last executing test programs: 3m42.306818348s ago: executing program 0 (id=179): r0 = socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x28, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000080025bd7000fcdbff2500000000", @ANYRES32=0x0, @ANYBLOB="1000000082040400240012800b0001006272696467650000140002800800020001000000080003"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYRES16], 0x40}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 3m42.155091222s ago: executing program 0 (id=183): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000740)=ANY=[@ANYBLOB="ffffffffffff0200000000024305000f32000000000102000000000202000000000200ff001401010010"], 0x0) 3m41.957210592s ago: executing program 0 (id=186): r0 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000680)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0x1, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xad5, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}], '\x00', 0x100}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000000280)={0x1, 0x8, 0xa4b0, 0x3ff, 0x100000000, 0xc182, 0x100008001, 0x8, 0x5, 0xfffffffffffffffe, 0xfffffff8, 0x2}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r0, 0x4122, 0x0) 3m41.798987279s ago: executing program 0 (id=188): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) syz_open_dev$loop(0x0, 0x2, 0x2001) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, 0x0, 0x0) 3m41.682575892s ago: executing program 0 (id=190): r0 = gettid() rt_sigtimedwait(&(0x7f0000000000)={[0xe]}, 0x0, 0x0, 0x8) tkill(r0, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) munlock(&(0x7f000051e000/0x7000)=nil, 0x7000) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(0xffffffffffffffff, 0x110, 0x3) 3m40.974271347s ago: executing program 0 (id=194): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e0a, 0xb, @mcast2, 0x9}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) 3m40.541388074s ago: executing program 32 (id=194): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e0a, 0xb, @mcast2, 0x9}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) 3m30.674432857s ago: executing program 2 (id=243): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x2, 0x7fff7ffc}]}) close_range(r0, r0, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) 3m30.557398554s ago: executing program 2 (id=244): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) bind$inet6(r1, &(0x7f0000000440)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4c, &(0x7f0000000480)={@multicast, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, '\x00\x00\x00\x00\x00\x00'}}}}}}}, 0x0) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x47) 3m30.335970673s ago: executing program 2 (id=245): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000640)=0xffffffffffffffff) 3m29.856456539s ago: executing program 2 (id=249): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000003700)='./dev\x00', &(0x7f0000003740)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000003780)='./dev/mapper/control\x00', 0x2, 0x0) r0 = syz_io_uring_setup(0x7890, &(0x7f0000000540)={0x0, 0xd52b, 0x10000, 0x5, 0x2400050}, &(0x7f0000000040)=0x0, &(0x7f0000000380)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x5fbb, 0x3ade, 0x40, 0x0, 0x0) 3m29.469968264s ago: executing program 2 (id=254): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000002a80)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000002ac0)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000002b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4090}, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271e, &(0x7f0000002b80)=""/102393, &(0x7f000001bb80)=0x18ff9) 3m28.518336194s ago: executing program 2 (id=257): unshare(0x22020600) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000d, 0x12, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e24, 0x2, @empty, 0x4}, 0x1c) 3m28.155602268s ago: executing program 33 (id=257): unshare(0x22020600) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000d, 0x12, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e24, 0x2, @empty, 0x4}, 0x1c) 9.443792179s ago: executing program 6 (id=2092): read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket(0x28, 0x3, 0x3a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@random="00008000", @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x0, @loopback, @loopback, {[], @mld={0x83, 0x0, 0x0, 0x9, 0xc036, @remote}}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) 9.438697712s ago: executing program 6 (id=2095): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad00"/16, 0x10) recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/32, 0x20}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x3ffffffffffff67, 0x0, 0x0) 4.690435012s ago: executing program 3 (id=2139): socket$inet6_sctp(0xa, 0x801, 0x84) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000300)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000440)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(r0, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='fdinfo/4\x00') pread64(r4, &(0x7f0000000680)=""/17, 0x11, 0x0) 3.49563493s ago: executing program 3 (id=2144): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x66, &(0x7f0000000080)={0x0, 0xfffffffffffffe43}, &(0x7f0000000000)=0x8) 3.307714487s ago: executing program 3 (id=2146): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000c80)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 2.062869691s ago: executing program 5 (id=2151): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) r0 = fanotify_init(0x1a, 0x800) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x0, 0x128) fanotify_mark(r0, 0x441, 0x4800001a, r1, 0x0) fanotify_mark(r0, 0x1, 0x20, r1, 0x0) open$dir(&(0x7f0000000040)='./mnt\x00', 0x0, 0x2) 1.92410937s ago: executing program 5 (id=2152): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000004c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="4005", @ANYRES16=r3], 0x87) 1.831241029s ago: executing program 5 (id=2153): r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 1.225723852s ago: executing program 4 (id=2156): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xd, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000700)=0x20000, &(0x7f0000000740)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r3}, &(0x7f00000007c0), &(0x7f0000000800)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000840)={r2, &(0x7f0000000880)}, 0x20) 1.064632168s ago: executing program 4 (id=2158): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f00000005c0), 0x87af, 0xffffffffffffffff, 0x4}, 0x38) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000680)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd29, 0x35dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0x0, 0xfff1}, {0x7, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xe13c7cb5123b5c20, 0xfff1}}, @TCA_U32_SEL={0x24, 0x5, {0x5, 0x6, 0x6, 0x4, 0x101, 0x5, 0x100, 0x0, [{0x2, 0x8514, 0x7, 0x1ff}]}}]}}]}, 0x5c}}, 0x24040084) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x20, &(0x7f0000000000)={&(0x7f0000000240)=""/187, 0xbb, 0x0, &(0x7f0000000440)=""/208, 0xd0}}, 0x10) r0 = io_uring_setup(0xf06, &(0x7f00000003c0)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) io_uring_register$IORING_REGISTER_FILES(r0, 0x20, &(0x7f0000000000)=[r0], 0x1) 874.667904ms ago: executing program 4 (id=2160): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0xa7c, r0}, 0x36) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4000054}, 0x0) 679.743883ms ago: executing program 4 (id=2162): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e1221b23bb601c493d3df163e75963d86dd606712e900b0049d9049123248040000dbb8a10000", 0x27}, {&(0x7f0000000200)="8bcceb216f4a4c06f5ff8408750902003a73aecf48473c968030dc1d211aa2e09a0f32caaf4b48", 0x27}], 0x2) 610.840188ms ago: executing program 1 (id=2163): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x1d, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x97, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x2, 0x3, 0x6) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) 605.02112ms ago: executing program 6 (id=2164): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) llistxattr(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000002c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b16413b6139c84d300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbd2d00900", 0x2000, &(0x7f00000022c0)={&(0x7f0000002380)={0x50, 0x0, 0x1000000000, {0x7, 0x2b, 0x0, 0x20, 0x0, 0xfffc, 0x8, 0x0, 0x0, 0x0, 0x10, 0x100}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000002400)="c1b0ad27d26172a2282808a63b3666a169a53df2d890fb5a415426c6ff9bb87f8efb6ea14cfe80e636e7de7e2b18b78f80a1e4c84f02ecfed07902492c1d761451483d0b9c75d1bce9e4a0d1f8a9bb1a22b951653bbce82561c6ac0fc2eaeb3fcd942b78b746455913dbea328ce1088f52d7cb35aefac657784f2cdd576c15bb8db65205430d6a1cd094d749955b73eacfddece7cb849c1554eebb88d05d597b840ebac50de06d2efcc88cb3bbdaf6388332964078936c035bd3e3f56e545ba683f4523df2d6034d5086890db8e3922638a6196fe0a1a026ef632f8c6c6ac3e66228e9c15abaa010f956968240f31f97ef8da03d671ad3d48e135c880c8e096e0f39cdaf38d0203a20362c985b38cefac182d22fb4b709c8c1b5dea4eb5e6dde7af7793b120ba2eadcb892c53de7ce0ab712ef33721121fcf841fa1d35f7a2e9ff1b054adf64e6e2261e015c9a0dd0b8d8fd363ae1bd8ffc28d41b681ece5c4568cf6adf2815b618e8308dbd1c2e664c178a4504e0a362291ac5dfa1115709d42fe8bfc92f109d60c12d43fc204a8f3458b199adab770d51eacae9eeaa4cd1569f05dde2f71e2819dc64c2c62441e4cf281acc54f88741ed1329343e0dbfb356ab7fd3732a93b2a15fac46ef120745cd49b7e65421595fd81fabaee29a28bab508c95fa74d8884c4edd6bdea3c71e8d230c8e666aeaadf6f4c67846ad43a3f458123508c77df0b13c25b3414220600e35dd2d44bbd78d7902f767dfcfb6001674106a6a952f3a47e78758893cae3bfff8d053842642c3f9eb512e12ef09313b2a823e1c31dd45b236824b057992101016204d48e1d3f7f42503b20f549371f92688624089b5460b724307b569f8570c5eba6c243702370f76c0ef78d59d5aef447852c9102618a9811f8440abac9e78a7613b00ecc1b0f6dd9c477701a975fe07c95bc35237d33f7368b9be2986566f310f16a189fe0438ae0887384b10f80b2635493839b3de154c8fe5bc020164e062d77b4826df0eb2af18c8a9e5b28c3d2849bbd29628c76306cf7f4433e0d128a93f5b12a2bea9ed9b3a85e8e4896ec6ce0ea8ef4471cd9db37d91b3f45cb72c2781864c820e4e267e6a650a3687eac83d7b010c621c1c52717b98335df8e87390e5a76874bf31993e1a801f4fe8dc9222877c693fc043d38f54b9422210f2a023f496149def0a9e936c4adbce6a290113b2fb40c5e3e79a0797cd37c2e1731e0143bb5d8bfa51c226d02d567b50c63ebbc64e1d44e120e4cb0fed4347528df660736b99ea3235e83da0c167a015cb3e7a57c5e9072b2fd358cdb20127deb4f37deb2d09ef2b2795ccb52f3bab0f5abcfc37bd0932e55f92cba6e468fb3175b983ca8597327fe67fc1aa89f6d1829ea7eeeec41e3920a51ac583489abe8eb5c1c841d4969a06fde61fa56e59f8f0f64b19071d8a84853047a3d766e82cf2c651586ac3f877c8909ed056b1828fff9211e414b8b8f5cd38542132d9562abae4bf63bbd0532208199e4d2c59b1e5d9a438f026d01c40fd0b8076a9e933e65e65ff9ea0fde753edc738aa079b6695c6055ac2690d6d928e9046c446bd9d0c3e685eee30f7a718436cfa917f678cfdc2f7f72e7bbe508cc64239597f5969f4a750cf1f0f5a646018eb1c35f912cc4c888da888ae8fad773fe47c6a78a63af9b035e15eb790a7ccff2f44d70acd069499d7db8bd02bb6bf252699d8d46a8923f21ba967585be41b79e4d653ab2fba065610ca31e683a5cd5b29678f45eb2593700b361919efb0dffa1782b70d0a4a34247cbd9b240536ce6d46615ec96387e05f60375a2fb8977898cdee503b1fa20924fdec96a1930dac55dddd2eb612c383e4eff4e95f6cdf88047fe76ce9dcbf18a6f81d091f8e767be97b105dbc709d92c6f25d785b4972cafaea96bafc82cdbd4525340e37903259117b8ab63bbb9fb34cf23cdc48b59f7bd0b50ea12950e424e706a5d9ef4d69b334a5de6629b2b585d64688dcd5d4230fbe6f8043e99e9942d13973568b789a34a3ec7a70ff4b34ed4f28a1ad2eb31d8c81ce77d8b554749522c149944a08669ba48926dca4429fe817a7d91f373db7a100f74d6a062ad5e9ea20c77fb575a0c54c5eafd640ee770c844c813d9d807dd80333571840bd8b4b6eae859ddef2f6dbffcd7040691e2228f927faa8c82de451e60303267df50e973b0c6c7f0738eb8cc82b899534a41ae37ede81b72c38d57d82c59f87a8acf456229cced3bd6da6003d1f456ab5849b4dce78b05eddb6188d69cf8ac5bc16799e99021b5485d5ce080b328e7e11e4bfc083a68d9ec22007fae9b04bd167ce4b8f455ed6419501ab6ca434d6418a8f8baf09a66a51ba426f61ccc2f30acfeb988f3a1f36bface215200b3ed62a3d2d74f7b8c0c8244472cc77fbec96721c55d10ae299fb1aba8c45ac1cc882ce964250b30d81bf8a8be110b9f8af1aa644313052e00ed644dd87ca7df34a50ccc3602f7d3ab93fd6ca19d5b9a06894a8f91d3aff8a3cd52fcd3af7adcc7f9ddfce8bb74b714ffd4d2e76cfe60b44a47b1d7fb2bbf0c4a3dac47edd09888fdbe781071900a2e473b4daeb545561ae8f34b4eeaa60f44900684ac1f620a6fa54e562de40645158a5d8c36e3d9027bfc65274ffc8bfca8c03d464047485c3db1e54294406d90ed05c3b0d2d4e66d5e992b99dc3ede4be703d2f31dfdc5dc8c6ef01f43b42306f4a4825be7499afdc8ba1c02e3998329726af89e030be58ecdd20bf8b5d7e5f81878791f92fbd000aa1f9c2bd0aeaba2cecdeffb476dbedf37692d23dac191dfd2f7633d04a0826512b79bc1f8a6737b9b36baec7f5a4555fc7054458f9c7169968ebac29009778dd739e3a5b6cb2f0a6ae0fcb4f545e89a61ad993e42dfa7a283bd9f3d2eac7797c345843244320da0ccad437458512747f321158cdad67ca63d9e3eb187c2fee00d5f9e20266e103317a54293a7ba090b40174d0232bfb2ebd8576adf8c8a9f963fe12a592fe19af02d6f684dbba4a2d6d98003f60a728b1e7b524cbf248666a88d6f19c4937db31e56b4f5373f8aa16926f7ec75da8a76cc340376958175d6f23585e97bee88164cd2e2df5835474c6cf21f65754b98766ab47857d3008be18186792ecc604fc17519cec1d67c727c84299201ba77ccb7e60aa7b912fcc61b5ae4f580a90892b6e7cc3610b357ba6ac5b377cf43bab2970ee240525e12767611842d1d52fe188f125d018889e3e2092b7a39ddb57c0546bb17ec2443e1bdc5a763c9ce5f9b528ed14134694802886d4420f02ee9574f62e6bcc456028663f0b1399d86599fe0047d93a2eb162d2fa13385192bd4221e41bcc61511e43103550f958ba6dfd5e1b855b82a543e8e0766678f1cdd1214a399aeef014150baba0556212132dbf135319868b9ff93adf51eefa64be829362388e2659101a3ec85e0bb5119423b60819aba5c3b8823b5e37f469783db165ff4cd2cd7306f163c0e4ac8695747b571d7941e2bf1be981a48e71f336bbcc20ccddfae7bdc7f94ab62dfda1d552bdef955189eeadc9bd710c2a3a8c9d414c45d2b99ab8b4e92f8fcf2b83380d079b3dd3ddb0978dadf5569f70444e48f26d32ae410a88bd7201a84b4e3b44a1764ad6428a8148907e86bb0a09cfc1191eda8202d3160c8a4716de885ee80fbbbb2278fcbcbfd1c76b1d55ccbb9ed228de215f5104a9a0b4d647b1fa4bc786c68bee29f5229ab9cc3ca0729199eb7bd2ec9e9be7d833b13586882ea069e2aac144f22442244655c33759aa1e101f87836ad0cb16ddc6e36a66a8755acd52b4e446c0e974756a087a725a95ef59121d39f1c75fa136d7212c71a14ad5579be27c1dd0af8f9e4fb9b407e2bbbdee423486c4d5127fcf5107177b1e21e81f1758f4c304f40c0eb35627113be1e4dcb06d209ca06696f214ca260721c4ce7b4d82db24f024c74786c8d6ba7c73f495eab53e545c44b53a78f82d0aedfe04b798bbe125c8622eb5a2a764cae9c8d01380d464bd2dc7a1b0eb2bc431ae432ccfa81f2913af53bd714fe97d958c928534aa2f7caff6cd926daad3e6ed4c44bd3dd3e1a3fe0e12e8423a79c93d7475e29d036b2491e3ae7e50e4098c107abc4eec102808c8d643c4d4ec5707ca06a0b584bbf1bdbfda771a708002ab235fbfe91923b95fe8f4decb6ea6f1022bd98b6f7df5b457a198f2dd8031db5998c56acb30526ac7a7ef157b269259d6606a91b13bc09db05d4f1ae91a8d4fddd9038e5c03506447a483f8759945ec9700b5ed83c7097c177756773c8a250c76415ff43ff091d2015452b8803297e882a832700cb2d4c5c09c9aff61aa04f9cfc81e3d68911c7029a9ab79bdf72d2814068c828c86aadf77bd56953019ad507f5e059ff6ddb5562722acb3193baf88f571a2aa6d575c35506569720d4829f4d29d155bbe186cb72707eddaab43052871ec43dbc5018c1ce41120bc53f2cae7ebcae5bfb42dd1a4d17f782638ffa9747802cb74c61ebd2936d35ae926dae166ae2ea88effad9467bcd028d733da52576db8892c7b77fb5c97814845e3651f5bd759edd3c72704cc3035cb9e15684a0e17fa0b5704a6ac35576643d6fdbee7c7d05e9f0b0ba3e691e2a281913f2f705077277311ae7b8ae3cf287faac63c8cb0534f8610aae68bfdc2e860dafca682af8ec0d73f5d521dcbd3c8b403ef5763c46a23f307c798a550d3a14c1a9db153c8f1b273cc2bbad5a3450ebc2b391f0e44a3223864a193df9fa27ca15293e36fd461bb4ffa6ca73ae5f2d79933b53e05c59017367125aaea376a509a20c9840100af4f1119f1a8cdab0b835c9315144b22335fda48835dbd7d32ac735f71f69a3fb2c593b5c344f23661ff3729e7142b6da61645f8446e2de64cd637186a66c45efc3ab13db3a9cd0117a3adbb44deae4944a9fd466a4f69af5a959430981deed8994bdfd060da92395e23e449eef961d61e82a65a4314ceb4fe3daa08bbda05ef91d70f549fb7959441cd19ac01cf221b83d6e75c3ad224eadcc3f74b097d2d9edc2ccae58ea09ad3af5bdb3e6b3e81ec38542b927fbfcce573b2ee2f2a71b14a24c4b5a443983665be22bc25251af121920540dfcf8c1f2d57d8f721b48efb9555690fbc3bab0fe71708f3edecc8ffd615b1af7feb0e893c3a458019764d16887dc2973333fa70aac3f5400bcace8dd0c8cd8c79bb1e28e744b6fd1a9a424c5f38cfe256df3e3d252a8941a3691f57098dc8658a93889b29690eb2406586ad10df48c0a34f90a37e5ba6583450946b96fc01867f462050f419058e490e5a0720258885b247f65c4db08b41f8236305daa37f0b83fe327f73a8d65a1d49986de9d8ea076c69003df5984926d0e39d30a41e4a660ef2242f42747a944d7664169fd41d0352d4362ebc6c2519dab028d904e8ca00921c936cdb197ae9f096a53c99d643ab30492be5144bb799dbde12499198c3cfb1483a2a29083fb3fb54957b68590526ef4b5a7fde45c773cd5e414f4ee4db79ba92c7a8c2cf77d3e0847f788ea6fcf10cd208ca5d04ee496f70ea0170bc60da6edbd95b444c100fddbd2e878f934c89b82480b16df600d236299886ff71612493eaaedddfa1dbebe596c8e3b8b4cdc2d231ce7e8df0f242677e6b5c3d2815b9e65e29c80ddee5c711c861950ae60d1b882803cb6c776598936d498c3a800fd1091005638efa23dab3eecd92c8a03734dec8f078e172d000313164f613f02ee24bda86e67adbcf618137a7ec3cdecf7829a8bf2546f62235d92c14ad5b39c1536d923dd579520055b1f89ef17240b89a616caeccbaff0db4d8fa087b5b2c7cadfe4507e0d351f5b045a5e401db68a8186f78edce6be621dbc5ba76b0ff3f406161b170354ca24d128d3a8bd02b7bafc1085b3dab482eaab63f1f165bb0d2d28f70bc9eee4e1fe31d73d12224363562152df7123f1977083534f8ae502984d41c593433be1936ed3296c5153dec58811d603efa95e4d895b9c8ae96af097a644dbdd0bb0aa8d3711bb8b494f3da0fcf48ede0ced49c031ee191e056426dd86276d69640fb1013747022d5b998b4fa7256a0474d2a9e183bd733d335d7208105b1c8676419d1f0252065c7de75c55cb0d221dc8e0532112403c215933ee84e654ebe4a09b34e4c747b34232344c2d3bf83ab53ee7b85f4a3f88914fe79a4f15c4c98a3ec126591591b0e6167e2544523e9070e830d792c78c693d2e6981015dea70a83982042d67a7f5229d106851c32933597e03ca171bc27c2a61380b8e58c41dd9bb808b4b308ab5ce45ba022048e02d89ca1a329f5a9cefb861ab3cd0a05236d58113b47592b0389ca6416b92ebbb367a3a41203d0baba90e8046412b7c23bb027e7cd656cbc864e38272545f66b712fb6ab080f972cd09c92c615a04ada2e24c74c1320ac02fc9ec077e5d5ba621aab5747bee120f5aaa9cb6ca91a162f06415f152cdc79f4117e0cc6fe9bfe53e7e396d5f21ad4328caec1141baddb16a7305ba49bd427e835dc23baae24e559ed66c215662ab3d517d87daf6dc4d2b4c8a3a0c77d65a9df67e756b7b719dc262b15891ccd9545919a5c63577be273276fc39df50dd9388e09fe3bcf1366df9df85fc9b8ef26651c439b76d73c40566fa035736d598ea1d77e1051a785d1717fedae7c687307b277e195555fa6ccaea28c57e07d84f51fb5ef64df87f62c651264ac4b268d116924f0ce008b6355f9901d74d7e8f0b440f337e51cb83fefc278da96edc32fec1012eb955493d8081885ec3dbe94e927f2b490b1bec6fc4b125008153706559a38e147e54d20917ab9d6bb5edf0550f5de539c7fbef949019b339f454be50a056223ccb014bbc078f04c01c8aea18ec58befeb4143c4fe2b6d23f487ff30309ef3098a2632761876876c2073b7cd3589af3407ed921654683739551fe0cb65959181033b2d2de8482f9dfe9279a2febdba75f7523ae92cd89345494c41a3371f0d4c501f817aa751dc2e4c42597cf72baad04076cebbaa100fea0b0423eee35e32aa60831edb4c772dbe08918a9ede0450dd76430d47b3ebe097b99adaedf6b17dd649c25b77a81c0b1c1cf8447b69638be8872a9f17007f988cc5a555048a727078b5de08ad71156c0446764ef687e2f4bb6fcfe104c5dc862b5e78df61beeec1b1a026dc7283f65035cd5026624daec53c7b025953d9c0266d3e6f02f11931a088e47484230c00c3d6f3b72d095a66b1f87204e739f1b6d4716bb863b6b125e26c7c8e07596538f59b48cbd41250eca1efa85a9e185bc2d8a20787cb66be568f59ddc34a3b207a874d7aa4351da7df89a2ff1ff22bb9d69c177195686bcdc2f04724c8764696f7ef4a75a4e0dd875f07431883da3f9f9cbbc9950e57cfa7bb00b2b8ce162c807cc4d88dabdb91549d2d9a91b74ad5e518ad58c391be582423a5fb29e9aa792a2703505b578fd8c73f4f77c485916ede77a9f36be6a12391de7fdf73fdf1db6766ef38c23902be933c49ee8917858e8ee29559a2c2dec20e4a5ad650c52f97d1648f12733ef65466ce94b1268fbec2aef918c4d20886a373b6d3b5fa8b9dcca9c35033e2165803b55a34d87e012cb402ce79ae6de18a4cf57a89ad8dc698bf321a4cb0af1a4d5cdea3da832e3b44f3a47798fda07fc229ac89dde9d4f57b2f8305999400e69d2c5c8caa1bc98ccc833ccbae1682c6993f131a03466303cbc294ba22add02036f73149b2db98688d6462041be3d274d5217c7a6891694af9e2a626f8ec4d4ccb8d4946ef18904ad47a84c7a619e87e773126f61e30d5ced5232e14b6abfb4d44ad05ee999d4d54d2c751cd7c5c9cacfac6f7d47b9f97560038b0baa5e635b553a84f3cbeb04632a9abeb6740ea4ce627f60cd5e6aa71a7e2c205bc90adeb3d61bcd66f17d1296e0cd383b1fc38ad4e2cfd05d4a4ee7371f756eeaa0525bd1673f0070f9f5ae099a29e4c325015d9372ae27635d2eab686be9dd96ec2c014acd8123fea35f97d7ecb5e9bc8359b397e8c0c3b90658aa9fabdc8f9f4bd565dd6e20fc871b658fc3e5944efa972d80303d7a66dfd159e904dbfd894009291ddafdfe3a5c502755b5a3dbd89792b8e5633d6f81d23b63f599fc1f29d679f64afa697260e1e6a10ec075355b58ed9007408a379d3c890bcdbea8604e51c0520be1d8c1f10b0a91d40d7ea9ef9ca2c283153b902700635ce65c3ab69cf3107e2017d8a72160f1794136185afd57c743af49d84fb535fef777e6c6f2a18a04fce9618778c832a608861bc7dd7eab315644f998595d07c5a41bac3e7270a871257802d26f42c454c797414e0d5de88ad611c5e3a05ce76df1348e26509f52b7b125eebe5ce1ec0245bf23c153d807ec87592f37ed65c8ac086be9d169cc31adab8da3fc2e2dad0519c0a68cd6cb202c99f5ee48a65c6ac27b0d489faf3083fed64ee5b078d0092d5939fcd01b2a71dbf007367fcc56e2f62904be4097fd7c639caa8a390a59be7a6e46aae93667a26654fe461c043bfec083f065726e66b5f12d9e7013500068de45a49a87dc2d0933287e7575c9f3914071c110c9a8f492c67fc48784aea5c22d1ce26f3281d6deb14da66d69ef6ec8e9080ef0d543bc6ce58b177c01ade4232688fb252d6f3e1ceba283d1d59ae82a15b464746df9bec915f00a184469b846a19a7968d9b38e476e3aef47ae41ed8a7d4d3cf744da190747ee3266ff689428d372545f28e40713615b7f886e1f294056a95f3e50e1afa211ca3a2f4a04535646bf9f4cb709a5ecf437807072cc8b77fbed51e01bfac16c73876a5d2d4916555f7084a772847356855c69c193d8db2d37d8c1a5e6adb2169ddd3bd5b7a2cbf9418d00f174295381d51733924bfdc46017250df28679d6b378cc316c67198b57634f46d5f9c169fde3715ddbeb792fd2c1c74a7f97101d373351037c73af2643b8952665eca13f874aace302f60681e12523b6de8f5c5750d4fb480fe0cad1546af7c88426319baafceccca2b49fe96d2ff446a4867cc0ff6ef7845c93c6a6f2bbeac1e31d5d95618c990646a86b691ba387f6b31f75a69fc68e52c7efd0a1de03be8455514231e04bf7370ab6b49d931f4b581b52ca6e0b104bbd07013651d048dcc5271bce8de0f855c4d289a70b19fa616cddbe27b217116d3a52dfb590df3f932e9fee79e34b42844d4efe8a31844694ffaaf811d72b07ab4a281d75c4dd73f7fc82f9beb49e9ef70c72c31c6b7802ad77d25b405a002d63ba30c078aac97ad8cb9ac85299024c6dba7912c3844ed27097e6852a4567d332560e54bb835d2bfbc31a9bc181f8273b878349c9921c6cbd5466fdea1da224f5361c0c50c5fb4f6ccd9f15f6febea4d24265131cc991d85a5d3bf28ce78dd79a5ddff2b507c8b3d38ece81b386f428ed6cf9258657e7647dfa8a8b12ef5ce051208bf44e2d973885f72835f55458ed6cfcbcb75d998be711af59990eae176c637439b79ad8c41b1b71858a90e65aae941d92a2e9616784ad513321da97a2d1036d083c41eeacb374ca45904d6f205101b5e894cd3f0e2d7b8a737a07802a3a74eb4db792b204f69bf3278fff2538878634b84746b51a87d3364c64a860c568d82757761773b137a1f92fdb012c4f38add32dfd4cf0a6b6ccb8e7958abf0d8ab7cbe7c32919e3bf5618096af980cac33df3eae62fe9bb36eda0aac74dd81fd562113e2515c3d4aa6daec990506bf3b958888119d0b1dc215d5e5418eba9778bd53faa7e9f732ce01f3056fd5b89cafe357648592287c990fd5326df9eebb9452b69e0a94cca107d8ae2e72bca993a08c3531791762f52baef6486848d462854357cdd8788b20383b095d58a35b9ab04380629d8a10707b862bff7024b90555233f0b05848dc1c5145906e90b63b243bd7491673a55d9234a928e9bb37ed35afa3c9a4b936ac42ccb1d1dcb5abe7cc21717fa1025525d24f4eb745f1fe0b3584448e35ef9916fef74cfa511bf189591b2cabb0ff81306d13a37eb8578d183ebc7200b3e28d2c2f39e56ba76078d60192d806c972f4ad6077be01111b412587760e65105faa0d5cb2326f99687ceb7617e2d4d45b918dc581223f0909eb519856748849fac49a2bb4edf727a7b2edf6e4454f526d02ed459d7805b68142c25dfc5544ca04dc7fb3c45418eee7609712f5cdaeb3aa3c6936cdd1f1e0d1486dbe2f3ee05f6856727ebe888e797d834beafb969a90f950198b5ee0ec876172c290466118f8dee069bbdb463040ab8840b842bf2d1637b03040994ccf1b8180131c755c623e65a03c96172bd15ddf0f90dba2ac60800252c193547b0b6beb63c3542f95aa373bda1941edc0d441d6d758bac9a1d7301f51009aab487f1b2cb3935a5c8935e8f2ee2ee3e2dee90f06c6ae693f715b9480219c59abc458e6aee1a210767d26bd5c24f8a4fc6be59011417aac0eaac7ad5715c5942fe87fd341c842544f3e394bebce42c5667a511a0a363a89462aa18595ea6b51f86dd48db166c078adaf2d127b87e6ac9cb6826fb0010d869bf03f2afaee97b6a064fedf3cc0806d75060cd4c86d1014a47b9b81303d3c2716b8c0fa30193393dc1ddda76426fad6c03a41192f6c7cfaaa8e37e9e3eb3cc0c6bdaa721b66a9fab82e6c0fdf964286e4aca0d66201c0adca7c33fae61bba1be0c874f3b495f3f7857cb156ea2538e4101f89e708b4554444e95096a0a40fc78c35be82d843e2d2a3adb8d78d662cabedba523079fb6d52df3bb710d268d7cf32a6a0a88d4f80628c0ac8a447f3fc5e0d091514ca2c64680b7da00d9196adc481f61e281381f748f3b3b0d78f1c77fef19ce0b7466e14bde12a3a9bc5cb225d81fbef39cc1b3c5668e533a8a82375f6fb46dd8413c119a4366314350587685250b3799f0629e75e6a9ec79db0d589849401019fd5074a4ae910fd665c2736974f4ada686655329136e385a46c82d6929b9e01babecb45e780d444855a521ddf1c0f8dae1c1db21a72af45b82ca64939150a87af4e9b1a6d4ed11d547076a93853935f4a12cb388d7fbc5c054353d9ea5ac028dc4a2613b28014f52eda3610347babb083372240b4253071b20862355629a52e9d6342febd19d4ed645fcd1e6f6a1ad089e0a93c079eaf573890e5844d2c94e40549cae5988d5e68a7b4d7ce9f0a6d8917678cc0b9e416e88c7155eadd5a2b2d5a032dc2e409c7f587aee7d641a0c9cdff084708c0066045674e59267ee7b6e3e127fbfe1f3451f4396f568cb46856da5ea6af1bc5698e49c216a897dfd07771d5c4ffcee4ca502fd8df2b81972e5cae58b59b9c7a3368e43f2f9e7c86d68995c536a91b990c87fe90dba70b1cbd3d2396a4291c3d555561f5ec1acbca8f4922083603c94fd0f41ef5b9392ce42a5535829de651bad14cb05914f0e31e3e606728b823dfdc091a3d8d427f7aefa21bbb59f67dbaf0d05ebb5a55d50dd06fbcc5dfefb41cea425c19559d4423fb13d3174a040c3cb7ec86e4cdfaa253031c0af1328ba1570684d2aa3d534a016416a188", 