last executing test programs: 3m18.386578952s ago: executing program 0 (id=11385): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x6) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, 0x0) 3m17.726034688s ago: executing program 0 (id=11391): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000080)=@ethtool_rxnfc={0x32, 0x11, 0x1, {0xa, @udp_ip4_spec={@multicast1, @multicast1, 0x4e21, 0x4e22, 0x5d}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x5, 0xfb44, [0x5, 0x9]}, @esp_ip4_spec={@local, @private=0xa010100, 0x9}, {0x0, @broadcast, 0x46, 0x3ff, [0x2]}, 0x4, 0x2}}}) 3m17.545001936s ago: executing program 0 (id=11396): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='pstore\x00', 0x0, &(0x7f00000000c0)='%\x8a\xd2\xc6}\xfa{\b\x7f\xf8\xd71\xceX\x14\x87h\xa6\xd2\x91\x06\x00\x15\xa5\xd6\xfe') 3m17.50554965s ago: executing program 0 (id=11397): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r3, @ANYRES64=r2], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5d114b62, 0xaf804dcb6a20c05b, r3, 0x177b000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/udplite\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) mount$bind(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x80000, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r5, &(0x7f0000006b40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ptrace$PTRACE_GETSIGMASK(0x420a, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000400)={0x9000, &(0x7f00000001c0), &(0x7f00000002c0), &(0x7f0000000380), {0x26}, &(0x7f00000004c0)=""/232, 0xe8, &(0x7f0000000600)=""/241, &(0x7f00000003c0)=[r6, r6, r6, r6], 0x4, {r4}}, 0x58) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r7, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x300) 3m17.098996491s ago: executing program 0 (id=11398): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) clock_gettime(0x4, &(0x7f0000000140)) 3m17.042185007s ago: executing program 0 (id=11399): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) 3m16.896223301s ago: executing program 32 (id=11399): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) 19.47229167s ago: executing program 4 (id=15815): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500), 0x0, 0x4) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, 0x0, 0x0) 19.4717276s ago: executing program 4 (id=15816): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x9) 19.47126367s ago: executing program 4 (id=15817): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r6, @ANYRES64=r5], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r6, 0x0) ioctl$KVM_X86_SETUP_MCE(r6, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) 19.396855807s ago: executing program 4 (id=15819): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)="390000001100090468", 0x9}], 0x1) splice(r4, 0x0, r6, 0x0, 0x19404, 0x0) 19.339837303s ago: executing program 4 (id=15823): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) userfaultfd(0x80001) socket$nl_route(0x10, 0x3, 0x0) pipe(0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)="390000001100090468fe0700000000000700ff3f0800000045000e070000001419001a00", 0x24}], 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000002c0), 0x15) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x19404, 0x0) 19.27278203s ago: executing program 4 (id=15824): madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x12) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x6, 0x24, &(0x7f0000000200)=ANY=[], 