last executing test programs: 8m54.423619427s ago: executing program 32 (id=228): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$ARCH_SHSTK_STATUS(0x1e, r0, &(0x7f00000001c0), 0x5005) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x318, 0x0) recvmmsg(r1, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) prctl$PR_SET_THP_DISABLE(0x29, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000400)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000480)={[0x100, 0x6, 0x48, 0x4000000000000e52, 0x800000000001, 0x5479, 0x1045, 0x200200000006, 0x0, 0x400000001, 0xfffffffffffffffe, 0x100000000, 0x200000000000001, 0x40000000009, 0x8000000000085, 0xaa4c], 0x2ffc}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, 0x0, 0x0) connect$inet6(r6, &(0x7f0000000a40)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000b00)=0x1, 0x4) 7m8.378835286s ago: executing program 1 (id=416): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$ARCH_SHSTK_STATUS(0x1e, r0, &(0x7f00000001c0), 0x5005) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x318, 0x0) recvmmsg(r1, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) prctl$PR_SET_THP_DISABLE(0x29, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000400)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000480)={[0x100, 0x6, 0x48, 0x4000000000000e52, 0x800000000001, 0x5479, 0x1045, 0x200200000006, 0x0, 0x400000001, 0xfffffffffffffffe, 0x100000000, 0x200000000000001, 0x40000000009, 0x8000000000085, 0xaa4c], 0x2ffc}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000a40)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000b00)=0x1, 0x4) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000b80), 0xffffff6a) 7m7.309610153s ago: executing program 1 (id=418): openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40014) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x5) socket$inet(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000340)='./file0\x00', 0x97) mkdir(&(0x7f0000000380)='./file1\x00', 0x13b) mkdir(&(0x7f00000003c0)='./bus\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newlink={0xa4, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10043}, [@IFLA_LINKINFO={0x7c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x6c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xb, 0x7}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0xc}}, @IFLA_VLAN_EGRESS_QOS={0x34, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xd, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1ff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x283, 0x13}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4bf4, 0x200}}]}, @IFLA_VLAN_INGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8}]}, 0xa4}, 0x1, 0x0, 0x0, 0x48000}, 0x0) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000440), 0x0, &(0x7f0000000480)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000004c0)='./bus\x00') r1 = open(&(0x7f0000000500)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r1, 0x0, 0x0) 7m7.089648078s ago: executing program 1 (id=422): socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) creat(0x0, 0x175) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a0000000200", 0x6) setsockopt(r2, 0x84, 0x80, &(0x7f0000000000)="140000", 0x3) sendto$inet6(r2, &(0x7f00000004c0), 0x0, 0x40811, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c) unshare(0x20000) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./mnt\x00', &(0x7f0000000480)='tmpfs\x00', 0x0, &(0x7f0000000500)='casefold,strict_encoding\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./mnt/dir\x00', 0x1ff) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/dir\x00', 0x10000, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000005c0)=0x40000000) openat(r3, &(0x7f0000000600)='testfile\x00', 0x42, 0x1ff) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e23, 0xd, @loopback, 0xe91}}}, 0x84) acct(&(0x7f0000000000)='./bus\x00') acct(0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 7m4.832418701s ago: executing program 1 (id=423): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000340)) readv(r2, &(0x7f0000003400)=[{0x0}, {&(0x7f00000003c0)=""/4096, 0x1000}, {0x0, 0xffffffab}, {0x0}, {0x0}], 0x5) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/fcloop/ctl/set_cmd_drop\x00', 0x1, 0x0) write(r3, &(0x7f0000000800)='101', 0x3) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "25fd25990fe381b9", "f511161d94f179ecf85eb61b6a4762eb", "1e59ddbe", "06ed010001809f9b"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setns(0xc9, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000070801"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4) 7m3.735272506s ago: executing program 1 (id=426): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x105000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000180)=0x3, 0x7fff) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f00000006c0)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000019700)={0x0, 0x0, &(0x7f0000019740)={&(0x7f0000019780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000000000"], 0x50}}, 0x20044084) 7m2.396738828s ago: executing program 1 (id=427): syz_open_procfs(0x0, &(0x7f0000000340)='net/protocols\x00') socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0xc85}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000240), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x101041, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000780)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) recvmsg$can_raw(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)}, 0x40000000) unshare(0x28000600) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010002000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a320000000040000380080002402000000008000140000000002c000380140001001400010076657468305f746f5f629470"], 0xfc}}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x20) 6m47.078225055s ago: executing program 33 (id=427): syz_open_procfs(0x0, &(0x7f0000000340)='net/protocols\x00') socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0xc85}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000240), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x101041, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000780)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) recvmsg$can_raw(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)}, 0x40000000) unshare(0x28000600) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010002000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a320000000040000380080002402000000008000140000000002c000380140001001400010076657468305f746f5f629470"], 0xfc}}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x20) 2m5.780651205s ago: executing program 0 (id=1082): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000001, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8004, 0x6}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r0, 0x2) r1 = open(&(0x7f0000000180)='.\x00', 0x30000, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fgetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000080)=""/6, 0x6) r2 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x2) flock(r2, 0x1) flock(r1, 0x1) 2m3.628411006s ago: executing program 0 (id=1099): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r6, &(0x7f00000000c0)={0x0, &(0x7f0000000f40)=[@rdmsr={0x66, 0x18, {0x40000108}}], 0x1a}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m3.048866608s ago: executing program 0 (id=1105): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f00000000c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, {'syz', 0x0, '3\x00'}, @uuid={'CRP-syz', 0x0, '2\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, 0x0) 2m2.897596801s ago: executing program 0 (id=1107): socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000240), 0x8, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0xa0080a, 0x0) chdir(&(0x7f00000002c0)='./bus\x00') mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000003c0)='27', 0x2) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x100, &(0x7f00000004c0)={0x100028, 0x100000, 0x100000, {r0}}, 0x20) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x210c, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing\x00', 0x1ff) 2m2.375947208s ago: executing program 0 (id=1110): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000001, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8004, 0x6}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r0, 0x2) r1 = open(&(0x7f0000000180)='.\x00', 0x30000, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fgetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000080)=""/6, 0x6) flock(0xffffffffffffffff, 0x1) flock(r1, 0x1) flock(r0, 0x5) 2m1.933786378s ago: executing program 0 (id=1114): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000001580)='27', 0x2) fcntl$getownex(r0, 0x10, 0x0) capset(&(0x7f00000015c0)={0x19980330}, 0x0) add_key(&(0x7f00000016c0)='asymmetric\x00', 0x0, &(0x7f0000001700)='0', 0x1, 0xffffffffffffffff) 2m1.407785047s ago: executing program 34 (id=1114): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000001580)='27', 0x2) fcntl$getownex(r0, 0x10, 0x0) capset(&(0x7f00000015c0)={0x19980330}, 0x0) add_key(&(0x7f00000016c0)='asymmetric\x00', 0x0, &(0x7f0000001700)='0', 0x1, 0xffffffffffffffff) 1m40.613696615s ago: executing program 5 (id=1193): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r1, &(0x7f00000004c0)="b0", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x38}}}}, 0x84) 1m39.645228436s ago: executing program 5 (id=1198): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0xa, &(0x7f00000000c0)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0xffffffffffffffff}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) 1m38.611207066s ago: executing program 5 (id=1202): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, 0x0}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x40000001, 0x7fff, 0x4, 0x31237648, 0x6, 0xb, 0x4}]}) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r6, &(0x7f00000000c0)={0x0, &(0x7f0000000f40)=[@rdmsr={0x66, 0x18, {0x40000108}}], 0x1a}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m38.056827818s ago: executing program 5 (id=1207): socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000240), 0x8, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0xa0080a, 0x0) chdir(&(0x7f00000002c0)='./bus\x00') mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000003c0)='27', 0x2) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x100, &(0x7f00000004c0)={0x100028, 0x100000, 0x100000, {r0}}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing\x00', 0x1ff) 1m36.6377352s ago: executing program 5 (id=1211): syz_open_procfs(0x0, &(0x7f0000000340)='net/protocols\x00') socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0xc85}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000780)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) recvmsg$can_raw(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)}, 0x40000000) unshare(0x28000600) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010002000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a320000000040000380080002402000000008000140000000002c000380140001001400010076657468305f746f5f629470"], 0xfc}}, 0x0) 1m36.241796103s ago: executing program 5 (id=1213): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0xa, &(0x7f00000000c0)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0xffffffffffffffff}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) 1m35.810558986s ago: executing program 35 (id=1213): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0xa, &(0x7f00000000c0)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0xffffffffffffffff}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) 1m18.946821265s ago: executing program 4 (id=1275): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1740, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x7, 0x7fffeffffffffffc, 0x15, 0x6, 0x9, 0x9, 0xcf, 0x0, 0x4, 0x7ffffffffffffffc, 0x1, 0x0, 0x3, 0x8, 0xfffffffffffffffe], 0x0, 0x1019c4}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m18.419449444s ago: executing program 4 (id=1279): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000240)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xef-\xa6m\xa1\xc4\xb5{\xf2\\\x8d[7k~\x04\x03~K\xfbP\x84=\xfa\x81\x8c\x1et\x10', 0x0) pwrite64(r0, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) lseek(r0, 0x0, 0x4) sendfile(r0, r0, &(0x7f00000001c0), 0x7fa) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x4) mount$fuse(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)=ANY=[]) symlink(&(0x7f0000003080)='./file0/../file0/file0\x00', &(0x7f00000030c0)='./file0/../file0/file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x880cc2, 0x20) 1m17.670467919s ago: executing program 4 (id=1283): r0 = socket(0x10, 0x803, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1c3) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x4010, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0402, 0x0) r1 = syz_usb_connect(0x0, 0x39, &(0x7f0000000200)=ANY=[@ANYBLOB="12010002000000407b0603230001000000010902270001010080320904000003ff0000000705810240000007050202400000070583030a"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/ttyUSB0\x00', 0x12df00, 0x0) chroot(&(0x7f0000000400)='./dev/ttyUSB0\x00') capset(&(0x7f0000000300)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0xffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x46, &(0x7f00000003c0)={0x2a, 0x0}, 0x10) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xc, &(0x7f0000000280)=ANY=[]) modify_ldt$write2(0x11, &(0x7f0000000280)={0xfd8, 0x0, 0x4000, 0x1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000370400"/20, @ANYBLOB="000400000000000028ab08000000000000724c74616800001800028004001200060803008100000006000e0000000000d1656170d549f297f3f87ce3e5b21c7156533bdc4280d2d594b8ba3677e5e9d6804b332ab14779fad771c346159521ff4828a14a7d6ba78d0d"], 0x48}}, 0x0) 1m16.008937773s ago: executing program 4 (id=1288): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000240), 0x8, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000002c0)='./bus\x00') mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000003c0)='27', 0x2) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000980)='./proc/thread-self/fail-nth\x00', 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x100, &(0x7f00000004c0)={0x100028, 0x100000, 0x100000, {r0}}, 0x20) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x210c, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing\x00', 0x1ff) 1m14.613210931s ago: executing program 4 (id=1291): r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) membarrier(0x10, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000300)={0x0}) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f00000001c0)={r3, 0x3, r4, 0x3, 0x80000}) 1m14.189691985s ago: executing program 4 (id=1295): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0xa0, &(0x7f0000000080)=[@in={0x2, 0x4e21, @rand_addr=0x64010101}, @in6={0xa, 0x4e23, 0x3, @private1, 0x2}, @in6={0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x4000100}, @in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e21, 0x7, @mcast1, 0xffffffff}, @in6={0xa, 0x4e20, 0xe76, @empty, 0xa}, @in={0x2, 0x4e21, @broadcast}]}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="7b87f20f"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m13.67444851s ago: executing program 36 (id=1295): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0xa0, &(0x7f0000000080)=[@in={0x2, 0x4e21, @rand_addr=0x64010101}, @in6={0xa, 0x4e23, 0x3, @private1, 0x2}, @in6={0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x4000100}, @in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e21, 0x7, @mcast1, 0xffffffff}, @in6={0xa, 0x4e20, 0xe76, @empty, 0xa}, @in={0x2, 0x4e21, @broadcast}]}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="7b87f20f"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 52.122604257s ago: executing program 6 (id=1419): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./lower\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = fanotify_init(0xf00, 0x1) fanotify_mark(r1, 0x105, 0x40009965, r0, 0x0) mount(0x0, 0x0, &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000240)='lowerdir=lower,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00') 51.894525323s ago: executing program 6 (id=1422): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', 0x0, 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x202, 0x150) write(r0, &(0x7f0000000180)='27', 0x2) r1 = fsopen(&(0x7f0000000300)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 51.462316912s ago: executing program 6 (id=1427): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000180)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000001c0)='batadv_slave_1\x00', 0x10) r2 = socket$inet(0x2, 0x801, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e23, @multicast1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) shutdown(r2, 0x1) sendto$inet(r0, 0x0, 0x0, 0x200007bd, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) 50.453592269s ago: executing program 6 (id=1434): socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000240), 0x8, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000002c0)='./bus\x00') mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000003c0)='27', 0x2) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x100, &(0x7f00000004c0)={0x100028, 0x100000, 0x100000, {r0}}, 0x20) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x210c, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing\x00', 0x1ff) 50.255989283s ago: executing program 6 (id=1436): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0xc85}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x101041, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000780)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) recvmsg$can_raw(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)}, 0x40000000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010002000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a320000000040000380080002402000000008000140000000002c000380140001001400010076657468305f746f5f629470"], 0xfc}}, 0x0) 49.857949574s ago: executing program 6 (id=1438): capset(&(0x7f0000000300)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0xffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x46, 0x0, 0x0) 49.554181789s ago: executing program 37 (id=1438): capset(&(0x7f0000000300)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0xffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x46, 0x0, 0x0) 4.821271336s ago: executing program 7 (id=1717): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x11, 0x14, 0x0, &(0x7f00000015c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_DECOMPRESS_FILE(0xffffffffffffffff, 0x8918, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x90}}, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x26) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="b4020000ff020000000000000000f759f500b37e1c55821820d69f369ad13b000004000000000000000000a8d9adf216ae81"], &(0x7f00000003c0)='GPL\x00', 0x9, 0xa733, &(0x7f0000000400)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000500), 0x36c, 0x10, &(0x7f0000000540), 0x26}, 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) close(r3) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000580)={&(0x7f00000005c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, 0x0}, 0x30004040) close(r3) 4.490747736s ago: executing program 7 (id=1721): madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x16) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r0, 0x0, &(0x7f0000001780)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000001800)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x120}}}, &(0x7f0000001840)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f0000001880)={0x0, 0xffff7ffe, 0x0, 0x4, 0x81f3}, &(0x7f0000001900)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x3872ae932ec4a6e2, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0x93}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a43, 0x0, 0x40040005, 0x335}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x3, 0xffffffff}}], 0x1, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000001c00)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000003cc0)='dctcp', 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1e) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) ppoll(&(0x7f0000000380)=[{0xffffffffffffffff, 0x10000}], 