0x2000, &(0x7f0000004400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000044c0)={0x18, 0x0, 0x6, {0x200dd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 587.421457ms ago: executing program 5 (id=2165): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x8084) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1801000020000115053f88bafcdbdf2504"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 454.781594ms ago: executing program 6 (id=2166): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000440)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="b2", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="14"], 0x15, 0x4005850}}], 0x1, 0x20040045) 428.207934ms ago: executing program 5 (id=2167): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./gadget\x00', &(0x7f0000000e00)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000e40)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000e80)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./gadget/ep1in-bulk\x00', 0x2, 0x0) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) 404.916413ms ago: executing program 3 (id=2168): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) close(0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000001240), 0x220001, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000300)={r2, r0}, 0xc) 358.02602ms ago: executing program 1 (id=2169): r0 = syz_create_resource$binfmt(&(0x7f0000000080)='./file0\x00') openat$binfmt(0xffffff9c, r0, 0x41, 0x1ff) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x60840, 0x44) fcntl$setlease(r1, 0x400, 0x0) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') 310.092938ms ago: executing program 6 (id=2170): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x8040, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000340)={0xe2dd, "1803c8098021bc0000000000000000000000000000000000757fffffff00", 0xffffffffffffffff}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x80800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000200)={0x2, "fa02791d2a69a2610f020000000000000011000100e15ac64200000400", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000100)={"140fa8601d4586726d185805f1f682417e7185aff7201dc52b3227f4d3c384df", r3, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, 0x0) 294.649125ms ago: executing program 4 (id=2171): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x48800, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000240), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000280)) r2 = fanotify_init(0x8, 0x1) write$binfmt_elf64(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c4622"], 0x18) 278.645835ms ago: executing program 5 (id=2172): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x2004, 0x0, 0x1, 0x3, 0x0, 0x3}, 0x20) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) 233.110624ms ago: executing program 3 (id=2173): mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000006c0)='./dev\x00', &(0x7f0000000700)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./mnt\x00', 0x0) mount(&(0x7f0000000780)=@filename='./dev/sda1\x00', &(0x7f00000007c0)='./mnt\x00', &(0x7f0000000800)='ext4\x00', 0x8410, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./mnt\x00', 0xa0000, 0x14) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000880)=ANY=[@ANYBLOB="000000004c90020017000000030001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000cd00000000000000ffffffffffffffff00a7"]) 202.775612ms ago: executing program 1 (id=2174): ioperm(0x5, 0x81, 0xc) rt_sigprocmask(0x0, &(0x7f0000000400)={[0xfffff7feffff7ffc]}, 0x0, 0x8) r0 = gettid() tkill(r0, 0x12) io_setup(0x2, &(0x7f00000001c0)=0x0) io_pgetevents(r1, 0x3, 0x3, &(0x7f0000000200)=[{}, {}, {}], &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000380)={&(0x7f00000002c0)={[0x2368e8ff]}, 0x8}) 172.947708ms ago: executing program 6 (id=2175): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010001ffffff40460801100001010203010902270001010080fa0904000003ffffff00070581020002000705020200020007058303"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000940)={0x24, &(0x7f0000000700)={0x20, 0x22, 0x2, {0x2, 0x2}}, 0x0, 0x0, 0x0}, &(0x7f0000000b00)={0x2c, &(0x7f0000000980)={0x0, 0x5}, &(0x7f00000009c0)={0x0, 0xa, 0x1}, 0x0, &(0x7f0000000a40), 0x0}) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 115.293556ms ago: executing program 3 (id=2176): pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f0000000100)='./bus\x00', 0x141b42, 0xa) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x1000, 0x800000000000000) splice(r0, 0x0, r4, 0x0, 0x80, 0x8) write$tun(r1, &(0x7f0000000180)=ANY=[], 0x107c) 89.030206ms ago: executing program 4 (id=2177): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x0, 0x7fc00100}]}) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) r1 = fsopen(&(0x7f0000000080)='binfmt_misc\x00', 0x1) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000000c0), 0x14c98, &(0x7f0000002780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 76.37093ms ago: executing program 1 (id=2178): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x2, 0x4}, {0x0, 0x9}, {0xb, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 30.285711ms ago: executing program 1 (id=2179): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha512)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000004780)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)='2', 0x1}], 0x1, 0x0, 0x0, 0x4800}], 0x1, 0x40048000) accept4(r1, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=2180): socket$packet(0x11, 0x2, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./proc\x00', 0x777) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000580)='./proc\x00', &(0x7f00000005c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) write(r0, &(0x7f0000000640)='1', 0x1) kernel console output (not intermixed with test programs): 244.280520][T10021] ? __fget_files+0x34/0x3d0 [ 244.280537][T10021] ? find_held_lock+0x2b/0x80 [ 244.280557][T10021] ? __fget_files+0x21f/0x3d0 [ 244.280577][T10021] __sys_getsockopt+0x148/0x260 [ 244.280596][T10021] ? __x64_sys_getsockopt+0xbd/0x160 [ 244.280610][T10021] __x64_sys_getsockopt+0xbd/0x160 [ 244.280623][T10021] ? do_syscall_64+0xae/0x790 [ 244.280641][T10021] ? lockdep_hardirqs_on+0x7d/0x110 [ 244.280658][T10021] do_syscall_64+0x123/0x790 [ 244.280678][T10021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.280692][T10021] RIP: 0033:0x7f3ad3d9f559 [ 244.280703][T10021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.280715][T10021] RSP: 002b:00007f3ad4c3e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 244.280728][T10021] RAX: ffffffffffffffda RBX: 00007f3ad4025fa0 RCX: 00007f3ad3d9f559 [ 244.280737][T10021] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000004 [ 244.280744][T10021] RBP: 00007f3ad3e36b20 R08: 00002000000005c0 R09: 0000000000000000 [ 244.280752][T10021] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000000 [ 244.280760][T10021] R13: 00007f3ad4026038 R14: 00007f3ad4025fa0 R15: 00007ffe4d7fc138 [ 244.280778][T10021] [ 244.761054][T10013] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 244.884691][T10029] fuse: Bad value for 'fd' [ 245.299574][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 245.299587][ T29] audit: type=1326 audit(1792631924.483:2009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10045 comm="syz.5.1471" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf72f9f559 code=0x7ffc0000 [ 245.299753][ T29] audit: type=1326 audit(1792631924.483:2010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10045 comm="syz.5.1471" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf72f9f559 code=0x7ffc0000 [ 245.375557][ T29] audit: type=1326 audit(1792631924.563:2011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10045 comm="syz.5.1471" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fbf72f9f559 code=0x7ffc0000 [ 245.375593][ T29] audit: type=1326 audit(1792631924.563:2012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10045 comm="syz.5.1471" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf72f9f559 code=0x7ffc0000 [ 245.375625][ T29] audit: type=1326 audit(1792631924.563:2013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10045 comm="syz.5.1471" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf72f9f559 code=0x7ffc0000 [ 245.376625][ T29] audit: type=1326 audit(1792631924.563:2014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10045 comm="syz.5.1471" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbf72f9f559 code=0x7ffc0000 [ 245.377065][ T29] audit: type=1326 audit(1792631924.563:2015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10045 comm="syz.5.1471" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf72f9f559 code=0x7ffc0000 [ 245.378727][ T29] audit: type=1326 audit(1792631924.563:2016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10045 comm="syz.5.1471" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf72f9f559 code=0x7ffc0000 [ 245.556759][ T29] audit: type=1326 audit(1792631924.743:2017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10045 comm="syz.5.1471" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7fbf72f9f559 code=0x7ffc0000 [ 245.556812][ T29] audit: type=1326 audit(1792631924.743:2018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10045 comm="syz.5.1471" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf72f9f559 code=0x7ffc0000 [ 245.925303][T10058] netlink: zone id is out of range [ 245.925314][T10058] netlink: zone id is out of range [ 245.925318][T10058] netlink: zone id is out of range [ 245.925322][T10058] netlink: zone id is out of range [ 245.925326][T10058] netlink: zone id is out of range [ 245.925330][T10058] netlink: zone id is out of range [ 245.925334][T10058] netlink: zone id is out of range [ 246.069556][T10065] netlink: 'syz.3.1480': attribute type 15 has an invalid length. [ 246.158244][T10068] syz_tun: entered allmulticast mode [ 246.158821][T10068] syz_tun: left allmulticast mode [ 246.911143][ T5587] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 246.911361][ T5587] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 246.938911][ T5587] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 246.950777][ T5697] usb 2-1: USB disconnect, device number 20 [ 246.985039][ T5587] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 246.985168][ T5587] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 247.458961][T10120] overlayfs: failed to clone lowerpath [ 247.472707][T10120] overlayfs: failed to clone lowerpath [ 247.641799][ T5587] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 247.802546][ T5587] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 247.803299][ T5587] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 247.803315][ T5587] usb 2-1: config 0 has no interface number 0 [ 247.803337][ T5587] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 247.803351][ T5587] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 247.803365][ T5587] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 247.804499][ T5587] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 247.804515][ T5587] usb 2-1: Product: syz [ 247.804523][ T5587] usb 2-1: SerialNumber: syz [ 247.894839][ T5587] usb 2-1: config 0 descriptor?? [ 247.934647][ T5587] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 247.940133][ T5587] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input24 [ 248.342962][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 248.690649][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 248.690837][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 248.691008][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 248.691185][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 248.691357][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 248.692149][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 248.692399][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 248.692586][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 248.699691][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 248.699869][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 248.738213][ T5697] usb 2-1: USB disconnect, device number 21 [ 248.738263][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 248.806729][ T5697] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 249.719845][T10189] netlink: 768 bytes leftover after parsing attributes in process `syz.3.1530'. [ 250.536322][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 250.536339][ T29] audit: type=1400 audit(1792631929.723:2047): avc: denied { write } for pid=10209 comm="syz.5.1540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 250.992105][ T5697] libceph: connect (1)[c::]:6789 error -101 [ 250.992216][ T5697] libceph: mon0 (1)[c::]:6789 connect error [ 251.058690][ T189] libceph: connect (1)[c::]:6789 error -101 [ 251.058803][ T189] libceph: mon0 (1)[c::]:6789 connect error [ 251.167755][ T29] audit: type=1400 audit(1792631930.353:2048): avc: denied { create } for pid=10240 comm="syz.1.1552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 251.206174][ T29] audit: type=1400 audit(1792631930.393:2049): avc: denied { setopt } for pid=10240 comm="syz.1.1552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 251.242971][ T29] audit: type=1400 audit(1792631930.423:2050): avc: denied { write } for pid=10240 comm="syz.1.1552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 251.312437][ T5587] libceph: connect (1)[c::]:6789 error -101 [ 251.312556][ T5587] libceph: mon0 (1)[c::]:6789 connect error [ 251.312764][ T5587] libceph: connect (1)[c::]:6789 error -101 [ 251.312851][ T5587] libceph: mon0 (1)[c::]:6789 connect error [ 251.356452][T10244] net_ratelimit: 4 callbacks suppressed [ 251.356467][T10244] ip_tables: iptables: counters copy to user failed while replacing table [ 251.416483][ T29] audit: type=1400 audit(1792631930.603:2051): avc: denied { mounton } for pid=10246 comm="syz.4.1555" path="/381/file0" dev="tmpfs" ino=2028 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 251.416725][T10247] fuse: Bad value for 'fd' [ 251.463362][ T29] audit: type=1400 audit(1792631930.653:2052): avc: denied { watch_mount } for pid=10248 comm="syz.1.1556" path="/251/file0" dev="tmpfs" ino=1352 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 251.588478][T10252] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 251.631116][ T29] audit: type=1400 audit(1792631930.813:2053): avc: denied { read } for pid=10253 comm="syz.1.1558" name="/" dev="configfs" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 251.631152][ T29] audit: type=1400 audit(1792631930.813:2054): avc: denied { read open } for pid=10253 comm="syz.1.1558" path="/" dev="configfs" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 251.778658][T10233] ceph: No mds server is up or the cluster is laggy [ 251.779121][T10230] ceph: No mds server is up or the cluster is laggy [ 251.826348][ T5587] libceph: connect (1)[c::]:6789 error -101 [ 251.826456][ T5587] libceph: mon0 (1)[c::]:6789 connect error [ 251.826664][ T5587] libceph: connect (1)[c::]:6789 error -101 [ 251.826755][ T5587] libceph: mon0 (1)[c::]:6789 connect error [ 252.413336][T10275] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 252.675537][T10287] netlink: 'syz.6.1573': attribute type 1 has an invalid length. [ 252.744596][T10287] 8021q: adding VLAN 0 to HW filter on device bond3 [ 252.786391][T10291] bond3: (slave geneve2): making interface the new active one [ 252.805110][T10291] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 253.429047][T10311] FAULT_INJECTION: forcing a failure. [ 253.429047][T10311] name failslab, interval 1, probability 0, space 0, times 0 [ 253.429073][T10311] CPU: 0 UID: 0 PID: 10311 Comm: syz.4.1585 Tainted: G L syzkaller #0 PREEMPT(full) [ 253.429091][T10311] Tainted: [L]=SOFTLOCKUP [ 253.429096][T10311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 253.429104][T10311] Call Trace: [ 253.429110][T10311] [ 253.429115][T10311] dump_stack_lvl+0x100/0x190 [ 253.429139][T10311] should_fail_ex.cold+0x5/0xa [ 253.429160][T10311] should_failslab+0xc2/0x120 [ 253.429178][T10311] kmem_cache_alloc_noprof+0x92/0x6a0 [ 253.429193][T10311] ? __kernfs_new_node+0xd2/0xa10 [ 253.429211][T10311] __kernfs_new_node+0xd2/0xa10 [ 253.429223][T10311] ? __lock_acquire+0x5c0/0x1f40 [ 253.429237][T10311] ? __pfx___kernfs_new_node+0x10/0x10 [ 253.429252][T10311] ? lock_acquire+0x1d1/0x380 [ 253.429264][T10311] ? kernfs_root+0x23/0x2a0 [ 253.429276][T10311] ? find_held_lock+0x2b/0x80 [ 253.429293][T10311] ? kernfs_root+0xee/0x2a0 [ 253.429303][T10311] ? kernfs_root+0xee/0x2a0 [ 253.429325][T10311] kernfs_new_node+0x194/0x200 [ 253.429341][T10311] ? __pfx_kernfs_new_node+0x10/0x10 [ 253.429356][T10311] ? __pfx_map_id_range_down+0x10/0x10 [ 253.429370][T10311] ? kernfs_root+0xee/0x2a0 [ 253.429385][T10311] __kernfs_create_file+0x53/0x350 [ 253.429404][T10311] sysfs_add_file_mode_ns+0x207/0x3c0 [ 253.429427][T10311] sysfs_merge_group+0x194/0x340 [ 253.429440][T10311] ? __pfx_sysfs_merge_group+0x10/0x10 [ 253.429452][T10311] ? bus_add_device+0x2e2/0x6c0 [ 253.429471][T10311] ? __pfx_bus_add_device+0x10/0x10 [ 253.429488][T10311] ? __pfx_dev_add_physical_location+0x10/0x10 [ 253.429509][T10311] dpm_sysfs_add+0x237/0x280 [ 253.429525][T10311] device_add+0x9f4/0x1970 [ 253.429542][T10311] ? __pfx_device_add+0x10/0x10 [ 253.429557][T10311] ? lockdep_init_map_type+0x5c/0x250 [ 253.429570][T10311] ? __init_waitqueue_head+0xca/0x150 [ 253.429588][T10311] netdev_register_kobject+0x1df/0x410 [ 253.429609][T10311] register_netdevice+0x15b1/0x25a0 [ 253.429629][T10311] ? __pfx_register_netdevice+0x10/0x10 [ 253.429646][T10311] ? dev_addr_mod+0x14f/0x2c0 [ 253.429667][T10311] ip6gre_newlink_common.isra.0+0x153/0x350 [ 253.429684][T10311] ? __pfx_ip6gre_newlink_common.isra.0+0x10/0x10 [ 253.429702][T10311] ? lockdep_rtnl_is_held+0x26/0x40 [ 253.429714][T10311] ? ip6gre_tunnel_find+0x36c/0x430 [ 253.429732][T10311] ip6gre_newlink+0x17d/0x420 [ 253.429751][T10311] ? __pfx_ip6gre_newlink+0x10/0x10 [ 253.429767][T10311] rtnl_newlink+0x1697/0x2620 [ 253.429789][T10311] ? __pfx_rtnl_newlink+0x10/0x10 [ 253.429803][T10311] ? avc_has_perm_noaudit+0x56/0x470 [ 253.429817][T10311] ? find_held_lock+0x2b/0x80 [ 253.429835][T10311] ? avc_has_perm_noaudit+0x11e/0x470 [ 253.429847][T10311] ? avc_has_perm_noaudit+0x11e/0x470 [ 253.429877][T10311] ? lock_acquire+0x1d1/0x380 [ 253.429888][T10311] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 253.429904][T10311] ? find_held_lock+0x2b/0x80 [ 253.429920][T10311] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 253.429935][T10311] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 253.429952][T10311] ? __pfx_rtnl_newlink+0x10/0x10 [ 253.429968][T10311] rtnetlink_rcv_msg+0x95e/0xe90 [ 253.429985][T10311] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 253.430006][T10311] ? ref_tracker_free+0x37e/0x6c0 [ 253.430023][T10311] netlink_rcv_skb+0x159/0x420 [ 253.430037][T10311] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 