last executing test programs: 14m11.871657688s ago: executing program 32 (id=27): madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x2, 0x2001}, 0x4) 13m52.399317681s ago: executing program 33 (id=408): r0 = syz_io_uring_setup(0x30da, 0x0, 0x0, 0x0, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) getrandom(0x0, 0x0, 0x0) madvise(&(0x7f00008dd000/0x3000)=nil, 0x3000, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x6) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x30) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000019a80)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) connect$inet6(r3, &(0x7f0000019b00)={0xa, 0x4e1d, 0x9, @local, 0x2}, 0x1c) syz_emit_ethernet(0x9a, &(0x7f0000019d00)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6a00000000641100fe8000000000000000000000000000aafe8000000000000000000000000000aa4e1d4e200064000000000001000000657dc9642231195e63882f068609dfa8651529540cc6f56e35eab6e8662baf5102c606bde10af119078a2d20a5ea39243da19109f505588117190400b6d64b179057090e47ace1eed209bac6d63ffa46a87905f662f4fcce1775d1c0317653376492d4435b793ad288"], 0x0) close(0x3) 13m9.410287727s ago: executing program 34 (id=687): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x34, 0x67, 0x0, 0x7, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x8, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x9, 0x8}, @sack_perm={0x4, 0x2}]}}}}}}}, 0x0) 12m0.960584667s ago: executing program 35 (id=1200): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x900, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f000076f000/0x10000)=nil, &(0x7f000049b000/0x2000)=nil, &(0x7f0000000000/0xc00000)=nil, &(0x7f00008a8000/0x1000)=nil, &(0x7f00003fd000/0x3000)=nil, &(0x7f00000d5000/0x2000)=nil, &(0x7f00009a1000/0x2000)=nil, &(0x7f0000f65000/0x1000)=nil, &(0x7f00000ff000/0x2000)=nil, &(0x7f00000db000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x61}, 0x68) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket(0x11, 0x80803, 0x0) setsockopt(r2, 0x107, 0xd, &(0x7f00000000c0)="0000e20085c75c11a92614431ea3b121", 0x10) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_wakeup_irq', 0x181000, 0x0) io_setup(0xca, &(0x7f0000000200)=0x0) io_submit(r4, 0x1, &(0x7f00000002c0)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x406e, r1, &(0x7f00000004c0)="8c8380c3ff18366a32d0b16e218e94495648e36a9f0921189435c38e57b3899c7eabaef6f747eb8815d6e8da503ad31ce35470204767b09e020c3bd67be04274b5fd9fa5c98cc442cced0bb8f5d3560875a66f33e551dcb78acd5ae8758c863b18fe252f6cf774cd37e920e30b0bc0246e41f7ad05a18981098fac8f05580710c3ef800ba6a48e8c776adb022db8a9b04ade8636cbba00bbb0", 0x99, 0x0, 0x0, 0x4, r3}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) r5 = userfaultfd(0x801) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000002, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x7}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) semop(0x0, 0x0, 0x0) listen(r2, 0x80) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) migrate_pages(0x0, 0x4, &(0x7f0000000000)=0xfffffffffffffe01, &(0x7f0000000040)=0x2) mremap(&(0x7f00000d5000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffd000/0x2000)=nil) io_uring_setup(0x3202, &(0x7f0000000440)={0x0, 0xf44, 0x80, 0x20004, 0x1c2, 0x0, r3}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000240)="b8df000f00d8f0f71d66b90002000066b80a00000066ba000000000f300f798ea86b0f3804ad00f0660f7f8e004066deedf674c865362e0f0f7c52960f1c65e9", 0x40}], 0x1, 0x0, 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000022, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vm(r1, 0x4018aee2, &(0x7f0000000180)=@attr_other={0x0, 0x0, 0x6, &(0x7f0000000000)=0x8}) 11m2.605929941s ago: executing program 0 (id=1717): eventfd(0xd33) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket$netlink(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = open(0x0, 0x60840, 0x0) socket$key(0xf, 0x3, 0x2) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x100000000004, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = syz_ublk_setup_io_uring(0x3, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000540), &(0x7f00000003c0)) syz_io_uring_modify_offsets$flags(r3, 0x0, 0x68, 0x1) syz_ublk_setup_queues(r0, r1, &(0x7f0000000340)={0x0, 0x2, 0x0, 0xfffffffe, 0x257, 0x0, r0}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x4000, 0xffffff, 0x1c7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfc4a, 0x8000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcf78, 0x20000, 0x1, 0x0, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3948, 0xa000, 0x2, 0x2b2}}], 0x1, 0x0, 0x0) 11m2.086758279s ago: executing program 0 (id=1721): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x70bd27, 0x25dedbff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x46b2d3ba8e12a610}, 0x4008840) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x34, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x421a2}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}]}, 0x34}}, 0x0) 11m1.731718338s ago: executing program 0 (id=1723): r0 = syz_open_dev$sndctrl(&(0x7f00000002c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000009c0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8000000, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000b00)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x200, 0x0, 0x3, 0x6c4ba42, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9000000000000000, 0x0, 0x0, 0x5, 0xffffffffffff8001, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x810000000000000, 0x21d, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8000000000000001, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9, 0x0, 0xfffffffffffffffb, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000001, 0x0, 0x10000000000, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x0, 0x200, 0x0, 0x40000000000, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffffff, 0xfffffffffffffffc, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, 0x9, 0xfffffffffffffffd, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x100000001]}) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e2306260c06"], 0x7) 11m0.121925836s ago: executing program 0 (id=1734): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000005b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20010000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000093c0)={0x0, 0x0, 0x0}, 0x0) sendmmsg$inet(r1, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc0) mlock(&(0x7f00000c7000/0x3000)=nil, 0x3000) 10m59.973890039s ago: executing program 5 (id=1735): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000f, 0x204031, 0xffffffffffffffff, 0xffffd000) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) capset(0x0, 0x0) r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl(r0, 0xfffff000, 0x0) 10m57.763349446s ago: executing program 1 (id=1737): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000001300)={'gre0\x00', &(0x7f0000001280)={'ip_vti0\x00', 0x0, 0xfc7e269c84552d67, 0x700, 0x6, 0x8, {{0x6, 0x4, 0x3, 0x38, 0x18, 0x68, 0x0, 0x80, 0x2f, 0x0, @multicast1, @loopback, {[@lsrr={0x83, 0x3, 0x9d}]}}}}}) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 10m57.753040277s ago: executing program 0 (id=1738): r0 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000780)=@newtfilter={0x90, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x64, 0x2, [@TCA_U32_ACT={0x3c, 0x7, [@m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_U32_SEL={0x24, 0x5, {0x8, 0x7, 0x1, 0x7, 0xfffc, 0xfff, 0x3, 0x58f, [{0x2, 0x20008000, 0x4, 0xffffffff}]}}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x1}, 0x24040084) 10m57.019640695s ago: executing program 0 (id=1741): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003540)={0x1e, 0x5, &(0x7f0000003600)=ANY=[@ANYBLOB="b702000000000000b70300000000f3ff850000007c000000b70000000100000095"], &(0x7f0000003640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003680)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, &(0x7f0000003700)="000000000000000002", 0x0}, 0x50) 10m56.674057569s ago: executing program 1 (id=1743): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x1c, 0x17, 0x1, 0x70bd26, 0x25dfdbff, {0xc}, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@broadcast=0x1000000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48c1}, 0x40010) 10m56.438541293s ago: executing program 1 (id=1746): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x1c, r3, 0x1, 0x70bd27, 0x25dedbff, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x46b2d3ba8e12a610}, 0x4008840) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2c, r1, 0xa01, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x865}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x4000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x34, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x421a2}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}]}, 0x34}}, 0x0) 10m56.244100897s ago: executing program 7 (id=1747): eventfd(0xd33) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket$netlink(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = open(0x0, 0x60840, 0x0) socket$key(0xf, 0x3, 0x2) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x100000000004, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = syz_ublk_setup_io_uring(0x3, &(0x7f0000000040)={0x0, 0x4, 0x1000}, 0x0, &(0x7f0000000540), &(0x7f00000003c0)) syz_io_uring_modify_offsets$flags(0x0, 0x0, 0x68, 0x1) syz_ublk_setup_queues(r0, r1, &(0x7f0000000340)={0x0, 0x2, 0x0, 0xfffffffe, 0x257, 0x0, r0}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x4000, 0xffffff, 0x1c7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfc4a, 0x8000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcf78, 0x20000, 0x1, 0x0, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3948, 0xa000, 0x2, 0x2b2}}], 0x1, 0x0, 0x0) 10m56.212729201s ago: executing program 8 (id=1748): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000005b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20010000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000093c0)={0x0, 0x0, 0x0}, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x8, &(0x7f0000000200)) 10m55.918182902s ago: executing program 1 (id=1749): r0 = eventfd(0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1, 0x10000007, 0x10000}, 0x28) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=0x6, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000c62000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000cca000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x4a}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f280, 0x0, 0x399}) io_submit(0x0, 0x1, &(0x7f0000000000)=[&(0x7f00000002c0)={0x0, 0x0, 0x45, 0x7, 0x7fff, 0xffffffffffffffff, 0x0, 0x0, 0x2b}]) io_uring_enter(r1, 0x8ae, 0xfbb9, 0x35, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000200)={0x1, r0}) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000540)={0x0, &(0x7f0000000280)=[@wrmsr={0x65, 0x20, {0x40000000, 0x10000}}, @code={0xa, 0x25, {"48c7c15d00010048c7c2010000000f01c10f01d9"}}], 0x45}) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000300)={0x1, 0x0, [{0x40000001, 0x0, 0x0, 0x31237648}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 10m54.896916284s ago: executing program 5 (id=1750): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000005c0)={'syzkaller0\x00', @random="0100003600"}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x9, 0xd}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x3a29d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000780), 0x56) sendmsg$kcm(r6, &(0x7f00000007c0)={&(0x7f0000000800)=@xdp={0x2c, 0x0, r5, 0x2042}, 0x80, &(0x7f0000000880)=[{&(0x7f00000008c0)}], 0x1}, 0x4005) 10m54.84094189s ago: executing program 8 (id=1751): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000005b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20010000) sendmmsg$inet(r0, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc0) 10m54.712020377s ago: executing program 7 (id=1752): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000740)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000780)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000007c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f00000008c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000900), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000940)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)={0x4c, r4, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) ioctl$TUNSETQUEUE(r5, 0x400454d9, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000240)={'pimreg0\x00', 0x7c2}) socket$inet_tcp(0x2, 0x1, 0x0) execve(&(0x7f0000000440)='./file0\x00', &(0x7f0000000500)={[&(0x7f0000000480)='syzkaller\x00', &(0x7f00000004c0)='\'\x00']}, &(0x7f00000006c0)={[&(0x7f0000000540)='\x00', &(0x7f0000000580)='\x00', &(0x7f00000005c0)='#}$\\},+\xc7/\x00', &(0x7f0000000600)='ethtool\x00', 0x0, &(0x7f0000000680)='bond0\x00']}) lsm_list_modules(0x0, &(0x7f0000000040), 0x0) 10m54.558802061s ago: executing program 8 (id=1753): sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)={0x18, 0x1409, 0x1, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4084}, 0x810) 10m54.031875597s ago: executing program 8 (id=1754): r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f0000000240)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r0, &(0x7f0000000280)=[{0x4}, {0x2}], 0x2) semop(r0, &(0x7f00000002c0)=[{0x1, 0x85fd, 0x1000}], 0x1) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000380)) 10m53.729830921s ago: executing program 5 (id=1755): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b40)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001b80)={0xc, 0xd, &(0x7f0000001c40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9e}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa0000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x14}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000001cc0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001d00)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001d80)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 10m53.66847897s ago: executing program 7 (id=1756): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x1c, 0x17, 0x1, 0x70bd26, 0x25dfdbff, {0xc}, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@broadcast=0x1000000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48c1}, 0x40010) 10m53.415035217s ago: executing program 7 (id=1757): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r0, r0, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) mount$bind(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000000c0), 0x80000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x40042, 0x1) inotify_add_watch(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x9400002f) socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000005, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000380)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000480), 0x651, 0x0) recvmmsg(r3, &(0x7f00000004c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000500)=0x6) socket$vsock_stream(0x28, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x2982, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1a, 0x4, 0x100, 0x1, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3475}, 0x50) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000280)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) 10m53.414680955s ago: executing program 5 (id=1758): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs]}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@flat=@weak_handle={0x77682a85, 0x100a, 0x1, 0x3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x14}, @fda={0x66646185, 0x0, 0x1, 0x7}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x400}]}) 10m52.946429447s ago: executing program 5 (id=1759): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./trace\x00', &(0x7f0000000300)='tracefs\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./trace/set_event\x00', 0x2, 0x0) write$vga_arbiter(r0, &(0x7f0000000380)=@other={'lock', ' ', 'none'}, 0xa) 10m52.880520384s ago: executing program 8 (id=1760): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x800, @mcast1={0xff, 0x7}, 0xfffffffc}}, {{0xa, 0x4e24, 0xffff, @mcast1, 0x4000}}}, 0x108) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@getchain={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {0xe, 0x10}, {0xd}, {0xfff3}}}, 0x24}}, 0x0) 10m51.61993673s ago: executing program 7 (id=1761): capset(&(0x7f0000001980)={0x20080522}, &(0x7f0000001a80)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) r0 = fsopen(&(0x7f0000001ac0)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001b00)={@map=r1, 0xe, 0x1, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 10m50.926855051s ago: executing program 1 (id=1762): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000780)=@newtfilter={0x90, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x64, 0x2, [@TCA_U32_ACT={0x3c, 0x7, [@m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_U32_SEL={0x24, 0x5, {0x8, 0x7, 0x1, 0x7, 0xfffc, 0xfff, 0x3, 0x58f, [{0x2, 0x20008000, 0x4, 0xffffffff}]}}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x1}, 0x24040084) 10m47.140342809s ago: executing program 5 (id=1763): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r0 = syz_open_dev$hiddev(&(0x7f0000000140), 0x0, 0x2100) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0x84, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000180)={0x3, 0xffffffff, 0x0, 0x9, 0x6, 0x3, 0xbd, 0x4afb, 0x7, 0x3, 0x1ff, 0x80, 0x5}) 10m43.628653209s ago: executing program 8 (id=1764): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000005b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20010000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000093c0)={0x0, 0x0, 0x0}, 0x0) sendmmsg$inet(r1, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc0) mlock(&(0x7f00000c7000/0x3000)=nil, 0x3000) 10m38.230221762s ago: executing program 36 (id=1741): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003540)={0x1e, 0x5, &(0x7f0000003600)=ANY=[@ANYBLOB="b702000000000000b70300000000f3ff850000007c000000b70000000100000095"], &(0x7f0000003640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003680)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, &(0x7f0000003700)="000000000000000002", 0x0}, 0x50) 10m37.1561907s ago: executing program 1 (id=1766): openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0\x00', 0x8042, 0x85) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480), 0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000300000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) statx(0xffffffffffffff9c, 0x0, 0x100, 0x800, 0x0) read$FUSE(r0, &(0x7f0000001580)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000035c0)="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", 0x2000, &(0x7f00000055c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000005680)={0x130, 0x0, 0x6, {0x6, 0x20000006, 0x0, '\x00', {0x6fff, 0xad7, 0xf, 0x20000005, 0x0, r2, 0x0, '\x00', 0xff7fffffffffffff, 0x7fffffff, 0x2, 0x5, {0x73c0, 0x660}, {0x8, 0x29}, {0x209, 0x200007b1}, {0x7, 0x5710}, 0x8006, 0x6, 0x7, 0x80000000}}}}) write$FUSE_INIT(r0, &(0x7f00000057c0)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x120a1101, 0x6, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8}}, 0x50) 10m36.97992684s ago: executing program 7 (id=1767): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000740)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000780)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000007c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f00000008c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000900), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000940)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)={0x4c, r4, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) ioctl$TUNSETQUEUE(r5, 0x400454d9, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000240)={'pimreg0\x00', 0x7c2}) socket$inet_tcp(0x2, 0x1, 0x0) execve(&(0x7f0000000440)='./file0\x00', &(0x7f0000000500)={[&(0x7f0000000480)='syzkaller\x00', &(0x7f00000004c0)='\'\x00']}, &(0x7f00000006c0)={[&(0x7f0000000540)='\x00', &(0x7f0000000580)='\x00', &(0x7f00000005c0)='#}$\\},+\xc7/\x00', &(0x7f0000000640)='pimreg0\x00', &(0x7f0000000680)='bond0\x00']}) lsm_list_modules(0x0, &(0x7f0000000040), 0x0) 10m0.398708551s ago: executing program 37 (id=1763): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r0 = syz_open_dev$hiddev(&(0x7f0000000140), 0x0, 0x2100) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0x84, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000180)={0x3, 0xffffffff, 0x0, 0x9, 