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x4004550f, 0x0) 19.248411172s ago: executing program 3 (id=15826): rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r4, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4dfd, 0x80000, @empty, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}, 0xc4) 19.247814172s ago: executing program 3 (id=15827): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x1}) 19.190849638s ago: executing program 3 (id=15828): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000000c0), 0x0) splice(r4, 0x0, r6, 0x0, 0x19404, 0x0) 18.368702531s ago: executing program 3 (id=15833): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='pids.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r5, @ANYRES64=r4], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r5, 0x0) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f0000000040)={0x3, 'vlan0\x00', {0x80}, 0x7}) 18.335668474s ago: executing program 3 (id=15835): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[@ANYRES16, @ANYRES64, @ANYRES8=r1, @ANYBLOB="081829a16c99c17a378b2aabde12ed1ef74dfc655bcdbe49685e707f838b6c8fdea0744f1e274826698cf705"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$xdp(0x2c, 0x3, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x1000}, 0x20) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="cdea44f2a84bde28d5ad187ae12d61a0ea77e81aa51948858d156b25fc05188fbe890038ef6f19e74a1fab847fa1ae9e67d2bd2f1507fe4b7dd2a6f59f4153a0ef250c46c6bd90a546e88a685ec0b54fb86c834c11f519cd79c0f30e054445c00944b370aeb22715596763d737ac3505765d1a580f35fcb9671b2593af8650ded29d", 0x82}, {&(0x7f0000001540)="321ffae0aa88d82091c8cff07be44db97c37342eb423aa087a65ca8f64fe59a57d93b1011240b66c3af4d09129c12f2545c948540eb6d02bfe6d4afc2dbdd0da43b16add11449256c0a438d49556b99a6b4ad98abaf64346ba86c59efc946929ad58d91a423d44f54f00a5aa28604b71a0517665a9494e5b763a457e4c120a4ec320383f77ee0add6448b1686ddc945de0798608b0913320ed9ab4708600364b7a48f884861376fedfffd68df547d02d6d3afdc3901f416ef2cfccfd1fc15f41d3f337e2cf9bbc86122855a43e1ed5d839ba31eea668423553ee17b27a4aa05e65f75df5dc40a44022857dabd21c5f04a52bfbc668906a1d017f77761c7136bdba062ed2775e53fca381a4baa856736550a4ae61c77be47f65cf0aa75b3e5c134735c1ae223eff8138483117d313dd007faa8d4f54ee148ae1e009602c8d6e1124cc99a714f9c9f750491b564daf06628d8eeb22258aa7136f91f928c0a981bb4b2aa76280751130e35a7214f55e710d116427f6258a3156ee2d7b6676dc1b5b0cd82fd4cc6c4f518e2224748cbe08816f2bb9de1d39ee002ed942e07185d4ae2adf57192ef8176609506a2997a84caaae7aa8332e26e86d723f266fbe02db554865302e4883bf2e57ef5c4fd435ac1955f66eefd1b373ae4494f63fe830c620b76190de0721496f97f4d88f9b94f0b9a6eb847361013da958b14407ab0b0ccf1e8d751a72ec100ccca0e64a344c863dbb068300786cfd944f4370cac6ef1d30f6f5ea96ec30d9a535b588762aa74f522c14af82a2304344c7f85276ca43c290279403f5b22b25c0bfe757677a859ca30ede33b5cda7a94f482f1bb93c7de83882886e95abfdab38db3e81750d0e62fef37f585b852a7e8b96ade9d7124e03efa0c3653a37dcf66c4abfbea428a6016025552d3e8a9d974ebfd81f51325d994b33da09cb22af8fafa567add8372a203ff90369110f723ed2edcfef66bd01d2f9038794ea71721b376e18e94fcf0a747ba7becbda7796de35689d6ea961de84703a8e36e6dedb91d7f7f5fc631c7c8ea6993d6941703a42370a4b645f8fd2df6a029f6f0b86d8001ca92e3e394e7b3979091c50063ab35b02db999e060c938d5a31f3e9539c35f30fbda5e7afe99bc756eb27e391fe2e652d934d6703c1cb06b449890a8cc2467165ca44a425922a4867bb225b6c851d49273f375e73d8b14257aa3cb0ab1320a34cd0ede9c30fafe238dc30e93610907d1108e6e6ddb36921a933b42e7a9a85abb6d3c8c4bdeaf04f82992e12ba284b66d84c5320eb3297