253.430054][T10311] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 253.430073][T10311] ? netlink_deliver_tap+0x1ae/0xcc0 [ 253.430089][T10311] netlink_unicast+0x65f/0x950 [ 253.430105][T10311] ? __pfx_netlink_unicast+0x10/0x10 [ 253.430123][T10311] netlink_sendmsg+0x9ac/0x10c0 [ 253.430140][T10311] ? __pfx_netlink_sendmsg+0x10/0x10 [ 253.430161][T10311] ? selinux_socket_sendmsg+0x198/0x2f0 [ 253.430178][T10311] ? ____sys_sendmsg+0xa4d/0xbe0 [ 253.430195][T10311] ____sys_sendmsg+0xa4d/0xbe0 [ 253.430213][T10311] ? __pfx_netlink_sendmsg+0x10/0x10 [ 253.430228][T10311] ? __pfx_____sys_sendmsg+0x10/0x10 [ 253.430253][T10311] ___sys_sendmsg+0x190/0x1e0 [ 253.430272][T10311] ? __pfx____sys_sendmsg+0x10/0x10 [ 253.430291][T10311] ? futex_wait+0x11e/0x370 [ 253.430309][T10311] ? find_held_lock+0x2b/0x80 [ 253.430342][T10311] __sys_sendmsg+0x160/0x210 [ 253.430359][T10311] ? __pfx___sys_sendmsg+0x10/0x10 [ 253.430384][T10311] do_syscall_64+0x123/0x790 [ 253.430406][T10311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.430419][T10311] RIP: 0033:0x7f3ad3d9f559 [ 253.430431][T10311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.430443][T10311] RSP: 002b:00007f3ad4c3e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 253.430456][T10311] RAX: ffffffffffffffda RBX: 00007f3ad4025fa0 RCX: 00007f3ad3d9f559 [ 253.430465][T10311] RDX: 0000000020040040 RSI: 0000200000000000 RDI: 0000000000000004 [ 253.430472][T10311] RBP: 00007f3ad3e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 253.430480][T10311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 253.430488][T10311] R13: 00007f3ad4026038 R14: 00007f3ad4025fa0 R15: 00007ffe4d7fc138 [ 253.430507][T10311] [ 254.241937][ T29] audit: type=1400 audit(1792631933.423:2055): avc: denied { read write } for pid=10325 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 254.241972][ T29] audit: type=1400 audit(1792631933.423:2056): avc: denied { open } for pid=10325 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 254.382978][ T5601] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 254.388269][ T5601] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 254.388903][ T5601] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 254.389392][ T5601] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 254.389704][ T5601] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 254.620301][T10337] FAULT_INJECTION: forcing a failure. [ 254.620301][T10337] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 254.620326][T10337] CPU: 0 UID: 0 PID: 10337 Comm: syz.1.1592 Tainted: G L syzkaller #0 PREEMPT(full) [ 254.620344][T10337] Tainted: [L]=SOFTLOCKUP [ 254.620348][T10337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 254.620356][T10337] Call Trace: [ 254.620360][T10337] [ 254.620366][T10337] dump_stack_lvl+0x100/0x190 [ 254.620389][T10337] should_fail_ex.cold+0x5/0xa [ 254.620409][T10337] _copy_from_iter+0x43a/0x1690 [ 254.620430][T10337] ? __pfx__copy_from_iter+0x10/0x10 [ 254.620456][T10337] vhost_chr_write_iter+0xcb/0x1240 [ 254.620468][T10337] ? futex_unqueue+0x133/0x2c0 [ 254.620484][T10337] ? futex_unqueue+0x133/0x2c0 [ 254.620501][T10337] ? __pfx_vhost_chr_write_iter+0x10/0x10 [ 254.620526][T10337] ? copy_iovec_from_user+0x102/0x140 [ 254.620544][T10337] do_iter_readv_writev+0x6f7/0x930 [ 254.620559][T10337] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 254.620571][T10337] ? selinux_file_permission+0x30/0x6a0 [ 254.620590][T10337] ? bpf_lsm_file_permission+0x9/0x10 [ 254.620607][T10337] ? security_file_permission+0x76/0x210 [ 254.620626][T10337] ? rw_verify_area+0xce/0x6d0 [ 254.620639][T10337] vfs_writev+0x360/0xdd0 [ 254.620652][T10337] ? __lock_acquire+0x5c0/0x1f40 [ 254.620667][T10337] ? __pfx_vfs_writev+0x10/0x10 [ 254.620683][T10337] ? lock_acquire+0x1d1/0x380 [ 254.620694][T10337] ? __fget_files+0x34/0x3d0 [ 254.620716][T10337] ? __fget_files+0x21f/0x3d0 [ 254.620736][T10337] ? do_writev+0x13e/0x340 [ 254.620747][T10337] do_writev+0x13e/0x340 [ 254.620760][T10337] ? __pfx_do_writev+0x10/0x10 [ 254.620777][T10337] do_syscall_64+0x123/0x790 [ 254.620798][T10337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.620810][T10337] RIP: 0033:0x7f873bd9f559 [ 254.620821][T10337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.620832][T10337] RSP: 002b:00007f873cd54028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 254.620844][T10337] RAX: ffffffffffffffda RBX: 00007f873c025fa0 RCX: 00007f873bd9f559 [ 254.620852][T10337] RDX: 0000000000000003 RSI: 0000200000001ec0 RDI: 0000000000000003 [ 254.620859][T10337] RBP: 00007f873be36b20 R08: 0000000000000000 R09: 0000000000000000 [ 254.620866][T10337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.620873][T10337] R13: 00007f873c026038 R14: 00007f873c025fa0 R15: 00007ffdee361848 [ 254.620890][T10337] [ 255.077762][T10342] pimreg: entered allmulticast mode [ 255.097249][T10339] pimreg: left allmulticast mode [ 255.380285][T10352] fuse: Bad value for 'fd' [ 255.392362][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.392397][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.392663][ T1308] aoe: packet could not be sent on lowpan0. consider increasing tx_queue_len [ 255.708047][T10363] ip_tables: iptables: counters copy to user failed while replacing table [ 255.865978][ T29] audit: type=1326 audit(1792631935.053:2057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10365 comm="syz.5.1601" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbf72f9f559 code=0x0 [ 255.956053][T10325] rxe_eth0 speed is unknown, defaulting to 1000 [ 256.110002][T10380] overlayfs: failed to clone upperpath [ 256.501724][ T5601] Bluetooth: hci0: command tx timeout [ 257.776950][T10425] FAULT_INJECTION: forcing a failure. [ 257.776950][T10425] name failslab, interval 1, probability 0, space 0, times 0 [ 257.776977][T10425] CPU: 0 UID: 0 PID: 10425 Comm: syz.4.1619 Tainted: G L syzkaller #0 PREEMPT(full) [ 257.776996][T10425] Tainted: [L]=SOFTLOCKUP [ 257.777001][T10425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 257.777009][T10425] Call Trace: [ 257.777014][T10425] [ 257.777019][T10425] dump_stack_lvl+0x100/0x190 [ 257.777043][T10425] should_fail_ex.cold+0x5/0xa [ 257.777062][T10425] should_failslab+0xc2/0x120 [ 257.777079][T10425] kmem_cache_alloc_noprof+0x92/0x6a0 [ 257.777095][T10425] ? inet_bind2_bucket_create+0x36/0x5f0 [ 257.777112][T10425] inet_bind2_bucket_create+0x36/0x5f0 [ 257.777127][T10425] __inet_hash_connect+0x1522/0x2000 [ 257.777147][T10425] ? __pfx___inet6_check_established+0x10/0x10 [ 257.777163][T10425] ? __pfx___inet_hash_connect+0x10/0x10 [ 257.777176][T10425] ? inet6_ehashfn+0x25/0x3e0 [ 257.777189][T10425] ? inet6_hash_connect+0xe7/0x180 [ 257.777204][T10425] tcp_v6_connect+0x166f/0x2660 [ 257.777225][T10425] ? __pfx_tcp_v6_connect+0x10/0x10 [ 257.777247][T10425] __inet_stream_connect+0x208/0xff0 [ 257.777271][T10425] ? __pfx___inet_stream_connect+0x10/0x10 [ 257.777290][T10425] ? kasan_save_track+0x14/0x30 [ 257.777304][T10425] ? __kasan_kmalloc+0xaa/0xb0 [ 257.777319][T10425] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 257.777331][T10425] ? tcp_sendmsg_fastopen+0x24d/0x750 [ 257.777347][T10425] tcp_sendmsg_fastopen+0x3ed/0x750 [ 257.777364][T10425] tcp_sendmsg_locked+0x27da/0x4420 [ 257.777380][T10425] ? __lock_acquire+0x5c0/0x1f40 [ 257.777396][T10425] ? reacquire_held_locks+0xdd/0x1f0 [ 257.777409][T10425] ? release_sock+0x21/0x280 [ 257.777423][T10425] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 257.777436][T10425] ? lock_acquire+0x1d1/0x380 [ 257.777448][T10425] ? do_raw_spin_lock+0x128/0x260 [ 257.777462][T10425] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 257.777481][T10425] ? __local_bh_enable_ip+0xa5/0x120 [ 257.777495][T10425] tcp_sendmsg+0x2e/0x50 [ 257.777506][T10425] ? __pfx_tcp_sendmsg+0x10/0x10 [ 257.777519][T10425] inet6_sendmsg+0xb9/0x140 [ 257.777532][T10425] __sys_sendto+0x36d/0x4e0 [ 257.777547][T10425] ? __pfx___sys_sendto+0x10/0x10 [ 257.777564][T10425] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 257.777590][T10425] ? xfd_validate_state+0x129/0x190 [ 257.777608][T10425] __x64_sys_sendto+0xe0/0x1c0 [ 257.777620][T10425] ? do_syscall_64+0xae/0x790 [ 257.777638][T10425] ? lockdep_hardirqs_on+0x7d/0x110 [ 257.777656][T10425] do_syscall_64+0x123/0x790 [ 257.777675][T10425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.777688][T10425] RIP: 0033:0x7f3ad3d9f559 [ 257.777700][T10425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.777712][T10425] RSP: 002b:00007f3ad4c3e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 257.777725][T10425] RAX: ffffffffffffffda RBX: 00007f3ad4025fa0 RCX: 00007f3ad3d9f559 [ 257.777733][T10425] RDX: 0000000000000091 RSI: 0000000000000000 RDI: 0000000000000003 [ 257.777740][T10425] RBP: 00007f3ad3e36b20 R08: 00002000000001c0 R09: 000000000000001c [ 257.777748][T10425] R10: 0000000024000045 R11: 0000000000000246 R12: 0000000000000000 [ 257.777756][T10425] R13: 00007f3ad4026038 R14: 00007f3ad4025fa0 R15: 00007ffe4d7fc138 [ 257.777774][T10425] [ 258.213732][ T29] audit: type=1400 audit(1792631937.403:2058): avc: denied { write } for pid=10395 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 258.260793][T10325] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.260854][T10325] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.260954][T10325] bridge_slave_0: entered allmulticast mode [ 258.295948][T10325] bridge_slave_0: entered promiscuous mode [ 258.314189][T10325] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.314242][T10325] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.314342][T10325] bridge_slave_1: entered allmulticast mode [ 258.346389][T10325] bridge_slave_1: entered promiscuous mode [ 258.473400][T10325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.515015][T10325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.581830][ T5601] Bluetooth: hci0: command tx timeout [ 258.684691][T10325] team0: Port device team_slave_0 added [ 258.714352][T10325] team0: Port device team_slave_1 added [ 258.750484][ T29] audit: type=1400 audit(1792631937.933:2059): avc: denied { write } for pid=10436 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 258.880268][T10325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.880281][T10325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 258.880296][T10325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.940317][T10325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.940330][T10325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 258.940346][T10325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.188367][T10325] hsr_slave_0: entered promiscuous mode [ 259.208309][T10325] hsr_slave_1: entered promiscuous mode [ 259.208666][T10325] debugfs: 'hsr0' already exists in 'hsr' [ 259.208678][T10325] Cannot create hsr debugfs directory [ 259.408961][T10455] netlink: 'syz.6.1628': attribute type 1 has an invalid length. [ 259.516038][T10455] 8021q: adding VLAN 0 to HW filter on device bond4 [ 259.625973][T10459] 8021q: adding VLAN 0 to HW filter on device bond4 [ 259.626173][T10459] bond4: (slave xfrm1): The slave device specified does not support setting the MAC address [ 259.626416][T10459] bond4: (slave xfrm1): Error -95 calling set_mac_address [ 259.764753][T10465] netlink: 'syz.1.1631': attribute type 20 has an invalid length. [ 259.764768][T10465] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1631'. [ 259.806529][T10465] netlink: 'syz.1.1631': attribute type 20 has an invalid length. [ 259.806545][T10465] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1631'. [ 259.921782][ T49] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.921812][ T49] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.921831][ T49] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.921855][ T49] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.282441][T10473] rxe_eth0 speed is unknown, defaulting to 1000 [ 260.328950][ T29] audit: type=1400 audit(1792631939.513:2060): avc: denied { read } for pid=10481 comm="syz.4.1635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 260.551344][ T29] audit: type=1400 audit(1792631939.733:2061): avc: denied { write } for pid=10450 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 260.663888][ T5601] Bluetooth: hci0: command tx timeout [ 260.975654][ T29] audit: type=1400 audit(1792631940.163:2062): avc: denied { write } for pid=10497 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 261.004244][ T5697] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 261.089007][T10325] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.089032][T10325] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.164628][ T5697] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 261.166908][ T5697] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 261.166929][ T5697] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 261.166952][ T5697] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.221223][T10493] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 261.244152][ T5697] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 261.616916][ T5697] usb 2-1: USB disconnect, device number 22 [ 261.653345][T10325] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.653369][T10325] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.900105][T10325] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.900128][T10325] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.019866][T10325] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 262.019892][T10325] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.126091][ T29] audit: type=1326 audit(1792631941.313:2063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10506 comm="syz.4.1641" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad3d9f559 code=0x7ffc0000 [ 262.126128][ T29] audit: type=1326 audit(1792631941.313:2064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10506 comm="syz.4.1641" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad3d9f559 code=0x7ffc0000 [ 262.130984][ T29] audit: type=1326 audit(1792631941.313:2065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10506 comm="syz.4.1641" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad3d9f559 code=0x7ffc0000 [ 262.131019][ T29] audit: type=1326 audit(1792631941.313:2066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10506 comm="syz.4.1641" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad3d9f559 code=0x7ffc0000 [ 262.191730][ T29] audit: type=1326 audit(1792631941.383:2067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10506 comm="syz.4.1641" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f3ad3d9f559 code=0x7ffc0000 [ 262.191764][ T29] audit: type=1326 audit(1792631941.383:2068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10506 comm="syz.4.1641" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad3d9f559 code=0x7ffc0000 [ 262.191789][ T29] audit: type=1326 audit(1792631941.383:2069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10506 comm="syz.4.1641" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad3d9f559 code=0x7ffc0000 [ 262.250535][ T29] audit: type=1326 audit(1792631941.443:2070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10506 comm="syz.4.1641" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad3d9f559 code=0x7ffc0000 [ 262.250571][ T29] audit: type=1326 audit(1792631941.443:2071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10506 comm="syz.4.1641" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad3d9f559 code=0x7ffc0000 [ 262.414926][T10509] fuse: Bad value for 'fd' [ 262.741775][ T5601] Bluetooth: hci0: command tx timeout [ 262.884266][T10517] overlayfs: failed to clone upperpath [ 263.291196][T10524] overlayfs: failed to clone upperpath [ 263.476614][T10325] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 263.535054][T10325] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 263.535560][T10325] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 263.575247][T10325] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 263.579526][T10325] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 263.639901][T10325] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 263.640446][T10325] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 263.670804][T10325] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 263.750664][T10547] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 263.750682][T10547] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 263.750694][T10547] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x78a4 instead [ 263.791457][T10547] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xeeb3 instead [ 263.791476][T10547] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 263.791486][T10547] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 263.791496][T10547] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 263.791515][T10547] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 263.791534][T10547] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 263.791553][T10547] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 263.791563][T10547] jffs2: Further such events for this erase block will not be printed [ 263.791796][T10547] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 263.791807][T10547] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 263.791818][T10547] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x78a4 instead [ 263.791830][T10547] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xeeb3 instead [ 263.791839][T10547] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 263.791848][T10547] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 263.791858][T10547] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 263.791871][T10547] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 263.791890][T10547] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 263.791910][T10547] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 263.791920][T10547] jffs2: Further such events for this erase block will not be printed [ 263.792156][T10547] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 263.792162][T10547] jffs2: empty_blocks 30, bad_blocks 0, c->nr_blocks 32 [ 264.307251][T10553] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1656'. [ 264.359005][T10325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.414401][T10325] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.457117][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.457184][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.480351][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.480415][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.741140][T10325] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 265.267929][T10593] netlink: 'syz.4.1671': attribute type 1 has an invalid length. [ 265.327842][T10593] bond2: entered promiscuous mode [ 265.328830][T10593] 8021q: adding VLAN 0 to HW filter on device bond2 [ 265.399144][T10597] bond2: (slave veth3): making interface the new active one [ 265.399168][T10597] veth3: entered promiscuous mode [ 265.416127][T10597] bond2: (slave veth3): Enslaving as an active interface with an up link [ 265.679694][T10596] rxe_eth0 speed is unknown, defaulting to 1000 [ 266.167068][T10621] CIFS: Attempting to mount //127.0.0.1/share [ 266.167340][ T59] CIFS: VFS: smbdirect_connect_resolve_route:119 rdma_resolve_route() failed -ENODEV [ 266.167356][ T59] CIFS: VFS: smbdirect_connect_rdma_event_handler:313 smbdirect_socket_schedule_cleanup(-ENODEV) called from smbdirect_connect_rdma_event_handler in line=313 status=RESOLVE_ROUTE_RUNNING [ 266.210140][T10621] CIFS: VFS: _smbd_get_connection:326 connect to 127.0.0.1:5445 failed: -ENODEV [ 266.292158][ T59] CIFS: VFS: smbdirect_connect_resolve_route:119 rdma_resolve_route() failed -ENODEV [ 266.292176][ T59] CIFS: VFS: smbdirect_connect_rdma_event_handler:313 smbdirect_socket_schedule_cleanup(-ENODEV) called from smbdirect_connect_rdma_event_handler in line=313 status=RESOLVE_ROUTE_RUNNING [ 266.296047][T10621] CIFS: VFS: _smbd_get_connection:326 connect to 127.0.0.1:445 failed: -ENODEV [ 266.296191][T10621] CIFS: VFS: cifs_mount failed w/return code = -2 [ 266.538868][T10325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.762773][ T5587] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 266.927035][ T5587] usb 2-1: Using ep0 maxpacket: 32 [ 266.947105][ T5587] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 266.960960][ T5587] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.008004][ T5587] usb 2-1: config 0 descriptor?? [ 267.074254][T10325] veth0_vlan: entered promiscuous mode [ 267.109449][T10325] veth1_vlan: entered promiscuous mode [ 267.246957][ T5587] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 267.271914][T10325] veth0_macvtap: entered promiscuous mode [ 267.279978][T10639] netlink: 'syz.5.1687': attribute type 1 has an invalid length. [ 267.302759][ T5587] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 267.304904][ T5587] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 267.304934][ T5587] usb 2-1: media controller created [ 267.375667][ T5587] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 267.538069][T10639] bond3: entered promiscuous mode [ 267.540116][T10639] 8021q: adding VLAN 0 to HW filter on device bond3 [ 267.683989][T10641] bond3: (slave veth3): making interface the new active one [ 267.684020][T10641] veth3: entered promiscuous mode [ 267.684584][T10641] bond3: (slave veth3): Enslaving as an active interface with an up link [ 267.722852][T10325] veth1_macvtap: entered promiscuous mode [ 267.797572][T10325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.821017][T10325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.916507][ T42] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.916585][ T42] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.916604][ T42] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.916623][ T42] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.990675][ T5587] az6027: usb out