last executing test programs: 2m51.623089333s ago: executing program 2 (id=2031): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x3e}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x200000000000000) 2m51.181636641s ago: executing program 2 (id=2035): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) unshare(0x60600) r1 = semget(0x1, 0x1, 0x39c) semop(r1, &(0x7f0000000b00)=[{0x0, 0x840f, 0x1000}], 0x1) semop(r1, &(0x7f00000000c0)=[{0x0, 0x9b, 0x1800}], 0x1) semctl$IPC_RMID(r1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', 0x1}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r3, 0x1) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b007e0b0a43b820a8e8c9881db642", @ANYRES8=r0, @ANYRESOCT=r3, @ANYRES64=r0], 0x97) 2m50.735295721s ago: executing program 2 (id=2038): r0 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x400) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x8383) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001280)={r0, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9603dda1af1ea80000000000000000000000deff00000000000000000000000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}}) 2m50.553822002s ago: executing program 2 (id=2042): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1, 0x0) write(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff) symlinkat(0x0, 0xffffffffffffff9c, 0x0) symlinkat(&(0x7f0000000480)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000000500)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/ss/h\x00') 2m50.329870445s ago: executing program 2 (id=2047): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='270', 0x3) syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) 2m49.934493124s ago: executing program 2 (id=2053): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10, 0x1, 0x80000ff}, &(0x7f0000000140)=0x0, 0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, 0x0, r2, &(0x7f00000001c0)=@IORING_OP_UNLINKAT={0x24, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)='./file1\x00', 0x0, 0x200}) io_uring_enter(r0, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 2m42.773819051s ago: executing program 32 (id=1957): r0 = socket$igmp(0x2, 0x3, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000bc0)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4000015}, 0x60) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000040)={@private1, 0x0}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xe, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x2}, @TCA_FQ_QUANTUM={0x8, 0x2, 0x10270000}]}}]}, 0x40}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r4, &(0x7f0000000b40)={&(0x7f0000000200)={0x2, 0x4c20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @loopback}}}], 0x20}, 0xe900) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) write$cgroup_subtree(r4, &(0x7f00000005c0)=ANY=[], 0xfe33) 2m34.762048126s ago: executing program 33 (id=2053): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10, 0x1, 0x80000ff}, &(0x7f0000000140)=0x0, 0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, 0x0, r2, &(0x7f00000001c0)=@IORING_OP_UNLINKAT={0x24, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)='./file1\x00', 0x0, 0x200}) io_uring_enter(r0, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 2m15.130418028s ago: executing program 4 (id=2297): socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2, 0x0, 0x4}, 0x2, 0xb1f1, &(0x7f0000000040)={{0x0, 0x5, 0x402}}, 0x0, 0x0}}) r0 = syz_io_uring_setup(0x7a3f, &(0x7f0000000880)={0x0, 0x2730, 0x800, 0x2, 0x15e}, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000240)=0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000040)={0x39, 0x0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r0}) io_uring_enter(r0, 0x1, 0x2, 0x1, 0x0, 0x0) 2m14.91166637s ago: executing program 6 (id=2300): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@ipmr_getroute={0x1c, 0x1a, 0x400, 0x70bd28, 0x25dfdbfd, {0x80, 0x14, 0x10, 0x4, 0xfe, 0x0, 0xc8, 0x7, 0x4200}}, 0x1c}, 0x1, 0x0, 0x0, 0xc845}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42082, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000200)=ANY=[@ANYRES16=r1, @ANYRES32=r0]) socket$netlink(0x10, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, 0x0, 0x0, 0x54040, &(0x7f00000001c0)={0x11, 0xf8, r3, 0x1, 0xd8}, 0x14) 2m13.969212083s ago: executing program 4 (id=2308): syz_open_dev$ublk_chdev(&(0x7f0000002000), 0x0, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 2m13.950395531s ago: executing program 6 (id=2310): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f0000000400)="40f0b7c0389101fc9b9f677d94042823488390e855974a68c3ac093281cdfe63d4058038da9880ff4b5b42cd9e4ae36eaa99609c6fd2a676b90907fb6953d24f3a8589a7b0a3e0a1915c105dc2bac1745e7212537c307c4783788a0066fce95ecebb534caad134c4ba0975fd12ad3268ab34d95f1ee1426d6241195127644cf7b5d8de195aafeecca38ff67ec26099897fa35d379c06f20596187ca1b23846e772171a4fbd96a861ee3694cfc21a", 0xae, 0x10000800, 0x0, 0x0) 2m13.179454701s ago: executing program 6 (id=2313): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) add_key$user(&(0x7f0000000400), &(0x7f0000000380)={'syz', 0x0}, &(0x7f0000000300)='\x00', 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) 2m12.923800185s ago: executing program 6 (id=2317): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./config\x00', &(0x7f0000000380)='configfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x204) r4 = socket$inet(0x2, 0x1, 0x0) socket$inet(0x2, 0x1, 0x6) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x6, @loopback, 0x15, 0x0, 'wrr\x00', 0x10}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000100)={{0x6, @loopback, 0x15, 0x0, 'rr\x00', 0xe}, {@loopback, 0x4908, 0x0, 0x1}}, 0x44) r5 = socket$inet(0x2, 0x1, 0x6) connect(r5, &(0x7f0000000200)=@in={0x2, 0x15, @loopback}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)={0x0, 0x200003, 0x200, 0x0, 0x7, 0x7}) syz_open_dev$tty1(0xc, 0x4, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0) 2m12.62687939s ago: executing program 4 (id=2323): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f0000000400)="40f0b7c0389101fc9b9f677d94042823488390e855974a68c3ac093281cdfe63d4058038da9880ff4b5b42cd9e4ae36eaa99609c6fd2a676b90907fb6953d24f3a8589a7b0a3e0a1915c105dc2bac1745e7212537c307c4783788a0066fce95ecebb534caad134c4ba0975fd12ad3268ab34d95f1ee1426d6241195127644cf7b5d8de195aafeecca38ff67ec26099897fa35d379c06f20596187ca1b23846e772171a4fbd96a861ee3694cfc21a", 0xae, 0x10000800, 0x0, 0x0) 2m12.092734838s ago: executing program 4 (id=2325): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) socket(0x1e, 0x4, 0x0) 2m11.886848642s ago: executing program 6 (id=2328): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x10) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='270', 0x3) syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) 2m11.792836506s ago: executing program 0 (id=2330): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000100), 0x12) listen(r2, 0x1) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b007e0b0a43b820a8e8c9881db642", @ANYRES8=r0, @ANYRESOCT=r2, @ANYRES64=r0], 0x97) 2m11.644058989s ago: executing program 6 (id=2335): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/kernel/mm/ksm/pages_to_scan\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x74) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, 0x0, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) sendto$inet(r4, &(0x7f0000000400)="40f0b7c0389101fc9b9f677d94042823488390e855974a68c3ac093281cdfe63d4058038da9880ff4b5b42cd9e4ae36eaa99609c6fd2a676b90907fb6953d24f3a8589a7b0a3e0a1915c105dc2bac1745e7212537c307c4783788a0066fce95ecebb534caad134c4ba0975fd12ad3268ab34d95f1ee1426d6241195127644cf7b5d8de195aafeecca38ff67ec26099897fa35d379c06f20596187ca1b23846e772171a4fbd96a861ee3694cfc21a", 0xae, 0x10000800, 0x0, 0x0) 2m11.59130647s ago: executing program 0 (id=2336): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/mpls/platform_labels\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='1', 0x1) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000200)='9', 0x1}], 0x1) 2m11.453199964s ago: executing program 0 (id=2339): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0000880a020100000800faff0700d06d6558b77daaaaaaaaaa0c88a80c0081003000886411"], 0x3c6) 2m11.07966035s ago: executing program 0 (id=2344): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d00)=ANY=[], 0x1c}}, 0x0) 2m10.97044582s ago: executing program 0 (id=2345): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x10) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='270', 0x3) syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) 2m10.74672966s ago: executing program 0 (id=2349): socket$igmp(0x2, 0x3, 0x2) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r2, 0xfffffffe, 0x4, 0x0, 0x4, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) readv(r0, 0x0, 0x0) close(r1) close(0x3) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 2m8.835180236s ago: executing program 4 (id=2360): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x10) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='270', 0x3) syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) 2m8.681780039s ago: executing program 4 (id=2363): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x60}}, 0x0) 2m8.07398918s ago: executing program 5 (id=2369): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_open_dev$mtd(&(0x7f0000000200), 0x0, 0x8000) readv(r0, &(0x7f0000001980)=[{&(0x7f0000001940)=""/13, 0xd}], 0x1) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$ARCH_GET_GS(0x1e, r1, &(0x7f00000004c0), 0x1004) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x4, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r6}, &(0x7f0000000100), &(0x7f0000000400)}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000280)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r6}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r7}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r9, &(0x7f0000002300), 0x0, 0x2000c000) setsockopt$inet_tcp_TLS_TX(r9, 0x6, 0x25, &(0x7f0000000140)=@gcm_128={{0xcf05a145b37f58f3}, "2034b251822b3a46", "fa6b72def4acb1a6c86918c638857983", "34b3adec", "6745ac421772258f"}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x0, 0xe, 0x0, &(0x7f00000003c0)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000005e00cb7b27bd7000f3dbdf2500000000", @ANYRES32=0x0, @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x8d33864195c5c22f}, 0x60400c0) 2m7.05134948s ago: executing program 5 (id=2370): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x41) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x3, {0x1, 0xf0, 0x3}, 0xfe}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0xf}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 2m6.688690754s ago: executing program 5 (id=2372): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000008200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000001dc0)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x10, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7, {0x5, 0x200000003, 0xdc, 0x8, 0x3, 0x1, {0x6, 0x638, 0xfffffffffffffff8, 0x8, 0x100000003, 0x79, 0xfffffffe, 0x7, 0x1, 0xc000, 0x4, r2, r3, 0x17, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006200)="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", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0xfffffffffffffffd, {0x5, 0x3, 0x0, 0x4000000000804, 0xfffffffd, 0x400, {0x4, 0x1000, 0x8, 0x100000000000, 0x2080000000000db4, 0x89, 0x8, 0x6, 0x6, 0x2000, 0xe44, r2, 0x0, 0x7, 0x81}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x880cc2, 0x20) 2m5.718219281s ago: executing program 5 (id=2373): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000100)=0x3, 0x4) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$9p(r4, &(0x7f0000001100)='-v', 0x2) splice(r3, 0x0, r0, 0x0, 0x100000000, 0x1) write$binfmt_script(r2, &(0x7f0000000140)={'#! ', './file0', [{0x20, '#! '}, {0x20, '\xf5.'}, {0x20, 'ip6gretap0\x00'}, {0x20, '\x00'}]}, 0x20) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) write$9p(r1, &(0x7f00000018c0)="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", 0x411) write$binfmt_script(r2, &(0x7f0000000840)={'#! ', './file0', [], 0xa, "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"}, 0x411) 2m5.554826344s ago: executing program 5 (id=2374): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) io_uring_setup(0x1b7b, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='270', 0x3) syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) 2m5.33110281s ago: executing program 5 (id=2375): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000280), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x119) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x0, 0xf, 0xf, 0x8, 0x80, 0x4, 0x3, 0x80000000, 0x20000006, 0x4d, 0x5, 0x5d, 0xa, 0x5, 0xffff2d38, 0xffffff03, 0x6, 0x3, 0x0, 0xe, 0x7, 0x0, 0x7, 0x23c5b, 0x1, 0xf, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x7, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0xdb63, 0x4000008c, 0x6, 0x5, 0x0, 0x4, 0x0, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x6, 0x3, 0x1, 0xf], [0x1, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x2, 0x9, 0xfffffffe, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x0, 0x312, 0x78, 0xe, 0xfffffffe, 0x4, 0x7, 0x6, 0x5, 0x400, 0x401, 0x7, 0x1, 0xff, 0x5, 0x1000005, 0x5f2b, 0x1, 0x4e2, 0xc, 0x4, 0xb, 0x10000, 0x9, 0x8, 0x1009, 0x6, 0x47, 0x8000, 0xc25, 0xfe000000, 0xffff, 0x0, 0x4, 0x9, 0x3, 0x2, 0x9, 0x1, 0x3, 0x3, 0x94f, 0x4cc93690, 0x42, 0x3], [0x82, 0x2, 0x7, 0x5, 0xfffffffe, 0x6, 0x2, 0x9, 0x5, 0x8002, 0x4, 0x5, 0xb, 0x2, 0x5, 0x7, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0x2, 0x5, 0x2, 0x2, 0x3, 0x2, 0x4, 0x6d01, 0x3, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x3ff, 0x2950bfaf, 0xc8, 0xa2, 0x7, 0xa9, 0x5, 0x8, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x1, 0x1c, 0x7, 0x3, 0x3, 0x5, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0x0, 0x5, 0x93a, 0x5, 0x2, 0xfffffffc, 0xb9, 0xce7, 0x203, 0x2, 0x57, 0x2, 0x3, 0x0, 0x10000, 0xb8, 0x3, 0x28, 0x3, 0x2, 0x5, 0x1, 0x7ff, 0x800, 0x20a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x10001, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0xfffffff9, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xb1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x6, 0x8, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1m56.292138955s ago: executing program 34 (id=2335): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/kernel/mm/ksm/pages_to_scan\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x74) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, 0x0, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) sendto$inet(r4, &(0x7f0000000400)="40f0b7c0389101fc9b9f677d94042823488390e855974a68c3ac093281cdfe63d4058038da9880ff4b5b42cd9e4ae36eaa99609c6fd2a676b90907fb6953d24f3a8589a7b0a3e0a1915c105dc2bac1745e7212537c307c4783788a0066fce95ecebb534caad134c4ba0975fd12ad3268ab34d95f1ee1426d6241195127644cf7b5d8de195aafeecca38ff67ec26099897fa35d379c06f20596187ca1b23846e772171a4fbd96a861ee3694cfc21a", 0xae, 0x10000800, 0x0, 0x0) 1m55.60190781s ago: executing program 35 (id=2349): socket$igmp(0x2, 0x3, 0x2) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r2, 0xfffffffe, 0x4, 0x0, 0x4, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) readv(r0, 0x0, 0x0) close(r1) close(0x3) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1m53.565445234s ago: executing program 36 (id=2363): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x60}}, 0x0) 1m50.093485859s ago: executing program 37 (id=2375): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000280), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x119) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x0, 0xf, 0xf, 0x8, 0x80, 0x4, 0x3, 0x80000000, 0x20000006, 0x4d, 0x5, 0x5d, 0xa, 0x5, 0xffff2d38, 0xffffff03, 0x6, 0x3, 0x0, 0xe, 0x7, 0x0, 0x7, 0x23c5b, 0x1, 0xf, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x7, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0xdb63, 0x4000008c, 0x6, 0x5, 0x0, 0x4, 0x0, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x6, 0x3, 0x1, 0xf], [0x1, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x2, 0x9, 0xfffffffe, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x0, 0x312, 0x78, 0xe, 0xfffffffe, 0x4, 0x7, 0x6, 0x5, 0x400, 0x401, 0x7, 0x1, 0xff, 0x5, 0x1000005, 0x5f2b, 0x1, 0x4e2, 0xc, 0x4, 0xb, 0x10000, 0x9, 0x8, 0x1009, 0x6, 0x47, 0x8000, 0xc25, 0xfe000000, 0xffff, 0x0, 0x4, 0x9, 0x3, 0x2, 0x9, 0x1, 0x3, 0x3, 0x94f, 0x4cc93690, 0x42, 0x3], [0x82, 0x2, 0x7, 0x5, 0xfffffffe, 0x6, 0x2, 0x9, 0x5, 0x8002, 0x4, 0x5, 0xb, 0x2, 0x5, 0x7, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0x2, 0x5, 0x2, 0x2, 0x3, 0x2, 0x4, 0x6d01, 0x3, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x3ff, 0x2950bfaf, 0xc8, 0xa2, 0x7, 0xa9, 0x5, 0x8, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x1, 0x1c, 0x7, 0x3, 0x3, 0x5, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0x0, 0x5, 0x93a, 0x5, 0x2, 0xfffffffc, 0xb9, 0xce7, 0x203, 0x2, 0x57, 0x2, 0x3, 0x0, 0x10000, 0xb8, 0x3, 0x28, 0x3, 0x2, 0x5, 0x1, 0x7ff, 0x800, 0x20a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x10001, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0xfffffff9, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xb1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x6, 0x8, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 6.297178469s ago: executing program 9 (id=3207): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c00000070000504010000000000000007000000", @ANYRES32=r0, @ANYBLOB="140001800800010000000100050003"], 0x2c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x0, 0x8, 0xade, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x4, 0x0, 0xe9, 0x29, 0x0, @empty, @empty}}}}) socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_emit_ethernet(0x3de, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], 0x0) close(r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, &(0x7f00000000c0)=0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r5, &(0x7f0000000080)="008e", 0x2, 0xd1, 0x0, 0x0) getpid() recvmmsg(r3, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) recvmmsg$unix(r6, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x105, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d80000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa1400040000000000000000000000ffff0a0101020c00028005000100000000003c0002802c00018014000300fc02000000000000000000000000000014000400fe8000000000000000000000000000aa0c0002"], 0xd8}, 0x1, 0x0, 0x0, 0x40c1}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100003000010003000000fbdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 3.05456341s ago: executing program 3 (id=3247): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_open_dev$mtd(&(0x7f0000000200), 0x0, 0x8000) readv(r0, &(0x7f0000001980)=[{&(0x7f0000001940)=""/13, 0xd}], 0x1) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$ARCH_GET_GS(0x1e, r1, &(0x7f00000004c0), 0x1004) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x4, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r6}, &(0x7f0000000100), &(0x7f0000000400)}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000280)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r6}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r7}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r9, &(0x7f0000002300), 0x0, 0x2000c000) setsockopt$inet_tcp_TLS_TX(r9, 0x6, 0x25, &(0x7f0000000140)=@gcm_128={{0xcf05a145b37f58f3}, "2034b251822b3a46", "fa6b72def4acb1a6c86918c638857983", "34b3adec", "6745ac421772258f"}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x0, 0xe, 