0x6, 0x3, 0xbd, 0x4afb, 0x7, 0x3, 0x1ff, 0x80, 0x5}) 9m48.509499284s ago: executing program 38 (id=1766): openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0\x00', 0x8042, 0x85) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480), 0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000300000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) statx(0xffffffffffffff9c, 0x0, 0x100, 0x800, 0x0) read$FUSE(r0, &(0x7f0000001580)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000035c0)="00e7a0633e8438bafa888b9b02144af32e296a0a01dc194d649b6fa26d6d5e63bac4a04baeeb8aacb22c6eec461b67db6a737737c6d2687acb00572f92e3fdb5d0cb2f11121c557a943020200755bcab77b39c406b733239e2bb1175b9322ba39dc7d67da8f77aed1714dae2e6c24c3ea96be9d151c6ab7b3c54bbe507b8b2461fb4be8dc90042184af6d48f8ace16abb5e3fc943cf61cdb75624a259bdb5f7829b9775820f85f2d1a6ee6c6c2af4fd41ab8a41ecb2612abf13cd2c6f9f3e6db505e4bbe68cc000cf5fa6d5636191a4b366ab59af52132a3f9678d4ed1bd577bacffb3b52850804005eebf3dfa4763168ff30490a11acdbbf4c3312a45f30139f6b72b1e7cdec185006bb30e0e8fa88da2cefc718cae7e9830f7ca101e4e23c6bd16bfacf4a9927fb13af4b79c86ab999beda4ad396abdda354a42fb4ef21d6749175dc21a0cf9191aa4f90d274b50370a580ad8dcd166d2b06c0d8b071973c3fde30f7e2bc371a51ca5866bf8b24eaac75bf482dd4436b214ff62d32e20df223b0b680ede28b3a49e66e330a8a3ecace0db9855d235d5ff23765e742d1a739c2ac8743f4c62664a3b347279da55a1a5b16e1e2828b584a013577d50f890e3894d9e8d6bfccdfb2b70221f12a7fac24b7a8818edce72b65f622c77bf1312771a2c0d805ec9a25c536c91868762032255be78903b77b2c1a773a03996fabba69214e76f5df6df0375b592692a2c3c86c75a3be56fe598ddaea0b9901d20db7e43e128e04e5509283f833c24c625887288459db5727210ba9a301fb8c934dd1d8dca68039fe5b2e1a8d7cdfc6d875e5851098100c3cd42544ed90bb55b58d20a501fabbc485d148c615a3b070fa0520da2ed68ee115a4411d5418b47f3d95616096f67a7a36d68f1e8df82eca8ef96fb4a96b3422fe046a37ea5f5967513a559bd770fecab7228b0692f439765c9e9c6ea4fc608e0b27f9b49064daa2bac06f83f6d87ebc61fa3a29bb5ed39641245ce8cf43770df32a84838802b0827ca5a40e2003915e2ed108a005637bb028d29bd2cfd28a1bd55e67ed1b6b7b72163c27c4b0e36d1b134d6dfdb165a66fb46498fc04bb8053b84098af5b18758631d1318d625a6fa4d3ce5a4d3a90e10c6363a26b5ae96c2d56f87ad21a6118af6847d041f88f852ddc3f250c088ef5cb31198f3ac81cff9a5bab26ed56c09f8416188974e08349f7da28fc754b98c1ac4ea0060ac1e1b1c49f7dbadbc59254b265dc418cab9ac14e2bbecc4c3103543e37984efb1f61315e10d2b422732217d3a9b0cfe4561f3765d3bda60be239e02bdc164dd631582e8c87dd8fa60d63dcf9e7f3dadc4ce5e4433a42425b8ee8cb8a2defab0bf9b6109c90b5655b79b18c06884f2670a985d454e08e54de69f645cb0cbb70620bd988ee717c310ae77b4abe81c01c6e7f47268ee20bc30b9062830917705682eba2c5ef966b877f33294aa5f8b29d3dd5ed92302087f34fa18d19a005de05f925e3e93c8c0f24507ff20cd23d9ae5452c32ff58c78ccdb1ab32c98edfaa6d2c3971934ca8f849ac360c286566eb72b0793f12cef84bd282368d533247ee750f18aeda484167f3d680e4aaa3aa0694441d4ff6a71531f1a30f87eeb71afd04c5d686e1f86f27586f4e2c8ff77c09612ba1af9b3fb93efd31af42f8e0498f35d07c662b743a08f2839cad8f95b90cbb4fc0ed2ca45dd093a549cde4c6ff08ce09a2cbc6f9f78b6f96643357f92f8f403202742057731fd3e343a87c0affe803cfdbddb8c2694ab63f2dc35da705624747e30a943000fc82c40f10e1975d2e2ec15aefd531b6dbc053606b054dc976f44d5b5a5f37e9c08532ce16cf8bca55ab6c814ceb855ab50b8b52620f8645a9dc25fcb732080d84bf39c3ebb235b4d96da527b64ec4b72f69e91d16a4efcaf76f2e1f968ca68a06f60b01ec7becc9ffd7877c0992cb0f80fb3daabc039513896bd7697843be06aba53e7761e11e075c61ef2d897d4d9f90041c14283746feeb3f0d456ba4be27843350fe43e7c1110b4439489139f6dae01c43f23ec71f08d3042663c65e059d368e4e2c6e49de45bf078d3182a1bc1208bc59379e705aa3309579947409f2a8b3d79099c8619f916e7a6fa333d2312a274247156b8c25cbcfcc59ef13339c700f56a8691dff39bd4338789001872c0d90929037dc0ad99b380a6ba73f331f73f9274f4c2bf5233d7482edf37bf6ffed4f2c0ee44a1d57cae0d644f25591dc03bf837571a82d0c31b61be7ff85a5b3843e8f96a50eaa43f5c137ecfc4e4530d08a2afa4ba02fcc50117a4ad0d5862302017639344c82749f673dbd650e49b35302d0acbab45c0973198291bb42b4cfcd3b0c272074341ea8eca19e122cd234da6d41bf5eedb706e16c17687ed8b84db67130796d26b94eac83bbcd785b603242bd6252c155711efd7dd22cc54e1eaf6d910d0f22c701f3d4da0314dd2829c6ee13bbcbd126558b47b8066bf0766c792a012315bd29bfeda8f28a2c1f4e638b701758e19a0e5bd5b4f19048b00a877d956292e345f8a3a8367892f955bcb5e50ca145ec5e2c9309e25941bd277e393aaad38f9b72a42514b27da6856223c37a1fc1327fa760551d3fdeb0b222ab180b16c9eea138cf4f327e88fdfee293c5b6b007028eb796a60772148282dcd17ffc1c90ed8b6540ede933545ed5a5301d6ff39734444ff3d85cda4ac3befa508154685e9e231eba4a91a35f4f7f48fd5ac2447c64c010e2a9f8e80691c95460e1995444466ec5f3cd71fe509a26ff0b7f3254bc8c3255e903834e841b37c70b267fb33deb0d1ed4ea84a869453ba508fc255b12cf847103d5195046c930ae4a75c956f22fcfe4186d547686b54bd7a534940d5d62216994eac0e8ed3bd2bd59354e6b9c6b5b10511d54a8b928040f1e1024a423b0cf519fc6e9673df5c48c0778c7edb8fa8d8ace77463a77d2d6313160e1ee72742953e433b6732ced59c93464fd91520847db238610ed0c289fc55647881a7d6257cf28090c75a6f19df079cfd35742a74a5ab270314f7c8039c20ff0f3f543d029b75a741b5dc6425241ac2ffabf1f96288e6d4ba34da09fb6049c2c8753fbd41fdb4bc68c57bf374ef4feb0df00c41319debb26afba2ff39e1799a1c2137f4e920ee5b02d93789b6b0c853e8143dae5b08ee85da2ea7c31803610ce797293ea95c16ade6dae2afb008e59d8b9505737f008b5227df5f1e4eb5d707f502698a17ead9b1f5ec09dff34248ff2fb153dc6df4812e39754a4baa42e1d8b77fbddef3ca091701ac28ae5fd422dbd8db5b122d3965383abc37a52d2fca5ce56eba974dba3d059cefe40e3c35c9daa8ae31198214303c1dcb90d58fc983ccfd504fa43925636f94b128d44e8aa5cd3ecfabd50a84062d03f7508a0575ab65ecc749d3ef566fdbc529a8139b7a7fb3a9bd784df52cddc6f2699044ba47615163fbbe19f3d88d38a8b71fe52b2611ca74341429d1cef1a7e350545be29d2caa560e60352cab074c298c44ca2c07f9795ce52f10aa3e2fcdef371f24e309b19e52218881f25a4674527edbe3b3bd0b9b536d810c6f9500c0c81bcfd9a440dd91c1d35c52758d2b2ae1a8497bb394c4f09d3947cf777727b0d1daf5ac4fe4fa3c247a791702cb84b96321b7fec81bf549d4eb5d6dafe019b26187417c68b064e4308908535a3e77b6cd3e28caaf12d726f15590b7958e40134d045a38cbb689131a7e85532f1c63dd4bac9e4d00645cd7b2b71704563f3738b92044a8153f6ba717800ab7cb238175c376d7add2c5ec38e4c856f1ab9c3ee33f6ca6d576ae908dd290e4bae23470182e253765e04e8eb02a791c4396a511ef467879a9e2818b8a4b1b0b39a6c44e816e3ebf6e3be93929dfcb38d5dad7d20b60215447674d0608b8b02331ac20e57083cb9b4449fecbb149441aea0ad82f00a82d87d743fc80d410922bc20923516885440f43c9f32beb81ce148def6140952583a7825c2d2fe012d52d30ef66d32a8a0864ac5c1737e2506228d41ff0515ee80be4cf012927dde0fd2a07cac68eff8c4437f2844d4df07936fd8753e5909f962c5c767f8719cc295bdfa8a16f3f36ff56e34d7b14b6b8c46d5af248b04a9c5396f84990e23d145670950bce5f5638e5e2cea37c371a4483729338f1305cbb32fa1c05dd9d21d2a69e5fa3abe9a2dad2237be20b4088393c04aa66cf13718de4bffac72f641a8c017a1d5568fa15a6a06e4dc833874ec95af6f115bdadf15179bfc8c4e3e64f26f1299e282c4ab397340934efc1e601afc630fe195e8ae7d8da1310568cab4f2fad085d0ec39710d8b7c812b3fd55c6f52925bcfc90fbcb35b8daa0f1e1f69d82fae2034039f7ad6921694ed48a55a68bc541e6d86f1e33c261a92d48b50eb58a03d8e31b2f6564a4ddc3ee988d0dc47b4b610a9a9dcb87571b5c1edb3362df0ec3d58872157e0f7247dfa8100b4478b705702a5620c9201010f40232327550db333e845dbecd6aadbd0a94c064862b1100b4dd45ece811b8c0275e3753e11b4bcd8bc5ed7668e72afa5bc5cc17b4c313273755f532ecfdefdf2d5c47999453a3b7c158d98332f0bd3a820cfb2c8c3bcd43197e7395a032cec6e41662079f2f654965aebc393e22b5c8516d9b8ad01e33ee481a4ac46a2df304dadeaa9e5274d340aaebe14dcea315fe1279f1a41a5c7aa8c94bf4b3d48757503171f53488e01210145e62c0de7c39737848dbdb1b207d4d33b8de180b020e8a76b1b521905e5e3ce97292f8558fb68efdee774681bfffcf1dc3eef35f660dd1659a32950de2d50e762313beee330d9c2a9fe8ce5e4e61ddd86378d3551335f6ef62053d3b248a8c33a11abdf3f3aa1975a15f4a6957a13d5b12a44d0f2b52b9a2d996e98c630c0f2abca80c7ae89efcf81ae284a0d19582cb1319d207077e5657d245533181ed6e07e0f7647123fc46c37bd75b4f4d181112b4a08acdcf445332cb9dde69a0923dd9244dd2ecd818b19588939922e3b2d8dd9d9fed95fa55b0e4564b38aca2c4d24eebc634664400177fbdeaeb278bb1d8eb11baf4be5c87d4f8d9a855bfa75df4c51fb4eec87a27c59df9a47d82523b08022a1c0fb22ff6f93c3d2cc22a4111a6ec5be428cba33617be65739c2240248f3a02d01ddf2d6aca9e537a2296b16d082d2b868504371dd5e41898885b03ebfaca73b40e8924ece83c1c80de6ce14943e1199c6f81bf359f44c3ed5ae3c6eacb730b1039f0b6555347bd566dfff45a7a2176420ab2b40916a73b66a3ad07af6e1ac5597393d203fa1ad34d4564af956a0a3e2997e27a4e5eff67dd89cce8875d995e00c1858234f149f6ad4cac2b8056966f726df57b8c4ee8f22f23097ba1471b1f1036e3a499400fccdb75b56eb13e9eca1407d5bff4b075b06d00fcbfcafc28431eb33156232e73c6577e3eca437330c494ede57b9609e1f40634918dea767338b5542197410cdc000143ace89ca0b7bf645b3267f74767d7c7fce05d2f59c137204e56bfa711f66903c511f681cf7a1b4f9fc0f42b7c438ff8957e1059375321df5b0c5c884f46d94c21686e1300582d34928bc398653118f79bfeea2e7cfbbf31a7718f4aab50fae57db94203d43e060365c9a7455241be03d82dffc3783d0f6aa170c0866eb0dad07485831526922d8348a7a16e2e9903a2ac93c58c6dce83127fab17703ec004a519ae5675baffb31bf4b52f9ca992a84017a44d68dc693abd829947342f277fdcbc87168bcc03c32b8b1e81a1915af2517c464af07d52b79d1b0e53164c82ba049f81e92ed1dc20a88fd72e9ce7aa4b22a7cc57dc5527d14f62bc29cfc9d57ed26fd523cac39ac00ba12d3a49d694709924275fc0793d56acf9558818dc9eb210749fa5307d45886b879257d627cee0542b51c2ce6ce134100efb47c92456ece5b73cdc051f570810a8d534222649eb56cf73a377162b753de6c282bcd4a25dda21dd10901bd8dfe8fd4ba8a70811c39707beded23dd60f23e2933372e3a6bce099899b07f0a4c4956fd98e956a8649622c77717de099463c0c6c9389ab4a1ae10f8ddd086d876af2943ee0b6b402ae5f89e09922e8c510ec0caa0a83e366e916400bfec88a52ab457037a35ddc6a8e2289c33684a5915c37bf5d227cbc65a737b52bdcb4fbbb7b4e7f965db116b46044d0870846c730dce12e120b1fe6dd5798ced24cad72c59a3f44de4978b8bc05a1dbeb766be6e2abf6ef46c67a58a370e54e92d89e5f44525e82b94a388d8d0cb20c3469a258c1633c9dddb6854aee255f93f59435ff317622f6899250aa185c207644275278580c5d32401741fe264a2e03b80f442ed58fd0704ebac923ac6a5abb7f0c695252f82e3fbcf2b99d721589a8fe3fad4d5926aee3d7bfafb6739e525faae3d25b12841fa2cc61dddc44d36acb9a8b72d60ecdd9c8cf04f9bac341b5e0f9bc59042db8126324888b07afe72b18cce36d61eec975b6b4ef5dc4a16ac14440cf770599bd4db630bd110eb63a03a80cd95c16d314a4de60cc5115bf0754cb7ab84a827ecefafa96069c721a5979f227fdc2467b4cd1975dafb5b28e1d6f3c1c3a2816ad831dd98c1378a03798c128f176426eaa0e361571e758d54bf4ec2c988355f016e16d6cd5cf97bb4891ab33f5623b7e796af313cc7a9e2f9510cd2bead1ea5dd080d9de1f595b2629ebccf69a0feaed3963ae8a6c89edd66fbf6e566379898185828925f8669668d6bddff961b08aaedbbe7fc196931a887ec740da6bcdab8f826a34aa2aa1e406a258558f3baf022a64222df4d6ee8726c79ba3dd6e11a19e4b4bb49b4a8cd99c189e6392f08ad731e415b65d0ccb919dca46efe9f79e21437111ab09e926d3038182044ae047bf1cc92e2d2644c528985719667a1a8abaf65d0f211172ea789b2fa016e1a88325d1ed706239da4dbb9e2079e3598b4ae5885667587ba1e0921c9ba55d7a3be4c47bc2f2f3547ce9efe32e5a22855f761bd4cbe1cd9337eda4bd7d82a918084d7e116b656104ca87e64b1b8c62323c3c296c5b5b98051feb607b872edf9f789744aff710c4b7279711182bcac6b76c05f5cd982f52f451e7e29046550e012e01d8cdd3e305427030f4247488c9136303084c12175c5c781cdd08aede5a356ea0ccdd05a460be3c7b4bfd62c3ce9ab68e285a36c1546d0b18edad71f69f5bedb340772e1bbb035514b085067259e39f59dc292a12557350c66904b253efee29a5eb7a6920f583c899dc46a1d3e2af2db3a3d1a0e8d1f98722a16c6cc1e401058d60c8c436d8f1166ba53bdde5810f9d0288528affd486c266546a864c92af3df8abd451cc1e0d6bfea534865cea9d49b3ea5e390fa823118df8a61e31022f5fbb8ceee870bf2e60890263c4d14e24d053d0fddf665ff80a66fa00a5957f8a30fe82a4b82cf2f6b4d49def98f66bfcdaa0aef13314e950ca9f3849b1edf3b82eaf74a0dbcf45c3dba9bd2d853281a78484f1efaf4150da1207ec3cb61fbcbf759f8182b7052b28d7164b73197b0a440759fe9d5ddf827f1897a174e82fb968a9a07c61bee44bc1f7f9ee5c6de04c02d57735c5fab741b36aec7c8642e56cba932a08b8e8a9d3eb066a4ee7cbf22e5abbd4346de59eca1f24ad9f7f9ff7621e5f30dd08f4cddda8e80e496908109f5212a72bab1378d1237def07bdda4178719975346c68405de15153031fb17535894e5e3c1de6fdd507333f0226b78ba7cae509cfb48d6735ede9392650bf85ac1db919b1e9fe0a823119d8253204dbb2f7a8f524be6d419f3a45c5051a7a88ef0bd41586d90c11a894d647f03895f671a6e19f1c70e32668653aba8366a3d372522f49844081a9637db080663ab02f4a8af502955d5411461b62f85308c91852f8fb9f0bdddd500b4a133791d3a2f91a82dc4b09f5ad2196a9172ab0cd3fafe7266e9f6d159110d99ca8da8a34b17be17a04ad4509a9fffab1e45e10f10e0cf9cfbd9c761ad044064c07e473fdc626289cfb88b13a11455c069b70aa02426d9119ac878a14c9483be9c0d5bcbb5fa76c8d06531f59c7cf7c26372e750e2f332418ca769e5e7fbeb3ada7bb58b573a0635e2e3ad9a53ddb809ea01086a3fa993ad57e89da6f9c5e61bd0f8ba69212a386b2aa1ae17520d7fb989dbe14021885eb50fa3048aebd42c861a09a308b660d382c0480ead8a52a1e14927c7c77957f94bb59ccfd557f8c4a7af23360a298a603d20ebc386db041d8c306b3e32b0bff541bdec5ff75c3b40950815cf9f89d48a382f67e44c409d046c01fb1262aca0df6f5238a3c3c09977261494f7361ba326815d6e23f49e4d6d4b54665081067332265fff59cf54af9da0db9d19bc611cbcb6e6f3f1e2e1ffb6cdd6253578d78d06a2ff5f9250f1994c5749e3ce49231fbd63bba28e948f9150933e3ae31299babaa41043b181a100882e613b4b4b8f49ceeb742d22f860853a9b917f5a323a8a1fb1f3363a7be4407fba44b408f259b5db79a055b92ce3d7a0649cc59f4afa2b1f69959d5c6f5eef1fa7987a47bee4491f685c52e9db1ee1a231ab5a4bae1019c97868a409dd0d57b32525394a233023c4a7ac429808bbcb57a34b41883202744c3bdebc0a637773273f19c2be6e806bef7fc1002846db762ee4e16867773808c5477987d5851d5b1641d070feabc203cb3d7943ffb206272fcac1bccb616352d85975f5a22c0f247548535ad9fb83fb2be17689453f10691143c060cd964df63c3c70e7b1cfc7e2b468015f327f9869353477bfeeed330b03ddd9e4e0a2441182244da283d7a59d2b2b20e6de3e3a47c26aeef4944c1190bba674523a6c3c4ed6bac53b9edffcb0e9fb19d8bf36949d03ef6a7e59eb903a00d9614f642d1932c766421906f5b177963c71e881453560e3ffcec792e8dc46b1832a8fcb2ab2268a9c1fb648d1c6fa1c8cbd50d5a2d8264fbc6c063e6daac5519d362da389dcd3d12c8039f991de91e728abf5bab95c3aef66dd8cc36c60e73cb10afb02eff6df20ff12c59b142b07fc48fe94612de80b8b958f78256fd7cf3c6f79a83867f3bb5f70da392957badadecefdf7b6e4ebd39ff945397c7d302ca0a5a3918d8abb893cd9cdd680916a50fe19699ff0476ad82e6ba46523f26ccc5eb65313c1df1077c8876d2b73bf86ba311862d12b0c557a92ef827197121512e87f817167d4b17c7e225a48b3f8fbbf4187438e0e9b78e905cdbeb72e80dfb37ec0104f5186b39b4ff34f0cdf4b74dc915acd3f98874cd6a67308d0ad9697121ac477550b1affe004f433705933f9647522be65cb5a7471120ec942aeb956f195be0c1783102cf7d842f2968222ae1a7fa6513f200d3fa85d71724956ed697f0673ee3b40a4d46ba4850439ec125b708ed52b52b9f72906477d520c90a9f5dd49a7a33a328137a183f439895532b78ae451a8c3db789bc862fbc37241d523027e1a008629c969380f6eb55f9cf3f0675bca6851f00df6aaf90de9f62d5c179945ef81d1073850301f97e379ea415d830e3f3751cf83e2dba541cb6cdd89e6b674f2c53e329e5f3dd418d534ada6469a5b3bca5b7cfbdfdd6df4abaf77d4520d0311e801145c91b52586a56086e663841b702f52cef9fff8cfb7b33dfa125688ba6b4fadd1dca8defaf4259ca85323b23d3bbb45933562c25af3e8d7bc6ad4a50ae974f8d207994b3bd74a6812ab6a40fcaf96bb4e17bd20d742b14c72226caef3e0f5c56c4930071e9f9a894f18650fbb785c6f707605c86b634c9722c8690cf3a954f68d7c2db3a257339ade67a41259f6f878dd0ab7876deffa77f6f00819282a8f4c4da84c6cf4f335cd0410770a2b1a1fbb3f85f4489eeceb78bbfddb2d1866c57b41f6ed179a0bc3750a486403d23473f2feef43ebc5af1018d9c20089e277d77fb9c34f425c8f8af4c49864b57572fa8c232e61ef37194251a1ddc2f73ffecd57e638751cb72bcb2c40d22540166ca1e8588f24b010c9fbd962e3a2c23a7e93f131df61b8703ce326ed80cc87912d3c6aaa27574bbe8d65bcaecd660c31cead132a44b1d0e4a53cacc0b82a263c4e7783944af0af08ea9e68e8e25ed9111cfef841f1b2fd24164f9097f70efe09b1109e5cb91fe68a2760381fd63a7fd422dd578a60661abc9ee3a5db1c2cde2fb21f2040f1ed3fc27b99e254256949d0560e8b98fa028fca50768caa951a87bf8969af498d50a9ee773c9caa7d9f7d8e1955506013f198cda316d79b177e59f233b98f727afd2494fc18642f0015adab756ea6742690c7d00f28655b915ce4eb8b3ba2e8559ba23e1ff1ccc9f79ae2df85f924459c56715dec78ef4592352eb1a850cd65ecd36e1a9121e888586b7b2fa84da920b8cf44480433e61ab076b10171c0537524bb170a4b99b0b0c437418a665b7ef909652b6483b20362e557c1480c2a2a0efa221fc59054a48122b52d38245f9bd026001635be5b155f5c766a59306fbde231fa72b4d74449a2fe8fb969496ee26af5881adaafb4189b439877ab8f78709cfd32c10ea576a010bfc137b7a4aae137ea3d29070ce3bc8dbe6655e967115ca3461ad9d28b9cf8af07441e68a54ec5e889846f3978f07ba51f7d5af5da78c5c675dc5d0c1a4a399ff4247203573a46fb903eaf7bc886e6cbd3126fa4a3fe3bb13bbdfea7da871f6563aa750f6ad7895b34b2809563dcf5ed30f1c60cef4138aa49d4f55e396534ed10cf4d857723a2b442f47d79de162c30ec6c4daf939b4c88649494e3682d1da81b4a5928d8e18a16c46707a685305e592589acb484e28e9d5af89c44b6e563d125ec97c0155410527406d94b90bc9576a662db99da1cb82b04d610d02187ce08f22ea0e8fd31919d53fa6aaf980e31ca7f8610e695a41919c24136a8406c62d5f15fca36507002b54ece17664b5247583ad60d863f283f3c288946139575dcaedc978762e85f534e56334ef0221c34ffae054ddf79339b8f08701e9699b11041df8f518dd33203363c8098fbefb01555bcc2542422777b38d8dff11b15aadb0c251ce2c5b32f8735b3cb784f2e5731b48feb5a0e791a1106abdea0f7d1f087737cbe7fdf523fa14c9be2a2987511004c59698242452c469a07c30e4a1f73193c74a41bdd88aef50035e4648bc9dfa276951798420a45e4085932bdb9381af3cc4678bd962af616549e4020d2c9fd25e2117a6d8934fde2218273d7833d60ea492e251417a27e7fb32012a940a6b6487af4b64958bf05f1b1107732149d227eeda5ca5a43cf583dc297d66072a1acd75e93a7caefd36a0d581e21d5cb08654c4ecef46ebac5391546e0b7d2a6418548d8f816446bcf237f676e873e6bae9107234abe5ab24c53ea472ad10653cef068fd9f4e729fc0d526e489f8df13af5575f1e70e0ec22899728b0659d70fc2dd509d9df3ec170638f89e540f4d3f02aa9b1b1819f84da596e0d7b45a5818061728f8eeccd2bea0f460dd7e18cb95f2364c50e351f0690e184eb63ebbb14a0b4b2117e44f3b2b300", 0x2000, &(0x7f00000055c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000005680)={0x130, 0x0, 0x6, {0x6, 0x20000006, 0x0, '\x00', {0x6fff, 0xad7, 0xf, 0x20000005, 0x0, r2, 0x0, '\x00', 0xff7fffffffffffff, 0x7fffffff, 0x2, 0x5, {0x73c0, 0x660}, {0x8, 0x29}, {0x209, 0x200007b1}, {0x7, 0x5710}, 0x8006, 0x6, 0x7, 0x80000000}}}}) write$FUSE_INIT(r0, &(0x7f00000057c0)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x120a1101, 0x6, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8}}, 0x50) 9m41.785107595s ago: executing program 39 (id=1764): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000005b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20010000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000093c0)={0x0, 0x0, 0x0}, 0x0) sendmmsg$inet(r1, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc0) mlock(&(0x7f00000c7000/0x3000)=nil, 0x3000) 9m35.657309s ago: executing program 40 (id=1767): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000740)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000780)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000007c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f00000008c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000900), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000940)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)={0x4c, r4, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) ioctl$TUNSETQUEUE(r5, 0x400454d9, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000240)={'pimreg0\x00', 0x7c2}) socket$inet_tcp(0x2, 0x1, 0x0) execve(&(0x7f0000000440)='./file0\x00', &(0x7f0000000500)={[&(0x7f0000000480)='syzkaller\x00', &(0x7f00000004c0)='\'\x00']}, &(0x7f00000006c0)={[&(0x7f0000000540)='\x00', &(0x7f0000000580)='\x00', &(0x7f00000005c0)='#}$\\},+\xc7/\x00', &(0x7f0000000640)='pimreg0\x00', &(0x7f0000000680)='bond0\x00']}) lsm_list_modules(0x0, &(0x7f0000000040), 0x0) 4m45.546778781s ago: executing program 2 (id=1769): r0 = userfaultfd(0x801) syz_clone(0x104000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x6a855000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) 4m39.41317554s ago: executing program 3 (id=1770): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000ac0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000b00)={0x2020}, 0x2020) 4m36.613178147s ago: executing program 6 (id=1771): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r0, r0, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) mount$bind(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000000c0), 0x80000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x40042, 0x1) inotify_add_watch(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x9400002f) socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000005, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000380)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000480), 0x651, 0x0) recvmmsg(r3, &(0x7f00000004c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000500)=0x6) socket$vsock_stream(0x28, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x2982, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1a, 0x4, 0x100, 0x1, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3475}, 0x50) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000280)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) 4m30.390602237s ago: executing program 4 (id=1768): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x1c, 0x17, 0x1, 0x70bd26, 0x25dfdbff, {0xc}, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@broadcast=0x1000000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48c1}, 0x40010) 4m27.835780165s ago: executing program 9 (id=1765): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000005c0)={'syzkaller0\x00', @random="0100003600"}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x9, 0xd}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x3a29d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000780), 