last executing test programs: 7.711738443s ago: executing program 1 (id=2034): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x80, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r1, 0x8001}}, 0xff7a) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 6.351525765s ago: executing program 1 (id=2044): capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffdfffff}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xb, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080}) ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f00000055c0)=@vmx={0x7, 0x0, 0x2080, {0x80a0000, 0xc000, {}, 0x0, 0xce6a}, {"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", "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"}}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$FICLONE(r3, 0x40049409, r2) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x10000) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003401300000a0900010073797a30000000000c0006400000000000000002"], 0x70}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000001d768791000000000000000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 6.24095284s ago: executing program 2 (id=2045): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x1000, @dev={0xfe, 0x80, '\x00', 0x21}, 0x9}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000240)=0x35ce5, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x2000000}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}}, 0x0) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000000)={0x39, &(0x7f00000000c0)=[{0x11, '\x00', @data=0x5, 0x9}, {0x38, '\x00', @st={0x4, [{0x0, @uvalue=0x1}, {0x2, @uvalue=0xbf7}, {0x0, @svalue=0x7ff}, {0x2, @svalue}]}, 0x40}]}) ioctl$FIONCLEX(r0, 0x5450) 6.002422562s ago: executing program 1 (id=2046): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)='0', 0x1}], 0x1}, 0x4040001) recvmsg$unix(r0, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x40012141) sendmsg$key(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x10}}, 0x4001) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000000c0)={0x0, 'pim6reg1\x00', {0x2}, 0x5}) recvmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x40000060) 5.724654264s ago: executing program 1 (id=2048): socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 64) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = semget$private(0x0, 0x4000000009, 0x0) semctl$GETALL(r3, 0x0, 0xd, 0x0) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x129a00, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x6) ioctl$KVM_SET_CPUID(r6, 0x4008ae8a, &(0x7f00000002c0)={0xe5, 0x0, [{0x80000001, 0x2, 0x4, 0x8001}]}) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) (rerun: 64) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) (async) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000000440)=""/102382, 0x18fee) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="f8ff00400400"}) (async) r10 = semget(0x1, 0x4, 0x69c) semop(r10, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) semget(0x2, 0x0, 0x440) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.332664026s ago: executing program 1 (id=2051): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="490000000d06010200000000000000000500000211000300686173683a69702c706f727400000000050001"], 0x38}, 0x1, 0x0, 0x0, 0x20008040}, 0x40048100) socket$kcm(0x29, 0x0, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000a00)='.\x00', 0x0, 0x800, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x60042, 0x0) syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d000300000000800000000000000000000007000000000000000800000000004000050000000000000002"], 0x78) r1 = gettid() syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'ipvlan1\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0xffffffffffffff1a, 0x2, {{0x1, [0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x1, 0x4002, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000004340)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) ioctl$PTP_SYS_OFFSET_PRECISE(r4, 0xc0403d08, &(0x7f0000000040)) 5.244649335s ago: executing program 2 (id=2052): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="490000000d06010200000000000000000500000211000300686173683a69702c706f727400000000050001"], 0x38}, 0x1, 0x0, 0x0, 0x20008040}, 0x40048100) socket$kcm(0x29, 0x0, 0x0) mount(&(0x7f0000000000)=@nullb, 0x0, &(0x7f0000000040)='ocfs2\x00', 0x800, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x60042, 0x0) syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d000300000000800000000000000000000007000000000000000800000000004000050000000000000002"], 0x78) r1 = gettid() syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'ipvlan1\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0xffffffffffffff1a, 0x2, {{0x1, [0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x1, 0x4002, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000004340)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) ioctl$PTP_SYS_OFFSET_PRECISE(r4, 0xc0403d08, &(0x7f0000000040)) 5.00054016s ago: executing program 4 (id=2053): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, './cgroup\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0xfffffffe, 0x0, 0x9, 0x0, 0x7fffffffffffffff, 0xfb11, 0xffffffff}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xe782) r3 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) fgetxattr(r7, &(0x7f0000000340)=ANY=[@ANYBLOB="000000002e2f275c257b083a17f505da1068a43c65bc4800d8f25707a0f6150a47b8c981b7fd8621eeba4ac507b3e5d2dc62a6f9c393c29520d0fe2f49d4e6b4dc06de2ce893d9f5a13cdcfb43ae79e780bd3446d33e297e1cfce7733c424ee745e359e3d2910a8b74bab20787e0ec3f0525d370f3a45682836fb8fd174e76c980f4e776102ff1c7d618a0b56bf840de4e6ddc4dc0fa4aa1756b42c1fd5a10f4d7756780d43ab1d80d7f9be82770aa5c184016d7d2371b5f4cf1580ea38615ad29fb529fecf9ef0096fb90fe95acdde28d6f8ada1a4c2b"], 0x0, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r6, @ANYBLOB="6ff7f8c05b2d612bd2010000040000"], 0x20}}, 0x4084) 3.739894367s ago: executing program 4 (id=2059): r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00') read$FUSE(r0, &(0x7f0000002780)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x5ecfb203) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x2000c0c2) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000180)='/dev/net/tun\x00', &(0x7f0000000280)='M]]\x00', 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x29, 0x5, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x19) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000340)={'\x00', 0x5, 0x9e0, 0x80000000, 0x0, 0xff, r1}) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc044) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r6, &(0x7f0000000400)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)=ANY=[@ANYRES8, @ANYRESDEC=r6, @ANYRES64, @ANYRESHEX, @ANYRESHEX=r5, @ANYBLOB], 0xa8}, 0x1, 0x0, 0x0, 0x24004856}, 0x40) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r8, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0xfffffff6}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000840}, 0x40811) 3.695372113s ago: executing program 0 (id=2060): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) bind$netlink(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0x27}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x0, 0x1, 0x0, 0x5}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) write$bt_hci(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="c0e397e87513287e17cf297574a305dc005c05f3e50600cf2e407c30a2bb322b900750dc181d10bddd61c8ad94f1928fd11a158ddda73ed56c4ffa67a1034527177bb2bf3cc3151a879f2d615ff37c449efd87cf2ebe61a9377eae6ca7fcf678e1e8a1e8b8"], 0xe) read$msr(r2, &(0x7f0000000580)=""/146, 0x92) 3.516164574s ago: executing program 0 (id=2062): mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), 0x1800040, &(0x7f0000000c80)={[{@noswap}]}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001040)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x844) sendmsg$nl_route(r0, 0x0, 0x55) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) syz_emit_ethernet(0x32, &(0x7f0000000740)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb080045000024000040020011"], 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000a00)={@random="e904a200", @link_local, @val={@void, {0x8100, 0x2}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x28, 0x0, @gue={{0x1, 0x1, 0x0, 0xff, 0x100, @void}, "9abb5823af40bc7ea2e3cf5a193db6dbfca0a432f736dadba1873e03"}}}}}}, 0x0) io_uring_setup(0x13b5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122ebbff6884b3de82f8a3df9a", 0x48, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r6, 0x4020aed2, &(0x7f0000000080)={0x6000, 0x100000, 0x8}) clock_nanosleep(0xe3a30f1b640fe9a9, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000001800000000002005300000085000000a00000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x20, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.403562196s ago: executing program 0 (id=2063): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x50, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0x50}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0b01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000", 0x15) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) connect$inet6(r1, &(0x7f0000000240)={0xa, 0xffff, 0x4462, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xd38f}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000001840), 0x3b, 0x0) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000140)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) 2.776506615s ago: executing program 4 (id=2065): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@var={0x4, 0x0, 0x0, 0xe, 0x4}]}, {0x0, [0x0, 0x0, 0x0]}}, 0x0, 0x2d}, 0x28) syz_emit_ethernet(0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000030000403a00fc000000000000000000000000000000ff0200000007000000000000000000000000604aa19800003c"], 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) open(&(0x7f0000000140)='./bus\x00', 0x42b42, 0x1c0) link(&(0x7f0000000480)='./bus\x00', &(0x7f00000004c0)='./file0\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x10001, 0xffffffffffffffff, 0x3c, 0x3}, 0x400000000a}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007e40)=[{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f00000000c0)="4789d3aefc1a4d03345aed327be33c", 0xf}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x20040894) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_TABLE(r2, 0x29, 0xcf, &(0x7f0000000240)=0xfc, 0x4) r3 = socket$kcm(0x10, 0x2, 0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r9, 0x8982, &(0x7f0000000180)) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400b59527bd7000fcdbdf250a400000", @ANYRES32=r8, @ANYBLOB="140002000000000000000008000800"], 0x34}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20010840) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000340)={'ip6_vti0\x00', r8, 0x4, 0x8, 0x9, 0x3, 0x4d, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, 0x40, 0x8000, 0xfff, 0x40}}) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 2.659004485s ago: executing program 3 (id=2066): socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x80000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) r2 = timerfd_create(0x9, 0x80800) timerfd_settime(r2, 0x1, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000280)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0xeb, &(0x7f0000019380)=ANY=[], 0x0) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000000c0)=@chain) keyctl$restrict_keyring(0x1d, r3, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000200)=r4) 2.476536583s ago: executing program 4 (id=2067): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000001"], 0x6c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() r4 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x20200) ioctl$RTC_UIE_ON(r4, 0x7003) ioctl$RTC_AIE_ON(r4, 0x7001) ioctl$RTC_AIE_OFF(r4, 0x7002) sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000001300)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', [{}, {0x20, '-^('}, {0x20, '/selinux/status\x00'}], 0xa, "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"}, 0x1109) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_RMID(0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) readv(r6, &(0x7f0000000040)=[{&(0x7f0000000180)=""/152, 0x98}, {&(0x7f0000002580)=""/4106, 0x100a}], 0x2) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r6) 2.33258307s ago: executing program 0 (id=2068): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000040)=ANY=[@ANYBLOB="6e6174400000000000000000000000000000000000000000000000000000000002"], 0x48) 2.224207669s ago: executing program 3 (id=2069): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0xfffffffc) close_range(r0, 0xffffffffffffffff, 0xff0f) 1.971584865s ago: executing program 3 (id=2070): syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[], 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0xfffffffffffffffc, 0x8000, 0x2, 0x10001}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x100) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x1000000000000}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg(r5, &(0x7f00000054c0)=[{{&(0x7f0000000000)=@l2={0x1f, 0xf, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xcb}, 0x80, 0x0}}], 0x1, 0x4008850) sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000700)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x458}, 0x1, 0x0, 0x0, 0x440c0}, 0x800) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000200)={@loopback, @ipv4={'\x00', '\xff\xff', @multicast1}, @loopback, 0x10000006, 0x0, 0x4, 0x100, 0x4000000010000009, 0x10200}) 1.820920811s ago: executing program 1 (id=2071): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r3, 0x6, 0x21, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000300)=""/102400, 0x19000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000019580)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'bridge_slave_0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 1.783106671s ago: executing program 2 (id=2072): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) bind$netlink(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0x27}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x0, 0x1, 0x0, 0x5}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) write$bt_hci(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="c0e397e87513287e17cf297574a305dc005c05f3e50600cf2e407c30a2bb322b900750dc181d10bddd61c8ad94f1928fd11a158ddda73ed56c4ffa67a1034527177bb2bf3cc3151a879f2d615ff37c449efd87cf2ebe61a9377eae6ca7fcf678e1e8a1e8b8"], 0xe) read$msr(r2, &(0x7f0000000580)=""/146, 0x92) 1.724248533s ago: executing program 4 (id=2073): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0xff80, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="6c01000010001b0702000000fcdbdf2520010000000000000000000000000001fc020000000000000000000000000001000000004e2102000a0020006c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 1.722719633s ago: executing program 3 (id=2074): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x2, 0x18b882) syz_open_procfs(0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f00000000c0)={0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341e9"], 0x0}, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848350000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, 0xffffffffffffffff, 0x8001}}, 0xff7a) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1.588333533s ago: executing program 2 (id=2075): r0 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000180)=0x60) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f00000001c0)) socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, 0x0, &(0x7f00000001c0)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = memfd_create(&(0x7f0000000000)='/dev/\xd2\x9aO\x00\x00\x00\xd7\x02\xca\xd2\xcb\xd2\xb1\xcap\x15loop#\x7f\xf5R%\xe8]l\xa1s\b\xa5\xd2\xd59\xe8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\xec\xdbXe&\xe9\x16\x82\xc8c\xf0\xc0\xe8=\x83\x88sN\x83N`\xf9\xec\xe1\xbb\x05vH\xdd\x01\x02k\x97\xa5\xbf\x89#=2G\xb16\xfb*\xf5\xd5\\\xa7\xebe\xbe\x9d\xd7\xf5\xb9<\xb2\xc4\xf9:\xef\xc0g\xc3\xa6\x7f\xc0\xcck.5=\xcc\x10Y\xad^*;MVh\xd9\xcf )\x0e%\x84\x95bXy\x81;o\xc9\x94\x00'/389, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) r3 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) write$binfmt_misc(r3, &(0x7f0000000740), 0xff67) lseek(r3, 0x101, 0x4) fallocate(r2, 0x0, 0x0, 0x200401) mount$bind(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x78}, 0x1, 0x0, 0x0, 0x4804}, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./file0/../file0\x00', 0x1b5) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r5, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, 0x0, 0x0) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020}, 0x2020) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_int(r5, 0x0, 0x21, &(0x7f0000000180)=0xfffffc58, 0x4) 1.415372899s ago: executing program 0 (id=2076): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x214001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x11, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @generic={0x66}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1000000}, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000), 0x1000000000000202, 0x1) ioctl$TCGETS(r4, 0x5401, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x1f, &(0x7f0000000100)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080400007c09e8fe55a10a0015c00500142603600e1208000f0000000401a80016001100014003000300036010fab94d0094007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9a511dd5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970100000000000000", 0xd8}], 0x1}, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r0, 