0x1, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x30728a2, 0x0) connect$inet(r4, &(0x7f0000003d00)={0x2, 0x4e21, @local}, 0x10) 4.328425215s ago: executing program 2 (id=1722): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r3}, 0x18) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) pread64(r4, &(0x7f0000000240)=""/133, 0x85, 0x4640) 3.880628643s ago: executing program 3 (id=1724): timer_create(0x1, &(0x7f0000000300)={0x0, 0x21, 0x2}, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000100)='$e', 0x2, 0x20008005, &(0x7f00000000c0)={0x2, 0x4e20}, 0x10) readv(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/210, 0xd2}], 0x1) recvfrom(r0, &(0x7f0000000300)=""/102, 0xfffffffffffffe30, 0x736, 0x0, 0x0) 3.427272332s ago: executing program 7 (id=1726): openat$fuse(0xffffffffffffff9c, &(0x7f0000003680), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', 0x0, &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000040)='./bus\x00', 0x1c527e, 0x10) r1 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000340)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}, {0x85, 0x0, 0x0, 0x70}}, @call={0x85, 0x0, 0x0, 0xa1}]}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendfile(r1, r0, 0x0, 0x7ffff000) write$vhost_msg(r1, &(0x7f000000abc0)={0x1, {&(0x7f0000000080)=""/50, 0x32, &(0x7f0000009bc0)=""/4096, 0x2, 0x4}}, 0x48) 3.323192773s ago: executing program 2 (id=1727): syz_open_procfs(0x0, &(0x7f0000000340)='net/protocols\x00') socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0xc85}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) close(0xffffffffffffffff) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000780)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) recvmsg$can_raw(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)}, 0x40000000) unshare(0x28000600) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010002000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a320000000040000380080002402000000008000140000000002c000380140001001400010076657468305f746f5f629470"], 0xfc}}, 0x0) 3.202783177s ago: executing program 7 (id=1728): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000040)='7', 0x1, 0x40800, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e20, 0x9, @loopback}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x2c, &(0x7f0000000340)=[@in6={0xa, 0x4e20, 0x0, @loopback}, @in={0x2, 0x4e20, @loopback}]}, &(0x7f0000000380)=0x10) 3.202349067s ago: executing program 8 (id=1729): openat$fuse(0xffffffffffffff9c, &(0x7f0000003680), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./dev\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000040)='./bus\x00', 0x1c527e, 0x10) r1 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000340)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}, {0x85, 0x0, 0x0, 0x70}}, @call={0x85, 0x0, 0x0, 0xa1}]}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendfile(r1, r0, 0x0, 0x7ffff000) write$vhost_msg(r1, &(0x7f000000abc0)={0x1, {&(0x7f0000000080)=""/50, 0x32, &(0x7f0000009bc0)=""/4096, 0x2, 0x4}}, 0x48) 3.046728432s ago: executing program 8 (id=1730): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./dev\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000040)='./bus\x00', 0x1c527e, 0x10) r1 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000340)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}, {0x85, 0x0, 0x0, 0x70}}, @call={0x85, 0x0, 0x0, 0xa1}]}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendfile(r1, r0, 0x0, 0x7ffff000) write$vhost_msg(r1, &(0x7f000000abc0)={0x1, {&(0x7f0000000080)=""/50, 0x32, &(0x7f0000009bc0)=""/4096, 0x2, 0x4}}, 0x48) 2.929917103s ago: executing program 3 (id=1731): madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x16) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r0, 0x0, &(0x7f0000001780)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000001800)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x120}}}, &(0x7f0000001840)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f0000001880)={0x0, 0xffff7ffe, 0x0, 0x4, 0x81f3}, &(0x7f0000001900)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x3872ae932ec4a6e2, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0x93}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a43, 0x0, 0x40040005, 0x335}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x3, 0xffffffff}}], 0x1, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000001c00)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000003cc0)='dctcp', 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1e) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='mountinfo\x00') ppoll(&(0x7f0000000380)=[{r5, 0x10000}], 0x1, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x30728a2, 0x0) connect$inet(r4, &(0x7f0000003d00)={0x2, 0x4e21, @local}, 0x10) 2.794371599s ago: executing program 9 (id=1732): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) mkdir(&(0x7f0000000300)='./bus\x00', 0x63) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@metacopy_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) unlink(&(0x7f0000000240)='./file0/file2\x00') 2.705660394s ago: executing program 9 (id=1733): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x2, 0x20, 0x30}, 0xc) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000940)="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", 0x34000, 0xbcff, 0x0, 0x0) writev(r0, 0x0, 0x0) 2.614692608s ago: executing program 9 (id=1734): socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe(&(0x7f0000000040)) socket$tipc(0x1e, 0x5, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000000040000ed", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/14], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x578}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r3 = socket$inet6(0xa, 0x3, 0x3c) writev(r3, &(0x7f0000000a00)=[{&(0x7f0000000a40)="06c3", 0x2}, {&(0x7f0000000a80)="ee993abf99d826c3107b1259f25b162e724318d5d0c450141df0608f0f4f51cef8c8e8a49edb5af15fc39f35bbd0157324e55b9cd5f17e0a310913b385f189d13027c20b60d962cf7548082713069833a794bcffcd5f6daba24f91232f678cd091bcae6ec94991775faffbaf2645fd5a38a66a85eaac7006c9feee4f0f1ae0eb6374378f0acf90b6cc9e04c4c5bc5875bcdf80f18879ffd4a823bed96903405e4ac629733e48576a6e28e775fa1bd30190342fc3ea2fa690f84c78cd494d7ea7d50dbff1f362f3ed52cd7ae86e10efc957f23a0dd5cbc7ce0edbf2eb0c7dd53cf1f1cf10dd42790050f0e38d51a822e303802eeeaf8fa3875b7943f61f4530262b8775b7d31a2c3aa2ac6fe44e614e9d4c2abd00ea17142e7216632baca316fe7731dee60a8847b5d1207edf990bf254c5695ca9f2e35933864ded45bc6b109b5d2db3a19af0066d07798b044c2c228d3ce5c5f2b40499580a6a5dbd15f90bcf4ef8126cd4b818c84d27ca3bed4ee9d149afca7bc927b9df102e98a49add9a9c52ec950d679e4f40726736d974a2c4e9118c36238fe7aa057dee0f4433d587d4f3fb2cc39c8f9578eb80a4c5f3150d7a0f7aefa4eb8aecc70560880b0a7c6a835251427613c57dabddda6c8d407b1f2785f2a18918d5d5184c2156889d8c9be6c8e6e979a4987375d9566c1bf23d9b262fc4532c79afc3f1ae57bc3f8c838564ca2ea50ae26a6b9fa977f47bd2dbfebfc15dc602028520e37166c31adad67d17227963b970128477b107e5c4aaccc3d2feceaadecc3b1186765b52c72e9f70afa268a6213bd78d283f643f7b3769ad9a518336a79c45e9500887c469efea14102777a55ecbdac7aad31cc44f192b287e1366cee23125cd35b9adb7da8b3e1ce29931536957231818a2af645375b050bf82ad896afee5a98149861abbcbfe74f411d39897fcf2b61f4d8616224bcc082f68b0faf923093b38c87ca4d42d80e69f37bde9b8ed7c014c77010fae5007d7a229bcd72d2283cb47aacc2a7ca72066839bbd81ab58a98ba1b751e61c44f60157c549d872f3a36c1b99982fd51f329be6ed59379275d01a311a95cdb65b5f851699f9f2903a88fa63eb22453ec95082d3cd804fba64f67272b0ec4e322bcaa0d40a5d86398438e09352a3f2f2428009b5c4cede8720463c61765ae9a46f51827430d05755b1de5ee8a1835b5ec06890d921c63b0ac1c97f8bfc786c13cb3d88603ae5779076e0083ac0374870f32f299faff14cd86b78da9f56388d50e57d92e24bf6db454cb1579e6590f520be854baded354f235b0452b0fad58a67e8ed8cb0dad6c64c9b964ac18aab442b1c579b56287a1cceb23bd2885f93b8912217522f4e0139b2e0a65c117a0fa6aa8beba3298fbeca3ecc72c43eafe0a59e1e6c0a7810d2e0119203ae0990c69519f1cccaf553f20d7401881b579c3d5d23eb2cadab61dcfe231c62982091a2a1d733c5e2d768dc700655b834d83e58af85b9e87808c66e0a67903a0fbe940774ecbec6b069bbf4d72ad1f7adbae9bfbfe52fdea6397918fb5736e338ebb9329a7528f5b54ca3d5db39bf1c7e086096ff2d3abf275137e8c83e8fe1acf1f1bf9247e94855abd99d9ee8a2fa57b942a5fcf23db702286d5acf19147cfe51faa9ffbbf0562d344af117161ddad99603a50c2c896c1f9c3123dcec6844555b38bf3e7a52fcfeb3278035912763401edd4efb5d5744d5afbdf65d4df37f718c36166d43d03ff9ec61a16b91d6f8beffc1de631b5adcaa26d71829c92476f30ec4ca9c719c93611c4ba869dc044923fb8fa7e8e1e5fafc33a64deb307e3dc1e4d440118ba3d1cce4694a95eb9f1dae0f22a151f2de0a680c943f09928a20ffdea468d457a6206c13c5481a63101bdbc60f7a24b8e2c01e75b29466cace3e1347521995de18cac59392b0ab71285115528186e8f5d5ad0c4f46966515c2ba7f692aa6d4c87ebd93f4d286a32d3501545dde40f2be11891d5f0860d62320838ea95d35973e73466cc7f74ce1f06051de75abe44d6e0d72cb5d05a147c9f57bc37b1a5e03cd95194541636d2d9eb6e8d051d3a4d209b8db5c38999e10ab71309e005526beef8d81e385a00acfc9c6ce1ec7c4c36753c0622145e23ce7b8422d97248fb6ff22a0a58998", 0x600}, {&(0x7f0000001080)="4c7911315ed07e13be5391e38b57247dcbfa424aaec74724dd2da16f11eb", 0x1e}], 0x3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000010c0)={'wlan0\x00', 0x0}) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000001100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000011c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000001200)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001280)={&(0x7f00000012c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001380)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x3c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) bind$packet(r6, &(0x7f0000001480)={0x11, 0x300, r4, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) write(r6, &(0x7f00000014c0)="0802110000010802110000000800450000280000000040007ce70a00", 0x1c) 2.362887965s ago: executing program 2 (id=1735): openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001640)={0x2020}, 0x2020) openat$fuse(0xffffffffffffff9c, &(0x7f0000003680), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./dev\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000040)='./bus\x00', 0x1c527e, 0x10) r1 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000340)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}, {0x85, 0x0, 0x0, 0x70}}, @call={0x85, 0x0, 0x0, 0xa1}]}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendfile(r1, r0, 0x0, 0x7ffff000) write$vhost_msg(r1, &(0x7f000000abc0)={0x1, {&(0x7f0000000080)=""/50, 0x32, &(0x7f0000009bc0)=""/4096, 0x2, 0x4}}, 0x48) 2.24990333s ago: executing program 9 (id=1736): socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe(&(0x7f0000000040)) socket$tipc(0x1e, 0x5, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000000040000ed", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/14], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x578}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r3 = socket$inet6(0xa, 0x3, 0x3c) writev(r3, &(0x7f0000000a00)=[{&(0x7f0000000a40)="06c3", 0x2}, {&(0x7f0000000a80)="ee993abf99d826c3107b1259f25b162e724318d5d0c450141df0608f0f4f51cef8c8e8a49edb5af15fc39f35bbd0157324e55b9cd5f17e0a310913b385f189d13027c20b60d962cf7548082713069833a794bcffcd5f6daba24f91232f678cd091bcae6ec94991775faffbaf2645fd5a38a66a85eaac7006c9feee4f0f1ae0eb6374378f0acf90b6cc9e04c4c5bc5875bcdf80f18879ffd4a823bed96903405e4ac629733e48576a6e28e775fa1bd30190342fc3ea2fa690f84c78cd494d7ea7d50dbff1f362f3ed52cd7ae86e10efc957f23a0dd5cbc7ce0edbf2eb0c7dd53cf1f1cf10dd42790050f0e38d51a822e303802eeeaf8fa3875b7943f61f4530262b8775b7d31a2c3aa2ac6fe44e614e9d4c2abd00ea17142e7216632baca316fe7731dee60a8847b5d1207edf990bf254c5695ca9f2e35933864ded45bc6b109b5d2db3a19af0066d07798b044c2c228d3ce5c5f2b40499580a6a5dbd15f90bcf4ef8126cd4b818c84d27ca3bed4ee9d149afca7bc927b9df102e98a49add9a9c52ec950d679e4f40726736d974a2c4e9118c36238fe7aa057dee0f4433d587d4f3fb2cc39c8f9578eb80a4c5f3150d7a0f7aefa4eb8aecc70560880b0a7c6a835251427613c57dabddda6c8d407b1f2785f2a18918d5d5184c2156889d8c9be6c8e6e979a4987375d9566c1bf23d9b262fc4532c79afc3f1ae57bc3f8c838564ca2ea50ae26a6b9fa977f47bd2dbfebfc15dc602028520e37166c31adad67d17227963b970128477b107e5c4aaccc3d2feceaadecc3b1186765b52c72e9f70afa268a6213bd78d283f643f7b3769ad9a518336a79c45e9500887c469efea14102777a55ecbdac7aad31cc44f192b287e1366cee23125cd35b9adb7da8b3e1ce29931536957231818a2af645375b050bf82ad896afee5a98149861abbcbfe74f411d39897fcf2b61f4d8616224bcc082f68b0faf923093b38c87ca4d42d80e69f37bde9b8ed7c014c77010fae5007d7a229bcd72d2283cb47aacc2a7ca72066839bbd81ab58a98ba1b751e61c44f60157c549d872f3a36c1b99982fd51f329be6ed59379275d01a311a95cdb65b5f851699f9f2903a88fa63eb22453ec95082d3cd804fba64f67272b0ec4e322bcaa0d40a5d86398438e09352a3f2f2428009b5c4cede8720463c61765ae9a46f51827430d05755b1de5ee8a1835b5ec06890d921c63b0ac1c97f8bfc786c13cb3d88603ae5779076e0083ac0374870f32f299faff14cd86b78da9f56388d50e57d92e24bf6db454cb1579e6590f520be854baded354f235b0452b0fad58a67e8ed8cb0dad6c64c9b964ac18aab442b1c579b56287a1cceb23bd2885f93b8912217522f4e0139b2e0a65c117a0fa6aa8beba3298fbeca3ecc72c43eafe0a59e1e6c0a7810d2e0119203ae0990c69519f1cccaf553f20d7401881b579c3d5d23eb2cadab61dcfe231c62982091a2a1d733c5e2d768dc700655b834d83e58af85b9e87808c66e0a67903a0fbe940774ecbec6b069bbf4d72ad1f7adbae9bfbfe52fdea6397918fb5736e338ebb9329a7528f5b54ca3d5db39bf1c7e086096ff2d3abf275137e8c83e8fe1acf1f1bf9247e94855abd99d9ee8a2fa57b942a5fcf23db702286d5acf19147cfe51faa9ffbbf0562d344af117161ddad99603a50c2c896c1f9c3123dcec6844555b38bf3e7a52fcfeb3278035912763401edd4efb5d5744d5afbdf65d4df37f718c36166d43d03ff9ec61a16b91d6f8beffc1de631b5adcaa26d71829c92476f30ec4ca9c719c93611c4ba869dc044923fb8fa7e8e1e5fafc33a64deb307e3dc1e4d440118ba3d1cce4694a95eb9f1dae0f22a151f2de0a680c943f09928a20ffdea468d457a6206c13c5481a63101bdbc60f7a24b8e2c01e75b29466cace3e1347521995de18cac59392b0ab71285115528186e8f5d5ad0c4f46966515c2ba7f692aa6d4c87ebd93f4d286a32d3501545dde40f2be11891d5f0860d62320838ea95d35973e73466cc7f74ce1f06051de75abe44d6e0d72cb5d05a147c9f57bc37b1a5e03cd95194541636d2d9eb6e8d051d3a4d209b8db5c38999e10ab71309e005526beef8d81e385a00acfc9c6ce1ec7c4c36753c0622145e23ce7b8422d97248fb6ff22a0a58998", 0x600}, {&(0x7f0000001080)="4c7911315ed07e13be5391e38b57247dcbfa424aaec74724dd2da16f11eb", 0x1e}], 0x3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000010c0)={'wlan0\x00', 0x0}) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000001100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000011c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000001200)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001280)={&(0x7f00000012c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001380)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001440)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) bind$packet(r6, &(0x7f0000001480)={0x11, 0x300, r4, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) write(r6, &(0x7f00000014c0)="0802110000010802110000000800450000280000000040007ce70a00", 0x1c) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000001580)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) 2.229936584s ago: executing program 7 (id=1737): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r3}, 0x18) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) pread64(r4, &(0x7f0000000240)=""/133, 0x85, 0x4640) 2.068239609s ago: executing program 8 (id=1738): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x101}) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x709a82, 0xcc) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, &(0x7f00000001c0)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./debug\x00', &(0x7f0000000440)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000480)='./debug/lru_gen\x00', 0x2, 0x0) listen(r0, 0x9) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x406, r1) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000500)={0x20000004}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000540)={0x20000002}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000580)={0x20000001}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000005c0)) accept$inet(r0, 0x0, 0x0) socket$inet(0x2, 0x80001, 0x84) 1.907747245s ago: executing program 3 (id=1739): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x4, 0x2, 0x7, 0x0, 0x1, 0xe90}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xd, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0x11}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc3}}]}, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x13, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 1.791398286s ago: executing program 3 (id=1740): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write$P9_RWALK(r0, &(0x7f0000000200)={0x30, 0x6f, 0x1, {0x3, [{0x80, 0x3, 0x7}, {0x1, 0x3, 0x5}, {0x3, 0x4, 0x6}]}}, 0x30) 1.654193245s ago: executing program 9 (id=1741): timer_create(0x1, &(0x7f0000000300)={0x0, 0x21, 0x2}, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000100)='$e', 0x2, 0x20008005, &(0x7f00000000c0)={0x2, 0x4e20}, 0x10) readv(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/210, 0xd2}], 0x1) recvfrom(r0, &(0x7f0000000300)=""/102, 0xfffffffffffffe30, 0x736, 0x0, 0x0) 1.567775203s ago: executing program 3 (id=1742): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)='sysfs\x00', 0x1214040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0x4, 0x80) getdents64(r2, &(0x7f0000000940)=""/4113, 0x1011) bpf$PROG_LOAD(0x5, &(0x7f0000001980)={0x10, 0x0, &(0x7f0000001a40), 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000001ac0)='dir0\x00', 0x80) mount(0x0, &(0x7f0000001b00)='dir0\x00', &(0x7f0000001b40)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000001b80)='dir0/per_cpu/cpu0/trace\x00', 0x0, 0x0) read(r3, &(0x7f0000001bc0)=""/4, 0x1) 1.294424467s ago: executing program 2 (id=1743): socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe(&(0x7f0000000040)) socket$tipc(0x1e, 0x5, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000000040000ed", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/14], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x578}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r3 = socket$inet6(0xa, 0x3, 0x3c) writev(r3, &(0x7f0000000a00)=[{&(0x7f0000000a40)="06c3", 0x2}, {&(0x7f0000000a80)="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", 0x600}, {&(0x7f0000001080)="4c7911315ed07e13be5391e38b57247dcbfa424aaec74724dd2da16f11eb", 0x1e}], 0x3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000010c0)={'wlan0\x00', 0x0}) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000001100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000011c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000001200)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001280)={&(0x7f00000012c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001380)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001440)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) bind$packet(r6, &(0x7f0000001480)={0x11, 0x300, r4, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) write(r6, &(0x7f00000014c0)="0802110000010802110000000800450000280000000040007ce70a00", 0x1c) 1.118375409s ago: executing program 8 (id=1744): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x2, 0x20, 0x30}, 0xc) sendto$inet6(r0, &(0x7f0000000200)="1a", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000940)="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", 0x34000, 0xbcff, 0x0, 0x0) writev(r0, 0x0, 0x0) 1.114065962s ago: executing program 2 (id=1745): syz_open_procfs(0x0, &(0x7f0000000340)='net/protocols\x00') socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0xc85}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) recvmsg$can_raw(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)}, 0x40000000) unshare(0x28000600) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010002000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a320000000040000380080002402000000008000140000000002c000380140001001400010076657468305f746f5f629470"], 0xfc}}, 0x0) 845.259278ms ago: executing program 7 (id=1746): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 266.844563ms ago: executing program 3 (id=1747): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r1}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'lo\x00'}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x50) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f00000006c0)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 247.070422ms ago: executing program 9 (id=1748): socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe(&(0x7f0000000040)) socket$tipc(0x1e, 