0x56) sendmsg$kcm(r6, &(0x7f00000007c0)={&(0x7f0000000800)=@xdp={0x2c, 0x0, r5, 0x2042}, 0x80, &(0x7f0000000880)=[{&(0x7f00000008c0)}], 0x1}, 0x4005) 3m43.996431018s ago: executing program 2 (id=1769): r0 = userfaultfd(0x801) syz_clone(0x104000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x6a855000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) 3m38.89580542s ago: executing program 3 (id=1770): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000ac0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000b00)={0x2020}, 0x2020) 3m36.014177403s ago: executing program 6 (id=1771): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r0, r0, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) mount$bind(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000000c0), 0x80000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x40042, 0x1) inotify_add_watch(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x9400002f) socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000005, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000380)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000480), 0x651, 0x0) recvmmsg(r3, &(0x7f00000004c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000500)=0x6) socket$vsock_stream(0x28, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x2982, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1a, 0x4, 0x100, 0x1, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3475}, 0x50) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000280)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) 3m30.456718819s ago: executing program 4 (id=1768): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x1c, 0x17, 0x1, 0x70bd26, 0x25dfdbff, {0xc}, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@broadcast=0x1000000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48c1}, 0x40010) 3m26.390544231s ago: executing program 9 (id=1765): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000005c0)={'syzkaller0\x00', @random="0100003600"}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x9, 0xd}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x3a29d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000780), 0x56) sendmsg$kcm(r6, &(0x7f00000007c0)={&(0x7f0000000800)=@xdp={0x2c, 0x0, r5, 0x2042}, 0x80, &(0x7f0000000880)=[{&(0x7f00000008c0)}], 0x1}, 0x4005) 2m47.551486739s ago: executing program 2 (id=1769): r0 = userfaultfd(0x801) syz_clone(0x104000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x6a855000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) 2m42.59725307s ago: executing program 3 (id=1770): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000ac0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000b00)={0x2020}, 0x2020) 2m41.205825411s ago: executing program 6 (id=1771): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r0, r0, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) mount$bind(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000000c0), 0x80000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x40042, 0x1) inotify_add_watch(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x9400002f) socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000005, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000380)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000480), 0x651, 0x0) recvmmsg(r3, &(0x7f00000004c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000500)=0x6) socket$vsock_stream(0x28, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x2982, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1a, 0x4, 0x100, 0x1, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3475}, 0x50) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000280)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) 2m36.676859603s ago: executing program 4 (id=1768): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x1c, 0x17, 0x1, 0x70bd26, 0x25dfdbff, {0xc}, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@broadcast=0x1000000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48c1}, 0x40010) 2m31.525006896s ago: executing program 9 (id=1765): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000005c0)={'syzkaller0\x00', @random="0100003600"}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x9, 0xd}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x3a29d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000780), 0x56) sendmsg$kcm(r6, &(0x7f00000007c0)={&(0x7f0000000800)=@xdp={0x2c, 0x0, r5, 0x2042}, 0x80, &(0x7f0000000880)=[{&(0x7f00000008c0)}], 0x1}, 0x4005) 1m53.104385368s ago: executing program 2 (id=1769): r0 = userfaultfd(0x801) syz_clone(0x104000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x6a855000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) 1m49.141347458s ago: executing program 3 (id=1770): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000ac0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000b00)={0x2020}, 0x2020) 1m47.449350481s ago: executing program 6 (id=1771): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r0, r0, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) mount$bind(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000000c0), 0x80000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x40042, 0x1) inotify_add_watch(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x9400002f) socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000005, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000380)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000480), 0x651, 0x0) recvmmsg(r3, &(0x7f00000004c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000500)=0x6) socket$vsock_stream(0x28, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x2982, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1a, 0x4, 0x100, 0x1, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3475}, 0x50) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000280)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) 1m42.368816824s ago: executing program 4 (id=1768): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x1c, 0x17, 0x1, 0x70bd26, 0x25dfdbff, {0xc}, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@broadcast=0x1000000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48c1}, 0x40010) 1m37.64274757s ago: executing program 9 (id=1765): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000005c0)={'syzkaller0\x00', @random="0100003600"}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x9, 0xd}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x3a29d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000780), 0x56) sendmsg$kcm(r6, &(0x7f00000007c0)={&(0x7f0000000800)=@xdp={0x2c, 0x0, r5, 0x2042}, 0x80, &(0x7f0000000880)=[{&(0x7f00000008c0)}], 0x1}, 0x4005) 1m3.916227871s ago: executing program 2 (id=1769): r0 = userfaultfd(0x801) syz_clone(0x104000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x6a855000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) 59.977666157s ago: executing program 3 (id=1770): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000ac0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000b00)={0x2020}, 0x2020) 58.548836879s ago: executing program 6 (id=1771): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r0, r0, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) mount$bind(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000000c0), 0x80000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x40042, 0x1) inotify_add_watch(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x9400002f) socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000005, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000380)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000480), 0x651, 0x0) recvmmsg(r3, &(0x7f00000004c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000500)=0x6) socket$vsock_stream(0x28, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x2982, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1a, 0x4, 0x100, 0x1, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3475}, 0x50) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000280)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) 53.583246331s ago: executing program 4 (id=1768): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x1c, 0x17, 0x1, 0x70bd26, 0x25dfdbff, {0xc}, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@broadcast=0x1000000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48c1}, 0x40010) 49.494549614s ago: executing program 9 (id=1765): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000005c0)={'syzkaller0\x00', @random="0100003600"}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x9, 0xd}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x3a29d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000780), 0x56) sendmsg$kcm(r6, &(0x7f00000007c0)={&(0x7f0000000800)=@xdp={0x2c, 0x0, r5, 0x2042}, 0x80, &(0x7f0000000880)=[{&(0x7f00000008c0)}], 0x1}, 0x4005) 14.104088786s ago: executing program 2 (id=1769): r0 = userfaultfd(0x801) syz_clone(0x104000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x6a855000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) 10.515143717s ago: executing program 3 (id=1770): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000ac0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000b00)={0x2020}, 0x2020) 8.717198616s ago: executing program 6 (id=1771): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r0, r0, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) mount$bind(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000000c0), 0x80000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x40042, 0x1) inotify_add_watch(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x9400002f) socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000005, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000380)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000480), 0x651, 0x0) recvmmsg(r3, &(0x7f00000004c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000500)=0x6) socket$vsock_stream(0x28, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x2982, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1a, 0x4, 0x100, 0x1, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3475}, 0x50) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000280)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) 3.752124218s ago: executing program 4 (id=1768): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x1c, 0x17, 0x1, 0x70bd26, 0x25dfdbff, {0xc}, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@broadcast=0x1000000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48c1}, 0x40010) 0s ago: executing program 9 (id=1765): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000005c0)={'syzkaller0\x00', @random="0100003600"}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x9, 0xd}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x3a29d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000780), 0x56) sendmsg$kcm(r6, &(0x7f00000007c0)={&(0x7f0000000800)=@xdp={0x2c, 0x0, r5, 0x2042}, 0x80, &(0x7f0000000880)=[{&(0x7f00000008c0)}], 0x1}, 0x4005) kernel console output (not intermixed with test programs): 3 has an invalid length. [ 136.768060][ T30] audit: type=1400 audit(1792156785.645:368): avc: denied { write } for pid=7900 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 137.023738][ T30] audit: type=1400 audit(1792156785.895:369): avc: denied { write } for pid=7941 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 137.106749][ T7947] fuse: Bad value for 'fd' [ 137.352104][ T7952] Cannot find map_set index 2 as target [ 137.509962][ T7961] netlink: 20 bytes leftover after parsing attributes in process `syz.5.711'. [ 137.733409][ T7970] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.734148][ T7970] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.734750][ T7970] bridge0: entered allmulticast mode [ 137.812618][ T7970] bridge_slave_1: left allmulticast mode [ 137.812643][ T7970] bridge_slave_1: left promiscuous mode [ 137.813235][ T7970] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.867826][ T7976] ip_tables: iptables: counters copy to user failed while replacing table [ 137.962058][ T7970] bridge_slave_0: left allmulticast mode [ 137.962077][ T7970] bridge_slave_0: left promiscuous mode [ 137.962210][ T7970] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.116400][ T30] audit: type=1400 audit(1792156786.985:370): avc: denied { write } for pid=7951 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.215656][ T7673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.443256][ T30] audit: type=1400 audit(1792156787.315:371): avc: denied { write } for pid=7989 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.639947][ T7998] fuse: Bad value for 'fd' [ 139.050870][ T7673] veth0_vlan: entered promiscuous mode [ 139.111232][ T7673] veth1_vlan: entered promiscuous mode [ 139.208943][ T7673] veth0_macvtap: entered promiscuous mode [ 139.227378][ T7673] veth1_macvtap: entered promiscuous mode [ 139.301616][ T7673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.327725][ T7673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.395986][ T50] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.396573][ T50] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.396599][ T50] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.396617][ T50] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.634840][ T30] audit: type=1400 audit(1792156788.505:372): avc: denied { write } for pid=8001 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 139.663096][ T1116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.663115][ T1116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.874795][ T7843] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.874810][ T7843] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.976852][ T30] audit: type=1400 audit(1792156788.855:373): avc: denied { write } for pid=8039 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.028151][ T8043] veth0_vlan: entered allmulticast mode [ 140.159997][ T8043] veth0_vlan: left promiscuous mode [ 140.162418][ T49] veth0_vlan: entered promiscuous mode [ 140.884082][ T8076] ipvlan0: entered promiscuous mode [ 140.884114][ T8076] ipvlan0: entered allmulticast mode [ 141.099535][ T30] audit: type=1400 audit(1792156789.975:374): avc: denied { write } for pid=8051 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.162991][ T8083] FAULT_INJECTION: forcing a failure. [ 141.162991][ T8083] name failslab, interval 1, probability 0, space 0, times 0 [ 141.163029][ T8083] CPU: 0 UID: 0 PID: 8083 Comm: syz.0.745 Not tainted syzkaller #0 PREEMPT(full) [ 141.163044][ T8083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 141.163051][ T8083] Call Trace: [ 141.163056][ T8083] [ 141.163061][ T8083] dump_stack_lvl+0x100/0x190 [ 141.163082][ T8083] should_fail_ex.cold+0x5/0xa [ 141.163098][ T8083] should_failslab+0xc2/0x120 [ 141.163116][ T8083] __kmalloc_cache_noprof+0x91/0x6d0 [ 141.163130][ T8083] ? alloc_vfsmnt+0x72/0x840 [ 141.163148][ T8083] alloc_vfsmnt+0x72/0x840 [ 141.163163][ T8083] path_mount+0x21ff/0x2850 [ 141.163177][ T8083] ? __pfx_path_mount+0x10/0x10 [ 141.163187][ T8083] ? lockdep_hardirqs_on+0x7d/0x110 [ 141.163206][ T8083] ? putname+0xb1/0x110 [ 141.163214][ T8083] ? kmem_cache_free+0x127/0x6c0 [ 141.163233][ T8083] ? __x64_sys_mount+0x293/0x310 [ 141.163244][ T8083] __x64_sys_mount+0x293/0x310 [ 141.163257][ T8083] ? __pfx___x64_sys_mount+0x10/0x10 [ 141.163273][ T8083] do_syscall_64+0x123/0x790 [ 141.163292][ T8083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.163304][ T8083] RIP: 0033:0x7fd5b3f9e559 [ 141.163314][ T8083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.163325][ T8083] RSP: 002b:00007fd5b4e18028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 141.163336][ T8083] RAX: ffffffffffffffda RBX: 00007fd5b4225fa0 RCX: 00007fd5b3f9e559 [ 141.163343][ T8083] RDX: 0000200000000340 RSI: 0000200000000300 RDI: 0000000000000000 [ 141.163350][ T8083] RBP: 00007fd5b40358b0 R08: 0000000000000000 R09: 0000000000000000 [ 141.163356][ T8083] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000000 [ 141.163363][ T8083] R13: 00007fd5b4226038 R14: 00007fd5b4225fa0 R15: 00007ffeeccad9a8 [ 141.163377][ T8083] [ 141.518350][ T30] audit: type=1400 audit(1792156790.395:375): avc: denied { create } for pid=8091 comm="syz.0.748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 141.574702][ T30] audit: type=1400 audit(1792156790.445:376): avc: denied { write } for pid=8091 comm="syz.0.748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 141.574732][ T30] audit: type=1400 audit(1792156790.445:377): avc: denied { nlmsg_write } for pid=8091 comm="syz.0.748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 141.994179][ T8108] Cannot find map_set index 2 as target [ 142.032449][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 142.032462][ T30] audit: type=1400 audit(1792156790.905:379): avc: denied { create } for pid=8110 comm="syz.5.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 142.074160][ T30] audit: type=1400 audit(1792156790.945:380): avc: denied { setopt } for pid=8110 comm="syz.5.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 142.149585][ T8116] netlink: 20 bytes leftover after parsing attributes in process `syz.1.755'. [ 142.322758][ T8114] Set syz1 is full, maxelem 2076 reached [ 142.456378][ T30] audit: type=1400 audit(1792156791.335:381): avc: denied { ioctl } for pid=8121 comm="syz.1.759" path="socket:[18372]" dev="sockfs" ino=18372 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 143.073024][ T8141] siw: device registration error -23 [ 143.118635][ T30] audit: type=1400 audit(1792156791.995:382): avc: denied { append } for pid=8143 comm="syz.0.768" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 145.053204][ T8183] FAULT_INJECTION: forcing a failure. [ 145.053204][ T8183] name failslab, interval 1, probability 0, space 0, times 0 [ 145.053227][ T8183] CPU: 0 UID: 0 PID: 8183 Comm: syz.0.782 Not tainted syzkaller #0 PREEMPT(full) [ 145.053242][ T8183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 145.053249][ T8183] Call Trace: [ 145.053254][ T8183] [ 145.053259][ T8183] dump_stack_lvl+0x100/0x190 [ 145.053283][ T8183] should_fail_ex.cold+0x5/0xa [ 145.053299][ T8183] should_failslab+0xc2/0x120 [ 145.053318][ T8183] __kmalloc_noprof+0xfc/0x840 [ 145.053334][ T8183] ? __register_sysctl_table+0xac/0x1650 [ 145.053351][ T8183] __register_sysctl_table+0xac/0x1650 [ 145.053367][ T8183] ? lock_acquire+0x1d1/0x380 [ 145.053382][ T8183] ? __pfx___register_sysctl_table+0x10/0x10 [ 145.053395][ T8183] ? is_module_address+0x5f/0xf0 [ 145.053411][ T8183] ? is_module_address+0x5f/0xf0 [ 145.053430][ T8183] register_net_sysctl_sz+0x325/0x420 [ 145.053449][ T8183] ? __asan_memcpy+0x3c/0x60 [ 145.053465][ T8183] sysctl_core_net_init+0xe6/0x290 [ 145.053483][ T8183] ? __pfx_sysctl_core_net_init+0x10/0x10 [ 145.053499][ T8183] ops_init+0x1e2/0x5f0 [ 145.053513][ T8183] setup_net+0x118/0x3a0 [ 145.053527][ T8183] ? __pfx_setup_net+0x10/0x10 [ 145.053544][ T8183] copy_net_ns+0x345/0x7a0 [ 145.053559][ T8183] create_new_namespaces+0x3ea/0xac0 [ 145.053577][ T8183] unshare_nsproxy_namespaces+0xf2/0x220 [ 145.053592][ T8183] ksys_unshare+0x4a2/0xb30 [ 145.053607][ T8183] ? __pfx_ksys_unshare+0x10/0x10 [ 145.053628][ T8183] __x64_sys_unshare+0x31/0x40 [ 145.053641][ T8183] do_syscall_64+0x123/0x790 [ 145.053659][ T8183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.053670][ T8183] RIP: 0033:0x7fd5b3f9e559 [ 145.053681][ T8183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.053692][ T8183] RSP: 002b:00007fd5b4e18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 145.053703][ T8183] RAX: ffffffffffffffda RBX: 00007fd5b4225fa0 RCX: 00007fd5b3f9e559 [ 145.053710][ T8183] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 145.053717][ T8183] RBP: 00007fd5b40358b0 R08: 0000000000000000 R09: 0000000000000000 [ 145.053724][ T8183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.053730][ T8183] R13: 00007fd5b4226038 R14: 00007fd5b4225fa0 R15: 00007ffeeccad9a8 [ 145.053745][ T8183] [ 145.569592][ T30] audit: type=1400 audit(1792156794.445:383): avc: denied { map } for pid=8188 comm="syz.0.785" path="/206/dev/sda" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 145.865764][ T30] audit: type=1400 audit(1792156794.735:384): avc: denied { create } for pid=8201 comm="syz.1.789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 145.904524][ T30] audit: type=1400 audit(1792156794.775:385): avc: denied { ioctl } for pid=8201 comm="syz.1.789" path="socket:[18766]" dev="sockfs" ino=18766 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 145.932619][ T30] audit: type=1400 audit(1792156794.775:386): avc: denied { bind } for pid=8201 comm="syz.1.789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 145.979448][ T30] audit: type=1400 audit(1792156794.855:387): avc: denied { setopt } for pid=8201 comm="syz.1.789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 146.038262][ T8202] binder: 8201:8202 ioctl 4018620d 0 returned -22 [ 146.057736][ T8202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.789'. [ 146.124740][ T30] audit: type=1400 audit(1792156794.995:388): avc: denied { write } for pid=8201 comm="syz.1.789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 147.050285][ T30] audit: type=1400 audit(1792156795.925:389): avc: denied { getopt } for pid=8232 comm="syz.0.