0x8004510a, &(0x7f0000000180)) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRESHEX=r7], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r9}, 0xc) 1.082716524s ago: executing program 2 (id=2077): rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x8) socketpair$unix(0x1, 0x3, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$loop(0x0, 0x7, 0x180862) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) get_mempolicy(&(0x7f0000000000), 0x0, 0x3e46, &(0x7f000084f000/0x4000)=nil, 0x4) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$alg(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg', 0x3) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0x9) ioctl$TCXONC(r2, 0x540a, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.082366243s ago: executing program 4 (id=2078): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sync_file_range(r0, 0x4179, 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d7930000000000000000000000800", @ANYRES32=r5, @ANYBLOB="1c0b3873cbab4c74f8ab98f9a4123da2de855d595eb18369db992c4ee195d776309e82fb1cf7ba9daad2d47e8edac38b454a58aa965e32aa75850fafcf870223c95a1f9e476152"], 0x3c}}, 0x8000) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000900), 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0xff2e) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000140)=0x12) syz_open_dev$tty1(0xc, 0x4, 0x1) 632.8528ms ago: executing program 3 (id=2079): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x200000000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, &(0x7f0000000600)={{0xc000, 0x5000, 0x4, 0xcc, 0x3, 0x0, 0x2, 0x18, 0xfd, 0x3, 0x5, 0x5}, {0x57000, 0xeeee0000, 0x3, 0x9b, 0x8, 0x9, 0x1, 0xfa, 0x1, 0xd, 0x6, 0xff}, {0xb000, 0xffff1000, 0xb, 0x6, 0xa, 0x80, 0xf8, 0x6, 0x5, 0xfb, 0xcb}, {0x8080000, 0xdddd1000, 0xd, 0x0, 0x5, 0x1, 0x5, 0x1f, 0x3, 0x20, 0x5, 0x1}, {0xeeef0000, 0xb000, 0x1a, 0xf8, 0x5, 0x3, 0x7, 0x3, 0x80, 0x3, 0xe, 0x5}, {0x8000000, 0x2000, 0x9, 0x80, 0xbd, 0x5, 0x3, 0xfb, 0x9, 0x9, 0x3}, {0x8080000, 0x200000, 0xb, 0x74, 0x2c, 0x8, 0x6, 0x2, 0x7, 0x4, 0xa, 0x2}, {0xdddd0000, 0xeeee8000, 0xb, 0x1, 0xbc, 0x3, 0x50, 0xb8, 0x2, 0x9, 0x9, 0x55}, {0xe000, 0x1}, {0x5000, 0xcac5}, 0xa0000001, 0x0, 0x54000, 0x0, 0x3, 0x801, 0xffff1000, 0x0, [0x1d92, 0x5, 0x7]}) 122.644789ms ago: executing program 3 (id=2080): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) sync_file_range(0xffffffffffffffff, 0x4179, 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000030400"/19, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r4, @ANYBLOB="1c0b3873cbab4c74f8ab98f9a4123da2de855d595eb18369db992c4ee195d776309e82fb1cf7ba9daad2d47e8edac38b454a58aa965e32aa75850fafcf8702"], 0x3c}}, 0x8000) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000900), 0x0, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r7, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) syz_open_pts(r7, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000140)=0x12) syz_open_dev$tty1(0xc, 0x4, 0x1) 0s ago: executing program 2 (id=2081): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="490000000d06010200000000000000000500000211000300686173683a69702c706f727400000000050001"], 0x38}, 0x1, 0x0, 0x0, 0x20008040}, 0x40048100) socket$kcm(0x29, 0x0, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000a00)='.\x00', 0x0, 0x800, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x60042, 0x0) syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d000300000000800000000000000000000007000000000000000800000000004000050000000000000002"], 0x78) r1 = gettid() syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'ipvlan1\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0xffffffffffffff1a, 0x2, {{0x1, [0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x1, 0x4002, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000004340)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) ioctl$PTP_SYS_OFFSET_PRECISE(r4, 0xc0403d08, &(0x7f0000000040)) kernel console output (not intermixed with test programs): attribute type 3 has an invalid length. [ 414.956524][T10600] netlink: 'syz.0.1317': attribute type 3 has an invalid length. [ 415.505361][ T30] kauditd_printk_skb: 256 callbacks suppressed [ 415.505379][ T30] audit: type=1400 audit(1780375804.184:2211): avc: denied { read write } for pid=5627 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 415.615616][ T30] audit: type=1400 audit(1780375804.294:2212): avc: denied { read write } for pid=5627 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 415.653824][ T30] audit: type=1400 audit(1780375804.294:2213): avc: denied { read write } for pid=5614 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 415.688594][ T30] audit: type=1400 audit(1780375804.374:2214): avc: denied { read write } for pid=10611 comm="syz.0.1322" name="dlm-control" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 415.725522][ T30] audit: type=1400 audit(1780375804.414:2215): avc: denied { read write } for pid=5627 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 415.793924][ T30] audit: type=1400 audit(1780375804.474:2216): avc: denied { create } for pid=10613 comm="syz.1.1323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 415.795296][T10614] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1323'. [ 415.860374][ T30] audit: type=1400 audit(1780375804.534:2217): avc: denied { create } for pid=10615 comm="syz.0.1324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 415.925387][ T30] audit: type=1400 audit(1780375804.544:2218): avc: denied { execmem } for pid=10615 comm="syz.0.1324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 415.954022][T10614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1323'. [ 415.973322][ T30] audit: type=1400 audit(1780375804.584:2219): avc: denied { read write } for pid=5623 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 415.999007][T10614] dummy0: left promiscuous mode [ 416.025802][ T30] audit: type=1400 audit(1780375804.604:2220): avc: denied { prog_load } for pid=10615 comm="syz.0.1324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 416.063686][T10619] netlink: 'syz.1.1323': attribute type 10 has an invalid length. [ 416.084207][T10619] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1323'. [ 416.104899][T10624] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1326'. [ 416.116203][T10619] dummy0: entered promiscuous mode [ 416.166151][T10627] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10627 comm=syz.4.1326 [ 416.729522][T10641] netlink: 'syz.1.1331': attribute type 3 has an invalid length. [ 416.773633][T10641] netlink: 'syz.1.1331': attribute type 3 has an invalid length. [ 416.951885][T10647] team0: entered promiscuous mode [ 416.951908][T10647] team_slave_0: entered promiscuous mode [ 416.952023][T10647] team_slave_1: entered promiscuous mode [ 416.952115][T10647] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 416.960746][T10647] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 417.480243][T10657] FAULT_INJECTION: forcing a failure. [ 417.480243][T10657] name failslab, interval 1, probability 0, space 0, times 0 [ 417.523735][T10657] CPU: 0 UID: 0 PID: 10657 Comm: syz.0.1338 Tainted: G L syzkaller #0 PREEMPT(full) [ 417.523764][T10657] Tainted: [L]=SOFTLOCKUP [ 417.523778][T10657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 417.523790][T10657] Call Trace: [ 417.523796][T10657] [ 417.523804][T10657] dump_stack_lvl+0x100/0x190 [ 417.523830][T10657] should_fail_ex.cold+0x5/0xa [ 417.523855][T10657] ? tomoyo_encode2+0xfb/0x3c0 [ 417.523882][T10657] should_failslab+0xc2/0x120 [ 417.523902][T10657] __kmalloc_noprof+0xe0/0x850 [ 417.523928][T10657] ? d_absolute_path+0x136/0x1b0 [ 417.523953][T10657] tomoyo_encode2+0xfb/0x3c0 [ 417.523984][T10657] tomoyo_encode+0x29/0x50 [ 417.524011][T10657] tomoyo_realpath_from_path+0x18c/0x690 [ 417.524044][T10657] tomoyo_mount_acl+0x1b6/0x8b0 [ 417.524069][T10657] ? is_bpf_text_address+0x8a/0x1a0 [ 417.524092][T10657] ? bpf_ksym_find+0x128/0x1c0 [ 417.524117][T10657] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 417.524141][T10657] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 417.524165][T10657] ? kernel_text_address+0x8d/0x100 [ 417.524189][T10657] ? unwind_get_return_address+0x59/0xa0 [ 417.524241][T10657] ? tomoyo_domain+0xb2/0x150 [ 417.524259][T10657] ? tomoyo_profile+0x47/0x60 [ 417.524278][T10657] tomoyo_mount_permission+0x214/0x460 [ 417.524301][T10657] ? tomoyo_mount_permission+0x1f6/0x460 [ 417.524327][T10657] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 417.524363][T10657] security_sb_mount+0xdd/0x270 [ 417.524381][T10657] path_mount+0x158/0x23d0 [ 417.524400][T10657] ? __pfx_path_mount+0x10/0x10 [ 417.524415][T10657] ? lockdep_hardirqs_on+0x78/0x100 [ 417.524431][T10657] ? putname+0xb1/0x110 [ 417.524444][T10657] ? kmem_cache_free+0x127/0x6c0 [ 417.524464][T10657] ? __x64_sys_mount+0x293/0x310 [ 417.524479][T10657] __x64_sys_mount+0x293/0x310 [ 417.524496][T10657] ? __pfx___x64_sys_mount+0x10/0x10 [ 417.524513][T10657] ? rcu_is_watching+0x12/0xc0 [ 417.524531][T10657] do_syscall_64+0x115/0x870 [ 417.524545][T10657] ? clear_bhb_loop+0x40/0x90 [ 417.524558][T10657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.524569][T10657] RIP: 0033:0x7fbe8bd9ce59 [ 417.524580][T10657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 417.524590][T10657] RSP: 002b:00007fbe8cba0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 417.524601][T10657] RAX: ffffffffffffffda RBX: 00007fbe8c016090 RCX: 00007fbe8bd9ce59 [ 417.524608][T10657] RDX: 0000200000000080 RSI: 0000200000000100 RDI: 0000000000000000 [ 417.524614][T10657] RBP: 00007fbe8cba0090 R08: 0000200000000400 R09: 0000000000000000 [ 417.524621][T10657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 417.524627][T10657] R13: 00007fbe8c016128 R14: 00007fbe8c016090 R15: 00007ffc383cdc88 [ 417.524641][T10657] [ 417.524740][T10657] ERROR: Out of memory at tomoyo_realpath_from_path. [ 418.245742][T10667] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1342'. [ 418.308062][T10667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1342'. [ 418.355795][T10670] netlink: 'syz.1.1342': attribute type 10 has an invalid length. [ 418.355863][T10667] dummy0: left promiscuous mode [ 418.405382][T10670] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1342'. [ 418.454448][T10670] dummy0: entered promiscuous mode [ 420.513346][ T30] kauditd_printk_skb: 194 callbacks suppressed [ 420.513364][ T30] audit: type=1400 audit(1780375809.206:2415): avc: denied { create } for pid=10727 comm="syz.3.1367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 420.517683][T10728] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1367'. [ 420.571486][ T30] audit: type=1400 audit(1780375809.206:2416): avc: denied { create } for pid=10727 comm="syz.3.1367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 420.628583][ T30] audit: type=1400 audit(1780375809.206:2417): avc: denied { read write } for pid=10727 comm="syz.3.1367" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=0 [ 420.654105][T10731] vlan0: entered allmulticast mode [ 420.665974][T10731] bond0: entered allmulticast mode [ 420.674395][T10731] bond_slave_0: entered allmulticast mode [ 420.685062][T10731] bond_slave_1: entered allmulticast mode [ 420.690844][ T30] audit: type=1400 audit(1780375809.206:2418): avc: denied { mounton } for pid=10727 comm="syz.3.1367" path="/262/file0" dev="tmpfs" ino=1397 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 420.736428][ T30] audit: type=1400 audit(1780375809.256:2419): avc: denied { read write } for pid=5627 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 420.779022][ T30] audit: type=1400 audit(1780375809.296:2420): avc: denied { create } for pid=10729 comm="syz.0.1368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 420.804499][ T30] audit: type=1400 audit(1780375809.296:2421): avc: denied { create } for pid=10729 comm="syz.0.1368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 420.827513][ T30] audit: type=1400 audit(1780375809.296:2422): avc: denied { create } for pid=10729 comm="syz.0.1368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 420.850325][ T30] audit: type=1400 audit(1780375809.306:2423): avc: denied { read } for pid=10729 comm="syz.0.1368" name="system" dev="devtmpfs" ino=701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 420.928434][ T30] audit: type=1400 audit(1780375809.306:2424): avc: denied { create } for pid=10729 comm="syz.0.1368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 421.230001][T10753] FAULT_INJECTION: forcing a failure. [ 421.230001][T10753] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 421.254417][T10753] CPU: 1 UID: 0 PID: 10753 Comm: syz.3.1378 Tainted: G L syzkaller #0 PREEMPT(full) [ 421.254443][T10753] Tainted: [L]=SOFTLOCKUP [ 421.254447][T10753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 421.254453][T10753] Call Trace: [ 421.254457][T10753] [ 421.254462][T10753] dump_stack_lvl+0x100/0x190 [ 421.254479][T10753] should_fail_ex.cold+0x5/0xa [ 421.254494][T10753] _copy_from_user+0x2e/0xd0 [ 421.254509][T10753] copy_msghdr_from_user+0x9f/0x4f0 [ 421.254525][T10753] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 421.254545][T10753] ___sys_sendmsg+0x106/0x1e0 [ 421.254559][T10753] ? __pfx____sys_sendmsg+0x10/0x10 [ 421.254600][T10753] __sys_sendmsg+0x170/0x220 [ 421.254626][T10753] ? __pfx___sys_sendmsg+0x10/0x10 [ 421.254656][T10753] ? rcu_is_watching+0x12/0xc0 [ 421.254675][T10753] do_syscall_64+0x115/0x870 [ 421.254689][T10753] ? clear_bhb_loop+0x40/0x90 [ 421.254702][T10753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.254713][T10753] RIP: 0033:0x7f3e8cb9ce59 [ 421.254728][T10753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 421.254744][T10753] RSP: 002b:00007f3e8da07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 421.254761][T10753] RAX: ffffffffffffffda RBX: 00007f3e8ce15fa0 RCX: 00007f3e8cb9ce59 [ 421.254772][T10753] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 421.254783][T10753] RBP: 00007f3e8da07090 R08: 0000000000000000 R09: 0000000000000000 [ 421.254792][T10753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.254800][T10753] R13: 00007f3e8ce16038 R14: 00007f3e8ce15fa0 R15: 00007ffc2b1ffc78 [ 421.254824][T10753] [ 422.177501][T10782] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1390'. [ 422.193675][T10782] dummy0: left promiscuous mode [ 422.205458][T10782] netlink: 'syz.0.1390': attribute type 10 has an invalid length. [ 422.215189][T10782] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1390'. [ 422.224525][T10782] dummy0: entered promiscuous mode [ 422.616561][T10793] CIFS: VFS: UNC: missing delimiter between hostname and share name [ 422.624903][T10793] CIFS: VFS: Malformed UNC in devname [ 422.688957][T10797] netlink: 'syz.0.1395': attribute type 10 has an invalid length. [ 422.699549][T10797] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1395'. [ 422.709088][T10797] dummy0: entered allmulticast mode [ 422.715753][T10797] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 422.912036][ T5955] Bluetooth: hci5: Frame reassembly failed (-84) [ 423.530170][T10823] FAULT_INJECTION: forcing a failure. [ 423.530170][T10823] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 423.551041][T10823] CPU: 1 UID: 0 PID: 10823 Comm: syz.0.1405 Tainted: G L syzkaller #0 PREEMPT(full) [ 423.551069][T10823] Tainted: [L]=SOFTLOCKUP [ 423.551075][T10823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 423.551086][T10823] Call Trace: [ 423.551092][T10823] [ 423.551098][T10823] dump_stack_lvl+0x100/0x190 [ 423.551124][T10823] should_fail_ex.cold+0x5/0xa [ 423.551148][T10823] _copy_to_user+0x32/0xd0 [ 423.551171][T10823] simple_read_from_buffer+0xcb/0x170 [ 423.551196][T10823] proc_fail_nth_read+0x1af/0x230 [ 423.551218][T10823] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 423.551240][T10823] ? rw_verify_area+0xce/0x6d0 [ 423.551257][T10823] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 423.551284][T10823] vfs_read+0x1e4/0xb30 [ 423.551307][T10823] ? __pfx_vfs_read+0x10/0x10 [ 423.551328][T10823] ? __fget_files+0x215/0x3d0 [ 423.551357][T10823] ? __fget_files+0x21f/0x3d0 [ 423.551387][T10823] ksys_read+0x12a/0x250 [ 423.551407][T10823] ? __pfx_ksys_read+0x10/0x10 [ 423.551429][T10823] ? rcu_is_watching+0x12/0xc0 [ 423.551459][T10823] do_syscall_64+0x115/0x870 [ 423.551482][T10823] ? clear_bhb_loop+0x40/0x90 [ 423.551502][T10823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.551521][T10823] RIP: 0033:0x7fbe8bd5d68e [ 423.551537][T10823] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 423.551554][T10823] RSP: 002b:00007fbe8cbc0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 423.551572][T10823] RAX: ffffffffffffffda RBX: 00007fbe8cbc16c0 RCX: 00007fbe8bd5d68e [ 423.551584][T10823] RDX: 000000000000000f RSI: 00007fbe8cbc10a0 RDI: 0000000000000003 [ 423.551594][T10823] RBP: 00007fbe8cbc1090 R08: 0000000000000000 R09: 0000000000000000 [ 423.551604][T10823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.551615][T10823] R13: 00007fbe8c016038 R14: 00007fbe8c015fa0 R15: 00007ffc383cdc88 [ 423.551640][T10823] [ 424.020211][T10836] netlink: 'syz.0.1411': attribute type 3 has an invalid length. [ 424.040424][T10836] netlink: 'syz.0.1411': attribute type 3 has an invalid length. [ 424.840793][T10849] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1416'. [ 424.881892][T10849] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1416'. [ 424.904918][T10849] dummy0: left promiscuous mode [ 424.921060][T10849] dummy0: left allmulticast mode [ 424.947198][T10849] netlink: 'syz.0.1416': attribute type 10 has an invalid length. [ 424.978101][T10849] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1416'. [ 425.002338][T10849] dummy0: entered promiscuous mode [ 425.048551][ T4936] Bluetooth: hci5: command 0x1003 tx timeout [ 425.062816][ T5617] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 425.123228][T10854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1418'. [ 425.292363][T10863] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1421'. [ 425.574227][T10871] netlink: 'syz.4.1424': attribute type 3 has an invalid length. [ 425.583842][T10871] netlink: 'syz.4.1424': attribute type 3 has an invalid length. [ 425.693292][ T30] kauditd_printk_skb: 289 callbacks suppressed [ 425.693310][ T30] audit: type=1400 audit(1780375814.240:2714): avc: denied { create } for pid=10872 comm="syz.3.1425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 425.696107][T10873] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1425'. [ 425.741254][ T30] audit: type=1400 audit(1780375814.240:2715): avc: denied { create } for pid=10872 comm="syz.3.1425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 425.769837][ T30] audit: type=1400 audit(1780375814.240:2716): avc: denied { prog_load } for pid=10872 comm="syz.3.1425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 425.843776][ T30] audit: type=1400 audit(1780375814.380:2717): avc: denied { read write } for pid=5627 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 425.912103][ T30] audit: type=1400 audit(1780375814.446:2719): avc: denied { read } for pid=10872 comm="syz.3.1425" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 425.935137][ T30] audit: type=1400 audit(1780375814.446:2720): avc: denied { mount } for pid=10872 comm="syz.3.1425" name="/" dev="ramfs" ino=28541 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=0 [ 425.959444][T10879] IPVS: nq: FWM 3 0x00000003 - no destination available [ 425.967688][ T30] audit: type=1400 audit(1780375814.446:2718): avc: denied { create } for pid=10878 comm="syz.0.1426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 426.002995][ T30] audit: type=1400 audit(1780375814.530:2721): avc: denied { read write } for pid=5627 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 426.093255][ T30] audit: type=1400 audit(1780375814.614:2722): avc: denied { read write } for pid=5630 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 426.153707][ T30] audit: type=1400 audit(1780375814.670:2723): avc: denied { block_suspend } for pid=10880 comm="syz.0.1427" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 427.093762][T10911] netlink: 'syz.2.1439': attribute type 3 has an invalid length. [ 427.105124][T10911] netlink: 'syz.2.1439': attribute type 3 has an invalid length. [ 427.781638][T10920] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.825492][T10920] veth0_vlan: left promiscuous mode [ 427.844665][T10920] veth0_vlan: entered promiscuous mode [ 427.966714][T10920] 8021q: adding VLAN 0 to HW filter on device bond1 [ 428.004589][ T5964] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.011734][ T5964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.558551][T10931] netlink: 'syz.1.1443': attribute type 9 has an invalid length. [ 428.652572][T10921] syz.2.1441 (10921): drop_caches: 2 [ 429.390466][T10949] netlink: 'syz.0.1451': attribute type 3 has an invalid length. [ 429.401128][T10949] netlink: 'syz.0.1451': attribute type 3 has an invalid length. [ 429.921819][ T4936] Bluetooth: hci5: command 0x1003 tx timeout [ 429.932231][ T5617] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 430.912297][T10989] netlink: 'syz.0.1464': attribute type 3 has an invalid length. [ 430.932271][T10989] netlink: 'syz.0.1464': attribute type 3 has an invalid length. [ 431.051598][ T30] kauditd_printk_skb: 187 callbacks suppressed [ 431.051616][ T30] audit: type=1400 audit(1780375819.255:2911): avc: denied { create } for pid=10994 comm="syz.2.1467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 431.104357][ T30] audit: type=1400 audit(1780375819.283:2912): avc: denied { create } for pid=10994 comm="syz.2.1467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=0 [ 431.158487][ T30] audit: type=1400 audit(1780375819.292:2913): avc: denied { read } for pid=10994 comm="syz.2.1467" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 431.196393][ T30] audit: type=1400 audit(1780375819.301:2914): avc: denied { write } for pid=10996 comm="syz.4.1468" name="ptype" dev="proc" ino=4026532977 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=0 [ 431.243527][ T30] audit: type=1400 audit(1780375819.329:2915): avc: denied { write } for pid=10992 comm="syz.3.1466" name="route" dev="proc" ino=4026533061 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=0 [ 431.297301][ T30] audit: type=1400 audit(1780375819.386:2916): avc: denied { create } for pid=10992 comm="syz.3.1466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 431.346966][ T30] audit: type=1400 audit(1780375819.395:2917): avc: denied { create } for pid=10992 comm="syz.3.1466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 431.371351][ T30] audit: type=1400 audit(1780375819.395:2918): avc: denied { create } for pid=10994 comm="syz.2.1467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 431.395999][ T30] audit: type=1400 audit(1780375819.395:2919): avc: denied { create } for pid=10994 comm="syz.2.1467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 431.421375][ T30] audit: type=1400 audit(1780375819.414:2920): avc: denied { create } for pid=10996 comm="syz.4.1468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 431.673110][T11026] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1476'. [ 431.698913][T11028] FAULT_INJECTION: forcing a failure. [ 431.698913][T11028] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 431.756311][T11028] CPU: 1 UID: 0 PID: 11028 Comm: syz.4.1475 Tainted: G L syzkaller #0 PREEMPT(full) [ 431.756342][T11028] Tainted: [L]=SOFTLOCKUP [ 431.756349][T11028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 431.756358][T11028] Call Trace: [ 431.756364][T11028] [ 431.756371][T11028] dump_stack_lvl+0x100/0x190 [ 431.756398][T11028] should_fail_ex.cold+0x5/0xa [ 431.756424][T11028] _copy_from_user+0x2e/0xd0 [ 431.756447][T11028] do_ip_vs_set_ctl+0x53c/0xc90 [ 431.756480][T11028] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 431.756508][T11028] ? trace_contention_end+0x122/0x170 [ 431.756541][T11028] ? nf_sockopt_find.isra.0+0x222/0x290 [ 431.756572][T11028] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 431.756618][T11028] ? nf_setsockopt+0x8d/0xf0 [ 431.756641][T11028] nf_setsockopt+0x8d/0xf0 [ 431.756669][T11028] ip_setsockopt+0xcb/0xf0 [ 431.756698][T11028] sctp_setsockopt+0x161/0xb370 [ 431.756727][T11028] ? __pfx_sctp_setsockopt+0x10/0x10 [ 431.756748][T11028] ? __fget_files+0x215/0x3d0 [ 431.756773][T11028] ? selinux_socket_setsockopt+0x6a/0x80 [ 431.756796][T11028] ? sock_common_setsockopt+0x2e/0xf0 [ 431.756814][T11028] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 431.756836][T11028] do_sock_setsockopt+0xf3/0x1d0 [ 431.756864][T11028] __sys_setsockopt+0x195/0x220 [ 431.756894][T11028] __x64_sys_setsockopt+0xbd/0x160 [ 431.756918][T11028] ? do_syscall_64+0x90/0x870 [ 431.756940][T11028] ? lockdep_hardirqs_on+0x78/0x100 [ 431.756962][T11028] do_syscall_64+0x115/0x870 [ 431.756984][T11028] ? clear_bhb_loop+0x40/0x90 [ 431.757007][T11028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.757025][T11028] RIP: 0033:0x7fe50fd9ce59 [ 431.757040][T11028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 431.757056][T11028] RSP: 002b:00007fe510bf9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 431.757074][T11028] RAX: ffffffffffffffda RBX: 00007fe510016090 RCX: 00007fe50fd9ce59 [ 431.757083][T11028] RDX: 0000000000000487 RSI: 0000000000000000 RDI: 0000000000000007 [ 431.757093][T11028] RBP: 00007fe510bf9090 R08: 0000000000000044 R09: 0000000000000000 [ 431.757103][T11028] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 431.757113][T11028] R13: 00007fe510016128 R14: 00007fe510016090 R15: 00007ffeabedf4a8 [ 431.757136][T11028] [ 432.263902][T11035] FAULT_INJECTION: forcing a failure. [ 432.263902][T11035] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 432.284062][T11035] CPU: 1 UID: 0 PID: 11035 Comm: syz.2.1478 Tainted: G L syzkaller #0 PREEMPT(full) [ 432.284096][T11035] Tainted: [L]=SOFTLOCKUP [ 432.284103][T11035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 432.284114][T11035] Call Trace: [ 432.284121][T11035] [ 432.284128][T11035] dump_stack_lvl+0x100/0x190 [ 432.284154][T11035] should_fail_ex.cold+0x5/0xa [ 432.284181][T11035] _copy_from_iter+0x1f4/0x1690 [ 432.284208][T11035] ? __asan_memset+0x23/0x50 [ 432.284235][T11035] ? __pfx__copy_from_iter+0x10/0x10 [ 432.284257][T11035] ? __pfx___alloc_skb+0x10/0x10 [ 432.284282][T11035] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 432.284318][T11035] netlink_sendmsg+0x808/0xda0 [ 432.284346][T11035] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.284367][T11035] ? __might_fault+0x60/0x140 [ 432.284402][T11035] ____sys_sendmsg+0x9e1/0xb70 [ 432.284422][T11035] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.284446][T11035] ? __pfx_____sys_sendmsg+0x10/0x10 [ 432.284474][T11035] ? rcu_is_watching+0x12/0xc0 [ 432.284501][T11035] ? ___sys_sendmsg+0x19d/0x1e0 [ 432.284521][T11035] ? kfree+0x1dd/0x6c0 [ 432.284550][T11035] ___sys_sendmsg+0x190/0x1e0 [ 432.284574][T11035] ? __pfx____sys_sendmsg+0x10/0x10 [ 432.284619][T11035] ? __pfx___might_resched+0x10/0x10 [ 432.284649][T11035] __sys_sendmmsg+0x205/0x430 [ 432.284679][T11035] ? __pfx___sys_sendmmsg+0x10/0x10 [ 432.284715][T11035] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 432.284751][T11035] ? fput+0x79/0x100 [ 432.284776][T11035] ? ksys_write+0x1ac/0x250 [ 432.284795][T11035] ? __pfx_ksys_write+0x10/0x10 [ 432.284819][T11035] __x64_sys_sendmmsg+0x9c/0x100 [ 432.284851][T11035] ? lockdep_hardirqs_on+0x78/0x100 [ 432.284874][T11035] do_syscall_64+0x115/0x870 [ 432.284895][T11035] ? clear_bhb_loop+0x40/0x90 [ 432.284918][T11035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.284936][T11035] RIP: 0033:0x7f488bf9ce59 [ 432.284951][T11035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 432.284968][T11035] RSP: 002b:00007f488cf21028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 432.284985][T11035] RAX: ffffffffffffffda RBX: 00007f488c215fa0 RCX: 00007f488bf9ce59 [ 432.284996][T11035] RDX: 0400000000000047 RSI: 0000200000000000 RDI: 0000000000000003 [ 432.285007][T11035] RBP: 00007f488cf21090 R08: 0000000000000000 R09: 0000000000000000 [ 432.285018][T11035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 432.285027][T11035] R13: 00007f488c216038 R14: 00007f488c215fa0 R15: 00007ffc5688f3e8 [ 432.285051][T11035] [ 432.724650][T11045] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29200 sclass=netlink_route_socket pid=11045 comm=syz.1.1483 [ 432.753128][T11047] netlink: 'syz.0.1484': attribute type 3 has an invalid length. [ 432.761326][T11047] netlink: 'syz.0.1484': attribute type 3 has an invalid length. [ 433.482776][T11070] bond4: entered promiscuous mode [ 434.001068][T11092] netlink: 'syz.0.1502': attribute type 3 has an invalid length. [ 434.029026][T11092] netlink: 'syz.0.1502': attribute type 3 has an invalid length. [ 434.146391][T11098] netlink: 'syz.4.1504': attribute type 39 has an invalid length. [ 435.236822][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 435.243300][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 435.659229][T11118] netlink: 'syz.0.1511': attribute type 21 has an invalid length. [ 436.601013][ T30] kauditd_printk_skb: 198 callbacks suppressed [ 436.601028][ T30] audit: type=1400 audit(1780375824.447:3119): avc: denied { read write } for pid=5627 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 436.642152][ T30] audit: type=1400 audit(1780375824.484:3120): avc: denied { read } for pid=11122 comm="syz.0.1512" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=0 [ 436.667869][ T30] audit: type=1400 audit(1780375824.484:3121): avc: denied { allowed } for pid=11122 comm="syz.0.1512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 436.700906][ T30] audit: type=1400 audit(1780375824.484:3122): avc: denied { prog_load } for pid=11122 comm="syz.0.1512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 436.722153][ T30] audit: type=1400 audit(1780375824.484:3123): avc: denied { create } for pid=11122 comm="syz.0.1512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 436.772350][ T30] audit: type=1400 audit(1780375824.484:3124): avc: denied { prog_load } for pid=11122 comm="syz.0.1512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 436.802640][ T30] audit: type=1400 audit(1780375824.484:3125): avc: denied { prog_load } for pid=11122 comm="syz.0.1512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 436.825190][ T30] audit: type=1400 audit(1780375824.484:3126): avc: denied { allowed } for pid=11122 comm="syz.0.1512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 436.845637][ T30] audit: type=1400 audit(1780375824.531:3127): avc: denied { read write } for pid=5614 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 436.871135][ T30] audit: type=1400 audit(1780375824.587:3128): avc: denied { create } for pid=11124 comm="syz.1.1513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=0 [ 436.893016][T11131] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1516'. [ 436.969709][T11135] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2576 sclass=netlink_route_socket pid=11135 comm=syz.3.1517 [ 437.165430][T11144] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 438.779357][T11177] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1533'. [ 440.037340][T11207] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1545'. [ 440.118775][T11207] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1545'. [ 441.309622][T11244] netlink: 'syz.3.1560': attribute type 3 has an invalid length. [ 441.323976][T11244] netlink: 'syz.3.1560': attribute type 3 has an invalid length. [ 441.565491][T11250] FAULT_INJECTION: forcing a failure. [ 441.565491][T11250] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 441.647804][T11250] CPU: 0 UID: 0 PID: 11250 Comm: syz.2.1562 Tainted: G L syzkaller #0 PREEMPT(full) [ 441.647834][T11250] Tainted: [L]=SOFTLOCKUP [ 441.647841][T11250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 441.647851][T11250] Call Trace: [ 441.647857][T11250] [ 441.647864][T11250] dump_stack_lvl+0x100/0x190 [ 441.647890][T11250] should_fail_ex.cold+0x5/0xa [ 441.647913][T11250] _copy_from_iter+0x1f4/0x1690 [ 441.647936][T11250] ? __asan_memset+0x23/0x50 [ 441.647962][T11250] ? __pfx__copy_from_iter+0x10/0x10 [ 441.647982][T11250] ? __pfx___alloc_skb+0x10/0x10 [ 441.648004][T11250] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 441.648037][T11250] netlink_sendmsg+0x808/0xda0 [ 441.648064][T11250] ? __pfx_netlink_sendmsg+0x10/0x10 [ 441.648083][T11250] ? __might_fault+0x60/0x140 [ 441.648118][T11250] ____sys_sendmsg+0x9e1/0xb70 [ 441.648136][T11250] ? __pfx_netlink_sendmsg+0x10/0x10 [ 441.648157][T11250] ? __pfx_____sys_sendmsg+0x10/0x10 [ 441.648180][T11250] ? rcu_is_watching+0x12/0xc0 [ 441.648203][T11250] ? ___sys_sendmsg+0x19d/0x1e0 [ 441.648221][T11250] ? kfree+0x1dd/0x6c0 [ 441.648249][T11250] ___sys_sendmsg+0x190/0x1e0 [ 441.648272][T11250] ? __pfx____sys_sendmsg+0x10/0x10 [ 441.648317][T11250] ? __pfx___might_resched+0x10/0x10 [ 441.648347][T11250] __sys_sendmmsg+0x205/0x430 [ 441.648377][T11250] ? __pfx___sys_sendmmsg+0x10/0x10 [ 441.648411][T11250] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 441.648446][T11250] ? fput+0x79/0x100 [ 441.648470][T11250] ? ksys_write+0x1ac/0x250 [ 441.648488][T11250] ? __pfx_ksys_write+0x10/0x10 [ 441.648512][T11250] __x64_sys_sendmmsg+0x9c/0x100 [ 441.648537][T11250] ? lockdep_hardirqs_on+0x78/0x100 [ 441.648557][T11250] do_syscall_64+0x115/0x870 [ 441.648579][T11250] ? clear_bhb_loop+0x40/0x90 [ 441.648603][T11250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.648620][T11250] RIP: 0033:0x7f488bf9ce59 [ 441.648635][T11250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 441.648650][T11250] RSP: 002b:00007f488cf21028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 441.648667][T11250] RAX: ffffffffffffffda RBX: 00007f488c215fa0 RCX: 00007f488bf9ce59 [ 441.648678][T11250] RDX: 0400000000000047 RSI: 0000200000000000 RDI: 0000000000000004 [ 441.648689][T11250] RBP: 00007f488cf21090 R08: 0000000000000000 R09: 0000000000000000 [ 441.648698][T11250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.648708][T11250] R13: 00007f488c216038 R14: 00007f488c215fa0 R15: 00007ffc5688f3e8 [ 441.648731][T11250] [ 441.979136][ T30] kauditd_printk_skb: 282 callbacks suppressed [ 441.979155][ T30] audit: type=1400 audit(1780375829.452:3411): avc: denied { read } for pid=11257 comm="syz.4.1567" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 442.209615][ T30] audit: type=1400 audit(1780375829.527:3412): avc: denied { create } for pid=11257 comm="syz.4.1567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 442.282861][ T30] audit: type=1400 audit(1780375829.695:3413): avc: denied { prog_load } for pid=11253 comm="syz.1.1565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 442.348920][ T30] audit: type=1400 audit(1780375829.695:3414): avc: denied { prog_load } for pid=11253 comm="syz.1.1565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 442.414391][ T30] audit: type=1400 audit(1780375829.695:3415): avc: denied { read write } for pid=5615 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 442.481363][ T30] audit: type=1400 audit(1780375829.760:3416): avc: denied { create } for pid=11260 comm="syz.3.1568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=0 [ 442.545926][ T30] audit: type=1400 audit(1780375829.807:3417): avc: denied { write } for pid=11260 comm="syz.3.1568" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=0 [ 442.609859][ T30] audit: type=1400 audit(1780375829.845:3418): avc: denied { read } for