0x5, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000000040000ed", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/14], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x578}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r3 = socket$inet6(0xa, 0x3, 0x3c) writev(r3, &(0x7f0000000a00)=[{&(0x7f0000000a40)="06c3", 0x2}, {&(0x7f0000000a80)="ee993abf99d826c3107b1259f25b162e724318d5d0c450141df0608f0f4f51cef8c8e8a49edb5af15fc39f35bbd0157324e55b9cd5f17e0a310913b385f189d13027c20b60d962cf7548082713069833a794bcffcd5f6daba24f91232f678cd091bcae6ec94991775faffbaf2645fd5a38a66a85eaac7006c9feee4f0f1ae0eb6374378f0acf90b6cc9e04c4c5bc5875bcdf80f18879ffd4a823bed96903405e4ac629733e48576a6e28e775fa1bd30190342fc3ea2fa690f84c78cd494d7ea7d50dbff1f362f3ed52cd7ae86e10efc957f23a0dd5cbc7ce0edbf2eb0c7dd53cf1f1cf10dd42790050f0e38d51a822e303802eeeaf8fa3875b7943f61f4530262b8775b7d31a2c3aa2ac6fe44e614e9d4c2abd00ea17142e7216632baca316fe7731dee60a8847b5d1207edf990bf254c5695ca9f2e35933864ded45bc6b109b5d2db3a19af0066d07798b044c2c228d3ce5c5f2b40499580a6a5dbd15f90bcf4ef8126cd4b818c84d27ca3bed4ee9d149afca7bc927b9df102e98a49add9a9c52ec950d679e4f40726736d974a2c4e9118c36238fe7aa057dee0f4433d587d4f3fb2cc39c8f9578eb80a4c5f3150d7a0f7aefa4eb8aecc70560880b0a7c6a835251427613c57dabddda6c8d407b1f2785f2a18918d5d5184c2156889d8c9be6c8e6e979a4987375d9566c1bf23d9b262fc4532c79afc3f1ae57bc3f8c838564ca2ea50ae26a6b9fa977f47bd2dbfebfc15dc602028520e37166c31adad67d17227963b970128477b107e5c4aaccc3d2feceaadecc3b1186765b52c72e9f70afa268a6213bd78d283f643f7b3769ad9a518336a79c45e9500887c469efea14102777a55ecbdac7aad31cc44f192b287e1366cee23125cd35b9adb7da8b3e1ce29931536957231818a2af645375b050bf82ad896afee5a98149861abbcbfe74f411d39897fcf2b61f4d8616224bcc082f68b0faf923093b38c87ca4d42d80e69f37bde9b8ed7c014c77010fae5007d7a229bcd72d2283cb47aacc2a7ca72066839bbd81ab58a98ba1b751e61c44f60157c549d872f3a36c1b99982fd51f329be6ed59379275d01a311a95cdb65b5f851699f9f2903a88fa63eb22453ec95082d3cd804fba64f67272b0ec4e322bcaa0d40a5d86398438e09352a3f2f2428009b5c4cede8720463c61765ae9a46f51827430d05755b1de5ee8a1835b5ec06890d921c63b0ac1c97f8bfc786c13cb3d88603ae5779076e0083ac0374870f32f299faff14cd86b78da9f56388d50e57d92e24bf6db454cb1579e6590f520be854baded354f235b0452b0fad58a67e8ed8cb0dad6c64c9b964ac18aab442b1c579b56287a1cceb23bd2885f93b8912217522f4e0139b2e0a65c117a0fa6aa8beba3298fbeca3ecc72c43eafe0a59e1e6c0a7810d2e0119203ae0990c69519f1cccaf553f20d7401881b579c3d5d23eb2cadab61dcfe231c62982091a2a1d733c5e2d768dc700655b834d83e58af85b9e87808c66e0a67903a0fbe940774ecbec6b069bbf4d72ad1f7adbae9bfbfe52fdea6397918fb5736e338ebb9329a7528f5b54ca3d5db39bf1c7e086096ff2d3abf275137e8c83e8fe1acf1f1bf9247e94855abd99d9ee8a2fa57b942a5fcf23db702286d5acf19147cfe51faa9ffbbf0562d344af117161ddad99603a50c2c896c1f9c3123dcec6844555b38bf3e7a52fcfeb3278035912763401edd4efb5d5744d5afbdf65d4df37f718c36166d43d03ff9ec61a16b91d6f8beffc1de631b5adcaa26d71829c92476f30ec4ca9c719c93611c4ba869dc044923fb8fa7e8e1e5fafc33a64deb307e3dc1e4d440118ba3d1cce4694a95eb9f1dae0f22a151f2de0a680c943f09928a20ffdea468d457a6206c13c5481a63101bdbc60f7a24b8e2c01e75b29466cace3e1347521995de18cac59392b0ab71285115528186e8f5d5ad0c4f46966515c2ba7f692aa6d4c87ebd93f4d286a32d3501545dde40f2be11891d5f0860d62320838ea95d35973e73466cc7f74ce1f06051de75abe44d6e0d72cb5d05a147c9f57bc37b1a5e03cd95194541636d2d9eb6e8d051d3a4d209b8db5c38999e10ab71309e005526beef8d81e385a00acfc9c6ce1ec7c4c36753c0622145e23ce7b8422d97248fb6ff22a0a58998", 0x600}, {&(0x7f0000001080)="4c7911315ed07e13be5391e38b57247dcbfa424aaec74724dd2da16f11eb", 0x1e}], 0x3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000010c0)={'wlan0\x00', 0x0}) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000001100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000011c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000001200)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001280)={&(0x7f00000012c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001380)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001440)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) write(r6, &(0x7f00000014c0)="0802110000010802110000000800450000280000000040007ce70a00", 0x1c) 152.776235ms ago: executing program 2 (id=1749): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000010c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000011c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001280)={&(0x7f00000012c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001380)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001440)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f0000001480)={0x11, 0x300, r2, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) write(r3, &(0x7f00000014c0)="0802110000010802110000000800450000280000000040007ce70a00", 0x1c) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000001580)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 152.486103ms ago: executing program 8 (id=1750): openat$fuse(0xffffffffffffff9c, &(0x7f0000003680), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./dev\x00', 0x0, 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000040)='./bus\x00', 0x1c527e, 0x10) r1 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000340)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}, {0x85, 0x0, 0x0, 0x70}}, @call={0x85, 0x0, 0x0, 0xa1}]}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendfile(r1, r0, 0x0, 0x7ffff000) write$vhost_msg(r1, &(0x7f000000abc0)={0x1, {&(0x7f0000000080)=""/50, 0x32, &(0x7f0000009bc0)=""/4096, 0x2, 0x4}}, 0x48) 0s ago: executing program 8 (id=1751): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000640)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000800)=@newlink={0x48, 0x10, 0x439, 0x0, 0x60000, {0x0, 0x0, 0x0, r2, 0x15809}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r3, 0x800, 0x11000}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) kernel console output (not intermixed with test programs): _socket permissive=1 [ 594.224424][ T30] audit: type=1400 audit(1793120238.975:338): avc: denied { unmount } for pid=5615 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 595.345000][ T50] rpcbind: server 127.0.0.1 not responding, timed out [ 595.347783][T10227] netlink: 16 bytes leftover after parsing attributes in process `syz.6.892'. [ 595.347814][T10227] netlink: 16 bytes leftover after parsing attributes in process `syz.6.892'. [ 595.347825][T10227] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info Ack ret = -22) [ 595.883878][ T30] audit: type=1400 audit(1793120240.635:339): avc: denied { setopt } for pid=10229 comm="syz.4.893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 596.053984][ T30] audit: type=1400 audit(1793120240.805:340): avc: denied { ioctl } for pid=10236 comm="syz.5.896" path="socket:[32968]" dev="sockfs" ino=32968 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 596.088987][T10239] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 596.128379][T10233] rxe_eth0 speed is unknown, defaulting to 1000 [ 597.823834][T10259] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 598.032389][T10256] jffs2: notice: (10256) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 599.318468][T10282] netlink: 8 bytes leftover after parsing attributes in process `syz.4.912'. [ 599.318485][T10282] netlink: 4 bytes leftover after parsing attributes in process `syz.4.912'. [ 600.528513][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 600.528533][ T30] audit: type=1400 audit(1793120245.285:347): avc: denied { create } for pid=10297 comm="syz.2.917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 600.634586][ T30] audit: type=1400 audit(1793120245.385:348): avc: denied { sys_admin } for pid=10297 comm="syz.2.917" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 600.999835][T10305] FAULT_INJECTION: forcing a failure. [ 600.999835][T10305] name failslab, interval 1, probability 0, space 0, times 0 [ 600.999873][T10305] CPU: 0 UID: 0 PID: 10305 Comm: syz.0.920 Not tainted syzkaller #0 PREEMPT(full) [ 600.999899][T10305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 600.999913][T10305] Call Trace: [ 600.999921][T10305] [ 600.999930][T10305] dump_stack_lvl+0x100/0x190 [ 600.999964][T10305] should_fail_ex.cold+0x5/0xa [ 600.999995][T10305] should_failslab+0xc2/0x120 [ 601.000024][T10305] __kmalloc_cache_noprof+0x91/0x6d0 [ 601.000045][T10305] ? x509_cert_parse+0x9a/0x910 [ 601.000079][T10305] x509_cert_parse+0x9a/0x910 [ 601.000113][T10305] x509_key_preparse+0x65/0x9c0 [ 601.000138][T10305] asymmetric_key_preparse+0xce/0x1d0 [ 601.000165][T10305] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 601.000196][T10305] __key_create_or_update+0x3f6/0xe10 [ 601.000223][T10305] ? __pfx___key_create_or_update+0x10/0x10 [ 601.000242][T10305] ? lookup_user_key+0x477/0x13e0 [ 601.000272][T10305] ? __pfx_lookup_user_key+0x10/0x10 [ 601.000322][T10305] key_create_or_update+0x42/0x60 [ 601.000346][T10305] __do_sys_add_key+0x2e8/0x460 [ 601.000373][T10305] ? __pfx___do_sys_add_key+0x10/0x10 [ 601.000407][T10305] do_syscall_64+0x123/0x790 [ 601.000440][T10305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.000460][T10305] RIP: 0033:0x7fb4c819f559 [ 601.000477][T10305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 601.000496][T10305] RSP: 002b:00007fb4c903a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 601.000517][T10305] RAX: ffffffffffffffda RBX: 00007fb4c8425fa0 RCX: 00007fb4c819f559 [ 601.000529][T10305] RDX: 0000200000003c00 RSI: 0000000000000000 RDI: 0000200000003bc0 [ 601.000541][T10305] RBP: 00007fb4c8236b20 R08: ffffffffffffffff R09: 0000000000000000 [ 601.000552][T10305] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 601.000564][T10305] R13: 00007fb4c8426038 R14: 00007fb4c8425fa0 R15: 00007fff08bba3c8 [ 601.000590][T10305] [ 602.515585][T10319] jffs2: notice: (10319) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 603.679781][T10331] FAULT_INJECTION: forcing a failure. [ 603.679781][T10331] name failslab, interval 1, probability 0, space 0, times 0 [ 603.679812][T10331] CPU: 1 UID: 0 PID: 10331 Comm: syz.4.928 Not tainted syzkaller #0 PREEMPT(full) [ 603.679826][T10331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 603.679833][T10331] Call Trace: [ 603.679838][T10331] [ 603.679844][T10331] dump_stack_lvl+0x100/0x190 [ 603.679869][T10331] should_fail_ex.cold+0x5/0xa [ 603.679886][T10331] should_failslab+0xc2/0x120 [ 603.679904][T10331] __kmalloc_cache_noprof+0x91/0x6d0 [ 603.679917][T10331] ? newseg+0x26b/0xed0 [ 603.679930][T10331] newseg+0x26b/0xed0 [ 603.679943][T10331] ? __pfx_newseg+0x10/0x10 [ 603.679953][T10331] ? ipcget+0x1cb/0xe70 [ 603.679965][T10331] ? find_held_lock+0x2b/0x80 [ 603.679976][T10331] ? ipcget+0x7fc/0xe70 [ 603.679988][T10331] ipcget+0x85b/0xe70 [ 603.680002][T10331] ? __pfx_ipcget+0x10/0x10 [ 603.680013][T10331] ? __x64_sys_futex+0x34f/0x4d0 [ 603.680025][T10331] ? __x64_sys_futex+0x358/0x4d0 [ 603.680040][T10331] __x64_sys_shmget+0x13b/0x1b0 [ 603.680051][T10331] ? __pfx___x64_sys_shmget+0x10/0x10 [ 603.680068][T10331] do_syscall_64+0x123/0x790 [ 603.680087][T10331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.680100][T10331] RIP: 0033:0x7fbe5759f559 [ 603.680110][T10331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 603.680120][T10331] RSP: 002b:00007fbe58423028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 603.680131][T10331] RAX: ffffffffffffffda RBX: 00007fbe57825fa0 RCX: 00007fbe5759f559 [ 603.680139][T10331] RDX: 0000000000000200 RSI: 000ffffffffff000 RDI: 00000000798dd824 [ 603.680146][T10331] RBP: 00007fbe57636b20 R08: 0000000000000000 R09: 0000000000000000 [ 603.680153][T10331] R10: 0000200000ffb000 R11: 0000000000000246 R12: 0000000000000000 [ 603.680160][T10331] R13: 00007fbe57826038 R14: 00007fbe57825fa0 R15: 00007ffdffc43848 [ 603.680175][T10331] [ 603.782750][T10333] FAULT_INJECTION: forcing a failure. [ 603.782750][T10333] name failslab, interval 1, probability 0, space 0, times 0 [ 603.782781][T10333] CPU: 1 UID: 0 PID: 10333 Comm: syz.2.927 Not tainted syzkaller #0 PREEMPT(full) [ 603.782802][T10333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 603.782813][T10333] Call Trace: [ 603.782819][T10333] [ 603.782827][T10333] dump_stack_lvl+0x100/0x190 [ 603.782858][T10333] should_fail_ex.cold+0x5/0xa [ 603.782884][T10333] should_failslab+0xc2/0x120 [ 603.782906][T10333] __kmalloc_node_noprof+0xff/0x870 [ 603.782928][T10333] ? crypto_create_tfm_node+0x8d/0x3b0 [ 603.782955][T10333] crypto_create_tfm_node+0x8d/0x3b0 [ 603.782981][T10333] crypto_alloc_tfm_node+0x102/0x260 [ 603.783008][T10333] init_skcipher_req.constprop.0+0x1d/0x180 [ 603.783030][T10333] derived_key_encrypt.constprop.0+0x10f/0x6b0 [ 603.783055][T10333] ? __pfx_derived_key_encrypt.constprop.0+0x10/0x10 [ 603.783090][T10333] ? kasan_quarantine_put+0x104/0x240 [ 603.783113][T10333] ? lockdep_hardirqs_on+0x7d/0x110 [ 603.783145][T10333] ? __kasan_check_byte+0x13/0x50 [ 603.783176][T10333] ? get_derived_key+0x11b/0x140 [ 603.783198][T10333] encrypted_read+0x389/0x850 [ 603.783219][T10333] ? lock_acquire+0x1d1/0x380 [ 603.783238][T10333] ? __keyctl_read_key+0x22/0xe0 [ 603.783258][T10333] ? __pfx_encrypted_read+0x10/0x10 [ 603.783279][T10333] ? __pfx___might_resched+0x10/0x10 [ 603.783303][T10333] ? down_read+0x136/0x4c0 [ 603.783317][T10333] ? trace_kmalloc+0xeb/0x110 [ 603.783339][T10333] ? __pfx_down_read+0x10/0x10 [ 603.783361][T10333] ? __kvmalloc_node_noprof+0x622/0x9b0 [ 603.783382][T10333] ? __pfx_encrypted_read+0x10/0x10 [ 603.783404][T10333] __keyctl_read_key+0x9d/0xe0 [ 603.783425][T10333] keyctl_read_key+0x1cb/0x360 [ 603.783448][T10333] __do_sys_keyctl+0x36d/0x5a0 [ 603.783472][T10333] do_syscall_64+0x123/0x790 [ 603.783501][T10333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.783520][T10333] RIP: 0033:0x7f605859f559 [ 603.783536][T10333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 603.783551][T10333] RSP: 002b:00007f605943d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 603.783568][T10333] RAX: ffffffffffffffda RBX: 00007f6058825fa0 RCX: 00007f605859f559 [ 603.783578][T10333] RDX: 0000200000000240 RSI: 000000001dd623bc RDI: 000000000000000b [ 603.783589][T10333] RBP: 00007f6058636b20 R08: 0000000000000000 R09: 0000000000000000 [ 603.783598][T10333] R10: 00000000349b7f55 R11: 0000000000000246 R12: 0000000000000000 [ 603.783608][T10333] R13: 00007f6058826038 R14: 00007f6058825fa0 R15: 00007ffca3d8e268 [ 603.783631][T10333] [ 603.783863][T10333] trusted_key: encrypted_key: failed to load cbc(aes) transform (-12) [ 604.352186][T10341] __vm_enough_memory: pid: 10341, comm: syz.5.932, bytes: 4503599627366400 not enough memory for the allocation [ 604.798214][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 605.204404][T10358] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 605.721815][ T30] audit: type=1400 audit(1793120250.475:349): avc: denied { listen } for pid=10372 comm="syz.6.945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 606.340632][ T30] audit: type=1400 audit(1793120251.095:350): avc: denied { accept } for pid=10379 comm="syz.5.948" lport=48328 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 607.433843][T10387] FAULT_INJECTION: forcing a failure. [ 607.433843][T10387] name failslab, interval 1, probability 0, space 0, times 0 [ 607.433883][T10387] CPU: 0 UID: 0 PID: 10387 Comm: syz.6.950 Not tainted syzkaller #0 PREEMPT(full) [ 607.433907][T10387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 607.433918][T10387] Call Trace: [ 607.433927][T10387] [ 607.433934][T10387] dump_stack_lvl+0x100/0x190 [ 607.433970][T10387] should_fail_ex.cold+0x5/0xa [ 607.434000][T10387] should_failslab+0xc2/0x120 [ 607.434028][T10387] __kmalloc_cache_noprof+0x91/0x6d0 [ 607.434048][T10387] ? x509_cert_parse+0x9a/0x910 [ 607.434083][T10387] x509_cert_parse+0x9a/0x910 [ 607.434117][T10387] x509_key_preparse+0x65/0x9c0 [ 607.434145][T10387] asymmetric_key_preparse+0xce/0x1d0 [ 607.434179][T10387] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 607.434210][T10387] __key_create_or_update+0x3f6/0xe10 [ 607.434235][T10387] ? __pfx___key_create_or_update+0x10/0x10 [ 607.434257][T10387] ? lookup_user_key+0x477/0x13e0 [ 607.434288][T10387] ? __pfx_lookup_user_key+0x10/0x10 [ 607.434333][T10387] key_create_or_update+0x42/0x60 [ 607.434355][T10387] __do_sys_add_key+0x2e8/0x460 [ 607.434380][T10387] ? __pfx___do_sys_add_key+0x10/0x10 [ 607.434413][T10387] do_syscall_64+0x123/0x790 [ 607.434444][T10387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.434463][T10387] RIP: 0033:0x7faa54f9f559 [ 607.434479][T10387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 607.434495][T10387] RSP: 002b:00007faa55eb1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 607.434513][T10387] RAX: ffffffffffffffda RBX: 00007faa55225fa0 RCX: 00007faa54f9f559 [ 607.434524][T10387] RDX: 0000200000003c00 RSI: 0000000000000000 RDI: 0000200000003bc0 [ 607.434535][T10387] RBP: 00007faa55036b20 R08: ffffffffffffffff R09: 0000000000000000 [ 607.434545][T10387] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 607.434556][T10387] R13: 00007faa55226038 R14: 00007faa55225fa0 R15: 00007ffc799761a8 [ 607.434580][T10387] [ 607.575803][ T30] audit: type=1400 audit(1793120252.325:351): avc: denied { setopt } for pid=10388 comm="syz.5.952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 607.585486][T10389] netlink: 8 bytes leftover after parsing attributes in process `syz.5.952'. [ 607.870587][ T30] audit: type=1400 audit(1793120252.625:352): avc: denied { bind } for pid=10392 comm="syz.6.953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 607.893835][T10393] netlink: 8 bytes leftover after parsing attributes in process `syz.6.953'. [ 608.513389][T10406] ip_tables: iptables: counters copy to user failed while replacing table [ 609.157938][T10406] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.158341][T10406] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.272566][ T30] audit: type=1400 audit(1793120254.025:353): avc: denied { read } for pid=10414 comm="syz.2.962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 609.300705][T10415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.962'. [ 609.437639][T10418] FAULT_INJECTION: forcing a failure. [ 609.437639][T10418] name failslab, interval 1, probability 0, space 0, times 0 [ 609.437672][T10418] CPU: 1 UID: 0 PID: 10418 Comm: syz.2.963 Not tainted syzkaller #0 PREEMPT(full) [ 609.437692][T10418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 609.437703][T10418] Call Trace: [ 609.437710][T10418] [ 609.437716][T10418] dump_stack_lvl+0x100/0x190 [ 609.437748][T10418] should_fail_ex.cold+0x5/0xa [ 609.437783][T10418] should_failslab+0xc2/0x120 [ 609.437806][T10418] __kmalloc_cache_noprof+0x91/0x6d0 [ 609.437826][T10418] ? lockdep_hardirqs_on+0x7d/0x110 [ 609.437853][T10418] ? pkcs8_key_preparse+0x128/0x480 [ 609.437877][T10418] pkcs8_key_preparse+0x128/0x480 [ 609.437896][T10418] ? __pfx_pkcs8_key_preparse+0x10/0x10 [ 609.437915][T10418] ? x509_cert_parse+0x6a5/0x910 [ 609.437947][T10418] ? x509_key_preparse+0x655/0x9c0 [ 609.437972][T10418] asymmetric_key_preparse+0xce/0x1d0 [ 609.437996][T10418] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 609.438025][T10418] __key_create_or_update+0x3f6/0xe10 [ 609.438048][T10418] ? __pfx___key_create_or_update+0x10/0x10 [ 609.438067][T10418] ? lookup_user_key+0x477/0x13e0 [ 609.438095][T10418] ? __pfx_lookup_user_key+0x10/0x10 [ 609.438143][T10418] key_create_or_update+0x42/0x60 [ 609.438164][T10418] __do_sys_add_key+0x2e8/0x460 [ 609.438187][T10418] ? __pfx___do_sys_add_key+0x10/0x10 [ 609.438218][T10418] do_syscall_64+0x123/0x790 [ 609.438244][T10418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.438261][T10418] RIP: 0033:0x7f605859f559 [ 609.438276][T10418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 609.438292][T10418] RSP: 002b:00007f605943d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 609.438309][T10418] RAX: ffffffffffffffda RBX: 00007f6058825fa0 RCX: 00007f605859f559 [ 609.438321][T10418] RDX: 0000200000001700 RSI: 0000000000000000 RDI: 00002000000016c0 [ 609.438332][T10418] RBP: 00007f6058636b20 R08: ffffffffffffffff R09: 0000000000000000 [ 609.438342][T10418] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 609.438352][T10418] R13: 00007f6058826038 R14: 00007f6058825fa0 R15: 00007ffca3d8e268 [ 609.438377][T10418] [ 609.727045][T10406] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 609.733145][T10406] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 609.887939][ T30] audit: type=1400 audit(1793120254.645:354): avc: denied { block_suspend } for pid=10421 comm="syz.6.965" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 610.155187][ T6959] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.155238][ T6959] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.155268][ T6959] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.173904][ T5877] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.257802][ T30] audit: type=1400 audit(1793120256.015:355): avc: denied { append } for pid=10438 comm="syz.0.969" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 611.354411][T10441] syzkaller0: entered promiscuous mode [ 611.354436][T10441] syzkaller0: entered allmulticast mode [ 611.691902][T10456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.975'. [ 611.838154][T10463] FAULT_INJECTION: forcing a failure. [ 611.838154][T10463] name failslab, interval 1, probability 0, space 0, times 0 [ 611.838183][T10463] CPU: 0 UID: 0 PID: 10463 Comm: syz.5.977 Not tainted syzkaller #0 PREEMPT(full) [ 611.838196][T10463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 611.838202][T10463] Call Trace: [ 611.838206][T10463] [ 611.838211][T10463] dump_stack_lvl+0x100/0x190 [ 611.838232][T10463] should_fail_ex.cold+0x5/0xa [ 611.838249][T10463] should_failslab+0xc2/0x120 [ 611.838267][T10463] __kmalloc_cache_noprof+0x91/0x6d0 [ 611.838279][T10463] ? x509_cert_parse+0x162/0x910 [ 611.838299][T10463] x509_cert_parse+0x162/0x910 [ 611.838319][T10463] x509_key_preparse+0x65/0x9c0 [ 611.838334][T10463] asymmetric_key_preparse+0xce/0x1d0 [ 611.838352][T10463] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 611.838368][T10463] __key_create_or_update+0x3f6/0xe10 [ 611.838383][T10463] ? __pfx___key_create_or_update+0x10/0x10 [ 611.838396][T10463] ? lookup_user_key+0x477/0x13e0 [ 611.838415][T10463] ? __pfx_lookup_user_key+0x10/0x10 [ 611.838443][T10463] key_create_or_update+0x42/0x60 [ 611.838457][T10463] __do_sys_add_key+0x2e8/0x460 [ 611.838474][T10463] ? __pfx___do_sys_add_key+0x10/0x10 [ 611.838505][T10463] do_syscall_64+0x123/0x790 [ 611.838526][T10463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.838537][T10463] RIP: 0033:0x7fc88cb9f559 [ 611.838547][T10463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 611.838557][T10463] RSP: 002b:00007fc88adf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 611.838569][T10463] RAX: ffffffffffffffda RBX: 00007fc88ce25fa0 RCX: 00007fc88cb9f559 [ 611.838576][T10463] RDX: 0000200000001700 RSI: 0000000000000000 RDI: 00002000000016c0 [ 611.838583][T10463] RBP: 00007fc88cc36b20 R08: ffffffffffffffff R09: 0000000000000000 [ 611.838591][T10463] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 611.838598][T10463] R13: 00007fc88ce26038 R14: 00007fc88ce25fa0 R15: 00007fffca839338 [ 611.838614][T10463] [ 612.472580][T10476] ip_tables: iptables: counters copy to user failed while replacing table [ 613.089864][T10481] jffs2: notice: (10481) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 613.193536][T10483] netlink: 68 bytes leftover after parsing attributes in process `syz.4.984'. [ 613.544706][T10481] jffs2: fork failed for JFFS2 garbage collect thread: -EINTR [ 613.789668][T10492] netlink: 8 bytes leftover after parsing attributes in process `syz.2.988'. [ 615.159914][T10506] jffs2: notice: (10506) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 615.219734][T10510] ip_tables: iptables: counters copy to user failed while replacing table [ 615.268548][T10512] fuse: Unknown parameter 'group_i00000000000000000000' [ 615.343800][T10510] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.344443][T10510] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.850758][T10510] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 615.900244][T10510] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 616.628589][T10542] capability: warning: `syz.6.1004' uses deprecated v2 capabilities in a way that may be insecure [ 616.717500][ T6539] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.717546][ T6539] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.717577][ T6539] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.717607][ T6539] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.106404][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 619.106456][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 619.313019][ T30] audit: type=1400 audit(1793120264.045:356): avc: denied { watch watch_reads } for pid=10571 comm="syz.5.1016" path="/133" dev="tmpfs" ino=774 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 620.858493][T10610] FAULT_INJECTION: forcing a failure. [ 620.858493][T10610] name fail_futex, interval 1, probability 0, space 0, times 1 [ 620.858529][T10610] CPU: 0 UID: 0 PID: 10610 Comm: syz.4.1026 Not tainted syzkaller #0 PREEMPT(full) [ 620.858553][T10610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 620.858565][T10610] Call Trace: [ 620.858573][T10610] [ 620.858581][T10610] dump_stack_lvl+0x100/0x190 [ 620.858618][T10610] should_fail_ex.cold+0x5/0xa [ 620.858648][T10610] get_futex_key+0x1c9/0x13e0 [ 620.858684][T10610] ? __pfx_get_futex_key+0x10/0x10 [ 620.858715][T10610] ? tracing_record_taskinfo_sched_switch+0xac/0x560 [ 620.858754][T10610] futex_wait_setup+0x91/0x540 [ 620.858786][T10610] __futex_wait+0x19f/0x360 [ 620.858813][T10610] ? __pfx___futex_wait+0x10/0x10 [ 620.858834][T10610] ? __pfx_try_to_wake_up+0x10/0x10 [ 620.858858][T10610] ? futex_hash+0x311/0x400 [ 620.858889][T10610] ? __pfx_futex_wake_mark+0x10/0x10 [ 620.858917][T10610] ? find_held_lock+0x2b/0x80 [ 620.858936][T10610] ? futex_wake+0x4ea/0x5e0 [ 620.858966][T10610] futex_wait+0xe6/0x370 [ 620.858990][T10610] ? __pfx_futex_wait+0x10/0x10 [ 620.859034][T10610] do_futex+0x265/0x440 [ 620.859056][T10610] ? __pfx_do_futex+0x10/0x10 [ 620.859075][T10610] ? __do_sys_add_key+0x37d/0x460 [ 620.859101][T10610] ? rcu_is_watching+0x13/0xc0 [ 620.859120][T10610] ? __do_sys_add_key+0x37d/0x460 [ 620.859144][T10610] ? kfree+0x1e5/0x6d0 [ 620.859167][T10610] __x64_sys_futex+0x34f/0x4d0 [ 620.859189][T10610] ? __pfx___x64_sys_futex+0x10/0x10 [ 620.859220][T10610] do_syscall_64+0x123/0x790 [ 620.859251][T10610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.859271][T10610] RIP: 0033:0x7fbe5759f559 [ 620.859290][T10610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 620.859308][T10610] RSP: 002b:00007fbe584230e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 620.859327][T10610] RAX: ffffffffffffffda RBX: 00007fbe57825fa8 RCX: 00007fbe5759f559 [ 620.859339][T10610] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fbe57825fa8 [ 620.859352][T10610] RBP: 00007fbe57825fa0 R08: 0000000000000000 R09: 0000000000000000 [ 620.859364][T10610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 620.859376][T10610] R13: 00007fbe57826038 R14: 00007ffdffc43760 R15: 00007ffdffc43848 [ 620.859406][T10610] [ 624.173316][T10654] FAULT_INJECTION: forcing a failure. [ 624.173316][T10654] name fail_futex, interval 1, probability 0, space 0, times 0 [ 624.173353][T10654] CPU: 1 UID: 0 PID: 10654 Comm: syz.6.1039 Not tainted syzkaller #0 PREEMPT(full) [ 624.173378][T10654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 624.173390][T10654] Call Trace: [ 624.173397][T10654] [ 624.173405][T10654] dump_stack_lvl+0x100/0x190 [ 624.173442][T10654] should_fail_ex.cold+0x5/0xa [ 624.173472][T10654] get_futex_key+0x1c9/0x13e0 [ 624.173509][T10654] ? __pfx_get_futex_key+0x10/0x10 [ 624.173537][T10654] ? tracing_record_taskinfo_sched_switch+0xac/0x560 [ 624.173572][T10654] futex_wait_setup+0x91/0x540 [ 624.173603][T10654] __futex_wait+0x19f/0x360 [ 624.173629][T10654] ? __pfx___futex_wait+0x10/0x10 [ 624.173651][T10654] ? __pfx_try_to_wake_up+0x10/0x10 [ 624.173675][T10654] ? futex_hash+0x311/0x400 [ 624.173706][T10654] ? __pfx_futex_wake_mark+0x10/0x10 [ 624.173734][T10654] ? find_held_lock+0x2b/0x80 [ 624.173752][T10654] ? futex_wake+0x4ea/0x5e0 [ 624.173781][T10654] futex_wait+0xe6/0x370 [ 624.173805][T10654] ? __pfx_futex_wait+0x10/0x10 [ 624.173842][T10654] do_futex+0x265/0x440 [ 624.173862][T10654] ? __pfx_do_futex+0x10/0x10 [ 624.173882][T10654] ? __do_sys_add_key+0x37d/0x460 [ 624.173905][T10654] ? rcu_is_watching+0x13/0xc0 [ 624.173924][T10654] ? __do_sys_add_key+0x37d/0x460 [ 624.173945][T10654] ? kfree+0x1e5/0x6d0 [ 624.173965][T10654] __x64_sys_futex+0x34f/0x4d0 [ 624.173986][T10654] ? __pfx___x64_sys_futex+0x10/0x10 [ 624.174014][T10654] do_syscall_64+0x123/0x790 [ 624.174049][T10654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.174069][T10654] RIP: 0033:0x7faa54f9f559 [ 624.174085][T10654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 624.174104][T10654] RSP: 002b:00007faa55eb10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 624.174127][T10654] RAX: ffffffffffffffda RBX: 00007faa55225fa8 RCX: 00007faa54f9f559 [ 624.174138][T10654] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007faa55225fa8 [ 624.174149][T10654] RBP: 00007faa55225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 624.174159][T10654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 624.174169][T10654] R13: 00007faa55226038 R14: 00007ffc799760c0 R15: 00007ffc799761a8 [ 624.174193][T10654] [ 627.233557][T10730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1065'. [ 627.728737][T10736] kvm [10735]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc1) = 0xfffffc00 [ 627.728821][T10736] kvm [10735]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc2) = 0xfffffc00 [ 627.761457][T10736] kvm [10735]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0xfffffc00 [ 627.782327][T10736] kvm [10735]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x186) = 0xfffffc00 [ 627.782407][T10736] kvm [10735]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x187) = 0xfffffc00 [ 628.066747][ T5928] rpcbind: server 127.0.0.1 not responding, timed out [ 629.200010][T10780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1086'. [ 629.200033][T10780] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1086'. [ 629.401519][T10787] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1088'. [ 629.412621][T10787] ip_tables: iptables: counters copy to user failed while replacing table [ 629.613906][T10787] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.614438][T10787] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.869455][T10787] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 629.892793][T10787] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 630.155523][ T6959] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.155569][ T6959] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.155598][ T6959] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.155627][ T6959] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.303416][T10807] fuse: Bad value for 'fd' [ 630.343474][ T30] audit: type=1400 audit(1793120275.095:357): avc: denied { map } for pid=10808 comm="syz.4.1097" path="socket:[40653]" dev="sockfs" ino=40653 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 631.345598][T10844] FAULT_INJECTION: forcing a failure. [ 631.345598][T10844] name failslab, interval 1, probability 0, space 0, times 0 [ 631.345619][T10844] CPU: 0 UID: 0 PID: 10844 Comm: syz.0.1107 Not tainted syzkaller #0 PREEMPT(full) [ 631.345634][T10844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 631.345641][T10844] Call Trace: [ 631.345645][T10844] [ 631.345650][T10844] dump_stack_lvl+0x100/0x190 [ 631.345671][T10844] should_fail_ex.cold+0x5/0xa [ 631.345687][T10844] should_failslab+0xc2/0x120 [ 631.345709][T10844] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 631.345724][T10844] ? mnt_get_write_access+0x52/0x2f0 [ 631.345738][T10844] ? ovl_alloc_inode+0x25/0x190 [ 631.345756][T10844] ? __pfx_ovl_alloc_inode+0x10/0x10 [ 631.345773][T10844] ovl_alloc_inode+0x25/0x190 [ 631.345788][T10844] alloc_inode+0x68/0x250 [ 631.345802][T10844] new_inode+0x22/0x1c0 [ 631.345816][T10844] ovl_new_inode+0x1d/0x50 [ 631.345826][T10844] ovl_create_object+0x180/0x3b0 [ 631.345842][T10844] ? __pfx_ovl_create_object+0x10/0x10 [ 631.345860][T10844] ? inode_permission+0x377/0x630 [ 631.345875][T10844] ovl_mkdir+0x30/0x40 [ 631.345888][T10844] vfs_mkdir+0x367/0x850 [ 631.345903][T10844] filename_mkdirat+0x48b/0x5e0 [ 631.345927][T10844] ? __pfx_filename_mkdirat+0x10/0x10 [ 631.345945][T10844] ? strncpy_from_user+0x19d/0x2d0 [ 631.345963][T10844] ? do_getname+0x191/0x390 [ 631.345977][T10844] __x64_sys_mkdirat+0x89/0xc0 [ 631.345995][T10844] do_syscall_64+0x123/0x790 [ 631.346014][T10844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.346026][T10844] RIP: 0033:0x7fb4c819f559 [ 631.346036][T10844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 631.346046][T10844] RSP: 002b:00007fb4c903a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 631.346058][T10844] RAX: ffffffffffffffda RBX: 00007fb4c8425fa0 RCX: 00007fb4c819f559 [ 631.346065][T10844] RDX: 00000000000001ff RSI: 0000200000000400 RDI: ffffffffffffff9c [ 631.346073][T10844] RBP: 00007fb4c8236b20 R08: 0000000000000000 R09: 0000000000000000 [ 631.346081][T10844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 631.346088][T10844] R13: 00007fb4c8426038 R14: 00007fb4c8425fa0 R15: 00007fff08bba3c8 [ 631.346104][T10844] [ 631.642012][ T5615] overlayfs: failed lookup in lower (newroot/217, name='bus', err=-40): overlapping layers [ 631.642336][ T5615] overlayfs: failed lookup in lower (newroot/217, name='bus', err=-40): overlapping layers [ 631.787437][ T30] audit: type=1400 audit(1793120276.545:358): avc: denied { execute } for pid=10840 comm="syz.5.1106" name="file0" dev="tmpfs" ino=896 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 631.941532][ T30] audit: type=1400 audit(1793120276.695:359): avc: denied { execute_no_trans } for pid=10840 comm="syz.5.1106" path="/155/file0" dev="tmpfs" ino=896 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 632.021714][T10865] jffs2: notice: (10865) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 632.022086][ T30] audit: type=1400 audit(1793120276.775:360): avc: denied { mounton } for pid=10840 comm="syz.5.1106" path="/155/file0" dev="tmpfs" ino=896 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 632.158212][ T30] audit: type=1400 audit(1793120276.915:361): avc: denied { create } for pid=10840 comm="syz.5.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 632.193708][ T30] audit: type=1400 audit(1793120276.945:362): avc: denied { write } for pid=10840 comm="syz.5.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 632.270343][ T30] audit: type=1400 audit(1793120277.025:363): avc: denied { read } for pid=10840 comm="syz.5.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 633.694215][ T5628] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 633.706420][ T5628] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 633.707434][ T5628] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 633.708388][ T5628] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 633.709263][ T5628] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 633.930148][ T30] audit: type=1400 audit(1793120278.685:364): avc: denied { write } for pid=10889 comm="syz.5.1119" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 633.984343][ T6959] bridge_slave_1: left allmulticast mode [ 633.984367][ T6959] bridge_slave_1: left promiscuous mode [ 633.984785][ T6959] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.020962][ T6959] bridge_slave_0: left allmulticast mode [ 634.020990][ T6959] bridge_slave_0: left promiscuous mode [ 634.021183][ T6959] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.386629][ T1151] rpcbind: server 127.0.0.1 not responding, timed out [ 635.109153][ T6959] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 635.131226][ T6959] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 635.145025][ T6959] bond0 (unregistering): Released all slaves [ 636.624913][ T5619] Bluetooth: hci1: command tx timeout [ 637.232599][T10878] rxe_eth0 speed is unknown, defaulting to 1000 [ 638.168582][ T30] audit: type=1400 audit(1793120282.925:365): avc: denied { write } for pid=10909 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 638.301461][ T30] audit: type=1400 audit(1793120283.055:366): avc: denied { write } for pid=10953 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 638.538759][ T6959] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 638.562920][ T6959] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 639.653853][ T5619] Bluetooth: hci1: command tx timeout [ 640.269241][ T6959] team0 (unregistering): Port device team_slave_1 removed [ 640.302700][ T6959] team0 (unregistering): Port device team_slave_0 removed [ 640.669204][ T5281] 8021q: adding VLAN 0 to HW filter on device eth9 [ 641.222240][ T6959] IPVS: stop unused estimator thread 0... [ 641.581541][T10878] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.581738][T10878] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.582050][T10878] bridge_slave_0: entered allmulticast mode [ 641.610253][T10878] bridge_slave_0: entered promiscuous mode [ 641.620566][T10878] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.620888][T10878] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.621010][T10878] bridge_slave_1: entered allmulticast mode [ 641.623273][T10878] bridge_slave_1: entered promiscuous mode [ 641.664793][ T5619] Bluetooth: hci1: command tx timeout [ 641.822301][T10878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 641.840549][T10878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 642.020283][T10878] team0: Port device team_slave_0 added [ 642.041028][T10878] team0: Port device team_slave_1 added [ 642.181723][T10878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 642.181740][T10878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 642.181768][T10878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 642.190404][T10878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 642.190418][T10878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 642.190436][T10878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 642.335315][ T30] audit: type=1400 audit(1793120287.095:367): avc: denied { write } for pid=10992 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 642.466681][T10878] hsr_slave_0: entered promiscuous mode [ 642.467570][ T30] audit: type=1400 audit(1793120287.225:368): avc: denied { write } for pid=11017 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 642.469218][T10878] hsr_slave_1: entered promiscuous mode [ 643.669317][ T5281] 8021q: adding VLAN 0 to HW filter on device eth10 [ 643.744769][ T5619] Bluetooth: hci1: command tx timeout [ 644.295098][T10878] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 644.321884][T10878] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 644.323413][T10878] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 644.353841][T10878] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 644.366633][T10878] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 644.382623][T10878] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 644.389731][T10878] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 644.402415][T10878] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 644.643829][T10878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 644.722089][T10878] 8021q: adding VLAN 0 to HW filter on device team0 [ 644.751351][ T89] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.751434][ T89] bridge0: port 1(bridge_slave_0) entered forwarding state [ 644.783931][ T89] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.784017][ T89] bridge0: port 2(bridge_slave_1) entered forwarding state [ 644.976880][ T30] audit: type=1400 audit(1793120289.735:369): avc: denied { write } for pid=11034 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 645.111583][ T30] audit: type=1400 audit(1793120289.865:370): avc: denied { write } for pid=11071 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 645.206018][ T5281] 8021q: adding VLAN 0 to HW filter on device eth12 [ 647.126390][T10878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 647.250264][ T30] audit: type=1400 audit(1793120292.005:371): avc: denied { write } for pid=11077 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 647.613601][ T30] audit: type=1400 audit(1793120292.365:372): avc: denied { write } for pid=11112 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 647.710548][ T5281] 8021q: adding VLAN 0 to HW filter on device eth11 [ 648.022228][T10878] veth0_vlan: entered promiscuous mode [ 648.051511][T10878] veth1_vlan: entered promiscuous mode [ 648.115746][T10878] veth0_macvtap: entered promiscuous mode [ 648.122627][T10878] veth1_macvtap: entered promiscuous mode [ 648.160750][T10878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 