last executing test programs: 2m57.263615865s ago: executing program 2 (id=1373): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001240), 0x42402) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000001280)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x802c550a, &(0x7f00000013c0)=@urb_type_control={0x2, {0x0, 0x1}, 0x6, 0xe1, 0x0, 0x0, 0x1, 0x10000007, 0x0, 0x7, 0x7fffffff, 0x0}) write$sndseq(r0, &(0x7f0000001340)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000001380)={0x16f, @tick=0x7, 0x0, {}, 0x0, 0x0, 0x80}) 2m56.887579475s ago: executing program 2 (id=1378): r0 = fsopen(&(0x7f00000000c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000380), 0x1000) 2m56.739302305s ago: executing program 2 (id=1381): mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, 0x0) 2m56.570679549s ago: executing program 2 (id=1384): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) open(&(0x7f0000000100)='./file0\x00', 0x1419c2, 0x1cf) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 2m56.397729459s ago: executing program 2 (id=1386): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x4) clock_nanosleep(0x2, 0xfffffdfc, 0x0, 0x0) mount(0x0, &(0x7f0000000600)='./proc\x00', &(0x7f0000000640)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./proc/sys/net/ipv4/tcp_ehash_entries\x00', 0x0, 0x0) read(r0, 0x0, 0x0) 2m55.904297124s ago: executing program 2 (id=1392): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000000c0)=0x2001) readv(r0, &(0x7f0000000a80)=[{&(0x7f00000009c0)=""/65, 0x41}], 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0xfffffffe]}}, {0x0, 0x0, 0x3, 0x0, @time}], 0x38) 2m55.716052278s ago: executing program 32 (id=1392): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000000c0)=0x2001) readv(r0, &(0x7f0000000a80)=[{&(0x7f00000009c0)=""/65, 0x41}], 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0xfffffffe]}}, {0x0, 0x0, 0x3, 0x0, @time}], 0x38) 1m14.068150865s ago: executing program 0 (id=2673): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'netpci0\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x1, 0x4, 0x89, 0x0, 0xffb, 0x7, 0xb6b, 0x0, 0x4, 0x1, 0x3, 0x9, 0x100, 0x1003, 0x2, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0xa, 0x5, 0x100000, 0x9, 0x3, 0x63c, 0x400010, 0x10001006, 0x2, 0x8, 0x1bf7, 0xb, 0x40, 0xa0d1ae, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x85, 0x79b, 0x3, 0x40001, 0x7f, 0x4, 0x6, 0x9, 0x8001, 0x101, 0xa, 0x1fa0860a, 0x401, 0x100aa, 0x1000, 0x2, 0x0, 0x7, 0x8b, 0x5, 0x2af, 0x9, 0x5, 0x2, 0x1, 0x9, 0x5, 0x7, 0x1, 0x0, 0x4, 0x3, 0x8, 0x6, 0x3, 0x3, 0x480, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x0, 0x81, 0x100, 0x5f9, 0x252, 0x2f, 0xb, 0x4, 0x9, 0xc50, 0xffffffff, 0xe, 0x2, 0xd9a, 0x3, 0xc102, 0xfffffffd, 0x3, 0x2, 0x8927, 0x8, 0xfe, 0x4, 0x2, 0x40, 0x8, 0x0, 0x5, 0x402, 0x66cd, 0x8000008, 0x8, 0x799e, 0x1fc, 0x1ff, 0xffffffff]}}) r0 = socket(0x2b, 0x1, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b0, 0x0, 0x238, 0x170, 0xd8, 0x0, 0x410, 0x410, 0x410, 0x410, 0x410, 0x6, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xffffff00, 0x0, 'veth0\x00', 'veth0_to_bridge\x00', {}, {0xff}, 0x62, 0x0, 0x50}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xb, 0x4, @ipv4=@loopback, 0x4e24}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0xff, 'geneve0\x00', 'veth1_to_team\x00', {}, {}, 0x89, 0x6, 0x24}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff, 'ip6_vti0\x00', 'geneve0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x5}, {0x0, 0x6}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x31, 0x7, 0x1}}}, {{@ip={@loopback, @multicast1, 0xff, 0xff, 'veth0_to_batadv\x00', 'bridge_slave_0\x00', {0xff}, {0xff}, 0x44, 0x1, 0x15}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x55d, 0x3, @multicast1, 0x4e21}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xcf8a) 1m13.915595604s ago: executing program 0 (id=2664): r0 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x42, 0x1ef) mkdirat(0xffffffffffffff9c, &(0x7f0000001f80)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000001fc0)='./file2\x00', 0x387) mount$overlay(0x0, &(0x7f0000002000)='./file0\x00', &(0x7f0000002040), 0x0, &(0x7f0000002080)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7) chmod(&(0x7f0000000300)='./file0/file1\x00', 0x12b) 1m13.730441416s ago: executing program 0 (id=2665): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r2, 0x25, 0x0, @void}, 0x10) r3 = socket(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'team_slave_0\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x2, 0x0, 0x4, 0x2, 0x1}}) 1m13.534646388s ago: executing program 0 (id=2678): r0 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000680)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0x1, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xad5, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}], '\x00', 0x100}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000000280)={0x1, 0x8, 0xa4b0, 0x3ff, 0x100000000, 0xc182, 0x100008001, 0x8, 0x5, 0xfffffffffffffffe, 0xfffffff8, 0x2}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r0, 0x4122, 0x0) 1m13.204932771s ago: executing program 0 (id=2681): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x802) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000300)={0x20, 0xc6cdb91b1c448aed}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m12.008899525s ago: executing program 0 (id=2704): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000240), 0x22242, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000002c0)='.\x00', &(0x7f0000000300), 0x6, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f00000001c0)={0x20b, 0x6, 0x1000, 0x2, 0x81, "bcb2931e37ad87d370e124e5b8a45a8d865b64", 0x8000, 0x5}) 1m11.852199255s ago: executing program 33 (id=2704): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000240), 0x22242, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000002c0)='.\x00', &(0x7f0000000300), 0x6, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f00000001c0)={0x20b, 0x6, 0x1000, 0x2, 0x81, "bcb2931e37ad87d370e124e5b8a45a8d865b64", 0x8000, 0x5}) 4.145020143s ago: executing program 1 (id=3224): connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a"], 0x0, 0x7, 0x0, 0x0, 0x41100, 0x8}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x8, 0x4) write(r0, &(0x7f0000000040)="a9", 0x1) 4.007802382s ago: executing program 1 (id=3225): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3.838676888s ago: executing program 4 (id=3226): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mremap(&(0x7f00002f4000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f00006d5000/0x1000)=nil) 3.835302636s ago: executing program 1 (id=3227): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) close(0x3) socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000001740)=0x7ffffffd, 0x4) write$binfmt_script(r0, 0x0, 0x6f4000) 3.751846876s ago: executing program 5 (id=3238): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4b564d07, 0x0, 0x5}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) 3.364478777s ago: executing program 1 (id=3231): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x438, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x368, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0x1a0, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x4) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000800)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0) 3.364284823s ago: executing program 5 (id=3232): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40010}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.202518719s ago: executing program 6 (id=3233): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000000300)=@vmx={0x306, 0x0, 0x2080, {0x26000, 0x1ffc, {0x2}}, {"4eeeecea093bab0201dda007cf72a249dd3e8c2b2b70ca589be5623ab776e5a73354f52dbedb4ceee67452baab1f34cf3dc8aa44ae238e9132eabd7b48a3862940b2356f1afb0c80f616d3a7054ef6dca431423b21c5b1e855b1c4c24f49e53a7f4d849493198fe339409129897206999292fa55e9c23d3dd8cfc64f278d8fd2bb740ebe209ecbcadeb4fab786063dba02edaa07bb14d54931594469420c585a0e0ca1e4a66be1901a056c9a95cf8b42c8184646ba4c6496b67275b6ab9c0419da5d605b053f9167d97b6a8d921ae4b2fae90a2128719e13e8b9beef192eb52e07b8588d2fdd4128f8faf4af294307265757303f66dc3ea20b6d58c325da2373970c134b5ea795609a777f9428171d6f2e7f10574ac64ce091c0eb5f6f89d5dfd2d2ff4f110c2895b830e401c63409ec7c53817fa6663d322eec6aa7b74c075964833f5aa6f4bf981289812188ea2b460b40a8d531ff68f32fb5dd789f53e9a3eddbfb66d743b26dffdfe9d91355b5be7d6acd1c1f41f86e553769f85ce5e9e9704d0365524123912f12f49e15e11c6e0b723002a474a984d9b2137a665c35a3a4314f78c0f70b80712747d90fa856f6eb67ccf8017c90b743b2987c6a35bd16ef1c584a6dced91d9e5bd99012d30e584393c0a7496b4fa973dacaf18fec546cb1dbbcfc1f5078409ee9837c1f053fd8245ea8429b1e7ac7854e9c6deece96f851773e36088880570f50036db2f586d4569de225e891763a21206b26c29c3db52385f4ba6362ae68379521338e77a586b39e225e7ac1bab73d71309e5b294b26f6f068687e71a708569ad2f60993136b01024c399d5bbd671113ee47b5a04f7a35f82ab111dd0269d1d0bcaceb419cc7e1790726d7a29b4d52621aa050f8fde91273988cf86b30dee2a8f2151791b426b21a91b189e1d2567bec8d3d419c0b5c2141e24bfeb0f49f9bad5a19c85d39dad5e66c713d72e0613136e99622f5e2d5436ffb5f11905fcaf7d5db21ee71cf50a9ea71410daa0bb1ed65ab011da1a6cacc5251e14515362d5e6d9251f7cca6575a5ce37811f499a99ae252c58978604de5c5434fad7daf94cdf1e8313d79105f1098bdf8836d1e37ca8506af09b70f6031b7f8e86579f94fb68cadfe40a64f379f2ea71c2c01769722f5843a6144a6ac3f0c2b523bbceab3b231205ae16250a37d2730cf44bc13b376ae5ef7d12d07ab78154eaae033bc57df91a7175ed30f7df9455075785ebd932abd2f2c36c0206f99e1c818320038547e3763e0d459e57a3d94f33ef2359d5eca4c50a9621feb19a9f17438a6487ae5e0fd0d16276de2179cc916134b66a424547925f96cb20126b5d04d44b4f0e0df401b0ffcecd8b4603f118b1aa00afeb50261cd3707d75a3f9dad50c482303c3ac3e103c0e2390fb13cfd55f655ee990fdf71e7f9ad2d704b88a9d4a46f1c740ad1e1bc626edf6e4bb4b1be44cb3e35f246666d5367fb90007b69e22ac65c8abd93a4151882180f52f4f25e4253b4236c2a817d3dea941200125b2ac66ca4421580a571a440a11dca0be74ec770b6846f014e9f0e28785aa11abb5e3958c51423037a1b10ed57025e485b3b373c576edd784ab769b49b893303ee00b3d826c7f4294bf0bda3db47d30dbc3f43daedb875c6afd5be0a1f80dc6ba5fd71b09a3df3f99d435a3d768bed1cf62b129363b08bf8cf45c3b676e7170fc77b28f04dcf75f41126103b097ae39fbcf725e6503e32415abb5ff5e9c1c7d3d79d8485d1e9e15ef477e5c9bcfe0d592f5ed9a65586b826511f455dee9631f31e4853a64a8e35bc3a8ab057e7074531f51b12174f7ea640ba78df5851b4b2baaf11d0d42b082cc722885cc4364b39eaedaaefd5d20d77223ea532b928e2dca546d3a4578ae181d9bdd2750991ec6d5df6d43cba054edcf8d26bfa1ca0ee02904e37fc44204b5260ea80dc8839d76b39d7b4e1a676fcdea8092924c7fcb833154143a0b135a624692549f71003d22862aa0a2cb54ebdeae9ad865202498886e0390e7b00c4a06ba7e709b7205ac2fe049b75412ec44db4a157951487442103036ba10c454fbb8f1c9fe6a396c6f4e15d603cf387ade1f932233d5cd15b7814c468d52a251ea5bc6aa43b90b9db64fe5cc61690b92230b42dae9dd905b4d6a8fece670522203a67b6346846b2400533fa0a3294ba4a6ee3aee233f763580dbd167f39d002f72fbec14fb764b70db1f3c346cab2dad3e10a8e95598f331f75e8e63ab12d20120dd15926ff886cc9da1ed9fa3c2892f099c1f2c0b67fa279dd7416319a43592f101fbeb435d9d98beba3b44f92023b791291b8ce3de8d8183952d41b027b3d31338f83bd22ab3dd64fac2574839754d4a1d1a5e763338c2304e5848c7077d1f8633d8f5b52c7f31f14936e2e007f318533a1b946f632307bfbddba62d4cd0742e7512ebc67826b89a26a5e3ea2dd63b32d33dad4099a3e1ffaf8cf5d1414194ea20a4523e1e138182f86d004acaf18de946b6c3f6346b039b8cfa45938c72af71629517009da4f90a2f29e2ae0fb69d2ab3236fbf71ebd9a5814fa763223e28ac063f4d4f26e01dd3bad7a0ea42021402a70197dafad4e78d484cb60ca4f83c4b43ffe057b234c312ccf1845145882a7ca3423786b5c7602fbcd3d224de273212556fb7d700e67aabe0e693243b193d7d650da36938e2a8e3da652c51f672d43a6dab3402a021e235224407f0bd84d4ba856cd28f0dcd41fb2f4f2f918da2136567b8e785c6cc5789061db58c82b7d1fd55b10fb566e67e222a5e2a52b449f7cd7948b3a237e6b07e734b56e447b440321905b57e12e7f23bdb8aba2de54120ad8965923cb1a9e11485ca2da89ca63d7388bb8cc75e42bc09e0fbfde7fad74b9493b5275f784a07337bc6a1a9b668b77abb780e685901f7194a55d3f36264a2462c8d11d9e8ee5b27cb5753769bad0c484f3863231c3ca79f100164f38ca3fc6fd9415550d6888b277304be1f08472b378e2ee9cdf80d822d92b9d804b3678bd0e80688bbf1e9d7b35f5d770b6082de104d4392f75d4677467d58ea20246a8c39698a0919b4a9bdb8100ed1d77fa3b0f4e35700dd05e22940c385ef1ad2cea5b1c027dcdb05ca6af3e8cef2e21abcbbbf7493b45f7fee6a2eca792759c225a8d3e930f46d430fa5385d6f475a766beb20e8f63c922fb96a55abb50b7ea82ac7892a44d7d031e05cfd0e32c2e393328b4db7e7dbc57573da2f7cce912525ac2c615c8e70a93690340540d3ebf5db132a85a038149a827ff9c50f21f3fe8a2a873c9d974e869f119c1dbf2e3001c99d978573c9ddbb8ddaee0aa4c12894c830872cec916681469dcf900c104c2fe50a8d33269d4789bbea141811b8a83a81a7b88dcca53f7772f107a1578557e7bb40824ef447c60aa7db9f58f306c0a939892ed45f9a82b9d76b1a222e2e332c32487d233af164f3fe9c36f604c60b86cfbbeef4f4d3beb311c8f4f63247e734a2fd3b48f407be929275fa17d7bae3d1195ccf112f2c6ac535fa9a5b155dad6272ff931de18c9a2d4febe37fad89b14dcd5aa658cc2cf8ecc411fe8c99a3b5c8f37cd55cf60cd3e59d83eb8c4c2dc45095b697e2f6af6da281dd0ce03d324b23ecf7a972126c43d79fb4b25e536b26a04fc2e093ce63da5c7132fe6d0056163ba2ca5c90324315617e915d7798694c2542fa3b20eb16068f556eff63c4d269c53af5b41fe87958c4c3f297b09bfa0846f730af10e85dfcbfd3b31d9fdec3625e93492273f5cb1d88896a0a51f73b78ca4c6d86aedc1611aee8f3035aa0468d6c4645d16e1cb2bd9ef67f0a3a238311cfc02eb8466490524b7c79c3aa0ac2e513cdeae37d23eea1a6c093f697a01a4c9a9c2ede135f7cb3b07c7a2949755ec64453e77d0c54b213b81bad3117a3ff8dd1ccff38fc97eaa64ed6fda3f37e7f5130e18e5f99afdd09feceed52b21288ce8887a93ea584c2d7e9a00887c44b3f0fef0d51660c76bafeed90ec0bc769649c0d4995db82b316c986d734ed1fcdaac5ad1c3ae3d98a0b05fa05eb989a221bd4be667a5386e51a134751cb8e5baa6b5cef67de37f318c6db8c033f8e6c3266079f71576700ae59229f6507f7d88477ffd35a11b65f490ce87f3fcd782cb1d2c1ec892a75c00b4451acaa2587b970373d4257e3e30a78a9c1af89d70da81bd8eb559cdd72ce0f7343f42cc61f065a7fb306da4d51dee3ac1a0e259091e562b2fd76cb8668a02253661497d8354e1d07f207eb2e7dc26b15875b8c0bc32c503607ffdd72cbcca6e77bfb1325df6f35e72bb01a3a2263fdfcde94eb0df3b8c98a0610ecd083446d6e901bc7c3e3950a09bd6185b2e222bd33557a5faa105f8f2f00293bdc628538e18034d82b47212506c70f0cdca3bd1f4d441972baa49a998ef89307b283b00682f7da0c0478224dd7e4d83b4bc74983b8ffb0db3d57ca797ebbf295ffc13e9276796d59002fcb9e7d89e4971ad9796ce230b24427565b43bb184fa64ab584b3236969b22e3a8872c81e74a6d5cab80320a5c03df79d1022cc5c804c9314de108f39270e793ad28a859e165b50fd5b37584807f6c476ab0052b6aa37796e4a2ce06bedc1332060b8c50190bffdfa6e7b3febef8ea22a3c7995c24e6561dd49e88cc4705e8f567372dd925e35aed0d87f5486727a2d6002e247a6ebeec28096f440385b1ebeb80e7bbe9dc40bc05da7230f0550bfbe6b93bf56a4599053d641af60e3c1e478e385be45735400a8d8c7475ca99be21932eb20b2d8940e35d94b97c59c1b0726be2319eacfda11574c339d1071b6b76eb69abb1c507c7169e14c0c5b92afb95301a2f9895db9440c0c47e981640a5964d789302a8ac37a62ad8c90367907f7313724060958247a9a243f8fc92d7f454ab85ca4578674eefa5cafc21678079bcc43477b7fabb46e74962da4ec0b4c669ce56d3882151f7db251abb459f7bd0ffe9cfb23003610cbedc8b757155f9bbb495fe2437aa18abb35be05a2ccdc8605065b9a63b6e82a22587c45f3aa2c4e475c37724c5e233f3ba86cd05bc358b3388923ba72955e713940a174431e4e6deba0941ab16925694a7470700a8923ad28f4fc78abb16e8f780e16315726cc7fddb79543bbb64550d6dc657fbec357ccc1b17878c24c72f2de20a9c748765a87290adf77bd100bacba949bb9922d2c498aab03c094787dd63f638c9e8f51c5e249d9a280d209a29985a691452969c63c3590860c90072997a01e1fbcd9d44febc2abcbc0a2fe9c6fe70e4a2ac277933973cd7d0634993fb1b0b633e058b1d74334e386ccb6376241b42fb328941e59645c866873eab266bc2a473bce8de51c3bd46659e0a64b4fdc5b71728bdab07f11b9e5d1d2ba51ff586075edb126589d1a8da2267e66b04724cd37268cd52cd12ac7823ec1f7ea647e902903a438a3cb5f77af34240d294f95eaa78ace54af0c1fa10c115cdfb2f9e55744d2fbafe668a24f4321761e6dffc3f14547febe2b971b0f342b18115e048b0fa7b4e4d43535c1ea21b46ab0693861b56eb7ae0770c17935d1094b264ae4077d183bcec8a77debf7e63eb32748c21e2a05a52c0f7323ba6b2d5f50d6456db3326e7dd891d305a855687ba6cf689b37dd7969b78265ef570270ced5bb62d8adb73331d73b443e5a983a5838128505a11ba1f2403bfb5190963686805613e0a64db0779cba0818a2c9341f98ae7585e11ec7d3cc0506fd136d0b8a5fea0e7fca668fb0f245082fc46c7242763a3", "2cd15bfd79e6028d6d0f9a1fe1274a5a95354cb78d07947c7acef67441cf9e230f1c4c80e2050db4e149a6734333a0b73b35ee1e3b44ac758f0fe54d7814db51b154a85c88c7c7db8aaed852cf698122c7d9b3ba8ea69ee7746a67766449d30237c8800a83cf86e5b0ddc36f01eea71a256d30abc55eead29c9ebbab45bb43e7bfd883647ec54a6d0e46eda6485d83a1c4046fc52cbe2f161f0711b171ba6348fa7ee2c9be99fc759dde14df3326b79587730a22deced0851d1f87bf5b71f833252ecd404678db8f5abfafca0906b45149840719201ddab6a48c75889f8ad765cdef5a10670444e434f30af9fd80d360f3e84ad9044e2bfbf28dc3d4e766e66c8b0aa8379e8319381d988771f69e2979486bd7e71bed1a50c6d9dafd9505428d55c7bf8e9c234c5ce2020da29bac924396cb052bd1a6c253197f540a2741f958ce63f399252d604bd2ad3a8b6c6d9be2b08d660ee55a6fa2fdf195445642b555952fa60688a153160a6089e51dac32d693710c0b4738c701d8f31d9503fa4d5193d2537a9c8658fb93b26cb6dbe311b735ee9382cb09e93f9f26a7d485459d98f644f0517f9e6f2258d0882791b96a5ec348cc261d1bb79e91e38a1b72b9410e810154822ff5622e95b2d2ec6d9ce9cab7e11a57b724375af345f223562ae955ab9c45fe4b5cc38d8b9a99dade7bbefd4dab797740c1899b6bef5f0183b0fdaaf68e617137f9bf5208e0e87a01724259a0a97e5c7b832d9cdda019b0c251b0e4986c6f969d34f77eb92ede3c3ca06a1e95ce935f102750df9edc8df4fbf9bd7ec0d28b569ba3dc930cbe7ef4f224e86154de88441b2273276ffa11de99da52c8b40b8be0f4e7e7dcb19710766ca19c4a8be2e7340d1c1dcee501d5cab5bbcf41f3e0f2ef1054eda84b7f6661c9a4b2888781f08ebf48fbe80b79ffe4cbb635c20bde4b1c4a93e473ee7778773d07676471aaff7ef81d86e48dbf47ed7065bca22644534ff5a300687b54528b091ad3677bb1ad19e01ac8ffcc505d17a8b084a8a23b46991c029246a0e0ec3a81d9cbae591b6271bd7b72e3949d4b0a9441c3b87c2f7438103d37267980ce93273a46841e00b13f40087fdd72909f44ebfaa667886de9c5d45713875c8c6a22b776a2fa68a0868fb477eb9b0a2fb77ec61306380eefdffa63540b84d3a8d58a75ce5ab0670bab90a4c69ecf20d093655bd891736cfc1626c7355a91c0f76b087cc2539b338bf2a6cd0e38adb68c95a67caf2ff1124a7084575a7900d0f2a3717647fe650df90bc495d2a806289f8a8ea3c3fd81eb7b1a16bb1f93ce9545056b516799e55072ec3076b935e26583bccfb9f35cfc9317b087204c34904516a5649aa23b5013334f9a87bca5d95b99ea5685566c6739cf2c499f38165cb1380738fab967ba9736be11a30641316c48b4727f1e71c1f24a6de1102d9ecab41dc4ddc4ffa0870148569153c7dbc909039b414d6948c8867282e035a236148f447d0ce0d4c45e49a2c5a1ea0bb106cd4eb0c14da0cb4d96ad9fd2eb77047736a30996f9841153e3876620bcedf0777432aa583b7279503fc87de38a6419a6af094a95d89d31311ceb5892aaf4d23832d9a82d592ca6eb08a22290dbc58cf1dc95c8d147e7cdc4c0a5aa80aba73917dc5de79e6a34c6bf38994fa6677266b5c5a6947cb38b25525f73bf36382f4703c8a7239e45a32f4df1db52e1175e96e77a76fa2871563ee7de7b4bbea43d1a19911ae15a2069e42e3006235fef7465f058c2fbb3fb37def3e82a5eeb929b2021d6b01dd3ee2f7c7398e25208a5877a2fa9e5bff279e782e36bf1c866ff96112b8afb0a354280a1c7cc54974c35532f571d5c8fa55b20d0c47a338c62fbfda10364ed5b25bd657d67998f3ce1a37c5152e6b989319a184e2569f91f