b8252dbefc41375494e897db2e6c0138bf26da1efd2e56c9c2fe409e8f6d81b9e66c69a165e98720a3212c60e3e5c42f0ee45e2b7eba74a3c90a64e97f602beb668053d7929746c7e86c588d12fb68695ff49cf46c531fcddcbfb139d66ee9f02ab885f156983987a14c877475fc08db7c8ee4aad39d326e45735ccf9dfd3c29d182df394a9989f9e2b3f238e8723bb8ade351a0e3ba060fe438a4b3e5cfdfafbc7eb87c06ebb2479efc216cdc0397b185ada0cdfd6c8dfff0c9170e4c50309ef967f4313ccd58962a15c7258192c05feffe5d2e3d291811b5f38f41b7b0b22de0d92ec6c6d566ea35b2c6915d118502bb4ebee336d0abddca72ae263e8f01ac8076169d24c5e64e0b26bfa4ba9b70ce3ac6046174cae9e1a3dd17b2946beaea7042af49b3a82c01029e3dc2149c7ce4b7d9ebc2fceb1305ac39cf1637f534c71eafa7c465b5966a1013c9238da7072c4c8bd581151d34de15a74477df445802b492cfa5bf8f02af7c81265e120d990a3023bbef03660a77598f1b77da32fddbd57f16799445104da6b48b461e6d07b0a57940aa14c12f672f4a5160e14950c029e7718786c29697e7db2da117014b6d5655bc21bd7625f57ea94886cb6cd5761b874c0fd984448e1c99f855489acc6a18028344377780b49905ae652b8d264db921f24681d95e0c21729876f0a04c7a83cb011157c504cc17c9ff2e941edc8bb705d8c96ff9171c4395b7524bd0b94a133c997209aae32f754a5d1d18934cb326e503b40c87ea8d2d74ca0076a41acd234d72987fc439aa130b85239fc7069d8eeb8e193d9770bfbb800294d421e68349b8deba7e8e01fd425d67ea0ebf3ebf527a4ad2c24d72c9c6ac8273e4e07d18298fb1ccd41559c5aebd20b6cc93c67f769ac421d98a87ae9986effe5c9e620cbf33ab943309e9d9580a9d0aa64a596d31f850d3425a8818d387d8635c4ab2b0b4c5dbdedaa68f73569815030f01f27626dc4713baf6fec741061dbd82d4485205003120ad0bf38a017869965284c39decf83ccddec07063688b3d97d76746d3310ac1d50187e94344c5267d46d05008f93b4707fc0a0ca2c83835dc322bcf613857d3d535fdf908e65aa303a27c6fb3b1086dd63f62400d453c70dfb0d8f23cb2831340de2598a081bdb582b029d1fba65114386de6ae6e5cd99ce23525cac2eb4ccec5eae9753b326aa64023d5ce66f96055027f65dc0c23020122857f8e798657dbbe9cac2e16a7dd5f16dececbee5ad8d8647501175c64eb80345248777e59625cc10cec8f33e8699c26f4906681bc67f8104ac974f9ed222d2bb2ad76a5f9077a65f177389dbf18ffb7a8b44c6743836b9b6edd550cf47df72711a90b229ae2cb4a79c56e57565c7df8f07faf1dd21b79c666bd59993e8cbe8804593569162ca3508f0d289faeb9ec1fe0282770bba2924898971fd11f72663d7f923ea65eb55d057e22ff8b4b11be014807a2eae98567ac59798b15a2dfb0ec9e6fe688b5344da54dc017d912f4a19c6dd625ab5da4ca95193d31b9121a34a623fda454c7a7636cfd72b2c6375c08310011b081c7c3163ebe0205b8d0e9bdf211dd1fe2a292d25fac62955157802019b5d133b55e890be84687395c8a71ded5bbf99cee3bcc705729aeab2a67e90f20fc59e50569e77c9a587dac4bb4eafd7148da13af399a21769e4bc6b756540c3cebf06dc91f43d93cb36340ff4a428ce49825cd75f6f4503fb1c7a303c91533c3bbd82981bd5f03a4d4017308de455bda97528c6e517db0adcf4f97b1a3db9665d25dc766616700e5aa1826fb27861d486a93d8dc3596816cef270a766a3575763e72086483a5c817fb7ce9409269ce40d59159a8ea1ba614b84c038c8e0b750371620cd280f2022b66bd237f64508b7903b3aa56b61f79cc1d0380767f39987a7673059d900faf5f760a147bfe6d393a5dcf73e8d99a984b3cb80aec1374ed606e8090d1ea106811c1ed70da8ec85fd0f1a80de53972c9ea0dde27bb1940f48ffe8cf542405005de3dd71d080404cb4445c61bd15238ac6683cdb8deb55b2a214616410d0f8f9da0db7b58eab9577791bb7a6af320fb0276e9e179e7dca9596bb36314274ece59c641c82308ef494a860c335682e31920109164355b717a6c4f6bfdd448d5498dfa76444884d3d10648134903c06ddcccf25de3b6e514273dc6fcb6fa1c5fa132ef4a4434fff3615c87204995a2464eef42dd6ad3409d1061bfc085af2bc364e10cd212e542194d93795da6cb23ff244392398e5dd139516f6ba12b2465f9486812633cd49fe8e676170cb41a6453ed142d827696608cbd6e824200ba5c6e4047f1c5c7cdaccbc4608bcf5408460638b6b6d1d8c682cf2f64cda717536b890307e2273f983ad54de6178ca2e0bceaa3bc0350f09d55650d35cc56f547e39469776b68888689c8724d3bfe66f8e3a0e2ee4a0371ccaf6ada702c63ef2fc97c2ce348fd233d0459bb7e14654f524ff4be268275ecf38bf1fe6946e0f239bf6960b3798e3eafe9456febb4297eac0ee3f7c02c463dfb9ed8df0df2398012230447187f559ee20028a00bd6ecca2cf111b0e1e3b7ee48fd142725185f49cb52014af3c4435072b186f8ebf9124cf401a87311b15b69c3891dafb365d7240d2d8a000aeeaa5f8984585799d9fe7a0759fc7ab5573a6eb23ed45e5cb58a15199d091c0510a96cb729ca5bfd44139ca8a5771455003ec9545cb740c7d1eddc27893909631c73f5582bd25aa96881516e0a8a03d024e6a7b617736dc85c8b924071cb9903330e656b9cc29e48939ccade217e2db4b32373759afdb6d2bbbc8f37e3f409f4b037734b5a77caaa61d471d4683b4516f12725de57444d4a7da05a9292a0fa9d645a92f5f88fbd43af0cfcc38bf816c63647461d6444709032ca6a8cbc9d80979ca79f28b5f54f71c96ca473331e06be0261cf86bfa9810bbe3900f27ac06a7622acdbf637475eae314bb5cbaf6c225a852878ace42cf24756f6e695ca4b366e88f5a3ed975a24f8c6aedae57a0957f267d160459dab961d9690f99767fa2e6a009c6e6ea6a031e57dff1fb85fecf95ee37a7cad543a2c1abec9c2c76b0959202812230b6daa4bba2478b8ff26ad7c9b9cabd1c7917c42c64a94a5b76753f2153361ba479efdea85d511a5f6935fdfc685a9a5c6f85930218a9356264d61c51f7a7bf11f405e5d41a110c4d63e1babbfc689fef61b8adc97527928dc5d6c43283e31bf5fb3a52a65d62081167c355cfdee54f8e75a06c58999a454df58f56f822fbfced0e5d691ac8e98c34e2c9f8ccb9a0d744e928f667cd4b89b6df060024fbb259fd3df7a2895700d8b50e639e6edeb0fa066e836b1a58e238475350f1f9ce9c3d762f25318a671d5a3f478c10b62b5c6f141c67768163246c1fde9c222d74805b4616d3eb66c0a60bdeaa817db1121eee46c83cec54a45c6cb72baaae0bda233ed2e334c25252c0bbdc370df1a0b7c91d5ad291d5db1914985e68a26b76a45fc35561fe8151bc5c59bffb3e208494fa214f91cfd5a9f0feb2a43ffaf65f06ff260ce9054577534263cfb9e61b7c55d43cf4ed781262f2f7d374e0f477ec833bbe129c876334519a4e73367603c680ee6e7d7d2206d86f06961f2e216398f0c54c094a9f94e59256383755e86a922a5a33468cd9ba94d681ed0a64335933d020e59cfc65d3ac851458d04a83577f376e103f6182dc5a635cb9f1ef0e1d74b487e0498f5a57960b18be7106e4cd656e32fe03ca663e34b71dc615f92f958a80a54eea63716e83283d6baf51cef802438178b740aee4975a50a5238ab138efebefde51cb3e27df795fb927adedd0565e61ae0d15b25947b1b13a0880ea74da3011f7f6d084d1623606b2e00efe2181f3ba641d301b506acacbf5c02f9e14d09e6bd10ba994de3d79f2fa38a30f80e486aec9fb508bd6e153ff7eea705f882dfd8814f3df8223b4ba7e87d5efc8be21b73048273a50b3c7ed9be5b4f86597570c9c92d86d4bda54397965ff551c2ddbe39b11ab8edda1ad8ec7c8ad0d624a5249e97c375c72add4b5e2df40ec2eef459c600047459a3f58c417a22ea70eb5eb5243540b69b42939cc7b6e11c534ddfc59f40655f9ebb2f1305056b3f05ddce0616b1ffc613380f72e4352b8dff1ec4f3b57ea380359d93bceb1f43aa561e3f3c49d8eb6bef3383ba82315b39719101790d5e63cd5265870c1b1a70c88afe79ee29be7dd22574cc0650be0718491a0a0269f26145e47064496a226918c211b96124f007af11b822100c69aa051ad5f36ff8ca2994895f97289e6aa25d3410b6b07b581bd3022ee29b21fdbb5e862003fe70ad2e785a55d3cd942dce0885b4f52818a85aa25cbb27024474bd0f328fa3c512ddc249832f5db52ec2d95ea4b6b24cb19a80ab0c444f4ffe297829328eea03686de59af6ed590dc8967b035541b7", 0x1000}], 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r3, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x4000010, r3, 0xffffc000) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) write$UHID_INPUT(r3, &(0x7f0000000500)={0x8, {"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", 0x1000}}, 0x1006) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000440)={[0x2, 0x100000000, 0x0, 0x80, 0x100000, 0x0, 0x50ca7cfa, 0x4, 0x2, 0x0, 0x7, 0x0, 0x5, 0xffffffffffffffff, 0x2000000000000002, 0xffffffffffffffff], 0x100000, 0x284}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000002540)={[0x4, 