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 148.790896][ T30] audit: type=1400 audit(1792156797.665:390): avc: denied { create } for pid=8269 comm="syz.1.814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 148.854980][ T5613] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 148.867289][ T5613] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 148.867939][ T5613] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 148.869576][ T5613] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 148.869851][ T5613] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 148.920852][ T30] audit: type=1400 audit(1792156797.795:391): avc: denied { map } for pid=8269 comm="syz.1.814" path="pipe:[5026]" dev="pipefs" ino=5026 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 149.036577][ T50] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.379303][ T50] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.489946][ T50] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.587817][ T50] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.757127][ T5786] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 149.875155][ T8271] rxe_eth0 speed is unknown, defaulting to 1000 [ 149.890714][ T30] audit: type=1400 audit(1792156798.765:392): avc: denied { read } for pid=5263 comm="dhcpcd" name="n39" dev="tmpfs" ino=2060 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 149.892743][ T30] audit: type=1400 audit(1792156798.765:393): avc: denied { open } for pid=5263 comm="dhcpcd" path="/run/udev/data/n39" dev="tmpfs" ino=2060 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 149.892784][ T30] audit: type=1400 audit(1792156798.765:394): avc: denied { getattr } for pid=5263 comm="dhcpcd" path="/run/udev/data/n39" dev="tmpfs" ino=2060 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 149.998469][ T5786] usb 6-1: Using ep0 maxpacket: 32 [ 150.000545][ T5786] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 150.005747][ T5786] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 150.005764][ T5786] usb 6-1: config 0 has no interface number 0 [ 150.048200][ T5786] usb 6-1: config 0 interface 184 has no altsetting 0 [ 150.076838][ T5786] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.076855][ T5786] usb 6-1: Product: syz [ 150.076864][ T5786] usb 6-1: Manufacturer: syz [ 150.076871][ T5786] usb 6-1: SerialNumber: syz [ 150.183383][ T50] bridge_slave_1: left allmulticast mode [ 150.183402][ T50] bridge_slave_1: left promiscuous mode [ 150.183515][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.212817][ T5786] usb 6-1: config 0 descriptor?? [ 150.277157][ T50] bridge_slave_0: left allmulticast mode [ 150.277175][ T50] bridge_slave_0: left promiscuous mode [ 150.277284][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.685664][ T5786] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 150.685685][ T5786] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 150.685697][ T5786] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 150.688067][ T5786] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 150.783528][ T5786] usb 6-1: USB disconnect, device number 2 [ 150.796613][ T30] audit: type=1400 audit(1792156799.665:395): avc: denied { bind } for pid=8316 comm="syz.6.825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 150.800804][ T30] audit: type=1400 audit(1792156799.675:396): avc: denied { listen } for pid=8316 comm="syz.6.825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 150.861760][ T30] audit: type=1400 audit(1792156799.735:397): avc: denied { write } for pid=8316 comm="syz.6.825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 150.957273][ T5607] Bluetooth: hci2: command tx timeout [ 151.087557][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.092778][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.093965][ T50] bond0 (unregistering): Released all slaves [ 151.173883][ T49] infiniband syz1: ib_query_port failed (-19) [ 151.218210][ T30] audit: type=1400 audit(1792156800.095:398): avc: denied { write } for pid=8302 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 151.420827][ T1116] smbdirect: ib_dev[syz1] removed [ 151.653540][ T5263] 8021q: adding VLAN 0 to HW filter on device eth5 [ 151.774641][ T8340] event trace: Could not enable event p1 [ 151.908378][ T8346] rxe_eth0 speed is unknown, defaulting to 1000 [ 152.470844][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 152.470856][ T30] audit: type=1400 audit(1792156801.345:406): avc: denied { write } for pid=8350 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.733060][ T8271] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.733105][ T8271] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.733194][ T8271] bridge_slave_0: entered allmulticast mode [ 152.733930][ T8271] bridge_slave_0: entered promiscuous mode [ 152.775198][ T8271] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.775244][ T8271] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.775313][ T8271] bridge_slave_1: entered allmulticast mode [ 152.852882][ T30] audit: type=1400 audit(1792156801.725:407): avc: denied { write } for pid=8383 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.891654][ T8271] bridge_slave_1: entered promiscuous mode [ 153.036330][ T5607] Bluetooth: hci2: command tx timeout [ 153.190222][ T8271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.190698][ T5263] 8021q: adding VLAN 0 to HW filter on device eth6 [ 153.259050][ T50] hsr_slave_0: left promiscuous mode [ 153.259419][ T50] hsr_slave_1: left promiscuous mode [ 153.259750][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.259760][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.260196][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.260205][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.321371][ T50] veth1_macvtap: left promiscuous mode [ 153.321397][ T50] veth0_macvtap: left promiscuous mode [ 153.321442][ T50] veth1_vlan: left promiscuous mode [ 153.321471][ T50] veth0_vlan: left promiscuous mode [ 153.539515][ T50] team0 (unregistering): Port device team_slave_1 removed [ 153.544258][ T50] team0 (unregistering): Port device team_slave_0 removed [ 153.819644][ T8271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.955132][ T30] audit: type=1400 audit(1792156802.825:408): avc: denied { transfer } for pid=8410 comm="syz.6.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 154.100037][ T8413] binder: BINDER_SET_CONTEXT_MGR already set [ 154.100047][ T8413] binder: 8412:8413 ioctl 4018620d 200000000040 returned -16 [ 154.103050][ T8271] team0: Port device team_slave_0 added [ 154.132671][ T8413] binder_alloc: 8410: binder_alloc_buf, no vma [ 154.180990][ T8271] team0: Port device team_slave_1 added [ 155.117040][ T5607] Bluetooth: hci2: command tx timeout [ 155.812918][ T8271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.812930][ T8271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 155.812943][ T8271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.863226][ T8271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.863241][ T8271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 155.863256][ T8271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.172048][ T8271] hsr_slave_0: entered promiscuous mode [ 156.172591][ T8271] hsr_slave_1: entered promiscuous mode [ 156.175138][ T8271] debugfs: 'hsr0' already exists in 'hsr' [ 156.175152][ T8271] Cannot create hsr debugfs directory [ 156.439999][ T30] audit: type=1400 audit(1792156805.305:409): avc: denied { connect } for pid=8444 comm="syz.5.861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 156.679379][ T8451] tipc: Started in network mode [ 156.679394][ T8451] tipc: Node identity 4, cluster identity 4711 [ 156.679402][ T8451] tipc: Node number set to 4 [ 157.035988][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 157.115379][ T30] audit: type=1400 audit(1792156805.985:410): avc: denied { read } for pid=8444 comm="syz.5.861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 157.115675][ T13] tipc: Subscription rejected, illegal request [ 157.150868][ T30] audit: type=1400 audit(1792156806.025:411): avc: denied { write } for pid=8441 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 157.197217][ T5607] Bluetooth: hci2: command tx timeout [ 157.414742][ T30] audit: type=1400 audit(1792156806.285:412): avc: denied { write } for pid=8477 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 157.612834][ T8488] Cannot find add_set index 0 as target [ 157.635764][ T8489] FAULT_INJECTION: forcing a failure. [ 157.635764][ T8489] name failslab, interval 1, probability 0, space 0, times 0 [ 157.637989][ T8489] CPU: 0 UID: 0 PID: 8489 Comm: syz.0.872 Not tainted syzkaller #0 PREEMPT(full) [ 157.638010][ T8489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 157.638018][ T8489] Call Trace: [ 157.638023][ T8489] [ 157.638028][ T8489] dump_stack_lvl+0x100/0x190 [ 157.638051][ T8489] should_fail_ex.cold+0x5/0xa [ 157.638068][ T8489] should_failslab+0xc2/0x120 [ 157.638087][ T8489] kmem_cache_alloc_noprof+0x92/0x6a0 [ 157.638102][ T8489] ? skb_clone+0x190/0x400 [ 157.638116][ T8489] skb_clone+0x190/0x400 [ 157.638128][ T8489] netlink_deliver_tap+0xaed/0xcc0 [ 157.638155][ T8489] netlink_unicast+0x77b/0x950 [ 157.638175][ T8489] ? __pfx_netlink_unicast+0x10/0x10 [ 157.638192][ T8489] ? genl_rcv_msg+0x4be/0x800 [ 157.638208][ T8489] netlink_ack+0x655/0xb80 [ 157.638232][ T8489] netlink_rcv_skb+0x333/0x420 [ 157.638250][ T8489] ? __pfx_genl_rcv_msg+0x10/0x10 [ 157.638264][ T8489] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 157.638288][ T8489] ? netlink_deliver_tap+0x1ae/0xcc0 [ 157.638308][ T8489] genl_rcv+0x28/0x40 [ 157.638320][ T8489] netlink_unicast+0x65f/0x950 [ 157.638340][ T8489] ? __pfx_netlink_unicast+0x10/0x10 [ 157.638362][ T8489] netlink_sendmsg+0x8b0/0xda0 [ 157.638381][ T8489] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.638399][ T8489] ? selinux_socket_sendmsg+0x198/0x2f0 [ 157.638418][ T8489] __sys_sendto+0x48b/0x4e0 [ 157.638438][ T8489] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.638459][ T8489] ? __pfx___sys_sendto+0x10/0x10 [ 157.638480][ T8489] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 157.638505][ T8489] __x64_sys_sendto+0xe0/0x1c0 [ 157.638521][ T8489] ? do_syscall_64+0xae/0x790 [ 157.638538][ T8489] ? lockdep_hardirqs_on+0x7d/0x110 [ 157.638553][ T8489] do_syscall_64+0x123/0x790 [ 157.638569][ T8489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.638581][ T8489] RIP: 0033:0x7fd5b3f5ed8e [ 157.638592][ T8489] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 157.638604][ T8489] RSP: 002b:00007fd5b4e16e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 157.638616][ T8489] RAX: ffffffffffffffda RBX: 00007fd5b4e186c0 RCX: 00007fd5b3f5ed8e [ 157.638624][ T8489] RDX: 0000000000000020 RSI: 00007fd5b4e17000 RDI: 0000000000000004 [ 157.638632][ T8489] RBP: 0000000000000000 R08: 00007fd5b4e16f04 R09: 000000000000000c [ 157.638639][ T8489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 157.638659][ T8489] R13: 00007fd5b4e16f58 R14: 00007fd5b4e17000 R15: 0000000000000000 [ 157.638709][ T8489] [ 158.112546][ T8495] netlink: 20 bytes leftover after parsing attributes in process `syz.6.871'. [ 158.573206][ T30] audit: type=1400 audit(1792156807.445:413): avc: denied { map } for pid=8508 comm="syz.0.878" path="socket:[20344]" dev="sockfs" ino=20344 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 159.209749][ T30] audit: type=1326 audit(1792156808.085:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8524 comm="syz.6.885" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5de659e559 code=0x7ffc0000 [ 159.210672][ T30] audit: type=1326 audit(1792156808.085:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8524 comm="syz.6.885" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f5de659e559 code=0x7ffc0000 [ 159.211380][ T30] audit: type=1326 audit(1792156808.085:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8524 comm="syz.6.885" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5de659e559 code=0x7ffc0000 [ 159.211507][ T30] audit: type=1326 audit(1792156808.085:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8524 comm="syz.6.885" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5de659e559 code=0x7ffc0000 [ 159.328722][ T30] audit: type=1326 audit(1792156808.085:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8524 comm="syz.6.885" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5de659e559 code=0x7ffc0000 [ 159.329472][ T30] audit: type=1326 audit(1792156808.205:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8524 comm="syz.6.885" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5de659e559 code=0x7ffc0000 [ 159.329498][ T30] audit: type=1326 audit(1792156808.205:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8524 comm="syz.6.885" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5de659e559 code=0x7ffc0000 [ 159.329518][ T30] audit: type=1326 audit(1792156808.205:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8524 comm="syz.6.885" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f5de659e559 code=0x7ffc0000 [ 159.762841][ T30] audit: type=1400 audit(1792156808.635:422): avc: denied { bind } for pid=8535 comm="syz.6.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 161.131027][ T8549] fuse: Bad value for 'fd' [ 161.325268][ T5263] 8021q: adding VLAN 0 to HW filter on device eth7 [ 161.348445][ T8551] bridge_slave_1: default FDB implementation only supports local addresses [ 161.497469][ T8271] netdevsim netdevsim7 netdevsim0: renamed from eth9 [ 161.529054][ T8271] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 161.529470][ T8271] netdevsim netdevsim7 netdevsim1: renamed from eth10 [ 161.552795][ T8271] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 161.567579][ T8271] netdevsim netdevsim7 netdevsim2: renamed from eth11 [ 161.574796][ T8271] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 161.594390][ T8271] netdevsim netdevsim7 netdevsim3: renamed from eth12 [ 161.614914][ T8271] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 161.741663][ T8569] fuse: Bad value for 'fd' [ 161.889560][ T8555] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 162.105087][ T8271] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.145624][ T8583] netlink: 52 bytes leftover after parsing attributes in process `syz.1.904'. [ 162.177087][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.177156][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.219087][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.219139][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.697405][ T8596] 9p: Bad value for 'rfdno' [ 164.120715][ T8624] FAULT_INJECTION: forcing a failure. [ 164.120715][ T8624] name fail_futex, interval 1, probability 0, space 0, times 0 [ 164.120739][ T8624] CPU: 0 UID: 0 PID: 8624 Comm: syz.1.918 Not tainted syzkaller #0 PREEMPT(full) [ 164.120752][ T8624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 164.120759][ T8624] Call Trace: [ 164.120763][ T8624] [ 164.120768][ T8624] dump_stack_lvl+0x100/0x190 [ 164.120788][ T8624] should_fail_ex.cold+0x5/0xa [ 164.120804][ T8624] get_futex_key+0x1d0/0x14f0 [ 164.120823][ T8624] ? __pfx_get_futex_key+0x10/0x10 [ 164.120840][ T8624] ? wakeup_preempt_fair+0x5c3/0xdc0 [ 164.120859][ T8624] futex_wait_setup+0x91/0x540 [ 164.120875][ T8624] __futex_wait+0x19f/0x300 [ 164.120888][ T8624] ? __pfx___futex_wait+0x10/0x10 [ 164.120898][ T8624] ? __pfx_try_to_wake_up+0x10/0x10 [ 164.120911][ T8624] ? futex_hash+0x311/0x400 [ 164.120928][ T8624] ? __pfx_futex_wake_mark+0x10/0x10 [ 164.120943][ T8624] ? find_held_lock+0x2b/0x80 [ 164.120960][ T8624] ? futex_wake+0x4ea/0x5e0 [ 164.120975][ T8624] futex_wait+0xe6/0x370 [ 164.120986][ T8624] ? __pfx_futex_wait+0x10/0x10 [ 164.121001][ T8624] ? rcu_read_lock_any_held+0x6a/0x90 [ 164.121012][ T8624] ? find_held_lock+0x2b/0x80 [ 164.121027][ T8624] ? ksys_write+0x190/0x250 [ 164.121049][ T8624] ? ksys_write+0x190/0x250 [ 164.121065][ T8624] do_futex+0x265/0x440 [ 164.121082][ T8624] ? __pfx_do_futex+0x10/0x10 [ 164.121101][ T8624] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 164.121122][ T8624] __x64_sys_futex+0x34f/0x4d0 [ 164.121141][ T8624] ? fput+0x7c/0x100 [ 164.121158][ T8624] ? __pfx___x64_sys_futex+0x10/0x10 [ 164.121174][ T8624] ? ksys_write+0x1ac/0x250 [ 164.121187][ T8624] ? __pfx_ksys_write+0x10/0x10 [ 164.121204][ T8624] do_syscall_64+0x123/0x790 [ 164.121221][ T8624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.121232][ T8624] RIP: 0033:0x7f4053b9e559 [ 164.121242][ T8624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.121252][ T8624] RSP: 002b:00007f4054a970e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 164.121264][ T8624] RAX: ffffffffffffffda RBX: 00007f4053e25fa8 RCX: 00007f4053b9e559 [ 164.121271][ T8624] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4053e25fa8 [ 164.121277][ T8624] RBP: 00007f4053e25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 164.121284][ T8624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.121290][ T8624] R13: 00007f4053e26038 R14: 00007ffefb276710 R15: 00007ffefb2767f8 [ 164.121304][ T8624] [ 164.286735][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 164.286747][ T30] audit: type=1400 audit(1792156813.165:425): avc: denied { name_bind } for pid=8626 comm="syz.0.919" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 164.637790][ T8638] 9p: Bad value for 'rfdno' [ 164.783711][ T8271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.856959][ T49] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 164.986383][ T49] usb 7-1: device descriptor read/64, error -71 [ 165.141964][ T8656] binder: 8655:8656 ioctl c0306201 200000000300 returned -14 [ 165.237194][ T49] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 165.368038][ T49] usb 7-1: device descriptor read/64, error -71 [ 165.476936][ T49] usb usb7-port1: attempt power cycle [ 166.335265][ T8271] veth0_vlan: entered promiscuous mode [ 166.363825][ T8271] veth1_vlan: entered promiscuous mode [ 166.521760][ T8676] 9p: Bad value for 'rfdno' [ 166.535911][ T49] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 166.556679][ T49] usb 7-1: device descriptor read/8, error -71 [ 166.557415][ T8271] veth0_macvtap: entered promiscuous mode [ 166.603605][ T8271] veth1_macvtap: entered promiscuous mode [ 166.710295][ T8271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.745576][ T8271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.796448][ T49] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 166.826349][ T49] usb 7-1: device descriptor read/8, error -71 [ 167.806828][ T49] usb usb7-port1: unable to enumerate USB device [ 168.638355][ T1141] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.710680][ T8688] serio: Serial port ptm0 [ 168.732367][ T7843] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.732717][ T7843] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.732737][ T7843] netdevsim netdevsim3 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.732755][ T7843] netdevsim netdevsim3 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.732771][ T7843] netdevsim netdevsim3 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.732789][ T7843] netdevsim netdevsim3 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.732806][ T7843] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.732823][ T7843] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.732841][ T7843] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.732858][ T7843] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.732876][ T7843] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.929974][ T5263] 8021q: adding VLAN 0 to HW filter on device eth8 [ 168.981229][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.981244][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.113825][ T6738] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.113840][ T6738] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.877960][ T30] audit: type=1400 audit(1792156818.715:426): avc: denied { read } for pid=8700 comm="syz.5.944" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 169.877993][ T30] audit: type=1400 audit(1792156818.715:427): avc: denied { open } for pid=8700 comm="syz.5.944" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 170.087069][ T30] audit: type=1400 audit(1792156818.965:428): avc: denied { ioctl } for pid=8707 comm="syz.7.810" path="uts:[4026532821]" dev="nsfs" ino=4026532821 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 171.275137][ T8719] 9p: Bad value for 'rfdno' [ 171.729634][ T8740] serio: Serial port ptm0 [ 171.772485][ T8741] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 171.784561][ T49] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 171.830146][ T30] audit: type=1400 audit(1792156820.705:429): avc: denied { write } for pid=8722 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 171.947148][ T49] usb 7-1: Using ep0 maxpacket: 32 [ 171.947560][ T49] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 171.955290][ T49] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.955311][ T49] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.955331][ T49] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.012169][ T49] usb 7-1: config 0 descriptor?? [ 172.074315][ T30] audit: type=1400 audit(1792156820.945:430): avc: denied { write } for pid=8748 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 172.202730][ T8753] binder: 8752:8753 ioctl 4018620d 0 returned -22 [ 172.255466][ T8755] binder: 8752:8755 ioctl c0306201 0 returned -14 [ 172.519305][ T30] audit: type=1400 audit(1792156821.395:431): avc: denied { audit_read } for pid=8758 comm="syz.7.958" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 172.666276][ T49] savu 0003:1E7D:2D5A.