5c4e5e5b981481ae9ed7bd3d8e8357bf765df4136af743c6d19381f79751f008bdec09418b364f4d358f7e05b99f06b02ce9bd7c2fc59dfc5fa4fc270f8c8e31d607c661972193138fe54d1fdbb4a0a00ed5b62c0dc0b2e85c6cc5e52ecbe329f46d05418685590cef5444fe924e769a876c93c007fa33afa061993e62d9e48120f0500b4d740f1d76d7a14751324fffa3181d3eeb0c358b58a21fcff1283ccab932987b8d90e2519e77f8b8ca6f0341190a2569b667db1c6e3a8815cce58512c8c2da6adfb266b479e6d6e416fb1c79e8b2332756423060a4d77ed0b5fa1bef1f09da2c8bf108b314fbc8880a93a67d2b9a1159523c6c2556df251f149d57a1dfe7e5aebe9a9b2c09500cda406fd6da2f8aec2810b5d95f729e78443ed6d9e9123e38bd1d6e9384133bdc4a7e0ad3d13d5f231dd1cfb35b2e0a54dc4e5c64a79b389bc34a7e755e49ff6f4abdbd2b611d4e0b3d973b2a290d14f6a002631ac05cfbc62ea0406a0a23cfe51524f748c6b45887acf18fd0eee48d86761b7da708447c3ecbf2e0a36109cd07854604fc745ce57d41e7e23de1645ea56508f6ddcfaa4b52341b49f4d3f68d68df078a77e3312b984d4134245f042a9c4b183d2f397a495128315d8b7a611269d606a837662a2759c2e456ad8e26cf25bec39146da1d26cd4db971248b810ebcad00bc1d7bdf946eca854eecbcae4cdabb7035f1920fc6bb322f03593f14865b98b7f6f05f4667611457a35a8ea5f0d2f04632373cdac69b18b30bc00ea2f2403f11926e261f666e90db7afd39e0340ba0c4b29736cc3a012682be2bd9199487bb76de99464b178aedaa0307a7f9624e94b3b7dc88af7baaa45219e9c901ca5185245a23901d500f3026e3063c9ea5c77d6615ff05b3bd9a13e340dd067d63924015222ed4f201f86d908fdd020505f41711d536d27b234614637bf6ccc6b27d811aa897eba561785ff5cd325140bb7296aaebb46b51376d1fd39a4014b449292e998fd7b6a60d095823650c2bdbfb51ccb0eb2957577a32a636f4732466c71776f01290eaf33a65b959eefc7c2da0deadd53c86d6ae7710fc5a67a08b33a705a42b73760b9d353071990b1fc8799d9b287d3d09b92121d241c7bd58d4747cd4e8eb62ab20ef0eedf15be36c65e620c3f6392c828e2ff993fa81e32d1235a8bc16346b30c2d1dd945463eee481b83eb39b58cd80792d30c54888453010f7053d8f0389920c129ca4ba5a2b785c68790f8f5bfe4436cf560e2d9fba6819777aef46883ae63c65d6db6be3979c0c10d13fe09d7ac9c90d8dc442ec06ed2702754fb2d43d3654218761dd4f8ea404e1bd537fe43468f3e76b8f199f60d8552026d1978df2b268c4d8e35eafa38824a13abf44ac41981b32e4d9fc39c6c616f9e38098d0ac5f863dd4bc1a8973d5d8820b2d206ccde23a35466f80024ec2f30a957fe6384d20b80246c551307fc7a5b6cff21ee25aadf054ef5d61ce258581dae373a2d0b5a334e07ae3b697744c7ea4993a9779313dc847bc5ba7627f6eed73a2cec4b257a861239dc418496e9fdb5f0f642d4b26fd3f898c10c357bd2ef90714d66b92492dc7e08f451dece3d4d501caf583c23bc66cd2aeb558c61a391a4fa8b82022ca24639c3de6e9a79df3494e831bb3f81f70b37766fd5d2a0e70b5a0988db6bf36c015e1977a6f46f3aee78a50090269b1c5e6d0cb2bb3f73957a6cf334277da08c58644f69cb6fda69c76fbe8a437ac8cf765255eecc79e8ca90587337bd567da168a1d2b52698b17c8cc1beefa926d077fdaaa83e81f967f409b8aff8c47c904b9879caea6644e349f03af7c2b29d1ecb871ef6f6698eb70937beedffe8caeba1053fe5e4880c6db51607c2caf238dfa0dfaaf12211aaa0b98b246bc102baa091c3103ad75b5955ffc9b8d524fa300392e56d9339a1f80e9fad38365b48fa0c1329b74b9fdaacf7685a896a33c54a89c024fe8b2d00cdb44b74952d6b3e1e66d5cb57ac09f103c32801f3b129ff24da559535d2f3767cdd4af28f10a99501f28e241910bba604c0f9028f45433e6833fafee45a7e003b47604a6edc7e00d8cfbbdd882748686de6f95c01fdec39e751e3e94dc53233b7065c014f1ea2e2d7293c95d3b00cacf5e3b98bad7c714195031a42317e26e3e6f793fcb416aa0cfcfa45ba1620b6138ad3a842258dd7f717b32f7a0f22bc746c5268ac0298013b91b83547d49d3cd153c739535b6ad24aace46d64338d75a82478df14a44fcc480d0ec814acf6c2daa8e7fe31abe73dd7cf98c445277722e7803585306310d3888f021f1319d9e84ca9e478eb0a2768397e94eb2878ad21bcccf54f7608b09450d0a4cd0e2cacc69688127c35ce38c6e2c122336a472d6670290ab20f3c209d6514af5077cf1214880d66cb00f375637e5761d686ccea1cf111d7a08983ccabfc62fb107907d8ac4cce6894c0570e34ba2495368908637cd4ca0188ae568d8ffe5689981dbd2c23ccbd963af0e980d9e264de24740c4385ef4decef03952657dd34f104686ba9251b5321d60c91b4a6d0a80958b2b6c8dbe587205e053559a54597a41b83c978fe1c4ec629d85a8ceb8c04513e87adb369a6ca1e6791d6831838b85e4d0f36e8b41e69910590d383f8e32874fc72bceb88bc32ace1b6d1a4bbba680b214e0001dd77cada25b02835d360974a992e1a003376f3b32c27d8fa0023252faa2b0e5d353e1a820b5738c3b2dd30817477ff5ece713731ada0a18f3b818362f543951e88cfd628c47ae4512add78a784be0af8b41c86ad0403474ece6d8a6a9b8dd26cb4b9e88a3229f3b791f68633101ef434e97a0119ed29edb23c4310fa509e3512648097f2038c6f707ca4d8bc1edde0b092a099f888ba119325dbd4f3024d84c7e99ab036ff6e48d864b0113ffff8c2d9b95062b36c44d91fc58fa063e6e0ea0f2149dc808c500321838c978b9d59490bbcb5229ac768f70d7fb2a540e71247ba505f8a73aa050e47d4ad3bc2a07e8d5dcc9b05fd9db9a77d90e5ed6e3f029362ff039feaef0734a99bd37d87852070cc7639ca3376385829716528dc926dcb46e1873e2d068792bb34bd178283ddb883f559a6f9a6bfa7050bbfdbf8a6216eb229675935635987ef570b1a47b81ccac80609056b59378bb7e9a9ef87ba9e97e3356e00ff981e2aaf883d027593043af41981bf37f03aea8818729b53313cbbcacb618c7d5fbb52b4950d754464a7bb9b929d8b49f14fad0ce591442923dde00538a00765098c3f75117d4dab79cf2791b90b6250c0733af4c4d7ab31a907d17f2687c8f783b3430dc9ea14d6fcff4466d3fb4b553ed2ed831fea163f994a757cc86a4b5d8bb0f9c0efd480d9b4f355cda99e4c79873f3b562519ae403b0c27a2791fccebfa3f7e5e5e48ef3610e5db7f588623fdf01450e9ef3377891b5ea96ee8b50fe41bd0b543b575b66764302124fdbba5a5bedd0abae3fd0b5491cab66c925efaac8a7a439fe82434d87b530ce77e6c143aec34fe4399cf163b95c81e984fc0d33b1b716d5f2870e488a5d4aecb5a29113d2761083ad2ad6cac90a15160223403ba8f290e9d6549041fcb308b7a3c02a32a2df14a8e3628706a9809c6446b68b65fc4d5a0c7da6e38d8e72ed6a411cf5d1b7840cafdd29be7d9394c3bec5ba185a48ab43adcfb5b0abb40ad4cbae927a1b62171758f40eae475652201b8e77bed5ee19e536a37f896350d8a0b181d6252d4079d442facc4d7931739bb4f5859d53bd7d00790164659ae48fde5d102dbd32930d34f33de0ebcd6170af50cb92516a05e0345e47686bf04e2545a56140b5fd75d02de24f66ab6a"}}) 3.191279453s ago: executing program 5 (id=3234): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000a00)={0x84, @loopback, 0x4e20, 0x0, 'rr\x00'}, 0x2c) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000a40)={{0x84, @loopback, 0x4e20, 0x0, 'fo\x00', 0x20, 0x0, 0x13}, {@loopback, 0x4e24, 0x10000, 0x1, 0x3}}, 0x44) r1 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r1, &(0x7f0000000ac0)={0x2, 0x4e20, @loopback}, 0x10) 2.977677135s ago: executing program 5 (id=3236): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000b40)={&(0x7f0000000200)={0x2, 0x4c20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @loopback}}}], 0x20}, 0xe900) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x36, 0xfffffeb2, &(0x7f0000000500)="b9ff03076804268cb89e14f086dd47e0ffff2000002800000000ac141416e000000129a130112b92121f9ae0dd972fa104edcce40d8d", 0x0, 0x2800, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) write$cgroup_subtree(r0, &(0x7f00000005c0)=ANY=[], 0xfe33) 2.974349567s ago: executing program 6 (id=3247): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/tcp6\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x4) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x40, @empty, 0xfffffff9}, 0x1c) shutdown(r1, 0x1) read$FUSE(r0, &(0x7f0000000480)={0x2020}, 0x2020) 2.950065115s ago: executing program 4 (id=3237): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x3, @remote, 'ip6_vti0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r1, 0x40047438, &(0x7f0000000040)) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000240)="6a99", 0x2}], 0x1) 2.893783149s ago: executing program 1 (id=3239): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x11d) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1a2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file1\x00', 0x20400, 0x20) getdents64(r0, &(0x7f0000000340)=""/30, 0x1e) 2.775949533s ago: executing program 4 (id=3241): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x14, &(0x7f0000000500)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000040)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.732940519s ago: executing program 6 (id=3242): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x4, 0xe, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f00000016c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001700), 0x304, 0x10, &(0x7f0000001740), 0xfffffea2}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001780)={r0, 0x0, 0xe, 0x0, &(0x7f0000001800)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xcfac, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000340)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000200)={'full', 0x20, 0xffffffffffffffff, 0x20, 0xfffffffffffffffa}, 0x2f) 2.713287845s ago: executing program 3 (id=3243): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = syz_open_procfs(0x0, &(0x7f0000000dc0)='clear_refs\x00') writev(r0, &(0x7f0000000f40)=[{&(0x7f0000000f80)='4', 0x1}], 0x1) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 2.581410337s ago: executing program 4 (id=3244): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0x2}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.450654865s ago: executing program 6 (id=3245): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={0x0, 0x68}, 0x1, 0x0, 0x0, 0xc4}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000940)='X', 0x1f, 0x0, &(0x7f0000000980)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000009c0)={0x2, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0xd, 0x4, 0x59, 0x88, 0xfe, 0x0, 0x2a}, 0xe) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000000a80)=[{{0x0, 0x3f, 0x0}, 0x7f}], 0x414, 0x0, 0x0) 2.45052115s ago: executing program 3 (id=3246): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000080)={0x4}, 0x30, 0x0) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) 2.343221506s ago: executing program 3 (id=3248): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 2.25765282s ago: executing program 6 (id=3249): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1c0) mount(0x0, &(0x7f0000002000)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x5, 0x47, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040cd0607010001010203010902350001010080fa0904"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/ttyUSB0\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000001) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x4) 1.838608493s ago: executing program 5 (id=3250): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='100', 0x3) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r1, 0x800c5011, &(0x7f0000000180)) 1.818847273s ago: executing program 1 (id=3251): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x4c, 0x2, 0x6, 0x701, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002680)={&(0x7f00000026c0)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 1.818292746s ago: executing program 4 (id=3252): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x1f, 0x6, 0x450, 0x0, 0x1f0, 0x288, 0x320, 0x3b8, 0x158, 0x1f0, 0x288, 0x320, 0x3b8, 0x6, 0x0, {[{{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x80, 'kmp\x00', 'abc\x00', 0x3}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4b0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.817699619s ago: executing program 3 (id=3253): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000100)='sessname=s0 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) 892.002929ms ago: executing program 6 (id=3254): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8, &(0x7f0000000000)=ANY=[]) 694.481884ms ago: executing program 3 (id=3255): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x47f) connect$inet(r0, &(0x7f00000000c0), 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x8742, 0x3, 0x7, 0x247c2d87, 0xfffffffd}, 0x14) shutdown(r0, 0x2) 43.071406ms ago: executing program 5 (id=3256): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000001680)=0x100000001, 0x4) connect$inet6(r0, &(0x7f00000016c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000001700), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000001740)=@ccm_128={{0x304}, "e3d9162be1b07411", "726c84d47b8e1c777b43316b24f98517", "6284695f", "296d4442c1ff8da4"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000001800)=@ccm_128={{}, "35e0ff9e75a66a12", "41622da1489ffa4ca7f47a44d06d74ff", "551d1edd", "00cdca231621ba55"}, 0x28) 36.997835ms ago: executing program 4 (id=3257): r0 = syz_io_uring_setup(0x7463, &(0x7f0000000540)={0x0, 0xd127, 0x800, 0x3, 0x2083, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/59, 0x3b}], 0x1) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f00000002c0)={0x38, &(0x7f0000000040)=[{0x3d, '\x00', @data, 0x4db6}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_SETXATTR={0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0}}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 0s ago: executing program 3 (id=3258): move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000440)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000180)={'#! ', './file0'}, 0xb) close(r1) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000540)={[&(0x7f0000000900)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}, 0x0) kernel console output (not intermixed with test programs): 376][T11595] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 268.985384][T11595] RBP: 00007f3909236b20 R08: 00000000000002c0 R09: 0000000000000000 [ 268.985392][T11595] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.985399][T11595] R13: 00007f3909426038 R14: 00007f3909425fa0 R15: 00007fffe872f428 [ 268.985417][T11595] [ 269.420423][T11586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.420681][T11586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.461612][ T5809] usb 6-1: USB disconnect, device number 10 [ 269.501513][ T5809] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 269.501916][ T5809] cyberjack 6-1:1.0: device disconnected [ 269.802769][ T5798] gspca_sq930x: reg_w 0105 0f00 failed -71 [ 269.825069][ T190] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 269.976321][ T190] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 269.977084][ T190] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.977101][ T190] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.977122][ T190] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.978854][ T190] usb 5-1: config 0 descriptor?? [ 270.022824][ T5798] gspca_sq930x: Sensor ov9630 not yet treated [ 270.022873][ T5798] sq930x 1-1:0.0: probe with driver sq930x failed with error -22 [ 270.052835][ T5798] usb 1-1: USB disconnect, device number 17 [ 270.409702][ T190] cp2112 0003:10C4:EA90.001A: unknown main item tag 0x0 [ 270.409728][ T190] cp2112 0003:10C4:EA90.001A: unknown main item tag 0x0 [ 270.409744][ T190] cp2112 0003:10C4:EA90.001A: unknown main item tag 0x0 [ 270.409758][ T190] cp2112 0003:10C4:EA90.001A: unknown main item tag 0x0 [ 270.409773][ T190] cp2112 0003:10C4:EA90.001A: unknown main item tag 0x0 [ 270.409788][ T190] cp2112 0003:10C4:EA90.001A: unknown main item tag 0x0 [ 270.409802][ T190] cp2112 0003:10C4:EA90.001A: unknown main item tag 0x0 [ 270.489777][ T190] cp2112 0003:10C4:EA90.001A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 270.602780][ T190] cp2112 0003:10C4:EA90.001A: Part Number: 0x00 Device Version: 0x00 [ 270.719854][T11626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2302'. [ 270.719868][T11626] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2302'. [ 271.007742][ T190] cp2112 0003:10C4:EA90.001A: error setting SMBus config [ 271.023516][ T190] cp2112 0003:10C4:EA90.001A: probe with driver cp2112 failed with error -71 [ 271.050744][ T190] usb 5-1: USB disconnect, device number 32 [ 271.070312][T11638] FAULT_INJECTION: forcing a failure. [ 271.070312][T11638] name failslab, interval 1, probability 0, space 0, times 0 [ 271.070351][T11638] CPU: 0 UID: 0 PID: 11638 Comm: syz.0.2308 Tainted: G L syzkaller #0 PREEMPT(full) [ 271.070369][T11638] Tainted: [L]=SOFTLOCKUP [ 271.070374][T11638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 271.070381][T11638] Call Trace: [ 271.070386][T11638] [ 271.070391][T11638] dump_stack_lvl+0x100/0x190 [ 271.070415][T11638] should_fail_ex.cold+0x5/0xa [ 271.070435][T11638] should_failslab+0xc2/0x120 [ 271.070452][T11638] __kvmalloc_node_noprof+0x113/0x9b0 [ 271.070467][T11638] ? trace_contention_end+0x126/0x160 [ 271.070481][T11638] ? io_rsrc_data_alloc+0x2c/0xa0 [ 271.070497][T11638] io_rsrc_data_alloc+0x2c/0xa0 [ 271.070510][T11638] io_alloc_file_tables+0x27/0xb0 [ 271.070528][T11638] io_sqe_files_register+0x186/0x970 [ 271.070544][T11638] ? __pfx_io_sqe_files_register+0x10/0x10 [ 271.070564][T11638] __do_sys_io_uring_register+0x1204/0x1c10 [ 271.070582][T11638] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 271.070601][T11638] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 271.070616][T11638] ? __x64_sys_futex+0x34f/0x4d0 [ 271.070633][T11638] ? __x64_sys_futex+0x358/0x4d0 [ 271.070651][T11638] ? xfd_validate_state+0x129/0x190 [ 271.070672][T11638] do_syscall_64+0x123/0x790 [ 271.070692][T11638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.070704][T11638] RIP: 0033:0x7fcf0319f559 [ 271.070715][T11638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.070726][T11638] RSP: 002b:00007fcf04112028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 271.070738][T11638] RAX: ffffffffffffffda RBX: 00007fcf03425fa0 RCX: 00007fcf0319f559 [ 271.070746][T11638] RDX: 0000200000002d40 RSI: 0000000000000002 RDI: 0000000000000003 [ 271.070753][T11638] RBP: 00007fcf03236b20 R08: 0000000000000000 R09: 0000000000000000 [ 271.070762][T11638] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000000 [ 271.070769][T11638] R13: 00007fcf03426038 R14: 00007fcf03425fa0 R15: 00007ffd66685568 [ 271.070786][T11638] [ 271.916560][ T30] audit: type=1400 audit(1792632261.000:733): avc: denied { create } for pid=11658 comm="syz.0.2318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 272.067584][ T30] audit: type=1400 audit(1792632517.148:734): avc: denied { ioctl } for pid=11663 comm="syz.4.2320" path="socket:[37678]" dev="sockfs" ino=37678 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 272.251965][ T190] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 272.405269][ T190] usb 1-1: Using ep0 maxpacket: 16 [ 272.406394][ T190] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 272.407509][ T190] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 272.407522][ T190] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 272.409040][ T190] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.409053][ T190] usb 1-1: Product: syz [ 272.409062][ T190] usb 1-1: Manufacturer: syz [ 272.409070][ T190] usb 1-1: SerialNumber: syz [ 272.614556][T11685] batman_adv: batadv0: Adding interface: syz_tun [ 272.614569][T11685] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 272.614586][T11685] batman_adv: batadv0: Interface activated: syz_tun [ 272.778381][T11690] overlayfs: failed to clone lowerpath [ 272.796708][T11690] overlayfs: failed to clone upperpath [ 272.908354][ T190] usb 1-1: USB disconnect, device number 18 [ 274.428655][ T30] audit: type=1400 audit(1792632775.505:735): avc: denied { connect } for pid=11751 comm="syz.4.2358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 275.240539][T11773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2368'. [ 275.714039][T11799] jffs2: notice: (11799) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 276.010858][ T190] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 276.164180][ T190] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 276.165922][ T190] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.169965][ T190] usb 1-1: config 0 descriptor?? [ 276.425627][ T190] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 276.533253][T11832] i2c i2c-0: delete_device: Can't parse I2C address [ 276.735889][ T190] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 1 [ 276.735908][ T190] [drm] Initialized udl on minor 1 [ 276.760475][T11840] netlink: 'syz.4.2396': attribute type 1 has an invalid length. [ 276.813096][T11845] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2396'. [ 276.850599][T11840] bond0: entered promiscuous mode [ 276.857816][T11840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.897027][T11845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.897258][T11845] bond0: (slave wireguard0): The slave device specified does not support setting the MAC address [ 276.897270][T11845] bond0: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 276.940884][ T5798] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 276.976328][T11849] fuse: Bad value for 'fd' [ 276.996315][T11845] bond0: (slave wireguard0): making interface the new active one [ 276.996356][T11845] wireguard0: entered promiscuous mode [ 277.028231][T11845] bond0: (slave wireguard0): Enslaving as an active interface with an up link [ 277.102507][ T5798] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 277.105385][ T5798] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 277.105415][ T5798] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.147697][ T5798] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 277.147825][ T5798] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81 [ 277.147858][ T5798] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1 [ 277.185779][ T5798] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 277.185838][ T5798] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 277.230911][ T5798] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 277.231940][ T5798] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 277.231981][ T5798] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 277.270393][ T5798] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 277.715232][ T5798] usb 6-1: USB disconnect, device number 11 [ 277.733389][ T5798] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 277.754598][ T5798] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 277.759152][ T5798] keyspan 6-1:1.0: device disconnected [ 278.223122][T11883] overlayfs: failed to clone upperpath [ 278.339857][T11886] FAULT_INJECTION: forcing a failure. [ 278.339857][T11886] name failslab, interval 1, probability 0, space 0, times 0 [ 278.339882][T11886] CPU: 0 UID: 0 PID: 11886 Comm: syz.5.2414 Tainted: G L syzkaller #0 PREEMPT(full) [ 278.339901][T11886] Tainted: [L]=SOFTLOCKUP [ 278.339906][T11886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 278.339914][T11886] Call Trace: [ 278.339918][T11886] [ 278.339923][T11886] dump_stack_lvl+0x100/0x190 [ 278.339946][T11886] should_fail_ex.cold+0x5/0xa [ 278.339967][T11886] should_failslab+0xc2/0x120 [ 278.339985][T11886] __kmalloc_noprof+0xfc/0x840 [ 278.339999][T11886] ? afs_alloc_vlserver_list+0x24/0xa0 [ 278.340018][T11886] afs_alloc_vlserver_list+0x24/0xa0 [ 278.340033][T11886] afs_lookup_cell+0x14c1/0x1940 [ 278.340052][T11886] ? __pfx_afs_lookup_cell+0x10/0x10 [ 278.340068][T11886] ? __pfx___might_resched+0x10/0x10 [ 278.340086][T11886] ? lock_acquire+0x1d1/0x380 [ 278.340102][T11886] ? down_write+0x141/0x1f0 [ 278.340117][T11886] afs_cell_init+0x17d/0x380 [ 278.340133][T11886] afs_proc_rootcell_write+0x1c9/0x280 [ 278.340148][T11886] proc_simple_write+0x10e/0x1a0 [ 278.340165][T11886] ? __pfx_proc_simple_write+0x10/0x10 [ 278.340181][T11886] proc_reg_write+0x240/0x330 [ 278.340196][T11886] vfs_write+0x2aa/0x1050 [ 278.340211][T11886] ? __pfx_proc_reg_write+0x10/0x10 [ 278.340224][T11886] ? lock_acquire+0x1d1/0x380 [ 278.340237][T11886] ? __fget_files+0x34/0x3d0 [ 278.340254][T11886] ? __pfx_vfs_write+0x10/0x10 [ 278.340266][T11886] ? find_held_lock+0x2b/0x80 [ 278.340283][T11886] ? __fget_files+0x215/0x3d0 [ 278.340301][T11886] ? __fget_files+0x21f/0x3d0 [ 278.340322][T11886] ksys_write+0x12a/0x250 [ 278.340335][T11886] ? __pfx_ksys_write+0x10/0x10 [ 278.340354][T11886] do_syscall_64+0x123/0x790 [ 278.340374][T11886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.340387][T11886] RIP: 0033:0x7f3256f9f559 [ 278.340397][T11886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.340409][T11886] RSP: 002b:00007f3257e08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 278.340421][T11886] RAX: ffffffffffffffda RBX: 00007f3257225fa0 RCX: 00007f3256f9f559 [ 278.340429][T11886] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000003 [ 278.340436][T11886] RBP: 00007f3257036b20 R08: 0000000000000000 R09: 0000000000000000 [ 278.340443][T11886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.340450][T11886] R13: 00007f3257226038 R14: 00007f3257225fa0 R15: 00007ffe889dd0b8 [ 278.340467][T11886] [ 278.760347][T11891] sit0: entered promiscuous mode [ 278.776299][T11891] netlink: 'syz.5.2416': attribute type 1 has an invalid length. [ 278.776312][T11891] netlink: 1 bytes leftover after parsing attributes in process `syz.5.2416'. [ 280.586670][T11866] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 280.834698][ T30] audit: type=1400 audit(1792632781.915:736): avc: denied { write } for pid=11903 comm="syz.4.2423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 281.351145][ T5739] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 281.397588][T11934] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 281.502761][ T5739] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 281.503768][ T5739] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 281.504543][ T5739] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 281.504572][ T5739] usb 6-1: SerialNumber: syz [ 281.801571][ T190] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 281.801899][ T190] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 281.809380][ T190] usb 1-1: USB disconnect, device number 19 [ 281.824834][ T9] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 282.076151][T11954] fuse: Bad value for 'fd' [ 282.118421][ T5739] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 282.144978][ T5739] usb 6-1: USB disconnect, device number 12 [ 282.581993][T11972] rxe_eth0 speed is unknown, defaulting to 1000 [ 283.023971][T11986] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2456'. [ 283.052887][T11984] rxe_eth0 speed is unknown, defaulting to 1000 [ 283.182336][ T5739] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 283.337264][ T5739] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 283.339643][ T5739] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 283.339670][ T5739] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.370563][ T5739] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 283.370577][ T5739] usb 1-1: Manufacturer: syz [ 283.388765][ T5739] usb 1-1: config 0 descriptor?? [ 283.541709][ T5739] rc_core: IR keymap rc-hauppauge not found [ 283.541722][ T5739] Registered IR keymap rc-empty [ 283.543290][ T5739] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 283.550161][ T5739] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input41 [ 284.085636][ T5739] usb 1-1: USB disconnect, device number 20 [ 284.302712][T12027] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x118000 [ 284.302731][T12027] flags: 0x17ff00000002000(reserved|node=0|zone=2|lastcpupid=0x7ff) [ 284.302748][T12027] raw: 017ff00000002000 ffffea0004600008 ffffea0004600008 0000000000000000 [ 284.302759][T12027] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 284.302766][T12027] page dumped because: unmovable page [ 284.302773][T12027] page_owner info is not present (never set?) [ 284.838147][ T30] audit: type=1326 audit(1792632785.915:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12043 comm="syz.0.2479" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcf0319f559 code=0x0 [ 284.936886][T12050] fuse: fd is not a fuse device [ 285.085202][T12053] tunl0: entered promiscuous mode [ 285.089065][T12053] netlink: 'syz.3.2483': attribute type 4 has an invalid length. [ 285.089078][T12053] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2483'. [ 285.182346][ T30] audit: type=1400 audit(1792632786.265:738): avc: denied { write } for pid=12056 comm="syz.3.2484" name="/" dev="ocfs2_dlmfs" ino=39093 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 285.182470][T12057] (syz.3.2484,12057,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 285.785942][T12070] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2491'. [ 285.987610][T12085] fuse: fd is not a fuse device [ 286.460008][ T1108] nci: nci_rsp_packet: unknown rsp opcode 0x802 [ 287.080692][T12119] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2507'. [ 287.387273][ T30] audit: type=1400 audit(1792632788.465:739): avc: denied { append } for pid=12135 comm="syz.4.2516" name="usbmon2" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 287.473180][T12138] input: syz0 as /devices/virtual/input/input42 [ 288.395658][ T30] audit: type=1326 audit(1792632789.475:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12146 comm="syz.4.2521" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f390919f559 code=0x0 [ 288.952110][T12177] overlayfs: failed to clone upperpath [ 289.144744][T12187] overlayfs: failed to resolve './cgroup': -2 [ 289.356293][T12098] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 289.910976][ T9] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 290.068369][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 290.068398][ T9] usb 6-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 290.069226][ T9] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 290.072146][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.072160][ T9] usb 6-1: Product: syz [ 290.072169][ T9] usb 6-1: Manufacturer: syz [ 290.072178][ T9] usb 6-1: SerialNumber: syz [ 290.366208][ T9] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 290.462063][ T190] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 290.467121][T12238] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2557'. [ 290.563335][ T9] usb 6-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 290.563352][ T9] usb 6-1: found format II with max.bitrate = 4, frame size=7372 [ 290.563365][ T9] usb 6-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 290.563428][ T9] usb 6-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 290.563439][ T9] usb 6-1: found format II with max.bitrate = 4, frame size=7372 [ 290.563449][ T9] usb 6-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 290.633577][ T190] usb 1-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 290.634448][ T190] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.634464][ T190] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 290.634485][ T190] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.685962][ T190] idmouse 1-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 291.384640][ T9] usb 6-1: USB disconnect, device number 13 [ 291.546928][ T5588] udevd[5588]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 291.641104][ T190] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 291.744738][T12262] ipip1: entered promiscuous mode [ 291.744753][T12262] ipip1: entered allmulticast mode [ 291.792497][ T190] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 291.793355][ T190] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 291.793369][ T190] usb 5-1: config 0 has no interfaces? [ 291.794931][ T190] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 291.794946][ T190] usb 5-1: Product: syz [ 291.794974][ T190] usb 5-1: Manufacturer: syz [ 291.794983][ T190] usb 5-1: SerialNumber: syz [ 291.799850][ T190] usb 5-1: config 0 descriptor?? [ 291.969600][ T190] usb 1-1: USB disconnect, device number 21 [ 291.982450][ T190] idmouse 1-1:1.0: disconnected [ 292.224453][ T190] usb 5-1: USB disconnect, device number 33 [ 293.121543][T12300] pim6reg: entered allmulticast mode [ 293.414540][T12308] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2586'. [ 293.462367][T12308] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.470140][T12308] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.493581][T12308] bond0 (unregistering): Released all slaves [ 293.635796][T12311] rxe_eth0 speed is unknown, defaulting to 1000 [ 293.686548][T12313] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2599'. [ 295.493337][T12353] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12353 comm=syz.4.2606 [ 295.851053][ T5798] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 296.009107][ T5798] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 296.023338][ T5798] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 296.023367][ T5798] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 296.023390][ T5798] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 296.023413][ T5798] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.192367][T12381] bridge0: port 3(veth0) entered blocking state [ 296.192430][T12381] bridge0: port 3(veth0) entered listening state [ 296.192556][T12381] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.192612][T12381] bridge0: port 2(bridge_slave_1) entered listening state [ 296.192728][T12381] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.192788][T12381] bridge0: port 1(bridge_slave_0) entered listening state [ 296.312839][T12384] FAULT_INJECTION: forcing a failure. [ 296.312839][T12384] name failslab, interval 1, probability 0, space 0, times 0 [ 296.312862][T12384] CPU: 0 UID: 0 PID: 12384 Comm: syz.0.2618 Tainted: G L syzkaller #0 PREEMPT(full) [ 296.312880][T12384] Tainted: [L]=SOFTLOCKUP [ 296.312884][T12384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 296.312891][T12384] Call Trace: [ 296.312896][T12384] [ 296.312901][T12384] dump_stack_lvl+0x100/0x190 [ 296.312925][T12384] should_fail_ex.cold+0x5/0xa [ 296.312945][T12384] should_failslab+0xc2/0x120 [ 296.312962][T12384] __kmalloc_cache_noprof+0x91/0x6d0 [ 296.312974][T12384] ? alloc_mnt_ns+0xc9/0x510 [ 296.312993][T12384] alloc_mnt_ns+0xc9/0x510 [ 296.313010][T12384] copy_mnt_ns+0x2f4/0x1180 [ 296.313023][T12384] ? rcu_is_watching+0x13/0xc0 [ 296.313040][T12384] ? __pfx_copy_mnt_ns+0x10/0x10 [ 296.313054][T12384] ? create_new_namespaces+0x30/0xac0 [ 296.313069][T12384] create_new_namespaces+0xd3/0xac0 [ 296.313081][T12384] ? bpf_lsm_capable+0x9/0x10 [ 296.313098][T12384] ? security_capable+0x80/0x260 [ 296.313114][T12384] unshare_nsproxy_namespaces+0xf6/0x210 [ 296.313128][T12384] ksys_unshare+0x44f/0x980 [ 296.313141][T12384] ? __pfx_ksys_unshare+0x10/0x10 [ 296.313175][T12384] __x64_sys_unshare+0x31/0x40 [ 296.313188][T12384] do_syscall_64+0x123/0x790 [ 296.313210][T12384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.313222][T12384] RIP: 0033:0x7fcf0319f559 [ 296.313233][T12384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.313246][T12384] RSP: 002b:00007fcf04112028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 296.313259][T12384] RAX: ffffffffffffffda RBX: 00007fcf03425fa0 RCX: 00007fcf0319f559 [ 296.313267][T12384] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a060680 [ 296.313274][T12384] RBP: 00007fcf03236b20 R08: 0000000000000000 R09: 0000000000000000 [ 296.313281][T12384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 296.313287][T12384] R13: 00007fcf03426038 R14: 00007fcf03425fa0 R15: 00007ffd66685568 [ 296.313304][T12384] [ 296.483478][ T30] audit: type=1400 audit(1792632797.565:741): avc: denied { ioctl } for pid=12358 comm="syz.4.2609" path="socket:[40083]" dev="sockfs" ino=40083 ioctlcmd=0x400261f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 296.515808][ T5798] cxacru 5-1:1.0: send of cm 0x91 failed (-71) [ 296.515849][ T5798] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 296.515859][ T5798] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 296.645602][ T5798] cxacru 5-1:1.0: probe with driver cxacru failed with error -71 [ 296.668436][ T5798] usb 5-1: USB disconnect, device number 34 [ 296.696652][T12381] vxlan0: left promiscuous mode [ 296.696665][T12381] vxlan0: left allmulticast mode [ 296.714040][T12381] vxlan1: left promiscuous mode [ 296.714052][T12381] vxlan1: left allmulticast mode [ 296.735588][T12381] 8021q: adding VLAN 0 to HW filter on device eth0 [ 296.752065][T12381] 8021q: adding VLAN 0 to HW filter on device eth1 [ 296.762924][T12381] 8021q: adding VLAN 0 to HW filter on device eth2 [ 296.783915][T12381] 8021q: adding VLAN 0 to HW filter on device eth3 [ 297.693078][ T30] audit: type=1400 audit(1792632798.775:742): avc: denied { read } for pid=12426 comm="syz.0.2635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 298.481138][ T9] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 298.631433][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 298.632722][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 298.632752][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 298.632775][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.866602][ T9] usb 6-1: usb_control_msg returned -32 [ 298.866630][ T9] usbtmc 6-1:16.0: can't read capabilities [ 299.240387][ T30] audit: type=1400 audit(1792632800.315:743): avc: denied { name_connect } for pid=12481 comm="syz.0.2654" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 300.209892][ T30] audit: type=1326 audit(1792632801.285:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12512 comm="syz.3.2667" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6d19f559 code=0x7ffc0000 [ 300.210606][ T30] audit: type=1326 audit(1792632801.285:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12512 comm="syz.3.2667" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6d19f559 code=0x7ffc0000 [ 300.270257][ T30] audit: type=1326 audit(1792632801.355:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12512 comm="syz.3.2667" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fbf6d19f559 code=0x7ffc0000 [ 300.270291][ T30] audit: type=1326 audit(1792632801.355:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12512 comm="syz.3.2667" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6d19f559 code=0x7ffc0000 [ 