0x5, 0x80, 0x4004, 0x2, 0x10000000004, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0xb3a6, 0xfffffffffffffffe, 0x3, 0xa, 0x7], 0x5000, 0x141d01}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 17.864577041s ago: executing program 3 (id=15838): rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) userfaultfd(0x80001) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)="390000001100090468fe0700000000000700ff3f0800000045000e070000001419001a00", 0x24}], 0x1) write$binfmt_misc(r4, &(0x7f00000002c0), 0x15) splice(r3, 0x0, r5, 0x0, 0x19404, 0x0) 17.698983108s ago: executing program 2 (id=15840): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)="390000001100090468", 0x9}], 0x1) splice(r3, 0x0, r5, 0x0, 0x19404, 0x0) 17.682810049s ago: executing program 2 (id=15841): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r5, @ANYRES64=r4], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r5, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="400000001800150000000000ffffffff0a0000000202000000000000240009801c00000000000000140005"], 0x40}], 0x1}, 0x0) 17.306828357s ago: executing program 2 (id=15842): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, 0x0, 0x0, 0x4) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, 0x0, 0x0) 17.219018546s ago: executing program 2 (id=15843): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, 0x0, 0x0) 16.738938034s ago: executing program 2 (id=15845): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000340)=ANY=[], 0x118) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r5, @ANYRES64=r4], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r5, 0x0) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f0000000040)={0x3, 'vlan0\x00', {0x80}, 0x7}) 16.617705126s ago: executing program 2 (id=15847): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) userfaultfd(0x80001) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)="390000001100090468fe0700000000000700ff3f0800000045000e070000001419001a00", 0x24}], 0x1) write$binfmt_misc(r4, &(0x7f00000002c0), 0x15) splice(r3, 0x0, r5, 0x0, 0x19404, 0x0) 15.653207273s ago: executing program 1 (id=15848): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) userfaultfd(0x80001) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) socket$netlink(0x10, 0x3, 0x0) writev(r5, 0x0, 0x0) write$binfmt_misc(r5, &(0x7f00000002c0), 0x15) splice(r4, 0x0, r6, 0x0, 0x19404, 0x0) 15.652543483s ago: executing program 1 (id=15849): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)="390000001100090468", 0x9}], 0x1) splice(r3, 0x0, r5, 0x0, 0x19404, 0x0) 15.629634565s ago: executing program 1 (id=15850): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x105800, 0x52) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r3, @ANYRES64=r2], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000300)) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r6, @ANYRES64=r5], 0x118) 15.57085428s ago: executing program 1 (id=15851): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) pipe(0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)="390000001100090468fe0700000000000700ff3f0800000045000e070000001419001a00", 0x24}], 0x1) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x19404, 0x0) 15.570488481s ago: executing program 1 (id=15852): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, 0x0, 0x0) 15.131422525s ago: executing program 1 (id=15853): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r5, @ANYRES64=r4], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r5, 