operation failed. (-71) [ 267.990687][ T5587] stb0899_attach: Driver disabled by Kconfig [ 267.990693][ T5587] az6027: no front-end attached [ 267.990693][ T5587] [ 267.990968][ T5587] az6027: usb out operation failed. (-71) [ 267.990976][ T5587] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 268.043977][ T5587] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input25 [ 268.077510][ T5587] dvb-usb: schedule remote query interval to 400 msecs. [ 268.077526][ T5587] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 268.166465][ T5587] usb 2-1: USB disconnect, device number 23 [ 268.353359][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.353375][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.360595][ T5587] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 268.558901][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.558915][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.583726][ T29] kauditd_printk_skb: 1285 callbacks suppressed [ 268.583738][ T29] audit: type=1400 audit(1792631947.773:3357): avc: denied { mounton } for pid=10325 comm="syz-executor" path="/root/syzkaller.N85z05/syz-tmp" dev="sda1" ino=2052 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 268.708426][ T29] audit: type=1400 audit(1792631947.893:3358): avc: denied { ioctl } for pid=10659 comm="syz.4.1695" path="socket:[28601]" dev="sockfs" ino=28601 ioctlcmd=0x89eb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 268.806684][T10662] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check. [ 268.851269][T10664] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check. [ 269.125153][T10677] netlink: 'syz.1.1700': attribute type 1 has an invalid length. [ 269.171742][ T5697] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 269.198358][T10677] bond0: entered promiscuous mode [ 269.200295][T10677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.304482][T10682] bond0: (slave veth3): making interface the new active one [ 269.304500][T10682] veth3: entered promiscuous mode [ 269.304950][T10682] bond0: (slave veth3): Enslaving as an active interface with an up link [ 269.337726][ T5697] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 269.350324][ T5697] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 269.350343][ T5697] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 269.350357][ T5697] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 269.350370][ T5697] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 269.408289][ T5697] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.408308][ T5697] usb 4-1: Product: syz [ 269.408317][ T5697] usb 4-1: Manufacturer: syz [ 269.408327][ T5697] usb 4-1: SerialNumber: syz [ 269.440574][ T5697] usb 4-1: config 0 descriptor?? [ 269.464524][ T5697] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 269.706144][ T5697] scsi host1: usb-storage 4-1:0.0 [ 269.856834][ T29] audit: type=1400 audit(1792631949.043:3359): avc: denied { connect } for pid=10691 comm="syz.6.1704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 269.964350][ T5697] usb 4-1: USB disconnect, device number 15 [ 270.996761][T10718] FAULT_INJECTION: forcing a failure. [ 270.996761][T10718] name failslab, interval 1, probability 0, space 0, times 0 [ 270.996788][T10718] CPU: 0 UID: 0 PID: 10718 Comm: syz.3.1717 Tainted: G L syzkaller #0 PREEMPT(full) [ 270.996806][T10718] Tainted: [L]=SOFTLOCKUP [ 270.996811][T10718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 270.996818][T10718] Call Trace: [ 270.996822][T10718] [ 270.996827][T10718] dump_stack_lvl+0x100/0x190 [ 270.996855][T10718] should_fail_ex.cold+0x5/0xa [ 270.996874][T10718] should_failslab+0xc2/0x120 [ 270.996898][T10718] __kmalloc_cache_noprof+0x91/0x6d0 [ 270.996911][T10718] ? alloc_ucounts+0x13d/0x5c0 [ 270.996931][T10718] alloc_ucounts+0x13d/0x5c0 [ 270.996946][T10718] ? __pfx_alloc_ucounts+0x10/0x10 [ 270.996966][T10718] set_cred_ucounts+0xcd/0x200 [ 270.996985][T10718] __sys_setreuid+0x559/0xab0 [ 270.997000][T10718] do_syscall_64+0x123/0x790 [ 270.997020][T10718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.997033][T10718] RIP: 0033:0x7feb8bb9f559 [ 270.997044][T10718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.997056][T10718] RSP: 002b:00007feb8ca98028 EFLAGS: 00000246 ORIG_RAX: 0000000000000071 [ 270.997068][T10718] RAX: ffffffffffffffda RBX: 00007feb8be25fa0 RCX: 00007feb8bb9f559 [ 270.997076][T10718] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee00 [ 270.997090][T10718] RBP: 00007feb8bc36b20 R08: 0000000000000000 R09: 0000000000000000 [ 270.997098][T10718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 270.997105][T10718] R13: 00007feb8be26038 R14: 00007feb8be25fa0 R15: 00007ffd00071348 [ 270.997123][T10718] [ 271.915449][T10756] gre3: entered promiscuous mode [ 271.915466][T10756] gre3: entered allmulticast mode [ 272.397670][T10770] FAULT_INJECTION: forcing a failure. [ 272.397670][T10770] name failslab, interval 1, probability 0, space 0, times 0 [ 272.397694][T10770] CPU: 0 UID: 0 PID: 10770 Comm: syz.4.1740 Tainted: G L syzkaller #0 PREEMPT(full) [ 272.397712][T10770] Tainted: [L]=SOFTLOCKUP [ 272.397717][T10770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 272.397725][T10770] Call Trace: [ 272.397729][T10770] [ 272.397735][T10770] dump_stack_lvl+0x100/0x190 [ 272.397759][T10770] should_fail_ex.cold+0x5/0xa [ 272.397778][T10770] should_failslab+0xc2/0x120 [ 272.397795][T10770] __kmalloc_noprof+0xfc/0x840 [ 272.397811][T10770] ? x509_key_preparse+0x22b/0x9c0 [ 272.397831][T10770] x509_key_preparse+0x22b/0x9c0 [ 272.397850][T10770] asymmetric_key_preparse+0xce/0x1d0 [ 272.397863][T10770] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 272.397878][T10770] __key_create_or_update+0x40e/0xe20 [ 272.397899][T10770] ? __pfx___key_create_or_update+0x10/0x10 [ 272.397918][T10770] ? lookup_user_key+0x3ee/0x1300 [ 272.397943][T10770] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 272.397963][T10770] key_create_or_update+0x42/0x60 [ 272.397983][T10770] __do_sys_add_key+0x2e8/0x460 [ 272.397997][T10770] ? __pfx___do_sys_add_key+0x10/0x10 [ 272.398017][T10770] do_syscall_64+0x123/0x790 [ 272.398038][T10770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.398050][T10770] RIP: 0033:0x7f3ad3d9f559 [ 272.398062][T10770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.398073][T10770] RSP: 002b:00007f3ad4c3e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 272.398085][T10770] RAX: ffffffffffffffda RBX: 00007f3ad4025fa0 RCX: 00007f3ad3d9f559 [ 272.398093][T10770] RDX: 0000200000000a00 RSI: 0000000000000000 RDI: 0000200000000580 [ 272.398101][T10770] RBP: 00007f3ad3e36b20 R08: fffffffffffffffd R09: 0000000000000000 [ 272.398108][T10770] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 272.398115][T10770] R13: 00007f3ad4026038 R14: 00007f3ad4025fa0 R15: 00007ffe4d7fc138 [ 272.398132][T10770] [ 273.534654][ T29] audit: type=1326 audit(1792631952.723:3360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10808 comm="syz.3.1759" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb8bb9f559 code=0x7ffc0000 [ 273.537557][ T29] audit: type=1326 audit(1792631952.723:3361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10808 comm="syz.3.1759" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb8bb9f559 code=0x7ffc0000 [ 273.540283][ T29] audit: type=1326 audit(1792631952.723:3362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10808 comm="syz.3.1759" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7feb8bb9f559 code=0x7ffc0000 [ 273.540314][ T29] audit: type=1326 audit(1792631952.723:3363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10808 comm="syz.3.1759" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb8bb9f559 code=0x7ffc0000 [ 273.540340][ T29] audit: type=1326 audit(1792631952.723:3364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10808 comm="syz.3.1759" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb8bb9f559 code=0x7ffc0000 [ 273.600148][ T29] audit: type=1326 audit(1792631952.793:3365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10808 comm="syz.3.1759" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7feb8bb9f559 code=0x7ffc0000 [ 273.600184][ T29] audit: type=1326 audit(1792631952.793:3366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10808 comm="syz.3.1759" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb8bb9f559 code=0x7ffc0000 [ 273.691329][ T29] audit: type=1326 audit(1792631952.793:3367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10808 comm="syz.3.1759" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb8bb9f559 code=0x7ffc0000 [ 273.691365][ T29] audit: type=1326 audit(1792631952.883:3368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10808 comm="syz.3.1759" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feb8bb9f559 code=0x7ffc0000 [ 273.691453][ T29] audit: type=1326 audit(1792631952.883:3369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10808 comm="syz.3.1759" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb8bb9f559 code=0x7ffc0000 [ 273.691479][ T29] audit: type=1326 audit(1792631952.883:3370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10808 comm="syz.3.1759" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb8bb9f559 code=0x7ffc0000 [ 273.809478][ T29] audit: type=1326 audit(1792631953.003:3371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10808 comm="syz.3.1759" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7feb8bb9f559 code=0x7ffc0000 [ 273.809516][ T29] audit: type=1326 audit(1792631953.003:3372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10808 comm="syz.3.1759" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb8bb9f559 code=0x7ffc0000 [ 273.809542][ T29] audit: type=1326 audit(1792631953.003:3373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10808 comm="syz.3.1759" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb8bb9f559 code=0x7ffc0000 [ 273.868038][ T29] audit: type=1326 audit(1792631953.033:3374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10808 comm="syz.3.1759" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7feb8bb9f559 code=0x7ffc0000 [ 274.140716][T10821] netlink: 'syz.1.1763': attribute type 1 has an invalid length. [ 274.210271][T10821] 8021q: adding VLAN 0 to HW filter on device bond1 [ 274.255747][T10818] lo: entered promiscuous mode [ 274.361578][ T5587] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 274.472819][T10833] FAULT_INJECTION: forcing a failure. [ 274.472819][T10833] name failslab, interval 1, probability 0, space 0, times 0 [ 274.472843][T10833] CPU: 0 UID: 0 PID: 10833 Comm: syz.1.1769 Tainted: G L syzkaller #0 PREEMPT(full) [ 274.472861][T10833] Tainted: [L]=SOFTLOCKUP [ 274.472865][T10833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 274.472873][T10833] Call Trace: [ 274.472877][T10833] [ 274.472882][T10833] dump_stack_lvl+0x100/0x190 [ 274.472906][T10833] should_fail_ex.cold+0x5/0xa [ 274.472925][T10833] should_failslab+0xc2/0x120 [ 274.472942][T10833] __kmalloc_cache_noprof+0x91/0x6d0 [ 274.472954][T10833] ? do_raw_spin_lock+0x128/0x260 [ 274.472969][T10833] ? alloc_fdtable+0xbd/0x2d0 [ 274.472987][T10833] alloc_fdtable+0xbd/0x2d0 [ 274.473004][T10833] dup_fd+0xa1e/0xd90 [ 274.473020][T10833] ? copy_fs_struct+0x29b/0x340 [ 274.473037][T10833] ? do_raw_spin_unlock+0x145/0x1e0 [ 274.473053][T10833] unshare_fd+0xd6/0x140 [ 274.473070][T10833] ksys_unshare+0x3c7/0x980 [ 274.473083][T10833] ? __pfx_ksys_unshare+0x10/0x10 [ 274.473103][T10833] __x64_sys_unshare+0x31/0x40 [ 274.473116][T10833] do_syscall_64+0x123/0x790 [ 274.473136][T10833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.473149][T10833] RIP: 0033:0x7f873bd9f559 [ 274.473159][T10833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.473172][T10833] RSP: 002b:00007f873cd54028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 274.473198][T10833] RAX: ffffffffffffffda RBX: 00007f873c025fa0 RCX: 00007f873bd9f559 [ 274.473208][T10833] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020040600 [ 274.473216][T10833] RBP: 00007f873be36b20 R08: 0000000000000000 R09: 0000000000000000 [ 274.473224][T10833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 274.473232][T10833] R13: 00007f873c026038 R14: 00007f873c025fa0 R15: 00007ffdee361848 [ 274.473251][T10833] [ 274.522819][ T5587] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 274.569744][ T5587] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.586469][T10818] tunl0: entered promiscuous mode [ 274.592050][ T5587] usb 4-1: config 0 descriptor?? [ 274.596797][T10818] gre0: entered promiscuous mode [ 274.776632][T10818] gretap0: entered promiscuous mode [ 274.814576][T10818] erspan0: entered promiscuous mode [ 274.831127][T10818] ip_vti0: entered promiscuous mode [ 274.844167][T10818] ip6_vti0: entered promiscuous mode [ 274.850736][T10818] sit0: entered promiscuous mode [ 274.876723][T10818] ip6tnl0: entered promiscuous mode [ 274.914671][T10818] ip6gre0: entered promiscuous mode [ 274.929030][T10818] syz_tun: entered promiscuous mode [ 274.946565][T10818] ip6gretap0: entered promiscuous mode [ 274.970960][T10818] bridge0: port 3(veth0) entered disabled state [ 274.971121][T10818] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.972183][T10818] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.027337][T10818] bridge0: entered promiscuous mode [ 275.046334][T10818] vcan0: entered promiscuous mode [ 275.070236][T10818] bond0: entered promiscuous mode [ 275.070251][T10818] bond_slave_0: entered promiscuous mode [ 275.070386][T10818] bond_slave_1: entered promiscuous mode [ 275.097491][T10818] team0: entered promiscuous mode [ 275.097506][T10818] team_slave_0: entered promiscuous mode [ 275.097625][T10818] team_slave_1: entered promiscuous mode [ 275.130406][T10818] dummy0: entered promiscuous mode [ 275.165079][T10818] nlmon0: entered promiscuous mode [ 275.179119][T10818] batadv0: entered promiscuous mode [ 275.195716][T10818] vxcan0: entered promiscuous mode [ 275.201891][T10818] vxcan1: entered promiscuous mode [ 275.229991][T10818] veth1: entered promiscuous mode [ 275.249133][T10818] wg0: entered promiscuous mode [ 275.266524][T10818] wg1: entered promiscuous mode [ 275.279604][T10818] wg2: entered promiscuous mode [ 275.289814][T10818] veth0_to_bridge: entered promiscuous mode [ 275.313996][T10818] veth1_to_bridge: entered promiscuous mode [ 275.335493][T10818] veth0_to_bond: entered promiscuous mode [ 275.353162][T10846] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1773'. [ 275.356564][T10818] veth1_to_bond: entered promiscuous mode [ 275.388216][T10818] veth0_to_team: entered promiscuous mode [ 275.408823][T10818] veth1_to_team: entered promiscuous mode [ 275.429895][T10818] veth0_to_batadv: entered promiscuous mode [ 275.443053][T10818] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.443091][T10818] batadv_slave_0: entered promiscuous mode [ 275.450173][T10818] veth1_to_batadv: entered promiscuous mode [ 275.485954][T10818] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.486005][T10818] batadv_slave_1: entered promiscuous mode [ 275.510570][T10818] xfrm0: entered promiscuous mode [ 275.525006][T10818] veth0_to_hsr: entered promiscuous mode [ 275.546049][T10818] veth1_to_hsr: entered promiscuous mode [ 275.562025][T10818] hsr0: entered promiscuous mode [ 275.568715][T10818] veth1_virt_wifi: entered promiscuous mode [ 275.591382][T10818] veth0_virt_wifi: entered promiscuous mode [ 275.599350][T10818] virt_wifi0: entered promiscuous mode [ 275.627477][T10818] vlan0: entered promiscuous mode [ 275.640332][T10818] vlan1: entered promiscuous mode [ 275.654339][T10818] macvlan0: entered promiscuous mode [ 275.659499][T10818] macvlan1: entered promiscuous mode [ 275.677003][T10818] ipvlan0: entered promiscuous mode [ 275.677115][T10818] ipvlan1: entered promiscuous mode [ 275.705255][T10818] macvtap0: entered promiscuous mode [ 275.709153][T10818] macsec0: entered promiscuous mode [ 275.727040][T10818] geneve0: entered promiscuous mode [ 275.730351][T10818] geneve1: entered promiscuous mode [ 275.751693][T10818] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 275.771776][T10818] netdevsim netdevsim6 netdevsim1: entered promiscuous mode [ 275.778826][T10818] netdevsim netdevsim6 netdevsim2: entered promiscuous mode [ 275.799688][T10818] netdevsim netdevsim6 netdevsim3: entered promiscuous mode [ 275.850311][T10818] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode [ 275.883863][T10818] mac80211_hwsim hwsim15 wlan1: entered promiscuous mode [ 275.890934][T10818] ip6erspan0: entered promiscuous mode [ 275.910562][T10818] bond1: entered promiscuous mode [ 275.918667][T10818] D: entered promiscuous mode [ 275.930046][T10818] gtp0: entered promiscuous mode [ 275.939410][T10818] bond2: entered promiscuous mode [ 275.939595][T10818] ipip0: entered promiscuous mode [ 275.940343][T10818] bond3: entered promiscuous mode [ 275.940355][T10818] geneve2: entered promiscuous mode [ 275.970785][T10818] bond4: entered promiscuous mode [ 275.970893][T10818] macvlan2: entered promiscuous mode [ 276.028926][ T5587] usb 4-1: Cannot set autoneg [ 276.029049][ T5587] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 276.075171][ T5587] usb 4-1: USB disconnect, device number 16 [ 276.109434][T10846] hsr_slave_1 (unregistering): left promiscuous mode [ 276.155529][ T13] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.155551][ T13] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.155976][ T13] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.155991][ T13] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.156010][ T13] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.156024][ T13] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.156042][ T13] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.156063][ T13] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.698945][ T9323] hid_parser_main: 3354 callbacks suppressed [ 276.698961][ T9323] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 276.805562][ T9323] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 277.374448][T10894] loop3: detected capacity change from 0 to 7 [ 277.466685][T10894] Dev loop3: unable to read RDB block 7 [ 277.466712][T10894] loop3: unable to read partition table [ 277.466818][T10894] loop3: partition table beyond EOD, truncated [ 277.466840][T10894] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 278.632202][T10942] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1813'. [ 278.745489][T10947] netlink: 8716 bytes leftover after parsing attributes in process `syz.4.1816'. [ 278.902185][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 278.902198][ T29] audit: type=1400 audit(1792631958.093:3379): avc: denied { read write } for pid=10953 comm="syz.4.1819" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 278.902872][ T29] audit: type=1400 audit(1792631958.093:3380): avc: denied { open } for pid=10953 comm="syz.4.1819" path="/450/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 278.904664][ T29] audit: type=1400 audit(1792631958.093:3381): avc: denied { ioctl } for pid=10953 comm="syz.4.1819" path="/450/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x40104d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 279.637022][T10981] overlayfs: failed to clone upperpath [ 279.649915][T10981] overlayfs: failed to clone upperpath [ 279.773009][T10986] syzkaller1: entered promiscuous mode [ 279.773024][T10986] syzkaller1: entered allmulticast mode [ 280.209441][ T29] audit: type=1326 audit(1792631959.393:3382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11003 comm="syz.5.1839" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf72f9f559 code=0x7ffc0000 [ 280.209479][ T29] audit: type=1326 audit(1792631959.393:3383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11003 comm="syz.5.1839" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf72f9f559 code=0x7ffc0000 [ 280.210245][ T29] audit: type=1326 audit(1792631959.393:3384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11003 comm="syz.5.1839" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf72f9f559 code=0x7ffc0000 [ 280.266460][ T29] audit: type=1326 audit(1792631959.463:3385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11003 comm="syz.5.1839" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf72f9f559 code=0x7ffc0000 [ 280.298163][ T29] audit: type=1326 audit(1792631959.483:3386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11003 comm="syz.5.1839" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbf72f9f559 code=0x7ffc0000 [ 280.326542][ T29] audit: type=1326 audit(1792631959.523:3387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11003 comm="syz.5.1839" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf72f9f559 code=0x7ffc0000 [ 280.356622][ T29] audit: type=1326 audit(1792631959.553:3388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11003 comm="syz.5.1839" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf72f9f559 code=0x7ffc0000 [ 280.435191][T11006] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1840'. [ 280.831569][ T5697] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 280.860997][T11028] FAULT_INJECTION: forcing a failure. [ 280.860997][T11028] name failslab, interval 1, probability 0, space 0, times 0 [ 280.861022][T11028] CPU: 0 UID: 0 PID: 11028 Comm: syz.4.1851 Tainted: G L syzkaller #0 PREEMPT(full) [ 280.861040][T11028] Tainted: [L]=SOFTLOCKUP [ 280.861045][T11028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 280.861052][T11028] Call Trace: [ 280.861058][T11028] [ 280.861063][T11028] dump_stack_lvl+0x100/0x190 [ 280.861086][T11028] should_fail_ex.cold+0x5/0xa [ 280.861105][T11028] should_failslab+0xc2/0x120 [ 280.861122][T11028] __kmalloc_cache_noprof+0x91/0x6d0 [ 280.861134][T11028] ? __might_fault+0xc5/0x140 [ 280.861152][T11028] ? bpf_prog_store_orig_filter+0x7b/0x1d0 [ 280.861170][T11028] bpf_prog_store_orig_filter+0x7b/0x1d0 [ 280.861186][T11028] bpf_prog_create_from_user+0x1ba/0x2e0 [ 