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0 [ 172.943750][ T49] usb 7-1: USB disconnect, device number 6 [ 172.974639][ T8771] 9p: Bad value for 'rfdno' [ 173.159072][ T30] audit: type=1400 audit(1792156822.035:432): avc: denied { write } for pid=8756 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 173.235014][ T8775] fuse: Bad value for 'fd' [ 173.377690][ T30] audit: type=1400 audit(1792156822.255:433): avc: denied { write } for pid=8779 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 173.867016][ T8794] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 173.867042][ T8794] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 173.867065][ T8794] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 173.870940][ T8794] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 175.228430][ T8807] netlink: 'syz.7.969': attribute type 16 has an invalid length. [ 175.228448][ T8807] netlink: 'syz.7.969': attribute type 17 has an invalid length. [ 175.276428][ T30] audit: type=1400 audit(1792156824.155:434): avc: denied { shutdown } for pid=8800 comm="syz.1.968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 175.323595][ T8807] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 175.323758][ T8801] rxe_eth0 speed is unknown, defaulting to 1000 [ 175.623655][ T8820] 9p: Bad value for 'rfdno' [ 175.851038][ T30] audit: type=1400 audit(1792156824.725:435): avc: denied { write } for pid=8798 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.900684][ T8833] netlink: 52 bytes leftover after parsing attributes in process `syz.6.975'. [ 175.900699][ T8833] netlink: 40 bytes leftover after parsing attributes in process `syz.6.975'. [ 176.962167][ T30] audit: type=1400 audit(1792156825.835:436): avc: denied { write } for pid=8840 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 177.484778][ T30] audit: type=1400 audit(1792156826.355:437): avc: denied { bind } for pid=8865 comm="syz.5.987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 177.484813][ T30] audit: type=1400 audit(1792156826.355:438): avc: denied { listen } for pid=8865 comm="syz.5.987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 177.484833][ T30] audit: type=1400 audit(1792156826.355:439): avc: denied { accept } for pid=8865 comm="syz.5.987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 178.300030][ T8877] Cannot find add_set index 0 as target [ 178.463016][ T8885] netlink: 20 bytes leftover after parsing attributes in process `syz.7.989'. [ 178.855016][ T30] audit: type=1400 audit(1792156827.725:440): avc: denied { write } for pid=8864 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 179.088984][ T30] audit: type=1400 audit(1792156827.965:441): avc: denied { write } for pid=8918 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 179.196039][ T8921] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1005'. [ 179.196057][ T8921] netlink: 43 bytes leftover after parsing attributes in process `syz.7.1005'. [ 179.196066][ T8921] netlink: 'syz.7.1005': attribute type 6 has an invalid length. [ 179.196073][ T8921] netlink: 'syz.7.1005': attribute type 5 has an invalid length. [ 179.196079][ T8921] netlink: 43 bytes leftover after parsing attributes in process `syz.7.1005'. [ 179.395279][ T8921] fuse: Bad value for 'fd' [ 182.541982][ T8935] Cannot find add_set index 0 as target [ 182.590608][ T30] audit: type=1800 audit(1792156831.465:442): pid=8940 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.1011" name=08 dev="sda1" ino=2054 res=0 errno=0 [ 182.662905][ T8945] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1010'. [ 182.927535][ T8957] syzkaller0: entered promiscuous mode [ 182.927550][ T8957] syzkaller0: entered allmulticast mode [ 182.929401][ T8961] binder: 8956:8961 ioctl c0306201 0 returned -14 [ 183.032490][ T8969] ip_tables: iptables: counters copy to user failed while replacing table [ 183.164253][ T8975] 9pnet_fd: Insufficient options for proto=fd [ 183.214877][ T30] audit: type=1400 audit(1792156832.085:443): avc: denied { write } for pid=8931 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.398496][ T8988] FAULT_INJECTION: forcing a failure. [ 183.398496][ T8988] name failslab, interval 1, probability 0, space 0, times 0 [ 183.398520][ T8988] CPU: 0 UID: 0 PID: 8988 Comm: syz.1.1028 Not tainted syzkaller #0 PREEMPT(full) [ 183.398537][ T8988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 183.398544][ T8988] Call Trace: [ 183.398549][ T8988] [ 183.398554][ T8988] dump_stack_lvl+0x100/0x190 [ 183.398577][ T8988] should_fail_ex.cold+0x5/0xa [ 183.398593][ T8988] should_failslab+0xc2/0x120 [ 183.398612][ T8988] kmem_cache_alloc_noprof+0x92/0x6a0 [ 183.398629][ T8988] ? __kernfs_new_node+0xd2/0xa10 [ 183.398645][ T8988] __kernfs_new_node+0xd2/0xa10 [ 183.398660][ T8988] ? __pfx___kernfs_new_node+0x10/0x10 [ 183.398674][ T8988] ? lock_acquire+0x1d1/0x380 [ 183.398688][ T8988] ? kernfs_root+0x23/0x2a0 [ 183.398699][ T8988] ? find_held_lock+0x2b/0x80 [ 183.398715][ T8988] ? kernfs_root+0xee/0x2a0 [ 183.398725][ T8988] ? kernfs_root+0xee/0x2a0 [ 183.398740][ T8988] kernfs_new_node+0x117/0x150 [ 183.398755][ T8988] __kernfs_create_file+0x53/0x350 [ 183.398772][ T8988] sysfs_add_file_mode_ns+0x207/0x3c0 [ 183.398794][ T8988] internal_create_group+0x593/0xfb0 [ 183.398809][ T8988] ? kobject_init_and_add+0x129/0x180 [ 183.398823][ T8988] ? __pfx_internal_create_group+0x10/0x10 [ 183.398834][ T8988] ? __pfx_kobject_init_and_add+0x10/0x10 [ 183.398846][ T8988] ? do_syscall_64+0x123/0x790 [ 183.398866][ T8988] internal_create_groups+0x9d/0x150 [ 183.398880][ T8988] netdev_queue_update_kobjects+0x115/0x6f0 [ 183.398900][ T8988] netif_set_real_num_tx_queues+0x1eb/0xa40 [ 183.398919][ T8988] tun_attach.isra.0+0x716/0x1870 [ 183.398939][ T8988] ? tun_get+0x191/0x370 [ 183.398959][ T8988] __tun_chr_ioctl+0x1313/0x4880 [ 183.398974][ T8988] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 183.398988][ T8988] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 183.399008][ T8988] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 183.399024][ T8988] ? __fget_files+0x34/0x3d0 [ 183.399046][ T8988] ? selinux_file_ioctl+0x13b/0x290 [ 183.399061][ T8988] ? selinux_file_ioctl+0xb6/0x290 [ 183.399077][ T8988] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 183.399095][ T8988] __x64_sys_ioctl+0x18e/0x210 [ 183.399109][ T8988] do_syscall_64+0x123/0x790 [ 183.399126][ T8988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.399138][ T8988] RIP: 0033:0x7f4053b9e559 [ 183.399148][ T8988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.399158][ T8988] RSP: 002b:00007f4054a97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 183.399169][ T8988] RAX: ffffffffffffffda RBX: 00007f4053e25fa0 RCX: 00007f4053b9e559 [ 183.399176][ T8988] RDX: 0000200000000180 RSI: 00000000400454ca RDI: 0000000000000005 [ 183.399183][ T8988] RBP: 00007f4053c358b0 R08: 0000000000000000 R09: 0000000000000000 [ 183.399189][ T8988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.399196][ T8988] R13: 00007f4053e26038 R14: 00007f4053e25fa0 R15: 00007ffefb2767f8 [ 183.399211][ T8988] [ 183.785142][ T30] audit: type=1400 audit(1792156832.655:444): avc: denied { write } for pid=8990 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.886333][ T8995] binder: BINDER_SET_CONTEXT_MGR already set [ 183.886343][ T8995] binder: 8993:8995 ioctl 4018620d 200000000100 returned -16 [ 183.930307][ T8995] binder: 8993:8995 ioctl c0306201 0 returned -14 [ 183.944779][ T8995] binder: BINDER_SET_CONTEXT_MGR already set [ 183.944791][ T8995] binder: 8993:8995 ioctl 4018620d 200000004a80 returned -16 [ 184.032713][ T9001] ip_tables: iptables: counters copy to user failed while replacing table [ 184.483558][ T9026] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1040'. [ 184.510053][ T9026] geneve2: entered promiscuous mode [ 184.707681][ T9040] ip_tables: iptables: counters copy to user failed while replacing table [ 184.828346][ T30] audit: type=1400 audit(1792156833.705:445): avc: denied { write } for pid=9007 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 184.930910][ T30] audit: type=1326 audit(1792156833.805:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9053 comm="syz.1.1048" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4053b9e559 code=0x7ffc0000 [ 184.931511][ T30] audit: type=1326 audit(1792156833.805:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9053 comm="syz.1.1048" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4053b9e559 code=0x7ffc0000 [ 184.931648][ T30] audit: type=1326 audit(1792156833.805:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9053 comm="syz.1.1048" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f4053b9e559 code=0x7ffc0000 [ 184.931762][ T30] audit: type=1326 audit(1792156833.805:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9053 comm="syz.1.1048" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4053b9e559 code=0x7ffc0000 [ 184.931910][ T30] audit: type=1326 audit(1792156833.805:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9053 comm="syz.1.1048" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4053b9e559 code=0x7ffc0000 [ 184.932135][ T30] audit: type=1326 audit(1792156833.805:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9053 comm="syz.1.1048" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4053b9e559 code=0x7ffc0000 [ 185.571717][ T9081] fuse: Bad value for 'fd' [ 186.000397][ T5609] Bluetooth: hci1: command 0x0406 tx timeout [ 186.000446][ T5609] Bluetooth: hci4: command 0x0406 tx timeout [ 186.450668][ T9115] tipc: Started in network mode [ 186.450684][ T9115] tipc: Node identity 4, cluster identity 4711 [ 186.450691][ T9115] tipc: Node number set to 4 [ 186.768071][ T65] tipc: Subscription rejected, illegal request [ 186.788712][ T9128] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1068'. [ 188.159554][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 188.159566][ T30] audit: type=1400 audit(1792156837.035:457): avc: denied { write } for pid=9142 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 188.421345][ T5613] Bluetooth: hci1: unexpected event for opcode 0x0c26 [ 188.447435][ T30] audit: type=1400 audit(1792156837.325:458): avc: denied { write } for pid=9175 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 188.811812][ T30] audit: type=1400 audit(1792156837.685:459): avc: denied { create } for pid=9188 comm="syz.0.1088" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 188.839526][ T30] audit: type=1400 audit(1792156837.715:460): avc: denied { read } for pid=9188 comm="syz.0.1088" name="file0" dev="tmpfs" ino=1539 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 188.839555][ T30] audit: type=1400 audit(1792156837.715:461): avc: denied { open } for pid=9188 comm="syz.0.1088" path="/280/file0" dev="tmpfs" ino=1539 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 189.724081][ T9219] netlink: 'syz.6.1096': attribute type 3 has an invalid length. [ 190.148432][ T30] audit: type=1400 audit(1792156839.025:462): avc: denied { write } for pid=9194 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 190.440899][ T9242] binder: 9241:9242 ioctl c0306201 0 returned -14 [ 190.460272][ T9242] binder: BINDER_SET_CONTEXT_MGR already set [ 190.460281][ T9242] binder: 9241:9242 ioctl 4018620d 2000000007c0 returned -16 [ 190.595631][ T30] audit: type=1400 audit(1792156839.465:463): avc: denied { write } for pid=9243 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 190.712536][ T9250] fuse: Bad value for 'fd' [ 190.746540][ T5786] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 190.908097][ T5786] usb 2-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00 [ 190.913515][ T5786] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 190.913536][ T5786] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 190.952133][ T5786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.952152][ T5786] usb 2-1: Product: syz [ 190.952160][ T5786] usb 2-1: Manufacturer: syz [ 190.952168][ T5786] usb 2-1: SerialNumber: syz [ 190.996844][ T9254] tipc: Started in network mode [ 190.996861][ T9254] tipc: Node identity 4, cluster identity 4711 [ 190.996869][ T9254] tipc: Node number set to 4 [ 191.093768][ T9259] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1107'. [ 191.257469][ T13] tipc: Subscription rejected, illegal request [ 191.294639][ T5786] kaweth 2-1:1.0: Firmware present in device. [ 191.302316][ T5786] kaweth 2-1:1.0: Error reading configuration (-71), no net device created [ 191.302416][ T5786] kaweth 2-1:1.0: probe with driver kaweth failed with error -5 [ 191.508029][ T5786] usb 2-1: USB disconnect, device number 2 [ 191.651719][ T30] audit: type=1400 audit(1792156840.525:464): avc: denied { create } for pid=9276 comm="syz.6.1110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 191.655498][ T30] audit: type=1400 audit(1792156840.525:465): avc: denied { bind } for pid=9276 comm="syz.6.1110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 191.712650][ T30] audit: type=1400 audit(1792156840.585:466): avc: denied { write } for pid=9276 comm="syz.6.1110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 191.764973][ T9279] rdma_op ffff88802cf89238 conn xmit_rdma 0000000000000000 [ 192.034274][ T9287] Cannot find map_set index 2 as target [ 192.173432][ T9294] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1113'. [ 193.098371][ T9326] ip_tables: iptables: counters copy to user failed while replacing table [ 193.328065][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 193.328080][ T30] audit: type=1400 audit(1792156842.205:468): avc: denied { write } for pid=9329 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 193.418714][ T9334] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1126'. [ 194.177577][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.177611][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.209162][ T30] audit: type=1400 audit(1792156843.085:469): avc: denied { create } for pid=9357 comm="syz.0.1134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 194.275303][ T30] audit: type=1400 audit(1792156843.145:470): avc: denied { cmd } for pid=9357 comm="syz.0.1134" path="socket:[23600]" dev="sockfs" ino=23600 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 194.307734][ T30] audit: type=1400 audit(1792156843.185:471): avc: denied { setopt } for pid=9357 comm="syz.0.1134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 194.609264][ T9365] ip_tables: iptables: counters copy to user failed while replacing table [ 194.612949][ T30] audit: type=1400 audit(1792156843.485:472): avc: denied { read write } for pid=9366 comm="syz.6.1137" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 194.612980][ T30] audit: type=1400 audit(1792156843.485:473): avc: denied { open } for pid=9366 comm="syz.6.1137" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 194.685206][ T30] audit: type=1400 audit(1792156843.555:474): avc: denied { setattr } for pid=9366 comm="syz.6.1137" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 194.948490][ T9368] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 195.695890][ T30] audit: type=1400 audit(1792156844.565:475): avc: denied { write } for pid=9354 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 196.138728][ T30] audit: type=1400 audit(1792156845.015:476): avc: denied { write } for pid=9398 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 196.263834][ T9408] ip_tables: iptables: counters copy to user failed while replacing table [ 196.574073][ T9412] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1150'. [ 196.934764][ T30] audit: type=1400 audit(1792156845.805:477): avc: denied { watch } for pid=9421 comm="syz.0.1152" path=2F6D656D66643A2D42D54E49C56A9A70708AF00884A26D202864656C6574656429 dev="tmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 197.465064][ T9435] Cannot find map_set index 2 as target [ 197.545990][ T9443] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1157'. [ 198.510675][ T9469] siw: device registration error -23 [ 198.577470][ T9455] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 198.621195][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 198.621208][ T30] audit: type=1400 audit(1792156847.495:493): avc: denied { write } for pid=9467 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.113403][ T30] audit: type=1400 audit(1792156848.985:494): avc: denied { write } for pid=9483 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.304271][ T9518] 9p: Could not find request transport: fd0x0000000000000003 [ 200.444682][ T9529] sctp: [Deprecated]: syz.5.1183 (pid 9529) Use of int in max_burst socket option. [ 200.444682][ T9529] Use struct sctp_assoc_value instead [ 200.516610][ T30] audit: type=1400 audit(1792156849.395:495): avc: denied { write } for pid=9526 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.688158][ T9546] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1190'. [ 200.852316][ T9541] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 201.742298][ T30] audit: type=1400 audit(1792156850.615:496): avc: denied { write } for pid=9555 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.865192][ T9595] tipc: Started in network mode [ 201.865207][ T9595] tipc: Node identity 4, cluster identity 4711 [ 201.865214][ T9595] tipc: Node number set to 4 [ 201.972656][ T50] tipc: Subscription rejected, illegal request [ 202.027170][ T9599] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 202.194165][ T30] audit: type=1400 audit(1792156851.065:497): avc: denied { write } for pid=9603 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 202.858797][ T30] audit: type=1400 audit(1792156851.735:498): avc: denied { listen } for pid=9579 comm="syz.6.1200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 202.958204][ T5786] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 203.106871][ T5786] usb 2-1: Using ep0 maxpacket: 32 [ 203.109486][ T5786] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 203.113089][ T5786] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.113110][ T5786] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.113130][ T5786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.179002][ T5786] usb 2-1: config 0 descriptor?? [ 203.837283][ T5786] savu 0003:1E7D:2D5A.