300.270317][ T30] audit: type=1326 audit(1792632801.355:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12512 comm="syz.3.2667" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6d19f559 code=0x7ffc0000 [ 300.358282][ T30] audit: type=1326 audit(1792632801.445:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12512 comm="syz.3.2667" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbf6d19f559 code=0x7ffc0000 [ 300.665152][T12531] ip_tables: iptables: counters copy to user failed while replacing table [ 300.742949][ T5798] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 300.891326][ T5798] usb 1-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 300.892164][ T5798] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 300.892194][ T5798] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.936901][ T5798] as10x_usb: device has been detected [ 300.937325][ T5798] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 300.986612][ T5798] usb 1-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 301.017425][ T5798] usb 1-1: loading /lib/firmware/as102_data1_st.hex failed with error -13 [ 301.017453][ T5798] usb 1-1: Direct firmware load for as102_data1_st.hex failed with error -13 [ 301.017467][ T5798] usb 1-1: Falling back to sysfs fallback for: as102_data1_st.hex [ 301.269981][ T190] usb 6-1: USB disconnect, device number 14 [ 301.394583][T12558] af_packet: tpacket_rcv: packet too big, clamped from 48 to 4294967272. macoff=96 [ 301.790885][ T9] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 301.941447][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 301.941914][ T9] usb 6-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 301.942721][ T9] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 301.942740][ T9] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 301.942755][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 301.942773][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.944177][ T9] usb 6-1: config 0 descriptor?? [ 302.109574][ T5613] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 302.120016][ T5613] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 302.120693][ T5613] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 302.138115][ T5613] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 302.138474][ T5613] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 302.246630][T12583] netlink: 'syz.1.2700': attribute type 30 has an invalid length. [ 302.331644][T12583] netlink: 'syz.1.2700': attribute type 30 has an invalid length. [ 302.539090][ T68] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.678442][ T68] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.720428][ T68] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.788412][ T68] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.847637][T12602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2708'. [ 302.847663][T12602] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2708'. [ 302.876632][T12602] geneve2: entered promiscuous mode [ 302.876645][T12602] geneve2: entered allmulticast mode [ 303.177632][ T9] hid-alps 0003:044E:120B.001B: failed to read command (-71) [ 303.177666][ T9] hid-alps 0003:044E:120B.001B: failed U1_NUM_SENS_X (-71) [ 303.180048][ T9] hid-alps 0003:044E:120B.001B: hidraw0: USB HID v80.00 Joystick [HID 044e:120b] on usb-dummy_hcd.5-1/input0 [ 303.224422][ T9] usb 6-1: USB disconnect, device number 15 [ 303.290253][T12577] rxe_eth0 speed is unknown, defaulting to 1000 [ 303.377259][ T68] bridge_slave_1: left allmulticast mode [ 303.377277][ T68] bridge_slave_1: left promiscuous mode [ 303.377404][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.414990][ T68] ¾x9ÿ: left allmulticast mode [ 303.415273][ T68] bridge0: port 1(1¾x9ÿ) entered disabled state [ 303.445679][ T68] pim6reg: left allmulticast mode [ 303.460502][ T68] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 303.522649][T12614] fido_id[12614]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 303.905036][ T68] batman_adv: batadv0: Removing interface: ip6gretap1 [ 304.203188][ T5613] Bluetooth: hci3: command tx timeout [ 304.308189][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 304.308202][ T30] audit: type=1400 audit(1792633061.389:761): avc: denied { write } for pid=12623 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 304.385279][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.388387][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.411615][ T68] bond0 (unregistering): Released all slaves [ 304.436460][ T5739] infiniband syz1: ib_query_port failed (-19) [ 304.638976][T12662] tipc: Started in network mode [ 304.638994][T12662] tipc: Node identity ac1414aa, cluster identity 4711 [ 304.639162][T12662] tipc: New replicast peer: 172.20.20.187 [ 304.639469][T12662] tipc: Enabled bearer , priority 10 [ 304.696251][ T30] audit: type=1400 audit(1792633061.779:762): avc: denied { write } for pid=12657 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 304.743264][ T269] smbdirect: ib_dev[syz1] removed [ 304.940368][ T5262] 8021q: adding VLAN 0 to HW filter on device eth5 [ 305.751884][ T5739] tipc: Node number set to 2886997162 [ 306.096757][ T30] audit: type=1400 audit(1792633063.179:763): avc: denied { write } for pid=12704 comm="syz.4.2737" name="usb_gadget" dev="configfs" ino=3308 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 306.096793][ T30] audit: type=1400 audit(1792633063.179:764): avc: denied { add_name } for pid=12704 comm="syz.4.2737" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 306.190991][ T30] audit: type=1400 audit(1792633063.269:765): avc: denied { write } for pid=12677 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 306.281709][ T5613] Bluetooth: hci3: command tx timeout [ 306.391523][ T68] hsr_slave_0: left promiscuous mode [ 306.391922][ T68] hsr_slave_1: left promiscuous mode [ 306.392317][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.392331][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.435494][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.435515][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.485000][ T68] veth1_macvtap: left promiscuous mode [ 306.485024][ T68] veth0_macvtap: left promiscuous mode [ 306.485090][ T68] veth1_vlan: left promiscuous mode [ 306.485106][ T68] veth0_vlan: left promiscuous mode [ 306.645590][ T30] audit: type=1400 audit(1792633063.729:766): avc: denied { write } for pid=12717 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 307.089290][T12728] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2745'. [ 307.146221][T12728] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2745'. [ 307.429742][ T68] team0 (unregistering): Port device team_slave_1 removed [ 307.449966][ T30] audit: type=1400 audit(1792633064.529:767): avc: denied { getattr } for pid=12743 comm="iou-wrk-12744" name="[io_uring]" dev="anon_inodefs" ino=41280 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 307.487593][ T68] team0 (unregistering): Port device team_slave_0 removed [ 307.506813][ T30] audit: type=1326 audit(1792633064.589:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12741 comm="syz.5.2749" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3256f9f559 code=0x0 [ 307.635835][ T5262] 8021q: adding VLAN 0 to HW filter on device eth6 [ 307.780371][T12577] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.780431][T12577] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.780516][T12577] bridge_slave_0: entered allmulticast mode [ 307.788914][T12577] bridge_slave_0: entered promiscuous mode [ 307.816784][T12577] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.816833][T12577] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.816900][T12577] bridge_slave_1: entered allmulticast mode [ 307.837832][T12577] bridge_slave_1: entered promiscuous mode [ 308.073091][T12577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.227005][T12577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.361255][ T5613] Bluetooth: hci3: command tx timeout [ 308.569503][T12577] team0: Port device team_slave_0 added [ 308.657508][T12577] team0: Port device team_slave_1 added [ 308.837854][T12577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.837865][T12577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 308.837880][T12577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.838859][T12577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.838868][T12577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 308.838881][T12577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.348197][T12577] hsr_slave_0: entered promiscuous mode [ 309.379670][T12577] hsr_slave_1: entered promiscuous mode [ 309.380686][T12781] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 309.815119][ T30] audit: type=1400 audit(1792633066.899:769): avc: denied { write } for pid=12758 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 310.052462][T12577] smc: adding net device veth1_macvtap with user defined pnetid SYZ2 [ 310.280173][ T30] audit: type=1400 audit(1792633067.359:770): avc: denied { write } for pid=12809 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 310.441275][ T5613] Bluetooth: hci3: command tx timeout [ 310.753424][ T5262] 8021q: adding VLAN 0 to HW filter on device eth7 [ 310.859322][T12831] jffs2: notice: (12831) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 310.935121][T12837] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 310.960498][T12838] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2780'. [ 311.012000][T12839] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 311.253142][T12577] netdevsim netdevsim6 netdevsim0: renamed from eth9 [ 311.275521][T12577] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 311.290444][T12577] netdevsim netdevsim6 netdevsim1: renamed from eth10 [ 311.338810][T12577] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 311.354177][T12577] netdevsim netdevsim6 netdevsim2: renamed from eth11 [ 311.381438][T12577] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 311.381885][T12577] netdevsim netdevsim6 netdevsim3: renamed from eth12 [ 311.414729][T12577] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 311.437785][T12849] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2784'. [ 311.437844][T12849] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2784'. [ 311.437852][T12849] FAULT_INJECTION: forcing a failure. [ 311.437852][T12849] name failslab, interval 1, probability 0, space 0, times 0 [ 311.437870][T12849] CPU: 0 UID: 0 PID: 12849 Comm: syz.4.2784 Tainted: G L syzkaller #0 PREEMPT(full) [ 311.437887][T12849] Tainted: [L]=SOFTLOCKUP [ 311.437892][T12849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 311.437900][T12849] Call Trace: [ 311.437904][T12849] [ 311.437909][T12849] dump_stack_lvl+0x100/0x190 [ 311.437933][T12849] should_fail_ex.cold+0x5/0xa [ 311.437952][T12849] should_failslab+0xc2/0x120 [ 311.437970][T12849] __kmalloc_noprof+0xfc/0x840 [ 311.437984][T12849] ? nft_obj_init+0x1cc/0x390 [ 311.438002][T12849] nft_obj_init+0x1cc/0x390 [ 311.438014][T12849] ? nft_obj_type_get+0x213/0x480 [ 311.438032][T12849] nf_tables_newobj+0xa87/0x2850 [ 311.438048][T12849] ? __pfx___nla_validate_parse+0x10/0x10 [ 311.438067][T12849] ? __pfx_nf_tables_newobj+0x10/0x10 [ 311.438079][T12849] ? net_generic+0x25/0x2a0 [ 311.438098][T12849] ? __nla_parse+0x40/0x60 [ 311.438116][T12849] nfnetlink_rcv_batch+0x1410/0x2880 [ 311.438142][T12849] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 311.438161][T12849] ? lock_acquire+0x1d1/0x380 [ 311.438174][T12849] ? avc_has_perm_noaudit+0x56/0x470 [ 311.438193][T12849] ? avc_has_perm_noaudit+0x145/0x470 [ 311.438222][T12849] ? __nla_parse+0x40/0x60 [ 311.438240][T12849] nfnetlink_rcv+0x3bd/0x440 [ 311.438257][T12849] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 311.438277][T12849] netlink_unicast+0x65f/0x950 [ 311.438294][T12849] ? __pfx_netlink_unicast+0x10/0x10 [ 311.438312][T12849] netlink_sendmsg+0x9ac/0x10c0 [ 311.438328][T12849] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.438346][T12849] ? selinux_socket_sendmsg+0x198/0x2f0 [ 311.438362][T12849] ? ____sys_sendmsg+0xa4d/0xbe0 [ 311.438379][T12849] ____sys_sendmsg+0xa4d/0xbe0 [ 311.438395][T12849] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.438409][T12849] ? __pfx_____sys_sendmsg+0x10/0x10 [ 311.438434][T12849] ___sys_sendmsg+0x190/0x1e0 [ 311.438452][T12849] ? __pfx____sys_sendmsg+0x10/0x10 [ 311.438471][T12849] ? futex_wait+0x11e/0x370 [ 311.438488][T12849] ? find_held_lock+0x2b/0x80 [ 311.438523][T12849] __sys_sendmsg+0x160/0x210 [ 311.438538][T12849] ? __pfx___sys_sendmsg+0x10/0x10 [ 311.438563][T12849] do_syscall_64+0x123/0x790 [ 311.438583][T12849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.438596][T12849] RIP: 0033:0x7f390919f559 [ 311.438608][T12849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.438619][T12849] RSP: 002b:00007f390a0ac028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 311.438632][T12849] RAX: ffffffffffffffda RBX: 00007f3909425fa0 RCX: 00007f390919f559 [ 311.438641][T12849] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 311.438649][T12849] RBP: 00007f3909236b20 R08: 0000000000000000 R09: 0000000000000000 [ 311.438663][T12849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 311.438671][T12849] R13: 00007f3909426038 R14: 00007f3909425fa0 R15: 00007fffe872f428 [ 311.438689][T12849] [ 311.438932][ T30] audit: type=1400 audit(1792633068.519:771): avc: denied { name_bind } for pid=12848 comm="syz.1.2785" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 311.727012][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 311.727611][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 311.727687][ C0] bridge0: port 3(veth0) entered learning state [ 311.728945][ T1308] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 311.729187][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.729219][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.987552][T12858] tls_set_device_offload_rx: netdev not found [ 312.110083][T12864] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 312.623521][T12577] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.703600][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.703655][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.763229][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.763285][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.218432][T12577] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 314.362862][T12577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.015285][T12577] veth0_vlan: entered promiscuous mode [ 315.036478][T12577] veth1_vlan: entered promiscuous mode [ 315.135278][T12577] veth0_macvtap: entered promiscuous mode [ 315.223626][T12577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.266714][T12577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.311689][ T269] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.312645][ T269] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.312824][ T269] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.312985][ T269] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.313007][ T269] netdevsim netdevsim0 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.313026][ T269] netdevsim netdevsim0 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.313045][ T269] netdevsim netdevsim0 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.319969][ T269] netdevsim netdevsim0 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.411215][ T12] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.411379][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.411401][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.411421][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.583037][ T5262] 8021q: adding VLAN 0 to HW filter on device eth8 [ 315.585194][ T269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.585206][ T269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.684028][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.684041][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.732204][ T30] audit: type=1400 audit(1792633072.819:772): avc: denied { mounton } for pid=12577 comm="syz-executor" path="/root/syzkaller.JWZ15y/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 316.017903][T12938] FAULT_INJECTION: forcing a failure. [ 316.017903][T12938] name failslab, interval 1, probability 0, space 0, times 0 [ 316.017930][T12938] CPU: 0 UID: 0 PID: 12938 Comm: syz.6.2696 Tainted: G L syzkaller #0 PREEMPT(full) [ 316.017948][T12938] Tainted: [L]=SOFTLOCKUP [ 316.017953][T12938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 316.017960][T12938] Call Trace: [ 316.017965][T12938] [ 316.017971][T12938] dump_stack_lvl+0x100/0x190 [ 316.017993][T12938] should_fail_ex.cold+0x5/0xa [ 316.018012][T12938] should_failslab+0xc2/0x120 [ 316.018029][T12938] __kvmalloc_node_noprof+0x113/0x9b0 [ 316.018044][T12938] ? trace_contention_end+0x126/0x160 [ 316.018059][T12938] ? io_rsrc_data_alloc+0x2c/0xa0 [ 316.018074][T12938] io_rsrc_data_alloc+0x2c/0xa0 [ 316.018088][T12938] io_alloc_file_tables+0x27/0xb0 [ 316.018105][T12938] io_sqe_files_register+0x186/0x970 [ 316.018121][T12938] ? __pfx_io_sqe_files_register+0x10/0x10 [ 316.018142][T12938] __do_sys_io_uring_register+0x1204/0x1c10 [ 316.018159][T12938] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 316.018179][T12938] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 316.018195][T12938] ? __x64_sys_futex+0x34f/0x4d0 [ 316.018211][T12938] ? __x64_sys_futex+0x358/0x4d0 [ 316.018229][T12938] ? xfd_validate_state+0x129/0x190 [ 316.018250][T12938] do_syscall_64+0x123/0x790 [ 316.018270][T12938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.018283][T12938] RIP: 0033:0x7f1aa359f559 [ 316.018293][T12938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 316.018305][T12938] RSP: 002b:00007f1aa44b6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 316.018317][T12938] RAX: ffffffffffffffda RBX: 00007f1aa3825fa0 RCX: 00007f1aa359f559 [ 316.018325][T12938] RDX: 0000200000002d40 RSI: 0000000000000002 RDI: 0000000000000003 [ 316.018332][T12938] RBP: 00007f1aa3636b20 R08: 0000000000000000 R09: 0000000000000000 [ 316.018339][T12938] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000000 [ 316.018346][T12938] R13: 00007f1aa3826038 R14: 00007f1aa3825fa0 R15: 00007ffe358c6248 [ 316.018363][T12938] [ 317.261041][ T190] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 317.412593][ T190] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 317.417679][ T190] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 317.417707][ T190] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 317.463482][ T190] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.463497][ T190] usb 6-1: Product: syz [ 317.463506][ T190] usb 6-1: Manufacturer: syz [ 317.463515][ T190] usb 6-1: SerialNumber: syz [ 318.063631][ T30] audit: type=1400 audit(1792633075.149:773): avc: denied { write } for pid=12962 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 318.414117][ T30] audit: type=1400 audit(1792633075.499:774): avc: denied { write } for pid=12989 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 318.843779][ T5600] usb 6-1: USB disconnect, device number 16 [ 319.352284][T13022] fuse: fd is not a fuse device [ 319.649524][T13028] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 319.779772][ T30] audit: type=1400 audit(1792633076.859:775): avc: denied { write } for pid=13000 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 320.018353][ T30] audit: type=1400 audit(1792633077.099:776): avc: denied { write } for pid=13035 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 321.105324][ T30] audit: type=1400 audit(1792633078.189:777): avc: denied { write } for pid=13043 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 321.299500][ T30] audit: type=1400 audit(1792633078.379:778): avc: denied { write } for pid=13067 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 322.595426][T13095] 9pnet: p9_errstr2errno: server reported unknown error  [ 323.045680][ T30] audit: type=1400 audit(1792633080.129:779): avc: denied { write } for pid=13070 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 323.081105][T13112] FAULT_INJECTION: forcing a failure. [ 323.081105][T13112] name failslab, interval 1, probability 0, space 0, times 0 [ 323.081127][T13112] CPU: 0 UID: 0 PID: 13112 Comm: syz.6.2855 Tainted: G L syzkaller #0 PREEMPT(full) [ 323.081145][T13112] Tainted: [L]=SOFTLOCKUP [ 323.081149][T13112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 323.081157][T13112] Call Trace: [ 323.081161][T13112] [ 323.081167][T13112] dump_stack_lvl+0x100/0x190 [ 323.081191][T13112] should_fail_ex.cold+0x5/0xa [ 323.081210][T13112] should_failslab+0xc2/0x120 [ 323.081228][T13112] __kmalloc_noprof+0xfc/0x840 [ 323.081250][T13112] ? afs_alloc_vlserver_list+0x24/0xa0 [ 323.081270][T13112] afs_alloc_vlserver_list+0x24/0xa0 [ 323.081285][T13112] afs_lookup_cell+0x14c1/0x1940 [ 323.081306][T13112] ? __pfx_afs_lookup_cell+0x10/0x10 [ 323.081322][T13112] ? __pfx___might_resched+0x10/0x10 [ 323.081340][T13112] ? lock_acquire+0x1d1/0x380 [ 323.081355][T13112] ? down_write+0x141/0x1f0 [ 323.081370][T13112] afs_cell_init+0x17d/0x380 [ 323.081386][T13112] afs_proc_rootcell_write+0x1c9/0x280 [ 323.081401][T13112] proc_simple_write+0x10e/0x1a0 [ 323.081417][T13112] ? __pfx_proc_simple_write+0x10/0x10 [ 323.081433][T13112] proc_reg_write+0x240/0x330 [ 323.081448][T13112] vfs_write+0x2aa/0x1050 [ 323.081463][T13112] ? __pfx_proc_reg_write+0x10/0x10 [ 323.081475][T13112] ? lock_acquire+0x1d1/0x380 [ 323.081487][T13112] ? __fget_files+0x34/0x3d0 [ 323.081502][T13112] ? __pfx_vfs_write+0x10/0x10 [ 323.081514][T13112] ? find_held_lock+0x2b/0x80 [ 323.081530][T13112] ? __fget_files+0x215/0x3d0 [ 323.081549][T13112] ? __fget_files+0x21f/0x3d0 [ 323.081570][T13112] ksys_write+0x12a/0x250 [ 323.081583][T13112] ? __pfx_ksys_write+0x10/0x10 [ 323.081601][T13112] do_syscall_64+0x123/0x790 [ 323.081621][T13112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.081635][T13112] RIP: 0033:0x7f1aa359f559 [ 323.081645][T13112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.081657][T13112] RSP: 002b:00007f1aa44b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 323.081669][T13112] RAX: ffffffffffffffda RBX: 00007f1aa3825fa0 RCX: 00007f1aa359f559 [ 323.081678][T13112] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000003 [ 323.081685][T13112] RBP: 00007f1aa3636b20 R08: 0000000000000000 R09: 0000000000000000 [ 323.081692][T13112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 323.081699][T13112] R13: 00007f1aa3826038 R14: 00007f1aa3825fa0 R15: 00007ffe358c6248 [ 323.081717][T13112] [ 323.582816][T13123] FAULT_INJECTION: forcing a failure. [ 323.582816][T13123] name failslab, interval 1, probability 0, space 0, times 0 [ 323.582839][T13123] CPU: 0 UID: 0 PID: 13123 Comm: syz.6.2857 Tainted: G L syzkaller #0 PREEMPT(full) [ 323.582856][T13123] Tainted: [L]=SOFTLOCKUP [ 323.582861][T13123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 323.582868][T13123] Call Trace: [ 323.582873][T13123] [ 323.582878][T13123] dump_stack_lvl+0x100/0x190 [ 323.582902][T13123] should_fail_ex.cold+0x5/0xa [ 323.582921][T13123] should_failslab+0xc2/0x120 [ 323.582938][T13123] __kmalloc_noprof+0xfc/0x840 [ 323.582953][T13123] ? lsm_blob_alloc+0x68/0x90 [ 323.582969][T13123] lsm_blob_alloc+0x68/0x90 [ 323.582981][T13123] security_bpf_map_create+0x31/0x2d0 [ 323.583000][T13123] map_create+0x143a/0x30d0 [ 323.583017][T13123] ? find_held_lock+0x2b/0x80 [ 323.583033][T13123] ? avc_has_perm_noaudit+0x11e/0x470 [ 323.583045][T13123] ? avc_has_perm_noaudit+0x11e/0x470 [ 323.583063][T13123] ? __pfx_map_create+0x10/0x10 [ 323.583080][T13123] ? avc_has_perm+0x135/0x1e0 [ 323.583092][T13123] ? __pfx_avc_has_perm+0x10/0x10 [ 323.583104][T13123] ? __might_fault+0xc5/0x140 [ 323.583123][T13123] ? __might_fault+0xc5/0x140 [ 323.583144][T13123] ? selinux_bpf+0xf6/0x140 [ 323.583160][T13123] __sys_bpf+0x12a0/0x4a30 [ 323.583176][T13123] ? __pfx___sys_bpf+0x10/0x10 [ 323.583187][T13123] ? find_held_lock+0x2b/0x80 [ 323.583209][T13123] ? futex_wake+0x4ea/0x5e0 [ 323.583240][T13123] ? vm_mmap_pgoff+0x103/0x470 [ 323.583267][T13123] ? __x64_sys_futex+0x34f/0x4d0 [ 323.583283][T13123] ? __x64_sys_futex+0x358/0x4d0 [ 323.583299][T13123] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 323.583315][T13123] ? xfd_validate_state+0x129/0x190 [ 323.583333][T13123] ? __x64_sys_bpf+0xce/0x140 [ 323.583344][T13123] __x64_sys_bpf+0xce/0x140 [ 323.583356][T13123] ? do_syscall_64+0xae/0x790 [ 323.583376][T13123] do_syscall_64+0x123/0x790 [ 323.583394][T13123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.583407][T13123] RIP: 0033:0x7f1aa359f559 [ 323.583418][T13123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.583429][T13123] RSP: 002b:00007f1aa44b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 323.583442][T13123] RAX: ffffffffffffffda RBX: 00007f1aa3825fa0 RCX: 00007f1aa359f559 [ 323.583450][T13123] RDX: 0000000000000048 RSI: 0000200000000000 RDI: 0000000000000000 [ 323.583458][T13123] RBP: 00007f1aa3636b20 R08: 0000000000000000 R09: 0000000000000000 [ 323.583465][T13123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 323.583472][T13123] R13: 00007f1aa3826038 R14: 00007f1aa3825fa0 R15: 00007ffe358c6248 [ 323.583490][T13123] [ 323.984508][ T30] audit: type=1400 audit(1792633081.069:780): avc: denied { write } for pid=13122 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 324.135787][T13129] (syz.6.2858,13129,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 324.135839][ T30] audit: type=1400 audit(1792633081.219:781): avc: denied { write } for pid=13127 comm="syz.6.2858" name="/" dev="ocfs2_dlmfs" ino=43302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 324.315538][ T30] audit: type=1326 audit(1792633081.399:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13125 comm="syz.1.2870" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1425f9f559 code=0x0 [ 324.958100][T13157] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 325.128012][ T30] audit: type=1400 audit(1792633082.209:783): avc: denied { write } for pid=13138 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 325.348177][ T30] audit: type=1400 audit(1792633082.429:784): avc: denied { write } for pid=13166 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 325.754463][ T30] audit: type=1400 audit(1792633082.839:785): avc: denied { write } for pid=13170 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 325.829557][ T30] audit: type=1400 audit(1792633082.909:786): avc: denied { write } for pid=13181 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 326.128717][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 326.128729][ T30] audit: type=1400 audit(1792633083.209:788): avc: denied { write } for pid=13195 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 326.386218][ T30] audit: type=1400 audit(1792633083.469:789): avc: denied { write } for pid=13198 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 326.459655][ T30] audit: type=1400 audit(1792633083.539:790): avc: denied { write } for pid=13209 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 326.713654][ T30] audit: type=1400 audit(1792633083.799:791): avc: denied { write } for pid=13212 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 326.787299][ T30] audit: type=1400 audit(1792633083.869:792): avc: denied { write } for pid=13223 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 327.032636][ T30] audit: type=1400 audit(1792633084.119:793): avc: denied { write } for pid=13226 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 327.083537][ C0] bridge0: port 3(veth0) entered forwarding state [ 327.083562][ C0] bridge0: topology change detected, propagating [ 327.083741][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.083752][ C0] bridge0: topology change detected, propagating [ 327.083827][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.083836][ C0] bridge0: topology change detected, propagating [ 327.165755][ T30] audit: type=1400 audit(1792633084.249:794): avc: denied { write } for pid=13237 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 327.408941][ T30] audit: type=1400 audit(1792633084.489:795): avc: denied { write } for pid=13240 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 327.485365][ T30] audit: type=1400 audit(1792633084.569:796): avc: denied { write } for pid=13251 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 327.735262][ T30] audit: type=1400 audit(1792633084.819:797): avc: denied { write } for pid=13254 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 328.350032][T13297] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2869'. [ 330.240667][T13339] overlayfs: failed to clone lowerpath [ 331.146180][T13359] FAULT_INJECTION: forcing a failure. [ 331.146180][T13359] name failslab, interval 1, probability 0, space 0, times 0 [ 331.146204][T13359] CPU: 0 UID: 0 PID: 13359 Comm: syz.6.2889 Tainted: G L syzkaller #0 PREEMPT(full) [ 331.146221][T13359] Tainted: [L]=SOFTLOCKUP [ 331.146226][T13359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 331.146234][T13359] Call Trace: [ 331.146239][T13359] [ 331.146245][T13359] dump_stack_lvl+0x100/0x190 [ 331.146268][T13359] should_fail_ex.cold+0x5/0xa [ 331.146287][T13359] should_failslab+0xc2/0x120 [ 331.146304][T13359] __kmalloc_noprof+0xfc/0x840 [ 331.146319][T13359] ? __register_sysctl_table+0xac/0x1650 [ 331.146337][T13359] __register_sysctl_table+0xac/0x1650 [ 331.146350][T13359] ? trace_kmalloc+0xeb/0x110 [ 331.146366][T13359] ? __kasan_kmalloc+0xaa/0xb0 [ 331.146382][T13359] ? __kmalloc_node_track_caller_noprof+0x35b/0x870 [ 331.146399][T13359] ? __pfx___register_sysctl_table+0x10/0x10 [ 331.146413][T13359] ? register_pidns_sysctls+0x48/0x1c0 [ 331.146431][T13359] ? __asan_memcpy+0x3c/0x60 [ 331.146446][T13359] register_pidns_sysctls+0x11d/0x1c0 [ 331.146462][T13359] ? __ns_common_init+0x30f/0x550 [ 331.146477][T13359] copy_pid_ns+0x67b/0x10a0 [ 331.146495][T13359] ? __pfx_copy_pid_ns+0x10/0x10 [ 331.146510][T13359] ? rcu_is_watching+0x13/0xc0 [ 331.146526][T13359] ? __pfx_copy_mnt_ns+0x10/0x10 [ 331.146541][T13359] ? create_new_namespaces+0x30/0xac0 [ 331.146557][T13359] create_new_namespaces+0x2aa/0xac0 [ 331.146573][T13359] unshare_nsproxy_namespaces+0xf6/0x210 [ 331.146588][T13359] ksys_unshare+0x44f/0x980 [ 331.146601][T13359] ? __pfx_ksys_unshare+0x10/0x10 [ 331.146621][T13359] __x64_sys_unshare+0x31/0x40 [ 331.146634][T13359] do_syscall_64+0x123/0x790 [ 331.146665][T13359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.146681][T13359] RIP: 0033:0x7f1aa359f559 [ 331.146692][T13359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.146705][T13359] RSP: 002b:00007f1aa44b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 331.146718][T13359] RAX: ffffffffffffffda RBX: 00007f1aa3825fa0 RCX: 00007f1aa359f559 [ 331.146727][T13359] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 331.146734][T13359] RBP: 00007f1aa3636b20 R08: 0000000000000000 R09: 0000000000000000 [ 331.146742][T13359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 331.146749][T13359] R13: 00007f1aa3826038 R14: 00007f1aa3825fa0 R15: 00007ffe358c6248 [ 331.146766][T13359] [ 331.833293][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 331.833306][ T30] audit: type=1400 audit(1792633088.919:805): avc: denied { write } for pid=13357 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 332.141126][ T30] audit: type=1400 audit(1792633089.219:806): avc: denied { write } for pid=13387 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 332.482661][T13396] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 332.482863][T13395] tipc: Started in network mode [ 332.482879][T13395] tipc: Node identity ac1414aa, cluster identity 4711 [ 332.483330][T13395] tipc: New replicast peer: 172.20.20.187 [ 332.484405][T13395] tipc: Enabled bearer , priority 10 [ 332.902932][ T10] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 333.064412][ T10] usb 5-1: not running at top speed; connect to a high speed hub [ 333.064434][ T10] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 333.065639][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 333.065664][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.119669][ T10] cyberjack 5-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 333.157140][ T10] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 333.396016][T13404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.396265][T13404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.467091][ T5809] usb 5-1: USB disconnect, device number 35 [ 333.503299][ T5809] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 333.503657][ T5809] cyberjack 5-1:1.0: device disconnected [ 333.602373][ T10] tipc: Node number set to 2886997162 [ 333.705030][T13428] overlayfs: failed to decode file handle (len=0, type=0, flags=0, err=-22) [ 333.804690][ T30] audit: type=1400 audit(1792633090.889:807): avc: denied { write } for pid=13401 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 333.877779][T13434] netlink: 'syz.1.2923': attribute type 1 has an invalid length. [ 333.929651][T13438] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2923'. [ 333.954378][T13434] bond1: entered promiscuous mode [ 333.954818][T13434] 8021q: adding VLAN 0 to HW filter on device bond1 [ 334.019857][T13438] 8021q: adding VLAN 0 to HW filter on device bond1 [ 334.020041][T13438] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 334.020053][T13438] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 334.081383][T13438] bond1: (slave wireguard0): making interface the new active one [ 334.081400][T13438] wireguard0: entered promiscuous mode [ 334.086227][T13438] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 334.215661][ T30] audit: type=1400 audit(1792633091.299:808): avc: denied { write } for pid=13440 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 334.511510][ T190] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 334.662688][ T190] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 334.665950][ T190] usb 5-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 334.665969][ T190] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 4 [ 334.665986][ T190] usb 5-1: config 0 interface 0 has no altsetting 0 [ 334.693081][ T190] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 334.693098][ T190] usb 5-1: Product: syz [ 334.693107][ T190] usb 5-1: Manufacturer: syz [ 334.693116][ T190] usb 5-1: SerialNumber: syz [ 334.737604][ T190] usb 5-1: config 0 descriptor?? [ 334.822645][ T190] usb 5-1: selecting invalid altsetting 0 [ 334.823330][T13455] netlink: 'syz.3.2927': attribute type 1 has an invalid length. [ 334.878134][T13459] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2927'. [ 334.933862][T13455] bond0: entered promiscuous mode [ 334.947296][T13455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.988881][T13445] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 334.989077][T13445] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 334.989246][T13445] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 334.989438][T13445] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 335.031020][T13445] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 335.031211][T13445] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 335.031408][T13445] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 335.031579][T13445] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 335.031748][T13445] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 335.031930][T13445] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 335.032099][T13445] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 335.032266][T13445] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 335.032455][T13445] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 335.040449][T13459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.040631][T13459] bond0: (slave wireguard0): The slave device specified does not support setting the MAC address [ 335.040643][T13459] bond0: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 335.086543][T13445] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 335.086730][T13445] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 335.086918][T13445] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 335.087088][T13445] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 335.130665][T13445] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 335.142385][T13445] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 335.142568][T13445] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 335.216536][T13445] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 335.216719][T13445] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 335.216892][T13445] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 335.217858][T13445] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 335.238436][T13445] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 335.238621][T13445] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 335.238808][T13445] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 335.272714][T13459] bond0: (slave wireguard0): making interface the new active one [ 335.272729][T13459] wireguard0: entered promiscuous mode [ 335.303615][T13445] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 