280.861204][T11028] ? __pfx_seccomp_check_filter+0x10/0x10 [ 280.861224][T11028] do_seccomp+0x86b/0x27c0 [ 280.861246][T11028] ? __pfx_do_seccomp+0x10/0x10 [ 280.861262][T11028] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 280.861277][T11028] ? xfd_validate_state+0x129/0x190 [ 280.861298][T11028] do_syscall_64+0x123/0x790 [ 280.861318][T11028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.861331][T11028] RIP: 0033:0x7f3ad3d9f559 [ 280.861342][T11028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.861353][T11028] RSP: 002b:00007f3ad4c3e028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 280.861365][T11028] RAX: ffffffffffffffda RBX: 00007f3ad4025fa0 RCX: 00007f3ad3d9f559 [ 280.861373][T11028] RDX: 0000200000000280 RSI: 0000000000000000 RDI: 0000000000000001 [ 280.861380][T11028] RBP: 00007f3ad3e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 280.861390][T11028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 280.861397][T11028] R13: 00007f3ad4026038 R14: 00007f3ad4025fa0 R15: 00007ffe4d7fc138 [ 280.861414][T11028] [ 281.103374][ T5697] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 281.110029][ T5697] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 281.110059][ T5697] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 281.110075][ T5697] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 281.110100][ T5697] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.275244][T11036] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1854'. [ 281.649139][T11051] overlayfs: failed to clone lowerpath [ 281.663137][T11051] overlayfs: failed to clone lowerpath [ 281.685164][ T5697] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 281.685179][ T5697] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 281.686312][ T5697] cxacru 4-1:1.0: probe with driver cxacru failed with error -71 [ 281.742858][ T5697] usb 4-1: USB disconnect, device number 17 [ 281.959413][T11059] openvswitch: netlink: Missing key (keys=d0, expected=40280) [ 281.971592][T11059] openvswitch: netlink: Missing key (keys=d0, expected=40280) [ 281.975357][T11059] openvswitch: netlink: Missing key (keys=d0, expected=40280) [ 281.977268][T11059] openvswitch: netlink: Missing key (keys=d0, expected=40280) [ 282.015857][T11064] overlayfs: failed to clone lowerpath [ 282.104893][T11066] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1867'. [ 282.523104][T11081] block nbd3: shutting down sockets [ 282.706444][T11092] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 282.780479][T11097] lo: entered promiscuous mode [ 282.882888][T11097] tunl0: entered promiscuous mode [ 282.884557][T11097] gre0: entered promiscuous mode [ 282.908608][T11097] erspan0: entered promiscuous mode [ 282.918983][T11097] ip_vti0: entered promiscuous mode [ 282.921286][T11097] ip6_vti0: entered promiscuous mode [ 282.937680][T11097] sit0: entered promiscuous mode [ 282.947951][T11097] ip6tnl0: entered promiscuous mode [ 282.960173][T11097] ip6gre0: entered promiscuous mode [ 282.975279][T11097] syz_tun: entered promiscuous mode [ 282.979708][T11097] ip6gretap0: entered promiscuous mode [ 282.997414][T11097] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.997706][T11097] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.998113][T11097] bridge0: entered promiscuous mode [ 283.025237][T11097] vcan0: entered promiscuous mode [ 283.028105][T11097] bond0: entered promiscuous mode [ 283.028121][T11097] bond_slave_0: entered promiscuous mode [ 283.028233][T11097] bond_slave_1: entered promiscuous mode [ 283.058151][T11097] team0: entered promiscuous mode [ 283.058165][T11097] team_slave_0: entered promiscuous mode [ 283.058266][T11097] team_slave_1: entered promiscuous mode [ 283.098647][T11097] nlmon0: entered promiscuous mode [ 283.100942][T11097] vxcan0: entered promiscuous mode [ 283.113341][T11097] vxcan1: entered promiscuous mode [ 283.116509][T11097] veth0: entered promiscuous mode [ 283.133717][T11097] veth1: entered promiscuous mode [ 283.138471][T11097] wg0: entered promiscuous mode [ 283.156885][T11097] wg1: entered promiscuous mode [ 283.160715][T11097] wg2: entered promiscuous mode [ 283.179017][T11097] veth0_to_bridge: entered promiscuous mode [ 283.197440][T11097] veth1_to_bridge: entered promiscuous mode [ 283.213241][T11097] veth0_to_bond: entered promiscuous mode [ 283.221356][T11097] veth1_to_bond: entered promiscuous mode [ 283.244242][T11097] veth0_to_team: entered promiscuous mode [ 283.266078][T11097] veth1_to_team: entered promiscuous mode [ 283.289041][T11097] veth0_to_batadv: entered promiscuous mode [ 283.312495][T11097] batadv_slave_0: entered promiscuous mode [ 283.318036][T11097] veth1_to_batadv: entered promiscuous mode [ 283.339616][T11097] batadv_slave_1: entered promiscuous mode [ 283.356386][T11097] xfrm0: entered promiscuous mode [ 283.367717][T11097] veth0_to_hsr: entered promiscuous mode [ 283.387867][T11097] veth1_to_hsr: entered promiscuous mode [ 283.407686][T11097] hsr0: entered promiscuous mode [ 283.417821][T11097] veth1_virt_wifi: entered promiscuous mode [ 283.430182][T11097] veth0_virt_wifi: entered promiscuous mode [ 283.440182][T11097] virt_wifi0: entered promiscuous mode [ 283.461131][T11097] macvtap0: entered promiscuous mode [ 283.472842][T11097] macsec0: entered promiscuous mode [ 283.476730][T11097] geneve0: entered promiscuous mode [ 283.479858][T11097] geneve1: entered promiscuous mode [ 283.499276][T11097] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 283.512672][T11097] netdevsim netdevsim5 netdevsim1: entered promiscuous mode [ 283.513984][T11097] netdevsim netdevsim5 netdevsim2: entered promiscuous mode [ 283.515118][T11097] netdevsim netdevsim5 netdevsim3: entered promiscuous mode [ 283.519385][T11097] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode [ 283.567239][T11097] mac80211_hwsim hwsim13 wlan1: entered promiscuous mode [ 283.571149][T11097] syztnl0: entered promiscuous mode [ 283.585940][T11097] ip6erspan0: entered promiscuous mode [ 283.589113][T11097] bond1: entered promiscuous mode [ 283.589126][T11097] geneve2: entered promiscuous mode [ 283.610047][T11097] bond2: entered promiscuous mode [ 283.610274][T11097] hsr1: entered promiscuous mode [ 283.626585][T11097] sit1: entered promiscuous mode [ 283.654336][T11097] veth2: entered promiscuous mode [ 283.657655][T11097] erspan1: entered promiscuous mode [ 283.662641][ T1162] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.662778][ T59] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.662799][ T59] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.662818][ T59] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.829455][T11123] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1891'. [ 283.830049][T11123] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1891'. [ 284.338847][T11137] syz.3.1897 (11137) used greatest stack depth: 19000 bytes left [ 284.462983][T11143] FAULT_INJECTION: forcing a failure. [ 284.462983][T11143] name failslab, interval 1, probability 0, space 0, times 0 [ 284.463007][T11143] CPU: 0 UID: 0 PID: 11143 Comm: syz.3.1900 Tainted: G L syzkaller #0 PREEMPT(full) [ 284.463026][T11143] Tainted: [L]=SOFTLOCKUP [ 284.463030][T11143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 284.463039][T11143] Call Trace: [ 284.463044][T11143] [ 284.463049][T11143] dump_stack_lvl+0x100/0x190 [ 284.463077][T11143] should_fail_ex.cold+0x5/0xa [ 284.463096][T11143] should_failslab+0xc2/0x120 [ 284.463114][T11143] kmem_cache_alloc_noprof+0x92/0x6a0 [ 284.463128][T11143] ? kernfs_root+0x23/0x2a0 [ 284.463140][T11143] ? __kernfs_new_node+0xd2/0xa10 [ 284.463157][T11143] __kernfs_new_node+0xd2/0xa10 [ 284.463172][T11143] ? __pfx___kernfs_new_node+0x10/0x10 [ 284.463187][T11143] ? lock_acquire+0x1d1/0x380 [ 284.463200][T11143] ? kernfs_root+0x23/0x2a0 [ 284.463212][T11143] ? find_held_lock+0x2b/0x80 [ 284.463228][T11143] ? kernfs_root+0xee/0x2a0 [ 284.463239][T11143] ? kernfs_root+0xee/0x2a0 [ 284.463254][T11143] kernfs_create_dir_ns+0xa4/0x2b0 [ 284.463271][T11143] internal_create_group+0x36f/0xfb0 [ 284.463288][T11143] ? __pfx_internal_create_group+0x10/0x10 [ 284.463300][T11143] ? __pfx_internal_create_group+0x10/0x10 [ 284.463312][T11143] ? bus_add_device+0x2e2/0x6c0 [ 284.463331][T11143] ? __pfx_bus_add_device+0x10/0x10 [ 284.463353][T11143] ? __pfx_dev_add_physical_location+0x10/0x10 [ 284.463375][T11143] dpm_sysfs_add+0x80/0x280 [ 284.463393][T11143] device_add+0x9f4/0x1970 [ 284.463411][T11143] ? __pfx_device_add+0x10/0x10 [ 284.463427][T11143] ? lockdep_init_map_type+0x5c/0x250 [ 284.463440][T11143] ? __init_waitqueue_head+0xca/0x150 [ 284.463458][T11143] netdev_register_kobject+0x1df/0x410 [ 284.463480][T11143] register_netdevice+0x15b1/0x25a0 [ 284.463500][T11143] ? __pfx_register_netdevice+0x10/0x10 [ 284.463515][T11143] ? __kmalloc_noprof+0x350/0x840 [ 284.463529][T11143] ? gtp_newlink+0x2f4/0x13f0 [ 284.463549][T11143] gtp_newlink+0x599/0x13f0 [ 284.463567][T11143] ? __pfx_gtp_newlink+0x10/0x10 [ 284.463583][T11143] rtnl_newlink+0x1697/0x2620 [ 284.463606][T11143] ? __pfx_rtnl_newlink+0x10/0x10 [ 284.463621][T11143] ? avc_has_perm_noaudit+0x56/0x470 [ 284.463635][T11143] ? find_held_lock+0x2b/0x80 [ 284.463650][T11143] ? avc_has_perm_noaudit+0x11e/0x470 [ 284.463663][T11143] ? avc_has_perm_noaudit+0x11e/0x470 [ 284.463693][T11143] ? lock_acquire+0x1d1/0x380 [ 284.463704][T11143] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 284.463720][T11143] ? find_held_lock+0x2b/0x80 [ 284.463735][T11143] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 284.463750][T11143] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 284.463767][T11143] ? __pfx_rtnl_newlink+0x10/0x10 [ 284.463783][T11143] rtnetlink_rcv_msg+0x95e/0xe90 [ 284.463800][T11143] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 284.463820][T11143] ? ref_tracker_free+0x37e/0x6c0 [ 284.463838][T11143] netlink_rcv_skb+0x159/0x420 [ 284.463852][T11143] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 284.463869][T11143] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 284.463889][T11143] ? netlink_deliver_tap+0x1ae/0xcc0 [ 284.463905][T11143] netlink_unicast+0x65f/0x950 [ 284.463921][T11143] ? __pfx_netlink_unicast+0x10/0x10 [ 284.463939][T11143] netlink_sendmsg+0x9ac/0x10c0 [ 284.463955][T11143] ? __pfx_netlink_sendmsg+0x10/0x10 [ 284.463973][T11143] ? selinux_socket_sendmsg+0x198/0x2f0 [ 284.463990][T11143] ? ____sys_sendmsg+0xa4d/0xbe0 [ 284.464006][T11143] ____sys_sendmsg+0xa4d/0xbe0 [ 284.464022][T11143] ? __pfx_netlink_sendmsg+0x10/0x10 [ 284.464037][T11143] ? __pfx_____sys_sendmsg+0x10/0x10 [ 284.464062][T11143] ___sys_sendmsg+0x190/0x1e0 [ 284.464081][T11143] ? __pfx____sys_sendmsg+0x10/0x10 [ 284.464099][T11143] ? futex_wait+0x11e/0x370 [ 284.464117][T11143] ? find_held_lock+0x2b/0x80 [ 284.464145][T11143] __sys_sendmsg+0x160/0x210 [ 284.464159][T11143] ? __pfx___sys_sendmsg+0x10/0x10 [ 284.464184][T11143] do_syscall_64+0x123/0x790 [ 284.464205][T11143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.464219][T11143] RIP: 0033:0x7feb8bb9f559 [ 284.464230][T11143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.464242][T11143] RSP: 002b:00007feb8ca98028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 284.464255][T11143] RAX: ffffffffffffffda RBX: 00007feb8be25fa0 RCX: 00007feb8bb9f559 [ 284.464263][T11143] RDX: 0000000000000000 RSI: 0000200000002a00 RDI: 0000000000000004 [ 284.464272][T11143] RBP: 00007feb8bc36b20 R08: 0000000000000000 R09: 0000000000000000 [ 284.464279][T11143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 284.464287][T11143] R13: 00007feb8be26038 R14: 00007feb8be25fa0 R15: 00007ffd00071348 [ 284.464306][T11143] [ 285.126153][T11152] bond2: option mode: unable to set because the bond device has slaves [ 285.153266][T11153] FAULT_INJECTION: forcing a failure. [ 285.153266][T11153] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 285.153292][T11153] CPU: 0 UID: 0 PID: 11153 Comm: syz.4.1904 Tainted: G L syzkaller #0 PREEMPT(full) [ 285.153311][T11153] Tainted: [L]=SOFTLOCKUP [ 285.153317][T11153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 285.153325][T11153] Call Trace: [ 285.153329][T11153] [ 285.153334][T11153] dump_stack_lvl+0x100/0x190 [ 285.153357][T11153] should_fail_ex.cold+0x5/0xa [ 285.153374][T11153] ? prepare_alloc_pages+0x16d/0x5b0 [ 285.153393][T11153] should_fail_alloc_page+0xeb/0x140 [ 285.153412][T11153] prepare_alloc_pages+0x1f0/0x5b0 [ 285.153432][T11153] __alloc_frozen_pages_noprof+0x1e8/0x32e0 [ 285.153448][T11153] ? lock_acquire+0x1d1/0x380 [ 285.153460][T11153] ? validate_mm+0x1f1/0x4e0 [ 285.153481][T11153] ? mas_next_slot+0xc05/0x13a0 [ 285.153496][T11153] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 285.153517][T11153] ? mas_prev_slot+0x768/0x11b0 [ 285.153538][T11153] ? mas_prev+0xa4/0x100 [ 285.153551][T11153] ? __pfx_mas_prev+0x10/0x10 [ 285.153564][T11153] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 285.153579][T11153] ? policy_nodemask+0xed/0x4f0 [ 285.153599][T11153] alloc_pages_mpol+0x201/0x550 [ 285.153617][T11153] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 285.153634][T11153] ? __pfx___split_vma+0x10/0x10 [ 285.153655][T11153] alloc_pages_noprof+0x1a/0x160 [ 285.153667][T11153] pte_alloc_one+0x1c/0x3d0 [ 285.153679][T11153] __pte_alloc+0x6d/0x380 [ 285.153693][T11153] ? __pfx___pte_alloc+0x10/0x10 [ 285.153711][T11153] do_anonymous_page+0x1307/0x2050 [ 285.153734][T11153] ? __pfx_do_anonymous_page+0x10/0x10 [ 285.153751][T11153] ? pgd_none+0x9f/0xe0 [ 285.153768][T11153] ? __pfx_pgd_none+0x10/0x10 [ 285.153785][T11153] ? find_held_lock+0x2b/0x80 [ 285.153804][T11153] __handle_mm_fault+0x1ff3/0x2f60 [ 285.153825][T11153] ? __pfx___handle_mm_fault+0x10/0x10 [ 285.153842][T11153] ? __pfx_mt_find+0x10/0x10 [ 285.153869][T11153] handle_mm_fault+0x363/0xa20 [ 285.153890][T11153] __get_user_pages+0x8a9/0x2c20 [ 285.153910][T11153] ? __pfx_mt_find+0x10/0x10 [ 285.153923][T11153] ? __pfx___get_user_pages+0x10/0x10 [ 285.153945][T11153] populate_vma_page_range+0x267/0x3f0 [ 285.153962][T11153] ? __pfx_populate_vma_page_range+0x10/0x10 [ 285.153977][T11153] ? __pfx_find_vma_intersection+0x10/0x10 [ 285.153997][T11153] __mm_populate+0x107/0x3a0 [ 285.154014][T11153] ? __pfx___mm_populate+0x10/0x10 [ 285.154031][T11153] ? up_write+0x2dc/0x5b0 [ 285.154046][T11153] do_mlock+0x3f0/0x800 [ 285.154058][T11153] ? do_futex+0x190/0x440 [ 285.154075][T11153] ? __pfx_do_mlock+0x10/0x10 [ 285.154085][T11153] ? __pfx_do_futex+0x10/0x10 [ 285.154101][T11153] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 285.154124][T11153] ? __x64_sys_futex+0x34f/0x4d0 [ 285.154139][T11153] ? __x64_sys_futex+0x358/0x4d0 [ 285.154168][T11153] __x64_sys_mlock+0xce/0x120 [ 285.154182][T11153] ? __pfx___x64_sys_mlock+0x10/0x10 [ 285.154200][T11153] do_syscall_64+0x123/0x790 [ 285.154221][T11153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.154234][T11153] RIP: 0033:0x7f3ad3d9f559 [ 285.154245][T11153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.154258][T11153] RSP: 002b:00007f3ad4c3e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 285.154271][T11153] RAX: ffffffffffffffda RBX: 00007f3ad4025fa0 RCX: 00007f3ad3d9f559 [ 285.154279][T11153] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000200000ffb000 [ 285.154287][T11153] RBP: 00007f3ad3e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 285.154294][T11153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 285.154302][T11153] R13: 00007f3ad4026038 R14: 00007f3ad4025fa0 R15: 00007ffe4d7fc138 [ 285.154320][T11153] [ 285.653941][T11156] Bluetooth: MGMT ver 1.23 [ 285.797155][T11162] ip_tables: iptables: counters copy to user failed while replacing table [ 287.030744][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 287.030757][ T29] audit: type=1400 audit(1792631966.213:3412): avc: denied { associate } for pid=11214 comm="syz.3.1927" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 287.192458][T11216] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 287.562955][ T5697] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 287.626937][T11236] fuse: Bad value for 'fd' [ 287.712860][ T5697] usb 4-1: Using ep0 maxpacket: 8 [ 287.715092][ T5697] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 287.731894][ T5697] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 287.731924][ T5697] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 287.731938][ T5697] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 287.731953][ T5697] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 287.731966][ T5697] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 287.731995][ T5697] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.006496][ T5697] usb 4-1: GET_CAPABILITIES returned 0 [ 288.006524][ T5697] usbtmc 4-1:16.0: can't read capabilities [ 288.191135][T11253] FAULT_INJECTION: forcing a failure. [ 288.191135][T11253] name failslab, interval 1, probability 0, space 0, times 0 [ 288.191162][T11253] CPU: 0 UID: 0 PID: 11253 Comm: syz.4.1944 Tainted: G L syzkaller #0 PREEMPT(full) [ 288.191180][T11253] Tainted: [L]=SOFTLOCKUP [ 288.191184][T11253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 288.191192][T11253] Call Trace: [ 288.191197][T11253] [ 288.191202][T11253] dump_stack_lvl+0x100/0x190 [ 288.191226][T11253] should_fail_ex.cold+0x5/0xa [ 288.191245][T11253] should_failslab+0xc2/0x120 [ 288.191264][T11253] __kmalloc_cache_noprof+0x91/0x6d0 [ 288.191277][T11253] ? tipc_nametbl_insert_publ+0x6ee/0x1570 [ 288.191295][T11253] tipc_nametbl_insert_publ+0x6ee/0x1570 [ 288.191317][T11253] tipc_nametbl_publish+0x18b/0x300 [ 288.191333][T11253] tipc_sk_publish+0x1d8/0x430 [ 288.191348][T11253] ? __pfx_tipc_sk_publish+0x10/0x10 [ 288.191364][T11253] ? tipc_group_create+0x4c0/0x660 [ 288.191383][T11253] tipc_setsockopt+0x7af/0xe30 [ 288.191399][T11253] ? __pfx_tipc_setsockopt+0x10/0x10 [ 288.191417][T11253] ? __fget_files+0x215/0x3d0 [ 288.191436][T11253] ? selinux_socket_setsockopt+0x6a/0x80 [ 288.191455][T11253] ? __pfx_tipc_setsockopt+0x10/0x10 [ 288.191471][T11253] do_sock_setsockopt+0xf3/0x1d0 [ 288.191489][T11253] __sys_setsockopt+0x195/0x220 [ 288.191507][T11253] __x64_sys_setsockopt+0xbd/0x160 [ 288.191520][T11253] ? do_syscall_64+0xae/0x790 [ 288.191538][T11253] ? lockdep_hardirqs_on+0x7d/0x110 [ 288.191556][T11253] do_syscall_64+0x123/0x790 [ 288.191575][T11253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.191587][T11253] RIP: 0033:0x7f3ad3d9f559 [ 288.191599][T11253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 288.191610][T11253] RSP: 002b:00007f3ad4c3e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 288.191623][T11253] RAX: ffffffffffffffda RBX: 00007f3ad4025fa0 RCX: 00007f3ad3d9f559 [ 288.191630][T11253] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000003 [ 288.191637][T11253] RBP: 00007f3ad3e36b20 R08: 000000000000002e R09: 0000000000000000 [ 288.191645][T11253] R10: 0000200000000d80 R11: 0000000000000246 R12: 0000000000000000 [ 288.191652][T11253] R13: 00007f3ad4026038 R14: 00007f3ad4025fa0 R15: 00007ffe4d7fc138 [ 288.191669][T11253] [ 288.191735][T11253] tipc: Failed to bind to 66,4294966268,4294966268 [ 288.510259][ T5715] usb 4-1: USB disconnect, device number 18 [ 288.698894][T11259] overlayfs: failed to clone upperpath [ 288.843962][T11267] overlayfs: failed to clone upperpath [ 288.866065][T11270] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 289.884157][T11294] lo: entered promiscuous mode [ 289.980222][T11303] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1965'. [ 290.039481][T11306] overlayfs: failed to clone upperpath [ 290.052147][T11306] overlayfs: failed to clone upperpath [ 290.073419][T11294] gre0: entered promiscuous mode [ 290.106975][T11294] gretap0: entered promiscuous mode [ 290.122271][T11294] erspan0: entered promiscuous mode [ 290.129661][T11294] ip_vti0: entered promiscuous mode [ 290.148121][T11294] ip6_vti0: entered promiscuous mode [ 290.166880][T11294] sit0: entered promiscuous mode [ 290.184632][T11294] ip6tnl0: entered promiscuous mode [ 290.190951][T11294] ip6gre0: entered promiscuous mode [ 290.216127][T11294] syz_tun: entered promiscuous mode [ 290.230250][T11294] ip6gretap0: entered promiscuous mode [ 290.244256][ T29] audit: type=1400 audit(1792631969.433:3413): avc: denied { bind } for pid=11310 comm="syz.6.1969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 290.244978][T11294] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.245316][T11294] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.251092][T11294] bridge0: entered promiscuous mode [ 290.299644][ T29] audit: type=1400 audit(1792631969.483:3414): avc: denied { listen } for pid=11310 comm="syz.6.1969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 290.323512][ T29] audit: type=1400 audit(1792631969.513:3415): avc: denied { read } for pid=11310 comm="syz.6.1969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 290.324330][T11294] vcan0: entered promiscuous mode [ 290.324904][T11294] team0: entered promiscuous mode [ 290.324916][T11294] team_slave_0: entered promiscuous mode [ 290.325009][T11294] team_slave_1: entered promiscuous mode [ 290.329503][T11294] dummy0: entered promiscuous mode [ 290.390585][T11294] nlmon0: entered promiscuous mode [ 290.402753][T11294] batadv0: entered promiscuous mode [ 290.424600][T11294] vxcan0: entered promiscuous mode [ 290.426578][T11294] vxcan1: entered promiscuous mode [ 290.428185][T11294] veth0: entered promiscuous mode [ 290.455126][T11294] veth1: entered promiscuous mode [ 290.470383][T11294] wg0: entered promiscuous mode [ 290.482737][T11294] wg1: entered promiscuous mode [ 290.487409][T11294] wg2: entered promiscuous mode [ 290.489136][T11294] veth0_to_bridge: entered promiscuous mode [ 290.519235][T11294] veth1_to_bridge: entered promiscuous mode [ 290.538419][T11294] veth0_to_bond: entered promiscuous mode [ 290.551832][T11294] bond_slave_0: entered promiscuous mode [ 290.554829][T11294] veth1_to_bond: entered promiscuous mode [ 290.575229][T11294] bond_slave_1: entered