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 203.963426][ T49] usb 2-1: USB disconnect, device number 3 [ 204.219379][ T30] audit: type=1400 audit(1792156853.095:499): avc: denied { write } for pid=9629 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 204.329532][ T9655] fido_id[9655]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 204.588871][ T30] audit: type=1400 audit(1792156853.465:500): avc: denied { write } for pid=9662 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 204.725267][ T9667] 9pnet_fd: Insufficient options for proto=fd [ 205.214569][ T9684] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 205.230933][ T9687] fuse: fd is not a fuse device [ 205.938234][ T30] audit: type=1400 audit(1792156854.815:501): avc: denied { write } for pid=9680 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.361517][ T30] audit: type=1400 audit(1792156855.235:502): avc: denied { write } for pid=9719 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.467657][ T5786] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 206.618773][ T5786] usb 2-1: Using ep0 maxpacket: 32 [ 206.622010][ T5786] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 206.631568][ T5786] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.631589][ T5786] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.631608][ T5786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.709125][ T5786] usb 2-1: config 0 descriptor?? [ 207.182620][ T5786] savu 0003:1E7D:2D5A.0003: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 207.430774][ T5786] usb 2-1: USB disconnect, device number 4 [ 207.952079][ T30] audit: type=1400 audit(1792156856.825:503): avc: denied { write } for pid=9727 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 208.153901][ T9759] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=9759 comm=syz.0.1242 [ 208.265463][ T30] audit: type=1400 audit(1792156857.135:504): avc: denied { write } for pid=9758 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.621088][ T30] audit: type=1400 audit(1792156858.495:505): avc: denied { write } for pid=9770 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.974698][ T30] audit: type=1400 audit(1792156858.845:506): avc: denied { write } for pid=9807 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.024842][ T9811] sctp: [Deprecated]: syz.7.1258 (pid 9811) Use of int in max_burst socket option. [ 210.024842][ T9811] Use struct sctp_assoc_value instead [ 210.207491][ T30] audit: type=1400 audit(1792156859.085:507): avc: denied { node_bind } for pid=9813 comm="syz.7.1259" saddr=::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 210.564646][ T30] audit: type=1400 audit(1792156859.435:508): avc: denied { lock } for pid=9821 comm="syz.0.1261" path="socket:[25297]" dev="sockfs" ino=25297 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 211.440352][ T30] audit: type=1400 audit(1792156860.315:509): avc: denied { write } for pid=9819 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.598285][ T5607] Bluetooth: hci0: command 0x0406 tx timeout [ 211.774018][ T30] audit: type=1400 audit(1792156860.645:510): avc: denied { write } for pid=9863 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.667943][ T30] audit: type=1326 audit(1792156861.545:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9893 comm="syz.7.1280" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6f36f9e559 code=0x0 [ 213.221816][ T9906] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 213.268697][ T5613] Bluetooth: hci0: unexpected event for opcode 0x0c26 [ 213.434267][ T30] audit: type=1400 audit(1792156862.305:512): avc: denied { write } for pid=9876 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 213.779227][ T30] audit: type=1400 audit(1792156862.655:513): avc: denied { write } for pid=9914 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.460724][ T9936] siw: device registration error -23 [ 214.637381][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 215.349049][ T9958] Cannot find map_set index 2 as target [ 215.423968][ T9964] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1300'. [ 215.538996][ T30] audit: type=1326 audit(1792156864.415:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9967 comm="syz.0.1302" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5b3f9e559 code=0x7ffc0000 [ 215.539029][ T30] audit: type=1326 audit(1792156864.415:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9967 comm="syz.0.1302" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5b3f9e559 code=0x7ffc0000 [ 215.539431][ T30] audit: type=1326 audit(1792156864.415:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9967 comm="syz.0.1302" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5b3f9e559 code=0x7ffc0000 [ 215.539456][ T30] audit: type=1326 audit(1792156864.415:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9967 comm="syz.0.1302" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5b3f9e559 code=0x7ffc0000 [ 215.543482][ T30] audit: type=1326 audit(1792156864.415:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9967 comm="syz.0.1302" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fd5b3f9e559 code=0x7ffc0000 [ 215.543513][ T30] audit: type=1326 audit(1792156864.415:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9967 comm="syz.0.1302" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5b3f9e559 code=0x7ffc0000 [ 215.543534][ T30] audit: type=1326 audit(1792156864.415:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9967 comm="syz.0.1302" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5b3f9e559 code=0x7ffc0000 [ 215.543814][ T30] audit: type=1326 audit(1792156864.415:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9967 comm="syz.0.1302" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5b3f9e559 code=0x7ffc0000 [ 215.543837][ T30] audit: type=1326 audit(1792156864.415:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9967 comm="syz.0.1302" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5b3f9e559 code=0x7ffc0000 [ 215.545723][ T30] audit: type=1326 audit(1792156864.415:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9967 comm="syz.0.1302" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fd5b3f9e559 code=0x7ffc0000 [ 216.455655][ T13] tipc: Subscription rejected, illegal request [ 217.548037][ T5607] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 217.552055][ T5607] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 217.552737][ T5607] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 217.554280][ T5607] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 217.587686][ T5607] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 218.115250][T10012] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 219.365407][T10054] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 219.473980][T10000] rxe_eth0 speed is unknown, defaulting to 1000 [ 219.677528][ T5607] Bluetooth: hci5: command tx timeout [ 220.905686][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 220.905702][ T30] audit: type=1400 audit(1792156869.775:540): avc: denied { listen } for pid=10100 comm="syz.0.1334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_socket permissive=1 [ 221.242319][T10000] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.243501][T10000] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.243687][T10000] bridge_slave_0: entered allmulticast mode [ 221.273335][T10000] bridge_slave_0: entered promiscuous mode [ 221.289356][T10000] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.289450][T10000] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.289546][T10000] bridge_slave_1: entered allmulticast mode [ 221.294795][T10000] bridge_slave_1: entered promiscuous mode [ 221.424350][T10000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.450526][T10000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.598753][T10000] team0: Port device team_slave_0 added [ 221.615366][T10000] team0: Port device team_slave_1 added [ 221.727036][T10000] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.727049][T10000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.727062][T10000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.769621][ T5607] Bluetooth: hci5: command tx timeout [ 221.788147][T10000] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.788157][T10000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.788171][T10000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.013835][T10000] hsr_slave_0: entered promiscuous mode [ 222.031138][T10000] hsr_slave_1: entered promiscuous mode [ 222.031476][T10000] debugfs: 'hsr0' already exists in 'hsr' [ 222.031487][T10000] Cannot create hsr debugfs directory [ 222.160654][T10137] syz.5.1345 uses obsolete (PF_INET,SOCK_PACKET) [ 222.195280][T10137] netlink: 'syz.5.1345': attribute type 8 has an invalid length. [ 222.195752][ T30] audit: type=1400 audit(1792156871.065:541): avc: denied { setopt } for pid=10136 comm="syz.5.1345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 222.330962][ T5613] Bluetooth: hci2: unexpected Set CIG Parameters response data [ 222.345306][ T30] audit: type=1400 audit(1792156871.215:542): avc: denied { write } for pid=10099 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.664803][ T30] audit: type=1400 audit(1792156871.535:543): avc: denied { write } for pid=10148 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.992604][T10158] FAULT_INJECTION: forcing a failure. [ 222.992604][T10158] name fail_futex, interval 1, probability 0, space 0, times 0 [ 222.992625][T10158] CPU: 0 UID: 0 PID: 10158 Comm: syz.5.1353 Not tainted syzkaller #0 PREEMPT(full) [ 222.992640][T10158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 222.992647][T10158] Call Trace: [ 222.992651][T10158] [ 222.992656][T10158] dump_stack_lvl+0x100/0x190 [ 222.992677][T10158] should_fail_ex.cold+0x5/0xa [ 222.992697][T10158] get_futex_key+0x1d0/0x14f0 [ 222.992716][T10158] ? __pfx_get_futex_key+0x10/0x10 [ 222.992733][T10158] ? wakeup_preempt_fair+0x5c3/0xdc0 [ 222.992752][T10158] futex_wait_setup+0x91/0x540 [ 222.992768][T10158] __futex_wait+0x19f/0x300 [ 222.992781][T10158] ? __pfx___futex_wait+0x10/0x10 [ 222.992792][T10158] ? __pfx_try_to_wake_up+0x10/0x10 [ 222.992804][T10158] ? futex_hash+0x311/0x400 [ 222.992820][T10158] ? __pfx_futex_wake_mark+0x10/0x10 [ 222.992834][T10158] ? find_held_lock+0x2b/0x80 [ 222.992850][T10158] ? futex_wake+0x4ea/0x5e0 [ 222.992865][T10158] futex_wait+0xe6/0x370 [ 222.992877][T10158] ? __pfx_futex_wait+0x10/0x10 [ 222.992892][T10158] ? rcu_read_lock_any_held+0x6a/0x90 [ 222.992917][T10158] ? find_held_lock+0x2b/0x80 [ 222.992934][T10158] ? ksys_write+0x190/0x250 [ 222.992949][T10158] ? ksys_write+0x190/0x250 [ 222.992965][T10158] do_futex+0x265/0x440 [ 222.992982][T10158] ? __pfx_do_futex+0x10/0x10 [ 222.993001][T10158] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 222.993021][T10158] __x64_sys_futex+0x34f/0x4d0 [ 222.993039][T10158] ? fput+0x7c/0x100 [ 222.993075][T10158] ? __pfx___x64_sys_futex+0x10/0x10 [ 222.993093][T10158] ? ksys_write+0x1ac/0x250 [ 222.993106][T10158] ? __pfx_ksys_write+0x10/0x10 [ 222.993125][T10158] do_syscall_64+0x123/0x790 [ 222.993143][T10158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.993156][T10158] RIP: 0033:0x7f41fbf9e559 [ 222.993165][T10158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.993176][T10158] RSP: 002b:00007f41fcd8c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 222.993187][T10158] RAX: ffffffffffffffda RBX: 00007f41fc225fa8 RCX: 00007f41fbf9e559 [ 222.993194][T10158] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f41fc225fa8 [ 222.993201][T10158] RBP: 00007f41fc225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 222.993207][T10158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 222.993213][T10158] R13: 00007f41fc226038 R14: 00007fff34b83ac0 R15: 00007fff34b83ba8 [ 222.993228][T10158] [ 223.697683][ T30] audit: type=1326 audit(1792156872.575:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10174 comm="syz.0.1358" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5b3f9e559 code=0x7ffc0000 [ 223.699421][ T30] audit: type=1326 audit(1792156872.575:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10174 comm="syz.0.1358" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5b3f9e559 code=0x7ffc0000 [ 223.703853][ T30] audit: type=1326 audit(1792156872.575:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10174 comm="syz.0.1358" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5b3f9e559 code=0x7ffc0000 [ 223.761652][ T30] audit: type=1326 audit(1792156872.645:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10174 comm="syz.0.1358" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5b3f9e559 code=0x7ffc0000 [ 223.827317][ T30] audit: type=1326 audit(1792156872.705:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10174 comm="syz.0.1358" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fd5b3f9e559 code=0x7ffc0000 [ 223.827349][ T30] audit: type=1326 audit(1792156872.705:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10174 comm="syz.0.1358" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5b3f9e559 code=0x7ffc0000 [ 223.856668][ T5613] Bluetooth: hci5: command tx timeout [ 224.237551][T10183] syz.5.1359 (10183) used greatest stack depth: 20088 bytes left [ 224.237657][ T5613] Bluetooth: hci0: command 0x0406 tx timeout [ 224.298985][T10000] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 224.323109][T10000] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 224.339957][T10000] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 224.376286][T10000] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 224.378243][T10000] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 224.415257][T10000] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 224.415693][T10000] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 224.467772][T10186] fuse: fd is not a fuse device [ 224.493240][T10000] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 224.857973][T10000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.911192][T10000] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.949914][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.949984][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.980476][ T1116] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.980523][ T1116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.916187][ T5607] Bluetooth: hci5: command tx timeout [ 226.026450][T10234] ptp ptp0: new virtual clock ptp1 [ 226.026467][T10234] ptp ptp0: guarantee physical clock free running [ 226.026521][T10239] ptp ptp0: delete virtual clock ptp1 [ 226.185148][T10239] ptp ptp0: only physical clock in use now [ 226.476221][ T5607] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 226.476262][ T5607] Bluetooth: hci2: Injecting HCI hardware error event [ 226.477438][ T5607] Bluetooth: hci2: hardware error 0x00 [ 226.817049][T10262] Cannot find map_set index 2 as target [ 226.864045][T10000] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.896985][T10266] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1376'. [ 226.898394][T10266] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1376'. [ 227.151377][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 227.151392][ T30] audit: type=1400 audit(1792156876.025:566): avc: denied { write } for pid=10233 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 227.581612][ T30] audit: type=1400 audit(1792156876.455:567): avc: denied { write } for pid=10285 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 228.313168][ T30] audit: type=1400 audit(1792156877.185:568): avc: denied { read write } for pid=10317 comm="syz.1.1390" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 228.313199][ T30] audit: type=1400 audit(1792156877.185:569): avc: denied { open } for pid=10317 comm="syz.1.1390" path="/279/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 228.367867][T10000] veth0_vlan: entered promiscuous mode [ 228.460054][T10000] veth1_vlan: entered promiscuous mode [ 228.493091][T10303] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 228.518768][ T5800] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 228.605399][T10000] veth0_macvtap: entered promiscuous mode [ 228.630444][T10000] veth1_macvtap: entered promiscuous mode [ 228.666074][ T5800] usb 6-1: Using ep0 maxpacket: 32 [ 228.667631][ T5800] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 228.669583][ T5800] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.669601][ T5800] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.669620][ T5800] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.728203][ T5607] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 228.744015][ T5800] usb 6-1: config 0 descriptor?? [ 228.764551][T10000] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.807077][T10000] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.599808][ T65] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.600003][ T65] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.600100][ T65] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.600416][ T65] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.949869][ T5800] savu 0003:1E7D:2D5A.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 230.013618][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.013633][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.067912][T10337] fuse: Bad value for 'fd' [ 230.159503][ T5800] usb 6-1: USB disconnect, device number 3 [ 230.209554][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.209569][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.260711][ T30] audit: type=1400 audit(1792156879.125:570): avc: denied { write } for pid=10304 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 230.405675][T10338] fido_id[10338]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 230.613595][ T30] audit: type=1400 audit(1792156879.485:571): avc: denied { write } for pid=10344 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 230.942845][T10351] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1398'. [ 231.983765][ T30] audit: type=1400 audit(1792156880.855:572): avc: denied { bind } for pid=10379 comm="syz.1.1405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 232.041927][ T30] audit: type=1400 audit(1792156880.915:573): avc: denied { accept } for pid=10379 comm="syz.1.1405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 232.175043][T10391] FAULT_INJECTION: forcing a failure. [ 232.175043][T10391] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 232.175064][T10391] CPU: 0 UID: 0 PID: 10391 Comm: syz.5.1407 Not tainted syzkaller #0 PREEMPT(full) [ 232.175077][T10391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 232.175084][T10391] Call Trace: [ 232.175088][T10391] [ 232.175094][T10391] dump_stack_lvl+0x100/0x190 [ 232.175117][T10391] should_fail_ex.cold+0x5/0xa [ 232.175134][T10391] _copy_to_user+0x32/0xd0 [ 232.175153][T10391] bpf_verifier_vlog+0x333/0x6d0 [ 232.175168][T10391] __btf_verifier_log+0xc3/0x100 [ 232.175184][T10391] ? __pfx___btf_verifier_log+0x10/0x10 [ 232.175204][T10391] ? bpf_verifier_vlog+0x19d/0x6d0 [ 232.175220][T10391] __btf_verifier_log_type+0x4e4/0x8a0 [ 232.175235][T10391] ? __pfx___btf_verifier_log_type+0x10/0x10 [ 232.175249][T10391] ? __pfx_sort+0x10/0x10 [ 232.175263][T10391] ? __pfx_btf_sec_info_cmp+0x10/0x10 [ 232.175283][T10391] btf_enum64_check_meta+0x603/0x720 [ 232.175301][T10391] btf_check_all_metas+0x3b6/0x9d0 [ 232.175315][T10391] ? btf_parse_str_sec+0x23c/0x3a0 [ 232.175332][T10391] btf_new_fd+0xa90/0x38f0 [ 232.175344][T10391] ? cred_has_capability.isra.0+0x186/0x300 [ 232.175361][T10391] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 232.175385][T10391] ? __pfx_btf_new_fd+0x10/0x10 [ 232.175394][T10391] ? rcu_is_watching+0x13/0xc0 [ 232.175410][T10391] ? cap_capable+0x107/0x430 [ 232.175425][T10391] ? bpf_lsm_capable+0x9/0x10 [ 232.175436][T10391] ? security_capable+0x80/0x260 [ 232.175449][T10391] ? ns_capable+0xd2/0xf0 [ 232.175462][T10391] __sys_bpf+0x13ef/0x4a30 [ 232.175479][T10391] ? __pfx___sys_bpf+0x10/0x10 [ 232.175490][T10391] ? find_held_lock+0x2b/0x80 [ 232.175506][T10391] ? futex_wake+0x4ea/0x5e0 [ 232.175529][T10391] ? lock_acquire+0x1d1/0x380 [ 232.175550][T10391] ? __x64_sys_futex+0x34f/0x4d0 [ 232.175566][T10391] ? __x64_sys_futex+0x358/0x4d0 [ 232.175584][T10391] ? xfd_validate_state+0x129/0x190 [ 232.175598][T10391] ? __x64_sys_bpf+0xce/0x140 [ 232.175610][T10391] __x64_sys_bpf+0xce/0x140 [ 232.175623][T10391] ? do_syscall_64+0xae/0x790 [ 232.175640][T10391] do_syscall_64+0x123/0x790 [ 232.175656][T10391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.175668][T10391] RIP: 0033:0x7f41fbf9e559 [ 232.175678][T10391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.175689][T10391] RSP: 002b:00007f41fcd8c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 232.175700][T10391] RAX: ffffffffffffffda RBX: 00007f41fc225fa0 RCX: 00007f41fbf9e559 [ 232.175708][T10391] RDX: 0000000000000028 RSI: 0000200000000700 RDI: 0000000000000012 [ 232.175715][T10391] RBP: 00007f41fc0358b0 R08: 0000000000000000 R09: 0000000000000000 [ 232.175723][T10391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 232.175731][T10391] R13: 00007f41fc226038 R14: 00007f41fc225fa0 R15: 00007fff34b83ba8 [ 232.175747][T10391] [ 232.589688][ T30] audit: type=1400 audit(1792156881.465:574): avc: denied { write } for pid=10361 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 232.773469][ T30] audit: type=1400 audit(1792156881.645:575): avc: denied { create } for pid=10403 comm="syz.8.1412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 232.809600][T10406] fuse: Bad value for 'fd' [ 232.810302][ T30] audit: type=1400 audit(1792156881.685:576): avc: denied { bind } for pid=10403 comm="syz.8.1412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 232.815139][ T30] audit: type=1400 audit(1792156881.685:577): avc: denied { listen } for pid=10403 comm="syz.8.1412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 232.842615][ T30] audit: type=1400 audit(1792156881.725:578): avc: denied { connect } for pid=10403 comm="syz.8.1412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 232.891884][ T30] audit: type=1400 audit(1792156881.765:579): avc: denied { write } for pid=10403 comm="syz.8.1412" path="socket:[27519]" dev="sockfs" ino=27519 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 232.892481][ T30] audit: type=1400 audit(1792156881.765:580): avc: denied { accept } for pid=10403 comm="syz.8.1412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 232.896078][ T30] audit: type=1400 audit(1792156881.765:581): avc: denied { read } for pid=10403 comm="syz.8.1412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 233.034252][ T30] audit: type=1400 audit(1792156881.905:582): avc: denied { write } for pid=10405 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 233.157526][T10414] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1414'. [ 233.362433][ T1171] tipc: Subscription rejected, illegal request [ 233.767827][T10433] siw: device registration error -23 [ 234.250887][T10432] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 234.869597][ T30] audit: type=1400 audit(1792156883.745:583): avc: denied { write } for pid=10435 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 234.943718][T10459] fuse: Bad value for 'fd' [ 235.140563][T10468] Cannot find map_set index 2 as target [ 235.220516][T10471] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1427'. [ 236.111434][T10479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1430'. [ 236.808118][T10491] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 237.368758][T10510] fuse: Bad value for 'fd' [ 237.867427][T10525] siw: device registration error -23 [ 238.902652][T10539] 9p: Could not find request transport: f [ 239.402260][T10557] Cannot find add_set index 0 as target [ 239.477453][T10562] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1452'. [ 239.611693][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 239.611707][ T30] audit: type=1400 audit(1792156888.485:587): avc: denied { write } for pid=10537 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 239.839608][ T30] audit: type=1400 audit(1792156888.715:588): avc: denied { read write } for pid=10571 comm="syz.1.1456" name="file0" dev="tmpfs" ino=1596 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 239.839646][ T30] audit: type=1400 audit(1792156888.715:589): avc: denied { open } for pid=10571 comm="syz.1.1456" path="/297/file0" dev="tmpfs" ino=1596 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 240.138802][ T30] audit: type=1400 audit(1792156889.015:590): avc: denied { write } for pid=10572 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.235458][T10581] cfg80211: Invalid regulatory domain detected: BB [ 240.469527][ T50] tipc: Subscription rejected, illegal request [ 240.605577][ T5607] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 240.935920][ T30] audit: type=1400 audit(1792156889.805:591): avc: denied { write } for pid=10620 comm="syz.1.1472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 241.030218][ T30] audit: type=1400 audit(1792156889.905:592): avc: denied { write } for pid=10595 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.068772][ T30] audit: type=1400 audit(1792156890.945:593): avc: denied { write } for pid=10639 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.424820][T10649] netlink: 'syz.5.1480': attribute type 13 has an invalid length. [ 242.538978][T10651] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 242.633178][T10647] kvm: pic: single mode not supported [ 242.699358][T10647] kvm: pic: non byte read [ 242.700364][T10647] kvm: pic: level sensitive irq not supported [ 242.701082][T10647] kvm: pic: non byte read [ 242.701966][T10647] kvm: pic: level sensitive irq not supported [ 242.702856][T10647] kvm: pic: non byte read [ 242.703002][T10647] kvm: pic: level sensitive irq not supported [ 242.704077][T10647] kvm: pic: non byte read [ 242.704186][T10647] kvm: pic: level sensitive irq not supported [ 242.705051][T10647] kvm: pic: non byte read [ 242.777251][T10647] kvm: pic: level sensitive irq not supported [ 242.777353][T10647] kvm: pic: non byte read [ 242.777484][T10647] kvm: pic: level sensitive irq not supported [ 242.777518][T10647] kvm: pic: non byte read [ 243.358319][ T30] audit: type=1400 audit(1792156892.235:594): avc: denied { write } for pid=10652 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.413168][ T30] audit: type=1400 audit(1792156892.285:595): avc: denied { create } for pid=10674 comm="syz.8.1489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 243.494966][ T30] audit: type=1400 audit(1792156892.365:596): avc: denied { unmount } for pid=10000 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 244.345948][T10705] siw: device registration error -23 [ 244.806995][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 244.807008][ T30] audit: type=1400 audit(1792156893.675:598): avc: denied { write } for pid=10708 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 246.242690][ T30] audit: type=1400 audit(1792156895.115:599): avc: denied { write } for pid=10741 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 247.183633][ T30] audit: type=1400 audit(1792156896.055:600): avc: denied { sqpoll } for pid=10757 comm="syz.0.1513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 247.509394][T10762] siw: device registration error -23 [ 247.872749][ T30] audit: type=1400 audit(1792156896.745:601): avc: denied { write } for pid=10769 comm="syz.5.1517" name="event2" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 247.872780][ T30] audit: type=1400 audit(1792156896.745:602): avc: denied { open } for pid=10769 comm="syz.5.1517" path="/dev/input/event2" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 247.984494][T10770] netlink: 'syz.5.1517': attribute type 7 has an invalid length. [ 247.984513][T10770] netlink: 'syz.5.1517': attribute type 5 has an invalid length. [ 247.984519][T10770] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1517'. [ 248.219096][ T30] audit: type=1400 audit(1792156897.095:603): avc: denied { name_bind } for pid=10778 comm="syz.7.1519" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 248.273158][ T30] audit: type=1400 audit(1792156897.145:604): avc: denied { write } for pid=10767 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 248.510423][T10787] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1522'. [ 248.802507][T10795] Bluetooth: MGMT ver 1.23 [ 248.803382][ T30] audit: type=1400 audit(1792156897.675:605): avc: denied { write } for pid=10793 comm="syz.8.1509" path="socket:[28372]" dev="sockfs" ino=28372 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 248.837833][T10794] Cannot find map_set index 2 as target [ 248.960909][T10800] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1524'. [ 249.166700][ T30] audit: type=1400 audit(1792156898.045:606): avc: denied { write } for pid=10798 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 249.210329][ T30] audit: type=1400 audit(1792156898.085:607): avc: denied { read } for pid=10803 comm="syz.8.1526" name="event2" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 250.062571][ T5607] Bluetooth: hci5: status 0x02 [ 250.554855][T10848] netlink: 'syz.7.1538': attribute type 4 has an invalid length. [ 250.644317][ T30] audit: type=1400 audit(1792156899.515:608): avc: denied { write } for pid=10825 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 250.899783][T10858] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 250.995537][ T30] audit: type=1400 audit(1792156899.865:609): avc: denied { write } for pid=10862 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 251.321964][T10820] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 252.630368][T10901] binder: 10899:10901 ioctl c0306201 200000000080 returned -14 [ 252.635571][T10901] binder: 10899:10901 ioctl c0306201 2000000003c0 returned -14 [ 252.769753][T10903] netlink: 'syz.0.1550': attribute type 32 has an invalid length. [ 252.891696][ T30] audit: type=1400 audit(1792156901.765:610): avc: denied { write } for pid=10884 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 252.941311][T10914] binder: 10911:10914 ioctl 40046205 0 returned -22 [ 253.428586][ T30] audit: type=1400 audit(1792156902.305:611): avc: denied { write } for pid=10927 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 254.508671][T10986] siw: device registration error -23 [ 254.598181][ T30] audit: type=1400 audit(1792156903.475:612): avc: denied { write } for pid=10956 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 255.049312][ T30] audit: type=1400 audit(1792156903.925:613): avc: denied { write } for pid=11006 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 255.600469][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.600501][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.827298][T11026] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 255.974445][ T30] audit: type=1400 audit(1792156904.845:614): avc: denied { write } for pid=11036 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 256.627596][ T30] audit: type=1400 audit(1792156905.505:615): avc: denied { write } for pid=11064 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 256.990473][ T30] audit: type=1400 audit(1792156905.865:616): avc: denied { setopt } for pid=11082 comm="syz.0.1614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 257.274736][T11096] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1617'. [ 257.463349][ T30] audit: type=1400 audit(1792156906.335:617): avc: denied { write } for pid=11084 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 258.171758][ T30] audit: type=1400 audit(1792156907.045:618): avc: denied { write } for pid=11122 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 258.701824][T11140] FAULT_INJECTION: forcing a failure. [ 258.701824][T11140] name failslab, interval 1, probability 0, space 0, times 0 [ 258.701850][T11140] CPU: 0 UID: 0 PID: 11140 Comm: syz.5.1630 Not tainted syzkaller #0 PREEMPT(full) [ 258.701865][T11140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 258.701873][T11140] Call Trace: [ 258.701879][T11140] [ 258.701884][T11140] dump_stack_lvl+0x100/0x190 [ 258.701910][T11140] should_fail_ex.cold+0x5/0xa [ 258.701927][T11140] should_failslab+0xc2/0x120 [ 258.701946][T11140] __kmalloc_cache_noprof+0x91/0x6d0 [ 258.701959][T11140] ? xfd_validate_state+0x129/0x190 [ 258.701972][T11140] ? do_epoll_create+0x62/0x540 [ 258.701987][T11140] do_epoll_create+0x62/0x540 [ 258.702000][T11140] __x64_sys_epoll_create1+0x30/0x40 [ 258.702013][T11140] do_syscall_64+0x123/0x790 [ 258.702031][T11140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.702042][T11140] RIP: 0033:0x7f41fbf9e559 [ 258.702051][T11140] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.702062][T11140] RSP: 002b:00007f41fcd8c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000123 [ 258.702073][T11140] RAX: ffffffffffffffda RBX: 00007f41fc225fa0 RCX: 00007f41fbf9e559 [ 258.702080][T11140] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 258.702086][T11140] RBP: 00007f41fc0358b0 R08: 0000000000000000 R09: 0000000000000000 [ 258.702093][T11140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.702099][T11140] R13: 00007f41fc226038 R14: 00007f41fc225fa0 R15: 00007fff34b83ba8 [ 258.702114][T11140] [ 259.048839][ T30] audit: type=1400 audit(1792156907.925:619): avc: denied { write } for pid=11134 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 259.303250][ T30] audit: type=1400 audit(1792156908.175:620): avc: denied { write } for pid=11152 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 259.764451][ T30] audit: type=1400 audit(1792156908.635:621): avc: denied { write } for pid=11155 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 259.998212][ T30] audit: type=1400 audit(1792156908.875:622): avc: denied { write } for pid=11164 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 261.593520][T11142] rxe_eth0 speed is unknown, defaulting to 1000 [ 262.118113][ T30] audit: type=1400 audit(1792156910.995:623): avc: denied { write } for pid=11177 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 262.224719][T11200] bridge1: entered allmulticast mode [ 262.610172][ T30] audit: type=1400 audit(1792156911.485:624): avc: denied { write } for pid=11209 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 262.979542][T11224] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1647'. [ 263.407741][T11229] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 263.705772][ T30] audit: type=1400 audit(1792156912.575:625): avc: denied { write } for pid=11227 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 264.196656][ T30] audit: type=1400 audit(1792156913.075:626): avc: denied { write } for pid=11254 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 264.770724][ T30] audit: type=1400 audit(1792156913.645:627): avc: denied { write } for pid=11269 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 264.950775][ T30] audit: type=1400 audit(1792156913.825:628): avc: denied { write } for pid=11280 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 265.372152][T11290] siw: device registration error -23 [ 265.561565][T11296] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1668'. [ 269.052215][ T30] audit: type=1400 audit(1792156917.925:629): avc: denied { write } for pid=11293 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 269.140265][T11314] fuse: Bad value for 'fd' [ 269.278114][T11319] bridge1: entered allmulticast mode [ 269.379206][T11324] FAULT_INJECTION: forcing a failure. [ 269.379206][T11324] name failslab, interval 1, probability 0, space 0, times 0 [ 269.379230][T11324] CPU: 0 UID: 0 PID: 11324 Comm: syz.5.1676 Not tainted syzkaller #0 PREEMPT(full) [ 269.379245][T11324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 269.379253][T11324] Call Trace: [ 269.379257][T11324] [ 269.379264][T11324] dump_stack_lvl+0x100/0x190 [ 269.379286][T11324] should_fail_ex.cold+0x5/0xa [ 269.379304][T11324] should_failslab+0xc2/0x120 [ 269.379322][T11324] kmem_cache_alloc_noprof+0x92/0x6a0 [ 269.379338][T11324] ? __pfx_map_id_range_down+0x10/0x10 [ 269.379352][T11324] ? security_inode_alloc+0x3b/0x2c0 [ 269.379370][T11324] security_inode_alloc+0x3b/0x2c0 [ 269.379389][T11324] inode_init_always_gfp+0xc6f/0xfb0 [ 269.379408][T11324] ? __pfx_devpts_fill_super+0x10/0x10 [ 269.379424][T11324] alloc_inode+0x8e/0x250 [ 269.379437][T11324] new_inode+0x22/0x1c0 [ 269.379449][T11324] ? rcu_is_watching+0x13/0xc0 [ 269.379468][T11324] ? __pfx_devpts_fill_super+0x10/0x10 [ 269.379485][T11324] devpts_fill_super+0x197/0x610 [ 269.379504][T11324] ? __pfx_devpts_fill_super+0x10/0x10 [ 269.379520][T11324] get_tree_nodev+0xdd/0x190 [ 269.379535][T11324] vfs_get_tree+0x92/0x320 [ 269.379547][T11324] path_mount+0x7d0/0x2850 [ 269.379561][T11324] ? __pfx_path_mount+0x10/0x10 [ 269.379571][T11324] ? lockdep_hardirqs_on+0x7d/0x110 [ 269.379591][T11324] ? putname+0xb1/0x110 [ 269.379600][T11324] ? kmem_cache_free+0x127/0x6c0 [ 269.379617][T11324] ? __x64_sys_mount+0x293/0x310 [ 269.379628][T11324] __x64_sys_mount+0x293/0x310 [ 269.379640][T11324] ? __pfx___x64_sys_mount+0x10/0x10 [ 269.379656][T11324] do_syscall_64+0x123/0x790 [ 269.379674][T11324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.379686][T11324] RIP: 0033:0x7f41fbf9e559 [ 269.379695][T11324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.379706][T11324] RSP: 002b:00007f41fcd8c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 269.379717][T11324] RAX: ffffffffffffffda RBX: 00007f41fc225fa0 RCX: 00007f41fbf9e559 [ 269.379724][T11324] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000000000000000 [ 269.379730][T11324] RBP: 00007f41fc0358b0 R08: 0000000000000000 R09: 0000000000000000 [ 269.379736][T11324] R10: 00000000022008c0 R11: 0000000000000246 R12: 0000000000000000 [ 269.379743][T11324] R13: 00007f41fc226038 R14: 00007f41fc225fa0 R15: 00007fff34b83ba8 [ 269.379758][T11324] [ 269.765111][ T30] audit: type=1400 audit(1792156918.635:630): avc: denied { write } for pid=11327 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 270.126276][ T30] audit: type=1400 audit(1792156919.005:631): avc: denied { bind } for pid=11347 comm="syz.8.1683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 270.135768][ T30] audit: type=1400 audit(1792156919.005:632): avc: denied { setopt } for pid=11347 comm="syz.8.1683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 270.212158][T11348] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.212413][T11348] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.242825][T11348] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.242880][T11348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.242997][T11348] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.243047][T11348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.352689][T11352] ip_tables: iptables: counters copy to user failed while replacing table [ 270.378129][T11348] team0: Port device bridge0 added [ 270.442246][T11350] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.462218][T11350] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.803551][ T30] audit: type=1400 audit(1792156919.675:633): avc: denied { write } for pid=11349 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 270.975089][ T30] audit: type=1400 audit(1792156919.845:634): avc: denied { mounton } for pid=11374 comm="syz.8.1689" path="/proc/113/task" dev="proc" ino=29828 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 271.119622][ T30] audit: type=1400 audit(1792156919.995:635): avc: denied { mount } for pid=11380 comm="syz.0.1691" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 271.328364][T11389] fuse: Bad value for 'fd' [ 271.342721][ T30] audit: type=1400 audit(1792156920.215:636): avc: denied { write } for pid=11385 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 272.005650][ T30] audit: type=1400 audit(1792156920.875:637): avc: denied { write } for pid=11400 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 272.259703][T11417] fuse: fd is not a fuse device [ 272.378081][ T30] audit: type=1400 audit(1792156921.255:638): avc: denied { write } for pid=11419 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 273.993608][T11448] Cannot find map_set index 2 as target [ 274.136430][T11452] Set syz1 is full, maxelem 2076 reached [ 274.213282][ T30] audit: type=1400 audit(1792156923.085:639): avc: denied { write } for pid=11442 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 274.484787][ T30] audit: type=1400 audit(1792156923.355:640): avc: denied { write } for pid=11464 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 274.813513][T11167] udevd[11167]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 275.266023][ T30] audit: type=1400 audit(1792156924.135:641): avc: denied { write } for pid=11472 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 275.695139][T11497] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 275.851953][ T30] audit: type=1400 audit(1792156924.725:642): avc: denied { write } for pid=11502 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 275.931898][ T5607] Bluetooth: hci4: unexpected event for opcode 0x0c26 [ 280.020065][ T30] audit: type=1400 audit(1792156928.895:643): avc: denied { write } for pid=11521 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 280.706710][ T30] audit: type=1400 audit(1792156929.585:644): avc: denied { write } for pid=11557 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 281.170153][T11569] warning: `syz.7.1744' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 283.350245][ T30] audit: type=1400 audit(1792156932.225:645): avc: denied { write } for pid=11574 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 284.184738][ T30] audit: type=1400 audit(1792156933.055:646): avc: denied { write } for pid=11608 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 