last executing test programs: 3m46.828921459s ago: executing program 4 (id=2296): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x1, 0xc000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x1201}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0) 3m46.576243564s ago: executing program 4 (id=2303): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}}], 0x2, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xd4) r1 = dup2(r0, r0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000100)={'\x00', 0xfffe, 0x200000a, 0x1, 0x8}) 3m46.32269563s ago: executing program 4 (id=2305): r0 = timerfd_create(0x8, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000040)={0x3, 0x2b, 0x4000007, 0x10, 0x4, 0x100, 0x0, 0xba, 0x1}) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) timerfd_settime(r0, 0x3, &(0x7f00000001c0)={{}, {0x0, 0x989680}}, 0x0) 3m45.965332813s ago: executing program 4 (id=2309): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200) 3m45.860415906s ago: executing program 4 (id=2311): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/kmsg\x00', 0x0, 0x0) readv(r1, &(0x7f0000000540)=[{&(0x7f0000000280)=""/40, 0x28}, {&(0x7f00000005c0)=""/111, 0x6f}], 0x2) mount$9p_fd(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000380), 0x4801, &(0x7f0000000800)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 3m45.395605467s ago: executing program 4 (id=2319): syz_open_dev$mtd(&(0x7f0000000080), 0x0, 0x80) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x3000, 0x3, 0x3}, 0x18, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) landlock_restrict_self(r1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) 3m45.211800562s ago: executing program 32 (id=2319): syz_open_dev$mtd(&(0x7f0000000080), 0x0, 0x80) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x3000, 0x3, 0x3}, 0x18, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) landlock_restrict_self(r1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) 2m32.97183069s ago: executing program 1 (id=3075): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000440)={0x2, 0x0, [{0x1, 0x0, 0x0, 0xfffffffd, 0x0, 0x1e, 0xf4be}, {0x40000001, 0x0, 0x0, 0x31237648, 0x200, 0x9}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000440)={0x2, 0x0, [{0x1, 0x40000000, 0x5, 0x2, 0x0, 0x20}, {0x40000001, 0x0, 0x4, 0x31237646, 0x0, 0x6}]}) 2m32.512615368s ago: executing program 1 (id=3081): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002000000ac1414aa"], 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) 2m32.444831814s ago: executing program 1 (id=3082): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) socket$kcm(0x11, 0xa, 0x300) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500102c"], 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 2m32.068720095s ago: executing program 1 (id=3087): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10454ca, 0x0) 2m31.868980512s ago: executing program 1 (id=3091): syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x1, 0xf3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@deltfilter={0xe, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m30.919381087s ago: executing program 1 (id=3097): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ef) lsetxattr$security_capability(&(0x7f0000000340)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000740)=@v3={0x3000000, [{0x101, 0x3}, {0x5, 0x1ff}]}, 0x18, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) truncate(&(0x7f0000000140)='./file0/file1\x00', 0xe2) 2m30.580068233s ago: executing program 33 (id=3097): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ef) lsetxattr$security_capability(&(0x7f0000000340)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000740)=@v3={0x3000000, [{0x101, 0x3}, {0x5, 0x1ff}]}, 0x18, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) truncate(&(0x7f0000000140)='./file0/file1\x00', 0xe2) 1m10.839518772s ago: executing program 2 (id=3870): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0x2, 0x8, 0xd0eb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) 1m10.784674147s ago: executing program 2 (id=3872): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x120, &(0x7f00000005c0)=ANY=[], 0x0) 1m10.40096326s ago: executing program 2 (id=3876): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x7, 0x8000060000000001}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x6, 0x0, 0x0) 1m10.120524369s ago: executing program 2 (id=3880): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x1, 0x3d, &(0x7f0000000680)=ANY=[@ANYBLOB="1201d08ea8b9a3082e0c200729d40102030109022b00010804400309046d00027854990109050308000200050907058e3397"], &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/ttyUSB0\x00', 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m8.600741396s ago: executing program 2 (id=3898): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1f7) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000001600)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10, 0x1, 0x80000ff}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) io_uring_enter(r0, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 1m8.466093431s ago: executing program 2 (id=3900): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000240)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x2) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 53.220071019s ago: executing program 34 (id=3900): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000240)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x2) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 35.153352621s ago: executing program 0 (id=4156): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 34.900360549s ago: executing program 0 (id=4157): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000100)="eb", 0x1}], 0x1, 0x0) 33.747787008s ago: executing program 0 (id=4164): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x90, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x10, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x6, 0x20000000, 0x2}, 0x4}}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}}, 0x0) 33.171253427s ago: executing program 0 (id=4169): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x14) 32.720073228s ago: executing program 0 (id=4171): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0x7, 0x0, @val=@tcx={@void, @value=r0}}, 0x1c) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000380)=r2, 0x4) bpf$LINK_DETACH(0x22, &(0x7f00000002c0)=r3, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r3, 0x0, 0x0}, 0x10) 32.21079628s ago: executing program 0 (id=4184): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000e, 0x11, r0, 0x100000000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) 31.562731515s ago: executing program 35 (id=4184): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000e, 0x11, r0, 0x100000000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) 18.819909572s ago: executing program 5 (id=4270): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000080)={0x1, 0xd, 0x8563, 0x5}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24044040) 18.479800319s ago: executing program 5 (id=4273): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x0, @rand_addr=0x400}]}, &(0x7f0000000240)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)="0000000070000400", 0x8) 18.212339672s ago: executing program 5 (id=4276): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') mknod$loop(&(0x7f0000001b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x16) renameat2(0xffffffffffffff9c, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) 17.9998141s ago: executing program 5 (id=4277): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x80000000}) 17.612749632s ago: executing program 5 (id=4293): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) writev(r1, &(0x7f00000016c0)=[{&(0x7f0000000000)="0e899b5d7e", 0x5}], 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 11.214173457s ago: executing program 5 (id=4331): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x20, 0x0, 0x7, 0x401, 0x0, 0x0, {0x2}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x1, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x50}}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2f0, 0xffffffff, 0xa8, 0xa8, 0x0, 0xffffffff, 0xffffffff, 0x258, 0x258, 0x258, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast1, @empty, 0xffffff00, 0xff, 'veth0_virt_wifi\x00', 'vlan0\x00', {0xff}, {}, 0x1, 0x2, 0x20}, 0x0, 0x70, 0xa8, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x3}, {0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'team_slave_0\x00', 'team0\x00', {0xff}, {}, 0x62, 0x3, 0xc}, 0x287, 0xb8, 0x118, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz0\x00', 0x3}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x0, 0x3, 0x2, 0x0, 0x4], 0x1, 0x3}, {0x4, [0x6, 0x5, 0x6, 0x0, 0x5], 0x1, 0x2}}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x350) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, &(0x7f0000000500)="1234", 0x4, 0x0, &(0x7f0000000580)={0x2, 0x1234, @loopback}, 0x10) 10.702044521s ago: executing program 36 (id=4331): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x20, 0x0, 0x7, 0x401, 0x0, 0x0, {0x2}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x1, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x50}}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2f0, 0xffffffff, 0xa8, 0xa8, 0x0, 0xffffffff, 0xffffffff, 0x258, 0x258, 0x258, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast1, @empty, 0xffffff00, 0xff, 'veth0_virt_wifi\x00', 'vlan0\x00', {0xff}, {}, 0x1, 0x2, 0x20}, 0x0, 0x70, 0xa8, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x3}, {0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'team_slave_0\x00', 'team0\x00', {0xff}, {}, 0x62, 0x3, 0xc}, 0x287, 0xb8, 0x118, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz0\x00', 0x3}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x0, 0x3, 0x2, 0x0, 0x4], 0x1, 0x3}, {0x4, [0x6, 0x5, 0x6, 0x0, 0x5], 0x1, 0x2}}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x350) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, &(0x7f0000000500)="1234", 0x4, 0x0, &(0x7f0000000580)={0x2, 0x1234, @loopback}, 0x10) 8.330359994s ago: executing program 3 (id=4352): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg(r0, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg(r0, &(0x7f00000007c0)={0x1, {&(0x7f0000000080)=""/158, 0x9e, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg(r0, &(0x7f0000000a00)={0x1, {&(0x7f0000000ac0)=""/23, 0x17, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000006c0)={0x2, 0x0, {&(0x7f0000000200)=""/66, 0x42, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000280)=""/184, 0x2562bac182d8b35a, 0x0, 0x2, 0x3}}, 0x48) 8.113155493s ago: executing program 3 (id=4354): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/vhci\x00', 0x2, 0x0) r1 = syz_io_uring_setup(0xf01, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x2, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) write(r0, &(0x7f0000000180)="ff00", 0x2) 7.51987549s ago: executing program 8 (id=4358): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x18, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="0f0864410f06b9c60900000f32f3460f7059002c66b82d000f00d866deed46dcf2c4c27d24fef0831e1ec744240093000000c744240200300000ff2c24", 0x3d}], 0xaaaaced, 0x17, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.070241312s ago: executing program 8 (id=4360): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xc0a40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@svm={0x100, 0x1, 0xfffffdf1, {0xb37f3c13f0288a18}, {"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"}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.463709135s ago: executing program 7 (id=4363): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1900000004000000080000000a"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 6.29605781s ago: executing program 7 (id=4364): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x8042, 0x85) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000300000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x800, 0x0) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000002300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x130, 0x0, 0x6, {0x6, 0x6, 0x0, '\x00', {0x6fff, 0xad7, 0xf, 0x20000005, 0x0, r2, 0x8000, '\x00', 0xff7fffffffffffff, 0x7fffffff, 0xdd, 0x5, {0x73c0, 0x660}, {0x8, 0x29}, {0x209, 0x200007b1}, {0x5, 0x5710}, 0x8006, 0x6, 0x7, 0x80000000}}}}) write$FUSE_INIT(r0, &(0x7f0000001200)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x120a1101, 0x6, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8}}, 0x50) 6.25036082s ago: executing program 6 (id=4365): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r1 = creat(&(0x7f0000000040)='./file1\x00', 0x108) r2 = fanotify_init(0xf00, 0x1) fanotify_mark(r2, 0x105, 0x40009975, r1, 0x0) fallocate(r0, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) 1.522328946s ago: executing program 9 (id=4333): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000001600)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000280)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000001540)={0x0, 0x1, 0x0, 0xfffffffc, 0x255}, &(0x7f00000012c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x2, 0x0, 0x1, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc4b7, 0x0, 0x3, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff7, 0xe0f, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000006d80)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x3, @mcast1, 0x10000}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@flowinfo={{0x11, 0x29, 0x37, 0x8}}], 0x18}}], 0x1, 0x0) 1.520432064s ago: executing program 8 (id=4375): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) mprotect(&(0x7f000059a000/0x1000)=nil, 0x1000, 0xc) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 1.515722898s ago: executing program 6 (id=4376): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newtclass={0x68, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x1000, 0x1000}}]}}, @TCA_RATE={0x6, 0x5, {0xfe, 0x1}}]}, 0x68}}, 0x0) 1.513037302s ago: executing program 7 (id=4377): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000001, 0x5d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000100)={0x0, 0x21, "8489dc125b7b05bd4ae754d74ff7d23c7db3f64de0b2eb27b891b1d031c59df222"}, &(0x7f0000000140)=0x29) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b80, &(0x7f0000000040)={0x0, 0x8970, 0x1f280, 0x0, 0x8000399}) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa"], 0x0) io_uring_enter(r0, 0x8ae, 0xfbb9, 0x1f, 0x0, 0x0) 1.511929078s ago: executing program 3 (id=4378): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setresuid(0x0, 0xee01, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) rt_tgsigqueueinfo(r0, r0, 0x9, &(0x7f0000000600)={0x31, 0x3, 0x80000000}) 786.42124ms ago: executing program 9 (id=4366): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(r0, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002f00)=""/130, 0x82}], 0x1}, 0xfffffffd}], 0x1, 0x2120, 0x0) 780.808771ms ago: executing program 6 (id=4380): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x3}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)={0x30, r3, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x80000000, 0x8, 0xffffffff, 0x4}}}}, 0x30}, 0x1, 0x0, 0x0, 0x200048c3}, 0x20000000) 779.590385ms ago: executing program 7 (id=4367): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0xfff8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0xfff, 0x7f, 0x1, 0x5}, 0xffffff80, 0x1, 0x5af3, 0x6, 0x8, 0x16, 0x2, 0xe, 0x3, 0x331799a0, {0xd, 0xe9, 0x40, 0x3, 0x2, 0x5}}}}]}, 0x78}}, 0x4c050) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001400)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff3, 0xc}, {0x0, 0xfff3}, {0x9, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x9, 0x9}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041006}, 0x0) 779.459176ms ago: executing program 3 (id=4368): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xd, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x40000) 572.689656ms ago: executing program 6 (id=4369): creat(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lstat(&(0x7f0000008a80)='./file0\x00', 0x0) syz_fuse_handle_req(r0, &(0x7f0000002100)="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", 0x2000, &(0x7f0000008d80)={&(0x7f0000004100)={0x50, 0x0, 0x8, {0x7, 0x2d, 0xf, 0x7, 0xfff, 0x2, 0x8, 0xc, 0x0, 0x0, 0x40, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34808521, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4001f7e}}, 0x50) 570.575475ms ago: executing program 7 (id=4370): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x18, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="0f0864410f06b9c60900000f32f3460f7059002c66b82d000f00d866deed46dcf2c4c27d24fef0831e1ec744240093000000c744240200300000ff2c24", 0x3d}], 0xaaaaced, 0x17, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 468.08433ms ago: executing program 3 (id=4371): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r1, r1, r1}, 0x0, 0x0, 0x0) 458.045654ms ago: executing program 8 (id=4372): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_enter(0xffffffffffffffff, 0x8af, 0xc0b8, 0x0, &(0x7f0000000100)={[0x6]}, 0x8) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x7) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x201, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 369.322717ms ago: executing program 6 (id=4373): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x10, 0x0, 0x25dfdbfb, {{@in6=@loopback, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x7, 0xfffffffffffffffd, 0xffffffffffffffff}, {0xfffffffffffffffe, 0x0, 0x2}, 0x6, 0x6e6bc8, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100"], 0xb8}}, 0x20004000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 295.552064ms ago: executing program 8 (id=4374): syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') fchdir(r1) readlink(&(0x7f0000000000)='./file1\x00', &(0x7f0000002140)=""/143, 0x8f) 17.705641ms ago: executing program 8 (id=4379): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000400)="cd", 