335.303806][T13445] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 335.303994][T13445] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 335.304163][T13445] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 335.304346][T13445] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 335.304513][T13445] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 335.304702][T13445] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 335.304877][T13445] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 335.312379][T13459] bond0: (slave wireguard0): Enslaving as an active interface with an up link [ 335.375527][T13445] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 335.375708][T13445] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 335.375902][T13445] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 335.376071][T13445] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 335.415433][T13445] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 335.415621][T13445] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 335.415798][T13445] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 335.415977][T13445] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 335.473280][T13445] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 335.473464][T13445] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 335.473651][T13445] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 335.473825][T13445] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 335.474001][T13445] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 335.474103][ T190] usb 5-1: USB disconnect, device number 36 [ 335.615708][T13164] udevd[13164]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 335.816718][T13470] sit0: entered promiscuous mode [ 335.828141][T13469] FAULT_INJECTION: forcing a failure. [ 335.828141][T13469] name failslab, interval 1, probability 0, space 0, times 0 [ 335.828163][T13469] CPU: 0 UID: 0 PID: 13469 Comm: syz.5.2931 Tainted: G L syzkaller #0 PREEMPT(full) [ 335.828181][T13469] Tainted: [L]=SOFTLOCKUP [ 335.828186][T13469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 335.828194][T13469] Call Trace: [ 335.828199][T13469] [ 335.828205][T13469] dump_stack_lvl+0x100/0x190 [ 335.828228][T13469] should_fail_ex.cold+0x5/0xa [ 335.828255][T13469] should_failslab+0xc2/0x120 [ 335.828274][T13469] __kmalloc_noprof+0xfc/0x840 [ 335.828290][T13469] ? lsm_blob_alloc+0x68/0x90 [ 335.828306][T13469] lsm_blob_alloc+0x68/0x90 [ 335.828319][T13469] security_bpf_map_create+0x31/0x2d0 [ 335.828337][T13469] map_create+0x143a/0x30d0 [ 335.828355][T13469] ? find_held_lock+0x2b/0x80 [ 335.828371][T13469] ? avc_has_perm_noaudit+0x11e/0x470 [ 335.828384][T13469] ? avc_has_perm_noaudit+0x11e/0x470 [ 335.828402][T13469] ? __pfx_map_create+0x10/0x10 [ 335.828419][T13469] ? avc_has_perm+0x135/0x1e0 [ 335.828431][T13469] ? __pfx_avc_has_perm+0x10/0x10 [ 335.828443][T13469] ? __might_fault+0xc5/0x140 [ 335.828462][T13469] ? __might_fault+0xc5/0x140 [ 335.828484][T13469] ? selinux_bpf+0xf6/0x140 [ 335.828500][T13469] __sys_bpf+0x12a0/0x4a30 [ 335.828516][T13469] ? __pfx___sys_bpf+0x10/0x10 [ 335.828527][T13469] ? find_held_lock+0x2b/0x80 [ 335.828542][T13469] ? futex_wake+0x4ea/0x5e0 [ 335.828572][T13469] ? vm_mmap_pgoff+0x103/0x470 [ 335.828597][T13469] ? __x64_sys_futex+0x34f/0x4d0 [ 335.828612][T13469] ? __x64_sys_futex+0x358/0x4d0 [ 335.828629][T13469] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 335.828644][T13469] ? xfd_validate_state+0x129/0x190 [ 335.828661][T13469] ? __x64_sys_bpf+0xce/0x140 [ 335.828672][T13469] __x64_sys_bpf+0xce/0x140 [ 335.828685][T13469] ? do_syscall_64+0xae/0x790 [ 335.828705][T13469] do_syscall_64+0x123/0x790 [ 335.828724][T13469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.828737][T13469] RIP: 0033:0x7f3256f9f559 [ 335.828748][T13469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 335.828760][T13469] RSP: 002b:00007f3257e08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 335.828773][T13469] RAX: ffffffffffffffda RBX: 00007f3257225fa0 RCX: 00007f3256f9f559 [ 335.828781][T13469] RDX: 0000000000000048 RSI: 0000200000000000 RDI: 0000000000000000 [ 335.828789][T13469] RBP: 00007f3257036b20 R08: 0000000000000000 R09: 0000000000000000 [ 335.828797][T13469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 335.828804][T13469] R13: 00007f3257226038 R14: 00007f3257225fa0 R15: 00007ffe889dd0b8 [ 335.828822][T13469] [ 336.005594][T13470] netlink: 'syz.1.2930': attribute type 1 has an invalid length. [ 336.005607][T13470] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2930'. [ 336.477639][ T30] audit: type=1400 audit(1792633093.559:809): avc: denied { write } for pid=13449 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 336.865457][ T30] audit: type=1400 audit(1792633093.949:810): avc: denied { write } for pid=13488 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 337.822880][ T190] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 337.893068][T13509] printk: console [ttyS0] disabled [ 337.953443][T13509] printk: console [ttyS0] enabled [ 337.970882][ T190] usb 6-1: Using ep0 maxpacket: 16 [ 337.972828][ T190] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 337.978753][ T190] usb 6-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.978772][ T190] usb 6-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.978785][ T190] usb 6-1: config 0 interface 0 has no altsetting 0 [ 337.978804][ T190] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.007517][ T190] usb 6-1: config 0 descriptor?? [ 338.172569][ T10] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 338.324322][ T10] usb 5-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.40 [ 338.329244][ T10] usb 5-1: too many endpoints for config 1 interface 0 altsetting 13: 65, using maximum allowed: 30 [ 338.329271][ T10] usb 5-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 338.329287][ T10] usb 5-1: config 1 interface 0 has no altsetting 0 [ 338.377231][ T10] usb 5-1: string descriptor 0 read error: -22 [ 338.377300][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.518094][ T190] mcp2221 0003:04D8:00DD.001C: unknown main item tag 0x0 [ 338.518117][ T190] mcp2221 0003:04D8:00DD.001C: unknown main item tag 0x0 [ 338.518133][ T190] mcp2221 0003:04D8:00DD.001C: unknown main item tag 0x0 [ 338.518149][ T190] mcp2221 0003:04D8:00DD.001C: unknown main item tag 0x0 [ 338.518164][ T190] mcp2221 0003:04D8:00DD.001C: unknown main item tag 0x0 [ 338.519819][ T190] mcp2221 0003:04D8:00DD.001C: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 338.608369][ T30] audit: type=1400 audit(1792633095.689:811): avc: denied { write } for pid=13495 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 338.717507][T13526] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2935'. [ 338.847660][ T190] usb 6-1: USB disconnect, device number 17 [ 338.897280][ T10] zydacron 0003:13EC:0006.001D: unknown main item tag 0x0 [ 338.897305][ T10] zydacron 0003:13EC:0006.001D: unknown main item tag 0x0 [ 338.897321][ T10] zydacron 0003:13EC:0006.001D: unknown main item tag 0x0 [ 338.897336][ T10] zydacron 0003:13EC:0006.001D: unknown main item tag 0x0 [ 338.897351][ T10] zydacron 0003:13EC:0006.001D: unknown main item tag 0x0 [ 339.033513][ T30] audit: type=1400 audit(1792633096.109:812): avc: denied { write } for pid=13529 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 339.129553][ T10] zydacron 0003:13EC:0006.001D: hidraw0: USB HID vff.7f Device [HID 13ec:0006] on usb-dummy_hcd.4-1/input0 [ 339.153093][ T10] usb 5-1: USB disconnect, device number 37 [ 339.313660][T13537] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2938'. [ 339.371946][T13534] fido_id[13534]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 340.393708][ T30] audit: type=1400 audit(1792633097.479:813): avc: denied { write } for pid=13538 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 340.714588][ T30] audit: type=1400 audit(1792633097.799:814): avc: denied { write } for pid=13581 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 341.966169][ T30] audit: type=1400 audit(1792633099.049:815): avc: denied { write } for pid=13590 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 342.258094][ T30] audit: type=1400 audit(1792633099.339:816): avc: denied { write } for pid=13618 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 342.624632][T13615] 8021q: adding VLAN 0 to HW filter on device eth0 [ 342.639008][T13615] 8021q: adding VLAN 0 to HW filter on device eth1 [ 342.650190][T13615] 8021q: adding VLAN 0 to HW filter on device eth2 [ 342.666687][T13615] 8021q: adding VLAN 0 to HW filter on device eth3 [ 342.669619][T13615] bond0: left promiscuous mode [ 342.669632][T13615] wireguard0: left promiscuous mode [ 342.693808][T13615] 8021q: adding VLAN 0 to HW filter on device bond1 [ 342.869218][T13636] sit0: left promiscuous mode [ 343.467155][T13636] syz.5.2974 (13636) used greatest stack depth: 19656 bytes left [ 343.485299][ T30] audit: type=1400 audit(1792633100.569:817): avc: denied { write } for pid=13626 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 343.708308][ T30] audit: type=1400 audit(1792633100.789:818): avc: denied { write } for pid=13649 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 344.030528][T13656] ceph: No source [ 344.062623][T13658] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2963'. [ 344.440556][T13670] jffs2: notice: (13670) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 344.604256][ T30] audit: type=1400 audit(1792633101.689:819): avc: denied { write } for pid=13653 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 344.874090][T13681] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2969'. [ 344.874142][T13681] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2969'. [ 344.911325][ T30] audit: type=1400 audit(1792633101.989:820): avc: denied { write } for pid=13679 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 345.084338][T13686] rxe_eth0 speed is unknown, defaulting to 1000 [ 345.443590][T13698] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 345.959731][T13714] jffs2: notice: (13714) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 346.255111][T13722] FAULT_INJECTION: forcing a failure. [ 346.255111][T13722] name failslab, interval 1, probability 0, space 0, times 0 [ 346.255136][T13722] CPU: 0 UID: 0 PID: 13722 Comm: syz.4.2984 Tainted: G L syzkaller #0 PREEMPT(full) [ 346.255154][T13722] Tainted: [L]=SOFTLOCKUP [ 346.255159][T13722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 346.255167][T13722] Call Trace: [ 346.255172][T13722] [ 346.255178][T13722] dump_stack_lvl+0x100/0x190 [ 346.255203][T13722] should_fail_ex.cold+0x5/0xa [ 346.255222][T13722] should_failslab+0xc2/0x120 [ 346.255240][T13722] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 346.255255][T13722] ? __d_alloc+0x34/0xad0 [ 346.255275][T13722] __d_alloc+0x34/0xad0 [ 346.255295][T13722] d_alloc_pseudo+0x1c/0xc0 [ 346.255309][T13722] alloc_file_pseudo+0x118/0x290 [ 346.255328][T13722] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 346.255347][T13722] ? _raw_spin_unlock+0x28/0x50 [ 346.255363][T13722] ? alloc_fd+0x471/0x7a0 [ 346.255382][T13722] __anon_inode_getfile+0xe8/0x280 [ 346.255399][T13722] anon_inode_getfd+0x68/0xc0 [ 346.255417][T13722] map_create+0x19e1/0x30d0 [ 346.255434][T13722] ? find_held_lock+0x2b/0x80 [ 346.255458][T13722] ? avc_has_perm_noaudit+0x11e/0x470 [ 346.255472][T13722] ? avc_has_perm_noaudit+0x11e/0x470 [ 346.255491][T13722] ? __pfx_map_create+0x10/0x10 [ 346.255509][T13722] ? avc_has_perm+0x135/0x1e0 [ 346.255523][T13722] ? __pfx_avc_has_perm+0x10/0x10 [ 346.255535][T13722] ? __might_fault+0xc5/0x140 [ 346.255556][T13722] ? __might_fault+0xc5/0x140 [ 346.255578][T13722] ? selinux_bpf+0xf6/0x140 [ 346.255594][T13722] __sys_bpf+0x12a0/0x4a30 [ 346.255611][T13722] ? __pfx___sys_bpf+0x10/0x10 [ 346.255622][T13722] ? find_held_lock+0x2b/0x80 [ 346.255637][T13722] ? futex_wake+0x4ea/0x5e0 [ 346.255667][T13722] ? rcu_read_lock_any_held+0x6a/0x90 [ 346.255684][T13722] ? find_held_lock+0x2b/0x80 [ 346.255699][T13722] ? ksys_write+0x190/0x250 [ 346.255712][T13722] ? ksys_write+0x190/0x250 [ 346.255735][T13722] ? __x64_sys_futex+0x34f/0x4d0 [ 346.255751][T13722] ? __x64_sys_futex+0x358/0x4d0 [ 346.255768][T13722] ? xfd_validate_state+0x129/0x190 [ 346.255785][T13722] ? __x64_sys_bpf+0xce/0x140 [ 346.255796][T13722] __x64_sys_bpf+0xce/0x140 [ 346.255809][T13722] ? do_syscall_64+0xae/0x790 [ 346.255829][T13722] do_syscall_64+0x123/0x790 [ 346.255849][T13722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.255861][T13722] RIP: 0033:0x7f390919f559 [ 346.255872][T13722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.255884][T13722] RSP: 002b:00007f390a0ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 346.255897][T13722] RAX: ffffffffffffffda RBX: 00007f3909425fa0 RCX: 00007f390919f559 [ 346.255906][T13722] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 0000000000000000 [ 346.255913][T13722] RBP: 00007f3909236b20 R08: 0000000000000000 R09: 0000000000000000 [ 346.255921][T13722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 346.255928][T13722] R13: 00007f3909426038 R14: 00007f3909425fa0 R15: 00007fffe872f428 [ 346.255945][T13722] [ 346.803128][ T30] audit: type=1400 audit(1792633103.889:821): avc: denied { write } for pid=13696 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 347.116969][ T30] audit: type=1400 audit(1792633104.199:822): avc: denied { write } for pid=13737 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 347.700831][T13754] ip_tables: iptables: counters copy to user failed while replacing table [ 347.736089][ T30] audit: type=1400 audit(1792633104.819:823): avc: denied { write } for pid=13740 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 347.981336][ T30] audit: type=1400 audit(1792633105.069:824): avc: denied { write } for pid=13760 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 348.200396][T13766] rnbd_client L607: Mapping device /dev/ram0 on session s0, (access_mode: rw, nr_poll_queues: 0) [ 348.433093][ T43] rtrs_client L1783: : Resolving route failed, err: -ENODEV [ 348.642712][T13766] rtrs_client L2644: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 349.067470][T13789] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 349.148150][ T30] audit: type=1400 audit(1792633106.229:825): avc: denied { write } for pid=13771 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 349.261840][ T10] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 349.376994][ T30] audit: type=1400 audit(1792633106.459:826): avc: denied { write } for pid=13799 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 349.420917][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 349.421725][ T10] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 349.425749][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 349.458450][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.458467][ T10] usb 6-1: Product: syz [ 349.458477][ T10] usb 6-1: Manufacturer: syz [ 349.458486][ T10] usb 6-1: SerialNumber: syz [ 349.486932][ T10] usb 6-1: config 0 descriptor?? [ 349.502035][ T10] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 349.502057][ T10] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 349.815918][T13819] overlayfs: failed to clone upperpath [ 349.827845][ T10] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 349.850134][T13822] kAFS: No cell specified [ 349.993132][T13825] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 350.037781][ T10] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 350.037833][ T10] em28xx 6-1:0.0: board has no eeprom [ 350.151111][ T10] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 350.151129][ T10] em28xx 6-1:0.0: dvb set to bulk mode. [ 350.180925][ T5809] em28xx 6-1:0.0: Binding DVB extension [ 350.184624][ T10] usb 6-1: USB disconnect, device number 18 [ 350.185487][ T10] em28xx 6-1:0.0: Disconnecting em28xx [ 350.557526][ T5809] em28xx 6-1:0.0: Registering input extension [ 350.559484][ T10] em28xx 6-1:0.0: Closing input extension [ 350.687157][ T30] audit: type=1400 audit(1792633107.769:827): avc: denied { write } for pid=13845 comm="syz.3.3018" path="socket:[44704]" dev="sockfs" ino=44704 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 350.804464][ T10] em28xx: Freeing device [ 351.047325][ T30] audit: type=1400 audit(1792633108.129:828): avc: denied { write } for pid=13821 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 351.329819][ T30] audit: type=1400 audit(1792633108.409:829): avc: denied { write } for pid=13867 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 352.348638][ T30] audit: type=1400 audit(1792633109.429:830): avc: denied { write } for pid=13874 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 352.422867][ T30] audit: type=1400 audit(1792633109.509:831): avc: denied { write } for pid=13903 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 352.954751][T13923] ip_tables: iptables: counters copy to user failed while replacing table [ 353.035719][T13930] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 353.104537][T13932] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 353.244893][T13934] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3045'. [ 353.790372][ T30] audit: type=1400 audit(1792633110.869:832): avc: denied { write } for pid=13913 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 354.001411][T13952] geneve2: entered promiscuous mode [ 354.001428][T13952] geneve2: entered allmulticast mode [ 354.170095][ T30] audit: type=1400 audit(1792633111.249:833): avc: denied { write } for pid=13953 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 355.679023][ T30] audit: type=1400 audit(1792633112.759:834): avc: denied { write } for pid=13971 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 356.046741][T14028] tmpfs: Too small a size for current use [ 356.046805][ T30] audit: type=1400 audit(1792633113.129:835): avc: denied { remount } for pid=14026 comm="syz.4.3073" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 356.089262][ T30] audit: type=1400 audit(1792633113.169:836): avc: denied { write } for pid=14024 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 356.152797][T14029] xt_hashlimit: size too large, truncated to 1048576 [ 356.812740][T14046] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3080'. [ 356.812757][T14046] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3080'. [ 357.026456][ T30] audit: type=1400 audit(1792633114.109:837): avc: denied { setopt } for pid=14055 comm="syz.5.3083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 357.154828][T14060] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3085'. [ 