0x0, &(0x7f00000003c0)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000005e00cb7b27bd7000f3dbdf2500000000", @ANYRES32=0x0, @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x8d33864195c5c22f}, 0x60400c0) 2.177568874s ago: executing program 1 (id=3250): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000014000200776730000000000000000000000000000800088004"], 0x30}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 2.057520228s ago: executing program 3 (id=3252): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0xfff5, 0xfff3}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x7e, 0x7, 0xfffffffc, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) 1.877289573s ago: executing program 1 (id=3253): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newlink={0x44, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1040, 0x44100}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gre={{0x8}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @random="977774604b7e"}, @IFLA_MTU={0x8, 0x4, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) 1.826109498s ago: executing program 3 (id=3254): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x20, @ipv4={'\x00', '\xff\xff', @remote}, 0x23}, 0x1c) 1.760130145s ago: executing program 1 (id=3255): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x5}, 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000bc0)=@generic={&(0x7f0000000b80)='./file0\x00', 0x0, 0x10}, 0x18) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x50103}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x3c}, 0x1, 0x0, 0x0, 0x24048044}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)=[{0x0}], 0x1}, 0x4005) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x30}, [@alu={0x4, 0x0, 0x9, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f00000002c0)='GPL\x00', 0xf}, 0x94) r5 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x2f, 0xa7, 0x9, 0x1, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, 0x7, 0x80, 0x1, 0x7}}) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, r5, 0x800, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000801}, 0x4000004) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000280)) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.633257128s ago: executing program 3 (id=3256): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x7, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x9, r0}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 1.280769953s ago: executing program 1 (id=3257): syz_emit_ethernet(0x3b1, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\b@', 0x37b, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x18, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "00001c050000000026000400"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8675b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x22, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f61640000000200fff500000000000000000000008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b1"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 1.154123492s ago: executing program 1 (id=3258): r0 = syz_open_dev$vim2m(0x0, 0x7fff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0cc5605, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x8080, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x3c9241, 0x0) mount(0x0, 0x0, 0x0, 0x80, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x13, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$FE_ENABLE_HIGH_LNB_VOLTAGE(0xffffffffffffffff, 0x6f44, 0x7) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x800004, 0x0) r3 = openat(0xffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0) write(r3, &(0x7f0000000100)='zstd', 0x4) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 1.107490762s ago: executing program 7 (id=3259): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x54, r1, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "bf6e3d7de779872f0b8fa15bf788c991fb832520"}}]}]}, 0x54}}, 0x0) 925.301268ms ago: executing program 7 (id=3260): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}]}, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 891.852388ms ago: executing program 8 (id=3261): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000201010100000000000000000200000004000180180002801400018008000100b04c94a708000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0) 813.116461ms ago: executing program 7 (id=3262): socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x112) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={r1, &(0x7f0000000000), &(0x7f0000000600)=@udp=r2, 0x2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000080), &(0x7f0000000280)=r3}, 0x20) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r3, r5, 0x25, 0x4, @void}, 0x2a) syz_emit_ethernet(0xd81, &(0x7f00000013c0)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0xd73, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xe}}, "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"}}}}, 0x0) 725.954629ms ago: executing program 9 (id=3263): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="54000000090601020000000000000000010000050900020073797a30000000000500010007000000080009400000000124000880100007800a0011000180c20000000000100007"], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 724.30603ms ago: executing program 8 (id=3264): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1837000000000000000000000800000085550c00000000009500000000000000e95a7f0fda1bc47138b7c53358451a9fa55742722f2d891fcf50e9d9ba8c18740091e294f5e3f6919d2e8a39d6119fbbbca9d0a4fe148f638347e08636ba40af31364908adfd64cafc4f7275fce536a74435dced0929185cb17ff57535ea870a2c0b60fcbf5c929988527d6c39b38e250e3af4a548f228bb66cd2ef0b591cf5d"], 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 703.135674ms ago: executing program 3 (id=3265): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, 0x0, &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94) 626.880711ms ago: executing program 7 (id=3266): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff}, [@ldst={0x3, 0x0, 0x6, 0x0, 0xfae0bc06f22ad471}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 611.688919ms ago: executing program 9 (id=3267): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c00", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) r4 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r4], 0x14) 586.494146ms ago: executing program 8 (id=3268): syz_emit_ethernet(0x3b1, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\b@', 0x37b, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x18, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "00001c050000000026000400"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8675b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x22, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f61640000000200fff500000000000000000000008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b1"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 572.50227ms ago: executing program 3 (id=3269): unshare(0x22020600) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000380)={{0xffffffffffffffff, &(0x7f0000000080)='dctcp', 0x1000, &(0x7f00000001c0)={@align=0xe21, {0xfc, 0x40, 0x7, 0x7fffffff}}, 0xa948, &(0x7f0000000200), &(0x7f0000000240)=0x39fb}, {[0x152, 0x8, 0xffffffff, 0x4]}, 0x3, 0x9e, &(0x7f00000002c0)=""/158}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2d) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socket$inet_udp(0x2, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x2}], 0x2, 0x0, 0x0, 0x0) futex(&(0x7f0000000140)=0x2, 0x1, 0x10, 0x0, &(0x7f0000000280), 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0xff03, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 455.076102ms ago: executing program 7 (id=3270): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100080200000018000066000000", @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="0600cd00000000006c003300802009000802110000010802110000005050505050505f00ff"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 445.162466ms ago: executing program 8 (id=3271): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 439.699918ms ago: executing program 9 (id=3272): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}]}, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 326.371867ms ago: executing program 8 (id=3273): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_open_dev$mtd(&(0x7f0000000200), 0x0, 0x8000) readv(r0, &(0x7f0000001980)=[{&(0x7f0000001940)=""/13, 0xd}], 0x1) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$ARCH_GET_GS(0x1e, r1, &(0x7f00000004c0), 0x1004) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x4, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r4}, &(0x7f0000000100), &(0x7f0000000400)}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000280)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r4}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r5}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r7, &(0x7f0000002300), 0x0, 0x2000c000) setsockopt$inet_tcp_TLS_TX(r7, 0x6, 0x25, &(0x7f0000000140)=@gcm_128={{0xcf05a145b37f58f3}, "2034b251822b3a46", "fa6b72def4acb1a6c86918c638857983", "34b3adec", "6745ac421772258f"}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0xe, 0x0, &(0x7f00000003c0)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000005e00cb7b27bd7000f3dbdf2500000000", @ANYRES32=0x0, @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x8d33864195c5c22f}, 0x60400c0) 261.41204ms ago: executing program 9 (id=3274): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000040)=0xfffffffb, 0x4) 114.46983ms ago: executing program 8 (id=3275): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)={0x20, 0x36, 0x107, 0x70bd2d, 0x25dfdbfb, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=@newqdisc={0x58, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xae, 0xca, 0x9, 0x2, 0x1, 0x800, 0x54}}, {0x4}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x2}, 0x0) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0a00000004000000080000000b"], 0x50) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xfffe, 0x0, 0x4}}}}}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@newtfilter={0x24, 0x11, 0xd27, 0x2004, 0x25dfdff9, {0x0, 0x0, 0x74, r7, {0x10, 0xfff1}, {0xffe1, 0xc}, {0xa, 0x2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x5c004}, 0x24048004) 52.469828ms ago: executing program 1 (id=3276): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000000c0)="b907ef19edfff007049e0ff0888e", 0x0, 0x0, 0x18000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) setsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x13, 0x0, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x2a}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)={0x18, 0x16, 0x107, 0x70bd2c, 0x25dfdbfe, {0x13, 0x7c}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x20048891}, 0x8010) socket(0x2, 0x2, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYRES8=r2], 0x20}, 0x1, 0x0, 0x0, 0x48001}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000006800010003009000fdffff7f00000000000000000c00020001000000150000000c000c8006000100d43f00000600030001000000"], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=ANY=[@ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x8000) shutdown(0xffffffffffffffff, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x8000000004) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000080)="520003000100b8", 0x7) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r7, 0x0, 0x4000040) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) 1.140513ms ago: executing program 9 (id=3277): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x4, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_io_uring_setup(0x3b87, &(0x7f0000000240)={0x0, 0x9b6, 0x40, 0x23, 0x2bc}, 0x0, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20203, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0xc226}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r2, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 0s ago: executing program 7 (id=3278): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001d0001000000", @ANYRES32=r1, @ANYBLOB="000096040a0002"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000090) kernel console output (not intermixed with test programs): tdevsim0 [ 1081.059024][ T5264] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1081.114649][T16170] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.122442][T15977] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1081.129451][T15977] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1081.129734][ T306] tipc: Left network mode [ 1081.130279][T15977] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1081.155475][T15977] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1081.156143][T15977] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1081.166345][T15977] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1081.255773][T16170] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.405881][T15926] veth0_vlan: entered promiscuous mode [ 1081.423911][ T5604] Bluetooth: hci3: command tx timeout [ 1081.533492][T15926] veth1_vlan: entered promiscuous mode [ 1081.621979][T12574] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.657164][ T43] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.709883][T15949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1081.741942][ T31] audit: type=1400 audit(1790837819.412:11538): avc: denied { write } for pid=16200 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1081.885791][ T31] audit: type=1400 audit(1790837819.562:11539): avc: denied { write } for pid=16213 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1081.986237][T13003] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.993970][ T5264] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1082.021645][T15949] 8021q: adding VLAN 0 to HW filter on device team0 [ 1082.092969][T16217] fuse: Unknown parameter 'group_id00000000000000000000' [ 1082.141099][ T306] hsr_slave_0: left promiscuous mode [ 1082.141616][ T306] hsr_slave_1: left promiscuous mode [ 1082.142266][ T306] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1082.142283][ T306] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1082.142926][ T306] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1082.142941][ T306] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1082.162985][ T306] hsr_slave_0: left promiscuous mode [ 1082.163544][ T306] hsr_slave_1: left promiscuous mode [ 1082.167333][ T306] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1082.167352][ T306] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1082.168352][ T306] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1082.168368][ T306] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1082.186423][ T306] veth1_macvtap: left promiscuous mode [ 1082.186457][ T306] veth0_macvtap: left promiscuous mode [ 1082.186561][ T306] veth1_vlan: left promiscuous mode [ 1082.186616][ T306] veth0_vlan: left promiscuous mode [ 1082.276017][ T306] veth1_macvtap: left promiscuous mode [ 1082.276052][ T306] veth0_macvtap: left promiscuous mode [ 1082.276140][ T306] veth1_vlan: left promiscuous mode [ 1082.276198][ T306] veth0_vlan: left promiscuous mode [ 1082.710796][ T298] smc: removing ib device syz2 [ 1082.771293][ T306] team0 (unregistering): Port device team_slave_1 removed [ 1082.790975][ T306] team0 (unregistering): Port device team_slave_0 removed [ 1082.939329][ T306] team0 (unregistering): Port device team_slave_1 removed [ 1082.955939][ T306] team0 (unregistering): Port device team_slave_0 removed [ 1083.112395][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 1083.113053][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1083.187317][T15926] veth0_macvtap: entered promiscuous mode [ 1083.225130][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 1083.225178][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1083.252401][T15926] veth1_macvtap: entered promiscuous mode [ 1083.288419][T15977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1083.290191][ T298] smbdirect: ib_dev[syz2] removed [ 1083.328336][T16038] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1083.331136][T16038] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1083.333323][T16038] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1083.391948][T16038] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1083.409468][T16038] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1083.429699][T16038] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1083.430451][T16038] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1083.460861][T16038] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1083.463913][T13003] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1083.480372][T15926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1083.504210][ T5604] Bluetooth: hci3: command tx timeout [ 1083.534148][T15977] 8021q: adding VLAN 0 to HW filter on device team0 [ 1083.579318][T15926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1083.580565][T12574] bridge0: port 1(bridge_slave_0) entered blocking state [ 1083.580653][T12574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1083.642773][T12574] bridge0: port 2(bridge_slave_1) entered blocking state [ 1083.642861][T12574] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1083.674738][T13003] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1083.674885][T13003] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1083.675358][T13003] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1083.675488][T13003] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.069227][T16246] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 1084.222249][ T31] audit: type=1400 audit(1790837821.892:11540): avc: denied { ioctl } for pid=16249 comm="syz.1.2428" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=49670 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1084.312972][T13008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1084.312991][T13008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1084.441524][T16258] fuse: Unknown parameter 'group_id00000000000000000000' [ 1084.634849][T13008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1084.634869][T13008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1084.660173][ T31] audit: type=1400 audit(1790837822.332:11541): avc: denied { write } for pid=16240 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1084.677687][T16038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1084.758386][T16038] 8021q: adding VLAN 0 to HW filter on device team0 [ 1084.777445][T13008] bridge0: port 1(bridge_slave_0) entered blocking state [ 1084.777533][T13008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1084.821550][T13008] bridge0: port 2(bridge_slave_1) entered blocking state [ 1084.821640][T13008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1085.041108][ T31] audit: type=1400 audit(1790837822.712:11542): avc: denied { write } for pid=16269 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1085.333317][ T5264] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1085.417647][T15949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1085.799692][ T306] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.860471][T15977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1085.909055][ T306] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1086.919883][T16315] fuse: Unknown parameter 'group_id00000000000000000000' [ 1086.987436][ T306] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.235401][ T306] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.373321][T15949] veth0_vlan: entered promiscuous mode [ 1087.427857][T15949] veth1_vlan: entered promiscuous mode [ 1087.632028][T15949] veth0_macvtap: entered promiscuous mode [ 1087.715512][T16038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1087.757065][T15949] veth1_macvtap: entered promiscuous mode [ 1087.991232][ T306] bridge_slave_1: left allmulticast mode [ 1087.991257][ T306] bridge_slave_1: left promiscuous mode [ 1087.991423][ T306] bridge0: port 2(bridge_slave_1) entered disabled state [ 1088.017101][ T306] bridge_slave_0: left allmulticast mode [ 1088.017124][ T306] bridge_slave_0: left promiscuous mode [ 1088.017282][ T306] bridge0: port 1(bridge_slave_0) entered disabled state [ 1088.119243][ T31] audit: type=1400 audit(1790837825.782:11543): avc: denied { write } for pid=16332 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1088.250091][ T306] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1088.252023][ T306] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1088.253242][ T306] bond0 (unregistering): Released all slaves [ 1088.265840][ T31] audit: type=1400 audit(1790837825.932:11544): avc: denied { write } for pid=16352 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1088.354851][T15949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1088.392282][T15949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1088.393579][T15977] veth0_vlan: entered promiscuous mode [ 1088.468863][T16038] veth0_vlan: entered promiscuous mode [ 1088.492249][T15977] veth1_vlan: entered promiscuous mode [ 1088.504433][ T5264] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1088.564798][T16038] veth1_vlan: entered promiscuous mode [ 1088.624320][ T298] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.860703][ T62] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.897285][ T59] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.121577][T15977] veth0_macvtap: entered promiscuous mode [ 1089.137640][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1089.137661][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1089.176032][ T306] hsr_slave_0: left promiscuous mode [ 1089.176628][ T306] hsr_slave_1: left promiscuous mode [ 1089.177350][ T306] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1089.177368][ T306] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1089.178913][ T306] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1089.178930][ T306] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1089.207536][ T306] veth1_macvtap: left promiscuous mode [ 1089.207569][ T306] veth0_macvtap: left promiscuous mode [ 1089.207640][ T306] veth1_vlan: left promiscuous mode [ 1089.207689][ T306] veth0_vlan: left promiscuous mode [ 1089.577571][ T306] team0 (unregistering): Port device team_slave_1 removed [ 1089.595374][ T31] audit: type=1400 audit(1790837827.272:11545): avc: denied { write } for pid=16364 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1089.596283][ T306] team0 (unregistering): Port device team_slave_0 removed [ 1089.707490][ T31] audit: type=1400 audit(1790837827.382:11546): avc: denied { write } for pid=16383 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1089.792700][T15977] veth1_macvtap: entered promiscuous mode [ 1089.797868][T16038] veth0_macvtap: entered promiscuous mode [ 1089.852614][T16038] veth1_macvtap: entered promiscuous mode [ 1089.883039][ T5264] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1089.885062][T12574] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.900387][ T298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1089.900407][ T298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1089.986755][T15977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1089.988604][T16038] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1090.029037][T15977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1090.052830][T16038] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1090.102368][ T59] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.102419][ T59] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.102447][ T59] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.102474][ T59] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.236862][T16397] syzkaller0: entered promiscuous mode [ 1090.236885][T16397] syzkaller0: entered allmulticast mode [ 1090.428924][ T298] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.435019][T13003] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.481569][ T59] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.531282][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1090.531301][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1090.551108][T12574] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.613173][ T306] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1090.613192][ T306] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1090.667396][ T298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1090.667416][ T298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1090.739508][ T31] audit: type=1400 audit(1790837828.412:11547): avc: denied { write } for pid=16393 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1090.744107][T12574] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1090.744124][T12574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1090.877463][ T31] audit: type=1400 audit(1790837828.552:11548): avc: denied { write } for pid=16419 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1091.006892][ T5264] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1091.241701][ T31] audit: type=1400 audit(1790837828.912:11549): avc: denied { ioctl } for pid=16420 comm="syz.8.2453" path="socket:[52276]" dev="sockfs" ino=52276 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1091.582391][T16432] FAULT_INJECTION: forcing a failure. [ 1091.582391][T16432] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1091.582426][T16432] CPU: 1 UID: 0 PID: 16432 Comm: syz.3.2454 Not tainted syzkaller #0 PREEMPT(full) [ 1091.582448][T16432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1091.582460][T16432] Call Trace: [ 1091.582468][T16432] [ 1091.582475][T16432] dump_stack_lvl+0x100/0x190 [ 1091.582517][T16432] should_fail_ex.cold+0x5/0xa [ 1091.582540][T16432] ? prepare_alloc_pages+0x16d/0x5b0 [ 1091.582569][T16432] should_fail_alloc_page+0xeb/0x140 [ 1091.582600][T16432] prepare_alloc_pages+0x1f0/0x5b0 [ 1091.582632][T16432] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 1091.582657][T16432] ? __pfx_native_flush_tlb_one_user+0x10/0x10 [ 1091.582682][T16432] ? rcu_is_watching+0x13/0xc0 [ 1091.582710][T16432] ? __alloc_frozen_pages_noprof+0x56b/0x3300 [ 1091.582739][T16432] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1091.582762][T16432] ? __pfx_flush_tlb_func+0x10/0x10 [ 1091.582781][T16432] ? smp_call_function_many_cond+0x944/0x18c0 [ 1091.582807][T16432] ? __pfx_should_flush_tlb+0x10/0x10 [ 1091.582826][T16432] ? __pfx_flush_tlb_func+0x10/0x10 [ 1091.582858][T16432] ? __lock_acquire+0x5c0/0x1f40 [ 1091.582880][T16432] ? __css_rstat_updated+0x1ce/0x590 [ 1091.582908][T16432] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1091.582934][T16432] ? policy_nodemask+0xed/0x4f0 [ 1091.582962][T16432] alloc_pages_mpol+0x201/0x550 [ 1091.582988][T16432] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1091.583016][T16432] ? page_table_check_set+0x31e/0x580 [ 1091.583047][T16432] folio_alloc_mpol_noprof+0x36/0x260 [ 1091.583069][T16432] vma_alloc_folio_noprof+0xed/0x1d0 [ 1091.583088][T16432] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1091.583106][T16432] ? rcu_read_unlock+0x2d/0xb0 [ 1091.583124][T16432] ? rcu_read_unlock+0x2d/0xb0 [ 1091.583148][T16432] do_wp_page+0xe11/0x45c0 [ 1091.583184][T16432] ? lock_acquire+0x1d1/0x380 [ 1091.583205][T16432] ? __pfx_do_wp_page+0x10/0x10 [ 1091.583234][T16432] ? do_raw_spin_lock+0x128/0x260 [ 1091.583261][T16432] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1091.583294][T16432] __handle_mm_fault+0x1cd2/0x2f60 [ 1091.583330][T16432] ? __pfx___handle_mm_fault+0x10/0x10 [ 1091.583359][T16432] ? __pfx_mt_find+0x10/0x10 [ 1091.583398][T16432] ? find_vma+0xbf/0x140 [ 1091.583420][T16432] ? __pfx_find_vma+0x10/0x10 [ 1091.583446][T16432] handle_mm_fault+0x363/0xa20 [ 1091.583481][T16432] do_user_addr_fault+0x745/0x12f0 [ 1091.583521][T16432] exc_page_fault+0x6f/0xd0 [ 1091.583541][T16432] asm_exc_page_fault+0x26/0x30 [ 1091.583562][T16432] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 1091.583590][T16432] Code: cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 ff b1 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 1091.583610][T16432] RSP: 0018:ffffc9000888f920 EFLAGS: 00050206 [ 1091.583629][T16432] RAX: 0000000000000001 RBX: 0000000000001000 RCX: 0000000000000e80 [ 1091.583641][T16432] RDX: 0000000000000001 RSI: ffff88800c00b180 RDI: 000020000000a000 [ 1091.583654][T16432] RBP: ffffc9000888fd30 R08: 0000000000000000 R09: ffffed10018017ff [ 1091.583667][T16432] R10: ffff88800c00bfff R11: 0000000000000000 R12: ffff88800c00b000 [ 1091.583682][T16432] R13: 0000000000009b80 R14: 0000200000009e80 R15: 0000000000001000 [ 1091.583709][T16432] _copy_to_iter+0x4c5/0x1720 [ 1091.583739][T16432] ? __pfx__copy_to_iter+0x10/0x10 [ 1091.583765][T16432] ? rcu_is_watching+0x13/0xc0 [ 1091.583789][T16432] ? __up_read+0x333/0x980 [ 1091.583814][T16432] copy_page_to_iter+0x285/0x370 [ 1091.583838][T16432] process_vm_rw_core.constprop.0+0x5a3/0x950 [ 1091.583871][T16432] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 1091.583909][T16432] ? iovec_from_user+0xda/0x140 [ 1091.583935][T16432] process_vm_rw+0x309/0x370 [ 1091.583960][T16432] ? __pfx_process_vm_rw+0x10/0x10 [ 1091.583988][T16432] ? find_held_lock+0x2b/0x80 [ 1091.584013][T16432] ? ksys_write+0x190/0x250 [ 1091.584052][T16432] ? xfd_validate_state+0x129/0x190 [ 1091.584076][T16432] __x64_sys_process_vm_readv+0xe2/0x1c0 [ 1091.584098][T16432] ? do_syscall_64+0xae/0x790 [ 1091.584116][T16432] ? lockdep_hardirqs_on+0x7d/0x110 [ 1091.584135][T16432] do_syscall_64+0x123/0x790 [ 1091.584156][T16432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1091.584174][T16432] RIP: 0033:0x7ff8a939e159 [ 1091.584191][T16432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1091.584208][T16432] RSP: 002b:00007ff8aa305028 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 1091.584228][T16432] RAX: ffffffffffffffda RBX: 00007ff8a9625fa0 RCX: 00007ff8a939e159 [ 1091.584240][T16432] RDX: 0000000000000002 RSI: 0000200000008400 RDI: 0000000000000005 [ 1091.584252][T16432] RBP: 00007ff8a943506b R08: 0000000000000286 R09: 0000000000000000 [ 1091.584264][T16432] R10: 0000200000008640 R11: 0000000000000246 R12: 0000000000000000 [ 1091.584275][T16432] R13: 00007ff8a9626038 R14: 00007ff8a9625fa0 R15: 00007ffe0c0a78c8 [ 1091.584300][T16432] [ 1092.171383][T16438] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2456'. [ 1092.244097][T16438] veth3: entered promiscuous mode [ 1092.373643][ T5611] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1092.390008][ T5611] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1092.392818][ T5611] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1092.403547][ T5611] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1092.412261][ T5611] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1092.530125][T16453] syzkaller0: entered promiscuous mode [ 1092.530148][T16453] syzkaller0: entered allmulticast mode [ 1092.717215][ T31] audit: type=1400 audit(1790837830.382:11550): avc: denied { connect } for pid=16457 comm="syz.8.2461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1092.884695][ T31] audit: type=1400 audit(1790837830.562:11551): avc: denied { write } for pid=16433 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1093.072627][T16392] bridge0: port 3(syz_tun) entered disabled state [ 1093.126400][T16392] syz_tun (unregistering): left allmulticast mode [ 1093.126423][T16392] syz_tun (unregistering): left promiscuous mode [ 1093.126489][T16392] bridge0: port 3(syz_tun) entered disabled state [ 1093.147224][ T31] audit: type=1400 audit(1790837830.812:11552): avc: denied { write } for pid=16475 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1093.356076][ T5264] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1093.829470][ T306] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.942481][ T306] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1094.133827][ T306] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1094.216949][ T306] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1094.410056][ C0] Unknown status report in ack skb [ 1094.420880][ T31] audit: type=1400 audit(1790837832.092:11553): avc: denied { write } for pid=16495 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1094.703839][ T31] audit: type=1400 audit(1790837832.352:11554): avc: denied { write } for pid=16531 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1094.733917][ T5604] Bluetooth: hci5: command tx timeout [ 1094.834963][ T31] audit: type=1400 audit(1790837832.512:11555): avc: denied { map } for pid=16525 comm="syz.3.2472" path="/dev/comedi0" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1094.835017][ T31] audit: type=1400 audit(1790837832.512:11556): avc: denied { execute } for pid=16525 comm="syz.3.2472" path="/dev/comedi0" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1094.842048][ T306] bridge_slave_1: left allmulticast mode [ 1094.842072][ T306] bridge_slave_1: left promiscuous mode [ 1094.842243][ T306] bridge0: port 2(bridge_slave_1) entered disabled state [ 1095.046082][ T306] bridge_slave_0: left allmulticast mode [ 1095.046109][ T306] bridge_slave_0: left promiscuous mode [ 1095.046283][ T306] bridge0: port 1(bridge_slave_0) entered disabled state [ 1095.972234][T16559] tipc: Enabling of bearer rejected, failed to enable media [ 1096.160956][ T306] ovs-system: left promiscuous mode [ 1096.794141][ T5604] Bluetooth: hci5: command tx timeout [ 1096.812325][T16454] bridge0: port 1(bridge_slave_0) entered blocking state [ 1096.812456][T16454] bridge0: port 1(bridge_slave_0) entered disabled state [ 1096.812553][T16454] bridge_slave_0: entered allmulticast mode [ 1096.815992][T16454] bridge_slave_0: entered promiscuous mode [ 1096.819821][T16454] bridge0: port 2(bridge_slave_1) entered blocking state [ 1096.819937][T16454] bridge0: port 2(bridge_slave_1) entered disabled state [ 1096.820026][T16454] bridge_slave_1: entered allmulticast mode [ 1096.822442][T16454] bridge_slave_1: entered promiscuous mode [ 1097.022509][T16454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1097.043724][T16454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1097.114398][T16596] device-mapper: ioctl: Invalid ioctl structure: name t, dev f800 [ 1097.200108][T16454] team0: Port device team_slave_0 added [ 1097.251415][ T31] audit: type=1400 audit(1790837834.922:11557): avc: denied { write } for pid=16565 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1097.453926][ T306] hsr_slave_0: left promiscuous mode [ 1097.470902][ T306] hsr_slave_1: left promiscuous mode [ 1097.512009][ T306] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1097.512060][ T306] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1097.529959][ T306] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1097.529980][ T306] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1097.560382][ T306] veth1_macvtap: left promiscuous mode [ 1097.560427][ T306] veth0_macvtap: left promiscuous mode [ 1097.560506][ T306] veth1_vlan: left promiscuous mode [ 1097.560559][ T306] veth0_vlan: left promiscuous mode [ 1097.610135][ T31] audit: type=1400 audit(1790837835.282:11558): avc: denied { write } for pid=16610 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1098.144311][ T306] team0 (unregistering): Port device team_slave_1 removed [ 1098.177124][ T306] team0 (unregistering): Port device team_slave_0 removed [ 1098.272475][ T31] audit: type=1400 audit(1790837835.942:11559): avc: denied { write } for pid=16617 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1098.404775][ T31] audit: type=1400 audit(1790837836.082:11560): avc: denied { write } for pid=16638 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1098.459897][T16454] team0: Port device team_slave_1 added [ 1098.589958][T16454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1098.589975][T16454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1098.589996][T16454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1098.672212][T16454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1098.672230][T16454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1098.672253][T16454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1098.866124][ T5604] Bluetooth: hci5: command tx timeout [ 1098.877029][T16454] hsr_slave_0: entered promiscuous mode [ 1098.877713][T16454] hsr_slave_1: entered promiscuous mode [ 1098.879987][ T31] audit: type=1400 audit(1790837836.552:11561): avc: denied { read } for pid=16655 comm="syz.8.2495" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1098.880026][ T31] audit: type=1400 audit(1790837836.552:11562): avc: denied { open } for pid=16655 comm="syz.8.2495" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1098.880911][T16454] debugfs: 'hsr0' already exists in 'hsr' [ 1098.880928][T16454] Cannot create hsr debugfs directory [ 1098.915095][ T31] audit: type=1400 audit(1790837836.562:11563): avc: denied { ioctl } for pid=16655 comm="syz.8.2495" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1098.915144][ T31] audit: type=1400 audit(1790837836.572:11564): avc: denied { map } for pid=16655 comm="syz.8.2495" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1099.334489][ T306] IPVS: stop unused estimator thread 0... [ 1099.396373][T16680] FAULT_INJECTION: forcing a failure. [ 1099.396373][T16680] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1099.396408][T16680] CPU: 0 UID: 0 PID: 16680 Comm: syz.7.2502 Not tainted syzkaller #0 PREEMPT(full) [ 1099.396431][T16680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1099.396444][T16680] Call Trace: [ 1099.396452][T16680] [ 1099.396461][T16680] dump_stack_lvl+0x100/0x190 [ 1099.396496][T16680] should_fail_ex.cold+0x5/0xa [ 1099.396519][T16680] ? prepare_alloc_pages+0x16d/0x5b0 [ 1099.396550][T16680] should_fail_alloc_page+0xeb/0x140 [ 1099.396580][T16680] prepare_alloc_pages+0x1f0/0x5b0 [ 1099.396611][T16680] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 1099.396640][T16680] ? __pfx_folios_put_refs+0x10/0x10 [ 1099.396670][T16680] ? find_held_lock+0x2b/0x80 [ 1099.396698][T16680] ? folio_batch_move_lru+0x37c/0xc00 [ 1099.396729][T16680] ? folio_batch_move_lru+0x37c/0xc00 [ 1099.396763][T16680] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1099.396795][T16680] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1099.396817][T16680] ? folio_batch_move_lru+0x3a9/0xc00 [ 1099.396846][T16680] ? __pfx_lru_add+0x10/0x10 [ 1099.396876][T16680] ? __pfx_folio_batch_move_lru+0x10/0x10 [ 1099.396907][T16680] ? __pfx_native_flush_tlb_one_user+0x10/0x10 [ 1099.396951][T16680] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1099.396977][T16680] ? policy_nodemask+0xed/0x4f0 [ 1099.397007][T16680] alloc_pages_mpol+0x201/0x550 [ 1099.397036][T16680] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1099.397066][T16680] ? page_table_check_set+0x31e/0x580 [ 1099.397097][T16680] folio_alloc_mpol_noprof+0x36/0x260 [ 1099.397119][T16680] vma_alloc_folio_noprof+0xed/0x1d0 [ 1099.397143][T16680] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1099.397162][T16680] ? rcu_read_unlock+0x2d/0xb0 [ 1099.397180][T16680] ? rcu_read_unlock+0x2d/0xb0 [ 1099.397205][T16680] do_wp_page+0xe11/0x45c0 [ 1099.397238][T16680] ? lock_acquire+0x1d1/0x380 [ 1099.397260][T16680] ? __pfx_do_wp_page+0x10/0x10 [ 1099.397288][T16680] ? do_raw_spin_lock+0x128/0x260 [ 1099.397314][T16680] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1099.397348][T16680] __handle_mm_fault+0x1cd2/0x2f60 [ 1099.397383][T16680] ? __pfx___handle_mm_fault+0x10/0x10 [ 1099.397412][T16680] ? __pfx_mt_find+0x10/0x10 [ 1099.397447][T16680] ? find_vma+0xbf/0x140 [ 1099.397470][T16680] ? __pfx_find_vma+0x10/0x10 [ 1099.397495][T16680] handle_mm_fault+0x363/0xa20 [ 1099.397531][T16680] do_user_addr_fault+0x745/0x12f0 [ 1099.397565][T16680] exc_page_fault+0x6f/0xd0 [ 1099.397585][T16680] asm_exc_page_fault+0x26/0x30 [ 1099.397605][T16680] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 1099.397632][T16680] Code: cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 ff b1 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 1099.397649][T16680] RSP: 0018:ffffc90005647920 EFLAGS: 00050206 [ 1099.397667][T16680] RAX: 0000000000000001 RBX: 0000000000001000 RCX: 0000000000000e80 [ 1099.397679][T16680] RDX: 0000000000000001 RSI: ffff88800c00b180 RDI: 000020000000b000 [ 1099.397692][T16680] RBP: ffffc90005647d30 R08: 0000000000000000 R09: ffffed10018017ff [ 1099.397705][T16680] R10: ffff88800c00bfff R11: 0000000000000000 R12: ffff88800c00b000 [ 1099.397717][T16680] R13: 000000000000ab80 R14: 000020000000ae80 R15: 0000000000001000 [ 1099.397743][T16680] _copy_to_iter+0x4c5/0x1720 [ 1099.397773][T16680] ? __pfx__copy_to_iter+0x10/0x10 [ 1099.397799][T16680] ? rcu_is_watching+0x13/0xc0 [ 1099.397828][T16680] ? __up_read+0x333/0x980 [ 1099.397858][T16680] copy_page_to_iter+0x285/0x370 [ 1099.397885][T16680] process_vm_rw_core.constprop.0+0x5a3/0x950 [ 1099.397925][T16680] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 1099.397964][T16680] ? iovec_from_user+0xda/0x140 [ 1099.397991][T16680] process_vm_rw+0x309/0x370 [ 1099.398012][T16680] ? futex_wake+0x220/0x5e0 [ 1099.398034][T16680] ? __pfx_process_vm_rw+0x10/0x10 [ 1099.398056][T16680] ? __pfx_futex_wake+0x10/0x10 [ 1099.398080][T16680] ? find_held_lock+0x2b/0x80 [ 1099.398108][T16680] ? ksys_write+0x190/0x250 [ 1099.398156][T16680] ? xfd_validate_state+0x129/0x190 [ 1099.398185][T16680] __x64_sys_process_vm_readv+0xe2/0x1c0 [ 1099.398210][T16680] ? do_syscall_64+0xae/0x790 [ 1099.398229][T16680] ? lockdep_hardirqs_on+0x7d/0x110 [ 1099.398249][T16680] do_syscall_64+0x123/0x790 [ 1099.398271][T16680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1099.398291][T16680] RIP: 0033:0x7fafe359e159 [ 1099.398308][T16680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1099.398326][T16680] RSP: 002b:00007fafe449d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 1099.398344][T16680] RAX: ffffffffffffffda RBX: 00007fafe3825fa0 RCX: 00007fafe359e159 [ 1099.398357][T16680] RDX: 0000000000000002 RSI: 0000200000008400 RDI: 0000000000000047 [ 1099.398370][T16680] RBP: 00007fafe363506b R08: 0000000000000286 R09: 0000000000000000 [ 1099.398382][T16680] R10: 0000200000008640 R11: 0000000000000246 R12: 0000000000000000 [ 1099.398395][T16680] R13: 00007fafe3826038 R14: 00007fafe3825fa0 R15: 00007fffc48e8578 [ 1099.398421][T16680] [ 1100.999465][ T5604] Bluetooth: hci5: command tx timeout [ 1101.214236][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 1101.214254][ T31] audit: type=1400 audit(1790837838.892:11568): avc: denied { create } for pid=16703 comm="syz.8.2508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1101.360430][ T31] audit: type=1400 audit(1790837839.032:11569): avc: denied { write } for pid=16685 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1102.133250][ T31] audit: type=1400 audit(1790837839.802:11570): avc: denied { write } for pid=16721 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1102.573242][T16740] netlink: 6024 bytes leftover after parsing attributes in process `syz.7.2518'. [ 1103.065127][T16749] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1103.129812][T16454] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1103.149061][T16454] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1103.151582][T16454] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1103.162067][T16454] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1103.163186][T16454] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1103.177654][T16454] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1103.183254][T16454] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1103.205684][T16454] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1103.305834][T16767] FAULT_INJECTION: forcing a failure. [ 1103.305834][T16767] name failslab, interval 1, probability 0, space 0, times 0 [ 1103.305872][T16767] CPU: 1 UID: 0 PID: 16767 Comm: syz.9.2523 Not tainted syzkaller #0 PREEMPT(full) [ 1103.305894][T16767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1103.305905][T16767] Call Trace: [ 1103.305912][T16767] [ 1103.305921][T16767] dump_stack_lvl+0x100/0x190 [ 1103.305954][T16767] should_fail_ex.cold+0x5/0xa [ 1103.305981][T16767] should_failslab+0xc2/0x120 [ 1103.306008][T16767] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1103.306032][T16767] ? alloc_empty_file+0x5b/0x1c0 [ 1103.306065][T16767] alloc_empty_file+0x5b/0x1c0 [ 1103.306093][T16767] alloc_file_clone+0x5f/0x110 [ 1103.306123][T16767] create_pipe_files+0x40e/0x970 [ 1103.306153][T16767] do_pipe2+0xbd/0x1e0 [ 1103.306180][T16767] ? __pfx_do_pipe2+0x10/0x10 [ 1103.306206][T16767] ? xfd_validate_state+0x129/0x190 [ 1103.306234][T16767] __x64_sys_pipe2+0x54/0x80 [ 1103.306262][T16767] do_syscall_64+0x123/0x790 [ 1103.306285][T16767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1103.306305][T16767] RIP: 0033:0x7fdaf419e159 [ 1103.306328][T16767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1103.306346][T16767] RSP: 002b:00007fdaf5020028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 1103.306366][T16767] RAX: ffffffffffffffda RBX: 00007fdaf4425fa0 RCX: 00007fdaf419e159 [ 1103.306379][T16767] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1103.306391][T16767] RBP: 00007fdaf423506b R08: 0000000000000000 R09: 0000000000000000 [ 1103.306403][T16767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1103.306416][T16767] R13: 00007fdaf4426038 R14: 00007fdaf4425fa0 R15: 00007ffe5fa03ef8 [ 1103.306442][T16767] [ 1103.480574][T16454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1103.563892][T16454] 8021q: adding VLAN 0 to HW filter on device team0 [ 1103.568855][ T31] audit: type=1400 audit(1790837841.242:11571): avc: denied { write } for pid=16729 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1103.604048][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 1103.604134][ T298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1103.636912][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 1103.637001][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1103.775773][ T31] audit: type=1400 audit(1790837841.452:11572): avc: denied { write } for pid=16780 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1104.069112][ T5611] block nbd0: Receive control failed (result -32) [ 1104.095208][ T5604] block nbd0: Receive control failed (result -32) [ 1104.247748][T16799] fuse: Invalid rootmode [ 1104.252604][T16797] FAULT_INJECTION: forcing a failure. [ 1104.252604][T16797] name failslab, interval 1, probability 0, space 0, times 0 [ 1104.252638][T16797] CPU: 1 UID: 0 PID: 16797 Comm: syz.3.2531 Not tainted syzkaller #0 PREEMPT(full) [ 1104.252661][T16797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1104.252674][T16797] Call Trace: [ 1104.252681][T16797] [ 1104.252690][T16797] dump_stack_lvl+0x100/0x190 [ 1104.252724][T16797] should_fail_ex.cold+0x5/0xa [ 1104.252753][T16797] should_failslab+0xc2/0x120 [ 1104.252782][T16797] __kmalloc_cache_noprof+0x91/0x6d0 [ 1104.252802][T16797] ? __pfx_vicodec_s_ctrl+0x10/0x10 [ 1104.252824][T16797] ? v4l2_m2m_ctx_init+0x4d/0x380 [ 1104.252846][T16797] ? __pfx_queue_init+0x10/0x10 [ 1104.252866][T16797] v4l2_m2m_ctx_init+0x4d/0x380 [ 1104.252884][T16797] vicodec_open+0x6dc/0xf70 [ 1104.252908][T16797] v4l2_open+0x1d2/0x490 [ 1104.252925][T16797] ? __pfx_v4l2_open+0x10/0x10 [ 1104.252939][T16797] chrdev_open+0x234/0x6a0 [ 1104.252960][T16797] ? __pfx_chrdev_open+0x10/0x10 [ 1104.252981][T16797] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1104.253000][T16797] do_dentry_open+0x6ab/0x14d0 [ 1104.253017][T16797] ? __pfx_chrdev_open+0x10/0x10 [ 1104.253041][T16797] vfs_open+0x82/0x3f0 [ 1104.253066][T16797] path_openat+0x19fa/0x2440 [ 1104.253089][T16797] ? __pfx_path_openat+0x10/0x10 [ 1104.253115][T16797] do_file_open+0x20e/0x430 [ 1104.253137][T16797] ? __pfx_do_file_open+0x10/0x10 [ 1104.253172][T16797] ? _raw_spin_unlock+0x28/0x50 [ 1104.253194][T16797] ? alloc_fd+0x471/0x7a0 [ 1104.253220][T16797] do_sys_openat2+0x10f/0x1e0 [ 1104.253243][T16797] ? __pfx_do_sys_openat2+0x10/0x10 [ 1104.253272][T16797] __x64_sys_openat+0x12d/0x210 [ 1104.253294][T16797] ? __pfx___x64_sys_openat+0x10/0x10 [ 1104.253330][T16797] do_syscall_64+0x123/0x790 [ 1104.253349][T16797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1104.253366][T16797] RIP: 0033:0x7ff8a939e159 [ 1104.253380][T16797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1104.253396][T16797] RSP: 002b:00007ff8aa305028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1104.253413][T16797] RAX: ffffffffffffffda RBX: 00007ff8a9625fa0 RCX: 00007ff8a939e159 [ 1104.253424][T16797] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1104.253434][T16797] RBP: 00007ff8a943506b R08: 0000000000000000 R09: 0000000000000000 [ 1104.253444][T16797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1104.253453][T16797] R13: 00007ff8a9626038 R14: 00007ff8a9625fa0 R15: 00007ffe0c0a78c8 [ 1104.253474][T16797] [ 1104.489500][T16804] FAULT_INJECTION: forcing a failure. [ 1104.489500][T16804] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1104.489530][T16804] CPU: 0 UID: 0 PID: 16804 Comm: syz.9.2535 Not tainted syzkaller #0 PREEMPT(full) [ 1104.489551][T16804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1104.489561][T16804] Call Trace: [ 1104.489568][T16804] [ 1104.489576][T16804] dump_stack_lvl+0x100/0x190 [ 1104.489608][T16804] should_fail_ex.cold+0x5/0xa [ 1104.489631][T16804] get_futex_key+0x1d0/0x14f0 [ 1104.489657][T16804] ? __pfx_get_futex_key+0x10/0x10 [ 1104.489679][T16804] ? wakeup_preempt_fair+0x5c3/0xdc0 [ 1104.489703][T16804] ? tracing_record_taskinfo_sched_switch+0xac/0x560 [ 1104.489729][T16804] futex_wait_setup+0x91/0x540 [ 1104.489753][T16804] __futex_wait+0x19f/0x300 [ 1104.489772][T16804] ? __pfx___futex_wait+0x10/0x10 [ 1104.489791][T16804] ? __pfx_try_to_wake_up+0x10/0x10 [ 1104.489816][T16804] ? futex_hash+0x311/0x400 [ 1104.489838][T16804] ? __pfx_futex_wake_mark+0x10/0x10 [ 1104.489859][T16804] ? find_held_lock+0x2b/0x80 [ 1104.489882][T16804] ? futex_wake+0x4ea/0x5e0 [ 1104.489906][T16804] futex_wait+0xe6/0x370 [ 1104.489925][T16804] ? __pfx_futex_wait+0x10/0x10 [ 1104.489956][T16804] do_futex+0x265/0x440 [ 1104.489985][T16804] ? __pfx_do_futex+0x10/0x10 [ 1104.490011][T16804] ? __do_sys_add_key+0x2d0/0x460 [ 1104.490027][T16804] ? __do_sys_add_key+0x37d/0x460 [ 1104.490041][T16804] ? kfree+0x22b/0x6d0 [ 1104.490059][T16804] __x64_sys_futex+0x34f/0x4d0 [ 1104.490086][T16804] ? __pfx___x64_sys_futex+0x10/0x10 [ 1104.490117][T16804] do_syscall_64+0x123/0x790 [ 1104.490137][T16804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1104.490154][T16804] RIP: 0033:0x7fdaf419e159 [ 1104.490169][T16804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1104.490184][T16804] RSP: 002b:00007fdaf50200e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1104.490202][T16804] RAX: ffffffffffffffda RBX: 00007fdaf4425fa8 RCX: 00007fdaf419e159 [ 1104.490213][T16804] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fdaf4425fa8 [ 1104.490223][T16804] RBP: 00007fdaf4425fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1104.490234][T16804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1104.490244][T16804] R13: 00007fdaf4426038 R14: 00007ffe5fa03e10 R15: 00007ffe5fa03ef8 [ 1104.490266][T16804] [ 1105.401519][T16846] FAULT_INJECTION: forcing a failure. [ 1105.401519][T16846] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1105.401554][T16846] CPU: 1 UID: 0 PID: 16846 Comm: syz.7.2548 Not tainted syzkaller #0 PREEMPT(full) [ 1105.401577][T16846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1105.401589][T16846] Call Trace: [ 1105.401596][T16846] [ 1105.401604][T16846] dump_stack_lvl+0x100/0x190 [ 1105.401639][T16846] should_fail_ex.cold+0x5/0xa [ 1105.401667][T16846] get_futex_key+0x1d0/0x14f0 [ 1105.401697][T16846] ? __pfx_get_futex_key+0x10/0x10 [ 1105.401731][T16846] futex_wait_setup+0x91/0x540 [ 1105.401760][T16846] __futex_wait+0x19f/0x300 [ 1105.401783][T16846] ? __pfx___futex_wait+0x10/0x10 [ 1105.401803][T16846] ? __pfx_try_to_wake_up+0x10/0x10 [ 1105.401825][T16846] ? futex_hash+0x311/0x400 [ 1105.401860][T16846] ? __pfx_futex_wake_mark+0x10/0x10 [ 1105.401886][T16846] ? find_held_lock+0x2b/0x80 [ 1105.401916][T16846] ? futex_wake+0x4ea/0x5e0 [ 1105.401943][T16846] futex_wait+0xe6/0x370 [ 1105.401965][T16846] ? __pfx_futex_wait+0x10/0x10 [ 1105.401999][T16846] do_futex+0x265/0x440 [ 1105.402027][T16846] ? __pfx_do_futex+0x10/0x10 [ 1105.402050][T16846] ? __do_sys_add_key+0x2d0/0x460 [ 1105.402066][T16846] ? __do_sys_add_key+0x37d/0x460 [ 1105.402082][T16846] ? kfree+0x22b/0x6d0 [ 1105.402102][T16846] __x64_sys_futex+0x34f/0x4d0 [ 1105.402129][T16846] ? __pfx___x64_sys_futex+0x10/0x10 [ 1105.402161][T16846] do_syscall_64+0x123/0x790 [ 1105.402182][T16846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1105.402202][T16846] RIP: 0033:0x7fafe359e159 [ 1105.402219][T16846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1105.402239][T16846] RSP: 002b:00007fafe449d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1105.402258][T16846] RAX: ffffffffffffffda RBX: 00007fafe3825fa8 RCX: 00007fafe359e159 [ 1105.402271][T16846] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fafe3825fa8 [ 1105.402282][T16846] RBP: 00007fafe3825fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1105.402293][T16846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1105.402304][T16846] R13: 00007fafe3826038 R14: 00007fffc48e8490 R15: 00007fffc48e8578 [ 1105.402327][T16846] [ 1105.471124][T16454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1105.751230][T16454] veth0_vlan: entered promiscuous mode [ 1105.793260][T16454] veth1_vlan: entered promiscuous mode [ 1105.836369][T16861] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2553'. [ 1105.888726][T16454] veth0_macvtap: entered promiscuous mode [ 1105.920928][T16454] veth1_macvtap: entered promiscuous mode [ 1105.943528][T16454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1105.959434][T16454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1106.434588][T12043] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1106.513953][T13003] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1106.513994][T13003] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1106.514020][T13003] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1106.567272][ T31] audit: type=1400 audit(1790837844.242:11573): avc: denied { write } for pid=16835 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1106.750733][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1106.750755][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1106.872029][T16883] syzkaller0: entered promiscuous mode [ 1106.872055][T16883] syzkaller0: entered allmulticast mode [ 1106.874282][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1106.874297][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1106.931022][ T31] audit: type=1400 audit(1790837844.602:11574): avc: denied { write } for pid=16884 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1107.720447][T16903] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2563'. [ 1109.110995][ T31] audit: type=1400 audit(1790837846.782:11575): avc: denied { write } for pid=16898 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1109.240017][ T31] audit: type=1400 audit(1790837846.912:11576): avc: denied { write } for pid=16932 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1109.744204][T16888] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1109.808141][T16944] FAULT_INJECTION: forcing a failure. [ 1109.808141][T16944] name failslab, interval 1, probability 0, space 0, times 0 [ 1109.808176][T16944] CPU: 0 UID: 0 PID: 16944 Comm: syz.1.2573 Not tainted syzkaller #0 PREEMPT(full) [ 1109.808201][T16944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1109.808213][T16944] Call Trace: [ 1109.808220][T16944] [ 1109.808229][T16944] dump_stack_lvl+0x100/0x190 [ 1109.808263][T16944] should_fail_ex.cold+0x5/0xa [ 1109.808292][T16944] should_failslab+0xc2/0x120 [ 1109.808320][T16944] __kmalloc_noprof+0xfc/0x840 [ 1109.808344][T16944] ? __register_sysctl_table+0xbc8/0x1650 [ 1109.808363][T16944] ? __register_sysctl_table+0xbe4/0x1650 [ 1109.808387][T16944] __register_sysctl_table+0xbe4/0x1650 [ 1109.808414][T16944] ? __pfx___register_sysctl_table+0x10/0x10 [ 1109.808433][T16944] ? setup_mq_sysctls+0x5d/0x240 [ 1109.808458][T16944] ? __asan_memcpy+0x3c/0x60 [ 1109.808484][T16944] setup_mq_sysctls+0x124/0x240 [ 1109.808513][T16944] copy_ipcs+0x524/0x7e0 [ 1109.808536][T16944] create_new_namespaces+0x20a/0xac0 [ 1109.808555][T16944] ? security_capable+0x80/0x260 [ 1109.808576][T16944] unshare_nsproxy_namespaces+0xf2/0x220 [ 1109.808598][T16944] ksys_unshare+0x4a2/0xa70 [ 1109.808621][T16944] ? __pfx_ksys_unshare+0x10/0x10 [ 1109.808654][T16944] __x64_sys_unshare+0x31/0x40 [ 1109.808677][T16944] do_syscall_64+0x123/0x790 [ 1109.808700][T16944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.808720][T16944] RIP: 0033:0x7f07b419e159 [ 1109.808738][T16944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1109.808756][T16944] RSP: 002b:00007f07b4fb0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1109.808778][T16944] RAX: ffffffffffffffda RBX: 00007f07b4425fa0 RCX: 00007f07b419e159 [ 1109.808791][T16944] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000a040080 [ 1109.808802][T16944] RBP: 00007f07b423506b R08: 0000000000000000 R09: 0000000000000000 [ 1109.808813][T16944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1109.808827][T16944] R13: 00007f07b4426038 R14: 00007f07b4425fa0 R15: 00007ffc85988768 [ 1109.808858][T16944] [ 1109.810642][T16944] sysctl could not get directory: /fs -12 [ 1110.148584][ T31] audit: type=1400 audit(1790837847.822:11577): avc: denied { write } for pid=16935 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1110.317046][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1110.317090][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1110.866760][ T31] audit: type=1400 audit(1790837848.542:11578): avc: denied { write } for pid=16965 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1111.198338][T16974] smpboot: CPU 1 is now offline [ 1111.481561][T17001] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1111.535747][T16997] vlan2: entered promiscuous mode [ 1111.535764][T16997] hsr0: entered promiscuous mode [ 1111.535923][T16997] vlan2: entered allmulticast mode [ 1111.535931][T16997] hsr0: entered allmulticast mode [ 1111.535939][T16997] hsr_slave_0: entered allmulticast mode [ 1111.535947][T16997] hsr_slave_1: entered allmulticast mode [ 1111.540612][ T31] audit: type=1400 audit(1790837849.212:11579): avc: denied { write } for pid=16977 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1111.691164][T16997] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2586'. [ 1111.692969][T16997] hsr_slave_0: left promiscuous mode [ 1111.710265][T16997] hsr_slave_1: left promiscuous mode [ 1111.847194][ T31] audit: type=1400 audit(1790837849.522:11580): avc: denied { write } for pid=17011 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1111.960430][T17017] FAULT_INJECTION: forcing a failure. [ 1111.960430][T17017] name failslab, interval 1, probability 0, space 0, times 0 [ 1111.960451][T17017] CPU: 0 UID: 0 PID: 17017 Comm: syz.1.2592 Not tainted syzkaller #0 PREEMPT(full) [ 