pid=11260 comm="syz.3.1568" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 442.672894][ T30] audit: type=1400 audit(1780375829.845:3419): avc: denied { read } for pid=11260 comm="syz.3.1568" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 442.736489][ T30] audit: type=1400 audit(1780375829.845:3420): avc: denied { prog_load } for pid=11260 comm="syz.3.1568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 442.806301][ T4985] udevd[4985]: worker [6217] /devices/platform/dummy_hcd.4/usb5/5-1 is taking a long time [ 442.900150][T11268] FAULT_INJECTION: forcing a failure. [ 442.900150][T11268] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 442.984121][T11268] CPU: 0 UID: 0 PID: 11268 Comm: syz.2.1569 Tainted: G L syzkaller #0 PREEMPT(full) [ 442.984153][T11268] Tainted: [L]=SOFTLOCKUP [ 442.984160][T11268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 442.984170][T11268] Call Trace: [ 442.984176][T11268] [ 442.984184][T11268] dump_stack_lvl+0x100/0x190 [ 442.984212][T11268] should_fail_ex.cold+0x5/0xa [ 442.984238][T11268] _copy_from_user+0x2e/0xd0 [ 442.984261][T11268] kstrtouint_from_user+0xd6/0x1d0 [ 442.984289][T11268] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 442.984315][T11268] ? __lock_acquire+0x4a5/0x2630 [ 442.984342][T11268] ? lock_acquire+0x1b1/0x370 [ 442.984369][T11268] proc_fail_nth_write+0x83/0x220 [ 442.984390][T11268] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 442.984418][T11268] vfs_write+0x2aa/0x1070 [ 442.984437][T11268] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 442.984458][T11268] ? __pfx_vfs_write+0x10/0x10 [ 442.984476][T11268] ? __fget_files+0x215/0x3d0 [ 442.984504][T11268] ? __fget_files+0x21f/0x3d0 [ 442.984535][T11268] ksys_write+0x12a/0x250 [ 442.984555][T11268] ? __pfx_ksys_write+0x10/0x10 [ 442.984576][T11268] ? rcu_is_watching+0x12/0xc0 [ 442.984606][T11268] do_syscall_64+0x115/0x870 [ 442.984630][T11268] ? clear_bhb_loop+0x40/0x90 [ 442.984653][T11268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.984671][T11268] RIP: 0033:0x7f488bf5d68e [ 442.984687][T11268] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 442.984705][T11268] RSP: 002b:00007f488cefffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 442.984722][T11268] RAX: ffffffffffffffda RBX: 00007f488cf006c0 RCX: 00007f488bf5d68e [ 442.984734][T11268] RDX: 0000000000000001 RSI: 00007f488cf000a0 RDI: 0000000000000005 [ 442.984745][T11268] RBP: 00007f488cf00090 R08: 0000000000000000 R09: 0000000000000000 [ 442.984756][T11268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 442.984767][T11268] R13: 00007f488c216128 R14: 00007f488c216090 R15: 00007ffc5688f3e8 [ 442.984792][T11268] [ 443.662781][T11273] syzkaller0: entered promiscuous mode [ 443.678694][T11273] syzkaller0: entered allmulticast mode [ 443.868184][T11275] dummy0: left promiscuous mode [ 444.006752][T11275] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 444.031857][T11275] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 444.312355][T11285] PKCS7: Unknown OID: [4] 0.0 [ 444.317180][T11285] PKCS7: Only support pkcs7_signedData type [ 444.334835][T11285] xt_policy: output policy not valid in PREROUTING and INPUT [ 444.356657][T11275] bridge0: left promiscuous mode [ 444.391691][ T5964] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.410195][ T5964] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.452135][T11286] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1576'. [ 444.473379][ T5964] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.515228][ T8805] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.612957][T11292] netlink: 'syz.4.1578': attribute type 3 has an invalid length. [ 444.637690][T11292] netlink: 'syz.4.1578': attribute type 3 has an invalid length. [ 444.673872][T11294] netlink: 'syz.0.1579': attribute type 1 has an invalid length. [ 444.797237][T11296] xt_connbytes: Forcing CT accounting to be enabled [ 445.585401][ T5720] libceph: connect (1)[c::]:6789 error -101 [ 445.601807][ T5720] libceph: mon0 (1)[c::]:6789 connect error [ 445.891754][ T5733] libceph: connect (1)[c::]:6789 error -101 [ 445.897941][ T5733] libceph: mon0 (1)[c::]:6789 connect error [ 445.961855][T11327] Cannot find add_set index 3 as target [ 446.256135][T11340] FAULT_INJECTION: forcing a failure. [ 446.256135][T11340] name failslab, interval 1, probability 0, space 0, times 0 [ 446.270220][T11340] CPU: 1 UID: 0 PID: 11340 Comm: syz.1.1594 Tainted: G L syzkaller #0 PREEMPT(full) [ 446.270250][T11340] Tainted: [L]=SOFTLOCKUP [ 446.270256][T11340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 446.270267][T11340] Call Trace: [ 446.270273][T11340] [ 446.270280][T11340] dump_stack_lvl+0x100/0x190 [ 446.270323][T11340] should_fail_ex.cold+0x5/0xa [ 446.270347][T11340] should_failslab+0xc2/0x120 [ 446.270368][T11340] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 446.270395][T11340] ? __d_alloc+0x34/0xa40 [ 446.270426][T11340] __d_alloc+0x34/0xa40 [ 446.270450][T11340] ? __pfx_stack_trace_save+0x10/0x10 [ 446.270471][T11340] d_alloc_parallel+0x111/0x14e0 [ 446.270493][T11340] ? kasan_save_stack+0x3f/0x50 [ 446.270507][T11340] ? kasan_save_stack+0x30/0x50 [ 446.270523][T11340] ? kasan_save_free_info+0x3b/0x70 [ 446.270546][T11340] ? link_path_walk+0x161f/0x1cc0 [ 446.270567][T11340] ? __pfx_d_alloc_parallel+0x10/0x10 [ 446.270588][T11340] ? lockdep_init_map_type+0x5c/0x250 [ 446.270611][T11340] ? lockdep_init_map_type+0x5c/0x250 [ 446.270633][T11340] __lookup_slow+0x193/0x460 [ 446.270656][T11340] ? __pfx___lookup_slow+0x10/0x10 [ 446.270702][T11340] lookup_slow+0x50/0x70 [ 446.270729][T11340] link_path_walk+0x1377/0x1cc0 [ 446.270761][T11340] path_openat+0x1be/0x31a0 [ 446.270781][T11340] ? kasan_save_stack+0x3f/0x50 [ 446.270797][T11340] ? kasan_save_stack+0x30/0x50 [ 446.270812][T11340] ? kasan_save_track+0x14/0x30 [ 446.270828][T11340] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 446.270861][T11340] ? __pfx_path_openat+0x10/0x10 [ 446.270894][T11340] do_file_open+0x20e/0x430 [ 446.270919][T11340] ? __pfx_do_file_open+0x10/0x10 [ 446.270952][T11340] ? __pfx_kfree_link+0x10/0x10 [ 446.270979][T11340] ? alloc_fd+0x476/0x790 [ 446.271005][T11340] ? do_getname+0x191/0x390 [ 446.271034][T11340] do_sys_openat2+0x10d/0x1e0 [ 446.271062][T11340] ? __pfx_do_sys_openat2+0x10/0x10 [ 446.271086][T11340] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 446.271114][T11340] ? __fget_files+0x21f/0x3d0 [ 446.271146][T11340] __x64_sys_openat+0x12d/0x210 [ 446.271173][T11340] ? __pfx___x64_sys_openat+0x10/0x10 [ 446.271198][T11340] ? ksys_write+0x1ac/0x250 [ 446.271221][T11340] ? rcu_is_watching+0x12/0xc0 [ 446.271251][T11340] do_syscall_64+0x115/0x870 [ 446.271273][T11340] ? clear_bhb_loop+0x40/0x90 [ 446.271295][T11340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.271313][T11340] RIP: 0033:0x7f942055d68e [ 446.271329][T11340] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 446.271347][T11340] RSP: 002b:00007f9421446ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 446.271365][T11340] RAX: ffffffffffffffda RBX: 00007f94214476c0 RCX: 00007f942055d68e [ 446.271377][T11340] RDX: 0000000000000002 RSI: 00007f9421446f90 RDI: ffffffffffffff9c [ 446.271388][T11340] RBP: 00007f9421447090 R08: 0000000000000000 R09: 0000000000000000 [ 446.271399][T11340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.271410][T11340] R13: 00007f9420816038 R14: 00007f9420815fa0 R15: 00007ffe769887b8 [ 446.271435][T11340] [ 446.272199][T11338] netlink: 'syz.4.1593': attribute type 3 has an invalid length. [ 446.338384][T11340] kernel read not supported for file /!s"D×$Öà‹Û (pid: 11340 comm: syz.1.1594) [ 446.339253][T11338] netlink: 'syz.4.1593': attribute type 3 has an invalid length. [ 446.426030][T11320] ceph: No mds server is up or the cluster is laggy [ 446.458357][ T5733] libceph: connect (1)[c::]:6789 error -101 [ 446.639018][ T5733] libceph: mon0 (1)[c::]:6789 connect error [ 446.870027][T11358] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1600'. [ 446.880301][T11358] netlink: 'syz.0.1600': attribute type 10 has an invalid length. [ 446.888477][T11358] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1600'. [ 446.898775][T11358] dummy0: entered promiscuous mode [ 447.267616][T11361] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1601'. [ 447.290427][T11361] netlink: 'syz.2.1601': attribute type 10 has an invalid length. [ 447.309153][T11361] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1601'. [ 447.371907][ T30] kauditd_printk_skb: 147 callbacks suppressed [ 447.371923][ T30] audit: type=1400 audit(1780375834.522:3568): avc: denied { read write } for pid=5615 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 447.415129][ T30] audit: type=1400 audit(1780375834.569:3569): avc: denied { create } for pid=11368 comm="syz.4.1604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 447.463671][ T30] audit: type=1400 audit(1780375834.569:3570): avc: denied { read } for pid=11368 comm="syz.4.1604" dev="nsfs" ino=4026532968 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 447.491164][ T30] audit: type=1400 audit(1780375834.569:3571): avc: denied { execmem } for pid=11368 comm="syz.4.1604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 447.562447][ T30] audit: type=1400 audit(1780375834.606:3572): avc: denied { read write } for pid=5614 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 447.669895][ T30] audit: type=1400 audit(1780375834.709:3573): avc: denied { read write } for pid=5623 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 447.700469][T11383] ÿ: renamed from bond_slave_0 [ 447.705475][T11382] kAFS: unable to lookup cell 'ÿ' [ 447.800386][ T30] audit: type=1400 audit(1780375834.737:3574): avc: denied { execmem } for pid=11377 comm="syz.1.1607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 447.927962][ T30] audit: type=1400 audit(1780375834.747:3575): avc: denied { create } for pid=11377 comm="syz.1.1607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=0 [ 448.018126][ T30] audit: type=1400 audit(1780375834.822:3576): avc: denied { write } for pid=11377 comm="syz.1.1607" name="001" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=0 [ 448.129593][ T30] audit: type=1400 audit(1780375834.868:3577): avc: denied { read write } for pid=5623 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 448.217158][T11382] netlink: 'syz.3.1606': attribute type 10 has an invalid length. [ 448.259315][T11392] netlink: 'syz.3.1606': attribute type 10 has an invalid length. [ 448.294690][T11382] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 448.341131][T11382] team0: Port device netdevsim1 added [ 448.533630][T11400] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1614'. [ 448.545022][T11395] netlink: 'syz.2.1612': attribute type 3 has an invalid length. [ 448.554777][T11395] netlink: 'syz.2.1612': attribute type 3 has an invalid length. [ 448.625255][T11392] team0: Port device netdevsim1 removed [ 448.643913][T11403] netlink: 'syz.0.1614': attribute type 10 has an invalid length. [ 448.666888][T11403] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1614'. [ 448.676176][T11392] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 448.757518][T11392] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 448.769066][T11400] dummy0: left promiscuous mode [ 448.814462][T11403] dummy0: entered promiscuous mode [ 449.855171][T11438] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1627'. [ 449.910238][T11438] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1627'. [ 451.094257][T11467] FAULT_INJECTION: forcing a failure. [ 451.094257][T11467] name failslab, interval 1, probability 0, space 0, times 0 [ 451.123435][T11467] CPU: 1 UID: 0 PID: 11467 Comm: syz.3.1638 Tainted: G L syzkaller #0 PREEMPT(full) [ 451.123465][T11467] Tainted: [L]=SOFTLOCKUP [ 451.123472][T11467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 451.123483][T11467] Call Trace: [ 451.123490][T11467] [ 451.123497][T11467] dump_stack_lvl+0x100/0x190 [ 451.123526][T11467] should_fail_ex.cold+0x5/0xa [ 451.123551][T11467] should_failslab+0xc2/0x120 [ 451.123571][T11467] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 451.123595][T11467] ? security_inode_alloc+0x3b/0x2c0 [ 451.123618][T11467] ? lockdep_init_map_type+0x5c/0x250 [ 451.123642][T11467] security_inode_alloc+0x3b/0x2c0 [ 451.123665][T11467] inode_init_always_gfp+0xc77/0xfb0 [ 451.123692][T11467] alloc_inode+0x8e/0x250 [ 451.123717][T11467] new_inode+0x22/0x1c0 [ 451.123735][T11467] __debugfs_create_file+0x105/0x4f0 [ 451.123761][T11467] debugfs_create_file_full+0x41/0x60 [ 451.123784][T11467] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 451.123805][T11467] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 451.123833][T11467] ? __kvmalloc_node_noprof+0x37b/0xa00 [ 451.123850][T11467] ? alloc_netdev_mqs+0xd7/0x1560 [ 451.123867][T11467] ? lockdep_init_map_type+0x5c/0x250 [ 451.123882][T11467] ? __pfx_geneve_setup+0x10/0x10 [ 451.123897][T11467] alloc_netdev_mqs+0x314/0x1560 [ 451.123916][T11467] rtnl_create_link+0xc13/0xf80 [ 451.123935][T11467] rtnl_newlink+0x13bd/0x2380 [ 451.123957][T11467] ? __pfx_rtnl_newlink+0x10/0x10 [ 451.123973][T11467] ? find_held_lock+0x2b/0x80 [ 451.123983][T11467] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 451.123995][T11467] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 451.124010][T11467] ? avc_has_perm_noaudit+0x145/0x3b0 [ 451.124028][T11467] ? preempt_schedule_common+0x42/0xc0 [ 451.124047][T11467] ? find_held_lock+0x2b/0x80 [ 451.124056][T11467] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 451.124066][T11467] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 451.124077][T11467] ? __pfx_rtnl_newlink+0x10/0x10 [ 451.124094][T11467] rtnetlink_rcv_msg+0x95e/0xe90 [ 451.124106][T11467] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 451.124128][T11467] netlink_rcv_skb+0x159/0x420 [ 451.124150][T11467] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 451.124164][T11467] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 451.124201][T11467] netlink_unicast+0x585/0x850 [ 451.124223][T11467] ? __pfx_netlink_unicast+0x10/0x10 [ 451.124240][T11467] netlink_sendmsg+0x8b0/0xda0 [ 451.124256][T11467] ? __pfx_netlink_sendmsg+0x10/0x10 [ 451.124268][T11467] ? __might_fault+0x60/0x140 [ 451.124290][T11467] ____sys_sendmsg+0x9e1/0xb70 [ 451.124302][T11467] ? __pfx_netlink_sendmsg+0x10/0x10 [ 451.124316][T11467] ? __pfx_____sys_sendmsg+0x10/0x10 [ 451.124335][T11467] ___sys_sendmsg+0x190/0x1e0 [ 451.124350][T11467] ? __pfx____sys_sendmsg+0x10/0x10 [ 451.124381][T11467] __sys_sendmsg+0x170/0x220 [ 451.124398][T11467] ? __pfx___sys_sendmsg+0x10/0x10 [ 451.124420][T11467] ? rcu_is_watching+0x12/0xc0 [ 451.124438][T11467] do_syscall_64+0x115/0x870 [ 451.124452][T11467] ? clear_bhb_loop+0x40/0x90 [ 451.124466][T11467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.124477][T11467] RIP: 0033:0x7f3e8cb9ce59 [ 451.124487][T11467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 451.124497][T11467] RSP: 002b:00007f3e8da07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 451.124509][T11467] RAX: ffffffffffffffda RBX: 00007f3e8ce15fa0 RCX: 00007f3e8cb9ce59 [ 451.124516][T11467] RDX: 0000000000040080 RSI: 0000200000000000 RDI: 0000000000000003 [ 451.124522][T11467] RBP: 00007f3e8da07090 R08: 0000000000000000 R09: 0000000000000000 [ 451.124528][T11467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 451.124534][T11467] R13: 00007f3e8ce16038 R14: 00007f3e8ce15fa0 R15: 00007ffc2b1ffc78 [ 451.124549][T11467] [ 451.127280][T11467] debugfs: out of free dentries, can not create file 'netdev@ffff88802c422658' [ 451.667045][T11473] FAULT_INJECTION: forcing a failure. [ 451.667045][T11473] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 451.759801][T11473] CPU: 1 UID: 0 PID: 11473 Comm: syz.4.1641 Tainted: G L syzkaller #0 PREEMPT(full) [ 451.759831][T11473] Tainted: [L]=SOFTLOCKUP [ 451.759837][T11473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 451.759844][T11473] Call Trace: [ 451.759849][T11473] [ 451.759854][T11473] dump_stack_lvl+0x100/0x190 [ 451.759871][T11473] should_fail_ex.cold+0x5/0xa [ 451.759887][T11473] _copy_from_iter+0x1f4/0x1690 [ 451.759902][T11473] ? _copy_from_iter+0x270/0x1690 [ 451.759915][T11473] ? __pfx__copy_from_iter+0x10/0x10 [ 451.759930][T11473] ? __pfx__copy_from_iter+0x10/0x10 [ 451.759946][T11473] copy_page_from_iter+0x238/0x300 [ 451.759962][T11473] skb_copy_datagram_from_iter+0x399/0x720 [ 451.759981][T11473] tun_get_user+0x1889/0x3c20 [ 451.760004][T11473] ? __pfx_tun_get_user+0x10/0x10 [ 451.760020][T11473] ? __file_has_perm+0x336/0x460 [ 451.760037][T11473] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 451.760057][T11473] ? find_held_lock+0x2b/0x80 [ 451.760067][T11473] ? tun_get+0x191/0x370 [ 451.760081][T11473] ? tun_get+0x191/0x370 [ 451.760099][T11473] tun_chr_write_iter+0xdc/0x200 [ 451.760117][T11473] vfs_write+0x6ac/0x1070 [ 451.760130][T11473] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 451.760148][T11473] ? __pfx_vfs_write+0x10/0x10 [ 451.760158][T11473] ? find_held_lock+0x2b/0x80 [ 451.760176][T11473] ksys_write+0x12a/0x250 [ 451.760188][T11473] ? __pfx_ksys_write+0x10/0x10 [ 451.760200][T11473] ? rcu_is_watching+0x12/0xc0 [ 451.760219][T11473] do_syscall_64+0x115/0x870 [ 451.760233][T11473] ? clear_bhb_loop+0x40/0x90 [ 451.760246][T11473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.760257][T11473] RIP: 0033:0x7fe50fd5d68e [ 451.760267][T11473] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 451.760278][T11473] RSP: 002b:00007fe510c19fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 451.760289][T11473] RAX: ffffffffffffffda RBX: 00007fe510c1a6c0 RCX: 00007fe50fd5d68e [ 451.760296][T11473] RDX: 000000000000fdef RSI: 00002000000001c0 RDI: 00000000000000c8 [ 