284.834215][T11622] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1760'. [ 318.552636][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.552917][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.276602][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 345.223067][ T5613] Bluetooth: hci5: command 0x0406 tx timeout [ 378.591390][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.591679][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.846842][ T30] audit: type=1400 audit(1792157027.665:647): avc: denied { write } for pid=11629 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 428.406058][ T30] audit: type=1400 audit(1792157077.275:648): avc: denied { write } for pid=11673 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 440.010244][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.010532][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 457.334291][ T42] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.606627][ T42] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.563791][ T42] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.389561][ T42] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.222557][ T6738] netdevsim netdevsim1 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.070801][ T7841] netdevsim netdevsim1 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.281637][T11625] netdevsim netdevsim1 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.048261][ T30] audit: type=1400 audit(1792157140.925:649): avc: denied { write } for pid=11683 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 493.656353][ T50] netdevsim netdevsim1 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.138994][ T42] bridge_slave_1: left allmulticast mode [ 495.139023][ T42] bridge_slave_1: left promiscuous mode [ 495.215226][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.138074][ T42] bridge_slave_0: left allmulticast mode [ 496.138107][ T42] bridge_slave_0: left promiscuous mode [ 496.139407][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.438145][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.438432][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.540475][ T1308] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 517.753270][ T42] bond1 (unregistering): (slave erspan0): Releasing backup interface [ 519.291545][ T30] audit: type=1400 audit(1792157168.155:650): avc: denied { write } for pid=11704 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 528.482889][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 529.588605][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 530.179839][ T42] bond0 (unregistering): Released all slaves [ 531.692813][ T42] bond1 (unregistering): Released all slaves [ 538.531740][ T42] tipc: Left network mode [ 557.677292][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 562.885524][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.887206][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.987729][ T1308] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 562.988011][ T1308] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 572.129617][ T30] audit: type=1400 audit(1792157220.985:651): avc: denied { write } for pid=11715 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 579.414560][ T42] hsr_slave_0: left promiscuous mode [ 579.701691][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 579.701720][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 580.091073][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 580.091123][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 580.906917][ T42] veth1_macvtap: left promiscuous mode [ 580.907000][ T42] veth0_macvtap: left promiscuous mode [ 580.938731][ T42] veth1_vlan: left promiscuous mode [ 580.939277][ T42] veth0_vlan: left promiscuous mode [ 594.355505][ T30] audit: type=1400 audit(1792157243.225:652): avc: denied { write } for pid=11729 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 620.741029][ T42] team0 (unregistering): Port device team_slave_1 removed [ 623.059408][ T42] team0 (unregistering): Port device team_slave_0 removed [ 624.298438][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.298721][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.415154][ T1308] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 624.415444][ T1308] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 634.648714][ T30] audit: type=1400 audit(1792157283.525:653): avc: denied { write } for pid=11737 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 656.274535][ T30] audit: type=1400 audit(1792157305.065:654): avc: denied { write } for pid=11750 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 668.061055][T11646] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.180037][T11646] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.961313][T11646] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.122104][T11646] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.730835][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.731109][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.794083][ T1308] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 685.794372][ T1308] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 688.129396][T11625] netdevsim netdevsim8 eth13: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.997758][ T50] netdevsim netdevsim8 eth14: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.442130][T11634] netdevsim netdevsim8 eth15: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.830071][T11638] netdevsim netdevsim8 eth16: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.500913][ T30] audit: type=1400 audit(1792157346.375:655): avc: denied { write } for pid=11760 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 697.878216][T11646] bridge_slave_1: left allmulticast mode [ 697.878253][T11646] bridge_slave_1: left promiscuous mode [ 697.879451][T11646] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.539814][T11646] bridge_slave_0: left allmulticast mode [ 698.540183][T11646] bridge_slave_0: left promiscuous mode [ 698.541328][T11646] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.361247][ T30] audit: type=1400 audit(1792157367.235:656): avc: denied { write } for pid=11779 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 720.451919][T11646] team0: Port device bridge0 removed [ 723.323605][T11646] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 723.861834][T11646] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 724.188309][T11646] bond0 (unregistering): Released all slaves [ 747.186459][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.186738][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.288311][ T1308] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 747.288590][ T1308] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 759.687749][ T30] audit: type=1400 audit(1792157408.565:657): avc: denied { write } for pid=11787 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 764.313116][T11646] hsr_slave_0: left promiscuous mode [ 764.631931][T11646] hsr_slave_1: left promiscuous mode [ 764.734648][T11646] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 764.734685][T11646] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 764.958994][T11646] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 764.959032][T11646] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 765.751242][T11646] veth1_macvtap: left promiscuous mode [ 765.751331][T11646] veth0_macvtap: left promiscuous mode [ 765.752040][T11646] veth1_vlan: left promiscuous mode [ 765.859969][T11646] veth0_vlan: left promiscuous mode [ 776.824133][ T30] audit: type=1400 audit(1792157425.695:658): avc: denied { write } for pid=11802 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 800.454154][T11646] team0 (unregistering): Port device team_slave_1 removed [ 802.674441][T11646] team0 (unregistering): Port device team_slave_0 removed [ 808.627738][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.628040][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.735541][ T1308] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 808.735987][ T1308] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 815.036477][ T30] audit: type=1400 audit(1792157463.905:659): avc: denied { write } for pid=11812 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 832.486062][ T30] audit: type=1400 audit(1792157481.285:660): avc: denied { write } for pid=11825 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 868.719340][ T30] audit: type=1400 audit(1792157517.585:661): avc: denied { write } for pid=11835 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 870.025024][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.025312][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.157528][ T1308] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 870.158061][ T1308] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 884.695327][ T30] audit: type=1400 audit(1792157533.565:662): avc: denied { write } for pid=11849 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 931.558422][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.558707][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.652479][ T1308] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 931.652768][ T1308] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 960.237348][ T31] INFO: task kworker/0:0:9 blocked for more than 143 seconds. [ 960.237371][ T31] Not tainted syzkaller #0 [ 960.237383][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 960.237393][ T31] task:kworker/0:0 state:D stack:22728 pid:9 tgid:9 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 960.237439][ T31] Workqueue: events drain_vmap_area_work [ 960.237484][ T31] Call Trace: [ 960.237494][ T31] [ 960.237596][ T31] __schedule+0x1259/0x6920 [ 960.237879][ T31] ? kthread_data+0x53/0xc0 [ 960.237930][ T31] ? __pfx___schedule+0x10/0x10 [ 960.237955][ T31] ? find_held_lock+0x2b/0x80 [ 960.238013][ T31] ? schedule+0x225/0x2c0 [ 960.238192][ T31] schedule+0xdd/0x2c0 [ 960.238238][ T31] schedule_timeout+0x1b2/0x280 [ 960.238282][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 960.238510][ T31] ? mark_held_locks+0x40/0x70 [ 960.238621][ T31] __wait_for_common+0x2e7/0x4c0 [ 960.238678][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 960.238806][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 960.238833][ T31] ? __flush_work+0x4ca/0xcb0 [ 960.238884][ T31] ? find_held_lock+0x2b/0x80 [ 960.238929][ T31] ? __flush_work+0x928/0xcb0 [ 960.238971][ T31] ? __flush_work+0x928/0xcb0 [ 960.416124][ T31] ? __flush_work+0x4ca/0xcb0 [ 960.416171][ T31] __flush_work+0x7c7/0xcb0 [ 960.416261][ T31] ? __raw_callee_save_pv_queued_spin_unlock_traced+0x15/0x40 [ 960.416328][ T31] ? __pfx___flush_work+0x10/0x10 [ 960.416437][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 960.416701][ T31] ? __pfx___might_resched+0x10/0x10 [ 960.416728][ T31] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 960.416877][ T31] __purge_vmap_area_lazy+0x879/0xc00 [ 960.417027][ T31] drain_vmap_area_work+0x27/0x40 [ 960.417059][ T31] process_one_work+0xac7/0x1b10 [ 960.417328][ T31] ? __pfx_process_one_work+0x10/0x10 [ 960.417405][ T31] ? lock_acquire+0x1d1/0x380 [ 960.577122][ T31] ? __pfx_drain_vmap_area_work+0x10/0x10 [ 960.577219][ T31] worker_thread+0x5ef/0xe50 [ 960.577466][ T31] ? kthread+0x13a/0x450 [ 960.577497][ T31] ? __pfx_worker_thread+0x10/0x10 [ 960.577523][ T31] kthread+0x373/0x450 [ 960.577575][ T31] ? __pfx_kthread+0x10/0x10 [ 960.577694][ T31] ret_from_fork+0x730/0xd60 [ 960.577755][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 960.577825][ T31] ? __switch_to+0x800/0x10f0 [ 960.577895][ T31] ? __pfx_kthread+0x10/0x10 [ 960.578040][ T31] ret_from_fork_asm+0x1a/0x30 [ 960.578317][ T31] [ 960.713323][ T31] [ 960.713323][ T31] Showing all locks held in the system: [ 960.713340][ T31] locks held by kworker/0:0/9: 3, on CPU#0: [ 960.713354][ T31] #0: ffff88801d05b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 960.713423][ T31] #1: ffffc900000e7d08 (drain_vmap_work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 960.713496][ T31] #2: ffffffff8ffc2ae0 (vmap_purge_lock){+.+.}-{4:4}, at: drain_vmap_area_work+0x17/0x40 [ 960.713578][ T31] locks held by khungtaskd/31: 1, last CPU#0: [ 960.713593][ T31] #0: ffffffff8fdec5e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 960.713688][ T31] locks held by kworker/u8:3/50: 3, last CPU#0: [ 960.713704][ T31] #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 960.713775][ T31] #1: ffffc90000ba7d08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 960.713833][ T31] #2: ffff888037ac1258 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 960.713911][ T31] locks held by kworker/u8:8/1141: 3, last CPU#0: [ 960.713924][ T31] #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 960.714004][ T31] #1: ffffc900051dfd08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 960.714094][ T31] #2: ffff888147ea0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 960.714200][ T31] locks held by kworker/0:3/5040: 3, last CPU#0: [ 960.714210][ T31] #0: ffff88801d05b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 960.714271][ T31] #1: ffffc9000528fd08 ((work_completion)(&vn->purge_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 960.714335][ T31] #2: ffffffff8fdec5e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 960.714408][ T31] locks held by getty/5364: 2, on CPU#0: [ 960.714421][ T31] #0: ffff88802ea9e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 960.714504][ T31] #1: ffffc9000323b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 960.714597][ T31] locks held by kworker/u8:10/6350: 3, last CPU#0: [ 960.714614][ T31] #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 960.714677][ T31] #1: ffffc900057cfd08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 960.714737][ T31] #2: ffff88807793f258 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 960.714846][ T31] locks held by kworker/u8:11/6738: 3, last CPU#0: [ 960.714860][ T31] #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 961.037883][ T31] #1: ffff8880b8224568 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2e0c/0x6920 [ 961.037967][ T31] #2: ffff88805e700800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 961.038054][ T31] locks held by kworker/u8:13/7843: 3, last CPU#0: [ 961.038069][ T31] #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 961.038165][ T31] #1: ffffc900033efd08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 961.038244][ T31] #2: ffff88807a449258 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 961.038306][ T31] locks held by kworker/u8:14/11623: 3, last CPU#0: [ 961.038318][ T31] #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 961.038387][ T31] #1: ffffc90003fbfd08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 961.038467][ T31] #2: ffff888054250800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 961.038556][ T31] locks held by kworker/u8:16/11625: 3, last CPU#0: [ 961.038572][ T31] #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 961.038662][ T31] #1: ffffc900042e7d08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 961.038732][ T31] #2: ffff88807c530258 (&devlink->lock_key#8){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 961.038804][ T31] locks held by kworker/u8:17/11626: 3, last CPU#0: [ 961.038818][ T31] #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 961.038899][ T31] #1: ffffc90003fdfd08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 961.038992][ T31] #2: ffff8880253a4258 (&devlink->lock_key#7){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 961.039073][ T31] locks held by kworker/u8:19/11628: 4, last CPU#0: [ 961.039095][ T31] #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 961.039153][ T31] #1: ffffc90003f87d08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 961.039221][ T31] #2: ffff888053e60800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 961.039303][ T31] #3: ffffffff8fdec5e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 961.039389][ T31] locks held by kworker/u8:21/11638: 3, last CPU#0: [ 961.039409][ T31] #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 961.039541][ T31] #1: ffffc90003b27d08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 961.039605][ T31] #2: ffff888028a52258 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 961.039681][ T31] locks held by kworker/u8:22/11643: 3, last CPU#0: [ 961.039695][ T31] #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 961.039780][ T31] #1: ffffc90004e7fd08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 961.039875][ T31] #2: ffff88802b540800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 961.039942][ T31] locks held by kworker/u8:25/11646: 3, last CPU#0: [ 961.039953][ T31] #0: ffff88802e615940 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 961.040012][ T31] #1: ffffc90003b07d08 ((work_completion)(&(&forw_packet_aggr->delayed_work)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 961.040082][ T31] #2: ffff8880367559c8 (&hard_iface->bat_iv.ogm_buff_mutex){+.+.}-{4:4}, at: batadv_iv_send_outstanding_bat_ogm_packet+0x50f/0x7d0 [ 961.040162][ T31] locks held by kworker/u8:26/11647: 2, last CPU#0: [ 961.040177][ T31] #0: ffff88802c683940 ((wq_completion)wg-kex-wg0#15){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 961.040283][ T31] #1: ffffc90003ae7d08 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 961.040369][ T31] locks held by kworker/0:2/11767: 3, last CPU#0: [ 961.040379][ T31] #0: ffff88801d059d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 961.040436][ T31] #1: ffffc900032afd08 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 961.040502][ T31] #2: ffffffff8fdec5e0 (rcu_read_lock){....}-{1:3}, at: gc_worker+0x21a/0x1a10 [ 961.040575][ T31] locks held by syz-executor/11872: 1, last CPU#0: [ 961.040589][ T31] #0: ffffffff8fdec5e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 961.040675][ T31] locks held by syz-executor/11875: 1, last CPU#0: [ 961.040690][ T31] #0: ffffffff8fdec5e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 961.040795][ T31] [ 961.040800][ T31] ============================================= [ 961.040800][ T31] [ 961.040808][ T31] NMI backtrace for cpu 0 [ 961.040819][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 961.040834][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 961.040843][ T31] Call Trace: [ 961.040856][ T31] [ 961.040872][ T31] dump_stack_lvl+0x100/0x190 [ 961.040956][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 961.041054][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 961.041125][ T31] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 961.041186][ T31] sys_info+0x141/0x190 [ 961.041236][ T31] watchdog+0xcb1/0x1030 [ 961.041428][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 961.041460][ T31] ? __pfx_watchdog+0x10/0x10 [ 961.041516][ T31] ? __kthread_parkme+0x18f/0x230 [ 961.041647][ T31] ? kthread+0x13a/0x450 [ 961.041686][ T31] ? __pfx_watchdog+0x10/0x10 [ 961.041724][ T31] kthread+0x373/0x450 [ 961.041766][ T31] ? __pfx_kthread+0x10/0x10 [ 961.041826][ T31] ret_from_fork+0x730/0xd60 [ 961.041903][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 961.042010][ T31] ? __switch_to+0x800/0x10f0 [ 961.042071][ T31] ? __pfx_kthread+0x10/0x10 [ 961.042133][ T31] ret_from_fork_asm+0x1a/0x30 [ 961.042416][ T31] [ 961.042434][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 961.711310][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 961.720433][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 961.730489][ T31] Call Trace: [ 961.733769][ T31] [ 961.736710][ T31] dump_stack_lvl+0x100/0x190 [ 961.741490][ T31] vpanic+0x553/0x970 [ 961.745474][ T31] ? __pfx_vpanic+0x10/0x10 [ 961.750146][ T31] panic+0xd1/0xe0 [ 961.753885][ T31] ? __pfx_panic+0x10/0x10 [ 961.758320][ T31] ? nmi_cpu_backtrace+0x79/0x200 [ 961.763446][ T31] ? nmi_trigger_cpumask_backtrace+0x206/0x2a0 [ 961.769614][ T31] ? watchdog.cold+0x1ec/0x234 [ 961.774467][ T31] watchdog.cold+0x1fd/0x234 [ 961.779188][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 961.785023][ T31] ? __pfx_watchdog+0x10/0x10 [ 961.789832][ T31] ? __kthread_parkme+0x18f/0x230 [ 961.794916][ T31] ? kthread+0x13a/0x450 [ 961.799163][ T31] ? __pfx_watchdog+0x10/0x10 [ 961.803837][ T31] kthread+0x373/0x450 [ 961.807930][ T31] ? __pfx_kthread+0x10/0x10 [ 961.812582][ T31] ret_from_fork+0x730/0xd60 [ 961.817196][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 961.822524][ T31] ? __switch_to+0x800/0x10f0 [ 961.827328][ T31] ? __pfx_kthread+0x10/0x10 [ 961.831980][ T31] ret_from_fork_asm+0x1a/0x30 [ 961.836980][ T31] [ 961.840015][ T31] Kernel Offset: disabled [ 961.844337][ T31] Rebooting in 86400 seconds..