1111.960467][T17017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1111.960474][T17017] Call Trace: [ 1111.960478][T17017] [ 1111.960483][T17017] dump_stack_lvl+0x100/0x190 [ 1111.960505][T17017] should_fail_ex.cold+0x5/0xa [ 1111.960522][T17017] should_failslab+0xc2/0x120 [ 1111.960539][T17017] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1111.960554][T17017] ? __asan_memcpy+0x3c/0x60 [ 1111.960568][T17017] ? __kernfs_new_node+0xd2/0xa10 [ 1111.960582][T17017] __kernfs_new_node+0xd2/0xa10 [ 1111.960595][T17017] ? __pfx___kernfs_new_node+0x10/0x10 [ 1111.960608][T17017] ? lock_acquire+0x1d1/0x380 [ 1111.960621][T17017] ? kernfs_root+0x23/0x2a0 [ 1111.960637][T17017] ? find_held_lock+0x2b/0x80 [ 1111.960653][T17017] ? kernfs_root+0xee/0x2a0 [ 1111.960669][T17017] ? kernfs_root+0xee/0x2a0 [ 1111.960688][T17017] kernfs_create_dir_ns+0xa6/0x2b0 [ 1111.960701][T17017] ? percpu_ref_init+0x244/0x3f0 [ 1111.960720][T17017] cgroup_mkdir+0x3be/0x1330 [ 1111.960735][T17017] ? __pfx_cgroup_mkdir+0x10/0x10 [ 1111.960750][T17017] kernfs_iop_mkdir+0x111/0x190 [ 1111.960760][T17017] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 1111.960775][T17017] vfs_mkdir+0x364/0x850 [ 1111.960789][T17017] filename_mkdirat+0x48b/0x5e0 [ 1111.960807][T17017] ? __pfx_filename_mkdirat+0x10/0x10 [ 1111.960823][T17017] ? strncpy_from_user+0x19d/0x2d0 [ 1111.960840][T17017] ? do_getname+0x191/0x390 [ 1111.960852][T17017] __x64_sys_mkdirat+0x89/0xc0 [ 1111.960868][T17017] do_syscall_64+0x123/0x790 [ 1111.960882][T17017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1111.960893][T17017] RIP: 0033:0x7f07b419e159 [ 1111.960904][T17017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1111.960915][T17017] RSP: 002b:00007f07b4fb0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1111.960927][T17017] RAX: ffffffffffffffda RBX: 00007f07b4425fa0 RCX: 00007f07b419e159 [ 1111.960935][T17017] RDX: 00000000000001ff RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1111.960942][T17017] RBP: 00007f07b423506b R08: 0000000000000000 R09: 0000000000000000 [ 1111.960949][T17017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1111.960955][T17017] R13: 00007f07b4426038 R14: 00007f07b4425fa0 R15: 00007ffc85988768 [ 1111.960970][T17017] [ 1112.426241][T17023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2593'. [ 1113.282698][T17036] syz.7.2595 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1113.547219][T17037] bond1: option downdelay: invalid value (18446744073709551614) [ 1113.547235][T17037] bond1: option downdelay: allowed values 0 - 2147483647 [ 1113.553643][T17037] bond1 (unregistering): Released all slaves [ 1113.604975][T17046] FAULT_INJECTION: forcing a failure. [ 1113.604975][T17046] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1113.604997][T17046] CPU: 0 UID: 0 PID: 17046 Comm: syz.3.2601 Not tainted syzkaller #0 PREEMPT(full) [ 1113.605010][T17046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1113.605017][T17046] Call Trace: [ 1113.605022][T17046] [ 1113.605026][T17046] dump_stack_lvl+0x100/0x190 [ 1113.605048][T17046] should_fail_ex.cold+0x5/0xa [ 1113.605067][T17046] get_futex_key+0x1d0/0x14f0 [ 1113.605085][T17046] ? __pfx_get_futex_key+0x10/0x10 [ 1113.605101][T17046] ? find_held_lock+0x2b/0x80 [ 1113.605118][T17046] ? futex_wake+0x4ea/0x5e0 [ 1113.605132][T17046] futex_wake+0xf4/0x5e0 [ 1113.605142][T17046] ? futex_wait+0x11e/0x370 [ 1113.605155][T17046] ? __pfx_futex_wake+0x10/0x10 [ 1113.605181][T17046] ? rcu_read_lock_any_held+0x6a/0x90 [ 1113.605199][T17046] ? find_held_lock+0x2b/0x80 [ 1113.605215][T17046] ? ksys_write+0x190/0x250 [ 1113.605227][T17046] ? ksys_write+0x190/0x250 [ 1113.605241][T17046] do_futex+0x2b2/0x440 [ 1113.605257][T17046] ? __pfx_do_futex+0x10/0x10 [ 1113.605274][T17046] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1113.605289][T17046] __x64_sys_futex+0x34f/0x4d0 [ 1113.605307][T17046] ? __pfx___x64_sys_futex+0x10/0x10 [ 1113.605322][T17046] ? __task_pid_nr_ns+0x1ca/0x510 [ 1113.605338][T17046] ? __task_pid_nr_ns+0x1ca/0x510 [ 1113.605359][T17046] do_syscall_64+0x123/0x790 [ 1113.605373][T17046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1113.605384][T17046] RIP: 0033:0x7ff8a939e159 [ 1113.605394][T17046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1113.605405][T17046] RSP: 002b:00007ff8aa3050e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1113.605416][T17046] RAX: ffffffffffffffda RBX: 00007ff8a9625fa8 RCX: 00007ff8a939e159 [ 1113.605423][T17046] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff8a9625fac [ 1113.605432][T17046] RBP: 00007ff8a9625fa0 R08: 0000000000000001 R09: 0000000000000000 [ 1113.605439][T17046] R10: 0000000000000063 R11: 0000000000000246 R12: 0000000000000000 [ 1113.605446][T17046] R13: 00007ff8a9626038 R14: 00007ffe0c0a77e0 R15: 00007ffe0c0a78c8 [ 1113.605460][T17046] [ 1113.969792][T17055] FAULT_INJECTION: forcing a failure. [ 1113.969792][T17055] name failslab, interval 1, probability 0, space 0, times 0 [ 1113.969835][T17055] CPU: 0 UID: 0 PID: 17055 Comm: syz.8.2603 Not tainted syzkaller #0 PREEMPT(full) [ 1113.969850][T17055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1113.969859][T17055] Call Trace: [ 1113.969864][T17055] [ 1113.969869][T17055] dump_stack_lvl+0x100/0x190 [ 1113.969890][T17055] should_fail_ex.cold+0x5/0xa [ 1113.969906][T17055] should_failslab+0xc2/0x120 [ 1113.969923][T17055] __kmalloc_cache_noprof+0x91/0x6d0 [ 1113.969937][T17055] ? resv_map_alloc+0x46/0x400 [ 1113.969954][T17055] resv_map_alloc+0x46/0x400 [ 1113.969969][T17055] hugetlbfs_get_inode+0x385/0x700 [ 1113.969987][T17055] hugetlb_file_setup+0x15b/0x5b0 [ 1113.970003][T17055] ksys_mmap_pgoff+0x242/0x610 [ 1113.970020][T17055] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1113.970034][T17055] ? xfd_validate_state+0x129/0x190 [ 1113.970049][T17055] __x64_sys_mmap+0x125/0x190 [ 1113.970065][T17055] do_syscall_64+0x123/0x790 [ 1113.970078][T17055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1113.970090][T17055] RIP: 0033:0x7fe53b39e159 [ 1113.970100][T17055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1113.970110][T17055] RSP: 002b:00007fe53c275028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1113.970122][T17055] RAX: ffffffffffffffda RBX: 00007fe53b625fa0 RCX: 00007fe53b39e159 [ 1113.970129][T17055] RDX: 0000000001000002 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 1113.970136][T17055] RBP: 00007fe53b43506b R08: ffffffffffffffff R09: 0000000000000000 [ 1113.970143][T17055] R10: 000200000005c831 R11: 0000000000000246 R12: 0000000000000000 [ 1113.970150][T17055] R13: 00007fe53b626038 R14: 00007fe53b625fa0 R15: 00007ffdd4a47a28 [ 1113.970164][T17055] [ 1114.280992][T17060] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 1114.339905][ T31] audit: type=1400 audit(1790837852.012:11581): avc: denied { write } for pid=17021 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1114.581019][ T31] audit: type=1400 audit(1790837852.252:11582): avc: denied { write } for pid=17073 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1114.750297][ T31] audit: type=1400 audit(1790837852.422:11583): avc: denied { write } for pid=17078 comm="syz.1.2612" name="testsubsys" dev="configfs" ino=36712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1114.984837][ T31] audit: type=1400 audit(1790837852.662:11584): avc: denied { ioctl } for pid=17093 comm="syz.7.2617" path="/dev/nullb0" dev="devtmpfs" ino=694 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1115.171651][T17106] FAULT_INJECTION: forcing a failure. [ 1115.171651][T17106] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1115.171673][T17106] CPU: 0 UID: 0 PID: 17106 Comm: syz.7.2621 Not tainted syzkaller #0 PREEMPT(full) [ 1115.171685][T17106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1115.171692][T17106] Call Trace: [ 1115.171696][T17106] [ 1115.171701][T17106] dump_stack_lvl+0x100/0x190 [ 1115.171727][T17106] should_fail_ex.cold+0x5/0xa [ 1115.171744][T17106] get_futex_key+0x1d0/0x14f0 [ 1115.171763][T17106] ? __pfx_get_futex_key+0x10/0x10 [ 1115.171778][T17106] ? find_held_lock+0x2b/0x80 [ 1115.171796][T17106] ? futex_wake+0x4ea/0x5e0 [ 1115.171810][T17106] futex_wake+0xf4/0x5e0 [ 1115.171823][T17106] ? futex_wait+0x11e/0x370 [ 1115.171836][T17106] ? __pfx_futex_wake+0x10/0x10 [ 1115.171849][T17106] ? rcu_read_lock_any_held+0x6a/0x90 [ 1115.171868][T17106] ? find_held_lock+0x2b/0x80 [ 1115.171885][T17106] ? ksys_write+0x190/0x250 [ 1115.171898][T17106] ? ksys_write+0x190/0x250 [ 1115.171912][T17106] do_futex+0x2b2/0x440 [ 1115.171929][T17106] ? __pfx_do_futex+0x10/0x10 [ 1115.171945][T17106] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1115.171960][T17106] __x64_sys_futex+0x34f/0x4d0 [ 1115.171978][T17106] ? __pfx___x64_sys_futex+0x10/0x10 [ 1115.171994][T17106] ? __task_pid_nr_ns+0x1ca/0x510 [ 1115.172009][T17106] ? __task_pid_nr_ns+0x1ca/0x510 [ 1115.172028][T17106] do_syscall_64+0x123/0x790 [ 1115.172041][T17106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1115.172053][T17106] RIP: 0033:0x7fafe359e159 [ 1115.172064][T17106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1115.172074][T17106] RSP: 002b:00007fafe449d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1115.172086][T17106] RAX: ffffffffffffffda RBX: 00007fafe3825fa8 RCX: 00007fafe359e159 [ 1115.172093][T17106] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fafe3825fac [ 1115.172100][T17106] RBP: 00007fafe3825fa0 R08: 0000000000000001 R09: 0000000000000000 [ 1115.172107][T17106] R10: 000000000000007f R11: 0000000000000246 R12: 0000000000000000 [ 1115.172114][T17106] R13: 00007fafe3826038 R14: 00007fffc48e8490 R15: 00007fffc48e8578 [ 1115.172128][T17106] [ 1115.692525][T17118] syzkaller1: entered promiscuous mode [ 1115.692540][T17118] syzkaller1: entered allmulticast mode [ 1115.871773][T17120] fuse: Unknown parameter 'use00000000000000000000' [ 1115.929694][ T31] audit: type=1400 audit(1790837853.602:11585): avc: denied { write } for pid=17085 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1116.153313][ T31] audit: type=1400 audit(1790837853.822:11586): avc: denied { write } for pid=17130 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1116.219391][ C0] Unknown status report in ack skb [ 1116.542828][T17140] syzkaller0: entered promiscuous mode [ 1116.542842][T17140] syzkaller0: entered allmulticast mode [ 1116.792064][T17156] v: renamed from dummy0 (while UP) [ 1116.821236][T17159] fuse: Unknown parameter 'use00000000000000000000' [ 1116.892182][T17161] FAULT_INJECTION: forcing a failure. [ 1116.892182][T17161] name failslab, interval 1, probability 0, space 0, times 0 [ 1116.892203][T17161] CPU: 0 UID: 0 PID: 17161 Comm: syz.9.2638 Not tainted syzkaller #0 PREEMPT(full) [ 1116.892216][T17161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1116.892223][T17161] Call Trace: [ 1116.892228][T17161] [ 1116.892234][T17161] dump_stack_lvl+0x100/0x190 [ 1116.892254][T17161] should_fail_ex.cold+0x5/0xa [ 1116.892271][T17161] should_failslab+0xc2/0x120 [ 1116.892294][T17161] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1116.892308][T17161] ? do_raw_spin_lock+0x128/0x260 [ 1116.892325][T17161] ? inet_bind_bucket_create+0x2d/0x280 [ 1116.892344][T17161] inet_bind_bucket_create+0x2d/0x280 [ 1116.892358][T17161] inet_csk_get_port+0x8d2/0x28e0 [ 1116.892378][T17161] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1116.892396][T17161] ? __local_bh_enable_ip+0xa5/0x120 [ 1116.892411][T17161] __inet_bind+0x598/0xc60 [ 1116.892425][T17161] inet_bind+0xdb/0x120 [ 1116.892436][T17161] __sys_bind+0x1a9/0x260 [ 1116.892450][T17161] ? __pfx___sys_bind+0x10/0x10 [ 1116.892471][T17161] __x64_sys_bind+0x72/0xb0 [ 1116.892483][T17161] ? lockdep_hardirqs_on+0x7d/0x110 [ 1116.892495][T17161] do_syscall_64+0x123/0x790 [ 1116.892507][T17161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.892519][T17161] RIP: 0033:0x7fdaf419e159 [ 1116.892529][T17161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1116.892540][T17161] RSP: 002b:00007fdaf5020028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1116.892552][T17161] RAX: ffffffffffffffda RBX: 00007fdaf4425fa0 RCX: 00007fdaf419e159 [ 1116.892559][T17161] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000006 [ 1116.892566][T17161] RBP: 00007fdaf423506b R08: 0000000000000000 R09: 0000000000000000 [ 1116.892573][T17161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1116.892579][T17161] R13: 00007fdaf4426038 R14: 00007fdaf4425fa0 R15: 00007ffe5fa03ef8 [ 1116.892593][T17161] [ 1117.397054][T17164] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1117.420381][T17174] FAULT_INJECTION: forcing a failure. [ 1117.420381][T17174] name failslab, interval 1, probability 0, space 0, times 0 [ 1117.420402][T17174] CPU: 0 UID: 0 PID: 17174 Comm: syz.9.2642 Not tainted syzkaller #0 PREEMPT(full) [ 1117.420416][T17174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1117.420424][T17174] Call Trace: [ 1117.420429][T17174] [ 1117.420434][T17174] dump_stack_lvl+0x100/0x190 [ 1117.420456][T17174] should_fail_ex.cold+0x5/0xa [ 1117.420477][T17174] should_failslab+0xc2/0x120 [ 1117.420494][T17174] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1117.420508][T17174] ? do_getname+0x35/0x390 [ 1117.420523][T17174] do_getname+0x35/0x390 [ 1117.420536][T17174] do_sys_openat2+0xc7/0x1e0 [ 1117.420553][T17174] ? __pfx_do_sys_openat2+0x10/0x10 [ 1117.420569][T17174] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 1117.420589][T17174] __x64_sys_openat+0x12d/0x210 [ 1117.420606][T17174] ? __pfx___x64_sys_openat+0x10/0x10 [ 1117.420628][T17174] do_syscall_64+0x123/0x790 [ 1117.420641][T17174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.420652][T17174] RIP: 0033:0x7fdaf415e98e [ 1117.420662][T17174] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1117.420673][T17174] RSP: 002b:00007fdaf501fb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1117.420684][T17174] RAX: ffffffffffffffda RBX: 00007fdaf50206c0 RCX: 00007fdaf415e98e [ 1117.420691][T17174] RDX: 0000000000000002 RSI: 00007fdaf501fc00 RDI: ffffffffffffff9c [ 1117.420698][T17174] RBP: 00007fdaf501fc00 R08: 0000000000000000 R09: 0000000000000000 [ 1117.420705][T17174] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1117.420712][T17174] R13: 00007fdaf4426038 R14: 00007fdaf4425fa0 R15: 00007ffe5fa03ef8 [ 1117.420726][T17174] [ 1117.798285][ T31] audit: type=1400 audit(1790837855.472:11587): avc: denied { read } for pid=17179 comm="syz.9.2645" name="usbmon7" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1117.798318][ T31] audit: type=1400 audit(1790837855.472:11588): avc: denied { open } for pid=17179 comm="syz.9.2645" path="/dev/usbmon7" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1118.070860][ T31] audit: type=1400 audit(1790837855.742:11589): avc: denied { listen } for pid=17186 comm="syz.1.2646" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1118.414770][T17196] fuse: Unknown parameter 'use00000000000000000000' [ 1119.231310][T17200] v: renamed from dummy0 (while UP) [ 1119.387052][ T31] audit: type=1400 audit(1790837857.062:11590): avc: denied { write } for pid=17205 comm="syz.1.2652" name="kmsg" dev="devtmpfs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 1119.714969][T17216] MPI: mpi too large (32264 bits) [ 1119.782589][T17221] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1120.000301][ T31] audit: type=1400 audit(1790837857.672:11591): avc: denied { write } for pid=17193 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1120.388770][T17234] FAULT_INJECTION: forcing a failure. [ 1120.388770][T17234] name failslab, interval 1, probability 0, space 0, times 0 [ 1120.388793][T17234] CPU: 0 UID: 0 PID: 17234 Comm: syz.3.2660 Not tainted syzkaller #0 PREEMPT(full) [ 1120.388807][T17234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1120.388815][T17234] Call Trace: [ 1120.388820][T17234] [ 1120.388826][T17234] dump_stack_lvl+0x100/0x190 [ 1120.388846][T17234] should_fail_ex.cold+0x5/0xa [ 1120.388862][T17234] should_failslab+0xc2/0x120 [ 1120.388879][T17234] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1120.388894][T17234] ? do_getname+0x35/0x390 [ 1120.388907][T17234] do_getname+0x35/0x390 [ 1120.388918][T17234] do_sys_openat2+0xc7/0x1e0 [ 1120.388935][T17234] ? __pfx_do_sys_openat2+0x10/0x10 [ 1120.388952][T17234] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 1120.388971][T17234] __x64_sys_openat+0x12d/0x210 [ 1120.388988][T17234] ? __pfx___x64_sys_openat+0x10/0x10 [ 1120.389010][T17234] do_syscall_64+0x123/0x790 [ 1120.389022][T17234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1120.389034][T17234] RIP: 0033:0x7ff8a935e98e [ 1120.389044][T17234] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1120.389054][T17234] RSP: 002b:00007ff8aa304b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1120.389066][T17234] RAX: ffffffffffffffda RBX: 00007ff8aa3056c0 RCX: 00007ff8a935e98e [ 1120.389073][T17234] RDX: 0000000000000002 RSI: 00007ff8aa304c00 RDI: ffffffffffffff9c [ 1120.389080][T17234] RBP: 00007ff8aa304c00 R08: 0000000000000000 R09: 0000000000000000 [ 1120.389087][T17234] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1120.389094][T17234] R13: 00007ff8a9626038 R14: 00007ff8a9625fa0 R15: 00007ffe0c0a78c8 [ 1120.389108][T17234] [ 1120.713573][ T31] audit: type=1400 audit(1790837858.382:11592): avc: denied { write } for pid=17239 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1121.079625][T17255] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1121.173452][T17256] bonding: b is being created... [ 1121.557992][T17268] serio: Serial port ptm0 [ 1121.661169][ T31] audit: type=1400 audit(1790837859.332:11593): avc: denied { write } for pid=17250 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1121.717738][T17268] serio: Serial port ptm0 [ 1121.835390][ T31] audit: type=1400 audit(1790837859.512:11594): avc: denied { write } for pid=17282 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1121.877725][T17284] FAULT_INJECTION: forcing a failure. [ 1121.877725][T17284] name failslab, interval 1, probability 0, space 0, times 0 [ 1121.877746][T17284] CPU: 0 UID: 0 PID: 17284 Comm: syz.1.2674 Not tainted syzkaller #0 PREEMPT(full) [ 1121.877760][T17284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1121.877767][T17284] Call Trace: [ 1121.877772][T17284] [ 1121.877777][T17284] dump_stack_lvl+0x100/0x190 [ 1121.877798][T17284] should_fail_ex.cold+0x5/0xa [ 1121.877815][T17284] should_failslab+0xc2/0x120 [ 1121.877831][T17284] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1121.877845][T17284] ? do_getname+0x35/0x390 [ 1121.877859][T17284] do_getname+0x35/0x390 [ 1121.877871][T17284] do_sys_openat2+0xc7/0x1e0 [ 1121.877889][T17284] ? __pfx_do_sys_openat2+0x10/0x10 [ 1121.877905][T17284] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 1121.877924][T17284] __x64_sys_openat+0x12d/0x210 [ 1121.877941][T17284] ? __pfx___x64_sys_openat+0x10/0x10 [ 1121.877962][T17284] do_syscall_64+0x123/0x790 [ 1121.877976][T17284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1121.877987][T17284] RIP: 0033:0x7f07b415e98e [ 1121.877997][T17284] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1121.878007][T17284] RSP: 002b:00007f07b4fafb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1121.878019][T17284] RAX: ffffffffffffffda RBX: 00007f07b4fb06c0 RCX: 00007f07b415e98e [ 1121.878026][T17284] RDX: 0000000000000002 RSI: 00007f07b4fafc00 RDI: ffffffffffffff9c [ 1121.878033][T17284] RBP: 00007f07b4fafc00 R08: 0000000000000000 R09: 0000000000000000 [ 1121.878042][T17284] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1121.878050][T17284] R13: 00007f07b4426038 R14: 00007f07b4425fa0 R15: 00007ffc85988768 [ 1121.878071][T17284] [ 1123.347938][T17302] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2678'. [ 