.398970][ T6769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.410971][ T6769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.438457][ T6769] team0: Port device team_slave_0 added [ 107.440751][ T6769] team0: Port device team_slave_1 added [ 107.466619][ T6769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.466634][ T6769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.466653][ T6769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.468282][ T6769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.468293][ T6769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.468313][ T6769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.572544][ T6769] hsr_slave_0: entered promiscuous mode [ 107.573473][ T6769] hsr_slave_1: entered promiscuous mode [ 107.579610][ T6769] debugfs: 'hsr0' already exists in 'hsr' [ 107.579627][ T6769] Cannot create hsr debugfs directory [ 107.903125][ T6795] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.903199][ T6795] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.903272][ T6795] bridge_slave_0: entered allmulticast mode [ 107.904438][ T6795] bridge_slave_0: entered promiscuous mode [ 107.906529][ T6795] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.906627][ T6795] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.906703][ T6795] bridge_slave_1: entered allmulticast mode [ 107.908591][ T6795] bridge_slave_1: entered promiscuous mode [ 107.930748][ T6795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.932946][ T6795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.961095][ T6795] team0: Port device team_slave_0 added [ 107.963116][ T6795] team0: Port device team_slave_1 added [ 107.982563][ T6795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.982576][ T6795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.982594][ T6795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.985983][ T6795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.985994][ T6795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.986013][ T6795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.017508][ T6795] hsr_slave_0: entered promiscuous mode [ 108.018179][ T6795] hsr_slave_1: entered promiscuous mode [ 108.018677][ T6795] debugfs: 'hsr0' already exists in 'hsr' [ 108.018691][ T6795] Cannot create hsr debugfs directory [ 108.204434][ T5598] Bluetooth: hci5: command tx timeout [ 108.434513][ T5598] Bluetooth: hci6: command tx timeout [ 108.513878][ T5598] Bluetooth: hci7: command tx timeout [ 108.615628][ T31] audit: type=1400 audit(1789642713.481:282): avc: denied { execute } for pid=6834 comm="syz.6.353" name="file0" dev="tmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 109.074354][ T5598] Bluetooth: hci8: command tx timeout [ 109.628085][ T6785] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 109.628109][ T6785] nci: nci_start_poll: failed to set local general bytes [ 109.629924][ T6769] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 109.632148][ T6776] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 109.682184][ T6769] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 109.692136][ T6769] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 109.730035][ T6769] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 109.730312][ T6795] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 109.761640][ T6795] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 109.762317][ T6795] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 109.778708][ T6795] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 109.779650][ T6769] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 109.812501][ T6769] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 109.813264][ T6795] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 109.823141][ T6795] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 109.823421][ T6769] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 109.852714][ T6769] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 109.855993][ T6795] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 109.866799][ T6795] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 110.197687][ T6769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.230639][ T6795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.262186][ T6769] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.283268][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.283352][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.292200][ T6795] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.318565][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.318649][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.337896][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.337975][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.380101][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.380194][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.515583][ T5598] Bluetooth: hci6: command tx timeout [ 110.594735][ T5598] Bluetooth: hci7: command tx timeout [ 110.605453][ T6769] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 111.155023][ T5598] Bluetooth: hci8: command tx timeout [ 111.526372][ T6795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.757888][ T6769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.136618][ T6795] veth0_vlan: entered promiscuous mode [ 112.159775][ T6795] veth1_vlan: entered promiscuous mode [ 112.209690][ T6795] veth0_macvtap: entered promiscuous mode [ 112.230758][ T6795] veth1_macvtap: entered promiscuous mode [ 112.316798][ T6795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.351534][ T6795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.404397][ T4589] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.405064][ T4589] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.405096][ T4589] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.405125][ T4589] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.408901][ T52] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 112.411635][ T52] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 112.412103][ T52] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 112.413126][ T52] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 112.416794][ T52] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 112.595205][ T5598] Bluetooth: hci6: command tx timeout [ 112.673750][ T5598] Bluetooth: hci7: command tx timeout [ 112.789855][ T6769] veth0_vlan: entered promiscuous mode [ 112.805071][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.805089][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.851421][ T6769] veth1_vlan: entered promiscuous mode [ 113.028404][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.028424][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.110660][ T6769] veth0_macvtap: entered promiscuous mode [ 113.129110][ T6769] veth1_macvtap: entered promiscuous mode [ 113.233821][ T5598] Bluetooth: hci8: command tx timeout [ 113.239151][ T6769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.286518][ T6769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.506433][ T4589] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.506492][ T4589] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.506522][ T4589] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.645517][ T6955] FAULT_INJECTION: forcing a failure. [ 113.645517][ T6955] name failslab, interval 1, probability 0, space 0, times 0 [ 113.645552][ T6955] CPU: 1 UID: 0 PID: 6955 Comm: syz.5.380 Not tainted syzkaller #0 PREEMPT(full) [ 113.645576][ T6955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 113.645588][ T6955] Call Trace: [ 113.645595][ T6955] [ 113.645604][ T6955] dump_stack_lvl+0x100/0x190 [ 113.645638][ T6955] should_fail_ex.cold+0x5/0xa [ 113.645665][ T6955] should_failslab+0xc2/0x120 [ 113.645693][ T6955] __kmalloc_cache_noprof+0x91/0x6d0 [ 113.645723][ T6955] ? refill_pi_state_cache+0x91/0x260 [ 113.645757][ T6955] refill_pi_state_cache+0x91/0x260 [ 113.645788][ T6955] futex_requeue+0x8a4/0x22e0 [ 113.645819][ T6955] ? __pfx_futex_wake_mark+0x10/0x10 [ 113.645854][ T6955] ? find_held_lock+0x2b/0x80 [ 113.645881][ T6955] ? __pfx_futex_requeue+0x10/0x10 [ 113.645927][ T6955] ? rcu_read_lock_any_held+0x6a/0x90 [ 113.645961][ T6955] ? find_held_lock+0x2b/0x80 [ 113.645991][ T6955] do_futex+0x3ae/0x440 [ 113.646019][ T6955] ? __pfx_do_futex+0x10/0x10 [ 113.646043][ T6955] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 113.646074][ T6955] __x64_sys_futex+0x34f/0x4d0 [ 113.646102][ T6955] ? __pfx___x64_sys_futex+0x10/0x10 [ 113.646135][ T6955] do_syscall_64+0x123/0x790 [ 113.646163][ T6955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.646182][ T6955] RIP: 0033:0x7f386999e159 [ 113.646197][ T6955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.646215][ T6955] RSP: 002b:00007f386a7a7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 113.646233][ T6955] RAX: ffffffffffffffda RBX: 00007f3869c25fa0 RCX: 00007f386999e159 [ 113.646246][ T6955] RDX: 0000000000000001 RSI: 000000000000000c RDI: 0000000000000000 [ 113.646256][ T6955] RBP: 00007f3869a3506b R08: 0000200000048000 R09: 0000000000000000 [ 113.646266][ T6955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.646277][ T6955] R13: 00007f3869c26038 R14: 00007f3869c25fa0 R15: 00007ffe917fc7e8 [ 113.646300][ T6955] [ 113.804945][ T1286] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.019804][ T31] audit: type=1400 audit(1789642718.881:283): avc: denied { create } for pid=6961 comm="syz.5.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 114.035654][ T6965] netlink: 76 bytes leftover after parsing attributes in process `syz.5.383'. [ 114.035671][ T6965] netlink: 76 bytes leftover after parsing attributes in process `syz.5.383'. [ 114.035682][ T6965] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Register Pid response ret = -22) [ 114.040402][ T31] audit: type=1400 audit(1789642718.901:284): avc: denied { write } for pid=6961 comm="syz.5.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 114.128540][ T1034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.128561][ T1034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.398887][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.398918][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.515151][ T5598] Bluetooth: hci9: command tx timeout [ 114.574954][ T6934] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.579397][ T6934] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.579540][ T6934] bridge_slave_0: entered allmulticast mode [ 114.604371][ T6934] bridge_slave_0: entered promiscuous mode [ 114.622972][ T6934] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.623101][ T6934] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.623408][ T6934] bridge_slave_1: entered allmulticast mode [ 114.648468][ T6934] bridge_slave_1: entered promiscuous mode [ 114.753776][ T5598] Bluetooth: hci7: command tx timeout [ 114.808934][ T6934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.818537][ T6934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.965301][ T6934] team0: Port device team_slave_0 added [ 114.969359][ T6934] team0: Port device team_slave_1 added [ 115.103873][ T6934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.103889][ T6934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.103911][ T6934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.111370][ T6934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.111385][ T6934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.111408][ T6934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.313760][ T5598] Bluetooth: hci8: command tx timeout [ 115.366593][ T6934] hsr_slave_0: entered promiscuous mode [ 115.369897][ T6934] hsr_slave_1: entered promiscuous mode [ 115.375243][ T6934] debugfs: 'hsr0' already exists in 'hsr' [ 115.375259][ T6934] Cannot create hsr debugfs directory [ 115.399880][ T6995] FAULT_INJECTION: forcing a failure. [ 115.399880][ T6995] name failslab, interval 1, probability 0, space 0, times 0 [ 115.399913][ T6995] CPU: 1 UID: 0 PID: 6995 Comm: syz.7.391 Not tainted syzkaller #0 PREEMPT(full) [ 115.399946][ T6995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 115.399958][ T6995] Call Trace: [ 115.399965][ T6995] [ 115.399974][ T6995] dump_stack_lvl+0x100/0x190 [ 115.400009][ T6995] should_fail_ex.cold+0x5/0xa [ 115.400038][ T6995] should_failslab+0xc2/0x120 [ 115.400064][ T6995] __kmalloc_cache_noprof+0x91/0x6d0 [ 115.400094][ T6995] ? io_uring_alloc_task_context+0xa7/0x656 [ 115.400121][ T6995] io_uring_alloc_task_context+0xa7/0x656 [ 115.400144][ T6995] ? __pfx_io_uring_alloc_task_context+0x10/0x10 [ 115.400170][ T6995] ? alloc_file_pseudo+0x1ee/0x290 [ 115.400202][ T6995] __io_uring_add_tctx_node.cold+0x15/0x20a [ 115.400223][ T6995] ? security_inode_init_security_anon+0x7b/0x230 [ 115.400247][ T6995] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 115.400279][ T6995] ? __anon_inode_getfile+0x17c/0x280 [ 115.400302][ T6995] io_uring_setup.cold+0x1a10/0x1cde [ 115.400326][ T6995] ? __pfx_io_uring_setup+0x10/0x10 [ 115.400347][ T6995] ? find_held_lock+0x2b/0x80 [ 115.400393][ T6995] ? xfd_validate_state+0x129/0x190 [ 115.400421][ T6995] __x64_sys_io_uring_setup+0xc2/0x170 [ 115.400444][ T6995] do_syscall_64+0x123/0x790 [ 115.400473][ T6995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.400493][ T6995] RIP: 0033:0x7fcab8f9e159 [ 115.400509][ T6995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.400527][ T6995] RSP: 002b:00007fcab9ea5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 115.400547][ T6995] RAX: ffffffffffffffda RBX: 00007fcab9225fa0 RCX: 00007fcab8f9e159 [ 115.400560][ T6995] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000007dad [ 115.400571][ T6995] RBP: 00007fcab903506b R08: 0000000000000000 R09: 0000000000000000 [ 115.400582][ T6995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.400593][ T6995] R13: 00007fcab9226038 R14: 00007fcab9225fa0 R15: 00007fffc0c2bc68 [ 115.400618][ T6995] [ 115.863335][ T31] audit: type=1400 audit(1789642720.721:285): avc: denied { create } for pid=7002 comm="syz.8.