0x0) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f0000000040)={0x3, 'vlan0\x00', {0x80}, 0x7}) 1.99893568s ago: executing program 33 (id=15838): rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) userfaultfd(0x80001) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)="390000001100090468fe0700000000000700ff3f0800000045000e070000001419001a00", 0x24}], 0x1) write$binfmt_misc(r4, &(0x7f00000002c0), 0x15) splice(r3, 0x0, r5, 0x0, 0x19404, 0x0) 988.530811ms ago: executing program 34 (id=15847): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) userfaultfd(0x80001) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)="390000001100090468fe0700000000000700ff3f0800000045000e070000001419001a00", 0x24}], 0x1) write$binfmt_misc(r4, &(0x7f00000002c0), 0x15) splice(r3, 0x0, r5, 0x0, 0x19404, 0x0) 0s ago: executing program 35 (id=15853): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r5, @ANYRES64=r4], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r5, 0x0) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f0000000040)={0x3, 'vlan0\x00', {0x80}, 0x7}) kernel console output (not intermixed with test programs): 8/0xf0 [ 505.695449][T23656] ? clear_bhb_loop+0x50/0xa0 [ 505.695474][T23656] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 505.695497][T23656] RIP: 0033:0x7f6280d8f6c9 [ 505.695516][T23656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 505.695536][T23656] RSP: 002b:00007f6281c4b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 505.695562][T23656] RAX: ffffffffffffffda RBX: 00007f6280fe5fa0 RCX: 00007f6280d8f6c9 [ 505.695580][T23656] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000202 [ 505.695595][T23656] RBP: 00007f6281c4b090 R08: 0000000000000000 R09: 0000000000000000 [ 505.695611][T23656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 505.695627][T23656] R13: 00007f6280fe6038 R14: 00007f6280fe5fa0 R15: 00007ffccb023588 [ 505.695647][T23656] [ 506.027303][ T36] audit: type=1400 audit(1763050533.260:374): avc: denied { accept } for pid=23665 comm="syz.0.10891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 506.255331][T23689] FAULT_INJECTION: forcing a failure. [ 506.255331][T23689] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 506.279298][T23689] CPU: 0 UID: 0 PID: 23689 Comm: syz.0.10900 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 506.279334][T23689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 506.279349][T23689] Call Trace: [ 506.279357][T23689] [ 506.279367][T23689] __dump_stack+0x21/0x30 [ 506.279405][T23689] dump_stack_lvl+0x10c/0x190 [ 506.279435][T23689] ? __cfi_dump_stack_lvl+0x10/0x10 [ 506.279466][T23689] ? check_stack_object+0x12c/0x140 [ 506.279489][T23689] dump_stack+0x19/0x20 [ 506.279517][T23689] should_fail_ex+0x3d9/0x530 [ 506.279542][T23689] should_fail+0xf/0x20 [ 506.279563][T23689] should_fail_usercopy+0x1e/0x30 [ 506.279614][T23689] _copy_to_user+0x24/0xa0 [ 506.279650][T23689] simple_read_from_buffer+0xed/0x160 [ 506.279679][T23689] proc_fail_nth_read+0x19e/0x210 [ 506.279710][T23689] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 506.279740][T23689] ? bpf_lsm_file_permission+0xd/0x20 [ 506.279771][T23689] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 506.279801][T23689] vfs_read+0x27d/0xc70 [ 506.279823][T23689] ? __cfi_vfs_read+0x10/0x10 [ 506.279842][T23689] ? __kasan_check_write+0x18/0x20 [ 506.279874][T23689] ? mutex_lock+0x92/0x1c0 [ 