451.760302][T11473] RBP: 00007fe510c1a090 R08: 0000000000000000 R09: 0000000000000000 [ 451.760309][T11473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 451.760315][T11473] R13: 00007fe510016038 R14: 00007fe510015fa0 R15: 00007ffeabedf4a8 [ 451.760328][T11473] [ 452.508297][T11484] FAULT_INJECTION: forcing a failure. [ 452.508297][T11484] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 452.597877][T11484] CPU: 1 UID: 0 PID: 11484 Comm: syz.4.1645 Tainted: G L syzkaller #0 PREEMPT(full) [ 452.597897][T11484] Tainted: [L]=SOFTLOCKUP [ 452.597901][T11484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 452.597907][T11484] Call Trace: [ 452.597912][T11484] [ 452.597917][T11484] dump_stack_lvl+0x100/0x190 [ 452.597935][T11484] should_fail_ex.cold+0x5/0xa [ 452.597950][T11484] _copy_from_user+0x2e/0xd0 [ 452.597965][T11484] kstrtouint_from_user+0xd6/0x1d0 [ 452.597982][T11484] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 452.597998][T11484] ? __lock_acquire+0x4a5/0x2630 [ 452.598014][T11484] ? lock_acquire+0x1b1/0x370 [ 452.598030][T11484] proc_fail_nth_write+0x83/0x220 [ 452.598043][T11484] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 452.598059][T11484] vfs_write+0x2aa/0x1070 [ 452.598071][T11484] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 452.598085][T11484] ? __pfx_vfs_write+0x10/0x10 [ 452.598096][T11484] ? __fget_files+0x215/0x3d0 [ 452.598114][T11484] ? __fget_files+0x21f/0x3d0 [ 452.598143][T11484] ksys_write+0x12a/0x250 [ 452.598155][T11484] ? __pfx_ksys_write+0x10/0x10 [ 452.598167][T11484] ? __pfx___x64_sys_umount+0x10/0x10 [ 452.598183][T11484] ? rcu_is_watching+0x12/0xc0 [ 452.598201][T11484] do_syscall_64+0x115/0x870 [ 452.598214][T11484] ? clear_bhb_loop+0x40/0x90 [ 452.598228][T11484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.598240][T11484] RIP: 0033:0x7fe50fd5d68e [ 452.598250][T11484] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 452.598261][T11484] RSP: 002b:00007fe510c19fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 452.598272][T11484] RAX: ffffffffffffffda RBX: 00007fe510c1a6c0 RCX: 00007fe50fd5d68e [ 452.598279][T11484] RDX: 0000000000000001 RSI: 00007fe510c1a0a0 RDI: 0000000000000007 [ 452.598285][T11484] RBP: 00007fe510c1a090 R08: 0000000000000000 R09: 0000000000000000 [ 452.598292][T11484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 452.598298][T11484] R13: 00007fe510016038 R14: 00007fe510015fa0 R15: 00007ffeabedf4a8 [ 452.598312][T11484] [ 452.822540][ T30] kauditd_printk_skb: 187 callbacks suppressed [ 452.822551][ T30] audit: type=1400 audit(1780375839.621:3765): avc: denied { module_request } for pid=11480 comm="syz.2.1647" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 452.851417][ T30] audit: type=1400 audit(1780375839.621:3766): avc: denied { sys_module } for pid=11480 comm="syz.2.1647" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 453.078774][ T30] audit: type=1400 audit(1780375839.864:3767): avc: denied { read } for pid=11490 comm="syz.1.1649" dev="nsfs" ino=4026532807 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 453.181994][ T30] audit: type=1400 audit(1780375839.864:3768): avc: denied { create } for pid=11490 comm="syz.1.1649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 453.255759][ T30] audit: type=1400 audit(1780375839.864:3769): avc: denied { create } for pid=11490 comm="syz.1.1649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 453.317481][ T30] audit: type=1400 audit(1780375839.864:3770): avc: denied { create } for pid=11490 comm="syz.1.1649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 453.373498][ T30] audit: type=1400 audit(1780375839.864:3771): avc: denied { create } for pid=11490 comm="syz.1.1649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 453.427119][ T30] audit: type=1400 audit(1780375839.864:3772): avc: denied { create } for pid=11490 comm="syz.1.1649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 453.469716][ T30] audit: type=1400 audit(1780375839.864:3773): avc: denied { create } for pid=11490 comm="syz.1.1649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 453.539544][ T30] audit: type=1400 audit(1780375839.864:3774): avc: denied { create } for pid=11490 comm="syz.1.1649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 453.635586][T11510] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1652'. [ 453.911656][T11500] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1644'. [ 454.054382][T11510] ip6gre1: entered promiscuous mode [ 454.095126][T11510] ip6gre1: entered allmulticast mode [ 457.398471][T11535] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1661'. [ 458.752998][ T30] kauditd_printk_skb: 121 callbacks suppressed [ 458.753014][ T30] audit: type=1400 audit(1780375845.178:3896): avc: denied { read write } for pid=5630 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 458.848077][T11564] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1672'. [ 458.857167][ T30] audit: type=1400 audit(1780375845.262:3897): avc: denied { create } for pid=11563 comm="syz.2.1672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 458.936499][T11565] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1672'. [ 458.992468][T11566] netlink: 'syz.2.1672': attribute type 10 has an invalid length. [ 459.011345][T11566] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1672'. [ 460.972793][T11550] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1666'. [ 461.009050][ T30] audit: type=1400 audit(1780375847.283:3898): avc: denied { read write } for pid=5614 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 461.080857][ T30] audit: type=1400 audit(1780375847.311:3899): avc: denied { read write } for pid=5615 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 461.105678][ T30] audit: type=1400 audit(1780375847.320:3900): avc: denied { read write } for pid=5630 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 461.168154][ T30] audit: type=1400 audit(1780375847.348:3901): avc: denied { read write } for pid=5627 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 461.219984][ T30] audit: type=1400 audit(1780375847.376:3902): avc: denied { execmem } for pid=11570 comm="syz.1.1673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 461.278956][ T30] audit: type=1400 audit(1780375847.395:3903): avc: denied { read } for pid=11570 comm="syz.1.1673" dev="nsfs" ino=4026532807 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 461.342884][ T30] audit: type=1400 audit(1780375847.414:3904): avc: denied { read write } for pid=11574 comm="syz.0.1676" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 461.407922][ T30] audit: type=1400 audit(1780375847.414:3905): avc: denied { bpf } for pid=11574 comm="syz.0.1676" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 461.575904][T11584] x_tables: duplicate underflow at hook 1 [ 461.656547][T11590] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1680'. [ 461.943194][T11600] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1685'. [ 461.953121][T11600] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1685'. [ 461.962732][T11600] netlink: 'syz.2.1685': attribute type 10 has an invalid length. [ 461.971244][T11600] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1685'. [ 464.187354][ T30] kauditd_printk_skb: 110 callbacks suppressed [ 464.187370][ T30] audit: type=1400 audit(1780375850.258:4016): avc: denied { allowed } for pid=11628 comm="syz.0.1695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 464.251465][ T30] audit: type=1400 audit(1780375850.258:4017): avc: denied { read write } for pid=11628 comm="syz.0.1695" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 464.302076][ T30] audit: type=1400 audit(1780375850.258:4018): avc: denied { read write } for pid=11628 comm="syz.0.1695" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 464.357132][ T30] audit: type=1400 audit(1780375850.258:4019): avc: denied { write } for pid=11628 comm="syz.0.1695" path="/dev/vhci" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=0 [ 464.411566][ T30] audit: type=1400 audit(1780375850.351:4020): avc: denied { read write } for pid=5627 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 464.469279][ T30] audit: type=1400 audit(1780375850.379:4021): avc: denied { create } for pid=11633 comm="syz.0.1696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=0 [ 464.490721][ T30] audit: type=1400 audit(1780375850.379:4022): avc: denied { mounton } for pid=11633 comm="syz.0.1696" path="/339" dev="tmpfs" ino=1809 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 464.514007][ T30] audit: type=1400 audit(1780375850.379:4023): avc: denied { read } for pid=11633 comm="syz.0.1696" dev="nsfs" ino=4026533241 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 465.636820][T11634] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1696'. [ 465.660319][ T30] audit: type=1400 audit(1780375851.633:4024): avc: denied { read write } for pid=5630 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 465.731639][ T30] audit: type=1400 audit(1780375851.708:4025): avc: denied { read write } for pid=5623 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 466.218421][T11646] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1700'. [ 466.228449][T11646] netlink: 'syz.0.1700': attribute type 10 has an invalid length. [ 466.236627][T11646] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1700'. [ 466.687640][ T5711] libceph: connect (1)[c::]:6789 error -101 [ 466.704813][ T5711] libceph: mon0 (1)[c::]:6789 connect error [ 466.747890][T11663] netlink: 'syz.3.1704': attribute type 25 has an invalid length. [ 466.768129][T11663] netlink: 'syz.3.1704': attribute type 3 has an invalid length. [ 466.804496][T11659] netdevsim netdevsim3: Direct firmware load for . [ 466.804496][T11659] failed with error -2 [ 466.845024][T11663] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1704'. [ 466.958553][T11659] sctp: [Deprecated]: syz.3.1704 (pid 11659) Use of int in maxseg socket option. [ 466.958553][T11659] Use struct sctp_assoc_value instead [ 467.008097][ T5711] libceph: connect (1)[c::]:6789 error -101 [ 467.027540][ T5711] libceph: mon0 (1)[c::]:6789 connect error [ 467.544813][T11655] ceph: No mds server is up or the cluster is laggy [ 467.583946][ T5711] libceph: connect (1)[c::]:6789 error -101 [ 467.598523][ T5711] libceph: mon0 (1)[c::]:6789 connect error [ 467.842264][T11686] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1711'. [ 469.776998][ T30] kauditd_printk_skb: 82 callbacks suppressed [ 469.777017][ T30] audit: type=1400 audit(1780375855.487:4108): avc: denied { read write } for pid=5614 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 469.856114][ T30] audit: type=1400 audit(1780375855.553:4109): avc: denied { read write } for pid=5614 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 469.884612][ T30] audit: type=1400 audit(1780375855.562:4110): avc: denied { read write } for pid=5623 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 469.931458][ T30] audit: type=1400 audit(1780375855.590:4111): avc: denied { read write } for pid=5630 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 469.970637][ T30] audit: type=1400 audit(1780375855.618:4112): avc: denied { write } for pid=11694 comm="syz.4.1716" path="/dev/vhci" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=0 [ 470.001748][T11697] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1715'. [ 470.031259][ T30] audit: type=1400 audit(1780375855.618:4113): avc: denied { prog_load } for pid=11694 comm="syz.4.1716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 470.085561][T11697] netlink: 'syz.1.1715': attribute type 10 has an invalid length. [ 470.102604][ T30] audit: type=1400 audit(1780375855.628:4114): avc: denied { execmem } for pid=11694 comm="syz.4.1716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 470.131311][T11697] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1715'. [ 470.288141][ T30] audit: type=1400 audit(1780375855.665:4115): avc: denied { read write } for pid=5627 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 470.314647][ T30] audit: type=1400 audit(1780375855.693:4116): avc: denied { create } for pid=11696 comm="syz.1.1715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 470.369879][ T30] audit: type=1400 audit(1780375855.712:4117): avc: denied { read write } for pid=5623 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 471.854581][T11747] trusted_key: encrypted_key: master key parameter '`$Édlt' is invalid [ 471.874510][T11747] trusted_key: encrypted_key: master key parameter '`$Édlt' is invalid [ 472.509085][T11749] FAULT_INJECTION: forcing a failure. [ 472.509085][T11749] name failslab, interval 1, probability 0, space 0, times 0 [ 472.529124][T11749] CPU: 1 UID: 0 PID: 11749 Comm: syz.4.1734 Tainted: G L syzkaller #0 PREEMPT(full) [ 472.529155][T11749] Tainted: [L]=SOFTLOCKUP [ 472.529161][T11749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 472.529171][T11749] Call Trace: [ 472.529177][T11749] [ 472.529184][T11749] dump_stack_lvl+0x100/0x190 [ 472.529209][T11749] should_fail_ex.cold+0x5/0xa [ 472.529231][T11749] should_failslab+0xc2/0x120 [ 472.529246][T11749] __kmalloc_cache_noprof+0x7a/0x6f0 [ 472.529261][T11749] ? alloc_fdtable+0xbd/0x2d0 [ 472.529273][T11749] ? find_held_lock+0x2b/0x80 [ 472.529283][T11749] ? dup_fd+0x924/0xd10 [ 472.529298][T11749] alloc_fdtable+0xbd/0x2d0 [ 472.529312][T11749] dup_fd+0x995/0xd10 [ 472.529330][T11749] copy_process+0x2965/0x7ed0 [ 472.529354][T11749] ? __pfx_copy_process+0x10/0x10 [ 472.529371][T11749] ? find_held_lock+0x2b/0x80 [ 472.529390][T11749] kernel_clone+0x176/0x9e0 [ 472.529406][T11749] ? find_held_lock+0x2b/0x80 [ 472.529416][T11749] ? __pfx_kernel_clone+0x10/0x10 [ 472.529437][T11749] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 472.529454][T11749] __do_sys_clone+0xd9/0x120 [ 472.529470][T11749] ? __pfx___do_sys_clone+0x10/0x10 [ 472.529492][T11749] ? ksys_write+0x1ac/0x250 [ 472.529504][T11749] ? __pfx_ksys_write+0x10/0x10 [ 472.529517][T11749] ? rcu_is_watching+0x12/0xc0 [ 472.529535][T11749] do_syscall_64+0x115/0x870 [ 472.529549][T11749] ? clear_bhb_loop+0x40/0x90 [ 472.529562][T11749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.529574][T11749] RIP: 0033:0x7fe50fd9ce59 [ 472.529584][T11749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 472.529595][T11749] RSP: 002b:00007fe510c19fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 472.529606][T11749] RAX: ffffffffffffffda RBX: 00007fe510015fa0 RCX: 00007fe50fd9ce59 [ 472.529613][T11749] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 472.529619][T11749] RBP: 00007fe510c1a090 R08: 0000000000000000 R09: 0000000000000000 [ 472.529625][T11749] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 472.529632][T11749] R13: 00007fe510016038 R14: 00007fe510015fa0 R15: 00007ffeabedf4a8 [ 472.529646][T11749] [ 473.047259][T11757] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1738'. [ 473.118932][T11758] netlink: 'syz.4.1738': attribute type 10 has an invalid length. [ 473.134915][T11758] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1738'. [ 474.872277][T11735] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1729'. [ 475.091411][T11775] netlink: 'syz.0.1745': attribute type 10 has an invalid length. [ 475.100728][T11775] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1745'. [ 475.116525][T11775] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 475.132834][ T30] kauditd_printk_skb: 123 callbacks suppressed [ 475.132854][ T30] audit: type=1400 audit(1780375860.483:4241): avc: denied { create } for pid=11771 comm="syz.1.1743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 475.163149][T11776] netem: change failed [ 475.192370][ T30] audit: type=1400 audit(1780375860.483:4242): avc: denied { prog_load } for pid=11771 comm="syz.1.1743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 475.250772][ T30] audit: type=1400 audit(1780375860.483:4243): avc: denied { read } for pid=11771 comm="syz.1.1743" dev="nsfs" ino=4026532807 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 475.305566][ T30] audit: type=1400 audit(1780375860.492:4244): avc: denied { allowed } for pid=11771 comm="syz.1.1743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 475.328241][T11784] syzkaller0: entered promiscuous mode [ 475.338235][T11784] syzkaller0: entered allmulticast mode [ 475.350755][ T30] audit: type=1400 audit(1780375860.520:4245): avc: denied { write } for pid=11765 comm="syz.2.1741" path="/dev/vhci" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=0 [ 475.380315][ T30] audit: type=1400 audit(1780375860.520:4246): avc: denied { create } for pid=11765 comm="syz.2.1741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 475.401198][ T30] audit: type=1400 audit(1780375860.539:4247): avc: denied { read } for pid=11765 comm="syz.2.1741" dev="nsfs" ino=4026533253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 475.424984][ T30] audit: type=1400 audit(1780375860.548:4248): avc: denied { read write } for pid=5623 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 475.469332][ T30] audit: type=1400 audit(1780375860.548:4249): avc: denied { read } for pid=11765 comm="syz.2.1741" dev="nsfs" ino=4026533253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 475.494120][ T30] audit: type=1400 audit(1780375860.558:4250): avc: denied { read } for pid=11765 comm="syz.2.1741" name="mice" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=0 [ 476.095887][T11801] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1753'. [ 476.111200][T11801] netlink: 'syz.3.1753': attribute type 10 has an invalid length. [ 476.146185][T11801] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1753'. [ 476.576029][T11812] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1757'. [ 477.208150][T11825] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 