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 115.892141][ T31] audit: type=1400 audit(1789642720.751:286): avc: denied { bind } for pid=7002 comm="syz.8.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 115.914782][ T31] audit: type=1400 audit(1789642720.781:287): avc: denied { setopt } for pid=7002 comm="syz.8.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 115.916505][ T31] audit: type=1400 audit(1789642720.781:288): avc: denied { accept } for pid=7002 comm="syz.8.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 115.916541][ T31] audit: type=1400 audit(1789642720.781:289): avc: denied { write } for pid=7002 comm="syz.8.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 115.919638][ T31] audit: type=1400 audit(1789642720.781:290): avc: denied { read } for pid=7002 comm="syz.8.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 116.405642][ T6934] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 116.417161][ T6934] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 116.419452][ T6934] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 116.458627][ T6934] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 116.466040][ T6934] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 116.489868][ T6934] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 116.494146][ T6934] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 116.525608][ T6934] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 116.593773][ T5598] Bluetooth: hci9: command tx timeout [ 116.878926][ T6934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.896717][ T6934] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.911340][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.911461][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.940191][ T1286] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.940266][ T1286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.010332][ T31] audit: type=1400 audit(1789642721.871:291): avc: denied { write } for pid=7033 comm="syz.5.403" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 118.023475][ T6934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.584032][ T7084] ip_tables: iptables: counters copy to user failed while replacing table [ 118.641379][ T7085] FAULT_INJECTION: forcing a failure. [ 118.641379][ T7085] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.641412][ T7085] CPU: 1 UID: 0 PID: 7085 Comm: syz.5.422 Not tainted syzkaller #0 PREEMPT(full) [ 118.641435][ T7085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 118.641445][ T7085] Call Trace: [ 118.641452][ T7085] [ 118.641460][ T7085] dump_stack_lvl+0x100/0x190 [ 118.641493][ T7085] should_fail_ex.cold+0x5/0xa [ 118.641521][ T7085] _copy_from_user+0x2e/0xd0 [ 118.641543][ T7085] bpf_test_init.isra.0+0xaf/0x100 [ 118.641576][ T7085] bpf_prog_test_run_xdp+0x587/0x1670 [ 118.641607][ T7085] ? lock_acquire+0x1d1/0x380 [ 118.641629][ T7085] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 118.641650][ T7085] ? find_held_lock+0x2b/0x80 [ 118.641677][ T7085] ? __might_fault+0xc5/0x140 [ 118.641710][ T7085] ? fdget+0x17a/0x210 [ 118.641736][ T7085] ? __bpf_prog_get+0x97/0x290 [ 118.641763][ T7085] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 118.641783][ T7085] __sys_bpf+0x2265/0x4a30 [ 118.641801][ T7085] ? plist_check_list+0x1b8/0x280 [ 118.641826][ T7085] ? plist_check_list+0x190/0x280 [ 118.641848][ T7085] ? __pfx___sys_bpf+0x10/0x10 [ 118.641864][ T7085] ? find_held_lock+0x2b/0x80 [ 118.641890][ T7085] ? futex_wake+0x4ea/0x5e0 [ 118.641922][ T7085] ? futex_private_hash_put.part.0+0xdc/0x180 [ 118.641954][ T7085] ? futex_private_hash_put+0x24/0x30 [ 118.641985][ T7085] ? __pfx_futex_wake+0x10/0x10 [ 118.642019][ T7085] ? lockdep_hardirqs_on+0x7d/0x110 [ 118.642066][ T7085] ? __x64_sys_futex+0x34f/0x4d0 [ 118.642092][ T7085] ? __x64_sys_futex+0x358/0x4d0 [ 118.642123][ T7085] ? xfd_validate_state+0x129/0x190 [ 118.642149][ T7085] ? __x64_sys_bpf+0xce/0x140 [ 118.642167][ T7085] __x64_sys_bpf+0xce/0x140 [ 118.642188][ T7085] ? do_syscall_64+0xae/0x790 [ 118.642214][ T7085] do_syscall_64+0x123/0x790 [ 118.642242][ T7085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.642262][ T7085] RIP: 0033:0x7f386999e159 [ 118.642278][ T7085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.642296][ T7085] RSP: 002b:00007f386a7a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 118.642315][ T7085] RAX: ffffffffffffffda RBX: 00007f3869c25fa0 RCX: 00007f386999e159 [ 118.642328][ T7085] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 118.642340][ T7085] RBP: 00007f3869a3506b R08: 0000000000000000 R09: 0000000000000000 [ 118.642352][ T7085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.642362][ T7085] R13: 00007f3869c26038 R14: 00007f3869c25fa0 R15: 00007ffe917fc7e8 [ 118.642388][ T7085] [ 118.677862][ T5598] Bluetooth: hci9: command tx timeout [ 119.111197][ T6934] veth0_vlan: entered promiscuous mode [ 119.140758][ T6934] veth1_vlan: entered promiscuous mode [ 119.274091][ T6934] veth0_macvtap: entered promiscuous mode [ 119.300360][ T6934] veth1_macvtap: entered promiscuous mode [ 119.401871][ T6934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.419872][ T6934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.481647][ T43] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.485053][ T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.485686][ T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.485712][ T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.809675][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.809695][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.842680][ T31] audit: type=1400 audit(1789642724.701:292): avc: denied { ioctl } for pid=7104 comm="syz.5.427" path="/dev/input/event0" dev="devtmpfs" ino=917 ioctlcmd=0x4519 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 119.918276][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.918296][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.090416][ T31] audit: type=1400 audit(1789642724.951:293): avc: denied { ioctl } for pid=7107 comm="syz.8.429" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 120.143991][ T31] audit: type=1400 audit(1789642725.001:294): avc: denied { mmap_zero } for pid=7107 comm="syz.8.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 120.211033][ T31] audit: type=1400 audit(1789642725.071:295): avc: denied { create } for pid=7107 comm="syz.8.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 120.222601][ T31] audit: type=1400 audit(1789642725.081:296): avc: denied { connect } for pid=7107 comm="syz.8.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 120.428613][ T31] audit: type=1400 audit(1789642725.291:297): avc: denied { unlink } for pid=7113 comm="syz.9.377" name="#1" dev="tmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 120.489307][ T31] audit: type=1400 audit(1789642725.351:298): avc: denied { create } for pid=7113 comm="syz.9.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 120.564820][ T31] audit: type=1400 audit(1789642725.431:299): avc: denied { sys_admin } for pid=7113 comm="syz.9.377" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 120.755451][ T5598] Bluetooth: hci9: command tx timeout [ 120.876690][ T31] audit: type=1400 audit(1789642725.741:300): avc: denied { write } for pid=7119 comm="syz.9.433" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 121.202477][ T7129] ip_tables: iptables: counters copy to user failed while replacing table [ 121.312624][ T7134] FAULT_INJECTION: forcing a failure. [ 121.312624][ T7134] name failslab, interval 1, probability 0, space 0, times 0 [ 121.312656][ T7134] CPU: 0 UID: 0 PID: 7134 Comm: syz.8.438 Not tainted syzkaller #0 PREEMPT(full) [ 121.312677][ T7134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 121.312689][ T7134] Call Trace: [ 121.312696][ T7134] [ 121.312704][ T7134] dump_stack_lvl+0x100/0x190 [ 121.312737][ T7134] should_fail_ex.cold+0x5/0xa [ 121.312764][ T7134] should_failslab+0xc2/0x120 [ 121.312790][ T7134] __kmalloc_cache_noprof+0x91/0x6d0 [ 121.312819][ T7134] ? bpf_prog_alloc_no_stats+0x161/0x690 [ 121.312847][ T7134] bpf_prog_alloc_no_stats+0x161/0x690 [ 121.312874][ T7134] bpf_prog_alloc+0x3b/0x200 [ 121.312899][ T7134] __get_filter+0x112/0x2c0 [ 121.312928][ T7134] sk_attach_filter+0x1c/0x150 [ 121.312957][ T7134] sk_setsockopt+0x3a9b/0x5d80 [ 121.312989][ T7134] ? __pfx_sk_setsockopt+0x10/0x10 [ 121.313015][ T7134] ? futex_wait+0x11e/0x370 [ 121.313038][ T7134] ? sock_has_perm+0x25a/0x2f0 [ 121.313068][ T7134] ? __pfx_sock_has_perm+0x10/0x10 [ 121.313097][ T7134] ? selinux_netlbl_socket_setsockopt+0x134/0x470 [ 121.313122][ T7134] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 121.313159][ T7134] unix_setsockopt+0xf9/0x340 [ 121.313194][ T7134] ? __pfx_unix_setsockopt+0x10/0x10 [ 121.313221][ T7134] ? selinux_socket_setsockopt+0x6a/0x80 [ 121.313239][ T7134] ? __pfx_unix_setsockopt+0x10/0x10 [ 121.313268][ T7134] do_sock_setsockopt+0xf3/0x1d0 [ 121.313297][ T7134] __sys_setsockopt+0x195/0x220 [ 121.313324][ T7134] __x64_sys_setsockopt+0xbd/0x160 [ 121.313345][ T7134] ? do_syscall_64+0xae/0x790 [ 121.313370][ T7134] ? lockdep_hardirqs_on+0x7d/0x110 [ 121.313394][ T7134] do_syscall_64+0x123/0x790 [ 121.313421][ T7134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.313440][ T7134] RIP: 0033:0x7efdcbd9e159 [ 121.313457][ T7134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.313475][ T7134] RSP: 002b:00007efdccd1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 121.313494][ T7134] RAX: ffffffffffffffda RBX: 00007efdcc025fa0 RCX: 00007efdcbd9e159 [ 121.313506][ T7134] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000005 [ 121.313519][ T7134] RBP: 00007efdcbe3506b R08: 0000000000000010 R09: 0000000000000000 [ 121.313531][ T7134] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000 [ 121.313543][ T7134] R13: 00007efdcc026038 R14: 00007efdcc025fa0 R15: 00007ffd0e552df8 [ 121.313568][ T7134] [ 121.690601][ T31] audit: type=1400 audit(1789642726.551:301): avc: denied { create } for pid=7144 comm="syz.8.