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x6}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000340), 0x8) 17.502374ms ago: executing program 3 (id=4381): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x80) prlimit64(0x0, 0x7, &(0x7f00000001c0)={0x8, 0xf34}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) 5.314393ms ago: executing program 6 (id=4382): r0 = socket$kcm(0xa, 0x1, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=r0], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r1}) r3 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8936, &(0x7f0000000000)={r3}) 0s ago: executing program 7 (id=4383): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001980)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x7156c2f38e9f5340, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) kernel console output (not intermixed with test programs): syz.2.3664" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd90ed9e159 code=0x0 [ 376.169792][T15471] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 376.408103][ T5695] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 376.563064][ T5695] usb 7-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 376.565049][ T5695] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.565075][ T5695] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 376.565108][ T5695] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.611603][ T5695] idmouse 7-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 377.119603][ T5616] Bluetooth: hci0: command 0x0c1a tx timeout [ 377.119850][T15528] Bluetooth: hci0: Opcode 0x0c20 failed: -110 [ 377.128995][ T5616] Bluetooth: hci6: command 0x1003 tx timeout [ 377.147499][ T5610] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 377.213745][T15576] ip6gre1: entered promiscuous mode [ 377.213766][T15576] ip6gre1: entered allmulticast mode [ 377.227913][T15576] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 377.863381][T14448] IPVS: starting estimator thread 0... [ 377.949883][T15592] IPVS: using max 40 ests per chain, 96000 per kthread [ 378.624015][T15607] syzkaller1: entered promiscuous mode [ 378.624037][T15607] syzkaller1: entered allmulticast mode [ 378.680176][ T189] usb 7-1: USB disconnect, device number 6 [ 378.682949][ T189] idmouse 7-1:1.0: disconnected [ 378.860083][T15615] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 379.310909][T15641] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 379.378036][T15644] @0Ù: renamed from bond_slave_1 (while UP) [ 379.537127][T15646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3703'. [ 379.587273][T15646] hsr_slave_1 (unregistering): left promiscuous mode [ 379.704425][T15651] gadgetfs: bound to dummy_udc driver [ 379.827616][T15656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3707'. [ 379.827650][T15656] netlink: 'syz.2.3707': attribute type 30 has an invalid length. [ 379.827664][T15656] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3707'. [ 379.828378][T15656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3707'. [ 379.828399][T15656] netlink: 'syz.2.3707': attribute type 30 has an invalid length. [ 379.828411][T15656] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3707'. [ 379.949806][T15661] netlink: 26 bytes leftover after parsing attributes in process `syz.5.3709'. [ 380.178189][ T189] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 380.327417][ T189] usb 3-1: Using ep0 maxpacket: 8 [ 380.328160][ T189] usb 3-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 380.329048][ T189] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 380.329076][ T189] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 380.329108][ T189] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.340281][ T189] kobil_sct 3-1:1.0: KOBIL USB smart card terminal converter detected [ 380.347758][ T189] usb 3-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 381.066516][ T189] usb 3-1: USB disconnect, device number 42 [ 381.080245][ T189] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 381.080723][ T189] kobil_sct 3-1:1.0: device disconnected [ 381.662051][T15690] FAULT_INJECTION: forcing a failure. [ 381.662051][T15690] name failslab, interval 1, probability 0, space 0, times 0 [ 381.662086][T15690] CPU: 0 UID: 0 PID: 15690 Comm: syz.5.3721 Tainted: G L syzkaller #0 PREEMPT(full) [ 381.662112][T15690] Tainted: [L]=SOFTLOCKUP [ 381.662120][T15690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 381.662132][T15690] Call Trace: [ 381.662139][T15690] [ 381.662147][T15690] dump_stack_lvl+0x100/0x190 [ 381.662183][T15690] should_fail_ex.cold+0x5/0xa [ 381.662212][T15690] should_failslab+0xc2/0x120 [ 381.662244][T15690] kmem_cache_alloc_noprof+0x92/0x6a0 [ 381.662266][T15690] ? __mpol_dup+0x74/0x390 [ 381.662298][T15690] __mpol_dup+0x74/0x390 [ 381.662327][T15690] ? __pfx___mpol_dup+0x10/0x10 [ 381.662363][T15690] __do_sys_set_mempolicy_home_node+0x324/0x710 [ 381.662402][T15690] ? __pfx___do_sys_set_mempolicy_home_node+0x10/0x10 [ 381.662434][T15690] ? __x64_sys_futex+0x34f/0x4d0 [ 381.662459][T15690] ? __x64_sys_futex+0x358/0x4d0 [ 381.662499][T15690] do_syscall_64+0x123/0x790 [ 381.662528][T15690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.662548][T15690] RIP: 0033:0x7f629e39e159 [ 381.662565][T15690] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 381.662584][T15690] RSP: 002b:00007f629f1a5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001c2 [ 381.662604][T15690] RAX: ffffffffffffffda RBX: 00007f629e625fa0 RCX: 00007f629e39e159 [ 381.662617][T15690] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000200000ffa000 [ 381.662631][T15690] RBP: 00007f629e43503b R08: 0000000000000000 R09: 0000000000000000 [ 381.662643][T15690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 381.662655][T15690] R13: 00007f629e626038 R14: 00007f629e625fa0 R15: 00007ffe552ca508 [ 381.662683][T15690] [ 381.897386][ T5710] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 381.906754][T15619] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 382.070396][ T5710] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 382.073579][ T5710] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 382.073626][ T5710] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.088837][ T5710] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 382.088862][ T5710] usb 3-1: Manufacturer: syz [ 382.121964][ T5710] usb 3-1: config 0 descriptor?? [ 382.221635][ T5710] rc_core: IR keymap rc-hauppauge not found [ 382.221665][ T5710] Registered IR keymap rc-empty [ 382.234412][ T5710] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 382.251217][ T5710] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input37 [ 382.560661][ C1] igorplugusb 3-1:0.0: receive overflow, at least 3 lost [ 382.563734][T15707] rc rc0: two consecutive events of type space [ 382.763757][ T9] usb 3-1: USB disconnect, device number 43 [ 382.867495][ T189] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 383.017856][ T189] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 383.018720][ T189] usb 7-1: config 0 has an invalid interface number: 50 but max is 0 [ 383.018742][ T189] usb 7-1: config 0 has no interface number 0 [ 383.018776][ T189] usb 7-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 383.020655][ T189] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.020677][ T189] usb 7-1: Product: syz [ 383.020691][ T189] usb 7-1: Manufacturer: syz [ 383.020705][ T189] usb 7-1: SerialNumber: syz [ 383.023860][ T189] usb 7-1: config 0 descriptor?? [ 383.039779][ T189] yurex 7-1:0.50: USB YUREX device now attached to Yurex #0 [ 383.246784][T15712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.247681][T15712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.254639][ T189] usb 7-1: USB disconnect, device number 7 [ 383.262401][ T189] yurex 7-1:0.50: USB YUREX #0 now disconnected [ 383.756281][T15730] tmpfs: Too small a size for current use [ 384.071441][T15721] FAULT_INJECTION: forcing a failure. [ 384.071441][T15721] name failslab, interval 1, probability 0, space 0, times 0 [ 384.071481][T15721] CPU: 1 UID: 0 PID: 15721 Comm: syz.3.3731 Tainted: G L syzkaller #0 PREEMPT(full) [ 384.071510][T15721] Tainted: [L]=SOFTLOCKUP [ 384.071518][T15721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 384.071531][T15721] Call Trace: [ 384.071539][T15721] [ 384.071547][T15721] dump_stack_lvl+0x100/0x190 [ 384.071580][T15721] should_fail_ex.cold+0x5/0xa [ 384.071608][T15721] should_failslab+0xc2/0x120 [ 384.071634][T15721] kmem_cache_alloc_noprof+0x92/0x6a0 [ 384.071656][T15721] ? current_cpuset_is_being_rebound+0xf6/0x370 [ 384.071684][T15721] ? sp_alloc+0x27/0x160 [ 384.071722][T15721] sp_alloc+0x27/0x160 [ 384.071749][T15721] ? __pfx_shmem_set_policy+0x10/0x10 [ 384.071770][T15721] mpol_set_shared_policy+0xa5/0x850 [ 384.071806][T15721] ? __pfx_shmem_set_policy+0x10/0x10 [ 384.071827][T15721] mbind_range+0x339/0x550 [ 384.071859][T15721] do_mbind+0x7dc/0xfd0 [ 384.071894][T15721] ? __pfx_do_mbind+0x10/0x10 [ 384.071922][T15721] ? find_held_lock+0x2b/0x80 [ 384.071950][T15721] ? ksys_write+0x190/0x250 [ 384.071981][T15721] ? __pfx_get_nodes+0x10/0x10 [ 384.072012][T15721] kernel_mbind+0x1b7/0x200 [ 384.072042][T15721] ? __pfx_kernel_mbind+0x10/0x10 [ 384.072077][T15721] do_syscall_64+0x123/0x790 [ 384.072106][T15721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.072128][T15721] RIP: 0033:0x7f2ff6d9e159 [ 384.072145][T15721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 384.072163][T15721] RSP: 002b:00007f2ff7cce028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 384.072183][T15721] RAX: ffffffffffffffda RBX: 00007f2ff7025fa0 RCX: 00007f2ff6d9e159 [ 384.072196][T15721] RDX: 0000000000000001 RSI: 0000000000600000 RDI: 0000200000000000 [ 384.072208][T15721] RBP: 00007f2ff6e3503b R08: 0000000000000000 R09: 0000000000000002 [ 384.072219][T15721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 384.072231][T15721] R13: 00007f2ff7026038 R14: 00007f2ff7025fa0 R15: 00007ffffbb8c4d8 [ 384.072258][T15721] [ 384.315736][T15735] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 384.444972][ T189] lpc_ich 0000:00:00.0: I/O space for ACPI uninitialized [ 384.445007][ T189] lpc_ich 0000:00:00.0: I/O space for ACPI uninitialized [ 384.445030][ T189] lpc_ich 0000:00:00.0: I/O space for GPIO uninitialized [ 384.445042][ T189] lpc_ich 0000:00:00.0: No MFD cells added [ 384.505513][ T189] snd_hda_intel 0000:00:00.0: Unknown PCI class/subclass/prog-if information (0x060000) found, selecting HDAudio legacy driver [ 384.505540][ T189] snd_hda_intel 0000:00:00.0: Too small PCI BAR0 [ 384.505769][T15735] snd_hda_intel 0000:00:00.0: probe with driver snd_hda_intel failed with error -22 [ 384.779775][T15737] Bluetooth: MGMT ver 1.23 [ 384.981445][T15742] netlink: 'syz.3.3742': attribute type 4 has an invalid length. [ 385.471583][T15751] ptrace attach of ""[15754] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[15751] [ 386.350437][ T189] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 386.499476][ T189] usb 4-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 386.503198][ T189] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.503231][ T189] usb 4-1: config 0 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 386.503255][ T189] usb 4-1: config 0 interface 0 has no altsetting 0 [ 386.503285][ T189] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.511397][ T189] usb 4-1: config 0 descriptor?? [ 386.964350][ T189] aureal 0003:0755:2626.0023: collection stack underflow [ 386.964379][ T189] aureal 0003:0755:2626.0023: item 0 0 0 12 parsing failed [ 386.964978][ T189] aureal 0003:0755:2626.0023: probe with driver aureal failed with error -22 [ 387.211705][ T5731] usb 4-1: USB disconnect, device number 38 [ 387.387365][ T30] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 387.524178][T15800] netlink: 'syz.5.3765': attribute type 10 has an invalid length. [ 387.533568][T15800] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.539785][T15800] bond0: (slave team0): Enslaving as an active interface with an up link [ 387.567373][ T30] usb 3-1: Using ep0 maxpacket: 8 [ 387.568092][ T30] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 387.568944][ T30] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 387.568985][ T30] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 387.569011][ T30] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 387.569035][ T30] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 387.569059][ T30] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 387.569081][ T30] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 387.569116][ T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.783087][ T30] usb 3-1: usb_control_msg returned -32 [ 387.783127][ T30] usbtmc 3-1:16.0: can't read capabilities [ 388.137554][ T30] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 388.161479][T15822] usbtmc 3-1:16.0: send_request_dev_dep_msg_in returned -71 [ 388.161899][T15822] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 388.164339][ T5709] usb 3-1: USB disconnect, device number 44 [ 388.277401][ T5710] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 388.298130][ T30] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 388.299102][ T30] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.299129][ T30] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 388.299149][ T30] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 388.299181][ T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.302541][ T30] usb 7-1: config 0 descriptor?? [ 388.447413][ T5710] usb 4-1: Using ep0 maxpacket: 16 [ 388.449783][ T5710] usb 4-1: unable to get BOS descriptor or descriptor too short [ 388.449823][ T5710] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 388.450919][ T5710] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 388.452947][ T5710] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.452987][ T5710] usb 4-1: Product: syz [ 388.453001][ T5710] usb 4-1: Manufacturer: syz [ 388.453014][ T5710] usb 4-1: SerialNumber: syz [ 388.679970][ T5710] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 388.681461][ T5710] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 388.734386][ T30] input: HID 047f:ffff as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:047F:FFFF.0024/input/input38 [ 388.769443][ T30] plantronics 0003:047F:FFFF.0024: input,hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 388.976599][ T30] usb 7-1: USB disconnect, device number 8 [ 389.055049][T15834] fido_id[15834]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 389.077109][ T5710] usb 4-1: 2:1 : invalid Cluster Descriptor size [ 389.367090][ T30] usb 4-1: USB disconnect, device number 39 [ 389.657385][ T9] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 389.827879][ T9] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 389.837214][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.847539][ T9] usb 3-1: config 0 descriptor?? [ 389.851299][ T9] cp210x 3-1:0.0: cp210x converter detected [ 390.186096][ T31] audit: type=1326 audit(1788988620.527:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15866 comm="syz.0.3792" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e5ad9e159 code=0x7ffc0000 [ 390.186140][ T31] audit: type=1326 audit(1788988620.527:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15866 comm="syz.0.3792" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e5ad9e159 code=0x7ffc0000 [ 390.239523][ T31] audit: type=1326 audit(1788988620.587:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15866 comm="syz.0.3792" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e5ad9e159 code=0x7ffc0000 [ 390.239748][ T31] audit: type=1326 audit(1788988620.587:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15866 comm="syz.0.3792" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e5ad9e159 code=0x7ffc0000 [ 390.245348][ T31] audit: type=1326 audit(1788988620.587:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15866 comm="syz.0.3792" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f3e5ad9e159 code=0x7ffc0000 [ 390.293463][ T9] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 390.330319][ T31] audit: type=1326 audit(1788988620.677:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15866 comm="syz.0.3792" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3e5ad5e98e code=0x7ffc0000 [ 390.335490][ T31] audit: type=1326 audit(1788988620.677:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15866 comm="syz.0.3792" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3e5ad5e98e code=0x7ffc0000 [ 390.343947][ T31] audit: type=1326 audit(1788988620.687:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15866 comm="syz.0.3792" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3e5ad5e98e code=0x7ffc0000 [ 390.349583][ T31] audit: type=1326 audit(1788988620.697:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15866 comm="syz.0.3792" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3e5ad5e98e code=0x7ffc0000 [ 390.359427][ T31] audit: type=1326 audit(1788988620.707:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15866 comm="syz.0.3792" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3e5ad5e98e code=0x7ffc0000 [ 390.365536][ T9] usb 3-1: cp210x converter now attached to ttyUSB0 [ 390.511606][ T9] usb 3-1: USB disconnect, device number 45 [ 390.553843][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 390.587880][ T9] cp210x 3-1:0.0: device disconnected [ 391.086902][T15888] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3800'. [ 391.182024][T15887] 8021q: adding VLAN 0 to HW filter on device bond3 [ 391.182472][T15891] FAULT_INJECTION: forcing a failure. [ 391.182472][T15891] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 391.182505][T15891] CPU: 0 UID: 0 PID: 15891 Comm: syz.2.3801 Tainted: G L syzkaller #0 PREEMPT(full) [ 391.182531][T15891] Tainted: [L]=SOFTLOCKUP [ 391.182538][T15891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 391.182551][T15891] Call Trace: [ 391.182559][T15891] [ 391.182567][T15891] dump_stack_lvl+0x100/0x190 [ 391.182609][T15891] should_fail_ex.cold+0x5/0xa [ 391.182639][T15891] _copy_from_user+0x2e/0xd0 [ 391.182659][T15891] load_msg+0x19e/0x4a0 [ 391.182687][T15891] do_msgrcv+0x209/0x16f0 [ 391.182710][T15891] ? __pfx_do_msg_fill+0x10/0x10 [ 391.182736][T15891] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 391.182767][T15891] ? __pfx_do_msgrcv+0x10/0x10 [ 391.182793][T15891] ? __pfx___x64_sys_timer_create+0x10/0x10 [ 391.182821][T15891] ? xfd_validate_state+0x129/0x190 [ 391.182848][T15891] ? do_syscall_64+0x123/0x790 [ 391.182872][T15891] do_syscall_64+0x123/0x790 [ 391.182899][T15891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.182919][T15891] RIP: 0033:0x7fd90ed9e159 [ 391.182936][T15891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 391.182953][T15891] RSP: 002b:00007fd90fcc0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000046 [ 391.182973][T15891] RAX: ffffffffffffffda RBX: 00007fd90f025fa0 RCX: 00007fd90ed9e159 [ 391.182987][T15891] RDX: 00000000ffffff4e RSI: 0000200000002fc0 RDI: 0000000000000000 [ 391.182999][T15891] RBP: 00007fd90ee3503b R08: 0000000000004800 R09: 0000000000000000 [ 391.183011][T15891] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 391.183022][T15891] R13: 00007fd90f026038 R14: 00007fd90f025fa0 R15: 00007ffc98897fd8 [ 391.183048][T15891] [ 391.186882][T15887] bridge0: port 3(bond3) entered blocking state [ 391.222944][T15887] bridge0: port 3(bond3) entered disabled state [ 391.223097][T15887] bond3: entered allmulticast mode [ 391.359800][T15887] bond3: entered promiscuous mode [ 391.421210][T15887] bridge0: port 3(bond3) entered blocking state [ 391.421360][T15887] bridge0: port 3(bond3) entered forwarding state [ 392.169511][ T43] bridge0: port 3(bond3) entered disabled state [ 392.831756][ T5796] hid_parser_main: 485 callbacks suppressed [ 392.831779][ T5796] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 392.838327][ T5796] hid-generic 0000:0000:0000.0025: hidraw0: HID v0.00 Device [syz1] on syz0 [ 392.977390][ T9] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 393.130756][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 393.132292][ T9] usb 7-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 393.161915][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.161941][ T9] usb 7-1: Product: syz [ 393.161957][ T9] usb 7-1: Manufacturer: syz [ 393.161971][ T9] usb 7-1: SerialNumber: syz [ 393.192957][ T9] usb 7-1: config 0 descriptor?? [ 393.212589][ T9] radio-usb-si4713 7-1:0.0: Si4713 development board discovered: (10C4:8244) [ 393.507378][ T30] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 393.668020][ T30] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 393.668902][ T30] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 393.670737][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.670761][ T30] usb 4-1: Product: syz [ 393.670774][ T30] usb 4-1: Manufacturer: syz [ 393.670788][ T30] usb 4-1: SerialNumber: syz [ 393.674328][ T30] usb 4-1: config 0 descriptor?? [ 393.676864][ T30] usb 4-1: ucan: probing device on interface #0 [ 393.676885][ T30] usb 4-1: ucan: invalid EP count (0) [ 393.676899][ T30] usb 4-1: ucan: probe failed; try to update the device firmware [ 393.812967][ T9] radio-usb-si4713 7-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 393.813238][ T9] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 393.838493][ T9] usb 7-1: USB disconnect, device number 9 [ 394.030879][ T5709] usb 4-1: USB disconnect, device number 40 [ 395.486292][T16012] bonding: no command found in bonding_masters - use +ifname or -ifname [ 395.632683][T16015] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 395.687156][T16019] ip_tables: iptables: counters copy to user failed while replacing table [ 395.890009][T16024] FAULT_INJECTION: forcing a failure. [ 395.890009][T16024] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 395.890046][T16024] CPU: 1 UID: 0 PID: 16024 Comm: syz.2.3856 Tainted: G L syzkaller #0 PREEMPT(full) [ 395.890073][T16024] Tainted: [L]=SOFTLOCKUP [ 395.890080][T16024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 395.890092][T16024] Call Trace: [ 395.890099][T16024] [ 395.890108][T16024] dump_stack_lvl+0x100/0x190 [ 395.890143][T16024] should_fail_ex.cold+0x5/0xa [ 395.890166][T16024] ? prepare_alloc_pages+0x16d/0x5b0 [ 395.890194][T16024] should_fail_alloc_page+0xeb/0x140 [ 395.890222][T16024] prepare_alloc_pages+0x1f0/0x5b0 [ 395.890250][T16024] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 395.890285][T16024] ? __pfx___futex_wait+0x10/0x10 [ 395.890313][T16024] ? __pfx_try_to_wake_up+0x10/0x10 [ 395.890335][T16024] ? futex_hash+0x311/0x400 [ 395.890361][T16024] ? __pfx_futex_wake_mark+0x10/0x10 [ 395.890394][T16024] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 395.890424][T16024] ? __lock_acquire+0x5c0/0x1f40 [ 395.890455][T16024] ? lock_acquire+0x1d1/0x380 [ 395.890474][T16024] ? avc_has_perm_noaudit+0x56/0x3b0 [ 395.890509][T16024] ? avc_has_perm_noaudit+0x145/0x3b0 [ 395.890534][T16024] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 395.890565][T16024] ? policy_nodemask+0xed/0x4f0 [ 395.890592][T16024] alloc_pages_mpol+0x201/0x550 [ 395.890618][T16024] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 395.890645][T16024] ? rcu_is_watching+0x13/0xc0 [ 395.890676][T16024] ___kmalloc_large_node+0xe8/0x130 [ 395.890702][T16024] ? bpf_lsm_capable+0x9/0x10 [ 395.890735][T16024] __kmalloc_large_noprof+0x1c/0x70 [ 395.890760][T16024] ? bpf_lsm_locked_down+0x9/0x10 [ 395.890790][T16024] ksys_ioperm+0x3db/0x500 [ 395.890813][T16024] do_syscall_64+0x123/0x790 [ 395.890841][T16024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.890861][T16024] RIP: 0033:0x7fd90ed9e159 [ 395.890874][T16024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 395.890889][T16024] RSP: 002b:00007fd90fcc0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ad [ 395.890907][T16024] RAX: ffffffffffffffda RBX: 00007fd90f025fa0 RCX: 00007fd90ed9e159 [ 395.890919][T16024] RDX: 0000000000000005 RSI: 0000000000000008 RDI: 0000000000000004 [ 395.890930][T16024] RBP: 00007fd90ee3503b R08: 0000000000000000 R09: 0000000000000000 [ 395.890942][T16024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 395.890953][T16024] R13: 00007fd90f026038 R14: 00007fd90f025fa0 R15: 00007ffc98897fd8 [ 395.890978][T16024] [ 396.117455][ T5709] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 396.224170][T16035] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3862'. [ 396.230821][T16035] xfrm1: entered promiscuous mode [ 396.230841][T16035] xfrm1: entered allmulticast mode [ 396.231220][T16035] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3862'. [ 396.291088][ T5709] usb 4-1: Using ep0 maxpacket: 32 [ 396.292957][ T5709] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 396.293798][ T5709] usb 4-1: config 32 has an invalid interface number: 85 but max is 0 [ 396.293820][ T5709] usb 4-1: config 32 has no interface number 0 [ 396.293851][ T5709] usb 4-1: config 32 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 396.293876][ T5709] usb 4-1: config 32 interface 85 has no altsetting 0 [ 396.295544][ T5709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.295563][ T5709] usb 4-1: Product: syz [ 396.295576][ T5709] usb 4-1: Manufacturer: syz [ 396.295589][ T5709] usb 4-1: SerialNumber: syz [ 396.417693][ T30] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 396.580417][ T30] usb 7-1: New USB device found, idVendor=0079, idProduct=1803, bcdDevice= 0.40 [ 396.583149][ T30] usb 7-1: config 1 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.583177][ T30] usb 7-1: config 1 interface 0 altsetting 15 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.583198][ T30] usb 7-1: config 1 interface 0 has no altsetting 0 [ 396.585777][ T30] usb 7-1: string descriptor 0 read error: -22 [ 396.585874][ T30] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.890444][T16051] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 397.070427][ T30] hid_mf 0003:0079:1803.0026: unknown main item tag 0x0 [ 397.070460][ T30] hid_mf 0003:0079:1803.0026: unknown main item tag 0x0 [ 397.070507][ T30] hid_mf 0003:0079:1803.0026: unknown main item tag 0x0 [ 397.070534][ T30] hid_mf 0003:0079:1803.0026: unknown main item tag 0x0 [ 397.070555][ T30] hid_mf 0003:0079:1803.0026: unknown main item tag 0x0 [ 397.070576][ T30] hid_mf 0003:0079:1803.0026: unknown main item tag 0x0 [ 397.070597][ T30] hid_mf 0003:0079:1803.0026: unknown main item tag 0x0 [ 397.070641][ T30] hid_mf 0003:0079:1803.0026: unknown main item tag 0x0 [ 397.070661][ T30] hid_mf 0003:0079:1803.0026: unknown main item tag 0x0 [ 397.092250][ T5709] appletouch 4-1:32.85: Geyser mode initialized. [ 397.098820][ T5709] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:32.85/input/input39 [ 397.185321][ C1] appletouch 4-1:32.85: appletouch: OVERFLOW with data length 64, actual length is 64 [ 397.200792][ T30] hid_mf 0003:0079:1803.0026: hidraw0: USB HID vff.7f Device [HID 0079:1803] on usb-dummy_hcd.6-1/input0 [ 397.426449][ T5709] usb 7-1: USB disconnect, device number 10 [ 397.682219][ T5710] usb 4-1: USB disconnect, device number 41 [ 397.720362][ T5710] appletouch 4-1:32.85: input: appletouch disconnected [ 397.742183][T16077] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3879'. [ 397.742252][T16077] bond3: left allmulticast mode [ 397.742324][T16077] bond3: left promiscuous mode [ 397.742525][T16077] bridge0: port 3(bond3) entered disabled state [ 397.757408][T16077] bridge_slave_1: left allmulticast mode [ 397.757436][T16077] bridge_slave_1: left promiscuous mode [ 397.757615][T16077] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.762753][T16077] bridge_slave_0: left allmulticast mode [ 397.762777][T16077] bridge_slave_0: left promiscuous mode [ 397.762923][T16077] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.997477][ T5796] usb 3-1: new low-speed USB device number 46 using dummy_hcd [ 398.149571][ T5796] usb 3-1: unable to get BOS descriptor or descriptor too short [ 398.149614][ T5796] usb 3-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=d4.29 [ 398.150463][ T5796] usb 3-1: config 8 has an invalid interface number: 109 but max is 0 [ 398.150486][ T5796] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 398.150505][ T5796] usb 3-1: config 8 has no interface number 0 [ 398.150538][ T5796] usb 3-1: config 8 interface 109 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 8 [ 398.150564][ T5796] usb 3-1: config 8 interface 109 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 398.150590][ T5796] usb 3-1: config 8 interface 109 altsetting 0 endpoint 0x8E has invalid maxpacket 151, setting to 8 [ 398.154304][ T5796] usb 3-1: string descriptor 0 read error: -22 [ 398.154415][ T5796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.180689][T16081] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 398.185145][ T5796] metro_usb 3-1:8.109: Metrologic USB to Serial converter detected [ 398.194085][ T5796] usb 3-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 398.291645][T16088] FAULT_INJECTION: forcing a failure. [ 398.291645][T16088] name failslab, interval 1, probability 0, space 0, times 0 [ 398.291682][T16088] CPU: 0 UID: 0 PID: 16088 Comm: syz.0.3883 Tainted: G L syzkaller #0 PREEMPT(full) [ 398.291709][T16088] Tainted: [L]=SOFTLOCKUP [ 398.291716][T16088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 398.291728][T16088] Call Trace: [ 398.291734][T16088] [ 398.291743][T16088] dump_stack_lvl+0x100/0x190 [ 398.291779][T16088] should_fail_ex.cold+0x5/0xa [ 398.291808][T16088] should_failslab+0xc2/0x120 [ 398.291834][T16088] __kmalloc_cache_node_noprof+0x94/0x720 [ 398.291859][T16088] ? __kasan_kmalloc+0xaa/0xb0 [ 398.291880][T16088] ? page_pool_create_percpu+0x7a/0xd50 [ 398.291906][T16088] page_pool_create_percpu+0x7a/0xd50 [ 398.291929][T16088] bpf_test_run_xdp_live+0x192/0x760 [ 398.291961][T16088] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 398.292001][T16088] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 398.292066][T16088] ? bpf_test_init.isra.0+0x51/0x100 [ 398.292097][T16088] bpf_prog_test_run_xdp+0xd86/0x1670 [ 398.292126][T16088] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 398.292154][T16088] ? fput+0x7c/0x100 [ 398.292179][T16088] ? __bpf_prog_get+0x97/0x290 [ 398.292204][T16088] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 398.292223][T16088] __sys_bpf+0x2265/0x4a30 [ 398.292242][T16088] ? plist_check_list+0x1b8/0x280 [ 398.292266][T16088] ? plist_check_list+0x190/0x280 [ 398.292286][T16088] ? __pfx___sys_bpf+0x10/0x10 [ 398.292304][T16088] ? find_held_lock+0x2b/0x80 [ 398.292331][T16088] ? futex_wake+0x4ea/0x5e0 [ 398.292363][T16088] ? futex_private_hash_put.part.0+0xdc/0x180 [ 398.292386][T16088] ? futex_private_hash_put+0x24/0x30 [ 398.292408][T16088] ? __pfx_futex_wake+0x10/0x10 [ 398.292438][T16088] ? rcu_read_lock_any_held+0x6a/0x90 [ 398.292461][T16088] ? find_held_lock+0x2b/0x80 [ 398.292484][T16088] ? ksys_write+0x190/0x250 [ 398.292502][T16088] ? ksys_write+0x190/0x250 [ 398.292535][T16088] ? __x64_sys_futex+0x34f/0x4d0 [ 398.292558][T16088] ? __x64_sys_futex+0x358/0x4d0 [ 398.292583][T16088] ? xfd_validate_state+0x129/0x190 [ 398.292605][T16088] ? __x64_sys_bpf+0xce/0x140 [ 398.292621][T16088] __x64_sys_bpf+0xce/0x140 [ 398.292642][T16088] ? do_syscall_64+0xae/0x790 [ 398.292670][T16088] do_syscall_64+0x123/0x790 [ 398.292695][T16088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.292716][T16088] RIP: 0033:0x7f3e5ad9e159 [ 398.292734][T16088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.292752][T16088] RSP: 002b:00007f3e5bbbd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 398.292773][T16088] RAX: ffffffffffffffda RBX: 00007f3e5b025fa0 RCX: 00007f3e5ad9e159 [ 398.292786][T16088] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 398.292798][T16088] RBP: 00007f3e5ae3503b R08: 0000000000000000 R09: 0000000000000000 [ 398.292809][T16088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 398.292821][T16088] R13: 00007f3e5b026038 R14: 00007f3e5b025fa0 R15: 00007ffea94b9868 [ 398.292847][T16088] [ 398.578661][ T5710] usb 3-1: USB disconnect, device number 46 [ 398.599076][ T5710] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 398.599493][ T5710] metro_usb 3-1:8.109: device disconnected [ 399.558333][T16130] sd 0:0:1:0: PR command failed: 1026 [ 399.558376][T16130] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 399.558412][T16130] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 399.910564][T16140] netlink: 'syz.3.3906': attribute type 2 has an invalid length. [ 399.910584][T16140] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3906'. [ 400.447427][ T9] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 400.598462][ T9] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 400.599454][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.602911][ T9] usb 4-1: config 0 descriptor?? [ 400.604959][ T9] cp210x 4-1:0.0: cp210x converter detected [ 400.717815][T16161] netlink: 'syz.6.3915': attribute type 10 has an invalid length. [ 400.717839][T16161] netlink: 55 bytes leftover after parsing attributes in process `syz.6.3915'. [ 401.032746][ T9] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 401.081308][ T9] usb 4-1: cp210x converter now attached to ttyUSB0 [ 401.238975][ T5710] usb 4-1: USB disconnect, device number 42 [ 401.245334][ T5710] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 401.270134][ T5710] cp210x 4-1:0.0: device disconnected [ 402.053298][T16172] SELinux: common does not define every permission it declares [ 402.053600][T16172] SELinux: failed to load policy [ 402.552749][ T31] kauditd_printk_skb: 127 callbacks suppressed [ 402.552769][ T31] audit: type=1400 audit(1788988632.897:1224): avc: denied { node_bind } for pid=16184 comm="syz.5.3924" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 402.748492][ T30] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 402.908505][ T30] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 402.911693][ T30] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 402.911721][ T30] usb 4-1: config 1 has no interface number 0 [ 402.911753][ T30] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 402.911778][ T30] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 402.911802][ T30] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0x6E, changing to 0xE [ 402.911825][ T30] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 402.915410][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.915437][ T30] usb 4-1: Product: syz [ 402.915451][ T30] usb 4-1: Manufacturer: syz [ 402.915465][ T30] usb 4-1: SerialNumber: syz [ 402.922103][T16183] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 403.060292][ T31] audit: type=1400 audit(1788988633.407:1225): avc: denied { override_creds } for pid=16190 comm="syz.6.3928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 403.196425][ T30] usb 4-1: Error in usbnet_get_endpoints (-71) [ 403.218759][ T30] usb 4-1: USB disconnect, device number 43 [ 403.784527][T16205] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3933'. [ 403.860090][T16205] hsr_slave_0: left promiscuous mode [ 403.931906][T16206] syzkaller1: entered promiscuous mode [ 403.931928][T16206] syzkaller1: entered allmulticast mode [ 404.313682][ T31] audit: type=1400 audit(1788988634.657:1226): avc: denied { mount } for pid=16213 comm="syz.5.3937" name="/" dev="autofs" ino=57297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 404.340120][ T31] audit: type=1400 audit(1788988634.677:1227): avc: denied { append } for pid=16213 comm="syz.5.3937" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 404.401460][ T31] audit: type=1400 audit(1788988634.747:1228): avc: denied { unmount } for pid=11650 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 404.637856][ T31] audit: type=1400 audit(1788988634.987:1229): avc: denied { write } for pid=16218 comm="syz.6.3941" name="functions" dev="configfs" ino=25279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 404.638144][ T31] audit: type=1400 audit(1788988634.987:1230): avc: denied { add_name } for pid=16218 comm="syz.6.3941" name="eem.usb0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 405.282004][T16234] FAULT_INJECTION: forcing a failure. [ 405.282004][T16234] name failslab, interval 1, probability 0, space 0, times 0 [ 