promiscuous mode [ 290.579978][T11294] veth0_to_team: entered promiscuous mode [ 290.604439][T11294] veth1_to_team: entered promiscuous mode [ 290.634845][T11294] veth0_to_batadv: entered promiscuous mode [ 290.640341][T11294] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.640379][T11294] batadv_slave_0: entered promiscuous mode [ 290.677680][T11294] veth1_to_batadv: entered promiscuous mode [ 290.690852][T11294] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.690892][T11294] batadv_slave_1: entered promiscuous mode [ 290.712857][T11294] xfrm0: entered promiscuous mode [ 290.719184][T11294] veth0_to_hsr: entered promiscuous mode [ 290.751200][T11294] hsr0: entered promiscuous mode [ 290.781865][T11294] vlan0: entered promiscuous mode [ 290.798934][T11294] vlan1: entered promiscuous mode [ 290.815853][T11294] macvlan0: entered promiscuous mode [ 290.820806][T11294] macvlan1: entered promiscuous mode [ 290.839958][T11294] ipvlan0: entered promiscuous mode [ 290.850820][T11294] ipvlan1: entered promiscuous mode [ 290.891311][T11294] macvtap0: entered promiscuous mode [ 290.902875][T11294] macsec0: entered promiscuous mode [ 290.929725][T11294] geneve0: entered promiscuous mode [ 290.947147][T11294] geneve1: entered promiscuous mode [ 290.974721][T11294] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 290.994708][T11294] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 291.015350][T11294] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 291.021925][ T29] audit: type=1400 audit(1792631970.203:3416): avc: denied { setopt } for pid=11320 comm="syz.5.1972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 291.116494][T11294] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 291.177978][T11294] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 291.270641][T11294] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 291.286291][T11294] syzkaller0: entered promiscuous mode [ 291.286433][T11294] sit1: entered promiscuous mode [ 291.368458][T11294] sit2: entered promiscuous mode [ 291.435128][T11294] vxlan0: entered promiscuous mode [ 291.435234][T11294] gtp0: entered promiscuous mode [ 291.435468][T11294] @: entered promiscuous mode [ 291.463609][T11294] ip6gre1: entered promiscuous mode [ 291.478817][T11294] veth2: entered promiscuous mode [ 291.497626][T11294] bond1: entered promiscuous mode [ 291.501548][ T59] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.501571][ T59] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.502380][ T42] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.502398][ T42] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.502419][ T42] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.502434][ T42] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.502453][ T42] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.502467][ T42] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.917507][ T29] audit: type=1400 audit(1792631973.103:3417): avc: denied { mounton } for pid=11389 comm="syz.3.1999" path="/47/dev/mapper/control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 294.023792][ T29] audit: type=1400 audit(1792631973.213:3418): avc: denied { remount } for pid=11394 comm="syz.6.2001" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 294.151878][T11397] FAULT_INJECTION: forcing a failure. [ 294.151878][T11397] name failslab, interval 1, probability 0, space 0, times 0 [ 294.151905][T11397] CPU: 0 UID: 0 PID: 11397 Comm: syz.4.2002 Tainted: G L syzkaller #0 PREEMPT(full) [ 294.151923][T11397] Tainted: [L]=SOFTLOCKUP [ 294.151928][T11397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 294.151936][T11397] Call Trace: [ 294.151940][T11397] [ 294.151946][T11397] dump_stack_lvl+0x100/0x190 [ 294.151969][T11397] should_fail_ex.cold+0x5/0xa [ 294.151989][T11397] should_failslab+0xc2/0x120 [ 294.152006][T11397] __kmalloc_noprof+0xfc/0x840 [ 294.152022][T11397] ? tomoyo_encode2+0xfb/0x3c0 [ 294.152043][T11397] tomoyo_encode2+0xfb/0x3c0 [ 294.152064][T11397] tomoyo_encode+0x29/0x50 [ 294.152081][T11397] tomoyo_realpath_from_path+0x18c/0x690 [ 294.152104][T11397] tomoyo_path_number_perm+0x23c/0x580 [ 294.152120][T11397] ? tomoyo_path_number_perm+0x22e/0x580 [ 294.152137][T11397] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 294.152159][T11397] ? d_splice_alias_ops+0x2e8/0x1350 [ 294.152174][T11397] ? d_splice_alias_ops+0x2e8/0x1350 [ 294.152201][T11397] ? kernfs_iop_lookup+0x234/0x2d0 [ 294.152213][T11397] ? current_check_access_path+0x25d/0x420 [ 294.152229][T11397] ? __pfx_current_check_access_path+0x10/0x10 [ 294.152244][T11397] ? kernfs_iop_lookup+0x247/0x2d0 [ 294.152258][T11397] ? lookup_one_qstr_excl+0xaf/0x250 [ 294.152280][T11397] tomoyo_path_mkdir+0x9b/0xe0 [ 294.152294][T11397] ? __pfx_tomoyo_path_mkdir+0x10/0x10 [ 294.152310][T11397] ? lock_acquire+0x1d1/0x380 [ 294.152327][T11397] security_path_mkdir+0x154/0x2e0 [ 294.152341][T11397] filename_mkdirat+0x168/0x5e0 [ 294.152362][T11397] ? __pfx_filename_mkdirat+0x10/0x10 [ 294.152379][T11397] ? strncpy_from_user+0x19d/0x2d0 [ 294.152394][T11397] ? do_getname+0x191/0x390 [ 294.152407][T11397] __x64_sys_mkdirat+0x89/0xc0 [ 294.152425][T11397] do_syscall_64+0x123/0x790 [ 294.152446][T11397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.152460][T11397] RIP: 0033:0x7f3ad3d9f559 [ 294.152472][T11397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.152484][T11397] RSP: 002b:00007f3ad4c3e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 294.152497][T11397] RAX: ffffffffffffffda RBX: 00007f3ad4025fa0 RCX: 00007f3ad3d9f559 [ 294.152505][T11397] RDX: 00000000000001ff RSI: 0000200000000080 RDI: ffffffffffffff9c [ 294.152513][T11397] RBP: 00007f3ad3e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 294.152521][T11397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 294.152529][T11397] R13: 00007f3ad4026038 R14: 00007f3ad4025fa0 R15: 00007ffe4d7fc138 [ 294.152548][T11397] [ 294.152561][T11397] ERROR: Out of memory at tomoyo_realpath_from_path. [ 294.521315][T11401] bridge1: entered promiscuous mode [ 294.521346][T11401] bridge1: entered allmulticast mode [ 294.669576][ T5587] libceph: connect (1)[c::]:6789 error -101 [ 294.669691][ T5587] libceph: mon0 (1)[c::]:6789 connect error [ 294.709125][T11405] ceph: No mds server is up or the cluster is laggy [ 295.365831][T11433] lo: entered promiscuous mode [ 295.390880][T11435] FAULT_INJECTION: forcing a failure. [ 295.390880][T11435] name failslab, interval 1, probability 0, space 0, times 0 [ 295.390905][T11435] CPU: 0 UID: 0 PID: 11435 Comm: syz.3.2018 Tainted: G L syzkaller #0 PREEMPT(full) [ 295.390923][T11435] Tainted: [L]=SOFTLOCKUP [ 295.390930][T11435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 295.390938][T11435] Call Trace: [ 295.390943][T11435] [ 295.390948][T11435] dump_stack_lvl+0x100/0x190 [ 295.390973][T11435] should_fail_ex.cold+0x5/0xa [ 295.390993][T11435] should_failslab+0xc2/0x120 [ 295.391011][T11435] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 295.391025][T11435] ? selinux_inode_alloc_security+0x104/0x290 [ 295.391044][T11435] ? __d_alloc+0x34/0xad0 [ 295.391064][T11435] __d_alloc+0x34/0xad0 [ 295.391080][T11435] ? __ns_ref_active_get+0x9f/0x1b0 [ 295.391097][T11435] path_from_stashed+0x431/0x760 [ 295.391125][T11435] open_namespace+0x93/0x1b0 [ 295.391138][T11435] ? __pfx_open_namespace+0x10/0x10 [ 295.391155][T11435] open_related_ns+0x41/0x70 [ 295.391168][T11435] sock_ioctl+0x2bb/0x6b0 [ 295.391188][T11435] ? __pfx_sock_ioctl+0x10/0x10 [ 295.391211][T11435] ? selinux_file_ioctl+0x1e0/0x290 [ 295.391228][T11435] ? selinux_file_ioctl+0x1e7/0x290 [ 295.391247][T11435] ? __pfx_sock_ioctl+0x10/0x10 [ 295.391267][T11435] __x64_sys_ioctl+0x18e/0x210 [ 295.391283][T11435] do_syscall_64+0x123/0x790 [ 295.391304][T11435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.391324][T11435] RIP: 0033:0x7feb8bb9f559 [ 295.391335][T11435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.391349][T11435] RSP: 002b:00007feb8ca98028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 295.391361][T11435] RAX: ffffffffffffffda RBX: 00007feb8be25fa0 RCX: 00007feb8bb9f559 [ 295.391371][T11435] RDX: 0000000000000000 RSI: 000000000000894c RDI: 0000000000000003 [ 295.391379][T11435] RBP: 00007feb8bc36b20 R08: 0000000000000000 R09: 0000000000000000 [ 295.391387][T11435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 295.391395][T11435] R13: 00007feb8be26038 R14: 00007feb8be25fa0 R15: 00007ffd00071348 [ 295.391413][T11435] [ 295.819915][T11433] gre0: entered promiscuous mode [ 295.857870][T11433] gretap0: entered promiscuous mode [ 295.876397][T11433] erspan0: entered promiscuous mode [ 295.896034][T11433] ip_vti0: entered promiscuous mode [ 295.910298][T11433] ip6_vti0: entered promiscuous mode [ 295.926344][T11433] sit0: entered promiscuous mode [ 296.030403][T11433] ip6tnl0: entered promiscuous mode [ 296.051165][T11433] ip6gre0: entered promiscuous mode [ 296.070789][T11433] syz_tun: entered promiscuous mode [ 296.097288][T11433] ip6gretap0: entered promiscuous mode [ 296.112945][T11433] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.113086][T11433] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.149489][T11433] vcan0: entered promiscuous mode [ 296.161949][T11433] bond0: entered promiscuous mode [ 296.161974][T11433] bond_slave_0: entered promiscuous mode [ 296.162279][T11433] bond_slave_1: entered promiscuous mode [ 296.194397][T11433] team0: entered promiscuous mode [ 296.194411][T11433] team_slave_0: entered promiscuous mode [ 296.194513][T11433] team_slave_1: entered promiscuous mode [ 296.229942][T11433] dummy0: entered promiscuous mode [ 296.293319][T11433] nlmon0: entered promiscuous mode [ 296.306992][T11433] batadv0: entered promiscuous mode [ 296.322771][T11433] vxcan0: entered promiscuous mode [ 296.323373][T11433] vxcan1: entered promiscuous mode [ 296.329036][T11433] veth0: entered promiscuous mode [ 296.364032][T11433] veth1: entered promiscuous mode [ 296.383163][T11433] wg0: entered promiscuous mode [ 296.390341][T11433] wg1: entered promiscuous mode [ 296.412973][T11433] wg2: entered promiscuous mode [ 296.429632][T11433] veth0_to_bridge: entered promiscuous mode [ 296.455332][T11433] veth1_to_bridge: entered promiscuous mode [ 296.486400][T11433] veth0_to_bond: entered promiscuous mode [ 296.505792][T11433] veth1_to_bond: entered promiscuous mode [ 296.526266][T11433] veth0_to_team: entered promiscuous mode [ 296.553242][T11433] veth1_to_team: entered promiscuous mode [ 296.587493][T11433] veth0_to_batadv: entered promiscuous mode [ 296.606233][T11433] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 296.606276][T11433] batadv_slave_0: entered promiscuous mode [ 296.631910][T11433] veth1_to_batadv: entered promiscuous mode [ 296.651127][T11433] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 296.651167][T11433] batadv_slave_1: entered promiscuous mode [ 296.685779][T11433] xfrm0: entered promiscuous mode [ 296.706136][T11433] veth0_to_hsr: entered promiscuous mode [ 296.728946][T11433] hsr0: entered promiscuous mode [ 296.772835][T11433] vlan0: entered promiscuous mode [ 296.779858][T11433] vlan1: entered promiscuous mode [ 296.822540][T11433] macvlan0: entered promiscuous mode [ 296.842973][T11433] macvlan1: entered promiscuous mode [ 296.850715][T11433] ipvlan0: entered promiscuous mode [ 296.872921][T11433] ipvlan1: entered promiscuous mode [ 296.907568][T11433] macvtap0: entered promiscuous mode [ 296.919471][T11433] macsec0: entered promiscuous mode [ 296.931611][T11433] geneve0: entered promiscuous mode [ 296.937962][T11433] geneve1: entered promiscuous mode [ 296.961321][T11433] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 296.976413][T11433] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 296.990972][T11433] netdevsim netdevsim4 netdevsim2: entered promiscuous mode [ 297.007051][T11433] netdevsim netdevsim4 netdevsim3: entered promiscuous mode [ 297.010551][T11433] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 297.028442][T11433] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 297.040952][T11433] sit1: entered promiscuous mode [ 297.127567][T11433] sit2: entered promiscuous mode [ 297.215239][T11433] sit3: entered promiscuous mode [ 297.272616][T11433] macsec1: entered promiscuous mode [ 297.275797][T11433] sit4: entered promiscuous mode [ 297.356453][T11433] @: entered promiscuous mode [ 297.357743][T11433] bond1: entered promiscuous mode [ 297.357756][T11433] geneve2: entered promiscuous mode [ 297.360676][T11433] gre1: entered promiscuous mode [ 297.360749][T11433] gre2: entered promiscuous mode [ 297.361176][T11433] gretap1: entered promiscuous mode [ 297.399509][T11433] ip6tnl1: entered promiscuous mode [ 297.400277][T11433] mac80211_hwsim hwsim17 wlan2: entered promiscuous mode [ 297.415846][T11433] veth2: entered promiscuous mode [ 297.416460][T11433] geneve3: entered promiscuous mode [ 297.433486][ T12] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 297.433506][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.433528][ T12] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 297.433543][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.433561][ T12] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 297.433575][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.433593][ T12] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 297.433607][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.642482][T11484] overlayfs: failed to clone upperpath [ 299.991622][ T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 300.142140][ T9] usb 2-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice= 1.00 [ 300.143626][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.143655][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.150122][ T9] metro_usb 2-1:1.0: Metrologic USB to Serial converter detected [ 300.194798][ T9] usb 2-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 300.363845][ T9] usb 2-1: USB disconnect, device number 24 [ 300.368838][ T9] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 300.369147][ T9] metro_usb 2-1:1.0: device disconnected [ 302.506639][T11574] FAULT_INJECTION: forcing a failure. [ 302.506639][T11574] name failslab, interval 1, probability 0, space 0, times 0 [ 302.506664][T11574] CPU: 0 UID: 0 PID: 11574 Comm: syz.4.2076 Tainted: G L syzkaller #0 PREEMPT(full) [ 302.506682][T11574] Tainted: [L]=SOFTLOCKUP [ 302.506687][T11574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 302.506695][T11574] Call Trace: [ 302.506700][T11574] [ 302.506705][T11574] dump_stack_lvl+0x100/0x190 [ 302.506729][T11574] should_fail_ex.cold+0x5/0xa [ 302.506747][T11574] should_failslab+0xc2/0x120 [ 302.506765][T11574] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 302.506781][T11574] ? __d_alloc+0x34/0xad0 [ 302.506802][T11574] __d_alloc+0x34/0xad0 [ 302.506818][T11574] ? get_random_u64+0xe8/0x7c0 [ 302.506837][T11574] d_alloc_pseudo+0x1c/0xc0 [ 302.506850][T11574] alloc_file_pseudo+0x118/0x290 [ 302.506871][T11574] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 302.506893][T11574] __anon_inode_getfile+0xe8/0x280 [ 302.506911][T11574] do_seccomp+0xd73/0x27c0 [ 302.506932][T11574] ? __pfx_do_seccomp+0x10/0x10 [ 302.506951][T11574] ? xfd_validate_state+0x129/0x190 [ 302.506976][T11574] do_syscall_64+0x123/0x790 [ 302.506997][T11574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.507009][T11574] RIP: 0033:0x7f3ad3d9f559 [ 302.507020][T11574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.507031][T11574] RSP: 002b:00007f3ad4c3e028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 302.507043][T11574] RAX: ffffffffffffffda RBX: 00007f3ad4025fa0 RCX: 00007f3ad3d9f559 [ 302.507050][T11574] RDX: 0000200000000040 RSI: 000000000000000c RDI: 0000000000000001 [ 302.507057][T11574] RBP: 00007f3ad3e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 302.507065][T11574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 302.507071][T11574] R13: 00007f3ad4026038 R14: 00007f3ad4025fa0 R15: 00007ffe4d7fc138 [ 302.507091][T11574] [ 302.861858][ T5587] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 303.012210][ T5587] usb 4-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.40 [ 303.014416][ T5587] usb 4-1: config 1 interface 0 has no altsetting 0 [ 303.019013][ T5587] usb 4-1: string descriptor 0 read error: -22 [ 303.019082][ T5587] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.478063][T11606] input: syz1 as /devices/virtual/input/input26 [ 303.513768][ T5587] hid-steelseries-arctis 0003:1038:12C2.000E: unknown main item tag 0x0 [ 303.513791][ T5587] hid-steelseries-arctis 0003:1038:12C2.000E: unknown main item tag 0x0 [ 303.513807][ T5587] hid-steelseries-arctis 0003:1038:12C2.000E: unknown main item tag 0x0 [ 303.513822][ T5587] hid-steelseries-arctis 0003:1038:12C2.000E: unknown main item tag 0x0 [ 303.513838][ T5587] hid-steelseries-arctis 0003:1038:12C2.000E: unknown main item tag 0x0 [ 303.513853][ T5587] hid-steelseries-arctis 0003:1038:12C2.000E: unknown main item tag 0x0 [ 303.513869][ T5587] hid-steelseries-arctis 0003:1038:12C2.000E: unknown main item tag 0x0 [ 303.513884][ T5587] hid-steelseries-arctis 0003:1038:12C2.000E: unknown main item tag 0x0 [ 303.513899][ T5587] hid-steelseries-arctis 0003:1038:12C2.000E: unknown main item tag 0x0 [ 303.513913][ T5587] hid-steelseries-arctis 0003:1038:12C2.000E: unknown main item tag 0x0 [ 303.619027][ T5587] hid-steelseries-arctis 0003:1038:12C2.000E: unbalanced collection at end of report description [ 303.619419][ T5587] hid-steelseries-arctis 0003:1038:12C2.000E: probe with driver hid-steelseries-arctis failed with error -22 [ 303.677157][T11611] netlink: 'syz.4.2090': attribute type 19 has an invalid length. [ 303.760099][ T5587] usb 4-1: USB disconnect, device number 19 [ 303.848502][T11616] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 303.848520][T11616] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 303.848531][T11616] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x78a4 instead [ 303.848543][T11616] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xeeb3 instead [ 303.848553][T11616] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 303.848563][T11616] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 303.848573][T11616] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 303.848585][T11616] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 303.848604][T11616] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 303.848683][T11616] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 303.848693][T11616] jffs2: Further such events for this erase block will not be printed [ 303.848924][T11616] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 303.848934][T11616] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 303.848946][T11616] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x78a4 instead [ 303.848957][T11616] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xeeb3 instead [ 303.848967][T11616] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 303.848977][T11616] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 303.848987][T11616] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 303.849000][T11616] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 303.849019][T11616] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 303.849038][T11616] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 303.849046][T11616] jffs2: Further such events for this erase block will not be printed [ 303.849273][T11616] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 303.849278][T11616] jffs2: empty_blocks 30, bad_blocks 0, c->nr_blocks 32 [ 306.895750][ T29] audit: type=1400 audit(1792631986.083:3419): avc: denied { audit_write } for pid=11623 comm="syz.4.2097" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 306.952493][ T29] audit: type=1400 audit(1792631986.143:3420): avc: denied { watch } for pid=11623 comm="syz.4.2097" path="/503/bus" dev="tmpfs" ino=2674 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 307.478849][ T29] audit: type=1326 audit(1792631986.663:3421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11644 comm="syz.3.2100" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feb8bb9f559 code=0x0 [ 307.589321][ T29] audit: type=1400 audit(1792631986.773:3422): avc: denied { bind } for pid=11655 comm="syz.5.2104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 307.589796][ T29] audit: type=1400 audit(1792631986.773:3423): avc: denied { accept } for pid=11655 comm="syz.5.2104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 307.921475][ T29] audit: type=1400 audit(1792631987.103:3424): avc: denied { ioctl } for pid=11661 comm="syz.1.2105" path="/369/dev/mapper/control" dev="devtmpfs" ino=1266 ioctlcmd=0xc138fd02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 308.255143][T11666] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 308.310934][T11669] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 308.440992][ T29] audit: type=1400 audit(1792631987.623:3425): avc: denied { bind } for pid=11670 comm="syz.1.2109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 308.824862][T11685] fuse: Bad value for 'fd' [ 308.998542][ T29] audit: type=1400 audit(1792631988.183:3426): avc: denied { mount } for pid=11677 comm="syz.1.2112" name="/" dev="ecryptfs" ino=1988 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ecryptfs_t tclass=filesystem permissive=1 [ 309.100925][ T29] audit: type=1400 audit(1792631988.283:3427): avc: denied { unmount } for pid=5598 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ecryptfs_t tclass=filesystem permissive=1 [ 309.323411][T11692] FAULT_INJECTION: forcing a failure. [ 309.323411][T11692] name failslab, interval 1, probability 0, space 0, times 0 [ 309.323436][T11692] CPU: 0 UID: 0 PID: 11692 Comm: syz.1.2117 Tainted: G L syzkaller #0 PREEMPT(full) [ 309.323455][T11692] Tainted: [L]=SOFTLOCKUP [ 309.323459][T11692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 309.323467][T11692] Call Trace: [ 