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 121.993337][ T7155] 0: reclassify loop, rule prio 0, protocol 03 [ 122.152650][ T7158] FAULT_INJECTION: forcing a failure. [ 122.152650][ T7158] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.152683][ T7158] CPU: 1 UID: 0 PID: 7158 Comm: syz.8.449 Not tainted syzkaller #0 PREEMPT(full) [ 122.152705][ T7158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 122.152716][ T7158] Call Trace: [ 122.152723][ T7158] [ 122.152731][ T7158] dump_stack_lvl+0x100/0x190 [ 122.152764][ T7158] should_fail_ex.cold+0x5/0xa [ 122.152792][ T7158] _copy_from_user+0x2e/0xd0 [ 122.152816][ T7158] __sys_bpf+0x2f5/0x4a30 [ 122.152846][ T7158] ? __pfx___sys_bpf+0x10/0x10 [ 122.152864][ T7158] ? find_held_lock+0x2b/0x80 [ 122.152892][ T7158] ? futex_wake+0x4ea/0x5e0 [ 122.152937][ T7158] ? rcu_read_lock_any_held+0x6a/0x90 [ 122.152964][ T7158] ? find_held_lock+0x2b/0x80 [ 122.152989][ T7158] ? ksys_write+0x190/0x250 [ 122.153009][ T7158] ? ksys_write+0x190/0x250 [ 122.153043][ T7158] ? __x64_sys_futex+0x34f/0x4d0 [ 122.153068][ T7158] ? __x64_sys_futex+0x358/0x4d0 [ 122.153096][ T7158] ? xfd_validate_state+0x129/0x190 [ 122.153120][ T7158] ? __x64_sys_bpf+0xce/0x140 [ 122.153139][ T7158] __x64_sys_bpf+0xce/0x140 [ 122.153160][ T7158] ? do_syscall_64+0xae/0x790 [ 122.153186][ T7158] do_syscall_64+0x123/0x790 [ 122.153214][ T7158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.153234][ T7158] RIP: 0033:0x7efdcbd9e159 [ 122.153251][ T7158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.153268][ T7158] RSP: 002b:00007efdccd1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 122.153287][ T7158] RAX: ffffffffffffffda RBX: 00007efdcc025fa0 RCX: 00007efdcbd9e159 [ 122.153300][ T7158] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 122.153311][ T7158] RBP: 00007efdcbe3506b R08: 0000000000000000 R09: 0000000000000000 [ 122.153322][ T7158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.153333][ T7158] R13: 00007efdcc026038 R14: 00007efdcc025fa0 R15: 00007ffd0e552df8 [ 122.153360][ T7158] [ 122.444337][ T7162] FAULT_INJECTION: forcing a failure. [ 122.444337][ T7162] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.444371][ T7162] CPU: 1 UID: 0 PID: 7162 Comm: syz.7.450 Not tainted syzkaller #0 PREEMPT(full) [ 122.444395][ T7162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 122.444407][ T7162] Call Trace: [ 122.444415][ T7162] [ 122.444422][ T7162] dump_stack_lvl+0x100/0x190 [ 122.444454][ T7162] should_fail_ex.cold+0x5/0xa [ 122.444482][ T7162] _copy_from_user+0x2e/0xd0 [ 122.444505][ T7162] do_ipv6_setsockopt+0x73d/0x44a0 [ 122.444534][ T7162] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 122.444556][ T7162] ? avc_has_perm_noaudit+0x56/0x3b0 [ 122.444586][ T7162] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 122.444612][ T7162] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 122.444644][ T7162] ? avc_has_perm_noaudit+0x145/0x3b0 [ 122.444673][ T7162] ? avc_has_perm+0x135/0x1e0 [ 122.444700][ T7162] ? __pfx_avc_has_perm+0x10/0x10 [ 122.444729][ T7162] ? futex_wait+0x11e/0x370 [ 122.444755][ T7162] ? sock_has_perm+0x25a/0x2f0 [ 122.444784][ T7162] ? __pfx_sock_has_perm+0x10/0x10 [ 122.444818][ T7162] ? ipv6_setsockopt+0xcb/0x170 [ 122.444839][ T7162] ipv6_setsockopt+0xcb/0x170 [ 122.444864][ T7162] rawv6_setsockopt+0xee/0x5a0 [ 122.444884][ T7162] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 122.444905][ T7162] ? selinux_socket_setsockopt+0x6a/0x80 [ 122.444930][ T7162] ? sock_common_setsockopt+0x2e/0xf0 [ 122.444958][ T7162] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 122.444989][ T7162] do_sock_setsockopt+0xf3/0x1d0 [ 122.445020][ T7162] __sys_setsockopt+0x195/0x220 [ 122.445048][ T7162] __x64_sys_setsockopt+0xbd/0x160 [ 122.445069][ T7162] ? do_syscall_64+0xae/0x790 [ 122.445094][ T7162] ? lockdep_hardirqs_on+0x7d/0x110 [ 122.445120][ T7162] do_syscall_64+0x123/0x790 [ 122.445147][ T7162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.445167][ T7162] RIP: 0033:0x7fcab8f9e159 [ 122.445183][ T7162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.445200][ T7162] RSP: 002b:00007fcab9ea5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 122.445218][ T7162] RAX: ffffffffffffffda RBX: 00007fcab9225fa0 RCX: 00007fcab8f9e159 [ 122.445229][ T7162] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000006 [ 122.445240][ T7162] RBP: 00007fcab903506b R08: 0000000000000570 R09: 0000000000000000 [ 122.445251][ T7162] R10: 0000200000001480 R11: 0000000000000246 R12: 0000000000000000 [ 122.445262][ T7162] R13: 00007fcab9226038 R14: 00007fcab9225fa0 R15: 00007fffc0c2bc68 [ 122.445284][ T7162] [ 122.615342][ T7167] FAULT_INJECTION: forcing a failure. [ 122.615342][ T7167] name fail_futex, interval 1, probability 0, space 0, times 0 [ 122.615371][ T7167] CPU: 1 UID: 0 PID: 7167 Comm: syz.5.453 Not tainted syzkaller #0 PREEMPT(full) [ 122.615392][ T7167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 122.615402][ T7167] Call Trace: [ 122.615408][ T7167] [ 122.615415][ T7167] dump_stack_lvl+0x100/0x190 [ 122.615442][ T7167] should_fail_ex.cold+0x5/0xa [ 122.615465][ T7167] get_futex_key+0x1d0/0x14f0 [ 122.615492][ T7167] ? __pfx_get_futex_key+0x10/0x10 [ 122.615521][ T7167] futex_wake+0xf4/0x5e0 [ 122.615548][ T7167] ? __pfx_futex_wake+0x10/0x10 [ 122.615573][ T7167] ? kasan_quarantine_put+0x104/0x240 [ 122.615595][ T7167] ? putname+0xb1/0x110 [ 122.615614][ T7167] ? kmem_cache_free+0x127/0x6c0 [ 122.615642][ T7167] do_futex+0x2b2/0x440 [ 122.615665][ T7167] ? __pfx_do_futex+0x10/0x10 [ 122.615684][ T7167] ? __pfx_do_sys_openat2+0x10/0x10 [ 122.615712][ T7167] __x64_sys_futex+0x34f/0x4d0 [ 122.615734][ T7167] ? __x64_sys_openat+0x12d/0x210 [ 122.615757][ T7167] ? __pfx___x64_sys_futex+0x10/0x10 [ 122.615787][ T7167] do_syscall_64+0x123/0x790 [ 122.615812][ T7167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.615830][ T7167] RIP: 0033:0x7f386999e159 [ 122.615846][ T7167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.615862][ T7167] RSP: 002b:00007f386a7a70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 122.615879][ T7167] RAX: ffffffffffffffda RBX: 00007f3869c25fa8 RCX: 00007f386999e159 [ 122.615891][ T7167] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3869c25fac [ 122.615901][ T7167] RBP: 00007f3869c25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 122.615918][ T7167] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 122.615930][ T7167] R13: 00007f3869c26038 R14: 00007ffe917fc700 R15: 00007ffe917fc7e8 [ 122.615955][ T7167] [ 122.642944][ T7170] ======================================================= [ 122.642944][ T7170] WARNING: The mand mount option has been deprecated and [ 122.642944][ T7170] and is ignored by this kernel. Remove the mand [ 122.642944][ T7170] option from the mount to silence this warning. [ 122.642944][ T7170] ======================================================= [ 122.719922][ T7173] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 122.996264][ T7177] fuse: Bad value for 'fd' [ 123.222708][ T7185] FAULT_INJECTION: forcing a failure. [ 123.222708][ T7185] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.222739][ T7185] CPU: 0 UID: 0 PID: 7185 Comm: syz.8.462 Not tainted syzkaller #0 PREEMPT(full) [ 123.222758][ T7185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 123.222768][ T7185] Call Trace: [ 123.222773][ T7185] [ 123.222781][ T7185] dump_stack_lvl+0x100/0x190 [ 123.222813][ T7185] should_fail_ex.cold+0x5/0xa [ 123.222842][ T7185] _copy_from_user+0x2e/0xd0 [ 123.222862][ T7185] __sys_bpf+0x2f5/0x4a30 [ 123.222888][ T7185] ? __pfx___sys_bpf+0x10/0x10 [ 123.222904][ T7185] ? find_held_lock+0x2b/0x80 [ 123.222928][ T7185] ? futex_wake+0x4ea/0x5e0 [ 123.222966][ T7185] ? rcu_read_lock_any_held+0x6a/0x90 [ 123.222989][ T7185] ? find_held_lock+0x2b/0x80 [ 123.223013][ T7185] ? ksys_write+0x190/0x250 [ 123.223031][ T7185] ? ksys_write+0x190/0x250 [ 123.223062][ T7185] ? __x64_sys_futex+0x34f/0x4d0 [ 123.223084][ T7185] ? __x64_sys_futex+0x358/0x4d0 [ 123.223110][ T7185] ? xfd_validate_state+0x129/0x190 [ 123.223131][ T7185] ? __x64_sys_bpf+0xce/0x140 [ 123.223149][ T7185] __x64_sys_bpf+0xce/0x140 [ 123.223166][ T7185] ? do_syscall_64+0xae/0x790 [ 123.223189][ T7185] do_syscall_64+0x123/0x790 [ 123.223214][ T7185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.223231][ T7185] RIP: 0033:0x7efdcbd9e159 [ 123.223247][ T7185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.223264][ T7185] RSP: 002b:00007efdccd1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 123.223281][ T7185] RAX: ffffffffffffffda RBX: 00007efdcc025fa0 RCX: 00007efdcbd9e159 [ 123.223292][ T7185] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 123.223303][ T7185] RBP: 00007efdcbe3506b R08: 0000000000000000 R09: 0000000000000000 [ 123.223312][ T7185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.223321][ T7185] R13: 00007efdcc026038 R14: 00007efdcc025fa0 R15: 00007ffd0e552df8 [ 123.223341][ T7185] [ 123.818704][ T7211] FAULT_INJECTION: forcing a failure. [ 123.818704][ T7211] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.818735][ T7211] CPU: 0 UID: 0 PID: 7211 Comm: syz.8.474 Not tainted syzkaller #0 PREEMPT(full) [ 123.818757][ T7211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 123.818768][ T7211] Call Trace: [ 123.818775][ T7211] [ 123.818782][ T7211] dump_stack_lvl+0x100/0x190 [ 123.818813][ T7211] should_fail_ex.cold+0x5/0xa [ 123.818839][ T7211] strncpy_from_user+0x3b/0x2d0 [ 123.818865][ T7211] keyctl_restrict_keyring+0xeb/0x250 [ 123.818885][ T7211] ? __pfx_keyctl_restrict_keyring+0x10/0x10 [ 123.818912][ T7211] __do_sys_keyctl+0x2e8/0x5a0 [ 123.818931][ T7211] do_syscall_64+0x123/0x790 [ 123.818959][ T7211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.818978][ T7211] RIP: 0033:0x7efdcbd9e159 [ 123.818993][ T7211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.819010][ T7211] RSP: 002b:00007efdccd1c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 123.819029][ T7211] RAX: ffffffffffffffda RBX: 00007efdcc025fa0 RCX: 00007efdcbd9e159 [ 123.819041][ T7211] RDX: 0000200000000200 RSI: 000000000973d748 RDI: 000000000000001d [ 123.819053][ T7211] RBP: 00007efdcbe3506b R08: 0000000000000000 R09: 0000000000000000 [ 123.819064][ T7211] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 123.819080][ T7211] R13: 00007efdcc026038 R14: 00007efdcc025fa0 R15: 00007ffd0e552df8 [ 123.819105][ T7211] [ 124.147037][ T7217] device-mapper: ioctl: Unable to rename non-existent device, to .2\´£«.j—DH [ 124.719795][ T7248] netlink: 12 bytes leftover after parsing attributes in process `syz.9.492'. [ 125.140216][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 125.140232][ T31] audit: type=1400 audit(1789642730.001:307): avc: denied { create } for pid=7267 comm="syz.9.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 125.141107][ T31] audit: type=1400 audit(1789642730.001:308): avc: denied { ioctl } for pid=7267 comm="syz.9.501" path="socket:[16184]" dev="sockfs" ino=16184 ioctlcmd=0x8912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 125.636264][ T52] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 125.638483][ T52] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 125.638942][ T52] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 125.639782][ T52] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 125.641214][ T52] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 127.036688][ T31] audit: type=1400 audit(1789642731.901:309): avc: denied { name_connect } for pid=7334 comm="syz.7.525" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 127.077115][ T7337] sctp: [Deprecated]: syz.9.526 (pid 7337) Use of int in max_burst socket option. [ 127.077115][ T7337] Use struct sctp_assoc_value instead [ 127.242016][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.242064][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.340836][ T7350] device-mapper: ioctl: name not supplied when creating device [ 127.345533][ T7350] device-mapper: ioctl: Unable to change name on mapped device to one that already exists: [ 127.402955][ T7285] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.403625][ T7285] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.404291][ T7285] bridge_slave_0: entered allmulticast mode [ 127.405513][ T7285] bridge_slave_0: entered promiscuous mode [ 127.408841][ T7285] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.408945][ T7285] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.409192][ T7285] bridge_slave_1: entered allmulticast mode [ 127.414616][ T7285] bridge_slave_1: entered promiscuous mode [ 127.444360][ T7285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.447117][ T7285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.467825][ T7285] team0: Port device team_slave_0 added [ 127.469982][ T7285] team0: Port device team_slave_1 added [ 127.515790][ T7285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.515809][ T7285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.515831][ T7285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.517870][ T7285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.517883][ T7285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.517905][ T7285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.657100][ T7285] hsr_slave_0: entered promiscuous mode [ 127.659180][ T7285] hsr_slave_1: entered promiscuous mode [ 127.660675][ T7285] debugfs: 'hsr0' already exists in 'hsr' [ 127.660693][ T7285] Cannot create hsr debugfs directory [ 127.687113][ T7358] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.699448][ T7358] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.714872][ T5598] Bluetooth: hci10: command tx timeout [ 127.987209][ T31] audit: type=1400 audit(1789642732.851:310): avc: denied { read write } for pid=7366 comm="syz.9.538" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 127.987537][ T31] audit: type=1400 audit(1789642732.851:311): avc: denied { open } for pid=7366 comm="syz.9.538" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 127.990042][ T31] audit: type=1400 audit(1789642732.851:312): avc: denied { block_suspend } for pid=7366 comm="syz.9.538" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 128.140794][ T31] audit: type=1400 audit(1789642733.001:313): avc: denied { name_connect } for pid=7369 comm="syz.8.539" dest=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 128.276259][ T7376] device-mapper: ioctl: name not supplied when creating device [ 128.276536][ T7376] device-mapper: ioctl: Unable to change name on mapped device to one that already exists: PÚÿÿÿ-D devtmpfs./dev/consolelers[ 128.646429][ T7285] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.730068][ T31] audit: type=1400 audit(1789642733.591:314): avc: denied { allowed } for pid=7397 comm="syz.9.