405.282044][T16234] CPU: 1 UID: 0 PID: 16234 Comm: syz.3.3946 Tainted: G L syzkaller #0 PREEMPT(full) [ 405.282075][T16234] Tainted: [L]=SOFTLOCKUP [ 405.282083][T16234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 405.282094][T16234] Call Trace: [ 405.282103][T16234] [ 405.282111][T16234] dump_stack_lvl+0x100/0x190 [ 405.282141][T16234] should_fail_ex.cold+0x5/0xa [ 405.282166][T16234] should_failslab+0xc2/0x120 [ 405.282187][T16234] __kmalloc_cache_noprof+0x91/0x6d0 [ 405.282211][T16234] ? kvm_dev_ioctl+0x13ee/0x1b50 [ 405.282235][T16234] kvm_dev_ioctl+0x13ee/0x1b50 [ 405.282260][T16234] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 405.282282][T16234] ? selinux_file_ioctl+0x13b/0x290 [ 405.282302][T16234] ? selinux_file_ioctl+0xb6/0x290 [ 405.282321][T16234] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 405.282339][T16234] __x64_sys_ioctl+0x18e/0x210 [ 405.282358][T16234] do_syscall_64+0x123/0x790 [ 405.282383][T16234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.282402][T16234] RIP: 0033:0x7f2ff6d9e159 [ 405.282419][T16234] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.282436][T16234] RSP: 002b:00007f2ff7cce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 405.282459][T16234] RAX: ffffffffffffffda RBX: 00007f2ff7025fa0 RCX: 00007f2ff6d9e159 [ 405.282470][T16234] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 405.282482][T16234] RBP: 00007f2ff6e3503b R08: 0000000000000000 R09: 0000000000000000 [ 405.282492][T16234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 405.282501][T16234] R13: 00007f2ff7026038 R14: 00007f2ff7025fa0 R15: 00007ffffbb8c4d8 [ 405.282525][T16234] [ 405.475310][ T31] audit: type=1400 audit(1788988635.817:1231): avc: denied { append } for pid=16236 comm="syz.5.3947" name="btrfs-control" dev="devtmpfs" ino=1313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 405.914429][T16243] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 406.352583][T16254] xt_hashlimit: size too large, truncated to 1048576 [ 407.199516][T16283] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.3975'. [ 408.276236][T16302] jffs2: notice: (16302) jffs2_build_xattr_subsystem: complete building xattr subsystem, 8 of xdatum (8 unchecked, 0 orphan) and 8 of xref (0 dead, 0 orphan) found. [ 408.738427][T16316] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3974'. [ 408.954624][T16326] FAULT_INJECTION: forcing a failure. [ 408.954624][T16326] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 408.954660][T16326] CPU: 1 UID: 0 PID: 16326 Comm: syz.0.3981 Tainted: G L syzkaller #0 PREEMPT(full) [ 408.954690][T16326] Tainted: [L]=SOFTLOCKUP [ 408.954698][T16326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 408.954710][T16326] Call Trace: [ 408.954717][T16326] [ 408.954725][T16326] dump_stack_lvl+0x100/0x190 [ 408.954756][T16326] should_fail_ex.cold+0x5/0xa [ 408.954780][T16326] ? prepare_alloc_pages+0x16d/0x5b0 [ 408.954807][T16326] should_fail_alloc_page+0xeb/0x140 [ 408.954841][T16326] prepare_alloc_pages+0x1f0/0x5b0 [ 408.954870][T16326] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 408.954904][T16326] ? prepare_alloc_pages+0x191/0x5b0 [ 408.954926][T16326] ? is_bpf_text_address+0x94/0x1a0 [ 408.954953][T16326] ? rcu_is_watching+0x13/0xc0 [ 408.954976][T16326] ? __alloc_frozen_pages_noprof+0x56b/0x3300 [ 408.955004][T16326] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 408.955034][T16326] ? stack_trace_save+0x8e/0xc0 [ 408.955058][T16326] ? __pfx_stack_trace_save+0x10/0x10 [ 408.955080][T16326] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 408.955105][T16326] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 408.955131][T16326] ? is_bpf_text_address+0x94/0x1a0 [ 408.955158][T16326] ? kasan_save_track+0x14/0x30 [ 408.955178][T16326] ? __kasan_slab_alloc+0x89/0x90 [ 408.955198][T16326] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 408.955217][T16326] ? alloc_vmap_area+0x640/0x2bb0 [ 408.955236][T16326] ? __get_vm_area_node+0x1ed/0x350 [ 408.955254][T16326] ? __vmalloc_node_range_noprof+0x268/0x1420 [ 408.955277][T16326] ? __vmalloc_node_noprof+0xad/0xf0 [ 408.955298][T16326] ? packet_set_ring+0xc58/0x1fb0 [ 408.955317][T16326] ? packet_setsockopt+0x11c4/0x2380 [ 408.955337][T16326] ? do_sock_setsockopt+0xf3/0x1d0 [ 408.955359][T16326] ? __sys_setsockopt+0x195/0x220 [ 408.955376][T16326] ? __x64_sys_setsockopt+0xbd/0x160 [ 408.955394][T16326] ? do_syscall_64+0x123/0x790 [ 408.955415][T16326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.955443][T16326] alloc_pages_bulk_noprof+0x5e1/0x13c0 [ 408.955476][T16326] ? policy_nodemask+0xed/0x4f0 [ 408.955501][T16326] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 408.955543][T16326] __kasan_populate_vmalloc+0xf0/0x210 [ 408.955569][T16326] alloc_vmap_area+0x95d/0x2bb0 [ 408.955597][T16326] ? kasan_save_track+0x14/0x30 [ 408.955621][T16326] ? __kasan_kmalloc+0xaa/0xb0 [ 408.955641][T16326] ? __pfx_alloc_vmap_area+0x10/0x10 [ 408.955664][T16326] ? __kasan_kmalloc+0xaa/0xb0 [ 408.955685][T16326] ? __get_vm_area_node+0x124/0x350 [ 408.955710][T16326] __get_vm_area_node+0x1ed/0x350 [ 408.955740][T16326] __vmalloc_node_range_noprof+0x268/0x1420 [ 408.955767][T16326] ? packet_set_ring+0xc58/0x1fb0 [ 408.955797][T16326] ? packet_set_ring+0xc58/0x1fb0 [ 408.955831][T16326] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 408.955859][T16326] ? alloc_pages_mpol+0x260/0x550 [ 408.955888][T16326] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 408.955917][T16326] ? packet_set_ring+0xc58/0x1fb0 [ 408.955939][T16326] __vmalloc_node_noprof+0xad/0xf0 [ 408.955963][T16326] ? packet_set_ring+0xc58/0x1fb0 [ 408.955987][T16326] packet_set_ring+0xc58/0x1fb0 [ 408.956020][T16326] packet_setsockopt+0x11c4/0x2380 [ 408.956044][T16326] ? sock_has_perm+0x25a/0x2f0 [ 408.956074][T16326] ? __pfx_packet_setsockopt+0x10/0x10 [ 408.956096][T16326] ? selinux_netlbl_socket_setsockopt+0x134/0x470 [ 408.956120][T16326] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 408.956150][T16326] ? find_held_lock+0x2b/0x80 [ 408.956176][T16326] ? __fget_files+0x215/0x3d0 [ 408.956204][T16326] ? selinux_socket_setsockopt+0x6a/0x80 [ 408.956235][T16326] ? __pfx_packet_setsockopt+0x10/0x10 [ 408.956260][T16326] do_sock_setsockopt+0xf3/0x1d0 [ 408.956290][T16326] __sys_setsockopt+0x195/0x220 [ 408.956316][T16326] __x64_sys_setsockopt+0xbd/0x160 [ 408.956336][T16326] ? do_syscall_64+0xae/0x790 [ 408.956361][T16326] ? lockdep_hardirqs_on+0x7d/0x110 [ 408.956387][T16326] do_syscall_64+0x123/0x790 [ 408.956416][T16326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.956436][T16326] RIP: 0033:0x7f3e5ad9e159 [ 408.956454][T16326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.956475][T16326] RSP: 002b:00007f3e5bbbd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 408.956497][T16326] RAX: ffffffffffffffda RBX: 00007f3e5b025fa0 RCX: 00007f3e5ad9e159 [ 408.956510][T16326] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000004 [ 408.956522][T16326] RBP: 00007f3e5ae3503b R08: 000000000000001c R09: 0000000000000000 [ 408.956534][T16326] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 408.956546][T16326] R13: 00007f3e5b026038 R14: 00007f3e5b025fa0 R15: 00007ffea94b9868 [ 408.956574][T16326] [ 409.062179][T16326] warn_alloc: 1 callbacks suppressed [ 409.062194][T16326] syz.0.3981: vmalloc error: size 16777216, align 0x1, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 409.062274][T16326] CPU: 0 UID: 0 PID: 16326 Comm: syz.0.3981 Tainted: G L syzkaller #0 PREEMPT(full) [ 409.062298][T16326] Tainted: [L]=SOFTLOCKUP [ 409.062306][T16326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 409.062322][T16326] Call Trace: [ 409.062329][T16326] [ 409.062336][T16326] dump_stack_lvl+0x100/0x190 [ 409.062366][T16326] warn_alloc.cold+0x9e/0xb2 [ 409.062388][T16326] ? __pfx_warn_alloc+0x10/0x10 [ 409.062414][T16326] ? lockdep_hardirqs_on+0x7d/0x110 [ 409.062438][T16326] ? __get_vm_area_node+0x2f0/0x350 [ 409.062463][T16326] ? __get_vm_area_node+0x22b/0x350 [ 409.062487][T16326] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 409.062517][T16326] ? packet_set_ring+0xc58/0x1fb0 [ 409.062542][T16326] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 409.062567][T16326] ? alloc_pages_mpol+0x260/0x550 [ 409.062589][T16326] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 409.062613][T16326] ? packet_set_ring+0xc58/0x1fb0 [ 409.062629][T16326] __vmalloc_node_noprof+0xad/0xf0 [ 409.062650][T16326] ? packet_set_ring+0xc58/0x1fb0 [ 409.062670][T16326] packet_set_ring+0xc58/0x1fb0 [ 409.062699][T16326] packet_setsockopt+0x11c4/0x2380 [ 409.062718][T16326] ? sock_has_perm+0x25a/0x2f0 [ 409.062743][T16326] ? __pfx_packet_setsockopt+0x10/0x10 [ 409.062762][T16326] ? selinux_netlbl_socket_setsockopt+0x134/0x470 [ 409.062782][T16326] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 409.062807][T16326] ? find_held_lock+0x2b/0x80 [ 409.062830][T16326] ? __fget_files+0x215/0x3d0 [ 409.062853][T16326] ? selinux_socket_setsockopt+0x6a/0x80 [ 409.062878][T16326] ? __pfx_packet_setsockopt+0x10/0x10 [ 409.062898][T16326] do_sock_setsockopt+0xf3/0x1d0 [ 409.062922][T16326] __sys_setsockopt+0x195/0x220 [ 409.062946][T16326] __x64_sys_setsockopt+0xbd/0x160 [ 409.062962][T16326] ? do_syscall_64+0xae/0x790 [ 409.062983][T16326] ? lockdep_hardirqs_on+0x7d/0x110 [ 409.063004][T16326] do_syscall_64+0x123/0x790 [ 409.063027][T16326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.063047][T16326] RIP: 0033:0x7f3e5ad9e159 [ 409.063063][T16326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 409.063078][T16326] RSP: 002b:00007f3e5bbbd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 409.063094][T16326] RAX: ffffffffffffffda RBX: 00007f3e5b025fa0 RCX: 00007f3e5ad9e159 [ 409.063106][T16326] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000004 [ 409.063116][T16326] RBP: 00007f3e5ae3503b R08: 000000000000001c R09: 0000000000000000 [ 409.063126][T16326] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 409.063137][T16326] R13: 00007f3e5b026038 R14: 00007f3e5b025fa0 R15: 00007ffea94b9868 [ 409.063160][T16326] [ 409.064536][T16326] Mem-Info: [ 409.064547][T16326] active_anon:33242 inactive_anon:10491 isolated_anon:0 [ 409.064547][T16326] active_file:2603 inactive_file:59675 isolated_file:0 [ 409.064547][T16326] unevictable:0 dirty:511 writeback:0 [ 409.064547][T16326] slab_reclaimable:11961 slab_unreclaimable:108355 [ 409.064547][T16326] mapped:35530 shmem:31104 pagetables:4280 [ 409.064547][T16326] sec_pagetables:0 bounce:0 [ 409.064547][T16326] kernel_misc_reclaimable:0 [ 409.064547][T16326] free:1219188 free_pcp:9968 free_cma:0 [ 409.064591][T16326] Node 0 active_anon:132968kB inactive_anon:41964kB active_file:10412kB inactive_file:238404kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:142088kB dirty:2044kB writeback:0kB shmem:124416kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:14208kB pagetables:16968kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 409.064638][T16326] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:296kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:32kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 409.064681][T16326] Node 0 DMA free:15344kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 409.064725][T16326] lowmem_reserve[]: 0 2470 2470 2470 2470 [ 409.064755][T16326] Node 0 DMA32 free:931572kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0kB free_highatomic:0kB active_anon:133268kB inactive_anon:41964kB active_file:10412kB inactive_file:238404kB unevictable:0kB writepending:2044kB zspages:2204kB present:3129332kB managed:2530164kB mlocked:0kB bounce:0kB free_pcp:39872kB local_pcp:29120kB free_cma:0kB [ 409.077245][T16326] lowmem_reserve[]: 0 0 0 0 0 [ 409.078502][T16326] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:72kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 409.078550][T16326] lowmem_reserve[]: 0 0 0 0 0 [ 409.078580][T16326] Node 1 Normal free:3929836kB boost:0kB min:55652kB low:69564kB high:83476kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:296kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 409.078628][T16326] lowmem_reserve[]: 0 0 0 0 0 [ 409.078658][T16326] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15344kB [ 409.079815][T16326] Node 0 DMA32: 1686*4kB (UM) 598*8kB (UE) 765*16kB (UME) 210*32kB (UME) 303*64kB (UME) 307*128kB (UME) 345*256kB (UM) 265*512kB (UME) 198*1024kB (UME) 3*2048kB (UE) 100*4096kB (UM) = 931672kB [ 409.079943][T16326] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 409.080021][T16326] Node 1 Normal: 1*4kB (U) 1*8kB (M) 6*16kB (UM) 6*32kB (UM) 7*64kB (UM) 6*128kB (UM) 3*256kB (M) 3*512kB (M) 4*1024kB (UM) 3*2048kB (UM) 956*4096kB (M) = 3929836kB [ 409.080145][T16326] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 409.080158][T16326] Node 0 hugepages_total=6 hugepages_free=6 hugepages_surp=0 hugepages_size=2048kB [ 409.080171][T16326] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 409.080183][T16326] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 409.080195][T16326] 93431 total pagecache pages [ 409.080201][T16326] 3 pages in swap cache [ 409.080208][T16326] Free swap = 123004kB [ 409.080214][T16326] Total swap = 124996kB [ 409.080220][T16326] 2097051 pages RAM [ 409.080226][T16326] 0 pages HighMem/MovableOnly [ 409.080232][T16326] 432876 pages reserved [ 409.080238][T16326] 0 pages cma reserved [ 409.247117][ T31] audit: type=1400 audit(1788988639.587:1232): avc: denied { create } for pid=16328 comm="syz.5.3982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 409.295327][ T31] audit: type=1400 audit(1788988639.637:1233): avc: denied { ioctl } for pid=16328 comm="syz.5.3982" path="socket:[58508]" dev="sockfs" ino=58508 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 409.912094][T16341] 9pnet_fd: p9_fd_create_tcp (16341): problem connecting socket to 127.0.0.1 [ 409.933342][ T31] audit: type=1400 audit(1788988640.257:1234): avc: denied { mounton } for pid=16339 comm="syz.5.3986" path="/syzcgroup/cpu/syz5/cgroup.procs" dev="cgroup" ino=476 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 410.540422][ T31] audit: type=1400 audit(1788988640.887:1235): avc: denied { write } for pid=16322 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 410.583335][T16357] netlink: 'syz.3.3990': attribute type 8 has an invalid length. [ 410.583357][T16357] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3990'. [ 410.628177][T16357] veth1_to_team: entered promiscuous mode [ 410.631810][T16357] gretap0: entered promiscuous mode [ 410.717817][T16357] veth1_to_team: left promiscuous mode [ 410.774045][T16357] gretap0: left promiscuous mode [ 410.825882][ T31] audit: type=1400 audit(1788988641.167:1236): avc: denied { write } for pid=16367 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 411.123050][T16372] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3994'. [ 411.123075][T16372] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3994'. [ 411.704672][T16397] FAULT_INJECTION: forcing a failure. [ 411.704672][T16397] name failslab, interval 1, probability 0, space 0, times 0 [ 411.704708][T16397] CPU: 1 UID: 0 PID: 16397 Comm: syz.5.4001 Tainted: G L syzkaller #0 PREEMPT(full) [ 411.704737][T16397] Tainted: [L]=SOFTLOCKUP [ 411.704745][T16397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 411.704758][T16397] Call Trace: [ 411.704766][T16397] [ 411.704775][T16397] dump_stack_lvl+0x100/0x190 [ 411.704809][T16397] should_fail_ex.cold+0x5/0xa [ 411.704840][T16397] should_failslab+0xc2/0x120 [ 411.704865][T16397] kmem_cache_alloc_noprof+0x92/0x6a0 [ 411.704888][T16397] ? skb_clone+0x190/0x400 [ 411.704914][T16397] skb_clone+0x190/0x400 [ 411.704941][T16397] netlink_broadcast_filtered+0xb22/0xf20 [ 411.704976][T16397] netlink_broadcast+0x39/0x50 [ 411.704998][T16397] kobject_uevent_env+0xcdd/0x18b0 [ 411.705025][T16397] ? lockdep_init_map_type+0x5c/0x250 [ 411.705052][T16397] swnode_register+0x55d/0x750 [ 411.705076][T16397] fwnode_create_software_node+0x1c8/0x3f0 [ 411.705100][T16397] device_create_managed_software_node+0x103/0x270 [ 411.705126][T16397] iommufd_test+0x3007/0x6600 [ 411.705151][T16397] ? __lock_acquire+0x5c0/0x1f40 [ 411.705173][T16397] ? __lock_acquire+0x5c0/0x1f40 [ 411.705193][T16397] ? __pfx_iommufd_test+0x10/0x10 [ 411.705213][T16397] ? tomoyo_path_number_perm+0x188/0x580 [ 411.705248][T16397] ? lock_acquire+0x1d1/0x380 [ 411.705267][T16397] ? __might_fault+0xc5/0x140 [ 411.705296][T16397] ? find_held_lock+0x2b/0x80 [ 411.705322][T16397] ? __might_fault+0xc5/0x140 [ 411.705363][T16397] iommufd_fops_ioctl+0x358/0x520 [ 411.705389][T16397] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 411.705411][T16397] ? __fget_files+0x34/0x3d0 [ 411.705458][T16397] ? selinux_file_ioctl+0x13b/0x290 [ 411.705478][T16397] ? selinux_file_ioctl+0xb6/0x290 [ 411.705502][T16397] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 411.705527][T16397] __x64_sys_ioctl+0x18e/0x210 [ 411.705549][T16397] do_syscall_64+0x123/0x790 [ 411.705576][T16397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.705597][T16397] RIP: 0033:0x7f629e39e159 [ 411.705615][T16397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 411.705634][T16397] RSP: 002b:00007f629f1a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 411.705654][T16397] RAX: ffffffffffffffda RBX: 00007f629e625fa0 RCX: 00007f629e39e159 [ 411.705667][T16397] RDX: 0000200000000140 RSI: 0000000000003ba0 RDI: 0000000000000004 [ 411.705679][T16397] RBP: 00007f629e43503b R08: 0000000000000000 R09: 0000000000000000 [ 411.705691][T16397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 411.705703][T16397] R13: 00007f629e626038 R14: 00007f629e625fa0 R15: 00007ffe552ca508 [ 411.705730][T16397] [ 411.822349][ T30] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 411.878037][ T31] audit: type=1400 audit(1788988642.217:1237): avc: denied { write } for pid=16370 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 411.913203][T16397] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 412.000562][ T30] usb 7-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00 [ 412.042348][ T30] usb 7-1: config 0 interface 0 has no altsetting 0 [ 412.042386][ T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.046712][ T30] usb 7-1: config 0 descriptor?? [ 412.354523][ T31] audit: type=1400 audit(1788988642.697:1238): avc: denied { write } for pid=16408 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 412.503875][ T30] hid_parser_main: 4008 callbacks suppressed [ 412.503899][ T30] semitek 0003:1EA7:0907.0027: unknown main item tag 0x4 [ 412.539881][ T30] semitek 0003:1EA7:0907.0027: hidraw0: USB HID v90.01 Device [HID 1ea7:0907] on usb-dummy_hcd.6-1/input0 [ 412.780447][ T189] usb 7-1: USB disconnect, device number 11 [ 412.891466][ T31] audit: type=1400 audit(1788988643.237:1239): avc: denied { write } for pid=16415 comm="syz.3.4006" lport=39406 faddr=::ffff:100.1.1.2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 413.997902][T16431] netlink: 'syz.6.4013': attribute type 10 has an invalid length. [ 414.037229][T16431] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 414.060884][T16431] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 414.151602][T16431] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 414.267161][T16431] bond0 (unregistering): (slave c@0Ù): Releasing backup interface [ 414.293880][T16431] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 414.388801][T16431] bond0 (unregistering): Released all slaves [ 414.951472][ T5616] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 414.967752][ T5616] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 414.970787][ T5616] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 414.972917][ T5616] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 414.992814][ T5616] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 415.274430][T16455] CIFS: Attempting to mount //127.0.0.1/share [ 416.134582][T16455] CIFS: VFS: Error connecting to socket. Aborting operation. [ 416.134629][T16455] CIFS: VFS: cifs_mount failed w/return code = -4 [ 416.541979][T16478] netlink: 'syz.3.4025': attribute type 2 has an invalid length. [ 416.542002][T16478] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4025'. [ 416.831354][T16443] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.831438][T16443] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.831568][T16443] bridge_slave_0: entered allmulticast mode [ 416.850139][T16443] bridge_slave_0: entered promiscuous mode [ 416.863963][T16443] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.864046][T16443] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.864165][T16443] bridge_slave_1: entered allmulticast mode [ 416.871684][T16443] bridge_slave_1: entered promiscuous mode [ 417.025418][T16443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 417.041848][T16443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.117454][ T5616] Bluetooth: hci6: command tx timeout [ 417.192264][T16443] team0: Port device team_slave_0 added [ 417.210235][T16443] team0: Port device team_slave_1 added [ 417.340013][T16443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.340030][T16443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 417.340051][T16443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.344231][T16443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.344248][T16443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 417.344271][T16443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 417.495643][T16443] hsr_slave_0: entered promiscuous mode [ 417.496381][T16443] hsr_slave_1: entered promiscuous mode [ 417.496900][T16443] debugfs: 'hsr0' already exists in 'hsr' [ 417.496916][T16443] Cannot create hsr debugfs directory [ 417.724856][T16506] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4033'. [ 418.318618][T16519] FAULT_INJECTION: forcing a failure. [ 418.318618][T16519] name failslab, interval 1, probability 0, space 0, times 0 [ 418.318662][T16519] CPU: 1 UID: 0 PID: 16519 Comm: syz.6.4038 Tainted: G L syzkaller #0 PREEMPT(full) [ 418.318689][T16519] Tainted: [L]=SOFTLOCKUP [ 418.318698][T16519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 418.318709][T16519] Call Trace: [ 418.318716][T16519] [ 418.318723][T16519] dump_stack_lvl+0x100/0x190 [ 418.318753][T16519] should_fail_ex.cold+0x5/0xa [ 418.318779][T16519] should_failslab+0xc2/0x120 [ 418.318804][T16519] kmem_cache_alloc_noprof+0x92/0x6a0 [ 418.318824][T16519] ? __up_read+0x333/0x980 [ 418.318845][T16519] ? prepare_creds+0x2c/0x950 [ 418.318868][T16519] prepare_creds+0x2c/0x950 [ 418.318887][T16519] prepare_exec_creds+0x10/0x240 [ 418.318904][T16519] bprm_execve+0xc0/0x1940 [ 418.318924][T16519] ? do_raw_spin_lock+0x128/0x260 [ 418.318946][T16519] ? alloc_bprm+0x54e/0x9e0 [ 418.318963][T16519] ? alloc_bprm+0x54e/0x9e0 [ 418.318982][T16519] ? __pfx_bprm_execve+0x10/0x10 [ 418.319000][T16519] ? copy_string_kernel+0x339/0x3f0 [ 418.319022][T16519] do_execveat_common.isra.0+0x4a5/0x580 [ 418.319045][T16519] __x64_sys_execveat+0xdf/0x130 [ 418.319064][T16519] do_syscall_64+0x123/0x790 [ 418.319093][T16519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.319112][T16519] RIP: 0033:0x7fc9d799e159 [ 418.319128][T16519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.319143][T16519] RSP: 002b:00007fc9d887b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 418.319159][T16519] RAX: ffffffffffffffda RBX: 00007fc9d7c25fa0 RCX: 00007fc9d799e159 [ 418.319171][T16519] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 418.319182][T16519] RBP: 00007fc9d7a3503b R08: 0000000000001000 R09: 0000000000000000 [ 418.319195][T16519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 418.319206][T16519] R13: 00007fc9d7c26038 R14: 00007fc9d7c25fa0 R15: 00007ffd0b1b1248 [ 418.319232][T16519] [ 418.552514][ T31] audit: type=1326 audit(1788988648.897:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16522 comm="syz.3.4041" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ff6d9e159 code=0x7ffc0000 [ 418.554218][ T31] audit: type=1326 audit(1788988648.897:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16522 comm="syz.3.4041" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ff6d9e159 code=0x7ffc0000 [ 418.555040][ T31] audit: type=1326 audit(1788988648.897:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16522 comm="syz.3.4041" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ff6d9e159 code=0x7ffc0000 [ 418.556682][ T31] audit: type=1326 audit(1788988648.897:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16522 comm="syz.3.4041" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ff6d9e159 code=0x7ffc0000 [ 418.556883][ T31] audit: type=1326 audit(1788988648.897:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16522 comm="syz.3.4041" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f2ff6d9e159 code=0x7ffc0000 [ 418.638862][ T31] audit: type=1326 audit(1788988648.967:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16522 comm="syz.3.4041" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2ff6d5e98e code=0x7ffc0000 [ 418.638911][ T31] audit: type=1326 audit(1788988648.977:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16522 comm="syz.3.4041" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2ff6d5e98e code=0x7ffc0000 [ 418.638946][ T31] audit: type=1326 audit(1788988648.977:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16522 comm="syz.3.4041" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2ff6d5e98e code=0x7ffc0000 [ 418.648415][ T31] audit: type=1326 audit(1788988648.987:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16522 comm="syz.3.4041" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2ff6d5e98e code=0x7ffc0000 [ 418.648468][ T31] audit: type=1326 audit(1788988648.987:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16522 comm="syz.3.4041" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2ff6d5e98e code=0x7ffc0000 [ 418.930131][T16443] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 418.947852][T16443] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 418.948770][T16443] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 419.043049][T16443] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 419.052087][T16443] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 419.098029][T16443] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 419.103342][T16443] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 419.180350][T16443] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 419.199590][ T5616] Bluetooth: hci6: command tx timeout [ 419.604195][T16443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 419.742102][T16443] 8021q: adding VLAN 0 to HW filter on device team0 [ 419.770279][T14448] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.770368][T14448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 419.814519][ T1232] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.814605][ T1232] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.278843][ T5616] Bluetooth: hci6: command tx timeout [ 421.473914][T16443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.411971][T16443] veth0_vlan: entered promiscuous mode [ 422.456630][T16443] veth1_vlan: entered promiscuous mode [ 422.531660][T16443] veth0_macvtap: entered promiscuous mode [ 422.553173][T16443] veth1_macvtap: entered promiscuous mode [ 422.594609][T16443] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 422.631794][T16443] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.668616][T12585] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.668770][T12585] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.668992][T12585] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.687571][T12585] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.151628][T12585] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.151649][T12585] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.255948][T12583] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.255972][T12583] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.359613][ T5616] Bluetooth: hci6: command tx timeout [ 423.887099][T16651] netlink: 7 bytes leftover after parsing attributes in process `syz.3.4078'. [ 424.171832][ T31] kauditd_printk_skb: 46 callbacks suppressed [ 424.171850][ T31] audit: type=1400 audit(1788988654.517:1296): avc: denied { read } for pid=16658 comm="syz.0.4082" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 424.172172][ T31] audit: type=1400 audit(1788988654.517:1297): avc: denied { open } for pid=16658 comm="syz.0.4082" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 424.330433][ T31] audit: type=1400 audit(1788988654.677:1298): avc: denied { ioctl } for pid=16658 comm="syz.0.4082" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x7509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 424.604153][ T31] audit: type=1400 audit(1788988654.947:1299): avc: denied { read } for pid=16668 comm="syz.3.4086" name="trace_pipe_raw" dev="tracefs" ino=3198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 424.604391][ T31] audit: type=1400 audit(1788988654.947:1300): avc: denied { open } for pid=16668 comm="syz.3.4086" path="/879/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=3198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 425.008756][T16680] syzkaller1: entered promiscuous mode [ 425.008780][T16680] syzkaller1: entered allmulticast mode [ 425.955050][ T31] audit: type=1400 audit(1788988656.297:1301): avc: denied { name_bind } for pid=16698 comm="syz.3.4098" src=130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 426.027708][T16695] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 426.027735][T16695] overlayfs: failed to set xattr on upper [ 426.027743][T16695] overlayfs: ...falling back to redirect_dir=nofollow. [ 426.027752][T16695] overlayfs: ...falling back to index=off. [ 426.390346][ T5796] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 426.428165][ T5796] hid-generic 0000:0000:0000.0028: hidraw0: HID v0.00 Device [syz1] on syz0 [ 426.743764][ T31] audit: type=1326 audit(1788988657.087:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16720 comm="syz.7.4107" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f755799e159 code=0x7ffc0000 [ 426.743871][ T31] audit: type=1326 audit(1788988657.087:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16720 comm="syz.7.4107" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f755799e159 code=0x7ffc0000 [ 426.805742][ T31] audit: type=1326 audit(1788988657.147:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16720 comm="syz.7.4107" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f755799e159 code=0x7ffc0000 [ 426.805794][ T31] audit: type=1326 audit(1788988657.147:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16720 comm="syz.7.4107" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f755799e159 code=0x7ffc0000 [ 426.947429][ T5796] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 427.128076][ T5796] usb 7-1: New USB device found, idVendor=174c, idProduct=56aa, bcdDevice= 1.00 [ 427.129011][ T5796] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 427.129056][ T5796] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 427.130769][ T5796] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.130792][ T5796] usb 7-1: Product: syz [ 427.130807][ T5796] usb 7-1: Manufacturer: syz [ 427.130822][ T5796] usb 7-1: SerialNumber: syz [ 427.135608][ T5796] usb-storage 7-1:1.0: USB Mass Storage device detected [ 427.370871][ T5796] usb 7-1: USB disconnect, device number 12 [ 427.440702][T12585] IPVS: starting estimator thread 0... [ 427.523768][T16737] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 427.585940][T16735] IPVS: using max 43 ests per chain, 103200 per kthread [ 428.202477][T16744] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 428.715611][T16764] FAULT_INJECTION: forcing a failure. [ 428.715611][T16764] name failslab, interval 1, probability 0, space 0, times 0 [ 428.715648][T16764] CPU: 0 UID: 0 PID: 16764 Comm: syz.0.4123 Tainted: G L syzkaller #0 PREEMPT(full) [ 428.715679][T16764] Tainted: [L]=SOFTLOCKUP [ 428.715688][T16764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 428.715700][T16764] Call Trace: [ 428.715708][T16764] [ 428.715717][T16764] dump_stack_lvl+0x100/0x190 [ 428.715753][T16764] should_fail_ex.cold+0x5/0xa [ 428.715782][T16764] should_failslab+0xc2/0x120 [ 428.715809][T16764] __kmalloc_cache_noprof+0x91/0x6d0 [ 428.715840][T16764] ? snd_seq_oss_writeq_new+0xb5/0x2b0 [ 428.715866][T16764] snd_seq_oss_writeq_new+0xb5/0x2b0 [ 428.715887][T16764] ? __pfx_snd_seq_oss_writeq_new+0x10/0x10 [ 428.715918][T16764] ? lockdep_init_map_type+0x5c/0x250 [ 428.715942][T16764] ? __raw_spin_lock_init+0x3a/0x110 [ 428.715971][T16764] snd_seq_oss_open+0x7bc/0xa10 [ 428.716001][T16764] odev_open+0x6f/0x90 [ 428.716020][T16764] ? __pfx_odev_open+0x10/0x10 [ 428.716039][T16764] soundcore_open+0x2e3/0x5a0 [ 428.716070][T16764] ? __pfx_soundcore_open+0x10/0x10 [ 428.716093][T16764] chrdev_open+0x234/0x6a0 [ 428.716118][T16764] ? __pfx_chrdev_open+0x10/0x10 [ 428.716142][T16764] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 428.716177][T16764] do_dentry_open+0x6ab/0x14d0 [ 428.716197][T16764] ? __pfx_chrdev_open+0x10/0x10 [ 428.716227][T16764] vfs_open+0x82/0x3f0 [ 428.716256][T16764] path_openat+0x19fa/0x2440 [ 428.716285][T16764] ? __pfx_path_openat+0x10/0x10 [ 428.716318][T16764] do_file_open+0x20e/0x430 [ 428.716344][T16764] ? __pfx_do_file_open+0x10/0x10 [ 428.716388][T16764] ? _raw_spin_unlock+0x28/0x50 [ 428.716410][T16764] ? alloc_fd+0x471/0x7a0 [ 428.716445][T16764] do_sys_openat2+0x10f/0x1e0 [ 428.716475][T16764] ? __pfx_do_sys_openat2+0x10/0x10 [ 428.716514][T16764] __x64_sys_openat+0x12d/0x210 [ 428.716544][T16764] ? __pfx___x64_sys_openat+0x10/0x10 [ 428.716581][T16764] do_syscall_64+0x123/0x790 [ 428.716610][T16764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.716631][T16764] RIP: 0033:0x7f3e5ad9e159 [ 428.716649][T16764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 428.716668][T16764] RSP: 002b:00007f3e5bbbd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 428.716689][T16764] RAX: ffffffffffffffda RBX: 00007f3e5b025fa0 RCX: 00007f3e5ad9e159 [ 428.716702][T16764] RDX: 00000000000c0342 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 428.716715][T16764] RBP: 00007f3e5ae3503b R08: 0000000000000000 R09: 0000000000000000 [ 428.716726][T16764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 428.716738][T16764] R13: 00007f3e5b026038 R14: 00007f3e5b025fa0 R15: 00007ffea94b9868 [ 428.716765][T16764] [ 429.042514][T16770] netlink: 'syz.3.4127': attribute type 1 has an invalid length. [ 429.105942][T16768] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4126'. [ 429.243580][T16770] 8021q: adding VLAN 0 to HW filter on device bond3 [ 429.289726][T16763] FAULT_INJECTION: forcing a failure. [ 429.289726][T16763] name failslab, interval 1, probability 0, space 0, times 0 [ 429.289764][T16763] CPU: 1 UID: 0 PID: 16763 Comm: syz.7.4124 Tainted: G L syzkaller #0 PREEMPT(full) [ 429.289792][T16763] Tainted: [L]=SOFTLOCKUP [ 429.289801][T16763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 429.289815][T16763] Call Trace: [ 429.289822][T16763] [ 429.289831][T16763] dump_stack_lvl+0x100/0x190 [ 429.289865][T16763] should_fail_ex.cold+0x5/0xa [ 429.289894][T16763] should_failslab+0xc2/0x120 [ 429.289920][T16763] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 429.289943][T16763] ? xas_split_alloc+0x182/0x530 [ 429.289975][T16763] xas_split_alloc+0x182/0x530 [ 429.290012][T16763] __folio_split+0x95e/0x1bf0 [ 429.290042][T16763] ? __pfx___folio_split+0x10/0x10 [ 429.290057][T16763] ? folio_alloc_swap+0xbd8/0x1e70 [ 429.290088][T16763] ? folio_alloc_swap+0x4c6/0x1e70 [ 429.290124][T16763] shmem_writeout+0x786/0x1a00 [ 429.290161][T16763] ? __pfx_shmem_writeout+0x10/0x10 [ 429.290189][T16763] ? __pfx_try_to_unmap+0x10/0x10 [ 429.290220][T16763] ? find_held_lock+0x2b/0x80 [ 429.290251][T16763] ? inode_to_bdi+0x9e/0x160 [ 429.290272][T16763] ? folio_clear_dirty_for_io+0x178/0x960 [ 429.290309][T16763] shrink_folio_list+0x399a/0x5e40 [ 429.290345][T16763] ? __pfx_shrink_folio_list+0x10/0x10 [ 429.290372][T16763] ? lock_acquire+0x1d1/0x380 [ 429.290392][T16763] ? unwind_next_frame+0xbd/0x2090 [ 429.290423][T16763] ? find_held_lock+0x2b/0x80 [ 429.290451][T16763] ? unwind_next_frame+0x3be/0x2090 [ 429.290483][T16763] ? unwind_next_frame+0x3c8/0x2090 [ 429.290509][T16763] ? do_syscall_64+0x123/0x790 [ 429.290557][T16763] ? __lock_acquire+0x5c0/0x1f40 [ 429.290578][T16763] ? __css_rstat_updated+0x1ce/0x590 [ 429.290603][T16763] ? __pfx___css_rstat_updated+0x10/0x10 [ 429.290629][T16763] reclaim_folio_list+0xe9/0x5e0 [ 429.290658][T16763] ? __pfx_reclaim_folio_list+0x10/0x10 [ 429.290678][T16763] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 429.290708][T16763] ? lru_gen_update_size+0x431/0xe20 [ 429.290736][T16763] ? lru_gen_del_folio+0x382/0x5f0 [ 429.290760][T16763] reclaim_pages+0x428/0x5e0 [ 429.290787][T16763] ? __pfx_reclaim_pages+0x10/0x10 [ 429.290808][T16763] ? madvise_cold_or_pageout_pte_range+0x22ba/0x27b0 [ 429.290836][T16763] ? folio_isolate_lru+0xd6/0xe90 [ 429.290864][T16763] madvise_cold_or_pageout_pte_range+0x147e/0x27b0 [ 429.290900][T16763] ? rcu_read_unlock+0x17/0x60 [ 429.290929][T16763] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 429.290955][T16763] ? __mod_zone_page_state+0xdb/0x190 [ 429.290989][T16763] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 429.291019][T16763] walk_pgd_range+0xbef/0x1e00 [ 429.291045][T16763] ? find_held_lock+0x2b/0x80 [ 429.291078][T16763] ? __pfx_walk_pgd_range+0x10/0x10 [ 429.291096][T16763] ? __pfx_folio_batch_move_lru+0x10/0x10 [ 429.291131][T16763] __walk_page_range+0x171/0x850 [ 429.291163][T16763] walk_page_range_vma_unsafe+0x209/0x8f0 [ 429.291186][T16763] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 429.291211][T16763] ? find_held_lock+0x2b/0x80 [ 429.291236][T16763] ? mlock_drain_local+0x254/0x4e0 [ 429.291263][T16763] ? mlock_drain_local+0x254/0x4e0 [ 429.291293][T16763] walk_page_range_vma+0x63/0x90 [ 429.291313][T16763] madvise_pageout+0x29e/0x5b0 [ 429.291337][T16763] ? __pfx_madvise_pageout+0x10/0x10 [ 429.291376][T16763] madvise_vma_behavior+0x48b/0x2350 [ 429.291402][T16763] ? mas_prev+0xa4/0x100 [ 429.291428][T16763] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 429.291452][T16763] ? mas_walk+0x260/0x310 [ 429.291475][T16763] ? find_vma_prev+0xd8/0x150 [ 429.291494][T16763] ? __pfx_find_vma_prev+0x10/0x10 [ 429.291513][T16763] ? lock_acquire+0x1d1/0x380 [ 429.291545][T16763] madvise_walk_vmas+0x30e/0xc50 [ 429.291573][T16763] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 429.291598][T16763] ? __pfx_futex_wake_mark+0x10/0x10 [ 429.291629][T16763] ? lock_acquire+0x1d1/0x380 [ 429.291650][T16763] madvise_do_behavior+0x1ea/0x510 [ 429.291675][T16763] ? __pfx_madvise_do_behavior+0x10/0x10 [ 429.291699][T16763] ? down_read+0x13b/0x4c0 [ 429.291735][T16763] do_madvise+0x238/0x290 [ 429.291757][T16763] ? __pfx_do_madvise+0x10/0x10 [ 429.291778][T16763] ? do_futex+0x190/0x440 [ 429.291805][T16763] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 429.291846][T16763] __x64_sys_madvise+0xa9/0x110 [ 429.291868][T16763] ? lockdep_hardirqs_on+0x7d/0x110 [ 429.291890][T16763] do_syscall_64+0x123/0x790 [ 429.291915][T16763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.291935][T16763] RIP: 0033:0x7f755799e159 [ 429.291953][T16763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.291969][T16763] RSP: 002b:00007f7558936028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 429.291989][T16763] RAX: ffffffffffffffda RBX: 00007f7557c25fa0 RCX: 00007f755799e159 [ 429.292001][T16763] RDX: 0000000000000015 RSI: 7fffffffffffffff RDI: 0000200000000000 [ 429.292012][T16763] RBP: 00007f7557a3503b R08: 0000000000000000 R09: 0000000000000000 [ 429.292024][T16763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 429.292036][T16763] R13: 00007f7557c26038 R14: 00007f7557c25fa0 R15: 00007ffe997158a8 [ 429.292062][T16763] [ 429.548234][T16781] CIFS: Attempting to mount //127.0.0.1/share [ 429.548929][T16781] CIFS: VFS: Error connecting to socket. Aborting operation. [ 429.548957][T16781] CIFS: VFS: cifs_mount failed w/return code = -101 [ 430.504633][T16805] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4140'. [ 430.672205][T16808] FAULT_INJECTION: forcing a failure. [ 430.672205][T16808] name failslab, interval 1, probability 0, space 0, times 0 [ 430.672240][T16808] CPU: 1 UID: 0 PID: 16808 Comm: syz.6.4141 Tainted: G L syzkaller #0 PREEMPT(full) [ 430.672265][T16808] Tainted: [L]=SOFTLOCKUP [ 430.672272][T16808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 430.672284][T16808] Call Trace: [ 430.672291][T16808] [ 430.672300][T16808] dump_stack_lvl+0x100/0x190 [ 430.672335][T16808] should_fail_ex.cold+0x5/0xa [ 430.672365][T16808] should_failslab+0xc2/0x120 [ 430.672392][T16808] __kmalloc_noprof+0xfc/0x840 [ 430.672413][T16808] ? __vb2_queue_alloc+0x23e/0x1160 [ 430.672450][T16808] __vb2_queue_alloc+0x23e/0x1160 [ 430.672493][T16808] vb2_core_reqbufs+0x899/0xf30 [ 430.672517][T16808] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 430.672535][T16808] ? rcu_is_watching+0x13/0xc0 [ 430.672563][T16808] ? __video_do_ioctl+0x50f/0xdf0 [ 430.672588][T16808] ? avc_has_extended_perms+0x484/0x1080 [ 430.672615][T16808] vb2_reqbufs+0x1a3/0x1f0 [ 430.672645][T16808] ? __pfx_vb2_reqbufs+0x10/0x10 [ 430.672676][T16808] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 430.672703][T16808] v4l2_m2m_ioctl_reqbufs+0xdc/0x1e0 [ 430.672727][T16808] v4l_reqbufs+0x175/0x1d0 [ 430.672752][T16808] __video_do_ioctl+0xb2a/0xdf0 [ 430.672780][T16808] ? __might_fault+0xc5/0x140 [ 430.672808][T16808] ? __pfx___video_do_ioctl+0x10/0x10 [ 430.672843][T16808] video_usercopy+0x47a/0x1730 [ 430.672870][T16808] ? __pfx___video_do_ioctl+0x10/0x10 [ 430.672897][T16808] ? __pfx_video_usercopy+0x10/0x10 [ 430.672941][T16808] v4l2_ioctl+0x1bd/0x250 [ 430.672966][T16808] ? __pfx_v4l2_ioctl+0x10/0x10 [ 430.673000][T16808] __x64_sys_ioctl+0x18e/0x210 [ 430.673024][T16808] do_syscall_64+0x123/0x790 [ 430.673052][T16808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.673071][T16808] RIP: 0033:0x7fc9d799e159 [ 430.673088][T16808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 430.673106][T16808] RSP: 002b:00007fc9d887b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 430.673126][T16808] RAX: ffffffffffffffda RBX: 00007fc9d7c25fa0 RCX: 00007fc9d799e159 [ 430.673137][T16808] RDX: 0000200000000040 RSI: 00000000c0145608 RDI: 0000000000000004 [ 430.673147][T16808] RBP: 00007fc9d7a3503b R08: 0000000000000000 R09: 0000000000000000 [ 430.673157][T16808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 430.673168][T16808] R13: 00007fc9d7c26038 R14: 00007fc9d7c25fa0 R15: 00007ffd0b1b1248 [ 430.673191][T16808] [ 431.266849][ T31] kauditd_printk_skb: 311 callbacks suppressed [ 431.266869][ T31] audit: type=1800 audit(1788988661.587:1617): pid=16816 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.4145" name="file1" dev="overlay" ino=1172 res=0 errno=0 [ 431.571167][T16820] misc userio: Can't change port proto on an already running userio instance [ 433.536168][T16854] xt_hashlimit: size too large, truncated to 1048576 [ 434.561599][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 434.825995][T16882] FAULT_INJECTION: forcing a failure. [ 434.825995][T16882] name failslab, interval 1, probability 0, space 0, times 0 [ 434.826031][T16882] CPU: 1 UID: 0 PID: 16882 Comm: syz.7.4168 Tainted: G L syzkaller #0 PREEMPT(full) [ 434.826059][T16882] Tainted: [L]=SOFTLOCKUP [ 434.826068][T16882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 434.826081][T16882] Call Trace: [ 434.826089][T16882] [ 434.826097][T16882] dump_stack_lvl+0x100/0x190 [ 434.826135][T16882] should_fail_ex.cold+0x5/0xa [ 434.826165][T16882] should_failslab+0xc2/0x120 [ 434.826192][T16882] __kmalloc_cache_noprof+0x91/0x6d0 [ 434.826223][T16882] ? sget_fc+0xb15/0x1f20 [ 434.826247][T16882] sget_fc+0xb15/0x1f20 [ 434.826272][T16882] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 434.826295][T16882] ? __pfx_set_anon_super_fc+0x10/0x10 [ 434.826325][T16882] ? __pfx_sget_fc+0x10/0x10 [ 434.826347][T16882] ? rcu_is_watching+0x13/0xc0 [ 434.826373][T16882] ? cap_capable+0x107/0x430 [ 434.826404][T16882] ? __pfx_binderfs_fill_super+0x10/0x10 [ 434.826440][T16882] get_tree_nodev+0x28/0x190 [ 434.826462][T16882] vfs_get_tree+0x92/0x320 [ 434.826492][T16882] path_mount+0x7d0/0x24c0 [ 434.826526][T16882] ? __pfx_path_mount+0x10/0x10 [ 434.826553][T16882] ? lockdep_hardirqs_on+0x7d/0x110 [ 434.826584][T16882] ? putname+0xb1/0x110 [ 434.826608][T16882] ? kmem_cache_free+0x127/0x6c0 [ 434.826646][T16882] ? __x64_sys_mount+0x293/0x310 [ 434.826673][T16882] __x64_sys_mount+0x293/0x310 [ 434.826701][T16882] ? __pfx___x64_sys_mount+0x10/0x10 [ 434.826738][T16882] do_syscall_64+0x123/0x790 [ 434.826765][T16882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.826787][T16882] RIP: 0033:0x7f755799e159 [ 434.826804][T16882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 434.826821][T16882] RSP: 002b:00007f7558936028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 434.826841][T16882] RAX: ffffffffffffffda RBX: 00007f7557c25fa0 RCX: 00007f755799e159 [ 434.826854][T16882] RDX: 0000200000000040 RSI: 0000200000000080 RDI: 0000200000000300 [ 434.826867][T16882] RBP: 00007f7557a3503b R08: 0000000000000000 R09: 0000000000000000 [ 434.826878][T16882] R10: 0000000002200892 R11: 0000000000000246 R12: 0000000000000000 [ 434.826890][T16882] R13: 00007f7557c26038 R14: 00007f7557c25fa0 R15: 00007ffe997158a8 [ 434.826917][T16882] [ 435.705473][T16892] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 436.578614][ T5718] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 436.683989][ T5610] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 436.705474][ T5610] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 436.716285][ T5610] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 436.726475][ T5610] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 436.732989][ T5718] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 436.733847][ T5718] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 436.733869][ T5718] usb 7-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 436.733885][ T5718] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 436.733933][ T5718] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 436.735156][ T5718] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 436.735176][ T5718] usb 7-1: Product: syz [ 436.735189][ T5718] usb 7-1: Manufacturer: syz [ 436.748450][ T5610] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 436.788388][ T5718] cdc_wdm 7-1:1.0: skipping garbage [ 436.788408][ T5718] cdc_wdm 7-1:1.0: skipping garbage [ 436.788425][ T5718] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 437.045384][ T5718] usb 7-1: USB disconnect, device number 13 [ 437.403494][T16924] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4185'. [ 437.754048][ T5718] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 437.910161][ T5718] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 437.911012][ T5718] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 437.911036][ T5718] usb 7-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 437.911055][ T5718] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 437.911091][ T5718] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 437.912381][ T5718] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 437.912402][ T5718] usb 7-1: Product: syz [ 437.912416][ T5718] usb 7-1: Manufacturer: syz [ 437.924216][ T5718] cdc_wdm 7-1:1.0: skipping garbage [ 437.924233][ T5718] cdc_wdm 7-1:1.0: skipping garbage [ 437.924251][ T5718] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 438.083932][T16934] 9pnet: p9_errstr2errno: server reported unknown error 0x0 [ 438.802088][ T5616] Bluetooth: hci2: command tx timeout [ 438.835184][T16905] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.835271][T16905] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.835380][T16905] bridge_slave_0: entered allmulticast mode [ 438.855141][T16905] bridge_slave_0: entered promiscuous mode [ 438.873687][T16905] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.873767][T16905] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.877162][T16905] bridge_slave_1: entered allmulticast mode [ 438.900920][T16905] bridge_slave_1: entered promiscuous mode [ 438.961124][T16905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 438.966861][T16905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.012135][T16905] team0: Port device team_slave_0 added [ 439.014348][T16905] team0: Port device team_slave_1 added [ 439.117402][T16905] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 439.117419][T16905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.117440][T16905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 439.126751][T16905] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 439.126767][T16905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.126789][T16905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 439.396629][T16905] hsr_slave_0: entered promiscuous mode [ 439.399963][T16905] hsr_slave_1: entered promiscuous mode [ 439.401932][T16905] debugfs: 'hsr0' already exists in 'hsr' [ 439.401950][T16905] Cannot create hsr debugfs directory [ 439.559743][ T5695] usb 7-1: USB disconnect, device number 14 [ 440.153610][T16976] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4202'. [ 440.161304][T16976] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4202'. [ 440.173789][T16976] netlink: 'syz.6.4202': attribute type 32 has an invalid length. [ 440.173809][T16976] netlink: 500 bytes leftover after parsing attributes in process `syz.6.4202'. [ 440.300280][ T31] audit: type=1400 audit(1788988670.647:1618): avc: denied { read } for pid=16978 comm="syz.3.4203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 440.890722][ T5616] Bluetooth: hci2: command tx timeout [ 441.304946][ T31] audit: type=1400 audit(1788988671.647:1619): avc: denied { ioctl } for pid=16987 comm="syz.6.4207" path="/" dev="configfs" ino=1101 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 441.995101][T16905] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 442.079224][T16905] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 442.081557][T16905] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 442.125439][T16905] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 442.129111][T16905] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 442.212343][T16905] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 442.217190][T16905] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 442.302058][T16905] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 442.822257][T16905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 442.882773][T16905] 8021q: adding VLAN 0 to HW filter on device team0 [ 442.902268][T11935] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.902355][T11935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 442.937374][T11935] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.937459][T11935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 442.967888][ T5616] Bluetooth: hci2: command tx timeout [ 443.535773][T17039] xt_hashlimit: size too large, truncated to 1048576 [ 444.177241][T16905] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 444.209101][ T5616] Bluetooth: hci0: unexpected cc 0x0c05 length: 4 > 1 [ 444.209133][ T5616] Bluetooth: hci0: unexpected event for opcode 0x0c05 [ 445.037664][ T5616] Bluetooth: hci2: command tx timeout [ 445.191521][T16905] veth0_vlan: entered promiscuous mode [ 445.220328][T16905] veth1_vlan: entered promiscuous mode [ 445.242964][T17085] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4233'. [ 445.371618][T17087] binder: BINDER_SET_CONTEXT_MGR already set [ 445.371633][T17087] binder: 17086:17087 ioctl 4018620d 200000001000 returned -16 [ 445.380371][T16905] veth0_macvtap: entered promiscuous mode [ 445.404066][T16905] veth1_macvtap: entered promiscuous mode [ 445.491482][T16905] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 445.540211][T16905] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 445.566855][T17092] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4237'. [ 445.870352][T16861] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.870397][T16861] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.870427][T16861] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.870457][T16861] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.061508][T17100] FAULT_INJECTION: forcing a failure. [ 446.061508][T17100] name failslab, interval 1, probability 0, space 0, times 0 [ 446.061543][T17100] CPU: 0 UID: 0 PID: 17100 Comm: syz.7.4240 Tainted: G L syzkaller #0 PREEMPT(full) [ 446.061572][T17100] Tainted: [L]=SOFTLOCKUP [ 446.061580][T17100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 446.061593][T17100] Call Trace: [ 446.061599][T17100] [ 446.061609][T17100] dump_stack_lvl+0x100/0x190 [ 446.061643][T17100] should_fail_ex.cold+0x5/0xa [ 446.061671][T17100] should_failslab+0xc2/0x120 [ 446.061699][T17100] __kmalloc_cache_noprof+0x91/0x6d0 [ 446.061731][T17100] ? iommu_fwspec_init+0x2cb/0x4d0 [ 446.061762][T17100] iommu_fwspec_init+0x2cb/0x4d0 [ 446.061788][T17100] iommu_mock_device_add+0x46/0xb0 [ 446.061813][T17100] iommufd_test+0x3038/0x6600 [ 446.061835][T17100] ? __lock_acquire+0x5c0/0x1f40 [ 446.061857][T17100] ? __lock_acquire+0x5c0/0x1f40 [ 446.061878][T17100] ? __pfx_iommufd_test+0x10/0x10 [ 446.061898][T17100] ? tomoyo_path_number_perm+0x188/0x580 [ 446.061934][T17100] ? lock_acquire+0x1d1/0x380 [ 446.061954][T17100] ? __might_fault+0xc5/0x140 [ 446.061982][T17100] ? find_held_lock+0x2b/0x80 [ 446.062007][T17100] ? __might_fault+0xc5/0x140 [ 446.062042][T17100] iommufd_fops_ioctl+0x358/0x520 [ 446.062064][T17100] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 446.062082][T17100] ? __fget_files+0x34/0x3d0 [ 446.062117][T17100] ? selinux_file_ioctl+0x13b/0x290 [ 446.062137][T17100] ? selinux_file_ioctl+0xb6/0x290 [ 446.062160][T17100] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 446.062186][T17100] __x64_sys_ioctl+0x18e/0x210 [ 446.062209][T17100] do_syscall_64+0x123/0x790 [ 446.062239][T17100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.062261][T17100] RIP: 0033:0x7f755799e159 [ 446.062286][T17100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 446.062307][T17100] RSP: 002b:00007f7558936028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 446.062330][T17100] RAX: ffffffffffffffda