309.323472][T11692] [ 309.323478][T11692] dump_stack_lvl+0x100/0x190 [ 309.323501][T11692] should_fail_ex.cold+0x5/0xa [ 309.323520][T11692] should_failslab+0xc2/0x120 [ 309.323538][T11692] kmem_cache_alloc_noprof+0x92/0x6a0 [ 309.323552][T11692] ? __pfx_map_id_range_down+0x10/0x10 [ 309.323566][T11692] ? security_inode_alloc+0x3b/0x2c0 [ 309.323585][T11692] security_inode_alloc+0x3b/0x2c0 [ 309.323601][T11692] inode_init_always_gfp+0xc6f/0xfb0 [ 309.323621][T11692] alloc_inode+0x8e/0x250 [ 309.323634][T11692] new_inode+0x22/0x1c0 [ 309.323648][T11692] shmem_get_inode+0x1e3/0xf70 [ 309.323665][T11692] ? __pfx_shmem_get_inode+0x10/0x10 [ 309.323681][T11692] ? lockdep_init_map_type+0x5c/0x250 [ 309.323697][T11692] shmem_fill_super+0xb31/0x13e0 [ 309.323712][T11692] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 309.323729][T11692] ? __pfx_shmem_fill_super+0x10/0x10 [ 309.323747][T11692] ? cap_capable+0x107/0x430 [ 309.323763][T11692] ? __pfx_shmem_fill_super+0x10/0x10 [ 309.323778][T11692] get_tree_nodev+0xdd/0x190 [ 309.323799][T11692] vfs_get_tree+0x92/0x320 [ 309.323820][T11692] path_mount+0x7d0/0x2850 [ 309.323836][T11692] ? __pfx_path_mount+0x10/0x10 [ 309.323851][T11692] ? lockdep_hardirqs_on+0x7d/0x110 [ 309.323871][T11692] ? putname+0xb1/0x110 [ 309.323887][T11692] ? kmem_cache_free+0x127/0x6c0 [ 309.323905][T11692] ? __x64_sys_mount+0x293/0x310 [ 309.323916][T11692] __x64_sys_mount+0x293/0x310 [ 309.323929][T11692] ? __pfx___x64_sys_mount+0x10/0x10 [ 309.323947][T11692] do_syscall_64+0x123/0x790 [ 309.323967][T11692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.323983][T11692] RIP: 0033:0x7f873bd9f559 [ 309.323994][T11692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 309.324006][T11692] RSP: 002b:00007f873cd54028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 309.324018][T11692] RAX: ffffffffffffffda RBX: 00007f873c025fa0 RCX: 00007f873bd9f559 [ 309.324027][T11692] RDX: 0000200000000240 RSI: 0000200000000200 RDI: 0000000000000000 [ 309.324034][T11692] RBP: 00007f873be36b20 R08: 0000200000000280 R09: 0000000000000000 [ 309.324042][T11692] R10: 0000000000000400 R11: 0000000000000246 R12: 0000000000000000 [ 309.324050][T11692] R13: 00007f873c026038 R14: 00007f873c025fa0 R15: 00007ffdee361848 [ 309.324069][T11692] [ 309.858687][T11703] FAULT_INJECTION: forcing a failure. [ 309.858687][T11703] name failslab, interval 1, probability 0, space 0, times 0 [ 309.858715][T11703] CPU: 0 UID: 0 PID: 11703 Comm: syz.1.2122 Tainted: G L syzkaller #0 PREEMPT(full) [ 309.858734][T11703] Tainted: [L]=SOFTLOCKUP [ 309.858738][T11703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 309.858745][T11703] Call Trace: [ 309.858756][T11703] [ 309.858762][T11703] dump_stack_lvl+0x100/0x190 [ 309.858786][T11703] should_fail_ex.cold+0x5/0xa [ 309.858807][T11703] should_failslab+0xc2/0x120 [ 309.858823][T11703] __kvmalloc_node_noprof+0x113/0x9b0 [ 309.858840][T11703] ? listxattr+0x89/0x190 [ 309.858859][T11703] listxattr+0x89/0x190 [ 309.858875][T11703] path_listxattrat+0x2b3/0x370 [ 309.858893][T11703] ? __pfx_path_listxattrat+0x10/0x10 [ 309.858914][T11703] do_syscall_64+0x123/0x790 [ 309.858935][T11703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.858948][T11703] RIP: 0033:0x7f873bd9f559 [ 309.858959][T11703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 309.858971][T11703] RSP: 002b:00007f873cd54028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c4 [ 309.858983][T11703] RAX: ffffffffffffffda RBX: 00007f873c025fa0 RCX: 00007f873bd9f559 [ 309.858991][T11703] RDX: 000000000000001a RSI: 0000200000000680 RDI: 0000000000000004 [ 309.858998][T11703] RBP: 00007f873be36b20 R08: 0000000000000000 R09: 0000000000000000 [ 309.859005][T11703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 309.859012][T11703] R13: 00007f873c026038 R14: 00007f873c025fa0 R15: 00007ffdee361848 [ 309.859030][T11703] [ 310.322278][T11709] netlink: 27 bytes leftover after parsing attributes in process `syz.1.2134'. [ 310.385487][T11711] IPv6: sit5: Disabled Multicast RS [ 310.521972][T11715] input: syz0 as /devices/virtual/input/input27 [ 311.045360][ T5697] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 311.191928][ T5697] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 311.192973][ T5697] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.192993][ T5697] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.193006][ T5697] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 311.193030][ T5697] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.194480][ T5697] usb 2-1: config 0 descriptor?? [ 311.641645][ T5697] hid_parser_main: 496 callbacks suppressed [ 311.641661][ T5697] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 311.641681][ T5697] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 311.641702][ T5697] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 311.641717][ T5697] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 311.641741][ T5697] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 311.641756][ T5697] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 311.641771][ T5697] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 311.641787][ T5697] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 311.641802][ T5697] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 311.641818][ T5697] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 311.765225][ T5697] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 311.955388][ T5697] usb 2-1: USB disconnect, device number 25 [ 312.052846][T11748] fido_id[11748]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 312.209984][T11755] FAULT_INJECTION: forcing a failure. [ 312.209984][T11755] name failslab, interval 1, probability 0, space 0, times 0 [ 312.210010][T11755] CPU: 0 UID: 0 PID: 11755 Comm: syz.4.2143 Tainted: G L syzkaller #0 PREEMPT(full) [ 312.210029][T11755] Tainted: [L]=SOFTLOCKUP [ 312.210033][T11755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 312.210042][T11755] Call Trace: [ 312.210046][T11755] [ 312.210052][T11755] dump_stack_lvl+0x100/0x190 [ 312.210077][T11755] should_fail_ex.cold+0x5/0xa [ 312.210100][T11755] should_failslab+0xc2/0x120 [ 312.210118][T11755] __kmalloc_noprof+0xfc/0x840 [ 312.210134][T11755] ? asymmetric_key_generate_id+0x7e/0x180 [ 312.210151][T11755] asymmetric_key_generate_id+0x7e/0x180 [ 312.210167][T11755] x509_process_extension+0x4d8/0xad0 [ 312.210191][T11755] asn1_ber_decoder+0x12b3/0x2170 [ 312.210216][T11755] ? __pfx_asn1_ber_decoder+0x10/0x10 [ 312.210237][T11755] ? kasan_save_track+0x14/0x30 [ 312.210252][T11755] ? __kasan_kmalloc+0xaa/0xb0 [ 312.210267][T11755] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 312.210279][T11755] ? x509_cert_parse+0x162/0x910 [ 312.210297][T11755] x509_cert_parse+0x1c9/0x910 [ 312.210314][T11755] x509_key_preparse+0x65/0x9c0 [ 312.210334][T11755] asymmetric_key_preparse+0xce/0x1d0 [ 312.210347][T11755] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 312.210361][T11755] __key_create_or_update+0x40e/0xe20 [ 312.210382][T11755] ? __pfx___key_create_or_update+0x10/0x10 [ 312.210402][T11755] ? lookup_user_key+0x3ee/0x1300 [ 312.210426][T11755] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 312.210447][T11755] key_create_or_update+0x42/0x60 [ 312.210467][T11755] __do_sys_add_key+0x2e8/0x460 [ 312.210481][T11755] ? __pfx___do_sys_add_key+0x10/0x10 [ 312.210501][T11755] do_syscall_64+0x123/0x790 [ 312.210522][T11755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.210535][T11755] RIP: 0033:0x7f3ad3d9f559 [ 312.210547][T11755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.210558][T11755] RSP: 002b:00007f3ad4c3e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 312.210571][T11755] RAX: ffffffffffffffda RBX: 00007f3ad4025fa0 RCX: 00007f3ad3d9f559 [ 312.210579][T11755] RDX: 0000200000000240 RSI: 0000000000000000 RDI: 0000200000000000 [ 312.210586][T11755] RBP: 00007f3ad3e36b20 R08: fffffffffffffffe R09: 0000000000000000 [ 312.210593][T11755] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 312.210600][T11755] R13: 00007f3ad4026038 R14: 00007f3ad4025fa0 R15: 00007ffe4d7fc138 [ 312.210618][T11755] [ 313.071221][ T29] audit: type=1400 audit(1792631992.253:3428): avc: denied { connect } for pid=11767 comm="syz.1.2148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 313.111606][ T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 313.264843][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 313.266014][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 313.266030][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 313.266051][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.337362][ T9] usb 4-1: probing VID:PID(0424:012C) [ 313.338629][ T9] usb 4-1: vub300 testing BULK IN EndPoint(0) 81 [ 313.338644][ T9] usb 4-1: vub300 testing BULK OUT EndPoint(1) 02 [ 313.338655][ T9] usb 4-1: vub300 testing BULK IN EndPoint(2) 83 [ 313.338666][ T9] usb 4-1: vub300 testing BULK OUT EndPoint(3) 04 [ 313.338677][ T9] usb 4-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 313.753900][ T9] usb 4-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 313.955091][ T9] usb 4-1: USB vub300 remote SDIO host controller[0]connected with no SD/SDIO card inserted [ 314.078868][ T29] audit: type=1326 audit(1792631993.263:3429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11773 comm="syz.1.2150" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873bd9f559 code=0x7fc00000 [ 314.420986][T11770] kexec: Could not allocate control_code_buffer [ 314.786503][ T29] audit: type=1326 audit(1792631993.973:3430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11773 comm="syz.1.2150" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f873bd9f559 code=0x7fc00000 [ 315.040135][ T9] usb 4-1: USB disconnect, device number 20 [ 315.049198][ T5697] usb 4-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 315.148314][ T29] audit: type=1400 audit(1792631994.333:3431): avc: denied { ioctl } for pid=11796 comm="syz.1.2159" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 315.248710][ T9] USB vub300 remote SDIO host controller[0] now disconnected [ 315.541136][T11809] fuse: Bad value for 'fd' [ 315.557616][T11810] ip_tables: iptables: counters copy to user failed while replacing table [ 315.584450][T11810] ip_tables: iptables: counters copy to user failed while replacing table [ 316.101546][ C0] BUG: sleeping function called from invalid context at kernel/workqueue.c:4561 [ 316.101563][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 11845, name: syz.1.2180 [ 316.101574][ C0] preempt_count: 101, expected: 0 [ 316.101580][ C0] RCU nest depth: 1, expected: 0 [ 316.101590][ C0] locks held by syz.1.2180/11845: 4, last CPU#0: [ 316.101600][ C0] #0: ffff888024fcc080 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x124/0xa00 [ 316.101645][ C0] #1: ffffffff8fdeb1e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 316.101679][ C0] #2: ffff888043adda38 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x10f/0x320 [ 316.101717][ C0] #3: ffffc90000007c98 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0x11d/0x5f0 [ 316.101749][ C0] Preemption disabled at: [ 316.101752][ C0] [<0000000000000000>] 0x0 [ 316.101770][ C0] CPU: 0 UID: 0 PID: 11845 Comm: syz.1.2180 Tainted: G L syzkaller #0 PREEMPT(full) [ 316.101789][ C0] Tainted: [L]=SOFTLOCKUP [ 316.101794][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 316.101802][ C0] Call Trace: [ 316.101807][ C0] [ 316.101813][ C0] dump_stack_lvl+0x100/0x190 [ 316.101835][ C0] __might_resched.cold+0x1dc/0x222 [ 316.101854][ C0] ? __pfx___might_resched+0x10/0x10 [ 316.101876][ C0] ? kfree_const+0x5f/0x70 [ 316.101891][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 316.101908][ C0] cancel_delayed_work_sync+0xb8/0xf0 [ 316.101923][ C0] mmc_free_host+0x19/0x40 [ 316.101938][ C0] vub300_inactivity_timer_expired+0x42f/0x550 [ 316.101954][ C0] call_timer_fn+0x198/0x5f0 [ 316.101968][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 316.101985][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 316.102000][ C0] ? mark_held_locks+0x40/0x70 [ 316.102016][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 316.102031][ C0] __run_timers+0x757/0xb00 [ 316.102050][ C0] ? __pfx___run_timers+0x10/0x10 [ 316.102063][ C0] ? clockevents_program_event+0x23e/0x820 [ 316.102091][ C0] ? lock_acquire+0x1d1/0x380 [ 316.102109][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 316.102131][ C0] run_timer_base+0x114/0x190 [ 316.102146][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 316.102163][ C0] run_timer_softirq+0x1a/0x50 [ 316.102176][ C0] handle_softirqs+0x1e6/0x9d0 [ 316.102202][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 316.102224][ C0] ? _raw_spin_unlock+0x28/0x50 [ 316.102242][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 316.102265][ C0] __irq_exit_rcu+0x16a/0x210 [ 316.102277][ C0] irq_exit_rcu+0x9/0x30 [ 316.102289][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 316.102310][ C0] [ 316.102315][ C0] [ 316.102320][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 316.102336][ C0] RIP: 0010:write_comp_data+0x90/0xa0 [ 316.102351][ C0] Code: 00 00 4a 8d 14 dd 28 00 00 00 48 39 d7 72 1b 48 83 c6 01 48 89 30 4c 89 44 10 e0 4c 89 4c 10 e8 4c 89 54 10 f0 4a 89 4c d8 20 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 [ 316.102364][ C0] RSP: 0018:ffffc90008ce74a8 EFLAGS: 00000293 [ 316.102374][ C0] RAX: 0000000000000000 RBX: 1ffff9200119ce96 RCX: ffffffff81bc0423 [ 316.102383][ C0] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff88802e618000 [ 316.102392][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 316.102399][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888040cd8c80 [ 316.102408][ C0] R13: 800000006a75b007 R14: dffffc0000000000 R15: 0000000000000000 [ 316.102421][ C0] ? arch_check_zapped_pte+0x93/0x140 [ 316.102441][ C0] arch_check_zapped_pte+0x93/0x140 [ 316.102457][ C0] ? __pfx_arch_check_zapped_pte+0x10/0x10 [ 316.102471][ C0] ? folio_remove_rmap_ptes+0x7e0/0xdd0 [ 316.102493][ C0] ? __tlb_remove_folio_pages_size.isra.0+0x153/0x550 [ 316.102517][ C0] __zap_vma_range+0x1399/0x48d0 [ 316.102550][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 316.102568][ C0] ? mas_next_slot+0xc05/0x13a0 [ 316.102593][ C0] unmap_vmas+0x294/0x5f0 [ 316.102612][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 316.102627][ C0] ? mtree_range_walk+0x72b/0xb70 [ 316.102656][ C0] ? mas_walk+0x260/0x310 [ 316.102672][ C0] exit_mmap+0x1ef/0xa00 [ 316.102692][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 316.102709][ C0] ? rcu_is_watching+0x13/0xc0 [ 316.102732][ C0] ? find_held_lock+0x2b/0x80 [ 316.102750][ C0] ? uprobe_clear_state+0x5f/0x250 [ 316.102774][ C0] ? __mutex_unlock_slowpath+0x35d/0x930 [ 316.102809][ C0] __mmput+0x12a/0x410 [ 316.102822][ C0] mmput+0x62/0x70 [ 316.102834][ C0] do_exit+0x83b/0x2a40 [ 316.102853][ C0] ? __pfx_do_exit+0x10/0x10 [ 316.102869][ C0] ? do_raw_spin_lock+0x128/0x260 [ 316.102885][ C0] ? find_held_lock+0x2b/0x80 [ 316.102903][ C0] ? get_signal+0x7db/0x21d0 [ 316.102918][ C0] do_group_exit+0xd5/0x2a0 [ 316.102936][ C0] get_signal+0x1ebd/0x21d0 [ 316.102956][ C0] ? __pfx_get_signal+0x10/0x10 [ 316.102971][ C0] ? do_futex+0x190/0x440 [ 316.102991][ C0] arch_do_signal_or_restart+0x91/0x7e0 [ 316.103015][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 316.103041][ C0] ? fput+0x7c/0x100 [ 316.103065][ C0] exit_to_user_mode_loop+0x139/0x700 [ 316.103082][ C0] ? rcu_is_watching+0x13/0xc0 [ 316.103105][ C0] do_syscall_64+0x661/0x790 [ 316.103128][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.103142][ C0] RIP: 0033:0x7f873bd9f559 [ 316.103152][ C0] Code: Unable to access opcode bytes at 0x7f873bd9f52f. [ 316.103158][ C0] RSP: 002b:00007f873cd540e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 316.103171][ C0] RAX: fffffffffffffe00 RBX: 00007f873c025fa8 RCX: 00007f873bd9f559 [ 316.103180][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f873c025fa8 [ 316.103188][ C0] RBP: 00007f873c025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 316.103197][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 316.103205][ C0] R13: 00007f873c026038 R14: 00007ffdee361760 R15: 00007ffdee361848 [ 316.103223][ C0] [ 316.103329][ C0] [ 316.683650][ C0] ============================= [ 316.688478][ C0] WARNING: suspicious RCU usage [ 316.693329][ C0] syzkaller #0 Tainted: G W L [ 316.699278][ C0] ----------------------------- [ 316.704116][ C0] kernel/rcu/srcutree.c:1464 Illegal synchronize_srcu() in same-type SRCU (or in RCU) read-side critical section! [ 316.716077][ C0] [ 316.716077][ C0] other info that might help us debug this: [ 316.716077][ C0] [ 316.726292][ C0] [ 316.726292][ C0] rcu_scheduler_active = 2, debug_locks = 1 [ 316.734343][ C0] locks held by syz.1.2180/11845: 4, last CPU#0: [ 316.740644][ C0] #0: ffff888024fcc080 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x124/0xa00 [ 316.749700][ C0] #1: ffffffff8fdeb1e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 316.759177][ C0] #2: ffff888043adda38 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x10f/0x320 [ 316.769626][ C0] #3: ffffc90000007c98 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0x11d/0x5f0 [ 316.780159][ C0] [ 316.780159][ C0] stack backtrace: [ 316.786044][ C0] CPU: 0 UID: 0 PID: 11845 Comm: syz.1.2180 Tainted: G W L syzkaller #0 PREEMPT(full) [ 316.796955][ C0] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 316.802118][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 316.812146][ C0] Call Trace: [ 316.815400][ C0] [ 316.818222][ C0] dump_stack_lvl+0x100/0x190 [ 316.822888][ C0] lockdep_rcu_suspicious.cold+0x4f/0xb2 [ 316.828504][ C0] __synchronize_srcu+0x298/0x300 [ 316.833508][ C0] ? __pfx___synchronize_srcu+0x10/0x10 [ 316.839035][ C0] ? ktime_get_mono_fast_ns+0x1c3/0x3f0 [ 316.844562][ C0] ? synchronize_srcu+0xa8/0x380 [ 316.849474][ C0] wakeup_source_unregister.part.0+0x12c/0x540 [ 316.855609][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 316.861743][ C0] wakeup_source_unregister+0x1f/0x30 [ 316.867089][ C0] mmc_host_classdev_release+0x42/0x120 [ 316.872609][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 316.878738][ C0] device_release+0xd2/0x270 [ 316.883307][ C0] kobject_put+0x1f7/0x640 [ 316.887701][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 316.894349][ C0] put_device+0x1f/0x30 [ 316.898485][ C0] vub300_inactivity_timer_expired+0x42f/0x550 [ 316.904612][ C0] call_timer_fn+0x198/0x5f0 [ 316.909180][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 316.914283][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 316.920945][ C0] ? mark_held_locks+0x40/0x70 [ 316.925685][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 316.932331][ C0] __run_timers+0x757/0xb00 [ 316.936811][ C0] ? __pfx___run_timers+0x10/0x10 [ 316.941806][ C0] ? clockevents_program_event+0x23e/0x820 [ 316.947594][ C0] ? lock_acquire+0x1d1/0x380 [ 316.952261][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 316.957269][ C0] run_timer_base+0x114/0x190 [ 316.961920][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 316.967093][ C0] run_timer_softirq+0x1a/0x50 [ 316.971829][ C0] handle_softirqs+0x1e6/0x9d0 [ 316.976576][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 316.981842][ C0] ? _raw_spin_unlock+0x28/0x50 [ 316.986671][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 316.992288][ C0] __irq_exit_rcu+0x16a/0x210 [ 316.996936][ C0] irq_exit_rcu+0x9/0x30 [ 317.001160][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 317.006776][ C0] [ 317.009678][ C0] [ 317.012581][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 317.018540][ C0] RIP: 0010:write_comp_data+0x90/0xa0 [ 317.023900][ C0] Code: 00 00 4a 8d 14 dd 28 00 00 00 48 39 d7 72 1b 48 83 c6 01 48 89 30 4c 89 44 10 e0 4c 89 4c 10 e8 4c 89 54 10 f0 4a 89 4c d8 20 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 [ 317.043478][ C0] RSP: 0018:ffffc90008ce74a8 EFLAGS: 00000293 [ 317.049529][ C0] RAX: 0000000000000000 RBX: 1ffff9200119ce96 RCX: ffffffff81bc0423 [ 317.057484][ C0] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff88802e618000 [ 317.065426][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 317.073368][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888040cd8c80 [ 317.081325][ C0] R13: 800000006a75b007 R14: dffffc0000000000 R15: 0000000000000000 [ 317.089284][ C0] ? arch_check_zapped_pte+0x93/0x140 [ 317.094654][ C0] arch_check_zapped_pte+0x93/0x140 [ 317.099843][ C0] ? __pfx_arch_check_zapped_pte+0x10/0x10 [ 317.105632][ C0] ? folio_remove_rmap_ptes+0x7e0/0xdd0 [ 317.111161][ C0] ? __tlb_remove_folio_pages_size.isra.0+0x153/0x550 [ 317.117904][ C0] __zap_vma_range+0x1399/0x48d0 [ 317.122833][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 317.128094][ C0] ? mas_next_slot+0xc05/0x13a0 [ 317.132928][ C0] unmap_vmas+0x294/0x5f0 [ 317.137236][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 317.142059][ C0] ? mtree_range_walk+0x72b/0xb70 [ 317.147072][ C0] ? mas_walk+0x260/0x310 [ 317.151387][ C0] exit_mmap+0x1ef/0xa00 [ 317.155609][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 317.160346][ C0] ? rcu_is_watching+0x13/0xc0 [ 317.165105][ C0] ? find_held_lock+0x2b/0x80 [ 317.169761][ C0] ? uprobe_clear_state+0x5f/0x250 [ 317.174852][ C0] ? __mutex_unlock_slowpath+0x35d/0x930 [ 317.180477][ C0] __mmput+0x12a/0x410 [ 317.184519][ C0] mmput+0x62/0x70 [ 317.188211][ C0] do_exit+0x83b/0x2a40 [ 317.192344][ C0] ? __pfx_do_exit+0x10/0x10 [ 317.196923][ C0] ? do_raw_spin_lock+0x128/0x260 [ 317.201924][ C0] ? find_held_lock+0x2b/0x80 [ 317.206578][ C0] ? get_signal+0x7db/0x21d0 [ 317.211147][ C0] do_group_exit+0xd5/0x2a0 [ 317.215637][ C0] get_signal+0x1ebd/0x21d0 [ 317.220119][ C0] ? __pfx_get_signal+0x10/0x10 [ 317.224946][ C0] ? do_futex+0x190/0x440 [ 317.229256][ C0] arch_do_signal_or_restart+0x91/0x7e0 [ 317.234786][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 317.240933][ C0] ? fput+0x7c/0x100 [ 317.244823][ C0] exit_to_user_mode_loop+0x139/0x700 [ 317.250180][ C0] ? rcu_is_watching+0x13/0xc0 [ 317.254923][ C0] do_syscall_64+0x661/0x790 [ 317.259498][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.265370][ C0] RIP: 0033:0x7f873bd9f559 [ 317.269755][ C0] Code: Unable to access opcode bytes at 0x7f873bd9f52f. [ 317.276739][ C0] RSP: 002b:00007f873cd540e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 317.285122][ C0] RAX: fffffffffffffe00 RBX: 00007f873c025fa8 RCX: 00007f873bd9f559 [ 317.293082][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f873c025fa8 [ 317.301028][ C0] RBP: 00007f873c025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 317.308973][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 317.316915][ C0] R13: 00007f873c026038 R14: 00007ffdee361760 R15: 00007ffdee361848 [ 317.324882][ C0] [ 317.328040][ C0] BUG: sleeping function called from invalid context at kernel/rcu/srcutree.c:1472 [ 317.328054][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 11845, name: syz.1.2180 [ 317.328066][ C0] preempt_count: 101, expected: 0 [ 317.328072][ C0] RCU nest depth: 1, expected: 0 [ 317.328078][ C0] locks held by syz.1.2180/11845: 4, last CPU#0: [ 317.328088][ C0] #0: ffff888024fcc080 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x124/0xa00 [ 317.328131][ C0] #1: ffffffff8fdeb1e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 317.328165][ C0] #2: ffff888043adda38 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x10f/0x320 [ 317.328208][ C0] #3: ffffc90000007c98 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0x11d/0x5f0 [ 317.328240][ C0] Preemption disabled at: [ 317.328243][ C0] [<0000000000000000>] 0x0 [ 317.328260][ C0] CPU: 0 UID: 0 PID: 11845 Comm: syz.1.2180 Tainted: G W L syzkaller #0 PREEMPT(full) [ 317.328281][ C0] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 317.328287][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 317.328295][ C0] Call Trace: [ 317.328299][ C0] [ 317.328305][ C0] dump_stack_lvl+0x100/0x190 [ 317.328327][ C0] __might_resched.cold+0x1dc/0x222 [ 317.328346][ C0] ? __pfx___might_resched+0x10/0x10 [ 317.328368][ C0] ? lockdep_rcu_suspicious.cold+0x54/0xb2 [ 317.328391][ C0] __synchronize_srcu+0x13c/0x300 [ 317.328407][ C0] ? __pfx___synchronize_srcu+0x10/0x10 [ 317.328428][ C0] ? ktime_get_mono_fast_ns+0x1c3/0x3f0 [ 317.328446][ C0] ? synchronize_srcu+0xa8/0x380 [ 317.328462][ C0] wakeup_source_unregister.part.0+0x12c/0x540 [ 317.328480][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 317.328497][ C0] wakeup_source_unregister+0x1f/0x30 [ 317.328513][ C0] mmc_host_classdev_release+0x42/0x120 [ 317.328528][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 317.328543][ C0] device_release+0xd2/0x270 [ 317.328563][ C0] kobject_put+0x1f7/0x640 [ 317.328582][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 317.328597][ C0] put_device+0x1f/0x30 [ 317.328616][ C0] vub300_inactivity_timer_expired+0x42f/0x550 [ 317.328632][ C0] call_timer_fn+0x198/0x5f0 [ 317.328646][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 317.328663][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 317.328678][ C0] ? mark_held_locks+0x40/0x70 [ 317.328695][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 317.328709][ C0] __run_timers+0x757/0xb00 [ 317.328728][ C0] ? __pfx___run_timers+0x10/0x10 [ 317.328742][ C0] ? clockevents_program_event+0x23e/0x820 [ 317.328765][ C0] ? lock_acquire+0x1d1/0x380 [ 317.328782][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 317.328803][ C0] run_timer_base+0x114/0x190 [ 317.328818][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 317.328835][ C0] run_timer_softirq+0x1a/0x50 [ 317.328849][ C0] handle_softirqs+0x1e6/0x9d0 [ 317.328874][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 317.328895][ C0] ? _raw_spin_unlock+0x28/0x50 [ 317.328913][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 317.328944][ C0] __irq_exit_rcu+0x16a/0x210 [ 317.328960][ C0] irq_exit_rcu+0x9/0x30 [ 317.328972][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 317.328996][ C0] [ 317.329001][ C0] [ 317.329006][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 317.329021][ C0] RIP: 0010:write_comp_data+0x90/0xa0 [ 317.329037][ C0] Code: 00 00 4a 8d 14 dd 28 00 00 00 48 39 d7 72 1b 48 83 c6 01 48 89 30 4c 89 44 10 e0 4c 89 4c 10 e8 4c 89 54 10 f0 4a 89 4c d8 20 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 [ 317.329050][ C0] RSP: 0018:ffffc90008ce74a8 EFLAGS: 00000293 [ 317.329061][ C0] RAX: 0000000000000000 RBX: 1ffff9200119ce96 RCX: ffffffff81bc0423 [ 317.329070][ C0] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff88802e618000 [ 317.329078][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 317.329086][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888040cd8c80 [ 317.329094][ C0] R13: 800000006a75b007 R14: dffffc0000000000 R15: 0000000000000000 [ 317.329108][ C0] ? arch_check_zapped_pte+0x93/0x140 [ 317.329127][ C0] arch_check_zapped_pte+0x93/0x140 [ 317.329143][ C0] ? __pfx_arch_check_zapped_pte+0x10/0x10 [ 317.329158][ C0] ? folio_remove_rmap_ptes+0x7e0/0xdd0 [ 317.329180][ C0] ? __tlb_remove_folio_pages_size.isra.0+0x153/0x550 [ 317.329204][ C0] __zap_vma_range+0x1399/0x48d0 [ 317.329238][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 317.329256][ C0] ? mas_next_slot+0xc05/0x13a0 [ 317.329280][ C0] unmap_vmas+0x294/0x5f0 [ 317.329300][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 317.329316][ C0] ? mtree_range_walk+0x72b/0xb70 [ 317.329345][ C0] ? mas_walk+0x260/0x310 [ 317.329360][ C0] exit_mmap+0x1ef/0xa00 [ 317.329380][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 317.329397][ C0] ? rcu_is_watching+0x13/0xc0 [ 317.329419][ C0] ? find_held_lock+0x2b/0x80 [ 317.329438][ C0] ? uprobe_clear_state+0x5f/0x250 [ 317.329461][ C0] ? __mutex_unlock_slowpath+0x35d/0x930 [ 317.329495][ C0] __mmput+0x12a/0x410 [ 317.329509][ C0] mmput+0x62/0x70 [ 317.329520][ C0] do_exit+0x83b/0x2a40 [ 317.329539][ C0] ? __pfx_do_exit+0x10/0x10 [ 317.329555][ C0] ? do_raw_spin_lock+0x128/0x260 [ 317.329571][ C0] ? find_held_lock+0x2b/0x80 [ 317.329589][ C0] ? get_signal+0x7db/0x21d0 [ 317.329604][ C0] do_group_exit+0xd5/0x2a0 [ 317.329622][ C0] get_signal+0x1ebd/0x21d0 [ 317.329641][ C0] ? __pfx_get_signal+0x10/0x10 [ 317.329656][ C0] ? do_futex+0x190/0x440 [ 317.329676][ C0] arch_do_signal_or_restart+0x91/0x7e0 [ 317.329699][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 317.329726][ C0] ? fput+0x7c/0x100 [ 317.329749][ C0] exit_to_user_mode_loop+0x139/0x700 [ 317.329765][ C0] ? rcu_is_watching+0x13/0xc0 [ 317.329784][ C0] do_syscall_64+0x661/0x790 [ 317.329808][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.329821][ C0] RIP: 0033:0x7f873bd9f559 [ 317.329832][ C0] Code: Unable to access opcode bytes at 0x7f873bd9f52f. [ 317.329838][ C0] RSP: 002b:00007f873cd540e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 317.329850][ C0] RAX: fffffffffffffe00 RBX: 00007f873c025fa8 RCX: 00007f873bd9f559 [ 317.329859][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f873c025fa8 [ 317.329867][ C0] RBP: 00007f873c025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 317.329875][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 317.329883][ C0] R13: 00007f873c026038 R14: 00007ffdee361760 R15: 00007ffdee361848 [ 317.329901][ C0] [ 317.329918][ C0] ODEBUG: object ffffc90000007a60 is NOT on stack ffffc90008ce0000, but annotated. [ 317.330342][ C0] ------------[ cut here ]------------ [ 317.330347][ C0] 1 [ 317.330354][ C0] WARNING: lib/debugobjects.c:672 at lookup_object_or_alloc.part.0.cold+0x19/0x40, CPU#0: syz.1.2180/11845 [ 317.991925][ C0] Modules linked in: [ 317.995806][ C0] CPU: 0 UID: 0 PID: 11845 Comm: syz.1.2180 Tainted: G W L syzkaller #0 PREEMPT(full) [ 318.006713][ C0] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 318.011897][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 318.021926][ C0] RIP: 0010:lookup_object_or_alloc.part.0.cold+0x19/0x40 [ 318.028953][ C0] Code: c4 60 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 c5 01 89 2d 30 7e 7f 1b 4c 89 e6 48 c7 c7 c0 84 62 8c e8 11 9d eb ff 90 <0f> 0b 90 e9 32 55 01 04 83 c5 01 89 2d 0f 7e 7f 1b 49 39 c4 73 da [ 318.049006][ C0] RSP: 0018:ffffc900000078f0 EFLAGS: 00010082 [ 318.055062][ C0] RAX: 0000000000000050 RBX: ffff88802be03188 RCX: 0000000000000000 [ 318.063008][ C0] RDX: 0000000000000050 RSI: ffffffff81ea44f9 RDI: fffff52000000f0f [ 318.070963][ C0] RBP: 0000000000000001 R08: 0000000000000007 R09: 0000000000000000 [ 318.078925][ C0] R10: 0000000000000102 R11: 0000000000000001 R12: ffffc90000007a60 [ 318.086885][ C0] R13: ffff88802e618000 R14: 0000000000000001 R15: 0000000000000000 [ 318.094832][ C0] FS: 0000000000000000(0000) GS:ffff888122930000(0000) knlGS:0000000000000000 [ 318.103926][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 318.110496][ C0] CR2: 0000001b32b0fff8 CR3: 0000000068af2000 CR4: 00000000003526f0 [ 318.118442][ C0] Call Trace: [ 318.121698][ C0] [ 318.124538][ C0] __debug_object_init+0x2a9/0x3d0 [ 318.129638][ C0] ? __pfx___debug_object_init+0x10/0x10 [ 318.135270][ C0] ? lockdep_init_map_type+0x5c/0x250 [ 318.140621][ C0] ? lockdep_init_map_type+0x5c/0x250 [ 318.145973][ C0] ? __init_swait_queue_head+0xca/0x150 [ 318.151516][ C0] __synchronize_srcu+0x1be/0x300 [ 318.156525][ C0] ? __pfx___synchronize_srcu+0x10/0x10 [ 318.162071][ C0] ? ktime_get_mono_fast_ns+0x1c3/0x3f0 [ 318.167597][ C0] ? synchronize_srcu+0xa8/0x380 [ 318.172513][ C0] wakeup_source_unregister.part.0+0x12c/0x540 [ 318.178664][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 318.184796][ C0] wakeup_source_unregister+0x1f/0x30 [ 318.190148][ C0] mmc_host_classdev_release+0x42/0x120 [ 318.195673][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 318.201806][ C0] device_release+0xd2/0x270 [ 318.206380][ C0] kobject_put+0x1f7/0x640 [ 318.210775][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 318.217774][ C0] put_device+0x1f/0x30 [ 318.221911][ C0] vub300_inactivity_timer_expired+0x42f/0x550 [ 318.228043][ C0] call_timer_fn+0x198/0x5f0 [ 318.232612][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 318.237703][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 318.244357][ C0] ? mark_held_locks+0x40/0x70 [ 318.249104][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 318.255753][ C0] __run_timers+0x757/0xb00 [ 318.260238][ C0] ? __pfx___run_timers+0x10/0x10 [ 318.265237][ C0] ? clockevents_program_event+0x23e/0x820 [ 318.271046][ C0] ? lock_acquire+0x1d1/0x380 [ 318.275703][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 318.280725][ C0] run_timer_base+0x114/0x190 [ 318.285378][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 318.290572][ C0] run_timer_softirq+0x1a/0x50 [ 318.295310][ C0] handle_softirqs+0x1e6/0x9d0 [ 318.300062][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 318.305329][ C0] ? _raw_spin_unlock+0x28/0x50 [ 318.310427][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 318.316045][ C0] __irq_exit_rcu+0x16a/0x210 [ 318.320703][ C0] irq_exit_rcu+0x9/0x30 [ 318.324944][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 318.330560][ C0] [ 318.333464][ C0] [ 318.336367][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 318.342336][ C0] RIP: 0010:write_comp_data+0x90/0xa0 [ 318.347682][ C0] Code: 00 00 4a 8d 14 dd 28 00 00 00 48 39 d7 72 1b 48 83 c6 01 48 89 30 4c 89 44 10 e0 4c 89 4c 10 e8 4c 89 54 10 f0 4a 89 4c d8 20 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 [ 318.367265][ C0] RSP: 0018:ffffc90008ce74a8 EFLAGS: 00000293 [ 318.373325][ C0] RAX: 0000000000000000 RBX: 1ffff9200119ce96 RCX: ffffffff81bc0423 [ 318.381292][ C0] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff88802e618000 [ 318.389242][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 318.397186][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888040cd8c80 [ 318.405131][ C0] R13: 800000006a75b007 R14: dffffc0000000000 R15: 0000000000000000 [ 318.413083][ C0] ? arch_check_zapped_pte+0x93/0x140 [ 318.418444][ C0] arch_check_zapped_pte+0x93/0x140 [ 318.423619][ C0] ? __pfx_arch_check_zapped_pte+0x10/0x10 [ 318.429400][ C0] ? folio_remove_rmap_ptes+0x7e0/0xdd0 [ 318.434932][ C0] ? __tlb_remove_folio_pages_size.isra.0+0x153/0x550 [ 318.441678][ C0] __zap_vma_range+0x1399/0x48d0 [ 318.446626][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 318.451906][ C0] ? mas_next_slot+0xc05/0x13a0 [ 318.456748][ C0] unmap_vmas+0x294/0x5f0 [ 318.461062][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 318.465890][ C0] ? mtree_range_walk+0x72b/0xb70 [ 318.470910][ C0] ? mas_walk+0x260/0x310 [ 318.475220][ C0] exit_mmap+0x1ef/0xa00 [ 318.479444][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 318.484187][ C0] ? rcu_is_watching+0x13/0xc0 [ 318.488950][ C0] ? find_held_lock+0x2b/0x80 [ 318.493607][ C0] ? uprobe_clear_state+0x5f/0x250 [ 318.498704][ C0] ? __mutex_unlock_slowpath+0x35d/0x930 [ 318.504334][ C0] __mmput+0x12a/0x410 [ 318.508378][ C0] mmput+0x62/0x70 [ 318.512071][ C0] do_exit+0x83b/0x2a40 [ 318.516220][ C0] ? __pfx_do_exit+0x10/0x10 [ 318.520802][ C0] ? do_raw_spin_lock+0x128/0x260 [ 318.525808][ C0] ? find_held_lock+0x2b/0x80 [ 318.530470][ C0] ? get_signal+0x7db/0x21d0 [ 318.535037][ C0] do_group_exit+0xd5/0x2a0 [ 318.539518][ C0] get_signal+0x1ebd/0x21d0 [ 318.544002][ C0] ? __pfx_get_signal+0x10/0x10 [ 318.548841][ C0] ? do_futex+0x190/0x440 [ 318.553153][ C0] arch_do_signal_or_restart+0x91/0x7e0 [ 318.558683][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 318.564824][ C0] ? fput+0x7c/0x100 [ 318.568707][ C0] exit_to_user_mode_loop+0x139/0x700 [ 318.574060][ C0] ? rcu_is_watching+0x13/0xc0 [ 318.578824][ C0] do_syscall_64+0x661/0x790 [ 318.583412][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.589291][ C0] RIP: 0033:0x7f873bd9f559 [ 318.593697][ C0] Code: Unable to access opcode bytes at 0x7f873bd9f52f. [ 318.600685][ C0] RSP: 002b:00007f873cd540e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 318.609068][ C0] RAX: fffffffffffffe00 RBX: 00007f873c025fa8 RCX: 00007f873bd9f559 [ 318.617011][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f873c025fa8 [ 318.624956][ C0] RBP: 00007f873c025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 318.632904][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 318.640850][ C0] R13: 00007f873c026038 R14: 00007ffdee361760 R15: 00007ffdee361848 [ 318.648814][ C0] [ 318.651825][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 318.659081][ C0] CPU: 0 UID: 0 PID: 11845 Comm: syz.1.2180 Tainted: G W L syzkaller #0 PREEMPT(full) [ 318.670005][ C0] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 318.675170][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 318.685201][ C0] Call Trace: [ 318.688476][ C0] [ 318.691308][ C0] dump_stack_lvl+0x100/0x190 [ 318.695971][ C0] vpanic+0x553/0x970 [ 318.700014][ C0] ? __pfx_vpanic+0x10/0x10 [ 318.704509][ C0] panic+0xd1/0xe0 [ 318.708204][ C0] ? __pfx_panic+0x10/0x10 [ 318.712601][ C0] check_panic_on_warn.cold+0x19/0x34 [ 318.717964][ C0] ? lookup_object_or_alloc.part.0.cold+0x19/0x40 [ 318.724374][ C0] __warn.cold+0x191/0x318 [ 318.728798][ C0] __report_bug+0x30f/0x440 [ 318.733276][ C0] ? lookup_object_or_alloc.part.0.cold+0x19/0x40 [ 318.739674][ C0] ? __pfx___report_bug+0x10/0x10 [ 318.744674][ C0] ? console_srcu_read_unlock+0x46/0x60 [ 318.750212][ C0] ? __wake_up_klogd+0xe5/0x140 [ 318.755042][ C0] ? vprintk_emit+0x1c9/0x6b0 [ 318.759698][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 318.764718][ C0] ? lookup_object_or_alloc.part.0.cold+0x19/0x40 [ 318.771553][ C0] report_bug+0xb3/0x220 [ 318.775795][ C0] ? lookup_object_or_alloc.part.0.cold+0x19/0x40 [ 318.782192][ C0] handle_bug+0x16a/0x2a0 [ 318.786516][ C0] exc_invalid_op+0x17/0x50 [ 318.791019][ C0] asm_exc_invalid_op+0x1a/0x20 [ 318.795845][ C0] RIP: 0010:lookup_object_or_alloc.part.0.cold+0x19/0x40 [ 318.802872][ C0] Code: c4 60 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 c5 01 89 2d 30 7e 7f 1b 4c 89 e6 48 c7 c7 c0 84 62 8c e8 11 9d eb ff 90 <0f> 0b 90 e9 32 55 01 04 83 c5 01 89 2d 0f 7e 7f 1b 49 39 c4 73 da [ 318.822488][ C0] RSP: 0018:ffffc900000078f0 EFLAGS: 00010082 [ 318.828530][ C0] RAX: 0000000000000050 RBX: ffff88802be03188 RCX: 0000000000000000 [ 318.836474][ C0] RDX: 0000000000000050 RSI: ffffffff81ea44f9 RDI: fffff52000000f0f [ 318.844435][ C0] RBP: 0000000000000001 R08: 0000000000000007 R09: 0000000000000000 [ 318.852381][ C0] R10: 0000000000000102 R11: 0000000000000001 R12: ffffc90000007a60 [ 318.860325][ C0] R13: ffff88802e618000 R14: 0000000000000001 R15: 0000000000000000 [ 318.868279][ C0] ? vprintk_emit+0x1c9/0x6b0 [ 318.872946][ C0] __debug_object_init+0x2a9/0x3d0 [ 318.878036][ C0] ? __pfx___debug_object_init+0x10/0x10 [ 318.883665][ C0] ? lockdep_init_map_type+0x5c/0x250 [ 318.889031][ C0] ? lockdep_init_map_type+0x5c/0x250 [ 318.894380][ C0] ? __init_swait_queue_head+0xca/0x150 [ 318.899915][ C0] __synchronize_srcu+0x1be/0x300 [ 318.904919][ C0] ? __pfx___synchronize_srcu+0x10/0x10 [ 318.910448][ C0] ? ktime_get_mono_fast_ns+0x1c3/0x3f0 [ 318.915969][ C0] ? synchronize_srcu+0xa8/0x380 [ 318.920884][ C0] wakeup_source_unregister.part.0+0x12c/0x540 [ 318.927014][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 318.933145][ C0] wakeup_source_unregister+0x1f/0x30 [ 318.938495][ C0] mmc_host_classdev_release+0x42/0x120 [ 318.944016][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 318.950160][ C0] device_release+0xd2/0x270 [ 318.954733][ C0] kobject_put+0x1f7/0x640 [ 318.959138][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 318.965787][ C0] put_device+0x1f/0x30 [ 318.969924][ C0] vub300_inactivity_timer_expired+0x42f/0x550 [ 318.976071][ C0] call_timer_fn+0x198/0x5f0 [ 318.980638][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 318.985726][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 318.992380][ C0] ? mark_held_locks+0x40/0x70 [ 318.997123][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 319.003772][ C0] __run_timers+0x757/0xb00 [ 319.008257][ C0] ? __pfx___run_timers+0x10/0x10 [ 319.013256][ C0] ? clockevents_program_event+0x23e/0x820 [ 319.019048][ C0] ? lock_acquire+0x1d1/0x380 [ 319.023706][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 319.028733][ C0] run_timer_base+0x114/0x190 [ 319.033392][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 319.038583][ C0] run_timer_softirq+0x1a/0x50 [ 319.043337][ C0] handle_softirqs+0x1e6/0x9d0 [ 319.048086][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 319.053353][ C0] ? _raw_spin_unlock+0x28/0x50 [ 319.058182][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 319.063810][ C0] __irq_exit_rcu+0x16a/0x210 [ 319.068491][ C0] irq_exit_rcu+0x9/0x30 [ 319.072706][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 319.078337][ C0] [ 319.081243][ C0] [ 319.084321][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 319.090278][ C0] RIP: 0010:write_comp_data+0x90/0xa0 [ 319.095646][ C0] Code: 00 00 4a 8d 14 dd 28 00 00 00 48 39 d7 72 1b 48 83 c6 01 48 89 30 4c 89 44 10 e0 4c 89 4c 10 e8 4c 89 54 10 f0 4a 89 4c d8 20 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 [ 319.115227][ C0] RSP: 0018:ffffc90008ce74a8 EFLAGS: 00000293 [ 319.121272][ C0] RAX: 0000000000000000 RBX: 1ffff9200119ce96 RCX: ffffffff81bc0423 [ 319.129234][ C0] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff88802e618000 [ 319.137193][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 319.145135][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888040cd8c80 [ 319.153078][ C0] R13: 800000006a75b007 R14: dffffc0000000000 R15: 0000000000000000 [ 319.161033][ C0] ? arch_check_zapped_pte+0x93/0x140 [ 319.166392][ C0] arch_check_zapped_pte+0x93/0x140 [ 319.171566][ C0] ? __pfx_arch_check_zapped_pte+0x10/0x10 [ 319.177347][ C0] ? folio_remove_rmap_ptes+0x7e0/0xdd0 [ 319.182875][ C0] ? __tlb_remove_folio_pages_size.isra.0+0x153/0x550 [ 319.189622][ C0] __zap_vma_range+0x1399/0x48d0 [ 319.194556][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 319.199819][ C0] ? mas_next_slot+0xc05/0x13a0 [ 319.204657][ C0] unmap_vmas+0x294/0x5f0 [ 319.208981][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 319.213811][ C0] ? mtree_range_walk+0x72b/0xb70 [ 319.218848][ C0] ? mas_walk+0x260/0x310 [ 319.223155][ C0] exit_mmap+0x1ef/0xa00 [ 319.227377][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 319.232117][ C0] ? rcu_is_watching+0x13/0xc0 [ 319.236863][ C0] ? find_held_lock+0x2b/0x80 [ 319.241520][ C0] ? uprobe_clear_state+0x5f/0x250 [ 319.246614][ C0] ? __mutex_unlock_slowpath+0x35d/0x930 [ 319.252241][ C0] __mmput+0x12a/0x410 [ 319.256286][ C0] mmput+0x62/0x70 [ 319.259979][ C0] do_exit+0x83b/0x2a40 [ 319.264117][ C0] ? __pfx_do_exit+0x10/0x10 [ 319.268685][ C0] ? do_raw_spin_lock+0x128/0x260 [ 319.273686][ C0] ? find_held_lock+0x2b/0x80 [ 319.278345][ C0] ? get_signal+0x7db/0x21d0 [ 319.282913][ C0] do_group_exit+0xd5/0x2a0 [ 319.287421][ C0] get_signal+0x1ebd/0x21d0 [ 319.291909][ C0] ? __pfx_get_signal+0x10/0x10 [ 319.296749][ C0] ? do_futex+0x190/0x440 [ 319.301065][ C0] arch_do_signal_or_restart+0x91/0x7e0 [ 319.306595][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 319.312734][ C0] ? fput+0x7c/0x100 [ 319.316614][ C0] exit_to_user_mode_loop+0x139/0x700 [ 319.321964][ C0] ? rcu_is_watching+0x13/0xc0 [ 319.326709][ C0] do_syscall_64+0x661/0x790 [ 319.331299][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.337170][ C0] RIP: 0033:0x7f873bd9f559 [ 319.341563][ C0] Code: Unable to access opcode bytes at 0x7f873bd9f52f. [ 319.348553][ C0] RSP: 002b:00007f873cd540e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 319.356957][ C0] RAX: fffffffffffffe00 RBX: 00007f873c025fa8 RCX: 00007f873bd9f559 [ 319.364904][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f873c025fa8 [ 319.372849][ C0] RBP: 00007f873c025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 319.380795][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 319.388786][ C0] R13: 00007f873c026038 R14: 00007ffdee361760 R15: 00007ffdee361848 [ 319.396766][ C0] [ 319.399829][ C0] Kernel Offset: disabled [ 319.404143][ C0] Rebooting in 86400 seconds..