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 128.770311][ T7285] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.859078][ T7285] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.929479][ T7285] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.227047][ T7285] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 129.231798][ T7285] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 129.232423][ T7285] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 129.234154][ T31] audit: type=1400 audit(1789642734.091:315): avc: denied { node_bind } for pid=7415 comm="syz.7.560" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 129.238090][ T7285] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 129.238699][ T7285] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 129.259092][ T7285] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 129.259778][ T7285] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 129.287913][ T7285] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 129.305368][ T31] audit: type=1400 audit(1789642734.171:316): avc: denied { setopt } for pid=7415 comm="syz.7.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 129.475488][ T7285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.618858][ T7285] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.623336][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.623422][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.639893][ T4589] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.639971][ T4589] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.749517][ T7285] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 129.749541][ T7285] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 129.796297][ T5598] Bluetooth: hci10: command tx timeout [ 130.398754][ T31] audit: type=1400 audit(1789642735.261:317): avc: denied { mounton } for pid=7457 comm="syz.8.571" path="/53/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 130.528008][ T7464] fuse: Unknown parameter 'grou00000000000000000000' [ 130.574723][ T7285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.640322][ T7285] veth0_vlan: entered promiscuous mode [ 130.670857][ T7285] veth1_vlan: entered promiscuous mode [ 130.750851][ T7285] veth0_macvtap: entered promiscuous mode [ 130.773280][ T7285] veth1_macvtap: entered promiscuous mode [ 130.798289][ T7285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.815847][ T7285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.874589][ T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.878893][ T1286] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.878943][ T1286] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.878968][ T1286] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.070320][ T31] audit: type=1400 audit(1789642735.931:318): avc: denied { audit_write } for pid=7479 comm="syz.7.581" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 131.073220][ T31] audit: type=1400 audit(1789642735.931:319): avc: denied { watch } for pid=7479 comm="syz.7.581" path="/49/bus" dev="tmpfs" ino=281 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 131.073264][ T31] audit: type=1400 audit(1789642735.931:320): avc: denied { watch_sb watch_reads } for pid=7479 comm="syz.7.581" path="/49/bus" dev="tmpfs" ino=281 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 131.083860][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.083877][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.145598][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.145616][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.179731][ T31] audit: type=1400 audit(1789642736.041:321): avc: denied { mount } for pid=7479 comm="syz.7.581" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 131.182326][ T7480] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 131.183583][ T31] audit: type=1400 audit(1789642736.041:322): avc: denied { append } for pid=7479 comm="syz.7.581" name="trace_pipe" dev="tracefs" ino=4048 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 131.212571][ T31] audit: type=1400 audit(1789642736.071:323): avc: denied { read } for pid=7479 comm="syz.7.581" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 131.297410][ T31] audit: type=1400 audit(1789642736.161:324): avc: denied { unmount } for pid=6769 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 131.452897][ T7490] fuse: Unknown parameter 'grou00000000000000000000' [ 131.658820][ T7502] capability: warning: `syz.8.589' uses deprecated v2 capabilities in a way that may be insecure [ 131.762668][ T31] audit: type=1400 audit(1789642736.621:325): avc: denied { write } for pid=7505 comm="syz.9.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 131.787672][ T7506] netlink: 'syz.9.591': attribute type 8 has an invalid length. [ 131.787691][ T7506] netlink: 'syz.9.591': attribute type 3 has an invalid length. [ 131.787702][ T7506] netlink: 24 bytes leftover after parsing attributes in process `syz.9.591'. [ 131.809311][ T31] audit: type=1400 audit(1789642736.671:326): avc: denied { listen } for pid=7503 comm="syz.7.590" laddr=172.20.20.170 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 131.874433][ T5598] Bluetooth: hci10: command tx timeout [ 132.356041][ T7529] FAULT_INJECTION: forcing a failure. [ 132.356041][ T7529] name failslab, interval 1, probability 0, space 0, times 0 [ 132.356072][ T7529] CPU: 0 UID: 0 PID: 7529 Comm: syz.5.602 Not tainted syzkaller #0 PREEMPT(full) [ 132.356095][ T7529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 132.356107][ T7529] Call Trace: [ 132.356114][ T7529] [ 132.356121][ T7529] dump_stack_lvl+0x100/0x190 [ 132.356152][ T7529] should_fail_ex.cold+0x5/0xa [ 132.356180][ T7529] should_failslab+0xc2/0x120 [ 132.356205][ T7529] __kmalloc_node_noprof+0xff/0x880 [ 132.356226][ T7529] ? mark_held_locks+0x40/0x70 [ 132.356247][ T7529] ? __blk_mq_realloc_hw_ctxs+0x579/0x820 [ 132.356282][ T7529] __blk_mq_realloc_hw_ctxs+0x579/0x820 [ 132.356316][ T7529] ? lockdep_init_map_type+0x5c/0x250 [ 132.356340][ T7529] blk_mq_init_allocated_queue+0x308/0x1440 [ 132.356368][ T7529] ? blk_alloc_queue+0x627/0x790 [ 132.356388][ T7529] ? blk_alloc_queue+0x1a3/0x790 [ 132.356405][ T7529] ? alloc_pages_node_noprof+0x11d/0x200 [ 132.356424][ T7529] blk_mq_alloc_queue+0x1bd/0x290 [ 132.356457][ T7529] ? __pfx_blk_mq_alloc_queue+0x10/0x10 [ 132.356500][ T7529] ? blk_mq_alloc_tag_set+0xe2c/0x1330 [ 132.356533][ T7529] __blk_mq_alloc_disk+0x29/0x120 [ 132.356559][ T7529] loop_add+0x498/0xb60 [ 132.356590][ T7529] ? __pfx_loop_add+0x10/0x10 [ 132.356633][ T7529] ? __fget_files+0x34/0x3d0 [ 132.356660][ T7529] loop_control_ioctl+0xae/0x620 [ 132.356679][ T7529] ? __pfx_loop_control_ioctl+0x10/0x10 [ 132.356697][ T7529] ? selinux_file_ioctl+0x13b/0x290 [ 132.356717][ T7529] ? selinux_file_ioctl+0xb6/0x290 [ 132.356739][ T7529] ? __pfx_loop_control_ioctl+0x10/0x10 [ 132.356758][ T7529] __x64_sys_ioctl+0x18e/0x210 [ 132.356780][ T7529] do_syscall_64+0x123/0x790 [ 132.356806][ T7529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.356826][ T7529] RIP: 0033:0x7f386999e159 [ 132.356843][ T7529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.356859][ T7529] RSP: 002b:00007f386a7a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 132.356878][ T7529] RAX: ffffffffffffffda RBX: 00007f3869c25fa0 RCX: 00007f386999e159 [ 132.356889][ T7529] RDX: 00000000ffffffe4 RSI: 0000000000004c80 RDI: 0000000000000004 [ 132.356900][ T7529] RBP: 00007f3869a3506b R08: 0000000000000000 R09: 0000000000000000 [ 132.356910][ T7529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.356919][ T7529] R13: 00007f3869c26038 R14: 00007f3869c25fa0 R15: 00007ffe917fc7e8 [ 132.356941][ T7529] [ 132.875882][ T12] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.096944][ T12] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.238586][ T12] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.279011][ T7552] tun0: tun_chr_ioctl cmd 1074025675 [ 133.279033][ T7552] tun0: persist enabled [ 133.299185][ T7553] tun0: tun_chr_ioctl cmd 1074025675 [ 133.299205][ T7553] tun0: persist enabled [ 133.300296][ T7552] tun0: tun_chr_ioctl cmd 2147767517 [ 133.429375][ T12] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.676880][ T7571] x_tables: duplicate entry at hook 2 [ 133.677404][ T7571] x_tables: duplicate underflow at hook 3 [ 133.811838][ T7574] fuse: Unknown parameter 'group_i00000000000000000000' [ 133.935186][ T52] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 133.937956][ T52] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 133.938763][ T52] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 133.941836][ T52] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 133.942714][ T52] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 133.958627][ T52] Bluetooth: hci10: command tx timeout [ 134.108951][ T12] bridge_slave_1: left allmulticast mode [ 134.108992][ T12] bridge_slave_1: left promiscuous mode [ 134.110277][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.162413][ T12] bridge_slave_0: left allmulticast mode [ 134.162439][ T12] bridge_slave_0: left promiscuous mode [ 134.162607][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.850842][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.865707][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.868467][ T12] bond0 (unregistering): Released all slaves [ 134.992412][ T7615] syzkaller0: entered promiscuous mode [ 134.992434][ T7615] syzkaller0: entered allmulticast mode [ 135.406364][ T7647] sctp: [Deprecated]: syz.5.642 (pid 7647) Use of struct sctp_assoc_value in delayed_ack socket option. [ 135.406364][ T7647] Use struct sctp_sack_info instead [ 135.408224][ T7647] sctp: [Deprecated]: syz.5.642 (pid 7647) Use of int in max_burst socket option. [ 135.408224][ T7647] Use struct sctp_assoc_value instead [ 135.408443][ T7647] sctp: [Deprecated]: syz.5.642 (pid 7647) Use of struct sctp_assoc_value in delayed_ack socket option. [ 135.408443][ T7647] Use struct sctp_sack_info instead [ 135.801542][ T7663] netlink: 56 bytes leftover after parsing attributes in process `syz.8.650'. [ 135.857291][ T7667] device-mapper: ioctl: name not supplied when creating device [ 135.857560][ T7667] device-mapper: ioctl: Unable to change name on mapped device to one that already exists: [ 136.039290][ T52] Bluetooth: hci9: command tx timeout [ 136.897743][ T5263] 8021q: adding VLAN 0 to HW filter on device eth1 [ 137.121949][ T7693] fuse: Bad value for 'user_id' [ 137.121970][ T7693] fuse: Bad value for 'user_id' [ 137.358190][ T7707] netlink: 12 bytes leftover after parsing attributes in process `syz.5.665'. [ 137.490237][ T12] hsr_slave_0: left promiscuous mode [ 137.508248][ T12] hsr_slave_1: left promiscuous mode [ 137.509105][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.509134][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.522966][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.522984][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.588403][ T12] veth1_macvtap: left promiscuous mode [ 137.588453][ T12] veth0_macvtap: left promiscuous mode [ 137.588540][ T12] veth1_vlan: left promiscuous mode [ 137.588607][ T12] veth0_vlan: left promiscuous mode [ 137.689350][ T7725] FAULT_INJECTION: forcing a failure. [ 137.689350][ T7725] name failslab, interval 1, probability 0, space 0, times 0 [ 137.689384][ T7725] CPU: 1 UID: 0 PID: 7725 Comm: syz.2.669 Not tainted syzkaller #0 PREEMPT(full) [ 137.689405][ T7725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 137.689417][ T7725] Call Trace: [ 137.689423][ T7725] [ 137.689431][ T7725] dump_stack_lvl+0x100/0x190 [ 137.689464][ T7725] should_fail_ex.cold+0x5/0xa [ 137.689492][ T7725] should_failslab+0xc2/0x120 [ 137.689517][ T7725] __kmalloc_noprof+0xfc/0x840 [ 137.689541][ T7725] ? lsm_blob_alloc+0x68/0x90 [ 137.689573][ T7725] lsm_blob_alloc+0x68/0x90 [ 137.689600][ T7725] security_bpf_map_create+0x31/0x2d0 [ 137.689624][ T7725] map_create+0x143a/0x30d0 [ 137.689650][ T7725] ? find_held_lock+0x2b/0x80 [ 137.689676][ T7725] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 137.689704][ T7725] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 137.689739][ T7725] ? __pfx_map_create+0x10/0x10 [ 137.689767][ T7725] ? avc_has_perm+0x135/0x1e0 [ 137.689794][ T7725] ? __pfx_avc_has_perm+0x10/0x10 [ 137.689817][ T7725] ? __might_fault+0xc5/0x140 [ 137.689846][ T7725] ? __might_fault+0xc5/0x140 [ 137.689878][ T7725] ? selinux_bpf+0xfb/0x150 [ 137.689909][ T7725] __sys_bpf+0x12a0/0x4a30 [ 137.689935][ T7725] ? __pfx___sys_bpf+0x10/0x10 [ 137.689957][ T7725] ? find_held_lock+0x2b/0x80 [ 137.689983][ T7725] ? futex_wake+0x4ea/0x5e0 [ 137.690032][ T7725] ? rcu_read_lock_any_held+0x6a/0x90 [ 137.690063][ T7725] ? find_held_lock+0x2b/0x80 [ 137.690090][ T7725] ? ksys_write+0x190/0x250 [ 137.690109][ T7725] ? ksys_write+0x190/0x250 [ 137.690145][ T7725] ? __x64_sys_futex+0x34f/0x4d0 [ 137.690170][ T7725] ? __x64_sys_futex+0x358/0x4d0 [ 137.690198][ T7725] ? xfd_validate_state+0x129/0x190 [ 137.690221][ T7725] ? __x64_sys_bpf+0xce/0x140 [ 137.690239][ T7725] __x64_sys_bpf+0xce/0x140 [ 137.690258][ T7725] ? do_syscall_64+0xae/0x790 [ 137.690284][ T7725] do_syscall_64+0x123/0x790 [ 137.690311][ T7725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.690330][ T7725] RIP: 0033:0x7f2217d9e159 [ 137.690346][ T7725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.690364][ T7725] RSP: 002b:00007f2218d1b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 137.690383][ T7725] RAX: ffffffffffffffda RBX: 00007f2218025fa0 RCX: 00007f2217d9e159 [ 137.690395][ T7725] RDX: 0000000000000050 RSI: 0000200000000840 RDI: 0000000000000000 [ 137.690406][ T7725] RBP: 00007f2217e3506b R08: 0000000000000000 R09: 0000000000000000 [ 137.690416][ T7725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.690427][ T7725] R13: 00007f2218026038 R14: 00007f2218025fa0 R15: 00007ffcda9bbb68 [ 137.690452][ T7725] [ 138.080345][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 138.080362][ T31] audit: type=1400 audit(1789642742.941:332): avc: denied { write } for pid=7696 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.123579][ T52] Bluetooth: hci9: command tx timeout [ 138.249413][ T31] audit: type=1400 audit(1789642743.111:333): avc: denied { write } for pid=7735 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.385525][ T12] team0 (unregistering): Port device team_slave_1 removed [ 138.388734][ T7737] netlink: 20 bytes leftover after parsing attributes in process `syz.2.673'. [ 138.392408][ T12] team0 (unregistering): Port device team_slave_0 removed [ 138.551129][ T5263] 8021q: adding VLAN 0 to HW filter on device eth2 [ 138.812054][ T7754] netlink: 'syz.5.678': attribute type 8 has an invalid length. [ 138.812074][ T7754] netlink: 'syz.5.678': attribute type 3 has an invalid length. [ 138.812086][ T7754] netlink: 24 bytes leftover after parsing attributes in process `syz.5.678'. [ 138.986375][ T7759] fuse: Bad value for 'user_id' [ 138.986393][ T7759] fuse: Bad value for 'user_id' [ 139.218464][ T7767] FAULT_INJECTION: forcing a failure. [ 139.218464][ T7767] name failslab, interval 1, probability 0, space 0, times 0 [ 139.218505][ T7767] CPU: 0 UID: 0 PID: 7767 Comm: syz.5.680 Not tainted syzkaller #0 PREEMPT(full) [ 139.218527][ T7767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 139.218538][ T7767] Call Trace: [ 139.218544][ T7767] [ 139.218551][ T7767] dump_stack_lvl+0x100/0x190 [ 139.218584][ T7767] should_fail_ex.cold+0x5/0xa [ 139.218612][ T7767] should_failslab+0xc2/0x120 [ 139.218639][ T7767] __kmalloc_cache_noprof+0x91/0x6d0 [ 139.218670][ T7767] ? ip6_mc_add_src+0xaf2/0x1170 [ 139.218702][ T7767] ip6_mc_add_src+0xaf2/0x1170 [ 139.218739][ T7767] ip6_mc_source+0x1448/0x18a0 [ 139.218779][ T7767] do_ipv6_mcast_group_source+0x196/0x270 [ 139.218805][ T7767] ? __pfx_do_ipv6_mcast_group_source+0x10/0x10 [ 139.218828][ T7767] ? __lock_acquire+0x5c0/0x1f40 [ 139.218874][ T7767] ? __local_bh_enable_ip+0xa5/0x120 [ 139.218897][ T7767] ? lockdep_hardirqs_on+0x7d/0x110 [ 139.218928][ T7767] do_ipv6_setsockopt+0x1fb5/0x44a0 [ 139.218950][ T7767] ? avc_has_perm_noaudit+0x56/0x3b0 [ 139.218981][ T7767] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 139.219006][ T7767] ? avc_has_perm_noaudit+0x145/0x3b0 [ 139.219036][ T7767] ? avc_has_perm+0x135/0x1e0 [ 139.219063][ T7767] ? __pfx_avc_has_perm+0x10/0x10 [ 139.219092][ T7767] ? futex_wait+0x11e/0x370 [ 139.219115][ T7767] ? sock_has_perm+0x25a/0x2f0 [ 139.219144][ T7767] ? __pfx_sock_has_perm+0x10/0x10 [ 139.219173][ T7767] ? selinux_netlbl_socket_setsockopt+0x134/0x470 [ 139.219199][ T7767] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 139.219230][ T7767] ? ipv6_setsockopt+0xcb/0x170 [ 139.219251][ T7767] ipv6_setsockopt+0xcb/0x170 [ 139.219276][ T7767] tcp_setsockopt+0xa7/0x100 [ 139.219297][ T7767] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 139.219327][ T7767] do_sock_setsockopt+0xf3/0x1d0 [ 139.219356][ T7767] __sys_setsockopt+0x195/0x220 [ 139.219381][ T7767] __x64_sys_setsockopt+0xbd/0x160 [ 139.219400][ T7767] ? do_syscall_64+0xae/0x790 [ 139.219423][ T7767] ? lockdep_hardirqs_on+0x7d/0x110 [ 139.219447][ T7767] do_syscall_64+0x123/0x790 [ 139.219474][ T7767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.219500][ T7767] RIP: 0033:0x7f386999e159 [ 139.219517][ T7767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.219541][ T7767] RSP: 002b:00007f386a7a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 139.219561][ T7767] RAX: ffffffffffffffda RBX: 00007f3869c25fa0 RCX: 00007f386999e159 [ 139.219573][ T7767] RDX: 000000000000002e RSI: 0000000000000029 RDI: 0000000000000005 [ 139.219585][ T7767] RBP: 00007f3869a3506b R08: 0000000000000108 R09: 0000000000000000 [ 139.219597][ T7767] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 139.219609][ T7767] R13: 00007f3869c26038 R14: 00007f3869c25fa0 R15: 00007ffe917fc7e8 [ 139.219638][ T7767] [ 139.242576][ T31] audit: type=1400 audit(1789642744.111:334): avc: denied { write } for pid=7745 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 139.487133][ T31] audit: type=1400 audit(1789642744.351:335): avc: denied { write } for pid=7774 comm="syz.2.685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 139.592150][ T31] audit: type=1400 audit(1789642744.451:336): avc: denied { write } for pid=7778 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 139.708573][ T12] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.807385][ T7784] ip6erspan0: entered allmulticast mode [ 139.981895][ T5263] 8021q: adding VLAN 0 to HW filter on device eth3 [ 139.982031][ T7794] fuse: Bad value for 'user_id' [ 139.982044][ T7794] fuse: Bad value for 'user_id' [ 140.030767][ T7792] FAULT_INJECTION: forcing a failure. [ 140.030767][ T7792] name failslab, interval 1, probability 0, space 0, times 0 [ 140.030801][ T7792] CPU: 0 UID: 0 PID: 7792 Comm: syz.7.688 Not tainted syzkaller #0 PREEMPT(full) [ 140.030824][ T7792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 140.030837][ T7792] Call Trace: [ 140.030844][ T7792] [ 140.030852][ T7792] dump_stack_lvl+0x100/0x190 [ 140.030887][ T7792] should_fail_ex.cold+0x5/0xa [ 140.030915][ T7792] should_failslab+0xc2/0x120 [ 140.030942][ T7792] __kmalloc_cache_noprof+0x91/0x6d0 [ 140.030974][ T7792] ? tcp_sendmsg_fastopen+0x24d/0x750 [ 140.030999][ T7792] tcp_sendmsg_fastopen+0x24d/0x750 [ 140.031022][ T7792] tcp_sendmsg_locked+0x27da/0x4420 [ 140.031046][ T7792] ? __lock_acquire+0x5c0/0x1f40 [ 140.031071][ T7792] ? reacquire_held_locks+0xdd/0x1f0 [ 140.031091][ T7792] ? release_sock+0x21/0x280 [ 140.031114][ T7792] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 140.031133][ T7792] ? lock_acquire+0x1d1/0x380 [ 140.031154][ T7792] ? do_raw_spin_lock+0x128/0x260 [ 140.031178][ T7792] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 140.031209][ T7792] ? __local_bh_enable_ip+0xa5/0x120 [ 140.031234][ T7792] tcp_sendmsg+0x2e/0x50 [ 140.031251][ T7792] ? __pfx_tcp_sendmsg+0x10/0x10 [ 140.031268][ T7792] inet6_sendmsg+0xb9/0x140 [ 140.031299][ T7792] __sys_sendto+0x36d/0x4e0 [ 140.031321][ T7792] ? __pfx___sys_sendto+0x10/0x10 [ 140.031347][ T7792] ? rcu_is_watching+0x13/0xc0 [ 140.031371][ T7792] ? do_sock_setsockopt+0x101/0x1d0 [ 140.031397][ T7792] ? kfree+0x1e5/0x6d0 [ 140.031433][ T7792] ? xfd_validate_state+0x129/0x190 [ 140.031460][ T7792] __x64_sys_sendto+0xe0/0x1c0 [ 140.031481][ T7792] ? do_syscall_64+0xae/0x790 [ 140.031506][ T7792] ? lockdep_hardirqs_on+0x7d/0x110 [ 140.031539][ T7792] do_syscall_64+0x123/0x790 [ 140.031566][ T7792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.031585][ T7792] RIP: 0033:0x7fcab8f9e159 [ 140.031598][ T7792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.031615][ T7792] RSP: 002b:00007fcab9ea5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 140.031632][ T7792] RAX: ffffffffffffffda RBX: 00007fcab9225fa0 RCX: 00007fcab8f9e159 [ 140.031645][ T7792] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 140.031655][ T7792] RBP: 00007fcab903506b R08: 0000200000000400 R09: 000000000000001c [ 140.031666][ T7792] R10: 0000000024000045 R11: 0000000000000246 R12: 0000000000000000 [ 140.031676][ T7792] R13: 00007fcab9226038 R14: 00007fcab9225fa0 R15: 00007fffc0c2bc68 [ 140.031701][ T7792] [ 140.183379][ T12] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.198522][ T52] Bluetooth: hci9: command tx timeout [ 140.488469][ T12] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.502733][ T7808] FAULT_INJECTION: forcing a failure. [ 140.502733][ T7808] name failslab, interval 1, probability 0, space 0, times 0 [ 140.502763][ T7808] CPU: 1 UID: 0 PID: 7808 Comm: syz.7.696 Not tainted syzkaller #0 PREEMPT(full) [ 140.502784][ T7808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 140.502794][ T7808] Call Trace: [ 140.502801][ T7808] [ 140.502808][ T7808] dump_stack_lvl+0x100/0x190 [ 140.502838][ T7808] should_fail_ex.cold+0x5/0xa [ 140.502863][ T7808] should_failslab+0xc2/0x120 [ 140.502885][ T7808] __kmalloc_noprof+0xfc/0x840 [ 140.502905][ T7808] ? lsm_blob_alloc+0x68/0x90 [ 140.502933][ T7808] lsm_blob_alloc+0x68/0x90 [ 140.502955][ T7808] security_key_alloc+0x34/0x310 [ 140.502977][ T7808] key_alloc+0x876/0x1310 [ 140.503006][ T7808] ? __pfx_key_alloc+0x10/0x10 [ 140.503024][ T7808] ? find_held_lock+0x2b/0x80 [ 140.503046][ T7808] ? request_key_and_link+0x2b2/0x1330 [ 140.503064][ T7808] ? request_key_and_link+0x2b2/0x1330 [ 140.503086][ T7808] request_key_and_link+0x744/0x1330 [ 140.503114][ T7808] ? __pfx_request_key_and_link+0x10/0x10 [ 140.503131][ T7808] ? __pfx___might_resched+0x10/0x10 [ 140.503153][ T7808] ? __pfx_asymmetric_key_cmp_partial+0x10/0x10 [ 140.503180][ T7808] ? __pfx_keyring_search_iterator+0x10/0x10 [ 140.503205][ T7808] ? _copy_from_user+0x59/0xd0 [ 140.503228][ T7808] __do_sys_request_key+0x2a2/0x3c0 [ 140.503255][ T7808] ? __pfx___do_sys_request_key+0x10/0x10 [ 140.503287][ T7808] do_syscall_64+0x123/0x790 [ 140.503311][ T7808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.503328][ T7808] RIP: 0033:0x7fcab8f9e159 [ 140.503342][ T7808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.503358][ T7808] RSP: 002b:00007fcab9ea5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 140.503374][ T7808] RAX: ffffffffffffffda RBX: 00007fcab9225fa0 RCX: 00007fcab8f9e159 [ 140.503385][ T7808] RDX: 0000200000001fee RSI: 0000200000001ffb RDI: 0000200000000040 [ 140.503395][ T7808] RBP: 00007fcab903506b R08: 0000000000000000 R09: 0000000000000000 [ 140.503406][ T7808] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000000 [ 140.503416][ T7808] R13: 00007fcab9226038 R14: 00007fcab9225fa0 R15: 00007fffc0c2bc68 [ 140.503440][ T7808] [ 140.599770][ T7581] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.599871][ T7581] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.600037][ T7581] bridge_slave_0: entered allmulticast mode [ 140.605302][ T7581] bridge_slave_0: entered promiscuous mode [ 140.612530][ T7581] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.614112][ T7581] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.614212][ T7581] bridge_slave_1: entered allmulticast mode [ 140.628755][ T7581] bridge_slave_1: entered promiscuous mode [ 140.851425][ T7581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.873158][ T7581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.988155][ T5598] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 140.990856][ T5598] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 140.992588][ T5598] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 140.993291][ T5598] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 141.033296][ T5598] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 141.040979][ T7826] netlink: 12 bytes leftover after parsing attributes in process `syz.5.701'. [ 141.055973][ T12] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.122636][ T7581] team0: Port device team_slave_0 added [ 141.205784][ T7826] bond1: entered promiscuous mode [ 141.205837][ T7826] bond1: entered allmulticast mode [ 141.206146][ T7826] 8021q: adding VLAN 0 to HW filter on device bond1 [ 141.213217][ T7833] erspan1: entered allmulticast mode [ 141.217042][ T7833] erspan1: entered promiscuous mode [ 141.218071][ T7833] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 141.251930][ T7841] xt_connbytes: Forcing CT accounting to be enabled [ 141.287788][ T7581] team0: Port device team_slave_1 added [ 141.398323][ T7581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.398340][ T7581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.398361][ T7581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.412643][ T7581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.412658][ T7581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.412676][ T7581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.457751][ T31] audit: type=1400 audit(1789642746.321:337): avc: denied { write } for pid=7816 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.676758][ T31] audit: type=1400 audit(1789642746.541:338): avc: denied { write } for pid=7859 comm="syz.7.708" name="kmsg" dev="devtmpfs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 141.707426][ T7581] hsr_slave_0: entered promiscuous mode [ 141.712349][ T7581] hsr_slave_1: entered promiscuous mode [ 141.716950][ T7581] debugfs: 'hsr0' already exists in 'hsr' [ 141.716968][ T7581] Cannot create hsr debugfs directory [ 141.741440][ T31] audit: type=1400 audit(1789642746.601:339): avc: denied { write } for pid=7858 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.914092][ T5263] 8021q: adding VLAN 0 to HW filter on device eth4 [ 142.217412][ T12] bridge_slave_1: left allmulticast mode [ 142.217437][ T12] bridge_slave_1: left promiscuous mode [ 142.217604][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.222900][ T12] bridge_slave_0: left allmulticast mode [ 142.222932][ T12] bridge_slave_0: left promiscuous mode [ 142.223125][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.274263][ T5598] Bluetooth: hci9: command tx timeout [ 142.602416][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.614874][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.617720][ T12] bond0 (unregistering): Released all slaves [ 143.074650][ T5598] Bluetooth: hci8: command tx timeout [ 143.110270][ T7909] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 143.222183][ T31] audit: type=1400 audit(1789642748.081:340): avc: denied { write } for pid=7904 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.230996][ T7581] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.401831][ T31] audit: type=1400 audit(1789642748.261:341): avc: denied { write } for pid=7921 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.428577][ T12] hsr_slave_0: left promiscuous mode [ 143.429128][ T12] hsr_slave_1: left promiscuous mode [ 143.431824][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.431841][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.436103][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.436118][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.504885][ T12] veth1_macvtap: left promiscuous mode [ 143.504919][ T12] veth0_macvtap: left promiscuous mode [ 143.505464][ T12] veth1_vlan: left promiscuous mode [ 143.507082][ T12] veth0_vlan: left promiscuous mode [ 143.731247][ T12] team0 (unregistering): Port device team_slave_1 removed [ 143.749618][ T12] team0 (unregistering): Port device team_slave_0 removed [ 143.889885][ T5263] 8021q: adding VLAN 0 to HW filter on device eth5 [ 143.942581][ T7581] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.041159][ T7581] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.077716][ T7939] FAULT_INJECTION: forcing a failure. [ 144.077716][ T7939] name failslab, interval 1, probability 0, space 0, times 0 [ 144.077747][ T7939] CPU: 0 UID: 0 PID: 7939 Comm: syz.7.731 Not tainted syzkaller #0 PREEMPT(full) [ 144.077768][ T7939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 144.077778][ T7939] Call Trace: [ 144.077785][ T7939] [ 144.077792][ T7939] dump_stack_lvl+0x100/0x190 [ 144.077822][ T7939] should_fail_ex.cold+0x5/0xa [ 144.077846][ T7939] should_failslab+0xc2/0x120 [ 144.077867][ T7939] kmem_cache_alloc_noprof+0x92/0x6a0 [ 144.077889][ T7939] ? do_getname+0x35/0x390 [ 144.077918][ T7939] do_getname+0x35/0x390 [ 144.077946][ T7939] do_sys_openat2+0xc7/0x1e0 [ 144.077972][ T7939] ? __pfx_do_sys_openat2+0x10/0x10 [ 144.077998][ T7939] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 144.078031][ T7939] __x64_sys_openat+0x12d/0x210 [ 144.078059][ T7939] ? __pfx___x64_sys_openat+0x10/0x10 [ 144.078098][ T7939] do_syscall_64+0x123/0x790 [ 144.078125][ T7939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.078144][ T7939] RIP: 0033:0x7fcab8f9e159 [ 144.078159][ T7939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.078176][ T7939] RSP: 002b:00007fcab9ea5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 144.078195][ T7939] RAX: ffffffffffffffda RBX: 00007fcab9225fa0 RCX: 00007fcab8f9e159 [ 144.078206][ T7939] RDX: 0000000000102080 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 144.078218][ T7939] RBP: 00007fcab903506b R08: 0000000000000000 R09: 0000000000000000 [ 144.078229][ T7939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.078240][ T7939] R13: 00007fcab9226038 R14: 00007fcab9225fa0 R15: 00007fffc0c2bc68 [ 144.078265][ T7939] [ 144.331271][ T7581] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.607244][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 144.608248][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 144.610190][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 144.635276][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 144.637554][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 144.760570][ T7823] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.760651][ T7823] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.760775][ T7823] bridge_slave_0: entered allmulticast mode [ 144.771787][ T7823] bridge_slave_0: entered promiscuous mode [ 144.779009][ T7823] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.780937][ T7823] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.781048][ T7823] bridge_slave_1: entered allmulticast mode [ 144.787207][ T7823] bridge_slave_1: entered promiscuous mode [ 144.840801][ T31] audit: type=1400 audit(1789642749.701:342): avc: denied { write } for pid=7941 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 144.965612][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.000372][ T7823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.010377][ T7823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.062501][ T31] audit: type=1400 audit(1789642749.921:343): avc: denied { write } for pid=7976 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.158811][ T5598] Bluetooth: hci8: command tx timeout [ 145.346621][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.405760][ T5263] 8021q: adding VLAN 0 to HW filter on device eth6 [ 145.408995][ T7823] team0: Port device team_slave_0 added [ 145.416212][ T7823] team0: Port device team_slave_1 added [ 145.553466][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.607242][ T7823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.607259][ T7823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 145.607282][ T7823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.629809][ T7823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.629823][ T7823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 145.629841][ T7823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.657336][ T7581] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 145.731861][ T7581] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 145.765029][ T7581] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 145.777895][ T7581] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 145.778499][ T7581] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 145.785079][ T7581] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 145.826488][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.878593][ T7581] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 145.882799][ T7581] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 145.925132][ T7823] hsr_slave_0: entered promiscuous mode [ 145.927425][ T7823] hsr_slave_1: entered promiscuous mode [ 145.929446][ T7823] debugfs: 'hsr0' already exists in 'hsr' [ 145.929464][ T7823] Cannot create hsr debugfs directory [ 146.140873][ T31] audit: type=1400 audit(1789642751.001:344): avc: denied { write } for pid=7985 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.238579][ T52] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 146.241743][ T52] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 146.242289][ T52] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 146.242996][ T52] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 146.244590][ T52] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 146.293376][ T31] audit: type=1400 audit(1789642751.151:345): avc: denied { write } for pid=8005 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.471683][ T5263] 8021q: adding VLAN 0 to HW filter on device eth7 [ 146.576772][ T12] bridge_slave_1: left allmulticast mode [ 146.576793][ T12] bridge_slave_1: left promiscuous mode [ 146.576941][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.580021][ T12] bridge_slave_0: left allmulticast mode [ 146.580035][ T12] bridge_slave_0: left promiscuous mode [ 146.580122][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.674164][ T5598] Bluetooth: hci5: command tx timeout [ 146.692955][ T12] bond1 (unregistering): (slave erspan1): Releasing backup interface [ 146.693288][ T12] erspan1 (unregistering): left promiscuous mode [ 146.732898][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.743084][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.751402][ T12] bond0 (unregistering): Released all slaves [ 146.755973][ T12] bond1 (unregistering): Released all slaves [ 146.823298][ T7823] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.988583][ T8026] fuse: Invalid rootmode [ 147.048246][ T7823] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.167004][ T7956] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.167170][ T7956] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.167273][ T7956] bridge_slave_0: entered allmulticast mode [ 147.171148][ T7956] bridge_slave_0: entered promiscuous mode [ 147.209721][ T7956] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.209800][ T7956] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.209917][ T7956] bridge_slave_1: entered allmulticast mode [ 147.211137][ T7956] bridge_slave_1: entered promiscuous mode [ 147.237867][ T5598] Bluetooth: hci8: command tx timeout [ 147.328024][ T7823] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.365096][ T31] audit: type=1400 audit(1789642752.221:346): avc: denied { write } for pid=8022 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.400074][ T12] hsr_slave_0: left promiscuous mode [ 147.400602][ T12] hsr_slave_1: left promiscuous mode [ 147.401222][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.401237][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.402188][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.402202][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.452379][ T31] audit: type=1400 audit(1789642752.321:347): avc: denied { write } for pid=8045 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.468104][ T12] veth1_macvtap: left promiscuous mode [ 147.468132][ T12] veth0_macvtap: left promiscuous mode [ 147.468227][ T12] veth1_vlan: left promiscuous mode [ 147.468274][ T12] veth0_vlan: left promiscuous mode [ 147.646316][ T12] team0 (unregistering): Port device team_slave_1 removed [ 147.650816][ T12] team0 (unregistering): Port device team_slave_0 removed [ 147.747479][ T7956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.749948][ T7956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.776425][ T5263] 8021q: adding VLAN 0 to HW filter on device eth8 [ 147.823199][ T7823] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.864695][ T8050] FAULT_INJECTION: forcing a failure. [ 147.864695][ T8050] name failslab, interval 1, probability 0, space 0, times 0 [ 147.864727][ T8050] CPU: 1 UID: 0 PID: 8050 Comm: syz.2.747 Not tainted syzkaller #0 PREEMPT(full) [ 147.864748][ T8050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 147.864759][ T8050] Call Trace: [ 147.864765][ T8050] [ 147.864773][ T8050] dump_stack_lvl+0x100/0x190 [ 147.864806][ T8050] should_fail_ex.cold+0x5/0xa [ 147.864831][ T8050] should_failslab+0xc2/0x120 [ 147.864854][ T8050] __kmalloc_cache_noprof+0x91/0x6d0 [ 147.864882][ T8050] ? ucma_open+0x4a/0x1f0 [ 147.864914][ T8050] ucma_open+0x4a/0x1f0 [ 147.864936][ T8050] ? __pfx_ucma_open+0x10/0x10 [ 147.864956][ T8050] misc_open+0x26d/0x450 [ 147.864976][ T8050] ? __pfx_misc_open+0x10/0x10 [ 147.865001][ T8050] chrdev_open+0x234/0x6a0 [ 147.865026][ T8050] ? __pfx_chrdev_open+0x10/0x10 [ 147.865051][ T8050] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 147.865082][ T8050] do_dentry_open+0x6ab/0x14d0 [ 147.865101][ T8050] ? __pfx_chrdev_open+0x10/0x10 [ 147.865131][ T8050] vfs_open+0x82/0x3f0 [ 147.865158][ T8050] path_openat+0x19fa/0x2440 [ 147.865185][ T8050] ? __pfx_path_openat+0x10/0x10 [ 147.865213][ T8050] do_file_open+0x20e/0x430 [ 147.865240][ T8050] ? __pfx_do_file_open+0x10/0x10 [ 147.865278][ T8050] ? _raw_spin_unlock+0x28/0x50 [ 147.865298][ T8050] ? alloc_fd+0x471/0x7a0 [ 147.865329][ T8050] do_sys_openat2+0x10f/0x1e0 [ 147.865354][ T8050] ? __pfx_do_sys_openat2+0x10/0x10 [ 147.865385][ T8050] __x64_sys_openat+0x12d/0x210 [ 147.865416][ T8050] ? __pfx___x64_sys_openat+0x10/0x10 [ 147.865453][ T8050] do_syscall_64+0x123/0x790 [ 147.865487][ T8050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.865506][ T8050] RIP: 0033:0x7f2217d9e159 [ 147.865522][ T8050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.865539][ T8050] RSP: 002b:00007f2218d1b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 147.865559][ T8050] RAX: ffffffffffffffda RBX: 00007f2218025fa0 RCX: 00007f2217d9e159 [ 147.865571][ T8050] RDX: 0000000000000002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 147.865582][ T8050] RBP: 00007f2217e3506b R08: 0000000000000000 R09: 0000000000000000 [ 147.865593][ T8050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.865603][ T8050] R13: 00007f2218026038 R14: 00007f2218025fa0 R15: 00007ffcda9bbb68 [ 147.865628][ T8050] [ 147.866993][ T7956] team0: Port device team_slave_0 added [ 147.891537][ T7956] team0: Port device team_slave_1 added [ 147.926578][ T7581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.962048][ T7956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.962061][ T7956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 147.962080][ T7956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.965880][ T7956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.965892][ T7956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 147.965910][ T7956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.158971][ T7581] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.283016][ T7956] hsr_slave_0: entered promiscuous mode [ 148.283482][ T7956] hsr_slave_1: entered promiscuous mode [ 148.286517][ T7956] debugfs: 'hsr0' already exists in 'hsr' [ 148.286533][ T7956] Cannot create hsr debugfs directory [ 148.289009][ T1286] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.289091][ T1286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.354373][ T5598] Bluetooth: hci7: command tx timeout [ 148.356392][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.356477][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.633168][ T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.697490][ T31] audit: type=1400 audit(1789642753.561:348): avc: denied { write } for pid=8061 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.703495][ T7823] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 148.737375][ T7823] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 148.755577][ T8006] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.755673][ T8006] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.755735][ T5598] Bluetooth: hci5: command tx timeout [ 148.755776][ T8006] bridge_slave_0: entered allmulticast mode [ 148.759816][ T8006] bridge_slave_0: entered promiscuous mode [ 148.799534][ T7823] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 148.813198][ T7823] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 148.814497][ T7823] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 148.821600][ T31] audit: type=1400 audit(1789642753.681:349): avc: denied { write } for pid=8075 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.852891][ T7823] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 148.874730][ T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.882178][ T8006] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.882304][ T8006] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.882407][ T8006] bridge_slave_1: entered allmulticast mode [ 148.883362][ T8006] bridge_slave_1: entered promiscuous mode [ 148.907499][ T7581] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 148.907517][ T7581] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 148.921852][ T7823] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 148.929213][ T7823] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 148.952596][ T5263] 8021q: adding VLAN 0 to HW filter on device eth9 [ 148.990328][ T7956] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.026381][ T8006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.028545][ T8006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.067606][ T8006] team0: Port device team_slave_0 added [ 149.081524][ T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.103186][ T8006] team0: Port device team_slave_1 added [ 149.159529][ T7956] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.192821][ T8006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.192835][ T8006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.192853][ T8006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.229371][ T8089] fuse: Invalid rootmode [ 149.278048][ T8006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.278065][ T8006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.278086][ T8006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.321520][ T5598] Bluetooth: hci8: command tx timeout [ 149.346901][ T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.421896][ T7956] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.536507][ T8006] hsr_slave_0: entered promiscuous mode [ 149.537338][ T8006] hsr_slave_1: entered promiscuous mode [ 149.537967][ T8006] debugfs: 'hsr0' already exists in 'hsr' [ 149.537984][ T8006] Cannot create hsr debugfs directory [ 149.575475][ T7956] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.720153][ T7581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.766406][ T31] audit: type=1400 audit(1789642754.631:350): avc: denied { write } for pid=8095 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.862510][ T31] audit: type=1400 audit(1789642754.721:351): avc: denied { write } for pid=8112 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.922688][ T12] bridge_slave_1: left allmulticast mode [ 149.922712][ T12] bridge_slave_1: left promiscuous mode [ 149.923039][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.931956][ T12] bridge_slave_0: left allmulticast mode [ 149.931976][ T12] bridge_slave_0: left promiscuous mode [ 149.932116][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.063310][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.077098][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.077961][ T12] bond0 (unregistering): Released all slaves [ 150.099365][ T5263] 8021q: adding VLAN 0 to HW filter on device eth10 [ 150.144869][ T7823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.233263][ T7823] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.272226][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.272298][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.295047][ T7581] veth0_vlan: entered promiscuous mode [ 150.344606][ T7956] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 150.349250][ T7956] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 150.359221][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.359296][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.409365][ T8006] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.426126][ T7956] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 150.429667][ T7956] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 150.434807][ T5598] Bluetooth: hci7: command tx timeout [ 150.504460][ T12] hsr_slave_0: left promiscuous mode [ 150.505954][ T12] hsr_slave_1: left promiscuous mode [ 150.506617][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.506632][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.508751][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.508766][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.561148][ T12] veth1_macvtap: left promiscuous mode [ 150.561180][ T12] veth0_macvtap: left promiscuous mode [ 150.561271][ T12] veth1_vlan: left promiscuous mode [ 150.561324][ T12] veth0_vlan: left promiscuous mode [ 150.702541][ T31] audit: type=1400 audit(1789642755.561:352): avc: denied { write } for pid=8116 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 150.793865][ T31] audit: type=1400 audit(1789642755.651:353): avc: denied { write } for pid=8134 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 150.834036][ T5598] Bluetooth: hci5: command tx timeout [ 150.884654][ T12] team0 (unregistering): Port device team_slave_1 removed [ 150.889432][ T12] team0 (unregistering): Port device team_slave_0 removed [ 150.978326][ T7956] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 150.980114][ T7956] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 150.981315][ T7956] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 150.983433][ T7956] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 151.017769][ T8132] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.020870][ T8132] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.023241][ T8132] bond0 (unregistering): Released all slaves [ 151.042176][ T5263] 8021q: adding VLAN 0 to HW filter on device eth11 [ 151.049480][ T7581] veth1_vlan: entered promiscuous mode [ 151.089777][ T8006] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.211084][ T7581] veth0_macvtap: entered promiscuous mode [ 151.229063][ T7581] veth1_macvtap: entered promiscuous mode [ 151.336719][ T8006] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.385743][ T7581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.417514][ T7581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.469290][ T8006] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.555861][ T7956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.584646][ T59] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.585027][ T59] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.585151][ T59] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.585337][ T59] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.692011][ T7956] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.706786][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.706887][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.721584][ T31] audit: type=1400 audit(1789642756.581:354): avc: denied { write } for pid=8147 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 151.797460][ T4589] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.797554][ T4589] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.803267][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.803286][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.910746][ T31] audit: type=1400 audit(1789642756.771:355): avc: denied { write } for pid=8164 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 151.948576][ T4589] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.948596][ T4589] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.979195][ T8006] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 152.017130][ T8006] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 152.028868][ T8006] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 152.047828][ T8006] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 152.077023][ T8006] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 152.086771][ T8006] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 152.087349][ T8006] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 152.119544][ T8006] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 152.120937][ T5263] 8021q: adding VLAN 0 to HW filter on device eth12 [ 152.162303][ T7823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.230834][ T8179] fuse: Invalid rootmode [ 152.461340][ T8006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.507229][ T8006] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.507610][ T8190] loop0: detected capacity change from 0 to 2048 [ 152.521170][ T5598] Bluetooth: hci7: command tx timeout [ 152.526842][ T4589] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.526917][ T4589] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.548115][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.548200][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.581493][ T31] audit: type=1400 audit(1789642757.441:356): avc: denied { mount } for pid=8188 comm="syz.2.758" name="/" dev="configfs" ino=35 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 152.582012][ T31] audit: type=1400 audit(1789642757.441:357): avc: denied { search } for pid=8188 comm="syz.2.758" name="/" dev="configfs" ino=35 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 152.913801][ T5598] Bluetooth: hci5: command tx timeout [ 153.025918][ T7956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.032159][ T7823] veth0_vlan: entered promiscuous mode [ 153.068870][ T7823] veth1_vlan: entered promiscuous mode [ 153.219311][ T7956] veth0_vlan: entered promiscuous mode [ 153.220876][ T7823] veth0_macvtap: entered promiscuous mode [ 153.231623][ T7823] veth1_macvtap: entered promiscuous mode [ 153.248971][ T7956] veth1_vlan: entered promiscuous mode [ 153.298585][ T7823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.356985][ T7823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.427066][ T5263] 8021q: adding VLAN 0 to HW filter on device eth13 [ 153.456084][ T7956] veth0_macvtap: entered promiscuous mode [ 153.507102][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.510439][ T4589] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.510476][ T4589] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.510506][ T4589] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.525844][ T7956] veth1_macvtap: entered promiscuous mode [ 153.640030][ T7956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.687201][ T7956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.717110][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.717128][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.765338][ T50] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.839371][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.839390][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.876822][ T8006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.944447][ T586] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.951033][ T586] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.951050][ T586] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.075591][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.075612][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.083567][ T8006] veth0_vlan: entered promiscuous mode [ 154.123747][ T8006] veth1_vlan: entered promiscuous mode [ 154.126087][ T50] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.226934][ T8252] fuse: Bad value for 'fd' [ 154.255400][ T8250] tap0: tun_chr_ioctl cmd 1074025680 [ 154.280491][ T8006] veth0_macvtap: entered promiscuous mode [ 154.292740][ T8006] veth1_macvtap: entered promiscuous mode [ 154.294820][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.319168][ T8006] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.337450][ T8006] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.366230][ T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.367201][ T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.410351][ T31] kauditd_printk_skb: 56 callbacks suppressed [ 154.410368][ T31] audit: type=1400 audit(1789642759.271:414): avc: denied { write } for pid=8241 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.467323][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.471177][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.580155][ T8261] fuse: Bad value for 'rootmode' [ 154.594029][ T5598] Bluetooth: hci7: command tx timeout [ 154.704305][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.704327][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.728712][ T31] audit: type=1400 audit(1789642759.591:415): avc: denied { write } for pid=8263 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.892177][ T5263] 8021q: adding VLAN 0 to HW filter on device eth14 [ 154.896926][ T8270] syzkaller0: entered promiscuous mode [ 154.896943][ T8270] syzkaller0: entered allmulticast mode [ 154.900567][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.900581][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.116906][ T31] audit: type=1400 audit(1789642759.981:416): avc: denied { sqpoll } for pid=8282 comm="syz.2.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 155.434559][ T8302] fuse: Bad value for 'rootmode' [ 155.810626][ T8316] ip6erspan0: entered allmulticast mode [ 155.853501][ T31] audit: type=1400 audit(1789642760.711:417): avc: denied { write } for pid=8279 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 155.957613][ T8322] syzkaller0: entered promiscuous mode [ 155.957636][ T8322] syzkaller0: entered allmulticast mode [ 156.122350][ T31] audit: type=1400 audit(1789642760.981:418): avc: denied { write } for pid=8331 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 156.340741][ T8349] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 156.367773][ T8350] fuse: Invalid rootmode [ 156.784315][ T8375] fuse: Unknown parameter 'use00000000000000000000' [ 156.960828][ T8382] syzkaller0: entered promiscuous mode [ 156.960850][ T8382] syzkaller0: entered allmulticast mode [ 157.112286][ T31] audit: type=1400 audit(1789642761.971:419): avc: denied { write } for pid=8368 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 157.224380][ T31] audit: type=1400 audit(1789642762.091:420): avc: denied { kexec_image_load } for pid=8396 comm="syz.4.812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 157.264307][ T31] audit: type=1400 audit(1789642762.131:421): avc: denied { read } for pid=8396 comm="syz.4.812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 157.274131][ T31] audit: type=1400 audit(1789642762.131:422): avc: denied { write } for pid=8397 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 157.527828][ T5263] 8021q: adding VLAN 0 to HW filter on device eth15 [ 157.582146][ T8401] fuse: Invalid rootmode [ 157.651339][ T8404] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 157.759936][ T31] audit: type=1400 audit(1789642762.621:423): avc: denied { create } for pid=8407 comm="syz.3.814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 157.789078][ T8380] device-mapper: table: 248:2: thin-pool: Error creating metadata object (-EIO) [ 157.789101][ T8380] device-mapper: ioctl: error adding target to table [ 157.858111][ T8408] netlink: 'syz.3.814': attribute type 1 has an invalid length. [ 158.228568][ T8433] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 158.312572][ T8439] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 158.374232][ T8439] [ 158.376580][ T8439] ====================================================== [ 158.383616][ T8439] WARNING: possible circular locking dependency detected [ 158.390623][ T8439] syzkaller #0 Not tainted [ 158.395030][ T8439] ------------------------------------------------------ [ 158.398085][ T8447] se_dev->se_dev_ptr already set for storage object [ 158.408607][ T8439] syz.1.826/8439 is trying to acquire lock: [ 158.414495][ T8439] ffffffff9047ecc0 (tpg_instances_lock){+.+.}-{4:4}, at: tcm_alloc+0x20/0x440 [ 158.423383][ T8439] [ 158.423383][ T8439] but task is already holding lock: [ 158.430743][ T8439] ffff88802a0b4390 (&gi->lock){+.+.}-{4:4}, at: config_usb_cfg_link+0x57/0x3a0 [ 158.439720][ T8439] [ 158.439720][ T8439] which lock already depends on the new lock. [ 158.439720][ T8439] [ 158.450119][ T8439] [ 158.450119][ T8439] the existing dependency chain (in reverse order) is: [ 158.459124][ T8439] [ 158.459124][ T8439] -> #2 (&gi->lock){+.+.}-{4:4}: [ 158.466250][ T8439] lock_acquire+0x1d1/0x380 [ 158.471280][ T8439] __mutex_lock+0x1a4/0x1bd0 [ 158.476400][ T8439] config_usb_cfg_link+0x57/0x3a0 [ 158.481953][ T8439] configfs_symlink+0x695/0x1340 [ 158.487414][ T8439] vfs_symlink+0x178/0x4d0 [ 158.492348][ T8439] filename_symlinkat+0x2a6/0x560 [ 158.497903][ T8439] __x64_sys_symlinkat+0x9c/0xe0 [ 158.503364][ T8439] do_syscall_64+0x123/0x790 [ 158.508467][ T8439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.514873][ T8439] [ 158.514873][ T8439] -> #1 (&sb->s_type->i_mutex_key#34){++++}-{4:4}: [ 158.523567][ T8439] lock_acquire+0x1d1/0x380 [ 158.528590][ T8439] down_write+0x8b/0x1f0 [ 158.533350][ T8439] configfs_depend_item_unlocked+0xf3/0x6a0 [ 158.539762][ T8439] usbg_make_tpg+0x251/0x610 [ 158.544876][ T8439] target_fabric_make_tpg+0xab/0x8c0 [ 158.550688][ T8439] configfs_mkdir+0x525/0xd40 [ 158.555875][ T8439] vfs_mkdir+0x364/0x850 [ 158.560622][ T8439] filename_mkdirat+0x48b/0x5e0 [ 158.566028][ T8439] __x64_sys_mkdirat+0x89/0xc0 [ 158.571322][ T8439] do_syscall_64+0x123/0x790 [ 158.576429][ T8439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.582835][ T8439] [ 158.582835][ T8439] -> #0 (tpg_instances_lock){+.+.}-{4:4}: [ 158.590729][ T8439] check_prev_add+0xeb/0xe60 [ 158.595832][ T8439] __lock_acquire+0x1528/0x1f40 [ 158.601202][ T8439] lock_acquire+0x1d1/0x380 [ 158.606214][ T8439] __mutex_lock+0x1a4/0x1bd0 [ 158.611312][ T8439] tcm_alloc+0x20/0x440 [ 158.615991][ T8439] usb_get_function+0x5e/0xd0 [ 158.621181][ T8439] config_usb_cfg_link+0x1ed/0x3a0 [ 158.626808][ T8439] configfs_symlink+0x695/0x1340 [ 158.632263][ T8439] vfs_symlink+0x178/0x4d0 [ 158.637189][ T8439] filename_symlinkat+0x2a6/0x560 [ 158.642737][ T8439] __x64_sys_symlinkat+0x9c/0xe0 [ 158.648206][ T8439] do_syscall_64+0x123/0x790 [ 158.653304][ T8439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.659699][ T8439] [ 158.659699][ T8439] other info that might help us debug this: [ 158.659699][ T8439] [ 158.669912][ T8439] Chain exists of: [ 158.669912][ T8439] tpg_instances_lock --> &sb->s_type->i_mutex_key#34 --> &gi->lock [ 158.669912][ T8439] [ 158.683727][ T8439] Possible unsafe locking scenario: [ 158.683727][ T8439] [ 158.691185][ T8439] CPU0 CPU1 [ 158.696543][ T8439] ---- ---- [ 158.701899][ T8439] lock(&gi->lock); [ 158.705809][ T8439] lock(&sb->s_type->i_mutex_key#34); [ 158.713783][ T8439] lock(&gi->lock); [ 158.720194][ T8439] lock(tpg_instances_lock); [ 158.724869][ T8439] [ 158.724869][ T8439] *** DEADLOCK *** [ 158.724869][ T8439] [ 158.732993][ T8439] locks held by syz.1.826/8439: 3, last CPU#1: [ 158.739132][ T8439] #0: ffff88801eb0c460 (sb_writers#21){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 158.748632][ T8439] #1: ffff888057069900 (&sb->s_type->i_mutex_key#34){++++}-{4:4}, at: configfs_symlink+0x452/0x1340 [ 158.759518][ T8439] #2: ffff88802a0b4390 (&gi->lock){+.+.}-{4:4}, at: config_usb_cfg_link+0x57/0x3a0 [ 158.760456][ T5263] 8021q: adding VLAN 0 to HW filter on device eth16 [ 158.775530][ T8439] [ 158.775530][ T8439] stack backtrace: [ 158.781401][ T8439] CPU: 1 UID: 0 PID: 8439 Comm: syz.1.826 Not tainted syzkaller #0 PREEMPT(full) [ 158.790575][ T8439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 158.800608][ T8439] Call Trace: [ 158.803865][ T8439] [ 158.806775][ T8439] dump_stack_lvl+0x100/0x190 [ 158.811442][ T8439] print_circular_bug.cold+0x178/0x1be [ 158.816886][ T8439] check_noncircular+0x146/0x160 [ 158.821808][ T8439] check_prev_add+0xeb/0xe60 [ 158.826379][ T8439] __lock_acquire+0x1528/0x1f40 [ 158.831214][ T8439] lock_acquire+0x1d1/0x380 [ 158.835695][ T8439] ? tcm_alloc+0x20/0x440 [ 158.840014][ T8439] ? __pfx___might_resched+0x10/0x10 [ 158.845277][ T8439] ? config_usb_cfg_link+0x57/0x3a0 [ 158.850464][ T8439] __mutex_lock+0x1a4/0x1bd0 [ 158.855042][ T8439] ? tcm_alloc+0x20/0x440 [ 158.859354][ T8439] ? tcm_alloc+0x20/0x440 [ 158.863664][ T8439] ? __mutex_lock+0x26c/0x1bd0 [ 158.868413][ T8439] ? config_usb_cfg_link+0x57/0x3a0 [ 158.873592][ T8439] ? __pfx___mutex_lock+0x10/0x10 [ 158.878602][ T8439] ? __pfx_selinux_inode_permission+0x10/0x10 [ 158.884656][ T8439] ? tcm_alloc+0x20/0x440 [ 158.888967][ T8439] tcm_alloc+0x20/0x440 [ 158.893119][ T8439] usb_get_function+0x5e/0xd0 [ 158.897782][ T8439] config_usb_cfg_link+0x1ed/0x3a0 [ 158.902875][ T8439] ? mntput_no_expire+0xe7/0x220 [ 158.907795][ T8439] configfs_symlink+0x695/0x1340 [ 158.912718][ T8439] ? __pfx_configfs_symlink+0x10/0x10 [ 158.918073][ T8439] vfs_symlink+0x178/0x4d0 [ 158.922477][ T8439] filename_symlinkat+0x2a6/0x560 [ 158.927485][ T8439] ? __pfx_filename_symlinkat+0x10/0x10 [ 158.933014][ T8439] ? strncpy_from_user+0x19d/0x2d0 [ 158.938115][ T8439] ? do_getname+0x191/0x390 [ 158.942606][ T8439] __x64_sys_symlinkat+0x9c/0xe0 [ 158.947530][ T8439] do_syscall_64+0x123/0x790 [ 158.952115][ T8439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.958003][ T8439] RIP: 0033:0x7f4aaff9e159 [ 158.962405][ T8439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.982006][ T8439] RSP: 002b:00007f4ab0da1028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 158.990411][ T8439] RAX: ffffffffffffffda RBX: 00007f4ab0225fa0 RCX: 00007f4aaff9e159 [ 158.998367][ T8439] RDX: 0000200000000600 RSI: ffffffffffffff9c RDI: 00002000000005c0 [ 159.006320][ T8439] RBP: 00007f4ab003506b R08: 0000000000000000 R09: 0000000000000000 [ 159.014281][ T8439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.022231][ T8439] R13: 00007f4ab0226038 R14: 00007f4ab0225fa0 R15: 00007ffec24eb1a8 [ 159.030189][ T8439] [ 160.845769][ T31] kauditd_printk_skb: 23 callbacks suppressed [ 160.845785][ T31] audit: type=1400 audit(1789642765.711:447): avc: denied { write } for pid=8487 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 160.893244][ T31] audit: type=1400 audit(1789642765.751:448): avc: denied { write } for pid=8498 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.423371][ T31] audit: type=1400 audit(1789642767.281:449): avc: denied { write } for pid=8502 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.473399][ T31] audit: type=1400 audit(1789642767.331:450): avc: denied { write } for pid=8513 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.636802][ T31] audit: type=1400 audit(1789642769.501:451): avc: denied { write } for pid=8519 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.682260][ T31] audit: type=1400 audit(1789642769.541:452): avc: denied { write } for pid=8530 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1