RBX: 00007f7557c25fa0 RCX: 00007f755799e159 [ 446.062344][T17100] RDX: 0000200000000140 RSI: 0000000000003ba0 RDI: 0000000000000004 [ 446.062361][T17100] RBP: 00007f7557a3503b R08: 0000000000000000 R09: 0000000000000000 [ 446.062374][T17100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 446.062387][T17100] R13: 00007f7557c26038 R14: 00007f7557c25fa0 R15: 00007ffe997158a8 [ 446.062416][T17100] [ 446.123172][T14449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.123191][T14449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.510412][T16861] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.510435][T16861] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.601059][T17112] input: syz0 as /devices/virtual/input/input41 [ 447.398982][ T10] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 447.548810][ T10] usb 8-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 447.549701][ T10] usb 8-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 447.549729][ T10] usb 8-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 447.549749][ T10] usb 8-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 447.549774][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 447.549803][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.552219][ T10] usb 8-1: config 0 descriptor?? [ 447.848950][T17146] loop6: detected capacity change from 0 to 2640 [ 448.022776][ T10] input: HID 1532:011d as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:1532:011D.0029/input/input42 [ 448.175880][ T10] hid-rmi 0003:1532:011D.0029: input,hidraw0: USB HID v0.00 Joystick [HID 1532:011d] on usb-dummy_hcd.7-1/input0 [ 448.229285][ T5710] usb 8-1: USB disconnect, device number 2 [ 448.717880][ T5616] Bluetooth: hci4: command 0x0406 tx timeout [ 448.718023][ T5796] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 448.718038][ T5796] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 450.247893][ T31] audit: type=1400 audit(1788988680.587:1620): avc: denied { unlink } for pid=11650 comm="syz-executor" name="ublkc9" dev="devtmpfs" ino=3925 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 450.712794][T17226] Invalid option length (1048488) for dns_resolver key [ 451.058783][ T5616] Bluetooth: hci0: command 0x0c1a tx timeout [ 451.058849][ T5796] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 451.058862][ T5796] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 451.265874][T17236] FAULT_INJECTION: forcing a failure. [ 451.265874][T17236] name failslab, interval 1, probability 0, space 0, times 0 [ 451.265913][T17236] CPU: 0 UID: 0 PID: 17236 Comm: syz.8.4288 Tainted: G L syzkaller #0 PREEMPT(full) [ 451.265942][T17236] Tainted: [L]=SOFTLOCKUP [ 451.265950][T17236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 451.265963][T17236] Call Trace: [ 451.265971][T17236] [ 451.265979][T17236] dump_stack_lvl+0x100/0x190 [ 451.266014][T17236] should_fail_ex.cold+0x5/0xa [ 451.266043][T17236] should_failslab+0xc2/0x120 [ 451.266073][T17236] __kmalloc_noprof+0xfc/0x840 [ 451.266094][T17236] ? asymmetric_key_generate_id+0x7e/0x180 [ 451.266127][T17236] asymmetric_key_generate_id+0x7e/0x180 [ 451.266157][T17236] x509_cert_parse+0x5c1/0x910 [ 451.266191][T17236] x509_key_preparse+0x65/0x9c0 [ 451.266225][T17236] asymmetric_key_preparse+0xce/0x1d0 [ 451.266254][T17236] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 451.266284][T17236] __key_create_or_update+0x463/0xe30 [ 451.266314][T17236] ? __pfx___key_create_or_update+0x10/0x10 [ 451.266340][T17236] ? lookup_user_key+0x3f3/0x1300 [ 451.266376][T17236] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 451.266418][T17236] key_create_or_update+0x42/0x60 [ 451.266446][T17236] __do_sys_add_key+0x2e8/0x460 [ 451.266473][T17236] ? __x64_sys_openat+0x12d/0x210 [ 451.266501][T17236] ? __pfx___do_sys_add_key+0x10/0x10 [ 451.266539][T17236] do_syscall_64+0x123/0x790 [ 451.266568][T17236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.266588][T17236] RIP: 0033:0x7faf6559e159 [ 451.266606][T17236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 451.266628][T17236] RSP: 002b:00007faf66380028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 451.266648][T17236] RAX: ffffffffffffffda RBX: 00007faf65825fa0 RCX: 00007faf6559e159 [ 451.266661][T17236] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 451.266673][T17236] RBP: 00007faf6563503b R08: ffffffffffffffff R09: 0000000000000000 [ 451.266685][T17236] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 451.266697][T17236] R13: 00007faf65826038 R14: 00007faf65825fa0 R15: 00007ffc0d457f98 [ 451.266724][T17236] [ 453.056819][T17264] overlayfs: failed to resolve './cgroup': -2 [ 453.096244][T17266] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4300'. [ 453.437376][ T5616] Bluetooth: hci6: command 0x0c1a tx timeout [ 453.437467][ T5796] Bluetooth: hci6: Opcode 0x0c1a failed: -110 [ 453.437483][ T5796] Bluetooth: hci6: Error when powering off device on rfkill (-110) [ 455.910981][T17327] netlink: 'syz.6.4326': attribute type 3 has an invalid length. [ 455.911005][T17327] netlink: 666 bytes leftover after parsing attributes in process `syz.6.4326'. [ 455.997680][ T5616] Bluetooth: hci2: command 0x0c1a tx timeout [ 455.997800][ T5796] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 455.997816][ T5796] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 456.288819][T17335] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4328'. [ 456.391518][T17335] bridge_slave_1: left allmulticast mode [ 456.391546][T17335] bridge_slave_1: left promiscuous mode [ 456.391736][T17335] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.415447][T17335] bridge_slave_0: left allmulticast mode [ 456.415473][T17335] bridge_slave_0: left promiscuous mode [ 456.415654][T17335] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.476700][T17339] FAULT_INJECTION: forcing a failure. [ 456.476700][T17339] name fail_futex, interval 1, probability 0, space 0, times 1 [ 456.476737][T17339] CPU: 0 UID: 0 PID: 17339 Comm: syz.7.4330 Tainted: G L syzkaller #0 PREEMPT(full) [ 456.476766][T17339] Tainted: [L]=SOFTLOCKUP [ 456.476774][T17339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 456.476785][T17339] Call Trace: [ 456.476793][T17339] [ 456.476801][T17339] dump_stack_lvl+0x100/0x190 [ 456.476832][T17339] should_fail_ex.cold+0x5/0xa [ 456.476861][T17339] get_futex_key+0x1d0/0x14f0 [ 456.476892][T17339] ? __pfx_get_futex_key+0x10/0x10 [ 456.476926][T17339] futex_wake+0xf4/0x5e0 [ 456.476960][T17339] ? __pfx_futex_wake+0x10/0x10 [ 456.476987][T17339] ? kasan_quarantine_put+0x104/0x240 [ 456.477012][T17339] ? putname+0xb1/0x110 [ 456.477036][T17339] ? kmem_cache_free+0x127/0x6c0 [ 456.477070][T17339] do_futex+0x2b2/0x440 [ 456.477096][T17339] ? __pfx_do_futex+0x10/0x10 [ 456.477130][T17339] ? __pfx_do_sys_openat2+0x10/0x10 [ 456.477160][T17339] ? __pfx_do_set_mempolicy+0x10/0x10 [ 456.477190][T17339] __x64_sys_futex+0x34f/0x4d0 [ 456.477219][T17339] ? __x64_sys_openat+0x12d/0x210 [ 456.477247][T17339] ? __pfx___x64_sys_futex+0x10/0x10 [ 456.477281][T17339] do_syscall_64+0x123/0x790 [ 456.477307][T17339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.477325][T17339] RIP: 0033:0x7f755799e159 [ 456.477340][T17339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 456.477357][T17339] RSP: 002b:00007f75589360e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 456.477377][T17339] RAX: ffffffffffffffda RBX: 00007f7557c25fa8 RCX: 00007f755799e159 [ 456.477389][T17339] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7557c25fac [ 456.477400][T17339] RBP: 00007f7557c25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 456.477412][T17339] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 456.477422][T17339] R13: 00007f7557c26038 R14: 00007ffe997157c0 R15: 00007ffe997158a8 [ 456.477446][T17339] [ 457.484204][ T5610] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 457.500739][ T5610] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 457.503204][ T5610] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 457.504316][ T5610] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 457.521685][ T5610] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 457.549627][ T4673] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 457.549659][ T4673] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.590524][ T5616] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 457.590988][ T5616] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 457.598576][ T5616] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 457.623389][ T5616] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 457.636764][ T5616] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 458.120753][ T4673] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 458.120787][ T4673] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.304129][ T4673] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 458.304163][ T4673] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.571711][ T4673] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 458.571746][ T4673] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.677554][ T5616] Bluetooth: hci3: command tx timeout [ 460.601821][ T4673] bond2 (unregistering): (slave ipip0): Releasing backup interface [ 460.601850][ T4673] ipip0 (unregistering): left promiscuous mode [ 460.753980][ T4673] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 460.771152][ T4673] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 460.775845][ T4673] bond0 (unregistering): (slave team0): Releasing backup interface [ 460.795886][ T4673] bond0 (unregistering): Released all slaves [ 460.812753][ T4673] bond1 (unregistering): Released all slaves [ 460.850511][ T4673] bond2 (unregistering): Released all slaves [ 460.894661][ T4673] bond3 (unregistering): Released all slaves [ 461.139517][T17436] FAULT_INJECTION: forcing a failure. [ 461.139517][T17436] name failslab, interval 1, probability 0, space 0, times 0 [ 461.139553][T17436] CPU: 1 UID: 0 PID: 17436 Comm: syz.7.4362 Tainted: G L syzkaller #0 PREEMPT(full) [ 461.139581][T17436] Tainted: [L]=SOFTLOCKUP [ 461.139589][T17436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 461.139603][T17436] Call Trace: [ 461.139610][T17436] [ 461.139619][T17436] dump_stack_lvl+0x100/0x190 [ 461.139654][T17436] should_fail_ex.cold+0x5/0xa [ 461.139682][T17436] should_failslab+0xc2/0x120 [ 461.139708][T17436] __kmalloc_noprof+0xfc/0x840 [ 461.139730][T17436] ? __list_lru_init+0xd9/0x4b0 [ 461.139760][T17436] __list_lru_init+0xd9/0x4b0 [ 461.139788][T17436] sget_fc+0xa76/0x1f20 [ 461.139810][T17436] ? __pfx_kernfs_test_super+0x10/0x10 [ 461.139836][T17436] ? __pfx_kernfs_set_super+0x10/0x10 [ 461.139860][T17436] ? __pfx_sget_fc+0x10/0x10 [ 461.139877][T17436] ? kasan_save_track+0x14/0x30 [ 461.139900][T17436] ? __kasan_kmalloc+0xaa/0xb0 [ 461.139922][T17436] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 461.139953][T17436] ? kernfs_get_tree+0xcb/0xbb0 [ 461.139981][T17436] kernfs_get_tree+0x1eb/0xbb0 [ 461.140007][T17436] ? rcu_is_watching+0x13/0xc0 [ 461.140041][T17436] ? __pfx_kernfs_get_tree+0x10/0x10 [ 461.140068][T17436] ? bpf_lsm_capable+0x9/0x10 [ 461.140097][T17436] ? security_capable+0x80/0x260 [ 461.140131][T17436] vfs_get_tree+0x92/0x320 [ 461.140162][T17436] path_mount+0x7d0/0x24c0 [ 461.140194][T17436] ? __pfx_path_mount+0x10/0x10 [ 461.140220][T17436] ? lockdep_hardirqs_on+0x7d/0x110 [ 461.140246][T17436] ? putname+0xb1/0x110 [ 461.140266][T17436] ? kmem_cache_free+0x127/0x6c0 [ 461.140301][T17436] ? __x64_sys_mount+0x293/0x310 [ 461.140330][T17436] __x64_sys_mount+0x293/0x310 [ 461.140360][T17436] ? __pfx___x64_sys_mount+0x10/0x10 [ 461.140397][T17436] do_syscall_64+0x123/0x790 [ 461.140426][T17436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.140446][T17436] RIP: 0033:0x7f755799e159 [ 461.140463][T17436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 461.140483][T17436] RSP: 002b:00007f7558936028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 461.140503][T17436] RAX: ffffffffffffffda RBX: 00007f7557c25fa0 RCX: 00007f755799e159 [ 461.140517][T17436] RDX: 0000200000000600 RSI: 0000200000000400 RDI: 0000000000000000 [ 461.140529][T17436] RBP: 00007f7557a3503b R08: 0000000000000000 R09: 0000000000000000 [ 461.140541][T17436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 461.140552][T17436] R13: 00007f7557c26038 R14: 00007f7557c25fa0 R15: 00007ffe997158a8 [ 461.140580][T17436] [ 461.686388][T17350] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.686469][T17350] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.686604][T17350] bridge_slave_0: entered allmulticast mode [ 461.692079][T17350] bridge_slave_0: entered promiscuous mode [ 461.705641][T17350] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.705710][T17350] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.705799][T17350] bridge_slave_1: entered allmulticast mode [ 461.715874][T17350] bridge_slave_1: entered promiscuous mode [ 461.762917][ T5610] Bluetooth: hci3: command tx timeout [ 461.982025][T17350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 461.997492][ T5616] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 462.002248][T17350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.215157][ T4673] hsr_slave_0: left promiscuous mode [ 462.217015][ T4673] hsr_slave_1: left promiscuous mode [ 462.251621][ T4673] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 462.251647][ T4673] batadv0: mtu less than device minimum [ 462.252665][ T4673] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 462.253725][ T4673] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 462.254786][ T4673] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 462.255846][ T4673] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 462.256912][ T4673] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 462.260280][ T4673] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 462.261244][ T4673] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 462.262240][ T4673] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 462.263289][ T4673] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 462.407151][ T4673] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 462.422897][ T4673] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 462.482094][ T4673] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 462.482804][ T4673] batman_adv: batadv0: Interface deactivated: dummy0 [ 462.482821][ T4673] batman_adv: batadv0: Removing interface: dummy0 [ 462.486096][ T4673] veth1_macvtap: left promiscuous mode [ 462.486128][ T4673] veth0_macvtap: left promiscuous mode [ 462.486314][ T4673] veth1_vlan: left promiscuous mode [ 462.486383][ T4673] veth0_vlan: left promiscuous mode [ 463.115074][ T4673] team0 (unregistering): Port device team_slave_1 removed [ 463.132050][ T4673] team0 (unregistering): Port device team_slave_0 removed [ 463.401673][ T4673] smc: removing net device lo with user defined pnetid SYZ0 [ 463.407006][T17350] team0: Port device team_slave_0 added [ 463.415109][T17350] team0: Port device team_slave_1 added [ 463.491934][T17350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.491954][T17350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.491976][T17350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.496940][T17350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.496957][T17350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.496979][T17350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.608785][T17350] hsr_slave_0: entered promiscuous mode [ 463.609568][T17350] hsr_slave_1: entered promiscuous mode [ 463.611590][T17350] debugfs: 'hsr0' already exists in 'hsr' [ 463.611608][T17350] Cannot create hsr debugfs directory [ 463.840530][ T4673] IPVS: stop unused estimator thread 0... [ 463.843556][ T5616] Bluetooth: hci3: command tx timeout [ 464.287437][T17350] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 464.290360][T17350] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 464.297782][T17350] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 464.306537][T17350] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 464.307144][T17350] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 464.315432][T17350] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 464.316066][T17350] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 464.337606][T17350] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 464.506667][T17350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 464.528974][T17350] 8021q: adding VLAN 0 to HW filter on device team0 [ 464.540072][T12584] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.540148][T12584] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.548252][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.548329][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.302772][T17350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 465.751332][T17350] veth0_vlan: entered promiscuous mode [ 465.757225][T17350] veth1_vlan: entered promiscuous mode [ 465.801786][T17350] veth0_macvtap: entered promiscuous mode [ 465.805620][T17350] veth1_macvtap: entered promiscuous mode [ 465.836043][T17350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 465.856274][T17350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 465.878615][T11938] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.881781][ T50] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.881849][ T50] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.881880][ T50] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.924429][ T5616] Bluetooth: hci3: command tx timeout [ 466.101732][T16861] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.101754][T16861] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.131473][T16861] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.131495][T16861] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.507187][T17503] FAULT_INJECTION: forcing a failure. [ 467.507187][T17503] name failslab, interval 1, probability 0, space 0, times 0 [ 467.507224][T17503] CPU: 0 UID: 0 PID: 17503 Comm: syz.3.4371 Tainted: G L syzkaller #0 PREEMPT(full) [ 467.507254][T17503] Tainted: [L]=SOFTLOCKUP [ 467.507265][T17503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 