477.218786][T11825] block device autoloading is deprecated and will be removed. [ 478.664750][T11833] futex_wake_op: syz.2.1764 tries to shift op by 144; fix this program [ 479.249402][T11828] bridge_slave_0: left allmulticast mode [ 479.264610][T11828] bridge_slave_0: left promiscuous mode [ 479.277505][T11828] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.289602][T11828] bridge_slave_1: left allmulticast mode [ 479.305472][T11840] xt_cgroup: invalid path, errno=-2 [ 479.305865][T11828] bridge_slave_1: left promiscuous mode [ 479.335525][T11828] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.397147][T11828] bond0: (slave bond_slave_0): Releasing backup interface [ 479.418736][T11828] bond0: (slave bond_slave_1): Releasing backup interface [ 479.448504][T11828] team0: Port device team_slave_0 removed [ 479.464453][T11851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1769'. [ 479.481329][T11828] team0: Port device team_slave_1 removed [ 479.499986][T11828] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 479.524054][T11828] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 479.546774][T11828] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 479.568421][T11828] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 479.595990][T11828] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 480.361326][T11884] --map-set only usable from mangle table [ 480.489107][ T30] kauditd_printk_skb: 253 callbacks suppressed [ 480.489124][ T30] audit: type=1400 audit(1780375865.507:4504): avc: denied { read write } for pid=5615 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 480.609499][ T30] audit: type=1400 audit(1780375865.619:4505): avc: denied { read write } for pid=5627 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 480.703907][ T30] audit: type=1400 audit(1780375865.703:4506): avc: denied { allowed } for pid=11895 comm="syz.0.1788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 480.756710][ T30] audit: type=1400 audit(1780375865.759:4507): avc: denied { create } for pid=11895 comm="syz.0.1788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 480.805506][T11896] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=11896 comm=syz.0.1788 [ 480.821382][ T30] audit: type=1400 audit(1780375865.806:4508): avc: denied { read } for pid=11895 comm="syz.0.1788" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 480.880746][ T30] audit: type=1400 audit(1780375865.806:4509): avc: denied { create } for pid=11895 comm="syz.0.1788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 480.938970][ T30] audit: type=1400 audit(1780375865.806:4510): avc: denied { create } for pid=11895 comm="syz.0.1788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 480.994211][ T30] audit: type=1400 audit(1780375865.862:4511): avc: denied { read write } for pid=5615 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 481.102415][ T30] audit: type=1400 audit(1780375866.087:4512): avc: denied { read write } for pid=5627 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 481.191351][ T30] audit: type=1400 audit(1780375866.115:4513): avc: denied { read write } for pid=5623 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 481.526486][T11910] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 481.533041][T11910] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 481.543671][T11910] vhci_hcd vhci_hcd.0: Device attached [ 481.696837][T11916] bridge0: left promiscuous mode [ 481.703857][T11916] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.712315][T11916] dummy0: left promiscuous mode [ 481.720911][T11916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 481.791546][T11916] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 481.802002][T11916] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 481.815746][T11916] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 481.828657][ T10] usb 40-1: SetAddress Request (6) to port 0 [ 481.838270][ T10] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 481.849763][T11916] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 481.882794][T11916] veth1_vlan: left promiscuous mode [ 481.900426][T11916] veth0_vlan: left promiscuous mode [ 481.917229][T11916] veth0_vlan: entered promiscuous mode [ 481.944333][T11916] veth1_vlan: entered promiscuous mode [ 481.968839][T11916] veth1_macvtap: left promiscuous mode [ 481.984707][T11916] veth0_macvtap: left promiscuous mode [ 482.000427][T11916] veth0_macvtap: entered promiscuous mode [ 482.015746][T11916] veth1_macvtap: entered promiscuous mode [ 482.046593][T11916] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 482.069710][T11916] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 482.089482][T11916] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 482.105046][T11916] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 482.135028][T11916] 8021q: adding VLAN 0 to HW filter on device bond1 [ 482.154019][T11916] 8021q: adding VLAN 0 to HW filter on device bond2 [ 482.177828][T11916] bond4: left promiscuous mode [ 482.191598][T11916] 8021q: adding VLAN 0 to HW filter on device bond4 [ 482.212042][T11916] 8021q: adding VLAN 0 to HW filter on device bond5 [ 482.233886][ T5720] bridge0: entered promiscuous mode [ 482.241801][ T8804] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.249019][ T8804] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.274392][ T8804] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.281620][ T8804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.368546][ T8809] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.388774][ T8809] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.411740][T11911] vhci_hcd: connection reset by peer [ 482.425278][ T5955] vhci_hcd vhci_hcd.3: stop threads [ 482.431784][ T5955] vhci_hcd vhci_hcd.3: release socket [ 482.442119][ T5955] vhci_hcd vhci_hcd.3: disconnect device [ 482.471143][ T8809] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.488677][ T8809] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.906916][T11932] trusted_key: encrypted_key: insufficient parameters specified [ 482.969383][T11933] trusted_key: encrypted_key: insufficient parameters specified [ 483.311213][T11955] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1809'. [ 483.350620][T11955] netlink: 'syz.1.1809': attribute type 10 has an invalid length. [ 483.371596][T11955] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1809'. [ 483.399332][T11955] dummy0: entered promiscuous mode [ 483.828525][T11963] FAULT_INJECTION: forcing a failure. [ 483.828525][T11963] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 483.870085][T11963] CPU: 1 UID: 0 PID: 11963 Comm: syz.2.1812 Tainted: G L syzkaller #0 PREEMPT(full) [ 483.870115][T11963] Tainted: [L]=SOFTLOCKUP [ 483.870121][T11963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 483.870131][T11963] Call Trace: [ 483.870137][T11963] [ 483.870143][T11963] dump_stack_lvl+0x100/0x190 [ 483.870168][T11963] should_fail_ex.cold+0x5/0xa [ 483.870192][T11963] _copy_to_user+0x32/0xd0 [ 483.870215][T11963] simple_read_from_buffer+0xcb/0x170 [ 483.870239][T11963] proc_fail_nth_read+0x1af/0x230 [ 483.870258][T11963] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 483.870271][T11963] ? rw_verify_area+0xce/0x6d0 [ 483.870282][T11963] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 483.870294][T11963] vfs_read+0x1e4/0xb30 [ 483.870308][T11963] ? __pfx_vfs_read+0x10/0x10 [ 483.870319][T11963] ? __fget_files+0x215/0x3d0 [ 483.870336][T11963] ? __fget_files+0x21f/0x3d0 [ 483.870353][T11963] ksys_read+0x12a/0x250 [ 483.870370][T11963] ? __pfx_ksys_read+0x10/0x10 [ 483.870383][T11963] ? rcu_is_watching+0x12/0xc0 [ 483.870401][T11963] do_syscall_64+0x115/0x870 [ 483.870415][T11963] ? clear_bhb_loop+0x40/0x90 [ 483.870428][T11963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.870439][T11963] RIP: 0033:0x7f488bf5d68e [ 483.870449][T11963] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 483.870460][T11963] RSP: 002b:00007f488cf20fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 483.870471][T11963] RAX: ffffffffffffffda RBX: 00007f488cf216c0 RCX: 00007f488bf5d68e [ 483.870478][T11963] RDX: 000000000000000f RSI: 00007f488cf210a0 RDI: 0000000000000004 [ 483.870484][T11963] RBP: 00007f488cf21090 R08: 0000000000000000 R09: 0000000000000000 [ 483.870491][T11963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 483.870497][T11963] R13: 00007f488c216038 R14: 00007f488c215fa0 R15: 00007ffc5688f3e8 [ 483.870511][T11963] [ 484.350004][T11975] netlink: 'syz.2.1817': attribute type 10 has an invalid length. [ 484.387336][T11980] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 484.401833][T11975] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1817'. [ 484.448390][T11975] bridge0: port 3(5ÿ) entered blocking state [ 484.467971][T11975] bridge0: port 3(5ÿ) entered disabled state [ 484.486608][T11975] ÿ: entered allmulticast mode [ 484.522039][T11975] bridge0: port 3(5ÿ) entered blocking state [ 484.528417][T11975] bridge0: port 3(5ÿ) entered forwarding state [ 484.564603][T11980] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28861 sclass=netlink_route_socket pid=11980 comm=syz.1.1819 [ 485.735509][T12014] FAULT_INJECTION: forcing a failure. [ 485.735509][T12014] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 485.800605][T12014] CPU: 0 UID: 0 PID: 12014 Comm: syz.1.1832 Tainted: G L syzkaller #0 PREEMPT(full) [ 485.800624][T12014] Tainted: [L]=SOFTLOCKUP [ 485.800628][T12014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 485.800635][T12014] Call Trace: [ 485.800639][T12014] [ 485.800643][T12014] dump_stack_lvl+0x100/0x190 [ 485.800662][T12014] should_fail_ex.cold+0x5/0xa [ 485.800678][T12014] _copy_to_user+0x32/0xd0 [ 485.800693][T12014] simple_read_from_buffer+0xcb/0x170 [ 485.800708][T12014] proc_fail_nth_read+0x1af/0x230 [ 485.800722][T12014] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 485.800737][T12014] ? rw_verify_area+0xce/0x6d0 [ 485.800754][T12014] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 485.800767][T12014] vfs_read+0x1e4/0xb30 [ 485.800788][T12014] ? __pfx_vfs_read+0x10/0x10 [ 485.800805][T12014] ? __fget_files+0x215/0x3d0 [ 485.800839][T12014] ? __fget_files+0x21f/0x3d0 [ 485.800856][T12014] ksys_read+0x12a/0x250 [ 485.800868][T12014] ? __pfx_ksys_read+0x10/0x10 [ 485.800881][T12014] ? rcu_is_watching+0x12/0xc0 [ 485.800899][T12014] do_syscall_64+0x115/0x870 [ 485.800913][T12014] ? clear_bhb_loop+0x40/0x90 [ 485.800926][T12014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.800937][T12014] RIP: 0033:0x7f942055d68e [ 485.800947][T12014] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 485.800957][T12014] RSP: 002b:00007f9421446fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 485.800968][T12014] RAX: ffffffffffffffda RBX: 00007f94214476c0 RCX: 00007f942055d68e [ 485.800975][T12014] RDX: 000000000000000f RSI: 00007f94214470a0 RDI: 0000000000000005 [ 485.800981][T12014] RBP: 00007f9421447090 R08: 0000000000000000 R09: 0000000000000000 [ 485.800987][T12014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.800994][T12014] R13: 00007f9420816038 R14: 00007f9420815fa0 R15: 00007ffe769887b8 [ 485.801008][T12014] [ 486.058099][ T30] kauditd_printk_skb: 193 callbacks suppressed [ 486.058113][ T30] audit: type=1400 audit(1780375870.718:4707): avc: denied { read write } for pid=5630 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 486.110813][ T30] audit: type=1400 audit(1780375870.764:4708): avc: denied { read write } for pid=5614 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 486.141886][ T30] audit: type=1400 audit(1780375870.792:4709): avc: denied { read } for pid=12017 comm="syz.2.1834" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 486.171971][ T30] audit: type=1400 audit(1780375870.820:4710): avc: denied { read } for pid=12017 comm="syz.2.1834" dev="nsfs" ino=4026533253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 486.193440][ T30] audit: type=1400 audit(1780375870.820:4711): avc: denied { prog_load } for pid=12017 comm="syz.2.1834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 486.258260][ T30] audit: type=1400 audit(1780375870.905:4712): avc: denied { read write } for pid=5630 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 486.323912][ T30] audit: type=1400 audit(1780375870.942:4713): avc: denied { create } for pid=12019 comm="syz.1.1835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 486.370916][ T30] audit: type=1400 audit(1780375871.008:4714): avc: denied { read } for pid=12019 comm="syz.1.1835" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 486.411620][T12022] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1836'. [ 486.424301][ T30] audit: type=1400 audit(1780375871.045:4715): avc: denied { wake_alarm } for pid=12019 comm="syz.1.1835" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 486.464285][ T30] audit: type=1400 audit(1780375871.045:4716): avc: denied { allowed } for pid=12019 comm="syz.1.1835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 487.171561][T12037] IPv6: addrconf: prefix option has invalid lifetime [ 487.301600][ T10] usb 40-1: device descriptor read/8, error -110 [ 487.658188][T12039] xt_ecn: cannot match TCP bits for non-tcp packets [ 487.675964][T12041] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1843'. [ 487.719279][ T10] usb usb40-port1: attempt power cycle [ 487.979565][T12046] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1846'. [ 488.058136][T12046] netlink: 'syz.2.1846': attribute type 10 has an invalid length. [ 488.096239][T12046] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1846'. [ 488.133411][T12046] ÿ: left allmulticast mode [ 488.167772][T12046] bridge0: port 3(5ÿ) entered disabled state [ 488.322286][ T10] usb usb40-port1: unable to enumerate USB device [ 489.566926][T12085] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1857'. [ 489.619710][T12085] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1857'. [ 489.647999][T12085] netlink: 'syz.4.1857': attribute type 10 has an invalid length. [ 489.660040][T12085] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1857'. [ 490.699711][T12117] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12117 comm=syz.1.1869 [ 491.442032][ T30] kauditd_printk_skb: 179 callbacks suppressed [ 491.442050][ T30] audit: type=1400 audit(1780375875.751:4896): avc: denied { read write } for pid=5614 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 491.556492][ T30] audit: type=1400 audit(1780375875.863:4897): avc: denied { create } for pid=12133 comm="syz.1.1876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 491.578050][ T30] audit: type=1400 audit(1780375875.882:4898): avc: denied { read write } for pid=5627 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 491.657452][ T30] audit: type=1400 audit(1780375875.956:4899): avc: denied { create } for pid=12135 comm="syz.0.1877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 491.710820][ T30] audit: type=1400 audit(1780375875.975:4900): avc: denied { create } for pid=12135 comm="syz.0.1877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 491.746172][ T30] audit: type=1400 audit(1780375875.975:4901): avc: denied { create } for pid=12135 comm="syz.0.1877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 491.779800][ T30] audit: type=1400 audit(1780375875.975:4902): avc: denied { create } for pid=12135 comm="syz.0.1877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 491.828481][ T30] audit: type=1400 audit(1780375875.975:4903): avc: denied { create } for pid=12135 comm="syz.0.1877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 491.885849][ T30] audit: type=1400 audit(1780375875.975:4904): avc: denied { create } for pid=12135 comm="syz.0.1877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 491.946695][ T30] audit: type=1400 audit(1780375875.975:4905): avc: denied { create } for pid=12135 comm="syz.0.1877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 492.496241][T12146] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1880'. [ 492.510164][T12150] IPv6: addrconf: prefix option has invalid lifetime [ 492.569048][T12153] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1880'. [ 492.634104][T12154] netlink: 'syz.2.1880': attribute type 10 has an invalid length. [ 492.653521][T12154] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1880'. [ 494.957591][T12144] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1879'. [ 495.103313][T12172] futex_wake_op: syz.3.1886 tries to shift op by 144; fix this program [ 496.030939][T12194] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1895'. [ 496.086064][T12196] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1895'. [ 496.138239][T12192] can0: slcan on ttyS3. [ 496.147436][T12199] netlink: 'syz.3.1895': attribute type 10 has an invalid length. [ 496.155723][T12197] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1894'. [ 496.180332][T12199] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1895'. [ 496.201115][T12197] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1894'. [ 496.468950][ T5964] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.479305][T12197] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1894'. [ 496.618323][ T5964] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.797568][ T30] kauditd_printk_skb: 1219 callbacks suppressed [ 496.797585][ T30] audit: type=1400 audit(1780376136.754:6125): avc: denied { read } for pid=5280 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 496.880844][ T5280] audit: audit_backlog=65 > audit_backlog_limit=64 [ 496.883870][ T30] audit: type=1400 audit(1780376136.754:6126): avc: denied { read } for pid=5280 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 496.962937][ T30] audit: type=1400 audit(1780376136.754:6127): avc: denied { read } for pid=5280 