357.630328][ T30] audit: type=1400 audit(1792633114.709:838): avc: denied { accept } for pid=14075 comm="syz.4.3089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 357.675768][ T30] audit: type=1400 audit(1792633114.759:839): avc: denied { write } for pid=14039 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 357.913329][ T30] audit: type=1400 audit(1792633114.999:840): avc: denied { write } for pid=14082 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 357.988191][T14087] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 358.324283][T14092] FAULT_INJECTION: forcing a failure. [ 358.324283][T14092] name failslab, interval 1, probability 0, space 0, times 0 [ 358.324309][T14092] CPU: 0 UID: 0 PID: 14092 Comm: syz.5.3094 Tainted: G L syzkaller #0 PREEMPT(full) [ 358.324329][T14092] Tainted: [L]=SOFTLOCKUP [ 358.324333][T14092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 358.324342][T14092] Call Trace: [ 358.324347][T14092] [ 358.324353][T14092] dump_stack_lvl+0x100/0x190 [ 358.324376][T14092] should_fail_ex.cold+0x5/0xa [ 358.324396][T14092] should_failslab+0xc2/0x120 [ 358.324413][T14092] kmem_cache_alloc_noprof+0x92/0x6a0 [ 358.324431][T14092] ? kmem_cache_free+0x127/0x6c0 [ 358.324443][T14092] ? skb_clone+0x190/0x400 [ 358.324462][T14092] skb_clone+0x190/0x400 [ 358.324478][T14092] nfnetlink_rcv_batch+0x1c8/0x2880 [ 358.324505][T14092] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 358.324525][T14092] ? lock_acquire+0x1d1/0x380 [ 358.324538][T14092] ? avc_has_perm_noaudit+0x56/0x470 [ 358.324558][T14092] ? avc_has_perm_noaudit+0x145/0x470 [ 358.324594][T14092] ? __nla_parse+0x40/0x60 [ 358.324615][T14092] nfnetlink_rcv+0x3bd/0x440 [ 358.324632][T14092] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 358.324654][T14092] netlink_unicast+0x65f/0x950 [ 358.324672][T14092] ? __pfx_netlink_unicast+0x10/0x10 [ 358.324690][T14092] netlink_sendmsg+0x9ac/0x10c0 [ 358.324706][T14092] ? __pfx_netlink_sendmsg+0x10/0x10 [ 358.324724][T14092] ? selinux_socket_sendmsg+0x198/0x2f0 [ 358.324741][T14092] ? ____sys_sendmsg+0xa4d/0xbe0 [ 358.324757][T14092] ____sys_sendmsg+0xa4d/0xbe0 [ 358.324774][T14092] ? __pfx_netlink_sendmsg+0x10/0x10 [ 358.324788][T14092] ? __pfx_____sys_sendmsg+0x10/0x10 [ 358.324813][T14092] ___sys_sendmsg+0x190/0x1e0 [ 358.324832][T14092] ? __pfx____sys_sendmsg+0x10/0x10 [ 358.324850][T14092] ? futex_wait+0x11e/0x370 [ 358.324868][T14092] ? find_held_lock+0x2b/0x80 [ 358.324894][T14092] __sys_sendmsg+0x160/0x210 [ 358.324909][T14092] ? __pfx___sys_sendmsg+0x10/0x10 [ 358.324933][T14092] do_syscall_64+0x123/0x790 [ 358.324954][T14092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.324967][T14092] RIP: 0033:0x7f3256f9f559 [ 358.324979][T14092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.324991][T14092] RSP: 002b:00007f3257e08028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 358.325004][T14092] RAX: ffffffffffffffda RBX: 00007f3257225fa0 RCX: 00007f3256f9f559 [ 358.325012][T14092] RDX: 0000000000008040 RSI: 0000200000000f00 RDI: 0000000000000004 [ 358.325020][T14092] RBP: 00007f3257036b20 R08: 0000000000000000 R09: 0000000000000000 [ 358.325028][T14092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 358.325036][T14092] R13: 00007f3257226038 R14: 00007f3257225fa0 R15: 00007ffe889dd0b8 [ 358.325054][T14092] [ 358.900550][T14099] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 359.404236][T14122] fuse: Bad value for 'fd' [ 359.540619][ T30] audit: type=1400 audit(1792633116.619:841): avc: denied { write } for pid=14094 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 359.800387][ T30] audit: type=1400 audit(1792633116.879:842): avc: denied { write } for pid=14135 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 360.338099][T14145] syzkaller1: entered promiscuous mode [ 360.338116][T14145] syzkaller1: entered allmulticast mode [ 360.562594][T14152] rdma_op ffff888056a2aa38 conn xmit_rdma 0000000000000000 [ 360.998982][ T30] audit: type=1400 audit(1792633118.079:843): avc: denied { write } for pid=14140 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 361.375202][ T30] audit: type=1400 audit(1792633118.459:844): avc: denied { write } for pid=14178 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 362.119724][ T30] audit: type=1400 audit(1792633119.199:845): avc: denied { read write } for pid=14204 comm="syz.5.3128" name="kmsg" dev="proc" ino=4026532047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 362.154185][ T30] audit: type=1400 audit(1792633119.239:846): avc: denied { open } for pid=14204 comm="syz.5.3128" path="/292/proc/kmsg" dev="proc" ino=4026532047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 362.892440][ T30] audit: type=1400 audit(1792633119.979:847): avc: denied { write } for pid=14193 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 362.944188][ T5798] as10x_usb: unable to locate firmware file: as102_data1_st.hex [ 362.944213][ T5798] Registered device Abilis Systems DVB-Titan [ 362.974632][T14234] ip_tables: iptables: counters copy to user failed while replacing table [ 363.010697][T14236] xt_hashlimit: size too large, truncated to 1048576 [ 363.126317][ T5798] usb 1-1: USB disconnect, device number 22 [ 363.231912][ T5798] Unregistered device Abilis Systems DVB-Titan [ 363.247697][ T5798] as10x_usb: device has been disconnected [ 363.274849][T14247] ip_tables: iptables: counters copy to user failed while replacing table [ 363.378070][ T30] audit: type=1400 audit(1792633120.459:848): avc: denied { setopt } for pid=14248 comm="syz.6.3142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 363.410928][ T30] audit: type=1400 audit(1792633120.489:849): avc: denied { write } for pid=14245 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 364.328609][ T190] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 364.387659][ T190] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 364.544278][T14311] netlink: 'syz.4.3163': attribute type 12 has an invalid length. [ 364.544294][T14311] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3163'. [ 364.582372][ T190] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 364.631374][T14311] netlink: 'syz.4.3163': attribute type 12 has an invalid length. [ 364.631388][T14311] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3163'. [ 364.653003][ T190] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 364.692400][ T30] audit: type=1326 audit(1792633121.779:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14312 comm="syz.6.3164" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aa359f559 code=0x7ffc0000 [ 364.692823][ T30] audit: type=1326 audit(1792633121.779:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14312 comm="syz.6.3164" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aa359f559 code=0x7ffc0000 [ 364.694068][ T30] audit: type=1326 audit(1792633121.779:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14312 comm="syz.6.3164" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aa359f559 code=0x7ffc0000 [ 364.694184][ T30] audit: type=1326 audit(1792633121.779:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14312 comm="syz.6.3164" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1aa359f559 code=0x7ffc0000 [ 364.694885][ T30] audit: type=1326 audit(1792633121.779:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14312 comm="syz.6.3164" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aa359f559 code=0x7ffc0000 [ 364.698632][ T30] audit: type=1326 audit(1792633121.779:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14312 comm="syz.6.3164" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aa359f559 code=0x7ffc0000 [ 364.815916][ T30] audit: type=1326 audit(1792633121.899:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14312 comm="syz.6.3164" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aa359f559 code=0x7ffc0000 [ 365.088805][T14293] ceph: No mds server is up or the cluster is laggy [ 365.091946][ T5798] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 365.107930][T14298] ceph: No mds server is up or the cluster is laggy [ 365.322515][T14323] netlink: 'syz.4.3168': attribute type 39 has an invalid length. [ 366.418096][T14373] netlink: 'syz.5.3187': attribute type 15 has an invalid length. [ 366.418128][T14373] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3187'. [ 366.482123][T14373] netlink: 'syz.5.3187': attribute type 15 has an invalid length. [ 366.482138][T14373] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3187'. [ 366.482292][ T43] netdevsim netdevsim5 eth3: set [0, 1] type 1 family 0 port 2816 - 0 [ 366.503189][ T1116] netdevsim netdevsim5 eth2: set [0, 1] type 1 family 0 port 2816 - 0 [ 366.503642][ T1116] netdevsim netdevsim5 eth1: set [0, 1] type 1 family 0 port 2816 - 0 [ 366.503663][ T1116] netdevsim netdevsim5 eth0: set [0, 1] type 1 family 0 port 2816 - 0 [ 366.565639][T14377] overlayfs: failed to clone upperpath [ 368.193655][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 368.193667][ T30] audit: type=1400 audit(1792633125.279:873): avc: denied { write } for pid=14441 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 368.327724][ T30] audit: type=1400 audit(1792633125.409:874): avc: denied { write } for pid=14464 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 368.532176][T14472] netlink: 'syz.5.3215': attribute type 22 has an invalid length. [ 368.532191][T14472] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3215'. [ 368.612461][T14472] netlink: 'syz.5.3215': attribute type 22 has an invalid length. [ 368.612485][T14472] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3215'. [ 368.768958][T14478] fuse: Bad value for 'fd' [ 368.776156][ T30] audit: type=1400 audit(1792633125.859:875): avc: denied { read } for pid=14476 comm="syz.6.3217" path="socket:[46702]" dev="sockfs" ino=46702 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 368.891452][T14480] FAULT_INJECTION: forcing a failure. [ 368.891452][T14480] name fail_futex, interval 1, probability 0, space 0, times 1 [ 368.891487][T14480] CPU: 0 UID: 0 PID: 14480 Comm: syz.5.3218 Tainted: G L syzkaller #0 PREEMPT(full) [ 368.891505][T14480] Tainted: [L]=SOFTLOCKUP [ 368.891510][T14480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 368.891518][T14480] Call Trace: [ 368.891522][T14480] [ 368.891528][T14480] dump_stack_lvl+0x100/0x190 [ 368.891552][T14480] should_fail_ex.cold+0x5/0xa [ 368.891571][T14480] get_futex_key+0x1c9/0x13e0 [ 368.891589][T14480] ? __pfx_get_futex_key+0x10/0x10 [ 368.891608][T14480] futex_wake+0xf4/0x5e0 [ 368.891628][T14480] ? __pfx_futex_wake+0x10/0x10 [ 368.891649][T14480] ? __lock_acquire+0x5c0/0x1f40 [ 368.891663][T14480] ? do_raw_spin_lock+0x128/0x260 [ 368.891677][T14480] ? find_held_lock+0x2b/0x80 [ 368.891696][T14480] do_futex+0x2b2/0x440 [ 368.891712][T14480] ? __pfx_do_futex+0x10/0x10 [ 368.891729][T14480] ? put_files_struct+0x44/0x390 [ 368.891747][T14480] ? __x64_sys_close_range+0x359/0x430 [ 368.891774][T14480] __x64_sys_futex+0x34f/0x4d0 [ 368.891795][T14480] ? __pfx___x64_sys_futex+0x10/0x10 [ 368.891813][T14480] ? __pfx___x64_sys_close_range+0x10/0x10 [ 368.891837][T14480] do_syscall_64+0x123/0x790 [ 368.891857][T14480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.891871][T14480] RIP: 0033:0x7f3256f9f559 [ 368.891883][T14480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 368.891895][T14480] RSP: 002b:00007f3257e080e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 368.891908][T14480] RAX: ffffffffffffffda RBX: 00007f3257225fa8 RCX: 00007f3256f9f559 [ 368.891916][T14480] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3257225fac [ 368.891924][T14480] RBP: 00007f3257225fa0 R08: 0000000000000001 R09: 0000000000000000 [ 368.891931][T14480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 368.891939][T14480] R13: 00007f3257226038 R14: 00007ffe889dcfd0 R15: 00007ffe889dd0b8 [ 368.891956][T14480] [ 369.148123][ T30] audit: type=1400 audit(1792633126.229:876): avc: denied { node_bind } for pid=14483 comm="syz.6.3219" saddr=255.255.255.255 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 369.615687][ T30] audit: type=1400 audit(1792633126.699:877): avc: denied { write } for pid=14473 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 369.715020][T14390] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 369.922872][ T30] audit: type=1400 audit(1792633126.999:878): avc: denied { write } for pid=14507 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 370.409430][T14526] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 370.492217][T14528] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 370.605208][ T151] IPVS: starting estimator thread 0... [ 370.703684][T14534] IPVS: using max 63 ests per chain, 151200 per kthread [ 370.886787][T14547] overlayfs: failed to clone upperpath [ 371.378476][ T30] audit: type=1400 audit(1792633128.459:879): avc: denied { write } for pid=14523 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 371.549021][ T30] audit: type=1400 audit(1792633128.629:880): avc: denied { write } for pid=14577 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 371.941314][T14582] FAULT_INJECTION: forcing a failure. [ 371.941314][T14582] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 371.941340][T14582] CPU: 0 UID: 0 PID: 14582 Comm: syz.5.3250 Tainted: G L syzkaller #0 PREEMPT(full) [ 371.941359][T14582] Tainted: [L]=SOFTLOCKUP [ 371.941364][T14582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 371.941372][T14582] Call Trace: [ 371.941377][T14582] [ 371.941384][T14582] dump_stack_lvl+0x100/0x190 [ 371.941407][T14582] should_fail_ex.cold+0x5/0xa [ 371.941425][T14582] ? prepare_alloc_pages+0x16d/0x5b0 [ 371.941444][T14582] should_fail_alloc_page+0xeb/0x140 [ 371.941462][T14582] prepare_alloc_pages+0x1f0/0x5b0 [ 371.941482][T14582] __alloc_frozen_pages_noprof+0x1e8/0x32e0 [ 371.941498][T14582] ? prepare_alloc_pages+0x1f0/0x5b0 [ 371.941514][T14582] ? is_bpf_text_address+0x94/0x1a0 [ 371.941532][T14582] ? rcu_is_watching+0x13/0xc0 [ 371.941548][T14582] ? __alloc_frozen_pages_noprof+0x562/0x32e0 [ 371.941563][T14582] ? do_raw_spin_lock+0x128/0x260 [ 371.941578][T14582] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 371.941602][T14582] ? mark_held_locks+0x40/0x70 [ 371.941614][T14582] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 371.941632][T14582] ? lockdep_hardirqs_on+0x7d/0x110 [ 371.941650][T14582] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 371.941667][T14582] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 371.941686][T14582] ? kasan_save_track+0x14/0x30 [ 371.941702][T14582] ? __kasan_slab_alloc+0x89/0x90 [ 371.941717][T14582] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 371.941732][T14582] ? alloc_vmap_area+0x1829/0x2bc0 [ 371.941746][T14582] ? __get_vm_area_node+0x1ed/0x350 [ 371.941761][T14582] ? __vmalloc_node_range_noprof+0x268/0x1420 [ 371.941777][T14582] ? __vmalloc_node_noprof+0xad/0xf0 [ 371.941793][T14582] ? __snd_dma_alloc_pages+0xd2/0x150 [ 371.941807][T14582] ? snd_dma_alloc_dir_pages+0x151/0x240 [ 371.941820][T14582] ? do_alloc_pages+0xe5/0x1e0 [ 371.941837][T14582] ? snd_pcm_lib_malloc_pages+0x4bd/0x9b0 [ 371.941854][T14582] ? snd_pcm_hw_params+0x1738/0x1cd0 [ 371.941865][T14582] ? snd_pcm_kernel_ioctl+0x104/0x280 [ 371.941876][T14582] ? snd_pcm_oss_change_params_locked+0x1973/0x39f0 [ 371.941893][T14582] ? snd_pcm_oss_make_ready+0xeb/0x1b0 [ 371.941913][T14582] alloc_pages_bulk_noprof+0x5e1/0x13c0 [ 371.941931][T14582] ? policy_nodemask+0xed/0x4f0 [ 371.941949][T14582] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 371.941973][T14582] __kasan_populate_vmalloc+0xf0/0x210 [ 371.941993][T14582] alloc_vmap_area+0x963/0x2bc0 [ 371.942014][T14582] ? kasan_save_track+0x14/0x30 [ 371.942029][T14582] ? __kasan_kmalloc+0xaa/0xb0 [ 371.942043][T14582] ? __pfx_alloc_vmap_area+0x10/0x10 [ 371.942059][T14582] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 371.942076][T14582] ? __get_vm_area_node+0x124/0x350 [ 371.942096][T14582] __get_vm_area_node+0x1ed/0x350 [ 371.942116][T14582] __vmalloc_node_range_noprof+0x268/0x1420 [ 371.942134][T14582] ? __snd_dma_alloc_pages+0xd2/0x150 [ 371.942148][T14582] ? lock_acquire+0x1d1/0x380 [ 371.942159][T14582] ? do_alloc_pages+0x39/0x1e0 [ 371.942182][T14582] ? __snd_dma_alloc_pages+0xd2/0x150 [ 371.942199][T14582] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 371.942216][T14582] ? do_alloc_pages+0xb3/0x1e0 [ 371.942233][T14582] ? do_alloc_pages+0xb3/0x1e0 [ 371.942255][T14582] ? __snd_dma_alloc_pages+0xd2/0x150 [ 371.942269][T14582] __vmalloc_node_noprof+0xad/0xf0 [ 371.942286][T14582] ? __snd_dma_alloc_pages+0xd2/0x150 [ 371.942300][T14582] ? __pfx_snd_dma_vmalloc_alloc+0x10/0x10 [ 371.942314][T14582] __snd_dma_alloc_pages+0xd2/0x150 [ 371.942332][T14582] snd_dma_alloc_dir_pages+0x151/0x240 [ 371.942349][T14582] do_alloc_pages+0xe5/0x1e0 [ 371.942370][T14582] snd_pcm_lib_malloc_pages+0x4bd/0x9b0 [ 371.942393][T14582] snd_pcm_hw_params+0x1738/0x1cd0 [ 371.942408][T14582] ? do_raw_spin_lock+0x128/0x260 [ 371.942424][T14582] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 371.942439][T14582] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 371.942456][T14582] ? lockdep_hardirqs_on+0x7d/0x110 [ 371.942474][T14582] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 371.942493][T14582] snd_pcm_kernel_ioctl+0x104/0x280 [ 371.942506][T14582] snd_pcm_oss_change_params_locked+0x1973/0x39f0 [ 371.942532][T14582] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 371.942548][T14582] ? __pfx___mutex_lock+0x10/0x10 [ 371.942568][T14582] ? do_vfs_ioctl+0x226/0x13e0 [ 371.942589][T14582] snd_pcm_oss_make_ready+0xeb/0x1b0 [ 371.942609][T14582] snd_pcm_oss_ioctl+0x7aa/0x3790 [ 371.942630][T14582] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 371.942651][T14582] ? selinux_file_ioctl+0x1e0/0x290 [ 371.942669][T14582] ? selinux_file_ioctl+0x1e7/0x290 [ 371.942686][T14582] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 371.942704][T14582] __x64_sys_ioctl+0x18e/0x210 [ 371.942720][T14582] do_syscall_64+0x123/0x790 [ 371.942741][T14582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.942754][T14582] RIP: 0033:0x7f3256f9f559 [ 371.942766][T14582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 371.942778][T14582] RSP: 002b:00007f3257e08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 371.942790][T14582] RAX: ffffffffffffffda RBX: 00007f3257225fa0 RCX: 00007f3256f9f559 [ 371.942799][T14582] RDX: 0000200000000180 RSI: 00000000800c5011 RDI: 0000000000000004 [ 371.942807][T14582] RBP: 00007f3257036b20 R08: 0000000000000000 R09: 0000000000000000 [ 371.942815][T14582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 371.942824][T14582] R13: 