467.507277][T17503] Call Trace: [ 467.507284][T17503] [ 467.507292][T17503] dump_stack_lvl+0x100/0x190 [ 467.507326][T17503] should_fail_ex.cold+0x5/0xa [ 467.507353][T17503] should_failslab+0xc2/0x120 [ 467.507380][T17503] __kmalloc_noprof+0xfc/0x840 [ 467.507425][T17503] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 467.507454][T17503] ? mpi_alloc_limb_space+0x31/0x60 [ 467.507479][T17503] mpi_alloc_limb_space+0x31/0x60 [ 467.507498][T17503] mpi_alloc+0x199/0x230 [ 467.507517][T17503] mpi_read_raw_data+0xf5/0x430 [ 467.507548][T17503] dh_set_secret+0x151/0x260 [ 467.507568][T17503] ? __pfx_dh_set_secret+0x10/0x10 [ 467.507592][T17503] ? crypto_create_tfm_node+0x1b4/0x3b0 [ 467.507620][T17503] ? crypto_alloc_tfm_node+0x126/0x260 [ 467.507648][T17503] __keyctl_dh_compute+0x4dd/0x10d0 [ 467.507679][T17503] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 467.507705][T17503] ? futex_wait+0x11e/0x370 [ 467.507736][T17503] ? __pfx_futex_wait+0x10/0x10 [ 467.507783][T17503] ? __pfx_do_futex+0x10/0x10 [ 467.507813][T17503] keyctl_dh_compute+0xd9/0x140 [ 467.507838][T17503] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 467.507861][T17503] ? __x64_sys_futex+0x34f/0x4d0 [ 467.507889][T17503] ? xfd_validate_state+0x129/0x190 [ 467.507915][T17503] __do_sys_keyctl+0x464/0x5a0 [ 467.507943][T17503] do_syscall_64+0x123/0x790 [ 467.507971][T17503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.507993][T17503] RIP: 0033:0x7f2ff6d9e159 [ 467.508010][T17503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 467.508028][T17503] RSP: 002b:00007f2ff7cce028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 467.508048][T17503] RAX: ffffffffffffffda RBX: 00007f2ff7025fa0 RCX: 00007f2ff6d9e159 [ 467.508062][T17503] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000017 [ 467.508076][T17503] RBP: 00007f2ff6e3503b R08: 0000000000000000 R09: 0000000000000000 [ 467.508089][T17503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 467.508100][T17503] R13: 00007f2ff7026038 R14: 00007f2ff7025fa0 R15: 00007ffffbb8c4d8 [ 467.508125][T17503] [ 467.837715][ T32] INFO: task kworker/0:5:5702 blocked for more than 143 seconds. [ 467.837743][ T32] Tainted: G L syzkaller #0 [ 467.837754][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 467.837762][ T32] task:kworker/0:5 state:D stack:21464 pid:5702 tgid:5702 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 467.837816][ T32] Workqueue: events_freezable mmc_rescan [ 467.837847][ T32] Call Trace: [ 467.837853][ T32] [ 467.837864][ T32] __schedule+0x1259/0x6920 [ 467.837887][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 467.837918][ T32] ? kthread_data+0x53/0xc0 [ 467.837943][ T32] ? __pfx___schedule+0x10/0x10 [ 467.837963][ T32] ? find_held_lock+0x2b/0x80 [ 467.837989][ T32] ? schedule+0x225/0x2c0 [ 467.838014][ T32] schedule+0xdd/0x2c0 [ 467.838036][ T32] schedule_timeout+0x1b2/0x280 [ 467.838057][ T32] ? __pfx_schedule_timeout+0x10/0x10 [ 467.838094][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 467.838125][ T32] __wait_for_common+0x2e7/0x4c0 [ 467.838147][ T32] ? __pfx_schedule_timeout+0x10/0x10 [ 467.838170][ T32] ? __pfx___wait_for_common+0x10/0x10 [ 467.838193][ T32] ? led_trigger_write+0x2f0/0x300 [ 467.838228][ T32] mmc_wait_for_req_done+0xcd/0x3d0 [ 467.838260][ T32] mmc_wait_for_req+0x207/0x2c0 [ 467.838287][ T32] mmc_wait_for_cmd+0x154/0x200 [ 467.838311][ T32] ? __pfx_mmc_wait_for_cmd+0x10/0x10 [ 467.838351][ T32] ? __pfx_mmc_wait_done+0x10/0x10 [ 467.838380][ T32] ? rpm_resume+0x7eb/0x1320 [ 467.838408][ T32] mmc_io_rw_direct_host+0x126/0x330 [ 467.838436][ T32] ? __pfx_mmc_io_rw_direct_host+0x10/0x10 [ 467.838470][ T32] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 467.838492][ T32] ? __pm_runtime_resume+0xc3/0x170 [ 467.838514][ T32] ? __mmc_claim_host+0x2e2/0x5f0 [ 467.838541][ T32] sdio_reset+0x92/0x240 [ 467.838566][ T32] ? __pfx_sdio_reset+0x10/0x10 [ 467.838590][ T32] ? mmc_sw_reset+0x70/0xd0 [ 467.838614][ T32] ? __pfx_default_wake_function+0x10/0x10 [ 467.838641][ T32] ? mmc_attach_sd_uhs2+0x2d0/0x590 [ 467.838669][ T32] mmc_rescan+0xba9/0x11c0 [ 467.838709][ T32] process_one_work+0xac7/0x1b10 [ 467.838761][ T32] ? __pfx_process_one_work+0x10/0x10 [ 467.838790][ T32] ? lock_acquire+0x1d1/0x380 [ 467.838817][ T32] ? __pfx_mmc_rescan+0x10/0x10 [ 467.838847][ T32] worker_thread+0x5ef/0xe50 [ 467.838882][ T32] ? __pfx_worker_thread+0x10/0x10 [ 467.838911][ T32] ? kthread+0x13a/0x450 [ 467.838933][ T32] ? __pfx_worker_thread+0x10/0x10 [ 467.838959][ T32] kthread+0x373/0x450 [ 467.838984][ T32] ? __pfx_kthread+0x10/0x10 [ 467.839011][ T32] ret_from_fork+0x730/0xd60 [ 467.839050][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 467.839077][ T32] ? __switch_to+0x800/0x10f0 [ 467.839100][ T32] ? __pfx_kthread+0x10/0x10 [ 467.839125][ T32] ret_from_fork_asm+0x1a/0x30 [ 467.839157][ T32] [ 467.839169][ T32] INFO: task kworker/0:6:5717 blocked for more than 143 seconds. [ 467.839183][ T32] Tainted: G L syzkaller #0 [ 467.839193][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 467.839200][ T32] task:kworker/0:6 state:D stack:22592 pid:5717 tgid:5717 ppid:2 task_flags:0x4288060 flags:0x00080000 [ 467.839250][ T32] Workqueue: usb_hub_wq hub_event [ 467.839271][ T32] Call Trace: [ 467.839277][ T32] [ 467.839286][ T32] __schedule+0x1259/0x6920 [ 467.839314][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 467.839344][ T32] ? __pfx___schedule+0x10/0x10 [ 467.839362][ T32] ? find_held_lock+0x2b/0x80 [ 467.839386][ T32] ? schedule+0x225/0x2c0 [ 467.839411][ T32] schedule+0xdd/0x2c0 [ 467.839432][ T32] schedule_timeout+0x1b2/0x280 [ 467.839450][ T32] ? __pfx_schedule_timeout+0x10/0x10 [ 467.839477][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 467.839506][ T32] __wait_for_common+0x2e7/0x4c0 [ 467.839529][ T32] ? __pfx_schedule_timeout+0x10/0x10 [ 467.839553][ T32] ? __pfx___wait_for_common+0x10/0x10 [ 467.839574][ T32] ? __flush_work+0x4ca/0xcb0 [ 467.839603][ T32] ? find_held_lock+0x2b/0x80 [ 467.839627][ T32] ? __flush_work+0x928/0xcb0 [ 467.839655][ T32] ? __flush_work+0x928/0xcb0 [ 467.839685][ T32] ? __flush_work+0x4ca/0xcb0 [ 467.839714][ T32] __flush_work+0x7c7/0xcb0 [ 467.839743][ T32] ? __timer_delete+0xb1/0x1b0 [ 467.839763][ T32] ? __pfx___flush_work+0x10/0x10 [ 467.839792][ T32] ? __pfx_wq_barrier_func+0x10/0x10 [ 467.839827][ T32] ? __pfx___might_resched+0x10/0x10 [ 467.839845][ T32] ? _raw_spin_unlock_irq+0x2e/0x50 [ 467.839865][ T32] ? usb_hcd_flush_endpoint+0x359/0x400 [ 467.839898][ T32] cancel_delayed_work_sync+0xd1/0xf0 [ 467.839920][ T32] mmc_stop_host+0xe9/0x400 [ 467.839950][ T32] mmc_remove_host+0x15/0x60 [ 467.839970][ T32] vub300_disconnect+0x12d/0x170 [ 467.840001][ T32] usb_unbind_interface+0x1dd/0x9e0 [ 467.840034][ T32] ? __pfx_usb_unbind_interface+0x10/0x10 [ 467.840062][ T32] device_remove+0x12a/0x180 [ 467.840089][ T32] device_release_driver_internal+0x44e/0x620 [ 467.840117][ T32] bus_remove_device+0x2bc/0x560 [ 467.840138][ T32] ? __pfx_bus_remove_device+0x10/0x10 [ 467.840155][ T32] ? __pfx_device_remove_attrs+0x10/0x10 [ 467.840181][ T32] device_del+0x376/0x9b0 [ 467.840205][ T32] ? __pfx_device_del+0x10/0x10 [ 467.840229][ T32] ? kobject_put+0xb9/0x640 [ 467.840264][ T32] usb_disable_device+0x367/0x810 [ 467.840296][ T32] usb_disconnect+0x2e2/0x9a0 [ 467.840325][ T32] hub_event+0x1bb1/0x4420 [ 467.840367][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 467.840391][ T32] ? __pfx_hub_event+0x10/0x10 [ 467.840414][ T32] ? check_irq_usage+0x570/0x8b0 [ 467.840437][ T32] ? lock_acquire+0x1d1/0x380 [ 467.840456][ T32] ? process_one_work+0xa2c/0x1b10 [ 467.840486][ T32] ? process_one_work+0x906/0x1b10 [ 467.840514][ T32] ? process_one_work+0x906/0x1b10 [ 467.840546][ T32] process_one_work+0xac7/0x1b10 [ 467.840581][ T32] ? __pfx_process_one_work+0x10/0x10 [ 467.840606][ T32] ? lock_acquire+0x1d1/0x380 [ 467.840631][ T32] ? __pfx_hub_event+0x10/0x10 [ 467.840653][ T32] worker_thread+0x5ef/0xe50 [ 467.840681][ T32] ? __pfx_worker_thread+0x10/0x10 [ 467.840706][ T32] ? kthread+0x13a/0x450 [ 467.840726][ T32] ? __pfx_worker_thread+0x10/0x10 [ 467.840749][ T32] kthread+0x373/0x450 [ 467.840770][ T32] ? __pfx_kthread+0x10/0x10 [ 467.840795][ T32] ret_from_fork+0x730/0xd60 [ 467.840814][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 467.840836][ T32] ? __switch_to+0x800/0x10f0 [ 467.840860][ T32] ? __pfx_kthread+0x10/0x10 [ 467.840884][ T32] ret_from_fork_asm+0x1a/0x30 [ 467.840916][ T32] [ 467.840980][ T32] [ 467.840980][ T32] Showing all locks held in the system: [ 467.840992][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 467.841006][ T32] #0: ffffffff8edec420 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 467.841093][ T32] locks held by udevd/4972: 1, last CPU#0: [ 467.841105][ T32] #0: ffffffff8edec420 (rcu_read_lock){....}-{1:3}, at: tomoyo_path_perm+0x262/0x460 [ 467.841156][ T32] locks held by syz-executor/5601: 4, last CPU#0: [ 467.841168][ T32] #0: ffffffff8ef3d8b0 (dup_mmap_sem){++++}-{0:0}, at: copy_process+0x4806/0x8370 [ 467.841207][ T32] #1: ffff8880260c69b8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x127/0x2370 [ 467.841252][ T32] #2: ffff888076721078 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x1c9/0x2370 [ 467.841298][ T32] #3: ffffffff8edec420 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 467.841345][ T32] locks held by kworker/0:5/5702: 2, on CPU#0: [ 467.841358][ T32] #0: ffff88801c05a140 ((wq_completion)events_freezable){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 467.841410][ T32] #1: ffffc900020afd08 ((work_completion)(&(&host->detect)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 467.841462][ T32] locks held by kworker/0:6/5717: 5, on CPU#0: [ 467.841475][ T32] #0: ffff888023eb8d40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 467.841526][ T32] #1: ffffc900043f7d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 467.841574][ T32] #2: ffff88802ac381d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420 [ 467.841619][ T32] #3: ffff888026ce71d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0x10a/0x9a0 [ 467.841665][ T32] #4: ffff88807bf161a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620 [ 467.841713][ T32] locks held by kworker/0:8/5731: 3, on CPU#0: [ 467.841726][ T32] #0: ffff88801c05b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 467.841777][ T32] #1: ffffc900044d7d08 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 467.841829][ T32] #2: ffff88802b3b8250 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1b8/0x6330 [ 467.841885][ T32] locks held by syz-executor/13771: 1, last CPU#0: [ 467.841899][ T32] #0: ffff8880748c4180 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 467.841954][ T32] locks held by syz-executor/16443: 2, last CPU#0: [ 467.841967][ T32] #0: ffff888033c9cce0 (&xt[i].mutex){+.+.}-{4:4}, at: xt_find_table_lock+0x5a/0x520 [ 467.842014][ T32] #1: ffffffff8edec420 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 467.842064][ T32] locks held by syz-executor/16905: 4, last CPU#0: [ 467.842086][ T32] #0: ffffffff8ef3d8b0 (dup_mmap_sem){++++}-{0:0}, at: copy_process+0x4806/0x8370 [ 467.842128][ T32] #1: ffff88802756d038 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x127/0x2370 [ 467.842173][ T32] #2: ffff888076721d38 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x1c9/0x2370 [ 467.842220][ T32] #3: ffffffff8edec420 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 467.842264][ T32] locks held by syz.9.4366/17491: 2, last CPU#0: [ 467.842277][ T32] #0: ffff8880565e8800 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 467.842328][ T32] #1: ffff888034751f60 (sk_lock-AF_TIPC){+.+.}-{0:0}, at: tipc_release+0x67/0x1650 [ 467.842373][ T32] [ 467.842378][ T32] ============================================= [ 467.842378][ T32] [ 467.842386][ T32] NMI backtrace for cpu 1 [ 467.842400][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 467.842425][ T32] Tainted: [L]=SOFTLOCKUP [ 467.842432][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 467.842443][ T32] Call Trace: [ 467.842450][ T32] [ 467.842457][ T32] dump_stack_lvl+0x100/0x190 [ 467.842484][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 467.842513][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 467.842534][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 467.842557][ T32] sys_info+0x141/0x190 [ 467.842580][ T32] watchdog+0xcb1/0x1030 [ 467.842603][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 467.842624][ T32] ? __pfx_watchdog+0x10/0x10 [ 467.842645][ T32] ? __kthread_parkme+0x18f/0x230 [ 467.842670][ T32] ? kthread+0x13a/0x450 [ 467.842693][ T32] ? __pfx_watchdog+0x10/0x10 [ 467.842712][ T32] kthread+0x373/0x450 [ 467.842736][ T32] ? __pfx_kthread+0x10/0x10 [ 467.842763][ T32] ret_from_fork+0x730/0xd60 [ 467.842784][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 467.842806][ T32] ? __switch_to+0x800/0x10f0 [ 467.842832][ T32] ? __pfx_kthread+0x10/0x10 [ 467.842859][ T32] ret_from_fork_asm+0x1a/0x30 [ 467.842891][ T32] [ 467.842898][ T32] Sending NMI from CPU 1 to CPUs 0: [ 467.842922][ C0] NMI backtrace for cpu 0 [ 467.842935][ C0] CPU: 0 UID: 0 PID: 5601 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 467.842955][ C0] Tainted: [L]=SOFTLOCKUP [ 467.842961][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 467.842969][ C0] RIP: 0010:rcu_is_watching+0x82/0xc0 [ 467.842990][ C0] Code: da 48 c1 ea 03 0f b6 14 02 48 89 d8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 25 8b 03 c1 e8 02 83 e0 01 65 48 ff 0d 56 97 9c 12 <74> 07 5b 5d e9 05 ee e3 09 e8 90 c4 86 ff 5b 5d c3 cc cc cc cc 48 [ 467.843004][ C0] RSP: 0018:ffffc900041273d8 EFLAGS: 00000282 [ 467.843016][ C0] RAX: 0000000000000001 RBX: ffff8880b8433de8 RCX: 0000000000000002 [ 467.843025][ C0] RDX: 0000000000000000 RSI: ffffffff8c622700 RDI: ffffffff8e6b9920 [ 467.843035][ C0] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 467.843044][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88801f53f420 [ 467.843053][ C0] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 467.843099][ C0] FS: 000055557785f500(0000) GS:ffff888123b5a000(0000) knlGS:0000000000000000 [ 467.843114][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 467.843124][ C0] CR2: 00007f7557bef2f8 CR3: 0000000061339000 CR4: 00000000003526f0 [ 467.843133][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000460 [ 467.843142][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 467.843151][ C0] Call Trace: [ 467.843156][ C0] [ 467.843162][ C0] page_table_check_set+0x498/0x580 [ 467.843182][ C0] __page_table_check_ptes_set+0x2c0/0x530 [ 467.843202][ C0] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 467.843223][ C0] copy_page_range+0x21c4/0x57c0 [ 467.843254][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 467.843272][ C0] ? mas_wr_store_entry+0xa4/0x1d50 [ 467.843295][ C0] ? lock_acquire+0x1d1/0x380 [ 467.843309][ C0] ? dup_mmap+0xd0a/0x2370 [ 467.843328][ C0] ? find_held_lock+0x2b/0x80 [ 467.843346][ C0] ? dup_mmap+0xe66/0x2370 [ 467.843361][ C0] ? dup_mmap+0xe66/0x2370 [ 467.843377][ C0] ? down_write+0x146/0x1f0 [ 467.843397][ C0] ? up_write+0x2dc/0x5b0 [ 467.843414][ C0] dup_mmap+0x1230/0x2370 [ 467.843434][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 467.843450][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 467.843466][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 467.843484][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 467.843502][ C0] ? lock_acquire+0x1d1/0x380 [ 467.843516][ C0] ? copy_process+0x4806/0x8370 [ 467.843535][ C0] copy_process+0x4811/0x8370 [ 467.843556][ C0] ? __pfx_copy_process+0x10/0x10 [ 467.843578][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 467.843597][ C0] kernel_clone+0x176/0x9d0 [ 467.843614][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 467.843632][ C0] ? __might_fault+0xc5/0x140 [ 467.843651][ C0] ? find_held_lock+0x2b/0x80 [ 467.843669][ C0] ? __might_fault+0xc5/0x140 [ 467.843688][ C0] __do_sys_clone+0xd9/0x120 [ 467.843703][ C0] ? __pfx___do_sys_clone+0x10/0x10 [ 467.843727][ C0] do_syscall_64+0x123/0x790 [ 467.843745][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.843760][ C0] RIP: 0033:0x7f2ff6dc6bd2 [ 467.843772][ C0] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 467.843785][ C0] RSP: 002b:00007ffffbb8c6f0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 467.843799][ C0] RAX: ffffffffffffffda RBX: 00007ffffbb8c6f0 RCX: 00007f2ff6dc6bd2 [ 467.843809][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 467.843818][ C0] RBP: 00007ffffbb8c87c R08: 0000000000000000 R09: 0000000000000001 [ 467.843827][ C0] R10: 000055557785f7d0 R11: 0000000000000246 R12: 0000000000000001 [ 467.843836][ C0] R13: 00000000000927c0 R14: 0000000000072241 R15: 00007ffffbb8c8d0 [ 467.843852][ C0] [ 467.855214][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 469.324593][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 469.335257][ T32] Tainted: [L]=SOFTLOCKUP [ 469.339560][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 469.349595][ T32] Call Trace: [ 469.352858][ T32] [ 469.355770][ T32] dump_stack_lvl+0x100/0x190 [ 469.360441][ T32] vpanic+0x553/0x970 [ 469.364411][ T32] ? __pfx_vpanic+0x10/0x10 [ 469.368907][ T32] panic+0xd1/0xe0 [ 469.372609][ T32] ? __pfx_panic+0x10/0x10 [ 469.377010][ T32] ? nmi_trigger_cpumask_backtrace+0x263/0x2a0 [ 469.383147][ T32] ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0 [ 469.389368][ T32] ? watchdog.cold+0x1ec/0x234 [ 469.394116][ T32] watchdog.cold+0x1fd/0x234 [ 469.398695][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 469.404487][ T32] ? __pfx_watchdog+0x10/0x10 [ 469.409151][ T32] ? __kthread_parkme+0x18f/0x230 [ 469.414163][ T32] ? kthread+0x13a/0x450 [ 469.418390][ T32] ? __pfx_watchdog+0x10/0x10 [ 469.423066][ T32] kthread+0x373/0x450 [ 469.427122][ T32] ? __pfx_kthread+0x10/0x10 [ 469.431714][ T32] ret_from_fork+0x730/0xd60 [ 469.436293][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 469.441402][ T32] ? __switch_to+0x800/0x10f0 [ 469.446165][ T32] ? __pfx_kthread+0x10/0x10 [ 469.450859][ T32] ret_from_fork_asm+0x1a/0x30 [ 469.455636][ T32] [ 469.458937][ T32] Kernel Offset: disabled [ 469.463236][ T32] Rebooting in 86400 seconds..