1123.349553][T17302] hsr_slave_0: left promiscuous mode [ 1123.375713][T17302] hsr_slave_1: left promiscuous mode [ 1124.013542][T17328] FAULT_INJECTION: forcing a failure. [ 1124.013542][T17328] name failslab, interval 1, probability 0, space 0, times 0 [ 1124.013565][T17328] CPU: 0 UID: 0 PID: 17328 Comm: syz.1.2687 Not tainted syzkaller #0 PREEMPT(full) [ 1124.013579][T17328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1124.013586][T17328] Call Trace: [ 1124.013590][T17328] [ 1124.013595][T17328] dump_stack_lvl+0x100/0x190 [ 1124.013617][T17328] should_fail_ex.cold+0x5/0xa [ 1124.013633][T17328] should_failslab+0xc2/0x120 [ 1124.013651][T17328] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1124.013665][T17328] ? do_getname+0x35/0x390 [ 1124.013678][T17328] do_getname+0x35/0x390 [ 1124.013690][T17328] do_sys_openat2+0xc7/0x1e0 [ 1124.013709][T17328] ? __pfx_do_sys_openat2+0x10/0x10 [ 1124.013724][T17328] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 1124.013744][T17328] __x64_sys_openat+0x12d/0x210 [ 1124.013763][T17328] ? __pfx___x64_sys_openat+0x10/0x10 [ 1124.013785][T17328] do_syscall_64+0x123/0x790 [ 1124.013798][T17328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1124.013810][T17328] RIP: 0033:0x7f07b415e98e [ 1124.013820][T17328] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1124.013830][T17328] RSP: 002b:00007f07b4fafb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1124.013843][T17328] RAX: ffffffffffffffda RBX: 00007f07b4fb06c0 RCX: 00007f07b415e98e [ 1124.013850][T17328] RDX: 0000000000000002 RSI: 00007f07b4fafc00 RDI: ffffffffffffff9c [ 1124.013857][T17328] RBP: 00007f07b4fafc00 R08: 0000000000000000 R09: 0000000000000000 [ 1124.013864][T17328] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1124.013871][T17328] R13: 00007f07b4426038 R14: 00007f07b4425fa0 R15: 00007ffc85988768 [ 1124.013886][T17328] [ 1124.187082][ T31] audit: type=1400 audit(1790837861.832:11595): avc: denied { write } for pid=17291 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1124.542351][ T31] audit: type=1400 audit(1790837862.212:11596): avc: denied { write } for pid=17337 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1124.848167][ T31] audit: type=1400 audit(1790837862.522:11597): avc: denied { create } for pid=17354 comm="syz.9.2696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1124.874385][ T31] audit: type=1400 audit(1790837862.552:11598): avc: denied { setopt } for pid=17354 comm="syz.9.2696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1124.874690][ T31] audit: type=1400 audit(1790837862.552:11599): avc: denied { getopt } for pid=17354 comm="syz.9.2696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1125.212263][ T31] audit: type=1400 audit(1790837862.882:11600): avc: denied { write } for pid=17348 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1125.419783][T17376] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2702'. [ 1125.421171][ T31] audit: type=1400 audit(1790837863.092:11601): avc: denied { write } for pid=17372 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1125.556559][T17379] vlan2: entered promiscuous mode [ 1125.556574][T17379] hsr0: entered promiscuous mode [ 1125.556755][T17379] vlan2: entered allmulticast mode [ 1125.556764][T17379] hsr0: entered allmulticast mode [ 1125.556771][T17379] hsr_slave_0: entered allmulticast mode [ 1125.556780][T17379] hsr_slave_1: entered allmulticast mode [ 1125.665634][T17379] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2703'. [ 1126.126460][ T31] audit: type=1400 audit(1790837863.802:11602): avc: denied { ioctl } for pid=17411 comm="syz.8.2713" path="/dev/ptyr5" dev="devtmpfs" ino=140 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1126.199200][T17412] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2713'. [ 1126.379920][T17419] syzkaller0: entered promiscuous mode [ 1126.379933][T17419] syzkaller0: entered allmulticast mode [ 1126.416710][ T31] audit: type=1400 audit(1790837864.092:11603): avc: denied { write } for pid=17388 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1126.603044][ T31] audit: type=1400 audit(1790837864.272:11604): avc: denied { write } for pid=17424 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1126.940730][ T5264] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1127.919460][T17480] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2729'. [ 1128.600856][ C0] Unknown status report in ack skb [ 1129.052240][T17524] FAULT_INJECTION: forcing a failure. [ 1129.052240][T17524] name failslab, interval 1, probability 0, space 0, times 0 [ 1129.052262][T17524] CPU: 0 UID: 0 PID: 17524 Comm: syz.3.2743 Not tainted syzkaller #0 PREEMPT(full) [ 1129.052277][T17524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1129.052284][T17524] Call Trace: [ 1129.052289][T17524] [ 1129.052294][T17524] dump_stack_lvl+0x100/0x190 [ 1129.052316][T17524] should_fail_ex.cold+0x5/0xa [ 1129.052332][T17524] should_failslab+0xc2/0x120 [ 1129.052349][T17524] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1129.052362][T17524] ? __asan_memcpy+0x3c/0x60 [ 1129.052374][T17524] ? __kernfs_new_node+0xd2/0xa10 [ 1129.052388][T17524] __kernfs_new_node+0xd2/0xa10 [ 1129.052399][T17524] ? lock_acquire+0x1d1/0x380 [ 1129.052412][T17524] ? kernfs_add_one+0x4cb/0xaa0 [ 1129.052424][T17524] ? __pfx___kernfs_new_node+0x10/0x10 [ 1129.052436][T17524] ? lock_acquire+0x1d1/0x380 [ 1129.052449][T17524] ? kernfs_root+0x23/0x2a0 [ 1129.052465][T17524] ? find_held_lock+0x2b/0x80 [ 1129.052481][T17524] ? kernfs_root+0xee/0x2a0 [ 1129.052497][T17524] ? kernfs_root+0xee/0x2a0 [ 1129.052518][T17524] kernfs_new_node+0x117/0x150 [ 1129.052533][T17524] __kernfs_create_file+0x53/0x350 [ 1129.052548][T17524] cgroup_addrm_files+0x4ef/0xdb0 [ 1129.052571][T17524] ? __pfx_cgroup_addrm_files+0x10/0x10 [ 1129.052591][T17524] ? css_next_child+0xcf/0x2e0 [ 1129.052602][T17524] ? css_next_descendant_pre+0x58/0x1a0 [ 1129.052615][T17524] css_populate_dir+0x3c4/0x590 [ 1129.052632][T17524] cgroup_mkdir+0x563/0x1330 [ 1129.052648][T17524] ? __pfx_cgroup_mkdir+0x10/0x10 [ 1129.052661][T17524] kernfs_iop_mkdir+0x111/0x190 [ 1129.052672][T17524] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 1129.052687][T17524] vfs_mkdir+0x364/0x850 [ 1129.052702][T17524] filename_mkdirat+0x48b/0x5e0 [ 1129.052720][T17524] ? __pfx_filename_mkdirat+0x10/0x10 [ 1129.052736][T17524] ? strncpy_from_user+0x19d/0x2d0 [ 1129.052752][T17524] ? do_getname+0x191/0x390 [ 1129.052764][T17524] __x64_sys_mkdirat+0x89/0xc0 [ 1129.052780][T17524] do_syscall_64+0x123/0x790 [ 1129.052794][T17524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1129.052806][T17524] RIP: 0033:0x7ff8a939e159 [ 1129.052816][T17524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1129.052827][T17524] RSP: 002b:00007ff8aa305028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1129.052839][T17524] RAX: ffffffffffffffda RBX: 00007ff8a9625fa0 RCX: 00007ff8a939e159 [ 1129.052846][T17524] RDX: 00000000000001ff RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1129.052853][T17524] RBP: 00007ff8a943506b R08: 0000000000000000 R09: 0000000000000000 [ 1129.052860][T17524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1129.052866][T17524] R13: 00007ff8a9626038 R14: 00007ff8a9625fa0 R15: 00007ffe0c0a78c8 [ 1129.052882][T17524] [ 1129.052896][T17524] cgroup: cgroup_addrm_files: failed to add cgroup.procs, err=-12 [ 1130.037026][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 1130.037038][ T31] audit: type=1400 audit(1790837867.712:11608): avc: denied { write } for pid=17521 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1130.038079][T17566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2757'. [ 1130.290360][ T31] audit: type=1400 audit(1790837867.962:11609): avc: denied { write } for pid=17574 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1130.961644][ T306] IPVS: starting estimator thread 0... [ 1131.044028][T17594] IPVS: using max 77 ests per chain, 184800 per kthread [ 1131.181230][ T31] audit: type=1400 audit(1790837868.852:11610): avc: denied { checkpoint_restore } for pid=17601 comm="syz.3.2770" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1131.758675][ C0] wlan1: beacon TX faster than countdown (channel/color switch) completion [ 1132.359048][T17615] Cannot find del_set index 0 as target [ 1132.998031][ T31] audit: type=1400 audit(1790837870.672:11611): avc: denied { write } for pid=17600 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1133.078565][ T31] audit: type=1400 audit(1790837870.752:11612): avc: denied { read write } for pid=17640 comm="syz.9.2781" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1133.078763][ T31] audit: type=1400 audit(1790837870.752:11613): avc: denied { ioctl open } for pid=17640 comm="syz.9.2781" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1133.086234][T17641] random: crng reseeded on system resumption [ 1133.279177][ T31] audit: type=1400 audit(1790837870.952:11614): avc: denied { bind } for pid=17646 comm="syz.1.2782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1133.327058][ T31] audit: type=1400 audit(1790837871.002:11615): avc: denied { write } for pid=17645 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1133.590849][ T5264] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1135.123702][ T31] audit: type=1400 audit(1790837872.792:11616): avc: denied { create } for pid=17688 comm="syz.1.2793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1135.219482][ T31] audit: type=1400 audit(1790837872.892:11617): avc: denied { write } for pid=17688 comm="syz.1.2793" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1135.219513][ T31] audit: type=1400 audit(1790837872.892:11618): avc: denied { open } for pid=17688 comm="syz.1.2793" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1135.892370][ T31] audit: type=1400 audit(1790837873.562:11619): avc: denied { write } for pid=17679 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1136.158889][ T31] audit: type=1400 audit(1790837873.822:11620): avc: denied { write } for pid=17722 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1136.433276][ T5264] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1138.389092][ T31] audit: type=1400 audit(1790837876.062:11621): avc: denied { read } for pid=17753 comm="syz.7.2810" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1139.448654][ T31] audit: type=1400 audit(1790837877.122:11622): avc: denied { write } for pid=17737 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1139.944014][ T31] audit: type=1400 audit(1790837877.622:11623): avc: denied { write } for pid=17790 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1140.183402][ T5264] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1140.582658][ T5604] Bluetooth: hci1: link tx timeout [ 1140.582775][ T5604] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 1140.869256][T17822] netlink: 1752 bytes leftover after parsing attributes in process `syz.7.2825'. [ 1141.561821][T17856] syzkaller0: entered promiscuous mode [ 1141.561836][T17856] syzkaller0: entered allmulticast mode [ 1141.577538][ T31] audit: type=1400 audit(1790837879.252:11624): avc: denied { ioctl } for pid=17857 comm="syz.8.2836" path="/dev/usbmon0" dev="devtmpfs" ino=715 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1141.639683][ T31] audit: type=1400 audit(1790837879.312:11625): avc: denied { write } for pid=17820 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1141.928762][T17871] netlink: 6024 bytes leftover after parsing attributes in process `syz.1.2840'. [ 1141.946141][ T31] audit: type=1400 audit(1790837879.622:11626): avc: denied { write } for pid=17866 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1142.625905][ T5611] Bluetooth: hci1: command 0x0406 tx timeout [ 1143.328615][ T31] audit: type=1400 audit(1790837881.002:11627): avc: denied { lock } for pid=17908 comm="syz.9.2849" path="socket:[56321]" dev="sockfs" ino=56321 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 1143.542748][ T31] audit: type=1400 audit(1790837881.212:11628): avc: denied { write } for pid=17885 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1143.771884][ T31] audit: type=1400 audit(1790837881.442:11629): avc: denied { write } for pid=17917 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1146.010294][T17956] FAULT_INJECTION: forcing a failure. [ 1146.010294][T17956] name failslab, interval 1, probability 0, space 0, times 0 [ 1146.010317][T17956] CPU: 0 UID: 0 PID: 17956 Comm: syz.9.2862 Not tainted syzkaller #0 PREEMPT(full) [ 1146.010332][T17956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1146.010339][T17956] Call Trace: [ 1146.010344][T17956] [ 1146.010349][T17956] dump_stack_lvl+0x100/0x190 [ 1146.010370][T17956] should_fail_ex.cold+0x5/0xa [ 1146.010387][T17956] should_failslab+0xc2/0x120 [ 1146.010404][T17956] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1146.010419][T17956] ? sk_prot_alloc+0x60/0x2a0 [ 1146.010433][T17956] sk_prot_alloc+0x60/0x2a0 [ 1146.010444][T17956] sk_alloc+0x36/0xe80 [ 1146.010460][T17956] inet_create+0x3a0/0x1060 [ 1146.010473][T17956] ? inet_create+0x94/0x1060 [ 1146.010486][T17956] __sock_create+0x339/0x860 [ 1146.010500][T17956] smc_create+0x163/0x290 [ 1146.010520][T17956] __sock_create+0x339/0x860 [ 1146.010535][T17956] __sys_socket+0x14d/0x260 [ 1146.010548][T17956] ? __pfx___sys_socket+0x10/0x10 [ 1146.010564][T17956] __x64_sys_socket+0x72/0xb0 [ 1146.010576][T17956] ? lockdep_hardirqs_on+0x7d/0x110 [ 1146.010587][T17956] do_syscall_64+0x123/0x790 [ 1146.010600][T17956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1146.010612][T17956] RIP: 0033:0x7fdaf419e159 [ 1146.010622][T17956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1146.010633][T17956] RSP: 002b:00007fdaf5020028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1146.010644][T17956] RAX: ffffffffffffffda RBX: 00007fdaf4425fa0 RCX: 00007fdaf419e159 [ 1146.010651][T17956] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000002b [ 1146.010658][T17956] RBP: 00007fdaf423506b R08: 0000000000000000 R09: 0000000000000000 [ 1146.010665][T17956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1146.010672][T17956] R13: 00007fdaf4426038 R14: 00007fdaf4425fa0 R15: 00007ffe5fa03ef8 [ 1146.010685][T17956] [ 1146.549762][T17971] netlink: 6024 bytes leftover after parsing attributes in process `syz.9.2865'. [ 1146.709195][ T31] audit: type=1400 audit(1790837884.383:11630): avc: denied { write } for pid=17926 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1146.961947][ T31] audit: type=1400 audit(1790837884.633:11631): avc: denied { write } for pid=17984 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1147.832181][T18011] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1148.406829][T18018] FAULT_INJECTION: forcing a failure. [ 1148.406829][T18018] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1148.406852][T18018] CPU: 0 UID: 0 PID: 18018 Comm: syz.7.2876 Not tainted syzkaller #0 PREEMPT(full) [ 1148.406866][T18018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1148.406874][T18018] Call Trace: [ 1148.406878][T18018] [ 1148.406884][T18018] dump_stack_lvl+0x100/0x190 [ 1148.406904][T18018] should_fail_ex.cold+0x5/0xa [ 1148.406921][T18018] _copy_from_user+0x2e/0xd0 [ 1148.406938][T18018] keyctl_pkey_params_get_2+0x105/0x3f0 [ 1148.406955][T18018] ? __pfx_keyctl_pkey_params_get_2+0x10/0x10 [ 1148.406971][T18018] ? find_held_lock+0x2b/0x80 [ 1148.406989][T18018] ? ksys_write+0x190/0x250 [ 1148.407005][T18018] ? do_futex+0x190/0x440 [ 1148.407022][T18018] ? __pfx_do_futex+0x10/0x10 [ 1148.407039][T18018] keyctl_pkey_e_d_s+0xac/0x360 [ 1148.407056][T18018] ? __pfx_keyctl_pkey_e_d_s+0x10/0x10 [ 1148.407072][T18018] ? __x64_sys_futex+0x34f/0x4d0 [ 1148.407087][T18018] ? __x64_sys_futex+0x358/0x4d0 [ 1148.407105][T18018] ? xfd_validate_state+0x129/0x190 [ 1148.407120][T18018] __do_sys_keyctl+0x336/0x5a0 [ 1148.407133][T18018] do_syscall_64+0x123/0x790 [ 1148.407146][T18018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1148.407163][T18018] RIP: 0033:0x7fafe359e159 [ 1148.407173][T18018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1148.407185][T18018] RSP: 002b:00007fafe449d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1148.407197][T18018] RAX: ffffffffffffffda RBX: 00007fafe3825fa0 RCX: 00007fafe359e159 [ 1148.407204][T18018] RDX: 0000000000000000 RSI: 9999999999999999 RDI: 000000000000001a [ 1148.407211][T18018] RBP: 00007fafe363506b R08: 0000000000000000 R09: 0000000000000000 [ 1148.407217][T18018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1148.407224][T18018] R13: 00007fafe3826038 R14: 00007fafe3825fa0 R15: 00007fffc48e8578 [ 1148.407240][T18018] [ 1148.696917][ T31] audit: type=1400 audit(1790837886.373:11632): avc: denied { write } for pid=17998 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1149.017462][ T31] audit: type=1400 audit(1790837886.693:11633): avc: denied { write } for pid=18025 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1149.201989][T18030] Device name cannot be null; rc = [-22] [ 1149.290572][ T31] audit: type=1400 audit(1790837886.963:11634): avc: denied { read } for pid=18031 comm="syz.9.2881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1149.441632][ T31] audit: type=1400 audit(1790837887.113:11635): avc: denied { write } for pid=18031 comm="syz.9.2881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1150.345498][T18065] netlink: 'syz.8.2891': attribute type 63 has an invalid length. [ 1150.515184][ T31] audit: type=1400 audit(1790837888.193:11636): avc: denied { write } for pid=18040 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1150.777082][ T31] audit: type=1400 audit(1790837888.453:11637): avc: denied { write } for pid=18086 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1150.821940][T18091] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2898'. [ 1150.839673][ T31] audit: type=1800 audit(1790837888.513:11638): pid=18051 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t op=collect_data cause=failed comm="syz.3.2886" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 1150.886361][ T31] audit: type=1400 audit(1790837888.563:11639): avc: denied { firmware_load } for pid=18048 comm="syz.3.2886" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 1150.920287][T18051] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1150.920309][T18051] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1150.949047][T18051] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1151.440095][T18051] syz.3.2886 (18051) used greatest stack depth: 19912 bytes left [ 1151.495045][T18100] netdevsim netdevsim7 netdevsim0: IPsec offload requires 128 bit authentication [ 1151.550078][T18113] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1152.060059][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 1152.060072][ T31] audit: type=1400 audit(1700000001.460:11641): avc: denied { write } for pid=18101 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1152.178701][T18143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2912'. [ 1152.293138][ T31] audit: type=1400 audit(1700000001.700:11642): avc: denied { write } for pid=18144 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1152.639443][ T31] audit: type=1400 audit(1700000002.040:11643): avc: denied { setopt } for pid=18159 comm="syz.3.2918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1152.719328][T18167] nbd: must specify at least one socket [ 1152.810920][T18163] syzkaller0: entered promiscuous mode [ 1152.810936][T18163] syzkaller0: entered allmulticast mode [ 1152.834628][T18168] tipc: Started in network mode [ 1152.834643][T18168] tipc: Node identity ffff1083, cluster identity 4711 [ 1152.834651][T18168] tipc: Node number set to 4294905987 [ 1152.870154][T18168] tipc: Cannot configure node identity