506.279895][T23689] ? __cfi_mutex_lock+0x10/0x10 [ 506.279914][T23689] ? __fget_files+0x2c5/0x340 [ 506.279940][T23689] ksys_read+0x141/0x250 [ 506.279961][T23689] ? __cfi_ksys_read+0x10/0x10 [ 506.279981][T23689] ? fdget+0x189/0x1f0 [ 506.280004][T23689] ? __kasan_check_read+0x15/0x20 [ 506.280037][T23689] __x64_sys_read+0x7f/0x90 [ 506.280058][T23689] x64_sys_call+0x2638/0x2ee0 [ 506.280092][T23689] do_syscall_64+0x58/0xf0 [ 506.280120][T23689] ? clear_bhb_loop+0x50/0xa0 [ 506.280145][T23689] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 506.280170][T23689] RIP: 0033:0x7f1db958e0dc [ 506.280189][T23689] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 506.280209][T23689] RSP: 002b:00007f1dba378030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 506.280235][T23689] RAX: ffffffffffffffda RBX: 00007f1db97e5fa0 RCX: 00007f1db958e0dc [ 506.280253][T23689] RDX: 000000000000000f RSI: 00007f1dba3780a0 RDI: 0000000000000006 [ 506.280267][T23689] RBP: 00007f1dba378090 R08: 0000000000000000 R09: 0000000000000000 [ 506.280283][T23689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 506.280296][T23689] R13: 00007f1db97e6038 R14: 00007f1db97e5fa0 R15: 00007ffe67f81448 [ 506.280316][T23689] [ 506.552022][T23691] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10901'. [ 506.990457][T23704] FAULT_INJECTION: forcing a failure. [ 506.990457][T23704] name failslab, interval 1, probability 0, space 0, times 0 [ 507.027330][T23704] CPU: 0 UID: 0 PID: 23704 Comm: syz.3.10907 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 507.027369][T23704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 507.027385][T23704] Call Trace: [ 507.027393][T23704] [ 507.027403][T23704] __dump_stack+0x21/0x30 [ 507.027441][T23704] dump_stack_lvl+0x10c/0x190 [ 507.027471][T23704] ? __cfi_dump_stack_lvl+0x10/0x10 [ 507.027502][T23704] ? release_sock+0x171/0x1f0 [ 507.027543][T23704] dump_stack+0x19/0x20 [ 507.027572][T23704] should_fail_ex+0x3d9/0x530 [ 507.027606][T23704] should_failslab+0xac/0x100 [ 507.027633][T23704] kmem_cache_alloc_node_noprof+0x45/0x440 [ 507.027657][T23704] ? netlink_data_ready+0x20/0x20 [ 507.027688][T23704] ? __alloc_skb+0x10c/0x370 [ 507.027717][T23704] __alloc_skb+0x10c/0x370 [ 507.027746][T23704] netlink_alloc_large_skb+0xf7/0x1b0 [ 507.027776][T23704] netlink_sendmsg+0x586/0xaf0 [ 507.027811][T23704] ? __cfi_netlink_sendmsg+0x10/0x10 [ 507.027847][T23704] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 507.027876][T23704] ? security_socket_sendmsg+0x33/0xd0 [ 507.027899][T23704] ? __cfi_netlink_sendmsg+0x10/0x10 [ 507.027932][T23704] ____sys_sendmsg+0xa15/0xa70 [ 507.027968][T23704] ? __sys_sendmsg_sock+0x50/0x50 [ 507.028002][T23704] ? import_iovec+0x81/0xb0 [ 507.028034][T23704] ___sys_sendmsg+0x220/0x2a0 [ 507.028068][T23704] ? __sys_sendmsg+0x280/0x280 [ 507.028102][T23704] ? proc_fail_nth_write+0x17e/0x210 [ 507.028133][T23704] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 507.028172][T23704] __x64_sys_sendmsg+0x1eb/0x2c0 [ 507.028205][T23704] ? fput+0x1a5/0x240 [ 507.028233][T23704] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 507.028267][T23704] ? ksys_write+0x1ef/0x250 [ 507.028289][T23704] ? __kasan_check_read+0x15/0x20 [ 507.028326][T23704] x64_sys_call+0x2a4c/0x2ee0 [ 507.028359][T23704] do_syscall_64+0x58/0xf0 [ 507.028389][T23704] ? clear_bhb_loop+0x50/0xa0 [ 507.028416][T23704] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 507.028440][T23704] RIP: 0033:0x7fdc01f8f6c9 [ 