648.197789][T10878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 648.297696][ T6539] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.316818][ T1164] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.316868][ T1164] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.316899][ T1164] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.388037][ T89] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 648.388057][ T89] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.432145][ T6959] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 648.432167][ T6959] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.621446][ T30] audit: type=1400 audit(1793120293.375:373): avc: denied { mounton } for pid=10878 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 651.707537][T11184] jffs2: notice: (11184) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 652.511308][T11200] kvm: pic: non byte read [ 652.522261][T11200] kvm: pic: non byte read [ 652.522550][T11200] kvm: pic: non byte read [ 652.522964][T11200] kvm: pic: level sensitive irq not supported [ 652.523022][T11200] kvm: pic: non byte read [ 652.546666][T11200] kvm: pic: level sensitive irq not supported [ 652.546739][T11200] kvm: pic: non byte read [ 652.547154][T11200] kvm: pic: single mode not supported [ 652.547163][T11200] kvm: pic: level sensitive irq not supported [ 652.547223][T11200] kvm: pic: non byte read [ 652.547452][T11200] kvm: pic: level sensitive irq not supported [ 652.547500][T11200] kvm: pic: non byte read [ 652.547776][T11200] kvm: pic: non byte read [ 652.551437][T11200] kvm: pic: non byte read [ 652.692922][T11210] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1185'. [ 654.382764][T11242] jffs2: notice: (11242) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 655.787459][T11270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1204'. [ 657.242133][T11283] FAULT_INJECTION: forcing a failure. [ 657.242133][T11283] name failslab, interval 1, probability 0, space 0, times 0 [ 657.242171][T11283] CPU: 1 UID: 0 PID: 11283 Comm: syz.4.1208 Not tainted syzkaller #0 PREEMPT(full) [ 657.242195][T11283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 657.242208][T11283] Call Trace: [ 657.242214][T11283] [ 657.242222][T11283] dump_stack_lvl+0x100/0x190 [ 657.242257][T11283] should_fail_ex.cold+0x5/0xa [ 657.242290][T11283] should_failslab+0xc2/0x120 [ 657.242315][T11283] __kmalloc_cache_noprof+0x91/0x6d0 [ 657.242336][T11283] ? x509_cert_parse+0x50/0x910 [ 657.242370][T11283] x509_cert_parse+0x50/0x910 [ 657.242404][T11283] x509_key_preparse+0x65/0x9c0 [ 657.242428][T11283] asymmetric_key_preparse+0xce/0x1d0 [ 657.242452][T11283] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 657.242475][T11283] __key_create_or_update+0x3f6/0xe10 [ 657.242497][T11283] ? __pfx___key_create_or_update+0x10/0x10 [ 657.242515][T11283] ? lookup_user_key+0x477/0x13e0 [ 657.242544][T11283] ? __pfx_lookup_user_key+0x10/0x10 [ 657.242588][T11283] key_create_or_update+0x42/0x60 [ 657.242611][T11283] __do_sys_add_key+0x2e8/0x460 [ 657.242637][T11283] ? __pfx___do_sys_add_key+0x10/0x10 [ 657.242670][T11283] do_syscall_64+0x123/0x790 [ 657.242701][T11283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.242721][T11283] RIP: 0033:0x7fbe5759f559 [ 657.242737][T11283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 657.242757][T11283] RSP: 002b:00007fbe58423028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 657.242778][T11283] RAX: ffffffffffffffda RBX: 00007fbe57825fa0 RCX: 00007fbe5759f559 [ 657.242790][T11283] RDX: 0000200000003c00 RSI: 0000000000000000 RDI: 0000200000003bc0 [ 657.242801][T11283] RBP: 00007fbe57636b20 R08: ffffffffffffffff R09: 0000000000000000 [ 657.242813][T11283] R10: 00000000000003ae R11: 0000000000000246 R12: 0000000000000000 [ 657.242823][T11283] R13: 00007fbe57826038 R14: 00007fbe57825fa0 R15: 00007ffdffc43848 [ 657.242850][T11283] [ 657.871543][ T9953] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.073404][ T9953] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.207951][ T9953] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.393565][ T9953] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.403666][ T5628] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 659.422024][ T5628] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 659.423325][ T5628] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 659.432015][ T5628] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 659.442209][ T5628] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 659.892115][ T30] audit: type=1400 audit(1793120304.645:374): avc: denied { create } for pid=11307 comm="syz.7.1218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 659.924252][ T9953] bridge_slave_1: left allmulticast mode [ 659.924278][ T9953] bridge_slave_1: left promiscuous mode [ 659.924567][ T9953] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.971733][ T9953] bridge_slave_0: left allmulticast mode [ 659.971759][ T9953] bridge_slave_0: left promiscuous mode [ 659.971962][ T9953] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.292713][ T30] audit: type=1400 audit(1793120305.045:375): avc: denied { write } for pid=11306 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 660.356762][ T9953] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 660.362804][ T9953] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 660.480058][ T9953] bond0 (unregistering): Released all slaves [ 661.273853][ T30] audit: type=1400 audit(1793120306.025:376): avc: denied { write } for pid=11342 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 661.462545][T11351] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1224'. [ 661.462570][T11351] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1224'. [ 661.491633][T11351] FAULT_INJECTION: forcing a failure. [ 661.491633][T11351] name failslab, interval 1, probability 0, space 0, times 0 [ 661.491666][T11351] CPU: 1 UID: 0 PID: 11351 Comm: syz.7.1224 Not tainted syzkaller #0 PREEMPT(full) [ 661.491690][T11351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 661.491701][T11351] Call Trace: [ 661.491709][T11351] [ 661.491716][T11351] dump_stack_lvl+0x100/0x190 [ 661.491750][T11351] should_fail_ex.cold+0x5/0xa [ 661.491780][T11351] should_failslab+0xc2/0x120 [ 661.491807][T11351] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 661.491828][T11351] ? start_dirop+0x79/0xb0 [ 661.491854][T11351] ? alloc_inode+0x68/0x250 [ 661.491879][T11351] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 661.491906][T11351] alloc_inode+0x68/0x250 [ 661.491928][T11351] new_inode+0x22/0x1c0 [ 661.491954][T11351] __debugfs_create_file+0xfb/0x500 [ 661.491987][T11351] debugfs_create_file_full+0x41/0x60 [ 661.492016][T11351] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 661.492048][T11351] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 661.492104][T11351] ? lockdep_init_map_type+0x5c/0x250 [ 661.492132][T11351] ? __pfx_ipvlan_link_setup+0x10/0x10 [ 661.492151][T11351] alloc_netdev_mqs+0x314/0x1540 [ 661.492181][T11351] rtnl_create_link+0xc13/0xf80 [ 661.492206][T11351] rtnl_newlink+0x15bc/0x2620 [ 661.492236][T11351] ? __pfx_rtnl_newlink+0x10/0x10 [ 661.492255][T11351] ? avc_has_perm_noaudit+0x56/0x470 [ 661.492279][T11351] ? find_held_lock+0x2b/0x80 [ 661.492296][T11351] ? avc_has_perm_noaudit+0x11e/0x470 [ 661.492319][T11351] ? avc_has_perm_noaudit+0x11e/0x470 [ 661.492371][T11351] ? lock_acquire+0x1d1/0x380 [ 661.492393][T11351] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 661.492415][T11351] ? find_held_lock+0x2b/0x80 [ 661.492432][T11351] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 661.492453][T11351] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 661.492476][T11351] ? __pfx_rtnl_newlink+0x10/0x10 [ 661.492498][T11351] rtnetlink_rcv_msg+0x95e/0xe90 [ 661.492532][T11351] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 661.492571][T11351] netlink_rcv_skb+0x159/0x420 [ 661.492594][T11351] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 661.492620][T11351] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 661.492641][T11351] ? __asan_memcpy+0x3c/0x60 [ 661.492673][T11351] ? netlink_deliver_tap+0x1ae/0xb50 [ 661.492701][T11351] netlink_unicast+0x668/0x950 [ 661.492726][T11351] ? __pfx_netlink_unicast+0x10/0x10 [ 661.492755][T11351] netlink_sendmsg+0x9ac/0x10c0 [ 661.492780][T11351] ? __pfx_netlink_sendmsg+0x10/0x10 [ 661.492808][T11351] ? selinux_socket_sendmsg+0x198/0x2f0 [ 661.492840][T11351] ? ____sys_sendmsg+0xa99/0xc30 [ 661.492863][T11351] ____sys_sendmsg+0xa99/0xc30 [ 661.492885][T11351] ? __pfx_netlink_sendmsg+0x10/0x10 [ 661.492908][T11351] ? __pfx_____sys_sendmsg+0x10/0x10 [ 661.492946][T11351] ___sys_sendmsg+0x190/0x1e0 [ 661.492973][T11351] ? __pfx____sys_sendmsg+0x10/0x10 [ 661.492998][T11351] ? futex_wait+0x11e/0x370 [ 661.493032][T11351] ? find_held_lock+0x2b/0x80 [ 661.493069][T11351] __sys_sendmsg+0x160/0x210 [ 661.493089][T11351] ? __pfx___sys_sendmsg+0x10/0x10 [ 661.493121][T11351] do_syscall_64+0x123/0x790 [ 661.493153][T11351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.493174][T11351] RIP: 0033:0x7f9755b9f559 [ 661.493192][T11351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 661.493211][T11351] RSP: 002b:00007f97569e4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 661.493234][T11351] RAX: ffffffffffffffda RBX: 00007f9755e25fa0 RCX: 00007f9755b9f559 [ 661.493247][T11351] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 661.493258][T11351] RBP: 00007f9755c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 661.493269][T11351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 661.493280][T11351] R13: 00007f9755e26038 R14: 00007f9755e25fa0 R15: 00007ffe60045d98 [ 661.493308][T11351] [ 661.513653][ T5619] Bluetooth: hci2: command tx timeout [ 661.535748][T11351] debugfs: out of free dentries, can not create file 'netdev@ffff888037d02720' [ 661.959860][T11300] rxe_eth0 speed is unknown, defaulting to 1000 [ 662.215755][ T30] audit: type=1400 audit(1793120306.975:377): avc: denied { write } for pid=11361 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 662.395699][ T30] audit: type=1400 audit(1793120307.155:378): avc: denied { write } for pid=11381 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 662.657283][ T9953] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 662.657307][ T9953] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 662.688214][ T9953] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 662.688238][ T9953] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 662.721074][ T9953] veth1_macvtap: left promiscuous mode [ 662.721196][ T9953] veth0_macvtap: left promiscuous mode [ 662.721276][ T9953] veth1_vlan: left promiscuous mode [ 662.721330][ T9953] veth0_vlan: left promiscuous mode [ 663.341012][ T5752] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 663.584553][ T5619] Bluetooth: hci2: command tx timeout [ 663.766994][ T5752] usb 7-1: New USB device found: idVendor=067b, idProduct=2303, bcdDevice=1.00 [ 663.787333][ T5752] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 663.787369][ T5752] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 663.787390][ T5752] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 663.787425][ T5752] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.856387][T11389] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 663.856509][T11389] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 663.906146][ T5752] pl2303 7-1:1.0: pl2303 converter detected [ 664.585829][ T5752] usb 7-1: pl2303 converter now attached to ttyUSB0 [ 664.601619][ T30] audit: type=1400 audit(1793120309.355:379): avc: denied { write } for pid=11386 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 664.890727][ T9953] team0 (unregistering): Port device team_slave_1 removed [ 664.905566][ T30] audit: type=1400 audit(1793120309.655:380): avc: denied { write } for pid=11418 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 664.938370][ T9953] team0 (unregistering): Port device team_slave_0 removed [ 665.360938][ T2288] usb 7-1: USB disconnect, device number 2 [ 665.580442][ T2288] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 665.595736][ T2288] pl2303 7-1:1.0: device disconnected [ 665.674978][ T5619] Bluetooth: hci2: command tx timeout [ 665.950985][ T9953] IPVS: stop unused estimator thread 0... [ 666.512912][ T30] audit: type=1400 audit(1793120311.265:381): avc: denied { write } for pid=11430 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 667.338957][T11300] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.339078][T11300] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.339207][T11300] bridge_slave_0: entered allmulticast mode [ 667.340590][T11300] bridge_slave_0: entered promiscuous mode [ 667.371759][T11300] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.371916][T11300] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.372040][T11300] bridge_slave_1: entered allmulticast mode [ 667.395617][T11300] bridge_slave_1: entered promiscuous mode [ 667.450726][T11300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 667.474852][T11300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 667.507179][ T30] audit: type=1400 audit(1793120312.265:382): avc: denied { write } for pid=11468 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 667.582714][T11300] team0: Port device team_slave_0 added [ 667.594148][T11300] team0: Port device team_slave_1 added [ 667.703142][T11300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 667.703158][T11300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 667.703181][T11300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 667.710748][T11300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 667.710766][T11300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 667.710786][T11300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 667.736972][T11478] ip_tables: iptables: counters copy to user failed while replacing table [ 667.757632][ T5619] Bluetooth: hci2: command tx timeout [ 667.887043][T11478] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.887522][T11478] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.076603][T11478] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 668.100252][T11478] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 668.270194][ T12] IPVS: starting estimator thread 0... [ 668.394743][T11494] IPVS: using max 74 ests per chain, 177600 per kthread [ 668.454399][T11499] FAULT_INJECTION: forcing a failure. [ 668.454399][T11499] name failslab, interval 1, probability 0, space 0, times 0 [ 668.454422][T11499] CPU: 1 UID: 0 PID: 11499 Comm: syz.4.1258 Not tainted syzkaller #0 PREEMPT(full) [ 668.454435][T11499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 668.454442][T11499] Call Trace: [ 668.454446][T11499] [ 668.454451][T11499] dump_stack_lvl+0x100/0x190 [ 668.454483][T11499] should_fail_ex.cold+0x5/0xa [ 668.454508][T11499] should_failslab+0xc2/0x120 [ 668.454533][T11499] __kmalloc_noprof+0xfc/0x840 [ 668.454549][T11499] ? tomoyo_encode2+0xfb/0x3c0 [ 668.454564][T11499] tomoyo_encode2+0xfb/0x3c0 [ 668.454580][T11499] tomoyo_encode+0x29/0x50 [ 668.454591][T11499] tomoyo_realpath_from_path+0x18c/0x690 [ 668.454607][T11499] tomoyo_path_number_perm+0x23c/0x580 [ 668.454623][T11499] ? tomoyo_path_number_perm+0x22e/0x580 [ 668.454641][T11499] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 668.454672][T11499] ? find_held_lock+0x2b/0x80 [ 668.454683][T11499] ? d_splice_alias_ops+0x2e8/0x1350 [ 668.454706][T11499] ? current_check_access_path+0x25c/0x420 [ 668.454722][T11499] ? __pfx_current_check_access_path+0x10/0x10 [ 668.454735][T11499] ? do_raw_spin_unlock+0x145/0x1e0 [ 668.454753][T11499] ? simple_lookup+0xfc/0x1d0 [ 668.454771][T11499] ? lookup_one_qstr_excl+0xaf/0x250 [ 668.454787][T11499] tomoyo_path_mkdir+0x9b/0xe0 [ 668.454802][T11499] ? __pfx_tomoyo_path_mkdir+0x10/0x10 [ 668.454818][T11499] ? lock_acquire+0x1d1/0x380 [ 668.454834][T11499] security_path_mkdir+0x154/0x2e0 [ 668.454847][T11499] filename_mkdirat+0x168/0x5e0 [ 668.454866][T11499] ? __pfx_filename_mkdirat+0x10/0x10 [ 668.454883][T11499] ? strncpy_from_user+0x19d/0x2d0 [ 668.454901][T11499] ? do_getname+0x191/0x390 [ 668.454914][T11499] __x64_sys_mkdirat+0x89/0xc0 [ 668.454931][T11499] do_syscall_64+0x123/0x790 [ 668.454949][T11499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.454961][T11499] RIP: 0033:0x7fbe5759f559 [ 668.454971][T11499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 668.454982][T11499] RSP: 002b:00007fbe58423028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 668.454993][T11499] RAX: ffffffffffffffda RBX: 00007fbe57825fa0 RCX: 00007fbe5759f559 [ 668.455000][T11499] RDX: 00000000000001ff RSI: 0000200000000400 RDI: ffffffffffffff9c [ 668.455007][T11499] RBP: 00007fbe57636b20 R08: 0000000000000000 R09: 0000000000000000 [ 668.455013][T11499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 668.455019][T11499] R13: 00007fbe57826038 R14: 00007fbe57825fa0 R15: 00007ffdffc43848 [ 668.455035][T11499] [ 668.455514][T11499] ERROR: Out of memory at tomoyo_realpath_from_path. [ 669.569926][ T30] audit: type=1400 audit(1793120314.325:383): avc: denied { name_bind } for pid=11503 comm="syz.4.1260" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 669.609255][T11300] hsr_slave_0: entered promiscuous mode [ 669.618311][T11300] hsr_slave_1: entered promiscuous mode [ 669.620044][T11300] debugfs: 'hsr0' already exists in 'hsr' [ 669.620062][T11300] Cannot create hsr debugfs directory [ 669.661981][T11504] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 669.708230][T11504] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 669.710845][T11504] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 669.735979][T11504] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 669.736048][T11504] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 669.737603][T11504] kvm: requested 8380 ns i8254 timer period limited to 200000 ns [ 669.737864][T11504] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 669.738480][T11504] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 669.738614][T11504] kvm: requested 100571 ns i8254 timer period limited to 200000 ns [ 669.739210][T11504] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 670.865609][ T5877] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.865651][ T5877] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.865681][ T5877] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.865715][ T5877] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.212429][ T30] audit: type=1400 audit(1793120315.965:384): avc: denied { write } for pid=11517 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 671.436280][T11300] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 671.479558][T11300] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 671.481883][T11300] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 671.520432][T11300] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 671.523092][T11300] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 671.647891][T11300] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 671.650556][T11300] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 671.692454][T11300] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 671.710199][ T30] audit: type=1400 audit(1793120316.465:385): avc: denied { write } for pid=11547 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 672.578844][ T5281] 8021q: adding VLAN 0 to HW filter on device eth13 [ 672.770316][T11300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 672.832845][T11300] 8021q: adding VLAN 0 to HW filter on device team0 [ 672.870319][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.870407][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 672.907887][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.907937][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 674.057520][ T30] audit: type=1400 audit(1793120318.815:386): avc: denied { write } for pid=11569 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 674.993124][ T30] audit: type=1400 audit(1793120319.745:387): avc: denied { write } for pid=11604 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 675.290652][ T5281] 8021q: adding VLAN 0 to HW filter on device eth14 [ 675.379967][T11300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 675.716742][ T5752] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 675.885299][ T5752] usb 7-1: New USB device found: idVendor=067b, idProduct=2303, bcdDevice=1.00 [ 675.886411][ T5752] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 