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 496.984693][ T5280] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 497.000123][ T5280] audit: backlog limit exceeded [ 497.010759][ T5280] audit: audit_backlog=65 > audit_backlog_limit=64 [ 497.026282][ T5615] audit: audit_backlog=65 > audit_backlog_limit=64 [ 497.037725][ T5280] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 497.038426][ T30] audit: type=1400 audit(1780376136.754:6128): avc: denied { read } for pid=5280 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 498.749790][T12222] __nla_validate_parse: 1 callbacks suppressed [ 498.749809][T12222] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1904'. [ 500.897482][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.905768][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.322003][ T5964] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 501.343349][ T5964] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 501.515774][T12191] can0 (unregistered): slcan off ttyS3. [ 501.569346][T12241] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1909'. [ 501.610081][T12241] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1909'. [ 501.650903][T12241] netlink: 'syz.3.1909': attribute type 10 has an invalid length. [ 501.705438][T12241] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1909'. [ 502.145131][ T30] kauditd_printk_skb: 14670 callbacks suppressed [ 502.145148][ T30] audit: type=1400 audit(1780376141.761:19818): avc: denied { read } for pid=5280 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 502.193773][ T30] audit: type=1400 audit(1780376141.761:19819): avc: denied { read } for pid=5280 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 502.214846][ T5280] audit: audit_backlog=65 > audit_backlog_limit=64 [ 502.217491][ T30] audit: type=1400 audit(1780376141.761:19820): avc: denied { read } for pid=5280 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 502.262317][ T30] audit: type=1400 audit(1780376141.761:19821): avc: denied { read } for pid=5280 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 502.314790][ T5630] audit: audit_backlog=65 > audit_backlog_limit=64 [ 502.321699][ T5630] audit: audit_lost=331 audit_rate_limit=0 audit_backlog_limit=64 [ 502.327847][ T5614] audit: audit_backlog=65 > audit_backlog_limit=64 [ 502.336094][ T5280] audit: audit_lost=332 audit_rate_limit=0 audit_backlog_limit=64 [ 502.350163][ T30] audit: type=1400 audit(1780376141.761:19822): avc: denied { read } for pid=5280 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 502.532485][T12262] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12262 comm=syz.2.1916 [ 505.706486][T12296] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1927'. [ 505.764223][T12297] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1927'. [ 505.816959][T12298] netlink: 'syz.2.1927': attribute type 10 has an invalid length. [ 505.836705][T12298] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1927'. [ 507.506330][ T30] kauditd_printk_skb: 10616 callbacks suppressed [ 507.506353][ T30] audit: type=1400 audit(1780376146.777:29427): avc: denied { read } for pid=5280 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 507.534546][ T30] audit: type=1400 audit(1780376146.777:29428): avc: denied { read } for pid=5280 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 507.573015][ T30] audit: type=1400 audit(1780376146.786:29429): avc: denied { read } for pid=5280 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 507.596988][ T30] audit: type=1400 audit(1780376146.786:29430): avc: denied { read } for pid=5280 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 507.619133][ T5280] audit: audit_backlog=65 > audit_backlog_limit=64 [ 507.631521][ T30] audit: type=1400 audit(1780376146.786:29431): avc: denied { read } for pid=5280 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 507.631628][ T5280] audit: audit_lost=670 audit_rate_limit=0 audit_backlog_limit=64 [ 507.673016][ T30] audit: type=1400 audit(1780376146.786:29432): avc: denied { read } for pid=5280 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 507.673041][ T5280] audit: backlog limit exceeded [ 507.673622][ T5280] audit: audit_backlog=65 > audit_backlog_limit=64 [ 508.296554][T12329] syz.2.1935 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 508.309791][T12327] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1934'. [ 508.486003][T12332] FAULT_INJECTION: forcing a failure. [ 508.486003][T12332] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 508.537852][T12332] CPU: 1 UID: 0 PID: 12332 Comm: syz.4.1936 Tainted: G L syzkaller #0 PREEMPT(full) [ 508.537877][T12332] Tainted: [L]=SOFTLOCKUP [ 508.537883][T12332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 508.537894][T12332] Call Trace: [ 508.537900][T12332] [ 508.537908][T12332] dump_stack_lvl+0x100/0x190 [ 508.537939][T12332] should_fail_ex.cold+0x5/0xa [ 508.537963][T12332] _copy_from_user+0x2e/0xd0 [ 508.537986][T12332] __do_sys_landlock_create_ruleset+0x1c7/0x4b0 [ 508.538014][T12332] ? fput+0x79/0x100 [ 508.538038][T12332] ? __pfx___do_sys_landlock_create_ruleset+0x10/0x10 [ 508.538063][T12332] ? ksys_write+0x1ac/0x250 [ 508.538086][T12332] ? rcu_is_watching+0x12/0xc0 [ 508.538115][T12332] do_syscall_64+0x115/0x870 [ 508.538136][T12332] ? clear_bhb_loop+0x40/0x90 [ 508.538156][T12332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.538173][T12332] RIP: 0033:0x7fe50fd9ce59 [ 508.538189][T12332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 508.538207][T12332] RSP: 002b:00007fe510c1a028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bc [ 508.538223][T12332] RAX: ffffffffffffffda RBX: 00007fe510015fa0 RCX: 00007fe50fd9ce59 [ 508.538234][T12332] RDX: 0000000000000000 RSI: 0000000000000018 RDI: 00002000000002c0 [ 508.538244][T12332] RBP: 00007fe510c1a090 R08: 0000000000000000 R09: 0000000000000000 [ 508.538254][T12332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 508.538264][T12332] R13: 00007fe510016038 R14: 00007fe510015fa0 R15: 00007ffeabedf4a8 [ 508.538286][T12332] [ 508.829004][T12341] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1940'. [ 508.915575][T12341] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1940'. [ 508.939541][T12343] netlink: 'syz.0.1938': attribute type 4 has an invalid length. [ 509.008407][T12341] netlink: 'syz.3.1940': attribute type 10 has an invalid length. [ 509.017967][T12337] netlink: 'syz.0.1938': attribute type 4 has an invalid length. [ 509.052907][T12341] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1940'. [ 509.763933][T12308] ceph: No mds server is up or the cluster is laggy [ 509.764473][T12311] ceph: No mds server is up or the cluster is laggy [ 509.953783][T12358] xt_HMARK: proto mask must be zero with L3 mode [ 512.438727][T12386] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1955'. [ 512.513059][T12387] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1955'. [ 512.571817][T12388] netlink: 'syz.2.1955': attribute type 10 has an invalid length. [ 512.602110][T12388] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1955'. [ 512.857256][ T30] kauditd_printk_skb: 15908 callbacks suppressed [ 512.857273][ T30] audit: type=1400 audit(1780376151.793:40116): avc: denied { read } for pid=5280 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 512.940925][ T30] audit: type=1400 audit(1780376151.793:40117): avc: denied { read } for pid=5280 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 512.962493][ T30] audit: type=1400 audit(1780376151.793:40118): avc: denied { read } for pid=5280 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 512.983768][ T30] audit: type=1400 audit(1780376151.793:40119): avc: denied { read } for pid=5280 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 513.022459][ T30] audit: type=1400 audit(1780376151.793:40120): avc: denied { read } for pid=5280 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 513.048184][ T5280] audit: audit_backlog=65 > audit_backlog_limit=64 [ 513.055292][ T5280] audit: audit_lost=2413 audit_rate_limit=0 audit_backlog_limit=64 [ 513.063476][ T30] audit: type=1400 audit(1780376151.793:40121): avc: denied { read } for pid=5280 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 513.098026][ T5280] audit: backlog limit exceeded [ 513.103332][ T5280] audit: audit_backlog=65 > audit_backlog_limit=64 [ 514.606854][T12395] PKCS8: Unsupported PKCS#8 version [ 515.469619][T12418] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1966'. [ 515.504836][T12418] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1966'. [ 515.530246][T12418] netlink: 'syz.4.1966': attribute type 10 has an invalid length. [ 515.555896][T12418] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1966'. [ 516.033071][T12425] Invalid option length (1151) for dns_resolver key [ 518.212817][ T30] kauditd_printk_skb: 10362 callbacks suppressed [ 518.212835][ T30] audit: type=1400 audit(1780376156.791:50050): avc: denied { read } for pid=5280 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 518.265511][ T30] audit: type=1400 audit(1780376156.791:50051): avc: denied { read } for pid=5280 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 518.319587][ T30] audit: type=1400 audit(1780376156.866:50052): avc: denied { read } for pid=5280 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 518.320997][ T5280] audit: audit_backlog=65 > audit_backlog_limit=64 [ 518.392559][ T30] audit: type=1400 audit(1780376156.866:50053): avc: denied { read } for pid=5280 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 518.426826][ T5280] audit: audit_lost=2559 audit_rate_limit=0 audit_backlog_limit=64 [ 518.445436][ T5280] audit: backlog limit exceeded [ 518.447697][ T30] audit: type=1400 audit(1780376156.866:50054): avc: denied { read } for pid=5280 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 518.504227][ T5280] audit: audit_backlog=65 > audit_backlog_limit=64 [ 518.510879][ T5280] audit: audit_lost=2560 audit_rate_limit=0 audit_backlog_limit=64 [ 522.708698][T12494] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1991'. [ 522.767147][T12494] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1991'. [ 522.811281][T12494] dummy0: left promiscuous mode [ 522.830240][T12502] netlink: 'syz.3.1991': attribute type 10 has an invalid length. [ 522.860328][T12502] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1991'. [ 522.930607][T12502] dummy0: entered promiscuous mode [ 523.571237][ T30] kauditd_printk_skb: 10545 callbacks suppressed [ 523.571253][ T30] audit: type=1400 audit(1780376161.817:60596): avc: denied { read } for pid=5280 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 523.658255][ T30] audit: type=1400 audit(1780376161.817:60597): avc: denied { read } for pid=5280 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 523.703136][ T5280] audit: audit_backlog=65 > audit_backlog_limit=64 [ 523.715522][T12521] audit: audit_backlog=65 > audit_backlog_limit=64 [ 523.728558][ T5280] audit: audit_lost=2562 audit_rate_limit=0 audit_backlog_limit=64 [ 523.741328][T12521] audit: audit_lost=2563 audit_rate_limit=0 audit_backlog_limit=64 [ 523.756235][ T5280] audit: backlog limit exceeded [ 523.761334][ T30] audit: type=1400 audit(1780376161.817:60598): avc: denied { read } for pid=5280 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 523.761375][ T30] audit: type=1400 audit(1780376161.817:60599): avc: denied { read } for pid=5280 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 523.761408][ T30] audit: type=1400 audit(1780376161.817:60600): avc: denied { read } for pid=5280 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 525.869047][T12569] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2020'. [ 525.919468][T12569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2020'. [ 525.973102][T12569] dummy0: left promiscuous mode [ 526.009721][T12572] netlink: 'syz.3.2020': attribute type 10 has an invalid length. [ 526.031012][T12572] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2020'. [ 526.110084][T12572] dummy0: entered promiscuous mode [ 526.712913][T12589] FAULT_INJECTION: forcing a failure. [ 526.712913][T12589] name failslab, interval 1, probability 0, space 0, times 0 [ 526.742092][T12589] CPU: 1 UID: 0 PID: 12589 Comm: syz.3.2026 Tainted: G L syzkaller #0 PREEMPT(full) [ 526.742120][T12589] Tainted: [L]=SOFTLOCKUP [ 526.742126][T12589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 526.742136][T12589] Call Trace: [ 526.742142][T12589] [ 526.742150][T12589] dump_stack_lvl+0x100/0x190 [ 526.742177][T12589] should_fail_ex.cold+0x5/0xa [ 526.742200][T12589] ? tomoyo_encode2+0xfb/0x3c0 [ 526.742224][T12589] should_failslab+0xc2/0x120 [ 526.742241][T12589] __kmalloc_noprof+0xe0/0x850 [ 526.742266][T12589] ? d_absolute_path+0x136/0x1b0 [ 526.742288][T12589] tomoyo_encode2+0xfb/0x3c0 [ 526.742324][T12589] tomoyo_encode+0x29/0x50 [ 526.742350][T12589] tomoyo_realpath_from_path+0x18c/0x690 [ 526.742381][T12589] tomoyo_path_number_perm+0x23c/0x580 [ 526.742405][T12589] ? tomoyo_path_number_perm+0x22e/0x580 [ 526.742430][T12589] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 526.742475][T12589] ? find_held_lock+0x2b/0x80 [ 526.742492][T12589] ? __fget_files+0x215/0x3d0 [ 526.742512][T12589] ? hook_file_ioctl_common+0x149/0x410 [ 526.742530][T12589] ? __fget_files+0x215/0x3d0 [ 526.742557][T12589] ? __fget_files+0x21f/0x3d0 [ 526.742584][T12589] security_file_ioctl+0xd3/0x230 [ 526.742612][T12589] __x64_sys_ioctl+0xb7/0x210 [ 526.742633][T12589] do_syscall_64+0x115/0x870 [ 526.742657][T12589] ? clear_bhb_loop+0x40/0x90 [ 526.742680][T12589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.742700][T12589] RIP: 0033:0x7f3e8cb9ce59 [ 526.742716][T12589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 526.742733][T12589] RSP: 002b:00007f3e8d9e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 526.742752][T12589] RAX: ffffffffffffffda RBX: 00007f3e8ce16090 RCX: 00007f3e8cb9ce59 [ 526.742764][T12589] RDX: 0000000008000000 RSI: 0000000000005437 RDI: 0000000000000003 [ 526.742776][T12589] RBP: 00007f3e8d9e6090 R08: 0000000000000000 R09: 0000000000000000 [ 526.742786][T12589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 526.742796][T12589] R13: 00007f3e8ce16128 R14: 00007f3e8ce16090 R15: 00007ffc2b1ffc78 [ 526.742821][T12589] [ 526.743620][T12589] ERROR: Out of memory at tomoyo_realpath_from_path. [ 527.355992][T12598] libceph: resolve '0' (ret=-3): failed [ 527.711739][T12607] FAULT_INJECTION: forcing a failure. [ 527.711739][T12607] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 527.752380][T12607] CPU: 1 UID: 0 PID: 12607 Comm: syz.3.2035 Tainted: G L syzkaller #0 PREEMPT(full) [ 527.752399][T12607] Tainted: [L]=SOFTLOCKUP [ 527.752404][T12607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 527.752410][T12607] Call Trace: [ 527.752415][T12607] [ 527.752420][T12607] dump_stack_lvl+0x100/0x190 [ 527.752436][T12607] should_fail_ex.cold+0x5/0xa [ 527.752452][T12607] _copy_to_iter+0x1f3/0x1720 [ 527.752468][T12607] ? __pfx__copy_to_iter+0x10/0x10 [ 527.752483][T12607] ? rcu_is_watching+0x12/0xc0 [ 527.752507][T12607] ? trace_contention_end+0x122/0x170 [ 527.752530][T12607] ? __mutex_lock+0x26d/0x1b10 [ 527.752557][T12607] copy_page_to_iter+0x285/0x370 [ 527.752571][T12607] pipe_to_user+0xb0/0x170 [ 527.752587][T12607] ? anon_pipe_put_page+0x216/0x300 [ 527.752602][T12607] __splice_from_pipe+0x20c/0x7f0 [ 527.752618][T12607] ? __pfx_pipe_to_user+0x10/0x10 [ 527.752635][T12607] __do_sys_vmsplice+0x49b/0x13c0 [ 527.752655][T12607] ? __pfx___do_sys_vmsplice+0x10/0x10 [ 527.752672][T12607] ? get_pid_task+0x106/0x250 [ 527.752686][T12607] ? find_held_lock+0x2b/0x80 [ 527.752698][T12607] ? find_held_lock+0x2b/0x80 [ 527.752707][T12607] ? ksys_write+0x190/0x250 [ 527.752727][T12607] ? __fget_files+0x21f/0x3d0 [ 527.752744][T12607] ? fput+0x79/0x100 [ 527.752758][T12607] ? ksys_write+0x1ac/0x250 [ 527.752769][T12607] ? __pfx_ksys_write+0x10/0x10 [ 527.752785][T12607] ? do_syscall_64+0x115/0x870 [ 527.752798][T12607] do_syscall_64+0x115/0x870 [ 527.752811][T12607] ? clear_bhb_loop+0x40/0x90 [ 527.752824][T12607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.752835][T12607] RIP: 0033:0x7f3e8cb9ce59 [ 527.752845][T12607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 527.752856][T12607] RSP: 002b:00007f3e8d9e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 527.752867][T12607] RAX: ffffffffffffffda RBX: 00007f3e8ce16090 RCX: 00007f3e8cb9ce59 [ 527.752874][T12607] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 527.752880][T12607] RBP: 00007f3e8d9e6090 R08: 0000000000000000 R09: 0000000000000000 [ 527.752886][T12607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 527.752892][T12607] R13: 00007f3e8ce16128 R14: 00007f3e8ce16090 R15: 00007ffc2b1ffc78 [ 527.752906][T12607] [ 528.313253][T12618] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2037'. [ 528.929470][ T30] kauditd_printk_skb: 12241 callbacks suppressed [ 528.929483][ T30] audit: type=1400 audit(1780376166.833:67420): avc: denied { read } for pid=5280 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 529.013446][ T5280] audit: audit_backlog=65 > audit_backlog_limit=64 [ 529.038460][ T5280] audit: audit_lost=4371 audit_rate_limit=0 audit_backlog_limit=64 [ 529.073136][ T30] audit: type=1400 audit(1780376166.833:67421): avc: denied { read } for pid=5280 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 529.079044][ T5280] audit: backlog limit exceeded [ 529.111445][T12631] audit: audit_backlog=65 > audit_backlog_limit=64 [ 529.135217][T12631] audit: audit_lost=4372 audit_rate_limit=0 audit_backlog_limit=64 [ 529.137211][T12634] audit: audit_backlog=65 > audit_backlog_limit=64 [ 529.159768][ T5280] audit: audit_backlog=65 > audit_backlog_limit=64 [ 529.168739][T12631] audit: backlog limit exceeded [ 