twice [ 1153.097413][T18184] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2925'. [ 1153.097431][T18184] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2925'. [ 1153.123936][T18185] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2924'. [ 1153.526350][ T31] audit: type=1400 audit(1700000002.930:11644): avc: denied { write } for pid=18155 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1153.807833][ T31] audit: type=1400 audit(1700000003.210:11645): avc: denied { write } for pid=18202 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1155.062979][ T31] audit: type=1400 audit(1700000004.460:11646): avc: denied { write } for pid=18213 comm="syz.1.2931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1155.118753][T18215] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 1155.118771][T18215] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1155.176167][ T31] audit: type=1400 audit(1700000004.580:11647): avc: denied { ioctl } for pid=18213 comm="syz.1.2931" path="socket:[57113]" dev="sockfs" ino=57113 ioctlcmd=0x586a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1156.800537][T18227] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2934'. [ 1156.800558][T18227] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2934'. [ 1156.800570][T18227] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2934'. [ 1156.830828][T18227] netlink: 14 bytes leftover after parsing attributes in process `syz.8.2934'. [ 1157.279961][T18243] FAULT_INJECTION: forcing a failure. [ 1157.279961][T18243] name failslab, interval 1, probability 0, space 0, times 0 [ 1157.279982][T18243] CPU: 0 UID: 0 PID: 18243 Comm: syz.8.2941 Not tainted syzkaller #0 PREEMPT(full) [ 1157.279997][T18243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1157.280005][T18243] Call Trace: [ 1157.280010][T18243] [ 1157.280015][T18243] dump_stack_lvl+0x100/0x190 [ 1157.280037][T18243] should_fail_ex.cold+0x5/0xa [ 1157.280054][T18243] should_failslab+0xc2/0x120 [ 1157.280073][T18243] __kmalloc_cache_noprof+0x91/0x6d0 [ 1157.280085][T18243] ? psi_cgroup_alloc+0x52/0x2d0 [ 1157.280099][T18243] psi_cgroup_alloc+0x52/0x2d0 [ 1157.280111][T18243] cgroup_mkdir+0x620/0x1330 [ 1157.280128][T18243] ? __pfx_cgroup_mkdir+0x10/0x10 [ 1157.280142][T18243] kernfs_iop_mkdir+0x111/0x190 [ 1157.280154][T18243] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 1157.280169][T18243] vfs_mkdir+0x364/0x850 [ 1157.280183][T18243] filename_mkdirat+0x48b/0x5e0 [ 1157.280201][T18243] ? __pfx_filename_mkdirat+0x10/0x10 [ 1157.280217][T18243] ? strncpy_from_user+0x19d/0x2d0 [ 1157.280235][T18243] ? do_getname+0x191/0x390 [ 1157.280248][T18243] __x64_sys_mkdirat+0x89/0xc0 [ 1157.280264][T18243] do_syscall_64+0x123/0x790 [ 1157.280278][T18243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1157.280290][T18243] RIP: 0033:0x7fe53b39e159 [ 1157.280300][T18243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1157.280311][T18243] RSP: 002b:00007fe53c275028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1157.280323][T18243] RAX: ffffffffffffffda RBX: 00007fe53b625fa0 RCX: 00007fe53b39e159 [ 1157.280331][T18243] RDX: 00000000000001ff RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1157.280339][T18243] RBP: 00007fe53b43506b R08: 0000000000000000 R09: 0000000000000000 [ 1157.280345][T18243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1157.280352][T18243] R13: 00007fe53b626038 R14: 00007fe53b625fa0 R15: 00007ffdd4a47a28 [ 1157.280367][T18243] [ 1158.417200][T18253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2943'. [ 1158.913595][ T31] audit: type=1400 audit(1700000008.310:11648): avc: denied { write } for pid=18222 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1159.007194][T18269] FAULT_INJECTION: forcing a failure. [ 1159.007194][T18269] name failslab, interval 1, probability 0, space 0, times 0 [ 1159.007217][T18269] CPU: 0 UID: 0 PID: 18269 Comm: syz.7.2947 Not tainted syzkaller #0 PREEMPT(full) [ 1159.007231][T18269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1159.007238][T18269] Call Trace: [ 1159.007242][T18269] [ 1159.007247][T18269] dump_stack_lvl+0x100/0x190 [ 1159.007267][T18269] should_fail_ex.cold+0x5/0xa [ 1159.007284][T18269] should_failslab+0xc2/0x120 [ 1159.007300][T18269] __kmalloc_noprof+0xfc/0x840 [ 1159.007313][T18269] ? net_generic+0xea/0x2a0 [ 1159.007330][T18269] ? do_replace_table+0x4b8/0x760 [ 1159.007345][T18269] do_replace_table+0x4b8/0x760 [ 1159.007357][T18269] ? xt_find_table_lock+0x137/0x520 [ 1159.007379][T18269] xt_replace_table+0x2e/0x130 [ 1159.007391][T18269] ? xt_request_find_table_lock+0x48/0xf0 [ 1159.007410][T18269] __do_replace+0x1cf/0x980 [ 1159.007426][T18269] ? __pfx___do_replace+0x10/0x10 [ 1159.007442][T18269] do_ipt_set_ctl+0xa53/0xcf0 [ 1159.007454][T18269] ? nf_sockopt_find.isra.0+0x222/0x290 [ 1159.007471][T18269] ? nf_sockopt_find.isra.0+0x222/0x290 [ 1159.007490][T18269] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 1159.007502][T18269] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1159.007516][T18269] ? sockopt_release_sock+0x5c/0x70 [ 1159.007533][T18269] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1159.007551][T18269] ? nf_sockopt_find.isra.0+0x222/0x290 [ 1159.007570][T18269] nf_setsockopt+0x8d/0xf0 [ 1159.007588][T18269] ip_setsockopt+0xcb/0xf0 [ 1159.007602][T18269] udp_setsockopt+0x64/0xb0 [ 1159.007620][T18269] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1159.007633][T18269] do_sock_setsockopt+0xf3/0x1d0 [ 1159.007653][T18269] __sys_setsockopt+0x195/0x220 [ 1159.007671][T18269] __x64_sys_setsockopt+0xbd/0x160 [ 1159.007690][T18269] ? do_syscall_64+0xae/0x790 [ 1159.007701][T18269] ? lockdep_hardirqs_on+0x7d/0x110 [ 1159.007713][T18269] do_syscall_64+0x123/0x790 [ 1159.007726][T18269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1159.007738][T18269] RIP: 0033:0x7fafe359e159 [ 1159.007748][T18269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1159.007759][T18269] RSP: 002b:00007fafe449d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1159.007771][T18269] RAX: ffffffffffffffda RBX: 00007fafe3825fa0 RCX: 00007fafe359e159 [ 1159.007778][T18269] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004 [ 1159.007785][T18269] RBP: 00007fafe363506b R08: 0000000000000230 R09: 0000000000000000 [ 1159.007792][T18269] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1159.007799][T18269] R13: 00007fafe3826038 R14: 00007fafe3825fa0 R15: 00007fffc48e8578 [ 1159.007814][T18269] [ 1159.716505][ T31] audit: type=1400 audit(1700000009.110:11649): avc: denied { write } for pid=18271 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1159.957325][T18284] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2951'. [ 1160.157668][T18290] Illegal XDP return value 4294967274 on prog (id 57) dev syz_tun, expect packet loss! [ 1160.684893][T18311] FAULT_INJECTION: forcing a failure. [ 1160.684893][T18311] name failslab, interval 1, probability 0, space 0, times 0 [ 1160.685790][T18311] CPU: 0 UID: 0 PID: 18311 Comm: syz.8.2961 Not tainted syzkaller #0 PREEMPT(full) [ 1160.685806][T18311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1160.685814][T18311] Call Trace: [ 1160.685819][T18311] [ 1160.685823][T18311] dump_stack_lvl+0x100/0x190 [ 1160.685846][T18311] should_fail_ex.cold+0x5/0xa [ 1160.685863][T18311] should_failslab+0xc2/0x120 [ 1160.685881][T18311] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 1160.685895][T18311] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1160.685909][T18311] ? kstrdup_const+0x63/0x80 [ 1160.685923][T18311] kstrdup+0x51/0xe0 [ 1160.685934][T18311] kstrdup_const+0x63/0x80 [ 1160.685946][T18311] __kernfs_new_node+0x9b/0xa10 [ 1160.685958][T18311] ? __lock_acquire+0x5c0/0x1f40 [ 1160.685973][T18311] ? __pfx___kernfs_new_node+0x10/0x10 [ 1160.685989][T18311] ? lock_acquire+0x1d1/0x380 [ 1160.686001][T18311] ? kernfs_root+0x23/0x2a0 [ 1160.686017][T18311] ? find_held_lock+0x2b/0x80 [ 1160.686034][T18311] ? kernfs_root+0xee/0x2a0 [ 1160.686050][T18311] ? kernfs_root+0xee/0x2a0 [ 1160.686070][T18311] kernfs_new_node+0x117/0x150 [ 1160.686085][T18311] __kernfs_create_file+0x53/0x350 [ 1160.686103][T18311] cgroup_addrm_files+0x4ef/0xdb0 [ 1160.686125][T18311] ? __pfx_cgroup_addrm_files+0x10/0x10 [ 1160.686145][T18311] ? css_next_child+0xcf/0x2e0 [ 1160.686157][T18311] ? css_next_descendant_pre+0x58/0x1a0 [ 1160.686170][T18311] css_populate_dir+0x3c4/0x590 [ 1160.686187][T18311] cgroup_mkdir+0x563/0x1330 [ 1160.686202][T18311] ? __pfx_cgroup_mkdir+0x10/0x10 [ 1160.686217][T18311] kernfs_iop_mkdir+0x111/0x190 [ 1160.686227][T18311] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 1160.686244][T18311] vfs_mkdir+0x364/0x850 [ 1160.686259][T18311] filename_mkdirat+0x48b/0x5e0 [ 1160.686277][T18311] ? __pfx_filename_mkdirat+0x10/0x10 [ 1160.686293][T18311] ? strncpy_from_user+0x19d/0x2d0 [ 1160.686310][T18311] ? do_getname+0x191/0x390 [ 1160.686323][T18311] __x64_sys_mkdirat+0x89/0xc0 [ 1160.686339][T18311] do_syscall_64+0x123/0x790 [ 1160.686353][T18311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1160.686365][T18311] RIP: 0033:0x7fe53b39e159 [ 1160.686375][T18311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1160.686385][T18311] RSP: 002b:00007fe53c275028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1160.686397][T18311] RAX: ffffffffffffffda RBX: 00007fe53b625fa0 RCX: 00007fe53b39e159 [ 1160.686405][T18311] RDX: 00000000000001ff RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1160.686412][T18311] RBP: 00007fe53b43506b R08: 0000000000000000 R09: 0000000000000000 [ 1160.686418][T18311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1160.686425][T18311] R13: 00007fe53b626038 R14: 00007fe53b625fa0 R15: 00007ffdd4a47a28 [ 1160.686442][T18311] [ 1160.689737][T18311] cgroup: cgroup_addrm_files: failed to add cgroup.type, err=-12 [ 1161.308300][ T31] audit: type=1400 audit(1700000010.710:11650): avc: denied { write } for pid=18288 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1161.684916][ T31] audit: type=1400 audit(1700000011.090:11651): avc: denied { write } for pid=18349 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1161.926520][ T31] audit: type=1400 audit(1700000011.330:11652): avc: denied { map } for pid=18362 comm="syz.8.2978" path="socket:[57535]" dev="sockfs" ino=57535 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1161.929348][ T31] audit: type=1400 audit(1700000011.330:11653): avc: denied { setopt } for pid=18363 comm="syz.9.2979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1162.119706][T18364] netlink: 'syz.8.2978': attribute type 1 has an invalid length. [ 1162.119733][T18364] netlink: 244 bytes leftover after parsing attributes in process `syz.8.2978'. [ 1162.404172][ T31] audit: type=1400 audit(1700000011.810:11654): avc: denied { ioctl } for pid=18391 comm="syz.9.2986" path="socket:[57614]" dev="sockfs" ino=57614 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1162.411679][ T31] audit: type=1400 audit(1700000011.810:11655): avc: denied { create } for pid=18390 comm="syz.7.2987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1162.835762][ T31] audit: type=1400 audit(1700000012.240:11656): avc: denied { setopt } for pid=18412 comm="syz.1.2992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1162.981192][T18423] netlink: 208 bytes leftover after parsing attributes in process `syz.8.2994'. [ 1162.981343][T18423] unsupported nlmsg_type 40 [ 1163.238975][ T31] audit: type=1400 audit(1700000012.640:11657): avc: denied { write } for pid=18378 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1164.275046][T18475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3011'. [ 1164.388029][T18480] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3013'. [ 1164.507401][T18480] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3013'. [ 1164.507418][T18480] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3013'. [ 1164.600758][T18480] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3013'. [ 1164.657323][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 1164.657336][ T31] audit: type=1400 audit(1700000014.060:11660): avc: denied { bind } for pid=18476 comm="syz.9.3012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1164.834275][T18501] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3019'. [ 1164.864557][T18503] ip_tables: iptables: counters copy to user failed while replacing table [ 1165.167434][ T31] audit: type=1400 audit(1700000014.570:11661): avc: denied { write } for pid=18471 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1165.208386][T18522] netlink: 6024 bytes leftover after parsing attributes in process `syz.3.3027'. [ 1165.623211][T18534] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3031'. [ 1165.671405][ T31] audit: type=1400 audit(1700000015.070:11662): avc: denied { write } for pid=18532 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1165.957321][ T31] audit: type=1400 audit(1700000015.360:11663): avc: denied { name_connect } for pid=18545 comm="syz.7.3036" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 1166.178877][T18554] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 1166.248637][T18559] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1166.479571][T18565] xt_MASQUERADE: bad MAP_IPS. [ 1166.524477][T18565] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=18565 comm=syz.9.3041 [ 1166.881682][ T43] IPVS: starting estimator thread 0... [ 1166.920299][T18578] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3044'. [ 1166.973070][T18576] IPVS: using max 77 ests per chain, 184800 per kthread [ 1167.038069][ T31] audit: type=1400 audit(1700000016.440:11664): avc: denied { write } for pid=18549 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1167.309468][ T31] audit: type=1400 audit(1700000016.711:11665): avc: denied { write } for pid=18585 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1167.394105][T18594] netlink: 1624 bytes leftover after parsing attributes in process `syz.7.3049'. [ 1167.738000][ T31] audit: type=1400 audit(1700000017.141:11666): avc: denied { ioctl } for pid=18602 comm="syz.9.3053" path="socket:[58309]" dev="sockfs" ino=58309 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1169.333387][T18653] __nla_validate_parse: 3 callbacks suppressed [ 1169.333400][T18653] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3069'. [ 1169.631769][ T31] audit: type=1400 audit(1700000019.031:11667): avc: denied { shutdown } for pid=18668 comm="syz.9.3076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1169.633757][T18670] netlink: 60 bytes leftover after parsing attributes in process `syz.9.3076'. [ 1169.759264][T18674] netlink: 'syz.8.3079': attribute type 39 has an invalid length. [ 1169.829218][T18676] tipc: Enabling of bearer rejected, failed to enable media [ 1169.829914][ T31] audit: type=1400 audit(1700000019.231:11668): avc: denied { setopt } for pid=18673 comm="syz.8.3079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1170.577062][T18706] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3092'. [ 1170.677004][T18713] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 1170.681444][T18712] tipc: Enabling of bearer rejected, failed to enable media [ 1170.900459][T18722] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3099'. [ 1170.900475][T18722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3099'. [ 1171.441090][T18740] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3105'. [ 1171.745153][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1171.745183][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1171.841255][T18752] ip_tables: iptables: counters copy to user failed while replacing table [ 1171.898212][ T31] audit: type=1400 audit(1700000021.291:11669): avc: denied { create } for pid=18749 comm="syz.3.3110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1171.899598][ T31] audit: type=1400 audit(1700000021.291:11670): avc: denied { getopt } for pid=18749 comm="syz.3.3110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1171.899790][T18752] sctp: [Deprecated]: syz.3.3110 (pid 18752) Use of int in max_burst socket option deprecated. [ 1171.899790][T18752] Use struct sctp_assoc_value instead [ 1172.020528][T18752] xt_hashlimit: size too large, truncated to 1048576 [ 1172.083512][T18758] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3113'. [ 1172.407461][T18770] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 1172.463891][T18773] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1172.763375][ T31] audit: type=1400 audit(1700000022.161:11671): avc: denied { create } for pid=18780 comm="syz.1.3124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1172.770463][ T31] audit: type=1400 audit(1700000022.161:11672): avc: denied { write } for pid=18780 comm="syz.1.3124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1173.397027][T18806] syz_tun: entered allmulticast mode [ 1173.399873][T18806] syz_tun: left allmulticast mode [ 1173.439951][ T31] audit: type=1400 audit(1700000022.831:11673): avc: denied { accept } for pid=18807 comm="syz.8.3134" lport=55316 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1173.440236][ T31] audit: type=1400 audit(1700000022.831:11674): avc: denied { write } for pid=18807 comm="syz.8.3134" path="socket:[59054]" dev="sockfs" ino=59054 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1173.440458][ T31] audit: type=1400 audit(1700000022.831:11675): avc: denied { setopt } for pid=18807 comm="syz.8.3134" lport=55316 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1173.655013][T18815] netlink: 260 bytes leftover after parsing attributes in process `syz.9.3137'. [ 1173.730548][ T31] audit: type=1400 audit(1700000023.121:11676): avc: denied { unlink } for pid=18818 comm="syz.9.3139" name="#c4" dev="tmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1173.758868][ T31] audit: type=1400 audit(1700000023.161:11677): avc: denied { mount } for pid=18818 comm="syz.9.3139" name="/" dev="overlay" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1173.886374][T18823] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3141'. [ 1174.616351][T18852] random: crng reseeded on system resumption [ 1175.172629][T18878] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3162'. [ 1175.173493][T18878] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3162'. [ 1175.486803][T18890] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 1175.957641][T18909] Bluetooth: hci0: unsupported parameter 5134 [ 1175.957657][T18909] Bluetooth: hci0: unsupported parameter 8192 [ 1175.957664][T18909] Bluetooth: hci0: unsupported parameter 5134 [ 1175.957672][T18909] Bluetooth: hci0: unsupported parameter 8192 [ 1176.237641][T18921] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3175'. [ 1177.397318][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 1177.397332][ T31] audit: type=1400 audit(1700000026.791:11684): avc: denied { bind } for pid=18963 comm="syz.1.3190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1177.432898][T18966] netlink: 'syz.8.3189': attribute type 63 has an invalid length. [ 1177.452147][ T31] audit: type=1400 audit(1700000026.851:11685): avc: denied { setopt } for pid=18963 comm="syz.1.3190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1178.255963][T18996] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3196'. [ 1179.066618][T19034] ip_tables: iptables: counters copy to user failed while replacing table [ 1179.214951][ T31] audit: type=1400 audit(1700000028.611:11686): avc: denied { write } for pid=18985 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1179.479132][ T31] audit: type=1400 audit(1700000028.871:11687): avc: denied { write } for pid=19044 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1180.174679][T19063] random: crng reseeded on system resumption [ 1180.477776][ T31] audit: type=1400 audit(1700000029.871:11688): avc: denied { write } for pid=19056 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1180.615911][T19077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3218'. [ 1180.783830][ T31] audit: type=1400 audit(1700000030.181:11689): avc: denied { write } for pid=19078 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1180.865946][T19086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3222'. [ 1180.979178][T19095] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3226'. [ 1181.232395][T19109] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3231'. [ 1181.315879][T19113] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3232'. [ 1181.587248][T19133] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3236'. [ 1181.668194][T19131] tipc: Started in network mode [ 1181.668211][T19131] tipc: Node identity 0268eb093d4a, cluster identity 4711 [ 1181.668341][T19131] tipc: Enabled bearer , priority 0 [ 1181.694544][T19131] syzkaller0: MTU too low for tipc bearer [ 1181.694558][T19131] tipc: Disabling bearer [ 1182.000634][ T31] audit: type=1400 audit(1700000031.391:11690): avc: denied { setopt } for pid=19150 comm="syz.3.3244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1182.025289][T19152] ip_tables: iptables: counters copy to user failed while replacing table [ 1182.069305][ T31] audit: type=1400 audit(1700000031.461:11691): avc: denied { write } for pid=19101 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1182.144710][T19155] block nbd0: reconnected socket [ 1182.144726][T19155] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3245'. [ 1182.147286][ T5604] block nbd0: Receive control failed (result -32) [ 1182.255973][T19152] sctp: [Deprecated]: syz.7.3243 (pid 19152) Use of int in max_burst socket option deprecated. [ 1182.255973][T19152] Use struct sctp_assoc_value instead [ 1182.709757][ T31] audit: type=1400 audit(1700000032.101:11692): avc: denied { write } for pid=19166 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1183.670525][T19198] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1183.934175][ T31] audit: type=1400 audit(1700000033.332:11693): avc: denied { write } for pid=19176 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1184.177444][ T31] audit: type=1400 audit(1700000033.572:11694): avc: denied { write } for pid=19206 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1184.864045][T19254] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3270'. [ 1185.169145][T19262] netlink: 'syz.8.3275': attribute type 1 has an invalid length. [ 1185.209281][T19262] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3275'. [ 1185.245004][T19262] [ 1185.247343][T19262] ====================================================== [ 1185.254332][T19262] WARNING: possible circular locking dependency detected [ 1185.261317][T19262] syzkaller #0 Not tainted [ 1185.265704][T19262] ------------------------------------------------------ [ 1185.272688][T19262] syz.8.3275/19262 is trying to acquire lock: [ 1185.278725][T19262] ffff88801d2c7180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x51/0x120 [ 1185.288962][T19262] [ 1185.288962][T19262] but task is already holding lock: [ 1185.296322][T19262] ffff88801d2c72a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x49/0x120 [ 1185.307187][T19262] [ 1185.307187][T19262] which lock already depends on the new lock. [ 1185.307187][T19262] [ 1185.317578][T19262] [ 1185.317578][T19262] the existing dependency chain (in reverse order) is: [ 1185.326569][T19262] [ 1185.326569][T19262] -> #8 (&root->kernfs_supers_rwsem){++++}-{4:4}: [ 1185.335161][T19262] lock_acquire+0x1d1/0x380 [ 1185.340200][T19262] down_read+0x99/0x4c0 [ 1185.344851][T19262] kernfs_remove_by_name_ns+0x49/0x120 [ 1185.350812][T19262] remove_files+0x96/0x1c0 [ 1185.355728][T19262] sysfs_remove_group+0x8b/0x1b0 [ 1185.361163][T19262] topology_remove_dev+0x22/0x30 [ 1185.366597][T19262] cpuhp_invoke_callback+0x3b4/0x9a0 [ 1185.372380][T19262] __cpuhp_invoke_callback_range+0x158/0x1d0 [ 1185.378865][T19262] _cpu_down+0x523/0x1020 [ 1185.383693][T19262] cpu_device_down+0x82/0xc0 [ 1185.388791][T19262] device_offline+0x2f4/0x400 [ 1185.393960][T19262] online_store+0xd1/0x180 [ 1185.398866][T19262] dev_attr_store+0x58/0x80 [ 1185.403862][T19262] sysfs_kf_write+0xf2/0x150 [ 1185.408944][T19262] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1185.414723][T19262] vfs_write+0x6af/0x1050 [ 1185.419544][T19262] ksys_write+0x12a/0x250 [ 1185.424366][T19262] do_syscall_64+0x123/0x790 [ 1185.429445][T19262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1185.435826][T19262] [ 1185.435826][T19262] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 1185.443528][T19262] lock_acquire+0x1d1/0x380 [ 1185.448539][T19262] cpus_read_lock+0x42/0x170 [ 1185.453629][T19262] static_key_slow_inc+0x12/0x30 [ 1185.459060][T19262] nbd_genl_reconnect_sock_cb+0x39f/0x990 [ 1185.465274][T19262] nbd_genl_foreach_sock+0x2ab/0x3e0 [ 1185.471053][T19262] nbd_genl_reconfigure+0x861/0xde0 [ 1185.476747][T19262] genl_family_rcv_msg_doit+0x214/0x300 [ 1185.482791][T19262] genl_rcv_msg+0x560/0x800 [ 1185.487788][T19262] netlink_rcv_skb+0x159/0x420 [ 1185.493050][T19262] genl_rcv+0x28/0x40 [ 1185.497526][T19262] netlink_unicast+0x585/0x850 [ 1185.502781][T19262] netlink_sendmsg+0x8b0/0xda0 [ 1185.508045][T19262] ____sys_sendmsg+0xa4d/0xbe0 [ 1185.513297][T19262] ___sys_sendmsg+0x190/0x1e0 [ 1185.518469][T19262] __sys_sendmsg+0x160/0x210 [ 1185.523553][T19262] do_syscall_64+0x123/0x790 [ 1185.528641][T19262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1185.535038][T19262] [ 1185.535038][T19262] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 1185.542655][T19262] lock_acquire+0x1d1/0x380 [ 1185.547664][T19262] __mutex_lock+0x1a4/0x1bd0 [ 1185.552757][T19262] nbd_queue_rq+0x42d/0xfa0 [ 1185.557775][T19262] blk_mq_dispatch_rq_list+0x428/0x1e60 [ 1185.563816][T19262] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 1185.570643][T19262] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 1185.577114][T19262] blk_mq_run_work_fn+0x135/0x380 [ 1185.582631][T19262] process_one_work+0xac7/0x1b10 [ 1185.588073][T19262] worker_thread+0x5ef/0xe50 [ 1185.593165][T19262] kthread+0x373/0x450 [ 1185.597727][T19262] ret_from_fork+0x730/0xd60 [ 1185.602814][T19262] ret_from_fork_asm+0x1a/0x30 [ 1185.608069][T19262] [ 1185.608069][T19262] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 1185.615251][T19262] lock_acquire+0x1d1/0x380 [ 1185.620252][T19262] __mutex_lock+0x1a4/0x1bd0 [ 1185.625337][T19262] nbd_queue_rq+0xba/0xfa0 [ 1185.630249][T19262] blk_mq_dispatch_rq_list+0x428/0x1e60 [ 1185.636287][T19262] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 1185.643104][T19262] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 1185.649577][T19262] blk_mq_run_work_fn+0x135/0x380 [ 1185.655100][T19262] process_one_work+0xac7/0x1b10 [ 1185.660531][T19262] worker_thread+0x5ef/0xe50 [ 1185.665606][T19262] kthread+0x373/0x450 [ 1185.670168][T19262] ret_from_fork+0x730/0xd60 [ 1185.675252][T19262] ret_from_fork_asm+0x1a/0x30 [ 1185.680508][T19262] [ 1185.680508][T19262] -> #4 (set->srcu){.+.+}-{0:0}: [ 1185.687593][T19262] lock_sync+0xb5/0x120 [ 1185.692248][T19262] __synchronize_srcu+0xa2/0x300 [ 1185.697677][T19262] blk_mq_quiesce_queue+0x149/0x1c0 [ 1185.703365][T19262] elevator_switch+0x17b/0x7e0 [ 1185.708620][T19262] elevator_change+0x352/0x530 [ 1185.713870][T19262] elevator_set_default+0x29e/0x360 [ 1185.719559][T19262] blk_register_queue+0x48e/0x630 [ 1185.725072][T19262] __add_disk+0x7dd/0xf10 [ 1185.729897][T19262] add_disk_fwnode+0x118/0x480 [ 1185.735161][T19262] nbd_dev_add+0x779/0xb10 [ 1185.740078][T19262] nbd_init+0x2c5/0x2e0 [ 1185.744731][T19262] do_one_initcall+0x11c/0x6f0 [ 1185.749984][T19262] kernel_init_freeable+0x6ea/0x7b0 [ 1185.755672][T19262] kernel_init+0x21/0x1e0 [ 1185.760495][T19262] ret_from_fork+0x730/0xd60 [ 1185.765584][T19262] ret_from_fork_asm+0x1a/0x30 [ 1185.770840][T19262] [ 1185.770840][T19262] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 1185.778617][T19262] lock_acquire+0x1d1/0x380 [ 1185.783620][T19262] __mutex_lock+0x1a4/0x1bd0 [ 1185.788704][T19262] elevator_change+0x1bc/0x530 [ 1185.793957][T19262] elevator_set_none+0x92/0xf0 [ 1185.799219][T19262] blk_mq_update_nr_hw_queues+0x4c1/0x15f0 [ 1185.805519][T19262] nbd_start_device+0x1a6/0xbd0 [ 1185.810892][T19262] nbd_genl_connect+0xfc2/0x1760 [ 1185.816429][T19262] genl_family_rcv_msg_doit+0x214/0x300 [ 1185.822482][T19262] genl_rcv_msg+0x560/0x800 [ 1185.827483][T19262] netlink_rcv_skb+0x159/0x420 [ 1185.832744][T19262] genl_rcv+0x28/0x40 [ 1185.837225][T19262] netlink_unicast+0x585/0x850 [ 1185.842481][T19262] netlink_sendmsg+0x8b0/0xda0 [ 1185.847737][T19262] ____sys_sendmsg+0xa4d/0xbe0 [ 1185.852999][T19262] ___sys_sendmsg+0x190/0x1e0 [ 1185.858167][T19262] __sys_sendmsg+0x160/0x210 [ 1185.863252][T19262] do_syscall_64+0x123/0x790 [ 1185.868337][T19262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1185.874728][T19262] [ 1185.874728][T19262] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 1185.883309][T19262] lock_acquire+0x1d1/0x380 [ 1185.888324][T19262] blk_alloc_queue+0x610/0x790 [ 1185.893592][T19262] blk_mq_alloc_queue+0x174/0x290 [ 1185.899125][T19262] __blk_mq_alloc_disk+0x29/0x120 [ 1185.904645][T19262] nbd_dev_add+0x491/0xb10 [ 1185.909557][T19262] nbd_init+0x2c5/0x2e0 [ 1185.914204][T19262] do_one_initcall+0x11c/0x6f0 [ 1185.919457][T19262] kernel_init_freeable+0x6ea/0x7b0 [ 1185.925147][T19262] kernel_init+0x21/0x1e0 [ 1185.929969][T19262] ret_from_fork+0x730/0xd60 [ 1185.935058][T19262] ret_from_fork_asm+0x1a/0x30 [ 1185.940317][T19262] [ 1185.940317][T19262] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1185.947491][T19262] lock_acquire+0x1d1/0x380 [ 1185.952486][T19262] fs_reclaim_acquire+0xc4/0x100 [ 1185.957920][T19262] kmem_cache_alloc_lru_noprof+0x5f/0x6a0 [ 1185.964130][T19262] alloc_inode+0x183/0x250 [ 1185.969041][T19262] iget_locked+0x1d9/0x6d0 [ 1185.973948][T19262] kernfs_get_inode+0x46/0x470 [ 1185.979206][T19262] kernfs_get_tree+0x636/0xbb0 [ 1185.984463][T19262] vfs_get_tree+0x92/0x320 [ 1185.989366][T19262] path_mount+0x7d0/0x24c0 [ 1185.994271][T19262] __x64_sys_mount+0x293/0x310 [ 1185.999523][T19262] do_syscall_64+0x123/0x790 [ 1186.004603][T19262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1186.010986][T19262] [ 1186.010986][T19262] -> #0 (&root->kernfs_rwsem){++++}-{4:4}: [ 1186.018941][T19262] check_prev_add+0xeb/0xe60 [ 1186.024025][T19262] __lock_acquire+0x1528/0x1f40 [ 1186.029366][T19262] lock_acquire+0x1d1/0x380 [ 1186.034365][T19262] down_write+0x8b/0x1f0 [ 1186.039098][T19262] kernfs_remove_by_name_ns+0x51/0x120 [ 1186.045052][T19262] _cfg80211_unregister_wdev+0x13f/0x830 [ 1186.051186][T19262] cfg80211_netdev_notifier_call+0x972/0x1140 [ 1186.057748][T19262] notifier_call_chain+0x99/0x3f0 [ 1186.063274][T19262] call_netdevice_notifiers_info+0xbe/0x110 [ 1186.069664][T19262] unregister_netdevice_many_notify+0x1149/0x2150 [ 1186.076579][T19262] virt_wifi_event+0x1f9/0x2d0 [ 1186.081841][T19262] notifier_call_chain+0x99/0x3f0 [ 1186.087358][T19262] call_netdevice_notifiers_info+0xbe/0x110 [ 1186.093741][T19262] unregister_netdevice_many_notify+0x1149/0x2150 [ 1186.100651][T19262] rtnl_dellink+0x472/0xb40 [ 1186.105647][T19262] rtnetlink_rcv_msg+0x95e/0xe90 [ 1186.111093][T19262] netlink_rcv_skb+0x159/0x420 [ 1186.116348][T19262] netlink_unicast+0x585/0x850 [ 1186.121603][T19262] netlink_sendmsg+0x8b0/0xda0 [ 1186.126866][T19262] ____sys_sendmsg+0xa4d/0xbe0 [ 1186.132119][T19262] ___sys_sendmsg+0x190/0x1e0 [ 1186.137285][T19262] __sys_sendmsg+0x160/0x210 [ 1186.142369][T19262] do_syscall_64+0x123/0x790 [ 1186.147446][T19262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1186.153828][T19262] [ 1186.153828][T19262] other info that might help us debug this: [ 1186.153828][T19262] [ 1186.164028][T19262] Chain exists of: [ 1186.164028][T19262] &root->kernfs_rwsem --> cpu_hotplug_lock --> &root->kernfs_supers_rwsem [ 1186.164028][T19262] [ 1186.178415][T19262] Possible unsafe locking scenario: [ 1186.178415][T19262] [ 1186.185833][T19262] CPU0 CPU1 [ 1186.191165][T19262] ---- ---- [ 1186.196503][T19262] rlock(&root->kernfs_supers_rwsem); [ 1186.201931][T19262] lock(cpu_hotplug_lock); [ 1186.208925][T19262] lock(&root->kernfs_supers_rwsem); [ 1186.216785][T19262] lock(&root->kernfs_rwsem); [ 1186.221520][T19262] [ 1186.221520][T19262] *** DEADLOCK *** [ 1186.221520][T19262] [ 1186.229630][T19262] locks held by syz.8.3275/19262: 3, last CPU#0: [ 1186.235924][T19262] #0: ffffffff90cd4b40 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x307/0xb40 [ 1186.244850][T19262] #1: ffff888021ed0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_netdev_notifier_call+0x968/0x1140 [ 1186.255866][T19262] #2: ffff88801d2c72a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x49/0x120 [ 1186.267144][T19262] [ 1186.267144][T19262] stack backtrace: [ 1186.273010][T19262] CPU: 0 UID: 0 PID: 19262 Comm: syz.8.3275 Not tainted syzkaller #0 PREEMPT(full) [ 1186.282345][T19262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1186.292368][T19262] Call Trace: [ 1186.295622][T19262] [ 1186.298527][T19262] dump_stack_lvl+0x100/0x190 [ 1186.303186][T19262] print_circular_bug.cold+0x178/0x1be [ 1186.308626][T19262] check_noncircular+0x146/0x160 [ 1186.313541][T19262] check_prev_add+0xeb/0xe60 [ 1186.318101][T19262] __lock_acquire+0x1528/0x1f40 [ 1186.322924][T19262] lock_acquire+0x1d1/0x380 [ 1186.327403][T19262] ? kernfs_remove_by_name_ns+0x51/0x120 [ 1186.333012][T19262] ? __pfx___might_resched+0x10/0x10 [ 1186.338269][T19262] down_write+0x8b/0x1f0 [ 1186.342484][T19262] ? kernfs_remove_by_name_ns+0x51/0x120 [ 1186.348087][T19262] ? __pfx_down_write+0x10/0x10 [ 1186.352910][T19262] kernfs_remove_by_name_ns+0x51/0x120 [ 1186.358340][T19262] _cfg80211_unregister_wdev+0x13f/0x830 [ 1186.363947][T19262] cfg80211_netdev_notifier_call+0x972/0x1140 [ 1186.369989][T19262] ? __pfx_cfg80211_netdev_notifier_call+0x10/0x10 [ 1186.376465][T19262] ? __lock_acquire+0x5c0/0x1f40 [ 1186.381379][T19262] ? __lock_acquire+0x5c0/0x1f40 [ 1186.386297][T19262] ? lock_acquire+0x1d1/0x380 [ 1186.390950][T19262] ? do_raw_spin_lock+0x128/0x260 [ 1186.395954][T19262] ? find_held_lock+0x2b/0x80 [ 1186.400611][T19262] ? find_held_lock+0x2b/0x80 [ 1186.405263][T19262] ? __flush_work+0xa38/0xcb0 [ 1186.409916][T19262] ? __flush_work+0xa38/0xcb0 [ 1186.414568][T19262] ? __flush_work+0x7e2/0xcb0 [ 1186.419223][T19262] ? __lock_acquire+0x5c0/0x1f40 [ 1186.424132][T19262] ? lock_acquire+0x1d1/0x380 [ 1186.428789][T19262] ? __local_bh_enable_ip+0xa5/0x120 [ 1186.434046][T19262] ? igmp_netdev_event+0x7b/0x880 [ 1186.439042][T19262] ? lockdep_hardirqs_on+0x7d/0x110 [ 1186.444217][T19262] ? xfrm_dev_policy_flush+0x369/0x410 [ 1186.449643][T19262] ? __local_bh_enable_ip+0xa5/0x120 [ 1186.454905][T19262] ? __pfx_igmp_netdev_event+0x10/0x10 [ 1186.460336][T19262] ? ipmr_device_event+0x1c4/0x230 [ 1186.465419][T19262] notifier_call_chain+0x99/0x3f0 [ 1186.470431][T19262] call_netdevice_notifiers_info+0xbe/0x110 [ 1186.476294][T19262] unregister_netdevice_many_notify+0x1149/0x2150 [ 1186.482686][T19262] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1186.489428][T19262] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1186.495647][T19262] virt_wifi_event+0x1f9/0x2d0 [ 1186.500381][T19262] ? __pfx_virt_wifi_event+0x10/0x10 [ 1186.505634][T19262] ? pppoe_device_event+0x42/0x720 [ 1186.510717][T19262] ? team_port_get_rtnl+0x8b/0x130 [ 1186.515800][T19262] ? hdlc_device_event+0x70/0x210 [ 1186.520803][T19262] notifier_call_chain+0x99/0x3f0 [ 1186.525808][T19262] call_netdevice_notifiers_info+0xbe/0x110 [ 1186.531670][T19262] unregister_netdevice_many_notify+0x1149/0x2150 [ 1186.538068][T19262] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1186.544808][T19262] rtnl_dellink+0x472/0xb40 [ 1186.549284][T19262] ? __pfx_veth_dellink+0x10/0x10 [ 1186.554278][T19262] ? kasan_save_track+0x14/0x30 [ 1186.559113][T19262] ? kasan_save_free_info+0x3b/0x70 [ 1186.564281][T19262] ? __kasan_slab_free+0x5f/0x80 [ 1186.569203][T19262] ? __pfx_rtnl_dellink+0x10/0x10 [ 1186.574201][T19262] ? nlmon_xmit+0xa5/0xe0 [ 1186.578498][T19262] ? dev_hard_start_xmit+0x121/0x760 [ 1186.583754][T19262] ? __dev_queue_xmit+0x1bbf/0x4970 [ 1186.588929][T19262] ? netlink_sendmsg+0x8b0/0xda0 [ 1186.593838][T19262] ? ____sys_sendmsg+0xa4d/0xbe0 [ 1186.598758][T19262] ? __lock_acquire+0x5c0/0x1f40 [ 1186.603668][T19262] ? lock_acquire+0x1d1/0x380 [ 1186.608315][T19262] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 1186.613401][T19262] ? find_held_lock+0x2b/0x80 [ 1186.618052][T19262] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1186.623144][T19262] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1186.628229][T19262] ? __pfx_rtnl_dellink+0x10/0x10 [ 1186.633232][T19262] rtnetlink_rcv_msg+0x95e/0xe90 [ 1186.638144][T19262] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1186.643578][T19262] ? ref_tracker_free+0x37e/0x6c0 [ 1186.648577][T19262] netlink_rcv_skb+0x159/0x420 [ 1186.653315][T19262] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1186.658750][T19262] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1186.664008][T19262] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1186.669270][T19262] netlink_unicast+0x585/0x850 [ 1186.674008][T19262] ? __pfx_netlink_unicast+0x10/0x10 [ 1186.679267][T19262] netlink_sendmsg+0x8b0/0xda0 [ 1186.684004][T19262] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1186.689273][T19262] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1186.694789][T19262] ____sys_sendmsg+0xa4d/0xbe0 [ 1186.699532][T19262] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1186.704790][T19262] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1186.710049][T19262] ___sys_sendmsg+0x190/0x1e0 [ 1186.714710][T19262] ? __pfx____sys_sendmsg+0x10/0x10 [ 1186.719877][T19262] ? futex_wait+0x11e/0x370 [ 1186.724353][T19262] ? find_held_lock+0x2b/0x80 [ 1186.729011][T19262] __sys_sendmsg+0x160/0x210 [ 1186.733574][T19262] ? __pfx___sys_sendmsg+0x10/0x10 [ 1186.738662][T19262] do_syscall_64+0x123/0x790 [ 1186.743222][T19262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1186.749086][T19262] RIP: 0033:0x7fe53b39e159 [ 1186.753472][T19262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1186.773052][T19262] RSP: 002b:00007fe53c275028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1186.781431][T19262] RAX: ffffffffffffffda RBX: 00007fe53b625fa0 RCX: 00007fe53b39e159 [ 1186.789370][T19262] RDX: 0000000024048004 RSI: 0000200000000200 RDI: 0000000000000008 [ 1186.797320][T19262] RBP: 00007fe53b43506b R08: 0000000000000000 R09: 0000000000000000 [ 1186.805262][T19262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1186.813203][T19262] R13: 00007fe53b626038 R14: 00007fe53b625fa0 R15: 00007ffdd4a47a28 [ 1186.821151][T19262] [ 1186.872776][ T31] audit: type=1400 audit(1700000036.262:11695): avc: denied { write } for pid=19223 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1186.884974][T19267] random: crng reseeded on system resumption [ 1186.936964][T19267] PM: hibernation: Marking nosave pages: [mem 0x00000000-0x00000fff] [ 1186.936991][T19267] PM: hibernation: Marking nosave pages: [mem 0x0009f000-0x000fffff] [ 1186.937008][T19267] PM: hibernation: Marking nosave pages: [mem 0xbfffd000-0xffffffff] [ 1186.937018][T19267] PM: hibernation: Basic memory bitmaps created [ 1186.938351][ T31] audit: type=1400 audit(1700000036.332:11696): avc: denied { write } for pid=19274 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1186.964028][T19266] PM: hibernation: Basic memory bitmaps freed [ 1187.046327][T19276] Bluetooth: MGMT ver 1.23 [ 1194.301083][ T5611] Bluetooth: hci4: command 0x0406 tx timeout