675.886441][ T5752] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 675.886463][ T5752] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 675.886498][ T5752] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.927638][T11620] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 675.927744][T11620] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 675.939507][ T5752] pl2303 7-1:1.0: pl2303 converter detected [ 675.992763][ T5752] usb 7-1: pl2303 converter now attached to ttyUSB0 [ 676.248208][T11300] veth0_vlan: entered promiscuous mode [ 676.278691][T11300] veth1_vlan: entered promiscuous mode [ 676.356679][T11620] pl2303 7-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 676.364651][T11620] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 676.366478][T11620] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 676.368509][T11620] pl2303 7-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 676.395908][T11620] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 676.452757][T11300] veth0_macvtap: entered promiscuous mode [ 676.473259][T11300] veth1_macvtap: entered promiscuous mode [ 676.558450][T11300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 676.596959][ T30] audit: type=1400 audit(1793120321.355:388): avc: denied { write } for pid=11624 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 676.599769][T11300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 676.664773][ T2288] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 676.692468][T11620] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 676.695817][ T9273] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.695859][ T9273] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.695885][ T9273] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.706167][ T9273] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.750777][T11620] pl2303 ttyUSB0: error sending break = -32 [ 676.815337][ T2288] usb 5-1: New USB device found: idVendor=067b, idProduct=2303, bcdDevice=1.00 [ 676.816539][ T2288] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 676.816563][ T2288] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 676.816585][ T2288] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 676.816620][ T2288] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.823626][T11647] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 676.823777][T11647] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 676.892991][ T2288] pl2303 5-1:1.0: pl2303 converter detected [ 676.906345][ T2288] usb 5-1: pl2303 converter now attached to ttyUSB1 [ 676.971290][ T5625] usb 7-1: USB disconnect, device number 3 [ 676.981279][ T30] audit: type=1400 audit(1793120321.735:389): avc: denied { write } for pid=11654 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 677.086985][ T5625] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 677.087543][ T5625] pl2303 7-1:1.0: device disconnected [ 677.134138][ T5877] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 677.134152][ T5877] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 677.181744][ T9273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 677.181764][ T9273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 677.195159][ T5281] 8021q: adding VLAN 0 to HW filter on device eth15 [ 678.001604][ T10] usb 5-1: USB disconnect, device number 2 [ 678.025079][ T10] pl2303 ttyUSB1: pl2303 converter now disconnected from ttyUSB1 [ 678.029001][ T10] pl2303 5-1:1.0: device disconnected [ 678.462959][T11679] FAULT_INJECTION: forcing a failure. [ 678.462959][T11679] name failslab, interval 1, probability 0, space 0, times 0 [ 678.462984][T11679] CPU: 0 UID: 0 PID: 11679 Comm: syz.4.1288 Not tainted syzkaller #0 PREEMPT(full) [ 678.463001][T11679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 678.463009][T11679] Call Trace: [ 678.463014][T11679] [ 678.463019][T11679] dump_stack_lvl+0x100/0x190 [ 678.463043][T11679] should_fail_ex.cold+0x5/0xa [ 678.463062][T11679] should_failslab+0xc2/0x120 [ 678.463082][T11679] __kmalloc_noprof+0xfc/0x840 [ 678.463095][T11679] ? ovl_lookup_layers+0x13ff/0x2ac0 [ 678.463110][T11679] ovl_lookup_layers+0x13ff/0x2ac0 [ 678.463124][T11679] ? __lock_acquire+0x5c0/0x1f40 [ 678.463141][T11679] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 678.463159][T11679] ? __pfx_ovl_lookup_layers+0x10/0x10 [ 678.463172][T11679] ? lock_acquire+0x1d1/0x380 [ 678.463194][T11679] ovl_lookup+0x4a8/0x6b0 [ 678.463206][T11679] ? __pfx_ovl_lookup+0x10/0x10 [ 678.463220][T11679] ? do_raw_spin_lock+0x128/0x260 [ 678.463240][T11679] ? do_raw_spin_unlock+0x145/0x1e0 [ 678.463257][T11679] ? _raw_spin_unlock+0x28/0x50 [ 678.463277][T11679] lookup_one_qstr_excl+0x1cd/0x250 [ 678.463289][T11679] ? mnt_want_write+0x15f/0x420 [ 678.463306][T11679] filename_create+0x1cf/0x400 [ 678.463320][T11679] ? __pfx_filename_create+0x10/0x10 [ 678.463335][T11679] ? lock_acquire+0x1d1/0x380 [ 678.463349][T11679] ? find_held_lock+0x2b/0x80 [ 678.463362][T11679] filename_mkdirat+0xb9/0x5e0 [ 678.463382][T11679] ? __pfx_filename_mkdirat+0x10/0x10 [ 678.463399][T11679] ? strncpy_from_user+0x19d/0x2d0 [ 678.463416][T11679] ? do_getname+0x191/0x390 [ 678.463428][T11679] __x64_sys_mkdirat+0x89/0xc0 [ 678.463446][T11679] do_syscall_64+0x123/0x790 [ 678.463464][T11679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.463475][T11679] RIP: 0033:0x7fbe5759f559 [ 678.463485][T11679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 678.463495][T11679] RSP: 002b:00007fbe58423028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 678.463506][T11679] RAX: ffffffffffffffda RBX: 00007fbe57825fa0 RCX: 00007fbe5759f559 [ 678.463513][T11679] RDX: 00000000000001ff RSI: 0000200000000400 RDI: ffffffffffffff9c [ 678.463520][T11679] RBP: 00007fbe57636b20 R08: 0000000000000000 R09: 0000000000000000 [ 678.463526][T11679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 678.463532][T11679] R13: 00007fbe57826038 R14: 00007fbe57825fa0 R15: 00007ffdffc43848 [ 678.463547][T11679] [ 678.584995][ T30] audit: type=1400 audit(1793120323.325:390): avc: denied { write } for pid=11662 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 678.885730][ T5620] overlayfs: failed lookup in lower (newroot/267, name='bus', err=-40): overlapping layers [ 678.885820][ T5620] overlayfs: failed lookup in lower (newroot/267, name='bus', err=-40): overlapping layers [ 679.571341][ T30] audit: type=1400 audit(1793120324.325:391): avc: denied { write } for pid=11688 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 679.811692][ T5281] 8021q: adding VLAN 0 to HW filter on device eth16 [ 680.549469][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 680.556434][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 680.788385][ T5628] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 680.793821][ T5628] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 680.803387][ T5628] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 680.817663][ T5628] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 680.818550][ T5628] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 680.945639][ T1151] bridge_slave_1: left allmulticast mode [ 680.945664][ T1151] bridge_slave_1: left promiscuous mode [ 680.946800][ T1151] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.977581][ T1151] bridge_slave_0: left allmulticast mode [ 680.977598][ T1151] bridge_slave_0: left promiscuous mode [ 680.977727][ T1151] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.149141][ T1151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 681.151474][ T1151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 681.152423][ T1151] bond0 (unregistering): Released all slaves [ 681.340404][ T30] audit: type=1400 audit(1793120326.095:392): avc: denied { getopt } for pid=11718 comm="syz.6.1301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 681.593620][ T30] audit: type=1400 audit(1793120326.345:393): avc: denied { getattr } for pid=11731 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1804 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 681.840735][ T30] audit: type=1400 audit(1793120326.595:394): avc: denied { read } for pid=11734 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1804 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 681.850181][ T30] audit: type=1400 audit(1793120326.605:395): avc: denied { open } for pid=11734 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1804 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 682.098982][T11711] rxe_eth0 speed is unknown, defaulting to 1000 [ 682.347287][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 682.360392][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 682.377727][ T30] audit: type=1400 audit(1793120327.135:396): avc: denied { write } for pid=11727 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 682.377915][ T30] audit: type=1400 audit(1793120327.135:397): avc: denied { create } for pid=11727 comm="dhcpcd-run-hook" name="resolv.conf.eth17.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 682.378348][ T30] audit: type=1400 audit(1793120327.135:398): avc: denied { write } for pid=11727 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth17.link" dev="tmpfs" ino=3210 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 682.403961][ T30] audit: type=1400 audit(1793120327.155:399): avc: denied { append } for pid=11727 comm="dhcpcd-run-hook" name="resolv.conf.eth17.link" dev="tmpfs" ino=3210 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 682.568326][T11755] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1307'. [ 682.729302][T11750] jffs2: notice: (11750) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 682.808078][ T30] audit: type=1400 audit(1793120327.565:400): avc: denied { write } for pid=11757 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 682.820710][ T30] audit: type=1400 audit(1793120327.575:401): avc: denied { unlink } for pid=11757 comm="rm" name="resolv.conf.eth17.link" dev="tmpfs" ino=3210 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 682.865768][ T5619] Bluetooth: hci3: command tx timeout [ 683.202694][ T1151] team0 (unregistering): Port device team_slave_1 removed [ 683.226133][ T1151] team0 (unregistering): Port device team_slave_0 removed [ 683.641632][ T5281] 8021q: adding VLAN 0 to HW filter on device eth17 [ 683.797708][T11780] ip_tables: iptables: counters copy to user failed while replacing table [ 684.121661][T11791] macvlan2: entered promiscuous mode [ 684.266633][ T1151] IPVS: stop unused estimator thread 0... [ 684.371287][T11711] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.371335][T11711] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.371414][T11711] bridge_slave_0: entered allmulticast mode [ 684.375797][T11711] bridge_slave_0: entered promiscuous mode [ 684.384399][T11711] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.390412][T11711] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.390546][T11711] bridge_slave_1: entered allmulticast mode [ 684.391704][T11711] bridge_slave_1: entered promiscuous mode [ 684.541378][T11711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 684.554599][T11711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 684.693986][T11711] team0: Port device team_slave_0 added [ 684.713388][T11711] team0: Port device team_slave_1 added [ 684.823829][T11711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 684.823847][T11711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 684.823868][T11711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 684.880999][T11711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 684.881017][T11711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 684.881039][T11711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 684.945608][ T5619] Bluetooth: hci3: command tx timeout [ 685.107791][ T30] audit: type=1400 audit(1793120329.865:402): avc: denied { write } for pid=11795 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 685.177851][T11711] hsr_slave_0: entered promiscuous mode [ 685.191371][T11711] hsr_slave_1: entered promiscuous mode [ 685.198907][T11711] debugfs: 'hsr0' already exists in 'hsr' [ 685.198929][T11711] Cannot create hsr debugfs directory [ 685.595370][ T30] audit: type=1400 audit(1793120330.345:403): avc: denied { write } for pid=11817 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 685.982891][ T5281] 8021q: adding VLAN 0 to HW filter on device eth18 [ 686.239924][T11711] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 686.253883][T11711] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 686.257044][T11711] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 686.280524][T11711] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 686.295450][T11711] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 686.314609][T11711] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 686.318035][T11711] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 686.340953][T11711] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 686.659269][T11711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 686.708739][T11711] 8021q: adding VLAN 0 to HW filter on device team0 [ 686.762790][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.762839][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 686.781418][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state [ 686.781474][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 687.024735][ T5619] Bluetooth: hci3: command tx timeout [ 687.256485][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 687.256497][ T30] audit: type=1400 audit(1793120332.015:408): avc: denied { write } for pid=11831 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 687.553391][ T30] audit: type=1400 audit(1793120332.305:409): avc: denied { write } for pid=11863 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 688.343684][ T9273] IPVS: starting estimator thread 0... [ 688.424702][T11882] IPVS: using max 49 ests per chain, 117600 per kthread [ 688.477576][ T5281] 8021q: adding VLAN 0 to HW filter on device eth19 [ 688.827459][T11896] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1335'. [ 688.835174][T11711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 689.080764][T11907] ip_tables: iptables: counters copy to user failed while replacing table [ 689.105203][ T5619] Bluetooth: hci3: command tx timeout [ 689.582581][ T30] audit: type=1400 audit(1793120334.335:410): avc: denied { write } for pid=11895 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 689.758261][ T30] audit: type=1400 audit(1793120334.515:411): avc: denied { write } for pid=11927 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 689.880845][T11711] veth0_vlan: entered promiscuous mode [ 689.932190][T11711] veth1_vlan: entered promiscuous mode [ 689.953397][ T30] audit: type=1400 audit(1793120334.705:412): avc: denied { setopt } for pid=11931 comm="syz.2.1344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 690.030843][ T5281] 8021q: adding VLAN 0 to HW filter on device eth20 [ 690.075251][T11711] veth0_macvtap: entered promiscuous mode [ 690.184127][T11711] veth1_macvtap: entered promiscuous mode [ 690.753134][T11711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 690.834857][T11711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 690.854829][ T62] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.854928][ T62] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.854989][ T62] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.855046][ T62] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.167200][ T5877] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 691.167217][ T5877] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 691.349818][ T9273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 691.349839][ T9273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 691.710125][T11961] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1348'. [ 691.892396][ T30] audit: type=1400 audit(1793120336.645:413): avc: denied { write } for pid=11946 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 692.346552][ T30] audit: type=1400 audit(1793120337.105:414): avc: denied { write } for pid=11972 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 692.879171][T11981] __vm_enough_memory: pid: 11981, comm: syz.2.1353, bytes: 4503599627366400 not enough memory for the allocation [ 694.098929][T12012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1359'. [ 694.208467][ T30] audit: type=1400 audit(1793120338.965:415): avc: denied { write } for pid=11986 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 694.499779][ T30] audit: type=1400 audit(1793120339.255:416): avc: denied { write } for pid=12026 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 694.658781][ T29] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 694.806563][ T29] usb 3-1: New USB device found: idVendor=067b, idProduct=2303, bcdDevice=1.00 [ 694.807569][ T29] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 694.807599][ T29] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 694.807619][ T29] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 694.807660][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.810570][T12023] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 694.810688][T12023] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 694.883237][ T29] pl2303 3-1:1.0: pl2303 converter detected [ 694.901397][ T29] usb 3-1: pl2303 converter now attached to ttyUSB0 88[ 695.185058][T12023] pl2303 3-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 695.185413][T12023] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 695.186086][T12023] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 695.186979][T12023] pl2303 3-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 695.187346][T12023] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 695.576186][T12023] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 695.578448][T12023] pl2303 ttyUSB0: error sending break = -32 [ 695.663860][ T30] audit: type=1400 audit(1793120340.415:417): avc: denied { getopt } for pid=12075 comm="syz.9.1380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 695.667951][T11140] usb 3-1: USB disconnect, device number 2 [ 695.690649][T11140] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 695.706178][T11140] pl2303 3-1:1.0: device disconnected [ 696.479297][ T30] audit: type=1400 audit(1793120341.235:418): avc: denied { read write } for pid=12081 comm="getty" name="utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 [ 696.510830][ T30] audit: type=1400 audit(1793120341.265:419): avc: denied { open } for pid=12081 comm="getty" path="/run/utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 [ 696.510861][ T30] audit: type=1400 audit(1793120341.265:420): avc: denied { lock } for pid=12081 comm="getty" path="/run/utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 [ 696.510882][ T30] audit: type=1400 audit(1793120341.265:421): avc: denied { read } for pid=12081 comm="getty" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 syzkaller[ 696.612990][ T30] audit: type=1400 audit(1793120341.365:422): avc: denied { create } for pid=12085 comm="syz.9.1381" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 syzkaller login: [ 696.613257][ T30] audit: type=1400 audit(1793120341.365:423): avc: denied { map } for pid=12085 comm="syz.9.1381" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=56380 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 698.352956][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 698.352974][ T30] audit: type=1400 audit(1793120343.105:426): avc: denied { write } for pid=12091 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 698.680474][T12135] netlink: 144 bytes leftover after parsing attributes in process `syz.8.1394'. [ 698.695057][ T30] audit: type=1400 audit(1793120343.445:427): avc: denied { write } for pid=12131 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 699.360431][ T30] audit: type=1400 audit(1793120344.115:428): avc: denied { read write } for pid=12164 comm="syz.6.1402" name="event0" dev="devtmpfs" ino=912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 699.387265][ T30] audit: type=1400 audit(1793120344.145:429): avc: denied { open } for pid=12164 comm="syz.6.1402" path="/dev/input/event0" dev="devtmpfs" ino=912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 699.422411][ T30] audit: type=1400 audit(1793120344.175:430): avc: denied { ioctl } for pid=12164 comm="syz.6.1402" path="/dev/input/event0" dev="devtmpfs" ino=912 ioctlcmd=0x8040451b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 