00007f3257226038 R14: 00007f3257225fa0 R15: 00007ffe889dd0b8 [ 371.942842][T14582] [ 371.995755][T14588] ip_tables: iptables: counters copy to user failed while replacing table [ 372.027494][T14582] syz.5.3250: vmalloc error: size 2097152, align 0x1, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 372.027651][T14582] CPU: 0 UID: 0 PID: 14582 Comm: syz.5.3250 Tainted: G L syzkaller #0 PREEMPT(full) [ 372.027669][T14582] Tainted: [L]=SOFTLOCKUP [ 372.027674][T14582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 372.027682][T14582] Call Trace: [ 372.027687][T14582] [ 372.027693][T14582] dump_stack_lvl+0x100/0x190 [ 372.027716][T14582] warn_alloc.cold+0x9e/0xb2 [ 372.027732][T14582] ? __pfx_warn_alloc+0x10/0x10 [ 372.027746][T14582] ? lockdep_hardirqs_on+0x7d/0x110 [ 372.027767][T14582] ? __get_vm_area_node+0x2f0/0x350 [ 372.027789][T14582] ? __get_vm_area_node+0x22b/0x350 [ 372.027809][T14582] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 372.027828][T14582] ? lock_acquire+0x1d1/0x380 [ 372.027841][T14582] ? do_alloc_pages+0x39/0x1e0 [ 372.027864][T14582] ? __snd_dma_alloc_pages+0xd2/0x150 [ 372.027881][T14582] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 372.027898][T14582] ? do_alloc_pages+0xb3/0x1e0 [ 372.027915][T14582] ? do_alloc_pages+0xb3/0x1e0 [ 372.027937][T14582] ? __snd_dma_alloc_pages+0xd2/0x150 [ 372.027950][T14582] __vmalloc_node_noprof+0xad/0xf0 [ 372.027967][T14582] ? __snd_dma_alloc_pages+0xd2/0x150 [ 372.027981][T14582] ? __pfx_snd_dma_vmalloc_alloc+0x10/0x10 [ 372.027994][T14582] __snd_dma_alloc_pages+0xd2/0x150 [ 372.028009][T14582] snd_dma_alloc_dir_pages+0x151/0x240 [ 372.028025][T14582] do_alloc_pages+0xe5/0x1e0 [ 372.028046][T14582] snd_pcm_lib_malloc_pages+0x4bd/0x9b0 [ 372.028067][T14582] snd_pcm_hw_params+0x1738/0x1cd0 [ 372.028081][T14582] ? do_raw_spin_lock+0x128/0x260 [ 372.028096][T14582] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 372.028112][T14582] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 372.028129][T14582] ? lockdep_hardirqs_on+0x7d/0x110 [ 372.028146][T14582] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 372.028165][T14582] snd_pcm_kernel_ioctl+0x104/0x280 [ 372.028178][T14582] snd_pcm_oss_change_params_locked+0x1973/0x39f0 [ 372.028204][T14582] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 372.028220][T14582] ? __pfx___mutex_lock+0x10/0x10 [ 372.028240][T14582] ? do_vfs_ioctl+0x226/0x13e0 [ 372.028257][T14582] snd_pcm_oss_make_ready+0xeb/0x1b0 [ 372.028276][T14582] snd_pcm_oss_ioctl+0x7aa/0x3790 [ 372.028296][T14582] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 372.028315][T14582] ? selinux_file_ioctl+0x1e0/0x290 [ 372.028333][T14582] ? selinux_file_ioctl+0x1e7/0x290 [ 372.028351][T14582] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 372.028369][T14582] __x64_sys_ioctl+0x18e/0x210 [ 372.028384][T14582] do_syscall_64+0x123/0x790 [ 372.028404][T14582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.028417][T14582] RIP: 0033:0x7f3256f9f559 [ 372.028429][T14582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.028441][T14582] RSP: 002b:00007f3257e08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 372.028453][T14582] RAX: ffffffffffffffda RBX: 00007f3257225fa0 RCX: 00007f3256f9f559 [ 372.028461][T14582] RDX: 0000200000000180 RSI: 00000000800c5011 RDI: 0000000000000004 [ 372.028469][T14582] RBP: 00007f3257036b20 R08: 0000000000000000 R09: 0000000000000000 [ 372.028476][T14582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 372.028487][T14582] R13: 00007f3257226038 R14: 00007f3257225fa0 R15: 00007ffe889dd0b8 [ 372.028505][T14582] [ 372.171425][T14582] Mem-Info: [ 372.171434][T14582] active_anon:41677 inactive_anon:10299 isolated_anon:0 [ 372.171434][T14582] active_file:437 inactive_file:61799 isolated_file:0 [ 372.171434][T14582] unevictable:0 dirty:405 writeback:0 [ 372.171434][T14582] slab_reclaimable:8401 slab_unreclaimable:107027 [ 372.171434][T14582] mapped:29987 shmem:43183 pagetables:2017 [ 372.171434][T14582] sec_pagetables:0 bounce:0 [ 372.171434][T14582] kernel_misc_reclaimable:0 [ 372.171434][T14582] free:1220047 free_pcp:12265 free_cma:0 [ 372.171476][T14582] Node 0 active_anon:166708kB inactive_anon:41196kB active_file:1748kB inactive_file:246948kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119896kB dirty:1612kB writeback:0kB shmem:172732kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13408kB pagetables:7684kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 372.171511][T14582] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:248kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:52kB dirty:8kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:384kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 372.171542][T14582] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 372.171582][T14582] lowmem_reserve[]: 0 2451 2452 2452 2452 [ 372.171604][T14582] Node 0 DMA32 free:943976kB boost:0kB min:33836kB low:42292kB high:50748kB reserved_highatomic:0kB free_highatomic:0kB active_anon:166708kB inactive_anon:41196kB active_file:1748kB inactive_file:246948kB unevictable:0kB writepending:1612kB zspages:2324kB present:3129332kB managed:2510824kB mlocked:0kB bounce:0kB free_pcp:37796kB local_pcp:37796kB free_cma:0kB [ 372.171641][T14582] lowmem_reserve[]: 0 0 0 0 0 [ 372.171662][T14582] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:52kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 372.171694][T14582] lowmem_reserve[]: 0 0 0 0 0 [ 372.171713][T14582] Node 1 Normal free:3920852kB boost:0kB min:56064kB low:70080kB high:84096kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:248kB unevictable:0kB writepending:8kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:11264kB local_pcp:11264kB free_cma:0kB [ 372.171746][T14582] lowmem_reserve[]: 0 0 0 0 0 [ 372.171765][T14582] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 372.171830][T14582] Node 0 DMA32: 4096*4kB (UME) 2477*8kB (UME) 1436*16kB (UM) 746*32kB (UME) 382*64kB (UME) 163*128kB (UME) 66*256kB (UME) 18*512kB (UME) 11*1024kB (UM) 6*2048kB (UME) 187*4096kB (UM) = 943976kB [ 372.171921][T14582] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 372.171976][T14582] Node 1 Normal: 7*4kB (UM) 11*8kB (UM) 12*16kB (UM) 5*32kB (UM) 10*64kB (UM) 7*128kB (UM) 4*256kB (UM) 2*512kB (M) 3*1024kB (UM) 1*2048kB (M) 955*4096kB (UM) = 3920852kB [ 372.190062][T14582] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 372.190073][T14582] Node 0 hugepages_total=3 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 372.190083][T14582] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 372.190093][T14582] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 372.190102][T14582] 105422 total pagecache pages [ 372.190107][T14582] 7 pages in swap cache [ 372.190112][T14582] Free swap = 122672kB [ 372.190116][T14582] Total swap = 124996kB [ 372.190122][T14582] 2097051 pages RAM [ 372.190127][T14582] 0 pages HighMem/MovableOnly [ 372.190131][T14582] 437716 pages reserved [ 372.190135][T14582] 0 pages cma reserved [ 373.174174][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 373.174211][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 373.174699][ T1308] aoe: packet could not be sent on lowpan0. consider increasing tx_queue_len [ 373.807716][ T32] INFO: task kworker/0:5:5745 blocked for more than 143 seconds. [ 373.807735][ T32] Tainted: G L syzkaller #0 [ 373.807742][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 373.807747][ T32] task:kworker/0:5 state:D stack:22552 pid:5745 tgid:5745 ppid:2 task_flags:0x4288060 flags:0x00080000 [ 373.807790][ T32] Workqueue: usb_hub_wq hub_event [ 373.807810][ T32] Call Trace: [ 373.807814][ T32] [ 373.807822][ T32] __schedule+0x125e/0x6990 [ 373.807842][ T32] ? lock_acquire+0x1d1/0x380 [ 373.807860][ T32] ? mark_held_locks+0x40/0x70 [ 373.807872][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 373.807888][ T32] ? lockdep_hardirqs_on+0x7d/0x110 [ 373.807907][ T32] ? __pfx___schedule+0x10/0x10 [ 373.807922][ T32] ? find_held_lock+0x2b/0x80 [ 373.807939][ T32] ? schedule+0x225/0x2c0 [ 373.807957][ T32] schedule+0xdd/0x2c0 [ 373.807973][ T32] schedule_timeout+0x1b2/0x280 [ 373.807988][ T32] ? __pfx_schedule_timeout+0x10/0x10 [ 373.808009][ T32] ? mark_held_locks+0x40/0x70 [ 373.808023][ T32] __wait_for_common+0x2e6/0x500 [ 373.808040][ T32] ? __pfx_schedule_timeout+0x10/0x10 [ 373.808057][ T32] ? __pfx___wait_for_common+0x10/0x10 [ 373.808074][ T32] ? __flush_work+0x4ca/0xcb0 [ 373.808092][ T32] ? find_held_lock+0x2b/0x80 [ 373.808107][ T32] ? __flush_work+0x928/0xcb0 [ 373.808122][ T32] ? __flush_work+0x928/0xcb0 [ 373.808140][ T32] ? __flush_work+0x4ca/0xcb0 [ 373.808157][ T32] __flush_work+0x7c7/0xcb0 [ 373.808174][ T32] ? __timer_delete+0x21/0x1b0 [ 373.808187][ T32] ? __pfx___flush_work+0x10/0x10 [ 373.808206][ T32] ? __pfx_wq_barrier_func+0x10/0x10 [ 373.808227][ T32] ? __pfx___might_resched+0x10/0x10 [ 373.808248][ T32] cancel_delayed_work_sync+0xcc/0xf0 [ 373.808262][ T32] mmc_stop_host+0xe9/0x400 [ 373.808275][ T32] mmc_remove_host+0x15/0x60 [ 373.808288][ T32] vub300_disconnect+0x12d/0x170 [ 373.808302][ T32] usb_unbind_interface+0x1dd/0x9e0 [ 373.808323][ T32] ? __pfx_usb_unbind_interface+0x10/0x10 [ 373.808341][ T32] device_remove+0x12a/0x180 [ 373.808371][ T32] device_release_driver_internal+0x44e/0x620 [ 373.808389][ T32] bus_remove_device+0x2bc/0x560 [ 373.808409][ T32] ? __pfx_bus_remove_device+0x10/0x10 [ 373.808427][ T32] ? __pfx_device_remove_attrs+0x10/0x10 [ 373.808455][ T32] device_del+0x376/0x9b0 [ 373.808470][ T32] ? __pfx_device_del+0x10/0x10 [ 373.808481][ T32] ? kobject_put+0xb9/0x640 [ 373.808501][ T32] usb_disable_device+0x367/0x810 [ 373.808521][ T32] usb_disconnect+0x2e2/0x9a0 [ 373.808540][ T32] hub_event+0x1bb1/0x4420 [ 373.808567][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 373.808582][ T32] ? __pfx_hub_event+0x10/0x10 [ 373.808597][ T32] ? lock_pin_lock+0x10/0x150 [ 373.808615][ T32] ? lock_acquire+0x1d1/0x380 [ 373.808627][ T32] ? process_one_work+0xa2c/0x1b10 [ 373.808644][ T32] ? process_one_work+0x906/0x1b10 [ 373.808660][ T32] ? process_one_work+0x906/0x1b10 [ 373.808679][ T32] process_one_work+0xac7/0x1b10 [ 373.808703][ T32] ? __pfx_process_one_work+0x10/0x10 [ 373.808720][ T32] ? lock_acquire+0x1d1/0x380 [ 373.808737][ T32] ? __pfx_hub_event+0x10/0x10 [ 373.808754][ T32] worker_thread+0x5ef/0xe50 [ 373.808777][ T32] ? kthread+0x13a/0x450 [ 373.808791][ T32] ? __pfx_worker_thread+0x10/0x10 [ 373.808807][ T32] kthread+0x373/0x450 [ 373.808821][ T32] ? __pfx_kthread+0x10/0x10 [ 373.808838][ T32] ret_from_fork+0x730/0xd60 [ 373.808854][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 373.808869][ T32] ? __switch_to+0x800/0x10e0 [ 373.808888][ T32] ? __pfx_kthread+0x10/0x10 [ 373.808904][ T32] ret_from_fork_asm+0x1a/0x30 [ 373.808926][ T32] [ 373.808932][ T32] INFO: task kworker/0:6:5797 blocked for more than 143 seconds. [ 373.808942][ T32] Tainted: G L syzkaller #0 [ 373.808948][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 373.808954][ T32] task:kworker/0:6 state:D stack:21144 pid:5797 tgid:5797 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 373.808984][ T32] Workqueue: events_freezable mmc_rescan [ 373.808995][ T32] Call Trace: [ 373.808999][ T32] [ 373.809005][ T32] __schedule+0x125e/0x6990 [ 373.809026][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 373.809047][ T32] ? __pfx___schedule+0x10/0x10 [ 373.809062][ T32] ? find_held_lock+0x2b/0x80 [ 373.809077][ T32] ? schedule+0x225/0x2c0 [ 373.809096][ T32] schedule+0xdd/0x2c0 [ 373.809112][ T32] schedule_timeout+0x1b2/0x280 [ 373.809126][ T32] ? __pfx_schedule_timeout+0x10/0x10 [ 373.882853][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 373.882882][ T32] __wait_for_common+0x2e6/0x500 [ 373.882901][ T32] ? __pfx_schedule_timeout+0x10/0x10 [ 373.882919][ T32] ? __pfx___wait_for_common+0x10/0x10 [ 373.882937][ T32] ? led_trigger_write+0x2b0/0x300 [ 373.882960][ T32] mmc_wait_for_req_done+0xcd/0x3d0 [ 373.882982][ T32] mmc_wait_for_req+0x207/0x2c0 [ 373.883000][ T32] mmc_wait_for_cmd+0x154/0x200 [ 373.883017][ T32] ? __pfx_mmc_wait_for_cmd+0x10/0x10 [ 373.883043][ T32] ? __pfx_mmc_wait_done+0x10/0x10 [ 373.883062][ T32] ? rpm_resume+0x7eb/0x1320 [ 373.883081][ T32] mmc_io_rw_direct_host+0x126/0x330 [ 373.883099][ T32] ? __pfx_mmc_io_rw_direct_host+0x10/0x10 [ 373.883121][ T32] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 373.883137][ T32] ? __pm_runtime_resume+0xc3/0x170 [ 373.883151][ T32] ? __mmc_claim_host+0x2dd/0x5f0 [ 373.884538][ T32] sdio_reset+0x92/0x240 [ 373.884559][ T32] ? __pfx_sdio_reset+0x10/0x10 [ 373.884575][ T32] ? __pfx_mmc_wait_done+0x10/0x10 [ 373.884591][ T32] ? __lock_acquire+0xe8b/0x1f40 [ 373.884604][ T32] ? __pfx_default_wake_function+0x10/0x10 [ 373.884633][ T32] ? mmc_attach_sd_uhs2+0x2d0/0x590 [ 373.884648][ T32] ? reacquire_held_locks+0xdd/0x1f0 [ 373.884663][ T32] mmc_rescan+0xba9/0x11c0 [ 373.884682][ T32] process_one_work+0xac7/0x1b10 [ 373.884706][ T32] ? __pfx_process_one_work+0x10/0x10 [ 373.884735][ T32] ? lock_acquire+0x1d1/0x380 [ 373.884752][ T32] ? __pfx_mmc_rescan+0x10/0x10 [ 373.884765][ T32] worker_thread+0x5ef/0xe50 [ 373.884786][ T32] ? __pfx_worker_thread+0x10/0x10 [ 373.884803][ T32] ? kthread+0x13a/0x450 [ 373.884828][ T32] ? __pfx_worker_thread+0x10/0x10 [ 373.884844][ T32] kthread+0x373/0x450 [ 373.884858][ T32] ? __pfx_kthread+0x10/0x10 [ 373.884874][ T32] ret_from_fork+0x730/0xd60 [ 373.884890][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 373.884905][ T32] ? __switch_to+0x800/0x10e0 [ 373.884933][ T32] ? __pfx_kthread+0x10/0x10 [ 373.884949][ T32] ret_from_fork_asm+0x1a/0x30 [ 373.884972][ T32] [ 373.885030][ T32] [ 373.885030][ T32] Showing all locks held in the system: [ 373.885040][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 373.885049][ T32] #0: ffffffff8fdeb1e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 373.885128][ T32] locks held by getty/5355: 2, on CPU#0: [ 373.885137][ T32] #0: ffff88802d0e90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 373.885171][ T32] #1: ffffc900032432e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1540 [ 373.885219][ T32] locks held by kworker/0:5/5745: 5, on CPU#0: [ 373.885228][ T32] #0: ffff888024eab940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 373.885260][ T32] #1: ffffc9000478fd08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 373.885303][ T32] #2: ffff88802bb961d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420 [ 373.885334][ T32] #3: ffff888033b2d1d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0x10a/0x9a0 [ 373.885362][ T32] #4: ffff88802b4331a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620 [ 373.885402][ T32] locks held by kworker/0:6/5797: 2, on CPU#0: [ 373.885411][ T32] #0: ffff88801d05e140 ((wq_completion)events_freezable){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 373.885447][ T32] #1: ffffc900047cfd08 ((work_completion)(&(&host->detect)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 373.885495][ T32] locks held by pr/ttyS0/13513: 1, last CPU#0: [ 373.885503][ T32] #0: ffffffff8fdd74d8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x49/0x60 [ 373.885533][ T32] locks held by syz.1.3251/14587: 1, last CPU#0: [ 373.885541][ T32] #0: ffffffff9ce289e0 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8ad/0x11e0 [ 373.885585][ T32] locks held by syz.1.3251/14589: 1, on CPU#0: [ 373.885594][ T32] #0: ffffffff9ce289e0 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8ad/0x11e0 [ 373.885625][ T32] locks held by syz.4.3257/14598: 2, last CPU#0: [ 373.885633][ T32] #0: ffff88801d082800 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x124/0xa00 [ 374.027192][ T32] #1: ffffffff8fdeb1e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 374.027223][ T32] locks held by syz.5.3256/14601: 1, last CPU#0: [ 374.027232][ T32] #0: ffff88801d083440 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x22c/0xa00 [ 374.027263][ T32] [ 374.027266][ T32] ============================================= [ 374.027266][ T32] [ 374.027285][ T32] NMI backtrace for cpu 0 [ 374.027295][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 374.027311][ T32] Tainted: [L]=SOFTLOCKUP [ 374.027315][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 374.027323][ T32] Call Trace: [ 374.027328][ T32] [ 374.027334][ T32] dump_stack_lvl+0x100/0x190 [ 374.027353][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 374.027380][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 374.027395][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 374.027414][ T32] sys_info+0x141/0x190 [ 374.027427][ T32] watchdog+0xcb1/0x1030 [ 374.027460][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 374.027477][ T32] ? __pfx_watchdog+0x10/0x10 [ 374.027491][ T32] ? __kthread_parkme+0x18f/0x230 [ 374.027506][ T32] ? kthread+0x13a/0x450 [ 374.027519][ T32] ? __pfx_watchdog+0x10/0x10 [ 374.027531][ T32] kthread+0x373/0x450 [ 374.027544][ T32] ? __pfx_kthread+0x10/0x10 [ 374.027560][ T32] ret_from_fork+0x730/0xd60 [ 374.027575][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 374.027590][ T32] ? __switch_to+0x800/0x10e0 [ 374.027607][ T32] ? __pfx_kthread+0x10/0x10 [ 374.027622][ T32] ret_from_fork_asm+0x1a/0x30 [ 374.027642][ T32] [ 374.027656][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 374.845086][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 374.855746][ T32] Tainted: [L]=SOFTLOCKUP [ 374.860039][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 374.870062][ T32] Call Trace: [ 374.873316][ T32] [ 374.876234][ T32] dump_stack_lvl+0x100/0x190 [ 374.880892][ T32] vpanic+0x553/0x970 [ 374.884857][ T32] ? __pfx_vpanic+0x10/0x10 [ 374.889333][ T32] panic+0xd1/0xe0 [ 374.893024][ T32] ? __pfx_panic+0x10/0x10 [ 374.897408][ T32] ? nmi_cpu_backtrace+0x79/0x200 [ 374.902409][ T32] ? nmi_trigger_cpumask_backtrace+0x206/0x2a0 [ 374.908533][ T32] ? watchdog.cold+0x1ec/0x234 [ 374.913269][ T32] watchdog.cold+0x1fd/0x234 [ 374.917833][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 374.923612][ T32] ? __pfx_watchdog+0x10/0x10 [ 374.928260][ T32] ? __kthread_parkme+0x18f/0x230 [ 374.933257][ T32] ? kthread+0x13a/0x450 [ 374.937469][ T32] ? __pfx_watchdog+0x10/0x10 [ 374.942114][ T32] kthread+0x373/0x450 [ 374.946154][ T32] ? __pfx_kthread+0x10/0x10 [ 374.950717][ T32] ret_from_fork+0x730/0xd60 [ 374.955279][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 374.960368][ T32] ? __switch_to+0x800/0x10e0 [ 374.965034][ T32] ? __pfx_kthread+0x10/0x10 [ 374.969597][ T32] ret_from_fork_asm+0x1a/0x30 [ 374.974341][ T32] [ 374.977385][ T32] Kernel Offset: disabled [ 374.981681][ T32] Rebooting in 86400 seconds..