530.075991][T12657] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 530.082517][T12657] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 530.136733][T12657] vhci_hcd vhci_hcd.0: Device attached [ 530.162898][T12664] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2052'. [ 530.199229][T12658] vhci_hcd: connection closed [ 530.199464][ T5943] vhci_hcd vhci_hcd.3: stop threads [ 530.224210][T12665] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2051'. [ 530.229570][ T5943] vhci_hcd vhci_hcd.3: release socket [ 530.282079][ T5943] vhci_hcd vhci_hcd.3: disconnect device [ 530.600454][T12671] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5623] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[12671] [ 532.631256][T12703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2065'. [ 532.675301][T12703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2065'. [ 533.690966][T12721] syzkaller0: entered promiscuous mode [ 533.699166][T12721] syzkaller0: entered allmulticast mode [ 534.059794][T12734] netlink: 'syz.0.2076': attribute type 21 has an invalid length. [ 534.276662][ T30] kauditd_printk_skb: 8900 callbacks suppressed [ 534.276686][ T30] audit: type=1400 audit(1780376171.840:75730): avc: denied { read } for pid=5280 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 534.309818][ T30] audit: type=1400 audit(1780376171.840:75731): avc: denied { read } for pid=5280 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 534.344118][ T30] audit: type=1400 audit(1780376171.840:75732): avc: denied { read } for pid=5280 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 534.384756][ T30] audit: type=1400 audit(1780376171.840:75733): avc: denied { read } for pid=5280 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 534.417638][ T5280] audit: audit_backlog=65 > audit_backlog_limit=64 [ 534.431295][ T30] audit: type=1400 audit(1780376171.840:75734): avc: denied { read } for pid=5280 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 534.472488][ T5280] audit: audit_lost=4571 audit_rate_limit=0 audit_backlog_limit=64 [ 534.504737][T12741] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2078'. [ 534.516551][ T30] audit: type=1400 audit(1780376171.840:75735): avc: denied { read } for pid=5280 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 534.520586][ T5280] audit: backlog limit exceeded [ 534.538221][ T30] audit: type=1400 audit(1780376171.840:75736): avc: denied { read } for pid=5280 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 534.626924][T12743] netlink: 'syz.4.2078': attribute type 10 has an invalid length. [ 534.690799][T12743] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2078'. [ 535.456864][T12752] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2080'. [ 535.526010][T12755] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2080'. [ 535.617216][T12756] netlink: 'syz.3.2080': attribute type 10 has an invalid length. [ 535.722109][T12756] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2080'. [ 539.628689][ T30] kauditd_printk_skb: 12709 callbacks suppressed [ 539.628701][ T30] audit: type=1400 audit(1780376176.857:88446): avc: denied { read } for pid=5280 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 539.665838][ T5280] audit: audit_backlog=65 > audit_backlog_limit=64 [ 539.672792][ T5280] audit: audit_lost=4572 audit_rate_limit=0 audit_backlog_limit=64 [ 539.672821][ T30] audit: type=1400 audit(1780376176.876:88447): avc: denied { read } for pid=5280 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 539.690070][ T5280] audit: backlog limit exceeded [ 539.713634][ T30] audit: type=1400 audit(1780376176.876:88448): avc: denied { read } for pid=5280 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 539.717457][ T5280] audit: audit_backlog=65 > audit_backlog_limit=64 [ 539.758142][ T5280] audit: audit_lost=4573 audit_rate_limit=0 audit_backlog_limit=64 [ 539.758227][ T30] audit: type=1400 audit(1780376176.876:88449): avc: denied { read } for pid=5280 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 539.766110][ T5280] audit: backlog limit exceeded [ 541.925686][ T31] INFO: task kworker/0:5:5712 blocked for more than 143 seconds. [ 541.933472][ T31] Tainted: G L syzkaller #0 [ 541.950723][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 541.961569][ T31] task:kworker/0:5 state:D stack:22504 pid:5712 tgid:5712 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 541.973749][ T31] Workqueue: usb_hub_wq hub_event [ 541.979115][ T31] Call Trace: [ 541.982472][ T31] [ 541.985473][ T31] __schedule+0x1295/0x67a0 [ 541.990417][ T31] ? __device_attach+0x1e4/0x4d0 [ 541.995456][ T31] ? __pfx___schedule+0x10/0x10 [ 542.000599][ T31] ? find_held_lock+0x2b/0x80 [ 542.005361][ T31] ? schedule+0x2bf/0x390 [ 542.009917][ T31] schedule+0xdd/0x390 [ 542.014311][ T31] schedule_timeout+0x1b2/0x280 [ 542.019240][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 542.025031][ T31] ? mark_held_locks+0x40/0x70 [ 542.029921][ T31] __wait_for_common+0x2e7/0x4c0 [ 542.035146][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 542.040609][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 542.046363][ T31] ? __pfx_device_del+0x10/0x10 [ 542.051301][ T31] ? kobject_put+0xb9/0x640 [ 542.056072][ T31] i2c_del_adapter+0x62d/0x820 [ 542.061388][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 542.066987][ T31] ? dvb_usb_device_exit+0x29a/0x520 [ 542.072384][ T31] ? rcu_is_watching+0x12/0xc0 [ 542.077403][ T31] dvb_usb_i2c_exit+0x9f/0xf0 [ 542.082166][ T31] dvb_usb_device_exit+0x313/0x520 [ 542.087633][ T31] ? __pfx_dvb_usb_device_exit+0x10/0x10 [ 542.093371][ T31] cxusb_probe.cold+0x4d/0xc2 [ 542.099027][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 542.104932][ T31] ? __pfx_cxusb_probe+0x10/0x10 [ 542.111140][ T31] ? __pm_runtime_set_status+0x13c/0x970 [ 542.117007][ T31] usb_probe_interface+0x303/0x8f0 [ 542.122399][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 542.128277][ T31] really_probe+0x241/0xa60 [ 542.132870][ T31] __driver_probe_device+0x22e/0x480 [ 542.138242][ T31] driver_probe_device+0x4c/0x1b0 [ 542.143668][ T31] __device_attach_driver+0x1df/0x340 [ 542.149149][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 542.155367][ T31] bus_for_each_drv+0x159/0x1e0 [ 542.160454][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 542.165919][ T31] ? lockdep_hardirqs_on+0x78/0x100 [ 542.171457][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 542.177360][ T31] __device_attach+0x1e4/0x4d0 [ 542.183133][ T31] ? __pfx___device_attach+0x10/0x10 [ 542.188543][ T31] ? do_raw_spin_unlock+0x145/0x1e0 [ 542.195370][ T31] device_initial_probe+0xaf/0xd0 [ 542.200518][ T31] bus_probe_device+0x64/0x160 [ 542.206997][ T31] device_add+0x1210/0x1950 [ 542.211614][ T31] ? __pfx_device_add+0x10/0x10 [ 542.234831][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 542.240677][ T31] usb_set_configuration+0xd97/0x1c60 [ 542.256210][ T31] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 542.263842][ T31] usb_generic_driver_probe+0xa1/0xe0 [ 542.277585][ T31] usb_probe_device+0xef/0x400 [ 542.288282][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 542.299454][ T31] really_probe+0x241/0xa60 [ 542.305484][ T31] __driver_probe_device+0x22e/0x480 [ 542.321345][ T31] ? usb_driver_applicable+0x1c7/0x220 [ 542.328371][ T31] driver_probe_device+0x4c/0x1b0 [ 542.341714][ T31] __device_attach_driver+0x1df/0x340 [ 542.352409][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 542.363076][ T31] bus_for_each_drv+0x159/0x1e0 [ 542.373723][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 542.384429][ T31] ? lockdep_hardirqs_on+0x78/0x100 [ 542.395046][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 542.405811][ T31] __device_attach+0x1e4/0x4d0 [ 542.416476][ T31] ? __pfx___device_attach+0x10/0x10 [ 542.427158][ T31] ? do_raw_spin_unlock+0x145/0x1e0 [ 542.437950][ T31] device_initial_probe+0xaf/0xd0 [ 542.448539][ T31] bus_probe_device+0x64/0x160 [ 542.459211][ T31] device_add+0x1210/0x1950 [ 542.469917][ T31] ? __pfx_device_add+0x10/0x10 [ 542.476366][ T31] ? add_device_randomness+0xb7/0xf0 [ 542.491293][ T31] usb_new_device.cold+0x685/0x115c [ 542.498071][ T31] ? do_raw_spin_lock+0x128/0x260 [ 542.512634][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 542.517876][ T31] ? mark_held_locks+0x40/0x70 [ 542.522628][ T31] hub_event+0x314d/0x4af0 [ 542.544648][ T31] ? __pfx_hub_event+0x10/0x10 [ 542.549450][ T31] ? assoc_array_insert+0x1ab0/0x32c0 [ 542.554817][ T31] ? rcu_is_watching+0x12/0xc0 [ 542.576742][ T31] process_one_work+0xa0e/0x1980 [ 542.582368][ T31] ? __pfx_process_one_work+0x10/0x10 [ 542.589240][ T31] ? __pfx_hub_event+0x10/0x10 [ 542.594657][ T31] worker_thread+0x5ef/0xe50 [ 542.600038][ T31] ? kthread+0x13a/0x450 [ 542.605025][ T31] ? __pfx_worker_thread+0x10/0x10 [ 542.611470][ T31] kthread+0x370/0x450 [ 542.616158][ T31] ? __pfx_kthread+0x10/0x10 [ 542.621479][ T31] ret_from_fork+0x72b/0xd50 [ 542.626768][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 542.632381][ T31] ? __switch_to+0x800/0x1100 [ 542.637470][ T31] ? __pfx_kthread+0x10/0x10 [ 542.642580][ T31] ret_from_fork_asm+0x1a/0x30 [ 542.647808][ T31] [ 542.660749][ T31] [ 542.660749][ T31] Showing all locks held in the system: [ 542.669917][ T31] 1 lock held by khungtaskd/31: [ 542.675109][ T31] #0: ffffffff8e7e5560 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 542.686621][ T31] 2 locks held by getty/5373: [ 542.692604][ T31] #0: ffff8880371c80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 542.703233][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0 [ 542.714303][ T31] 5 locks held by kworker/0:5/5712: [ 542.719972][ T31] #0: ffff888022e9dd40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 542.731209][ T31] #1: ffffc9000494fd08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 542.743156][ T31] #2: ffff88802b3311d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 542.752533][ T31] #3: ffff8880741a21d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 542.762260][ T31] #4: ffff8880741a41a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 542.772024][ T31] 3 locks held by kworker/u8:21/5955: [ 542.778582][ T31] #0: ffff88813fe94140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 542.790794][ T31] #1: ffffc900056f7d08 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 542.802603][ T31] #2: ffffffff906035a0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 542.812282][ T31] 4 locks held by udevd/6217: [ 542.817358][ T31] #0: ffff88807d7ad1b8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270 [ 542.826853][ T31] #1: ffff88805552f080 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4f/0x2a0 [ 542.836786][ T31] #2: ffff888037dd0008 (kn->active#31){++++}-{0:0}, at: kernfs_seq_start+0xbc/0x2a0 [ 542.846759][ T31] #3: ffff8880741a21d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 542.856578][ T31] 4 locks held by kworker/u8:48/8804: [ 542.862337][ T31] #0: ffff88801c6c0940 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 542.873331][ T31] #1: ffffc9001ba97d08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 542.884220][ T31] #2: ffffffff905ea848 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 542.894164][ T31] #3: ffffffff906035a0 (rtnl_mutex){+.+.}-{4:4}, at: cfg80211_pernet_exit+0x17/0x120 [ 542.904291][ T31] 2 locks held by syz.1.2071/12720: [ 542.910053][ T31] #0: ffffffff906035a0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 542.919644][ T31] #1: ffffffff8e7f10a8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 542.930166][ T31] 1 lock held by syz.0.2076/12734: [ 542.935708][ T31] #0: ffffffff906035a0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newroute+0x148/0x210 [ 542.945825][ T31] 2 locks held by syz.4.2078/12741: [ 542.952038][ T31] #0: ffffffff90d916e8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0 [ 542.962157][ T31] #1: ffffffff906035a0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8bb/0x2380 [ 542.971640][ T31] 1 lock held by syz.4.2078/12742: [ 542.977235][ T31] #0: ffffffff906035a0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8bb/0x2380 [ 542.986790][ T31] 1 lock held by syz.4.2078/12743: [ 542.992734][ T31] #0: ffffffff906035a0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_setlink+0x4e6/0xae0 [ 543.002272][ T31] 2 locks held by syz.3.2080/12752: [ 543.007927][ T31] #0: ffffffff90d916e8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0 [ 543.017997][ T31] #1: ffffffff906035a0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8bb/0x2380 [ 543.027655][ T31] 1 lock held by syz.3.2080/12755: [ 543.033247][ T31] #0: ffffffff906035a0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8bb/0x2380 [ 543.043062][ T31] 1 lock held by syz.3.2080/12756: [ 543.048612][ T31] #0: ffffffff906035a0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_setlink+0x4e6/0xae0 [ 543.058369][ T31] 1 lock held by syz.2.2081/12753: [ 543.064216][ T31] #0: ffffffff906035a0 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x371/0xe90 [ 543.074503][ T31] [ 543.083871][ T31] ============================================= [ 543.083871][ T31] [ 543.093385][ T31] NMI backtrace for cpu 1 [ 543.093408][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 543.093430][ T31] Tainted: [L]=SOFTLOCKUP [ 543.093436][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 543.093445][ T31] Call Trace: [ 543.093451][ T31] [ 543.093459][ T31] dump_stack_lvl+0x100/0x190 [ 543.093485][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 543.093507][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 543.093528][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 543.093557][ T31] sys_info+0x141/0x190 [ 543.093580][ T31] watchdog+0xcb1/0x1030 [ 543.093604][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 543.093624][ T31] ? __pfx_watchdog+0x10/0x10 [ 543.093642][ T31] ? __kthread_parkme+0x18c/0x230 [ 543.093671][ T31] ? kthread+0x13a/0x450 [ 543.093687][ T31] ? __pfx_watchdog+0x10/0x10 [ 543.093704][ T31] kthread+0x370/0x450 [ 543.093722][ T31] ? __pfx_kthread+0x10/0x10 [ 543.093743][ T31] ret_from_fork+0x72b/0xd50 [ 543.093765][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 543.093788][ T31] ? __switch_to+0x800/0x1100 [ 543.093824][ T31] ? __pfx_kthread+0x10/0x10 [ 543.093845][ T31] ret_from_fork_asm+0x1a/0x30 [ 543.093883][ T31] [ 543.093897][ T31] Sending NMI from CPU 1 to CPUs 0: [ 543.226938][ C0] NMI backtrace for cpu 0 [ 543.226957][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 543.226976][ C0] Tainted: [L]=SOFTLOCKUP [ 543.226981][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 543.226990][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 543.227013][ C0] Code: c6 92 02 e9 43 44 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 21 22 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 543.227027][ C0] RSP: 0018:ffffffff8e407e00 EFLAGS: 00000242 [ 543.227040][ C0] RAX: 0000000001bb13d9 RBX: ffffffff8e4955c0 RCX: ffffffff8b897225 [ 543.227049][ C0] RDX: 0000000000000000 RSI: ffffffff8df0f4f8 RDI: ffffffff8c1c4480 [ 543.227059][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10170867b5 [ 543.227067][ C0] R10: ffff8880b8433dab R11: 0000000000000000 R12: 0000000000000000 [ 543.227076][ C0] R13: fffffbfff1c92ab8 R14: 0000000000000000 R15: ffffffff90d70f50 [ 543.227086][ C0] FS: 0000000000000000(0000) GS:ffff888124383000(0000) knlGS:0000000000000000 [ 543.227100][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 543.227110][ C0] CR2: 00007f6fba4e17db CR3: 000000007f5c7000 CR4: 00000000003526f0 [ 543.227120][ C0] Call Trace: [ 543.227125][ C0] [ 543.227130][ C0] default_idle+0x9/0x10 [ 543.227149][ C0] default_idle_call+0x6c/0xb0 [ 543.227167][ C0] do_idle+0x464/0x590 [ 543.227191][ C0] ? __pfx_do_idle+0x10/0x10 [ 543.227214][ C0] cpu_startup_entry+0x4f/0x60 [ 543.227226][ C0] rest_init+0x251/0x260 [ 543.227238][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 543.227254][ C0] start_kernel+0x484/0x490 [ 543.227276][ C0] x86_64_start_reservations+0x24/0x30 [ 543.227290][ C0] x86_64_start_kernel+0x12b/0x130 [ 543.227303][ C0] common_startup_64+0x13e/0x148 [ 543.227327][ C0] [ 543.415485][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 543.422358][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 543.433038][ T31] Tainted: [L]=SOFTLOCKUP [ 543.437351][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 543.447387][ T31] Call Trace: [ 543.450657][ T31] [ 543.453573][ T31] dump_stack_lvl+0x100/0x190 [ 543.458239][ T31] vpanic+0x552/0x970 [ 543.462215][ T31] ? __pfx_vpanic+0x10/0x10 [ 543.466699][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 543.472871][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 543.479025][ T31] panic+0xd1/0xe0 [ 543.482729][ T31] ? __pfx_panic+0x10/0x10 [ 543.487136][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 543.493293][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 543.499453][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 543.505596][ T31] ? watchdog.cold+0x1ec/0x234 [ 543.510353][ T31] ? watchdog+0xcc1/0x1030 [ 543.514759][ T31] watchdog.cold+0x1fd/0x234 [ 543.519434][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 543.525234][ T31] ? __pfx_watchdog+0x10/0x10 [ 543.529893][ T31] ? __kthread_parkme+0x18c/0x230 [ 543.534911][ T31] ? kthread+0x13a/0x450 [ 543.539144][ T31] ? __pfx_watchdog+0x10/0x10 [ 543.543811][ T31] kthread+0x370/0x450 [ 543.547861][ T31] ? __pfx_kthread+0x10/0x10 [ 543.552433][ T31] ret_from_fork+0x72b/0xd50 [ 543.557010][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 543.562106][ T31] ? __switch_to+0x800/0x1100 [ 543.566781][ T31] ? __pfx_kthread+0x10/0x10 [ 543.571355][ T31] ret_from_fork_asm+0x1a/0x30 [ 543.576127][ T31] [ 543.579440][ T31] Kernel Offset: disabled [ 543.583748][ T31] Rebooting in 86400 seconds..