699.542465][ T30] audit: type=1400 audit(1793120344.295:431): avc: denied { write } for pid=12146 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 699.684634][T12172] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 699.761056][ T30] audit: type=1400 audit(1793120344.515:432): avc: denied { write } for pid=12171 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 701.049643][ T30] audit: type=1400 audit(1793120345.805:433): avc: denied { write } for pid=12190 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 701.458940][ T30] audit: type=1400 audit(1793120346.215:434): avc: denied { write } for pid=12221 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 702.038879][ T30] audit: type=1400 audit(1793120346.795:435): avc: denied { watch } for pid=12239 comm="syz.6.1419" path="/209/file1" dev="tmpfs" ino=1180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 703.686771][T12300] FAULT_INJECTION: forcing a failure. [ 703.686771][T12300] name failslab, interval 1, probability 0, space 0, times 0 [ 703.686804][T12300] CPU: 0 UID: 0 PID: 12300 Comm: syz.6.1434 Not tainted syzkaller #0 PREEMPT(full) [ 703.686828][T12300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 703.686841][T12300] Call Trace: [ 703.686848][T12300] [ 703.686855][T12300] dump_stack_lvl+0x100/0x190 [ 703.686887][T12300] should_fail_ex.cold+0x5/0xa [ 703.686917][T12300] should_failslab+0xc2/0x120 [ 703.686946][T12300] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 703.686971][T12300] ? __d_alloc+0x34/0xad0 [ 703.686993][T12300] __d_alloc+0x34/0xad0 [ 703.687015][T12300] d_alloc+0x4a/0x1e0 [ 703.687036][T12300] lookup_one_qstr_excl+0x171/0x250 [ 703.687059][T12300] start_creating+0xd8/0x120 [ 703.687093][T12300] ovl_create_upper+0x1f3/0x610 [ 703.687119][T12300] ? __pfx_ovl_create_upper+0x10/0x10 [ 703.687147][T12300] ? ovl_override_creator_creds+0x236/0x310 [ 703.687177][T12300] ovl_create_or_link+0x2e9/0x370 [ 703.687209][T12300] ovl_create_object+0x2c3/0x3b0 [ 703.687235][T12300] ? __pfx_ovl_create_object+0x10/0x10 [ 703.687261][T12300] ? inode_permission+0x377/0x630 [ 703.687288][T12300] ovl_mkdir+0x30/0x40 [ 703.687311][T12300] vfs_mkdir+0x367/0x850 [ 703.687338][T12300] filename_mkdirat+0x48b/0x5e0 [ 703.687369][T12300] ? __pfx_filename_mkdirat+0x10/0x10 [ 703.687396][T12300] ? strncpy_from_user+0x19d/0x2d0 [ 703.687426][T12300] ? do_getname+0x191/0x390 [ 703.687449][T12300] __x64_sys_mkdirat+0x89/0xc0 [ 703.687479][T12300] do_syscall_64+0x123/0x790 [ 703.687511][T12300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.687532][T12300] RIP: 0033:0x7faa54f9f559 [ 703.687550][T12300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 703.687568][T12300] RSP: 002b:00007faa55eb1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 703.687586][T12300] RAX: ffffffffffffffda RBX: 00007faa55225fa0 RCX: 00007faa54f9f559 [ 703.687599][T12300] RDX: 00000000000001ff RSI: 0000200000000400 RDI: ffffffffffffff9c [ 703.687610][T12300] RBP: 00007faa55036b20 R08: 0000000000000000 R09: 0000000000000000 [ 703.687621][T12300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 703.687632][T12300] R13: 00007faa55226038 R14: 00007faa55225fa0 R15: 00007ffc799761a8 [ 703.687659][T12300] [ 703.761491][ T7990] overlayfs: failed lookup in lower (newroot/212, name='bus', err=-40): overlapping layers [ 703.761629][ T7990] overlayfs: failed lookup in lower (newroot/212, name='bus', err=-40): overlapping layers [ 704.055406][ T5818] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 704.217566][ T5818] usb 9-1: New USB device found: idVendor=067b, idProduct=2303, bcdDevice=1.00 [ 704.219118][ T5818] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 704.219148][ T5818] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 704.219199][ T5818] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 704.219236][ T5818] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.234960][T12302] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 704.235090][T12302] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 704.240364][ T5818] pl2303 9-1:1.0: pl2303 converter detected [ 704.248913][ T5818] usb 9-1: pl2303 converter now attached to ttyUSB0 [ 704.662470][ T5628] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 704.673088][ T5628] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 704.674266][ T5628] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 704.693474][ T5628] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 704.693989][ T5628] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 704.949239][ T12] bridge_slave_1: left allmulticast mode [ 704.949264][ T12] bridge_slave_1: left promiscuous mode [ 704.949441][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.958655][ T12] bridge_slave_0: left allmulticast mode [ 704.958679][ T12] bridge_slave_0: left promiscuous mode [ 704.960033][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.229245][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 705.232008][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 705.259981][ T12] bond0 (unregistering): Released all slaves [ 705.276869][T11140] usb 9-1: USB disconnect, device number 2 [ 705.327987][T11140] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 705.328598][T11140] pl2303 9-1:1.0: device disconnected [ 705.856355][T12308] rxe_eth0 speed is unknown, defaulting to 1000 [ 706.044910][T12346] overlayfs: failed to clone upperpath [ 706.481017][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 706.481035][ T30] audit: type=1400 audit(1793120351.235:439): avc: denied { write } for pid=12337 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 706.787335][ T5619] Bluetooth: hci4: command tx timeout [ 706.874608][ T30] audit: type=1400 audit(1793120351.575:440): avc: denied { write } for pid=12363 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 706.995797][T12367] fuse: Bad value for 'group_id' [ 706.995817][T12367] fuse: Bad value for 'group_id' [ 707.104112][ T5281] 8021q: adding VLAN 0 to HW filter on device eth21 [ 707.266453][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 707.268570][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 707.650711][ T12] team0 (unregistering): Port device team_slave_1 removed [ 707.682348][ T12] team0 (unregistering): Port device team_slave_0 removed [ 708.355959][ T12] IPVS: stop unused estimator thread 0... [ 708.443323][T12308] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.443521][T12308] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.443629][T12308] bridge_slave_0: entered allmulticast mode [ 708.445059][T12308] bridge_slave_0: entered promiscuous mode [ 708.447383][T12308] bridge0: port 2(bridge_slave_1) entered blocking state [ 708.447530][T12308] bridge0: port 2(bridge_slave_1) entered disabled state [ 708.447625][T12308] bridge_slave_1: entered allmulticast mode [ 708.448777][T12308] bridge_slave_1: entered promiscuous mode [ 708.469153][T12308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 708.471292][T12308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 708.520147][T12405] fuse: fd is not a fuse device [ 708.522455][T12308] team0: Port device team_slave_0 added [ 708.536741][T12308] team0: Port device team_slave_1 added [ 708.657080][T12308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 708.657098][T12308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 708.657119][T12308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 708.665652][T12308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 708.665666][T12308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 708.665685][T12308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 708.837771][T12308] hsr_slave_0: entered promiscuous mode [ 708.840091][T12308] hsr_slave_1: entered promiscuous mode [ 708.840642][T12308] debugfs: 'hsr0' already exists in 'hsr' [ 708.840657][T12308] Cannot create hsr debugfs directory [ 708.864735][ T5619] Bluetooth: hci4: command tx timeout [ 708.981091][ T30] audit: type=1400 audit(1793120353.735:441): avc: denied { write } for pid=12394 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 709.273135][ T30] audit: type=1400 audit(1793120354.025:442): avc: denied { write } for pid=12425 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 709.573486][ T5281] 8021q: adding VLAN 0 to HW filter on device eth22 [ 710.514069][ T30] audit: type=1400 audit(1793120355.265:443): avc: denied { write } for pid=12434 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 710.855834][ T30] audit: type=1400 audit(1793120355.615:444): avc: denied { write } for pid=12458 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 710.931672][T12308] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 710.944732][ T5619] Bluetooth: hci4: command tx timeout [ 710.949952][T12308] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 710.952706][T12308] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 710.968957][T12308] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 710.971659][T12308] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 711.011772][T12308] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 711.016071][T12308] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 711.042294][T12308] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 711.356526][T12308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 711.389505][T12308] 8021q: adding VLAN 0 to HW filter on device team0 [ 711.399148][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 711.399224][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 711.417537][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 711.417618][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 712.237277][ T30] audit: type=1400 audit(1793120356.995:445): avc: denied { write } for pid=12471 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 712.348548][T12504] fuse: Bad value for 'fd' [ 712.699938][ T30] audit: type=1400 audit(1793120357.455:446): avc: denied { write } for pid=12510 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 713.024731][ T5619] Bluetooth: hci4: command tx timeout [ 713.377184][T12308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 713.409396][T12308] veth0_vlan: entered promiscuous mode [ 713.421689][T12308] veth1_vlan: entered promiscuous mode [ 713.524401][T12308] veth0_macvtap: entered promiscuous mode [ 713.551277][T12308] veth1_macvtap: entered promiscuous mode [ 713.573954][T12308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 713.602319][T12308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 713.646288][ T9953] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.646422][ T9953] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.646452][ T9953] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.646480][ T9953] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.952900][T12528] fuse: fd is not a fuse device [ 713.966579][ T9784] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 713.966600][ T9784] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 714.095121][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 714.095142][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 714.238432][ T30] audit: type=1400 audit(1793120358.995:447): avc: denied { write } for pid=12524 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 714.813543][ T30] audit: type=1400 audit(1793120359.565:448): avc: denied { write } for pid=12551 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 715.975351][ T30] audit: type=1400 audit(1793120360.735:449): avc: denied { write } for pid=12567 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 716.032687][ T30] audit: type=1400 audit(1793120360.785:450): avc: denied { write } for pid=12592 comm="syz.2.1497" name="loop7" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 716.059202][T12593] loop7: detected capacity change from 0 to 16384 [ 716.302907][T12598] loop7: detected capacity change from 16384 to 0 [ 716.344787][ T30] audit: type=1400 audit(1793120361.095:451): avc: denied { write } for pid=12601 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 720.701482][ T30] audit: type=1400 audit(1793120365.455:452): avc: denied { write } for pid=12613 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 721.047444][T12657] jffs2: notice: (12657) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 721.074320][ T30] audit: type=1400 audit(1793120365.825:453): avc: denied { write } for pid=12661 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 721.398762][ T5281] 8021q: adding VLAN 0 to HW filter on device eth23 [ 722.706964][T12084] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 722.837360][ T30] audit: type=1400 audit(1793120367.595:454): avc: denied { write } for pid=12671 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 722.887816][T12084] usb 4-1: New USB device found: idVendor=067b, idProduct=2303, bcdDevice=1.00 [ 722.888775][T12084] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 722.888802][T12084] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 722.888824][T12084] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 722.888859][T12084] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.960481][T12689] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 722.960593][T12689] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 722.995425][T12084] pl2303 4-1:1.0: pl2303 converter detected [ 723.004287][T12084] usb 4-1: pl2303 converter now attached to ttyUSB0 [ 723.176014][ T30] audit: type=1400 audit(1793120367.935:455): avc: denied { write } for pid=12700 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 723.412283][ T5281] 8021q: adding VLAN 0 to HW filter on device eth24 [ 723.427006][T12689] pl2303 4-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 723.427636][T12689] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 723.427891][T12689] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 723.428166][T12689] pl2303 4-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 723.428685][T12689] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 723.696497][T12689] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 723.698400][T12689] pl2303 ttyUSB0: error sending break = -32 [ 724.360924][ T2288] usb 4-1: USB disconnect, device number 2 [ 724.390087][ T2288] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 724.405738][ T2288] pl2303 4-1:1.0: device disconnected [ 724.552742][ T30] audit: type=1400 audit(1793120369.305:456): avc: denied { write } for pid=12703 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 724.899074][ T30] audit: type=1400 audit(1793120369.655:457): avc: denied { write } for pid=12735 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 725.339208][T12750] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 725.588142][T12737] jffs2: notice: (12737) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 726.320521][ T30] audit: type=1400 audit(1793120371.075:458): avc: denied { write } for pid=12749 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 726.752906][ T30] audit: type=1400 audit(1793120371.505:459): avc: denied { write } for pid=12788 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 727.695315][ T30] audit: type=1400 audit(1793120372.455:460): avc: denied { mounton } for pid=12826 comm="syz.3.1553" path="/16/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 727.904037][ T30] audit: type=1400 audit(1793120372.655:461): avc: denied { write } for pid=12803 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 728.162413][ T30] audit: type=1400 audit(1793120372.915:462): avc: denied { write } for pid=12845 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 728.695981][ T30] audit: type=1400 audit(1793120373.455:463): avc: denied { write } for pid=12854 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 728.941380][ T30] audit: type=1400 audit(1793120373.695:464): avc: denied { write } for pid=12879 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 729.096468][ T30] audit: type=1400 audit(1793120373.855:465): avc: denied { ioctl } for pid=12867 comm="syz.9.1565" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=66867 ioctlcmd=0xc018aa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 729.300019][T12892] overlayfs: failed to clone upperpath [ 729.399019][ T30] audit: type=1400 audit(1793120374.155:466): avc: denied { write } for pid=12882 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 729.518986][ T30] audit: type=1400 audit(1793120374.275:467): avc: denied { write } for pid=12903 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 730.295591][ T987] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 730.445304][ T987] usb 4-1: New USB device found: idVendor=067b, idProduct=2303, bcdDevice=1.00 [ 730.446905][ T987] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 730.446933][ T987] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 730.446955][ T987] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 730.446989][ T987] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.519220][T12929] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 730.519343][T12929] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 730.522189][ T987] pl2303 4-1:1.0: pl2303 converter detected [ 730.548708][ T987] usb 4-1: pl2303 converter now attached to ttyUSB0 [ 730.835517][T12929] pl2303 4-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 730.837380][T12929] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 730.838702][T12929] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 730.839007][T12929] pl2303 4-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 730.839537][T12929] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 731.105439][T12929] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 731.106462][T12929] pl2303 ttyUSB0: error sending break = -32 [ 731.113239][ T4948] usb 4-1: USB disconnect, device number 3 [ 731.156861][ T4948] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 731.171149][ T4948] pl2303 4-1:1.0: device disconnected [ 731.398442][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 731.398458][ T30] audit: type=1400 audit(1793120376.155:472): avc: denied { write } for pid=12970 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 731.546162][ T30] audit: type=1800 audit(1793120376.295:473): pid=12981 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.1589" name=08 dev="sda1" ino=2059 res=0 errno=-22 [ 731.584953][ T30] audit: type=1400 audit(1793120376.345:474): avc: denied { create } for pid=12980 comm="syz.2.1589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 731.628519][ T30] audit: type=1400 audit(1793120376.385:475): avc: denied { getopt } for pid=12980 comm="syz.2.1589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 732.093765][ T30] audit: type=1400 audit(1793120376.845:476): avc: denied { write } for pid=12983 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 732.366397][ T30] audit: type=1400 audit(1793120377.125:477): avc: denied { write } for pid=13012 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 732.445802][T13016] fuse: Unknown parameter 'group_i00000000000000000000' [ 732.754830][ T30] audit: type=1800 audit(1793120377.505:478): pid=13027 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.1603" name=08 dev="sda1" ino=2059 res=0 errno=-22 [ 733.394162][ T30] audit: type=1400 audit(1793120378.145:479): avc: denied { write } for pid=13022 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 733.686091][T13042] jffs2: notice: (13042) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 733.843173][ T30] audit: type=1400 audit(1793120378.595:480): avc: denied { write } for pid=13052 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 734.176432][T13062] evm: overlay not supported [ 735.023872][T13072] fuse: fd is not a fuse device [ 735.557883][ T30] audit: type=1400 audit(1793120380.315:481): avc: denied { write } for pid=13056 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 736.778198][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 736.778216][ T30] audit: type=1400 audit(1793120381.535:483): avc: denied { write } for pid=13102 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 737.060434][ T30] audit: type=1400 audit(1793120381.815:484): avc: denied { write } for pid=13134 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 738.476466][ T30] audit: type=1400 audit(1793120383.235:485): avc: denied { write } for pid=13139 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 739.301773][T13172] fuse: Unknown parameter 'group_id00000000000000000000' [ 739.427546][ T30] audit: type=1400 audit(1793120384.185:486): avc: denied { write } for pid=13173 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 740.163696][ T30] audit: type=1400 audit(1793120384.915:487): avc: denied { write } for pid=13178 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 740.556878][ T30] audit: type=1400 audit(1793120385.315:488): avc: denied { write } for pid=13201 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 740.705581][ T30] audit: type=1800 audit(1793120385.455:489): pid=13204 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.9.1644" name=08 dev="sda1" ino=2059 res=0 errno=-22 [ 741.339473][ T30] audit: type=1800 audit(1793120386.095:490): pid=13218 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.1645" name=08 dev="sda1" ino=2059 res=0 errno=-22 [ 741.658360][ T30] audit: type=1400 audit(1793120386.415:491): avc: denied { write } for pid=13207 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 741.869609][ T30] audit: type=1400 audit(1793120386.625:492): avc: denied { write } for pid=13231 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 741.961980][ T30] audit: type=1800 audit(1793120386.715:493): pid=13238 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.1649" name=08 dev="sda1" ino=2059 res=0 errno=-22 [ 742.004133][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 742.004187][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 742.121131][T13245] fuse: Bad value for 'user_id' [ 742.121150][T13245] fuse: Bad value for 'user_id' [ 742.183004][ T30] audit: type=1400 audit(1793120386.935:494): avc: denied { write } for pid=13247 comm="syz.3.1655" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 742.300314][ T30] audit: type=1800 audit(1793120387.055:495): pid=13253 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.1656" name=08 dev="sda1" ino=2059 res=0 errno=-22 [ 743.269672][ T30] audit: type=1800 audit(1793120388.025:496): pid=13269 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.1662" name=08 dev="sda1" ino=2059 res=0 errno=-22 [ 743.516999][ T30] audit: type=1800 audit(1793120388.275:497): pid=13284 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.9.1667" name=08 dev="sda1" ino=2059 res=0 errno=-22 [ 743.525158][T13282] fuse: Bad value for 'user_id' [ 743.525175][T13282] fuse: Bad value for 'user_id' [ 743.578696][ T30] audit: type=1400 audit(1793120388.335:498): avc: denied { write } for pid=13241 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 743.710774][ T30] audit: type=1400 audit(1793120388.465:499): avc: denied { bind } for pid=13290 comm="syz.8.1668" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 743.711017][ T30] audit: type=1400 audit(1793120388.465:500): avc: denied { name_bind } for pid=13290 comm="syz.8.1668" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 743.734008][ T30] audit: type=1400 audit(1793120388.465:501): avc: denied { node_bind } for pid=13290 comm="syz.8.1668" saddr=224.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 745.429081][T13335] fuse: Bad value for 'fd' [ 746.619978][T13384] netlink: 'syz.3.1691': attribute type 4 has an invalid length. [ 746.879542][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 746.879560][ T30] audit: type=1800 audit(1793120391.635:512): pid=13394 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1693" name=08 dev="sda1" ino=2059 res=0 errno=-22 [ 747.168860][T13401] FAULT_INJECTION: forcing a failure. [ 747.168860][T13401] name failslab, interval 1, probability 0, space 0, times 0 [ 747.168896][T13401] CPU: 1 UID: 0 PID: 13401 Comm: syz.2.1694 Not tainted syzkaller #0 PREEMPT(full) [ 747.168924][T13401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 747.168937][T13401] Call Trace: [ 747.168945][T13401] [ 747.168954][T13401] dump_stack_lvl+0x100/0x190 [ 747.169000][T13401] should_fail_ex.cold+0x5/0xa [ 747.169034][T13401] should_failslab+0xc2/0x120 [ 747.169063][T13401] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 747.169090][T13401] ? bpf_check+0x1c2b/0xa150 [ 747.169116][T13401] ? kvrealloc_node_align_noprof+0x43/0x120 [ 747.169145][T13401] krealloc_node_align_noprof+0x321/0x3e0 [ 747.169169][T13401] ? __pfx___vmalloc_noprof+0x10/0x10 [ 747.169198][T13401] kvrealloc_node_align_noprof+0x43/0x120 [ 747.169224][T13401] bpf_iarray_realloc+0x33/0xa0 [ 747.169249][T13401] bpf_check+0x1d14/0xa150 [ 747.169293][T13401] ? __pfx_bpf_check+0x10/0x10 [ 747.169318][T13401] ? lock_acquire+0x1d1/0x380 [ 747.169340][T13401] ? bpf_prog_load+0x1b60/0x2ba0 [ 747.169365][T13401] ? find_held_lock+0x2b/0x80 [ 747.169381][T13401] ? bpf_prog_load+0x1b60/0x2ba0 [ 747.169410][T13401] ? __asan_memset+0x23/0x50 [ 747.169434][T13401] ? bpf_prog_load+0x1c1f/0x2ba0 [ 747.169457][T13401] bpf_prog_load+0x1c1f/0x2ba0 [ 747.169480][T13401] ? avc_has_perm_noaudit+0x11e/0x470 [ 747.169510][T13401] ? __pfx_bpf_prog_load+0x10/0x10 [ 747.169558][T13401] __sys_bpf+0x146f/0x4b60 [ 747.169594][T13401] ? __pfx___sys_bpf+0x10/0x10 [ 747.169624][T13401] ? find_held_lock+0x2b/0x80 [ 747.169643][T13401] ? futex_wake+0x4ea/0x5e0 [ 747.169688][T13401] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 747.169718][T13401] ? do_vfs_ioctl+0x226/0x13e0 [ 747.169754][T13401] ? __x64_sys_futex+0x34f/0x4d0 [ 747.169770][T13401] ? __x64_sys_futex+0x358/0x4d0 [ 747.169787][T13401] ? xfd_validate_state+0x129/0x190 [ 747.169810][T13401] ? __x64_sys_bpf+0xce/0x140 [ 747.169834][T13401] __x64_sys_bpf+0xce/0x140 [ 747.169858][T13401] ? do_syscall_64+0xae/0x790 [ 747.169884][T13401] do_syscall_64+0x123/0x790 [ 747.169913][T13401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.169931][T13401] RIP: 0033:0x7f605859f559 [ 747.169948][T13401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 747.169964][T13401] RSP: 002b:00007f605943d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 747.169982][T13401] RAX: ffffffffffffffda RBX: 00007f6058825fa0 RCX: 00007f605859f559 [ 747.170004][T13401] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 747.170017][T13401] RBP: 00007f6058636b20 R08: 0000000000000000 R09: 0000000000000000 [ 747.170030][T13401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 747.170042][T13401] R13: 00007f6058826038 R14: 00007f6058825fa0 R15: 00007ffca3d8e268 [ 747.170067][T13401] [ 747.911413][ T30] audit: type=1400 audit(1793120392.665:513): avc: denied { connect } for pid=13416 comm="syz.3.1699" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 748.442091][ T30] audit: type=1800 audit(1793120393.195:514): pid=13439 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1708" name=08 dev="sda1" ino=2059 res=0 errno=-22 [ 748.470932][ T30] audit: type=1800 audit(1793120393.225:515): pid=13437 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.9.1707" name=08 dev="sda1" ino=2059 res=0 errno=-22 [ 748.892442][ T30] audit: type=1800 audit(1793120393.645:516): pid=13447 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1711" name=08 dev="sda1" ino=2059 res=0 errno=-22 [ 748.903164][T13449] openvswitch: netlink: Flow actions attr not present in new flow. [ 749.143834][T13454] IPVS: lc: FWM 3 0x00000003 - no destination available [ 749.183977][T13457] sctp: [Deprecated]: syz.2.1716 (pid 13457) Use of int in max_burst socket option. [ 749.183977][T13457] Use struct sctp_assoc_value instead [ 749.391683][ T30] audit: type=1400 audit(1793120394.145:517): avc: denied { remount } for pid=13460 comm="syz.9.1719" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 749.551270][ T30] audit: type=1800 audit(1793120394.305:518): pid=13468 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.1720" name=08 dev="sda1" ino=2059 res=0 errno=-22 [ 749.829153][T13476] netlink: 'syz.3.1723': attribute type 1 has an invalid length. [ 749.884426][ T30] audit: type=1400 audit(1793120394.635:519): avc: denied { remount } for pid=13469 comm="syz.7.1721" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 749.933931][T13476] 8021q: adding VLAN 0 to HW filter on device bond1 [ 750.979483][ T30] audit: type=1800 audit(1793120395.735:520): pid=13498 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.1730" name=08 dev="sda1" ino=2059 res=0 errno=-22 [ 751.264408][T13506] overlayfs: missing 'workdir' [ 751.412914][ T30] audit: type=1400 audit(1793120396.165:521): avc: denied { create } for pid=13509 comm="syz.9.1734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 752.346365][T13527] dyndbg: bad flag-op 0, at start of 0 [ 752.346383][T13527] dyndbg: flags parse failed [ 754.070077][T13557] ------------[ cut here ]------------ [ 754.070095][T13557] sp->magic != HWSIM_STA_MAGIC [ 754.070102][T13557] WARNING: drivers/net/wireless/virtual/mac80211_hwsim_main.c:258 at mac80211_hwsim_tx+0x1f17/0x2a20, CPU#0: syz.2.1749/13557 [ 754.095976][T13557] Modules linked in: [ 754.100317][T13557] CPU: 0 UID: 0 PID: 13557 Comm: syz.2.1749 Not tainted syzkaller #0 PREEMPT(full) [ 754.110723][T13557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 754.121888][T13557] RIP: 0010:mac80211_hwsim_tx+0x1f17/0x2a20 [ 754.128463][T13557] Code: b6 58 1b 89 de e8 59 c1 98 fa 84 db 0f 85 e5 ee ff ff e8 3c c7 98 fa c7 44 24 38 0f 00 00 00 e9 0c ff ff ff e8 2a c7 98 fa 90 <0f> 0b 90 e9 7c e5 ff ff 48 8b 44 24 10 48 05 88 04 00 00 48 89 44 [ 754.150096][T13557] RSP: 0018:ffffc9000e40ef78 EFLAGS: 00010283 [ 754.156854][T13557] RAX: 00000000000002fe RBX: 0000000000000000 RCX: ffffc9000d7b1000 [ 754.165674][T13557] RDX: 0000000000080000 RSI: ffffffff877555e6 RDI: ffff88807a65a580 [ 754.174515][T13557] RBP: ffff888057daad90 R08: 0000000000000005 R09: 000000006d537749 [ 754.183315][T13557] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 754.192139][T13557] R13: ffffc9000e40f130 R14: ffff888057e432c0 R15: ffff888074548780 [ 754.200973][T13557] FS: 00007f605943d6c0(0000) GS:ffff88812249c000(0000) knlGS:0000000000000000 [ 754.210834][T13557] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 754.218147][T13557] CR2: 00007feac31f4158 CR3: 000000002bc5b000 CR4: 00000000003526f0 [ 754.226980][T13557] Call Trace: [ 754.230591][T13557] [ 754.233845][T13557] ? __pfx_mac80211_hwsim_tx+0x10/0x10 [ 754.239900][T13557] ? do_raw_spin_lock+0x128/0x260 [ 754.245499][T13557] ? mark_held_locks+0x40/0x70 [ 754.250758][T13557] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 754.257191][T13557] ieee80211_tx_frags+0x5c9/0xa70 [ 754.262737][T13557] ? __pfx_ieee80211_tx_frags+0x10/0x10 [ 754.268881][T13557] ? ieee80211_xmit_fast_finish+0x5b6/0xbe0 [ 754.275411][T13557] __ieee80211_xmit_fast+0x834/0x2b70 [ 754.281313][T13557] ? __siphash_unaligned+0x190/0x360 [ 754.287179][T13557] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 754.293704][T13557] ? cfg80211_classify8021d+0x1f5/0xa30 [ 754.299872][T13557] ? __pfx___ieee80211_xmit_fast+0x10/0x10 [ 754.306313][T13557] ? wiphy_register+0x1d20/0x3380 [ 754.311851][T13557] ? mesh_path_refresh+0x14d/0x2e0 [ 754.317568][T13557] ieee80211_mesh_xmit_fast+0xbc1/0x1260 [ 754.323764][T13557] ? __pfx_ieee80211_mesh_xmit_fast+0x10/0x10 [ 754.330527][T13557] ? find_held_lock+0x2b/0x80 [ 754.335775][T13557] ? __skb_flow_dissect+0x3cc/0x6d20 [ 754.341616][T13557] __ieee80211_subif_start_xmit+0xb36/0x16a0 [ 754.348297][T13557] ? vfs_write+0x6af/0x1050 [ 754.353269][T13557] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 754.359789][T13557] ? skb_network_protocol+0x2c5/0x3c0 [ 754.365756][T13557] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 754.372798][T13557] ? __netif_skb_features+0x41c/0xde0 [ 754.378787][T13557] ieee80211_subif_start_xmit+0xf8/0x7c0 [ 754.385024][T13557] ? __lock_acquire+0x5c0/0x1f40 [ 754.390437][T13557] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 754.397358][T13557] ? validate_xmit_skb+0xbd7/0x1f30 [ 754.403094][T13557] ? rcu_lockdep_current_cpu_online+0x37/0x150 [ 754.409898][T13557] dev_hard_start_xmit+0x121/0x760 [ 754.415577][T13557] __dev_queue_xmit+0x1c2f/0x4a50 [ 754.421116][T13557] ? __might_fault+0xc5/0x140 [ 754.426321][T13557] ? find_held_lock+0x2b/0x80 [ 754.431473][T13557] ? __might_fault+0xc5/0x140 [ 754.436702][T13557] ? __pfx___dev_queue_xmit+0x10/0x10 [ 754.442612][T13557] ? _copy_from_iter+0x270/0x1690 [ 754.448173][T13557] ? __pfx__copy_from_iter+0x10/0x10 [ 754.453991][T13557] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 754.460036][T13557] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 754.466557][T13557] ? packet_parse_headers+0x294/0x7f0 [ 754.472473][T13557] ? __pfx_packet_parse_headers+0x10/0x10 [ 754.478806][T13557] packet_xmit+0x24b/0x320 [ 754.483673][T13557] packet_sendmsg+0x322f/0x4f30 [ 754.489089][T13557] ? sock_has_perm+0x254/0x320 [ 754.494337][T13557] ? __pfx_sock_has_perm+0x10/0x10 [ 754.500007][T13557] ? __pfx_avc_has_perm+0x10/0x10 [ 754.505563][T13557] ? __pfx_packet_sendmsg+0x10/0x10 [ 754.511273][T13557] ? selinux_socket_sendmsg+0x198/0x2f0 [ 754.517418][T13557] sock_write_iter+0x560/0x5d0 [ 754.522659][T13557] ? __pfx_packet_sendmsg+0x10/0x10 [ 754.528439][T13557] ? __pfx_sock_write_iter+0x10/0x10 [ 754.534275][T13557] ? bpf_lsm_file_permission+0x9/0x10 [ 754.540225][T13557] ? security_file_permission+0x76/0x210 [ 754.546459][T13557] ? rw_verify_area+0xce/0x6d0 [ 754.551708][T13557] vfs_write+0x6af/0x1050 [ 754.556538][T13557] ? __pfx_sock_write_iter+0x10/0x10 [ 754.562356][T13557] ? __pfx_vfs_write+0x10/0x10 [ 754.567649][T13557] ? find_held_lock+0x2b/0x80 [ 754.572789][T13557] ksys_write+0x1f8/0x250 [ 754.577587][T13557] ? __pfx_ksys_write+0x10/0x10 [ 754.582920][T13557] do_syscall_64+0x123/0x790 [ 754.588023][T13557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.594527][T13557] RIP: 0033:0x7f605859f559 [ 754.599385][T13557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 754.621009][T13557] RSP: 002b:00007f605943d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 754.630295][T13557] RAX: ffffffffffffffda RBX: 00007f6058825fa0 RCX: 00007f605859f559 [ 754.639094][T13557] RDX: 000000000000001c RSI: 00002000000014c0 RDI: 0000000000000004 [ 754.647881][T13557] RBP: 00007f6058636b20 R08: 0000000000000000 R09: 0000000000000000 [ 754.656679][T13557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 754.665467][T13557] R13: 00007f6058826038 R14: 00007f6058825fa0 R15: 00007ffca3d8e268 [ 754.674238][T13557] [ 754.677610][T13557] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 754.685607][T13557] CPU: 0 UID: 0 PID: 13557 Comm: syz.2.1749 Not tainted syzkaller #0 PREEMPT(full) [ 754.695897][T13557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 754.706947][T13557] Call Trace: [ 754.710579][T13557] [ 754.713816][T13557] dump_stack_lvl+0x100/0x190 [ 754.718956][T13557] vpanic+0x553/0x970 [ 754.723318][T13557] ? __pfx_vpanic+0x10/0x10 [ 754.728271][T13557] panic+0xd1/0xe0 [ 754.732355][T13557] ? __pfx_panic+0x10/0x10 [ 754.737200][T13557] check_panic_on_warn.cold+0x19/0x34 [ 754.743093][T13557] ? mac80211_hwsim_tx+0x1f17/0x2a20 [ 754.748914][T13557] __warn.cold+0x191/0x318 [ 754.753784][T13557] __report_bug+0x30f/0x440 [ 754.758752][T13557] ? mac80211_hwsim_tx+0x1f17/0x2a20 [ 754.764590][T13557] ? __pfx___report_bug+0x10/0x10 [ 754.770128][T13557] ? __bfs+0x150/0x2a0 [ 754.774618][T13557] ? check_irq_usage+0x1a4/0x8b0 [ 754.780066][T13557] ? ieee80211_encrypt_tx_skb+0x2df/0x430 [ 754.786386][T13557] ? mac80211_hwsim_tx+0x1f17/0x2a20 [ 754.792212][T13557] report_bug+0xb3/0x220 [ 754.796892][T13557] ? mac80211_hwsim_tx+0x1f17/0x2a20 [ 754.802725][T13557] handle_bug+0x16a/0x2a0 [ 754.807490][T13557] exc_invalid_op+0x17/0x50 [ 754.812446][T13557] asm_exc_invalid_op+0x1a/0x20 [ 754.817787][T13557] RIP: 0010:mac80211_hwsim_tx+0x1f17/0x2a20 [ 754.824268][T13557] Code: b6 58 1b 89 de e8 59 c1 98 fa 84 db 0f 85 e5 ee ff ff e8 3c c7 98 fa c7 44 24 38 0f 00 00 00 e9 0c ff ff ff e8 2a c7 98 fa 90 <0f> 0b 90 e9 7c e5 ff ff 48 8b 44 24 10 48 05 88 04 00 00 48 89 44 [ 754.845820][T13557] RSP: 0018:ffffc9000e40ef78 EFLAGS: 00010283 [ 754.852479][T13557] RAX: 00000000000002fe RBX: 0000000000000000 RCX: ffffc9000d7b1000 [ 754.861245][T13557] RDX: 0000000000080000 RSI: ffffffff877555e6 RDI: ffff88807a65a580 [ 754.870002][T13557] RBP: ffff888057daad90 R08: 0000000000000005 R09: 000000006d537749 [ 754.878760][T13557] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 754.887505][T13557] R13: ffffc9000e40f130 R14: ffff888057e432c0 R15: ffff888074548780 [ 754.896262][T13557] ? mac80211_hwsim_tx+0x1f16/0x2a20 [ 754.902074][T13557] ? mac80211_hwsim_tx+0x1f16/0x2a20 [ 754.907882][T13557] ? __pfx_mac80211_hwsim_tx+0x10/0x10 [ 754.913880][T13557] ? do_raw_spin_lock+0x128/0x260 [ 754.919394][T13557] ? mark_held_locks+0x40/0x70 [ 754.924616][T13557] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 754.931003][T13557] ieee80211_tx_frags+0x5c9/0xa70 [ 754.936531][T13557] ? __pfx_ieee80211_tx_frags+0x10/0x10 [ 754.942613][T13557] ? ieee80211_xmit_fast_finish+0x5b6/0xbe0 [ 754.949081][T13557] __ieee80211_xmit_fast+0x834/0x2b70 [ 754.954982][T13557] ? __siphash_unaligned+0x190/0x360 [ 754.960771][T13557] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 754.967238][T13557] ? cfg80211_classify8021d+0x1f5/0xa30 [ 754.973328][T13557] ? __pfx___ieee80211_xmit_fast+0x10/0x10 [ 754.979698][T13557] ? wiphy_register+0x1d20/0x3380 [ 754.985224][T13557] ? mesh_path_refresh+0x14d/0x2e0 [ 754.990849][T13557] ieee80211_mesh_xmit_fast+0xbc1/0x1260 [ 754.997130][T13557] ? __pfx_ieee80211_mesh_xmit_fast+0x10/0x10 [ 755.003899][T13557] ? find_held_lock+0x2b/0x80 [ 755.009042][T13557] ? __skb_flow_dissect+0x3cc/0x6d20 [ 755.014851][T13557] __ieee80211_subif_start_xmit+0xb36/0x16a0 [ 755.021425][T13557] ? vfs_write+0x6af/0x1050 [ 755.026374][T13557] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 755.032853][T13557] ? skb_network_protocol+0x2c5/0x3c0 [ 755.038778][T13557] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 755.045838][T13557] ? __netif_skb_features+0x41c/0xde0 [ 755.051787][T13557] ieee80211_subif_start_xmit+0xf8/0x7c0 [ 755.057986][T13557] ? __lock_acquire+0x5c0/0x1f40 [ 755.063406][T13557] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 755.070262][T13557] ? validate_xmit_skb+0xbd7/0x1f30 [ 755.075975][T13557] ? rcu_lockdep_current_cpu_online+0x37/0x150 [ 755.082737][T13557] dev_hard_start_xmit+0x121/0x760 [ 755.088385][T13557] __dev_queue_xmit+0x1c2f/0x4a50 [ 755.093915][T13557] ? __might_fault+0xc5/0x140 [ 755.099063][T13557] ? find_held_lock+0x2b/0x80 [ 755.104195][T13557] ? __might_fault+0xc5/0x140 [ 755.109337][T13557] ? __pfx___dev_queue_xmit+0x10/0x10 [ 755.115236][T13557] ? _copy_from_iter+0x270/0x1690 [ 755.120749][T13557] ? __pfx__copy_from_iter+0x10/0x10 [ 755.126539][T13557] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 755.132526][T13557] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 755.139039][T13557] ? packet_parse_headers+0x294/0x7f0 [ 755.144948][T13557] ? __pfx_packet_parse_headers+0x10/0x10 [ 755.151242][T13557] packet_xmit+0x24b/0x320 [ 755.156092][T13557] packet_sendmsg+0x322f/0x4f30 [ 755.161445][T13557] ? sock_has_perm+0x254/0x320 [ 755.166670][T13557] ? __pfx_sock_has_perm+0x10/0x10 [ 755.172293][T13557] ? __pfx_avc_has_perm+0x10/0x10 [ 755.177821][T13557] ? __pfx_packet_sendmsg+0x10/0x10 [ 755.183538][T13557] ? selinux_socket_sendmsg+0x198/0x2f0 [ 755.189642][T13557] sock_write_iter+0x560/0x5d0 [ 755.194867][T13557] ? __pfx_packet_sendmsg+0x10/0x10 [ 755.200574][T13557] ? __pfx_sock_write_iter+0x10/0x10 [ 755.206377][T13557] ? bpf_lsm_file_permission+0x9/0x10 [ 755.212271][T13557] ? security_file_permission+0x76/0x210 [ 755.218444][T13557] ? rw_verify_area+0xce/0x6d0 [ 755.223666][T13557] vfs_write+0x6af/0x1050 [ 755.228410][T13557] ? __pfx_sock_write_iter+0x10/0x10 [ 755.234207][T13557] ? __pfx_vfs_write+0x10/0x10 [ 755.239427][T13557] ? find_held_lock+0x2b/0x80 [ 755.244569][T13557] ksys_write+0x1f8/0x250 [ 755.249311][T13557] ? __pfx_ksys_write+0x10/0x10 [ 755.254667][T13557] do_syscall_64+0x123/0x790 [ 755.259716][T13557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.266280][T13557] RIP: 0033:0x7f605859f559 [ 755.271115][T13557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 755.292670][T13557] RSP: 002b:00007f605943d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 755.301913][T13557] RAX: ffffffffffffffda RBX: 00007f6058825fa0 RCX: 00007f605859f559 [ 755.310659][T13557] RDX: 000000000000001c RSI: 00002000000014c0 RDI: 0000000000000004 [ 755.319406][T13557] RBP: 00007f6058636b20 R08: 0000000000000000 R09: 0000000000000000 [ 755.328148][T13557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 755.336912][T13557] R13: 00007f6058826038 R14: 00007f6058825fa0 R15: 00007ffca3d8e268 [ 755.345680][T13557] [ 755.349226][T13557] Kernel Offset: disabled [ 755.353959][T13557] Rebooting in 86400 seconds..