507.028460][T23704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 507.028482][T23704] RSP: 002b:00007fdc02d80038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 507.028508][T23704] RAX: ffffffffffffffda RBX: 00007fdc021e5fa0 RCX: 00007fdc01f8f6c9 [ 507.028526][T23704] RDX: 0000000000000804 RSI: 0000200000000040 RDI: 0000000000000008 [ 507.028541][T23704] RBP: 00007fdc02d80090 R08: 0000000000000000 R09: 0000000000000000 [ 507.028557][T23704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 507.028572][T23704] R13: 00007fdc021e6038 R14: 00007fdc021e5fa0 R15: 00007ffe937fb598 [ 507.028601][T23704] [ 507.820034][T23725] FAULT_INJECTION: forcing a failure. [ 507.820034][T23725] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 507.833362][T23725] CPU: 0 UID: 0 PID: 23725 Comm: syz.3.10917 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 507.833401][T23725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 507.833417][T23725] Call Trace: [ 507.833425][T23725] [ 507.833435][T23725] __dump_stack+0x21/0x30 [ 507.833472][T23725] dump_stack_lvl+0x10c/0x190 [ 507.833503][T23725] ? __cfi_dump_stack_lvl+0x10/0x10 [ 507.833534][T23725] ? selinux_file_ioctl+0x6e0/0x1360 [ 507.833564][T23725] dump_stack+0x19/0x20 [ 507.833593][T23725] should_fail_ex+0x3d9/0x530 [ 507.833617][T23725] should_fail+0xf/0x20 [ 507.833639][T23725] should_fail_usercopy+0x1e/0x30 [ 507.833663][T23725] _copy_from_user+0x22/0xb0 [ 507.833692][T23725] vhost_vsock_dev_ioctl+0x12c/0xdb0 [ 507.833724][T23725] ? __cfi_vhost_vsock_dev_ioctl+0x10/0x10 [ 507.833762][T23725] ? __fget_files+0x2c5/0x340 [ 507.833788][T23725] ? bpf_lsm_file_ioctl+0xd/0x20 [ 507.833819][T23725] ? security_file_ioctl+0x34/0xd0 [ 507.833855][T23725] ? __cfi_vhost_vsock_dev_ioctl+0x10/0x10 [ 507.833885][T23725] __se_sys_ioctl+0x135/0x1b0 [ 507.833911][T23725] __x64_sys_ioctl+0x7f/0xa0 [ 507.833936][T23725] x64_sys_call+0x1878/0x2ee0 [ 507.833969][T23725] do_syscall_64+0x58/0xf0 [ 507.833998][T23725] ? clear_bhb_loop+0x50/0xa0 [ 507.834024][T23725] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 507.834049][T23725] RIP: 0033:0x7fdc01f8f6c9 [ 507.834068][T23725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 507.834089][T23725] RSP: 002b:00007fdc02d80038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 507.834115][T23725] RAX: ffffffffffffffda RBX: 00007fdc021e5fa0 RCX: 00007fdc01f8f6c9 [ 507.834133][T23725] RDX: 0000200000000780 RSI: 000000004004af61 RDI: 0000000000000005 [ 507.834150][T23725] RBP: 00007fdc02d80090 R08: 0000000000000000 R09: 0000000000000000 [ 507.834165][T23725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 507.834180][T23725] R13: 00007fdc021e6038 R14: 00007fdc021e5fa0 R15: 00007ffe937fb598 [ 507.834199][T23725] [ 508.360629][T23744] FAULT_INJECTION: forcing a failure. [ 508.360629][T23744] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 508.407298][T23744] CPU: 0 UID: 0 PID: 23744 Comm: syz.0.10927 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 508.407338][T23744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 508.407353][T23744] Call Trace: [ 508.407361][T23744] [ 508.407371][T23744] __dump_stack+0x21/0x30 [ 508.407408][T23744] dump_stack_lvl+0x10c/0x190 [ 508.407447][T23744] ? __cfi_dump_stack_lvl+0x10/0x10 [ 508.407479][T23744] ? unwind_get_return_address+0x51/0x90 [ 508.407509][T23744] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 508.407547][T23744] dump_stack+0x19/0x20 [ 508.407575][T23744] should_fail_ex+0x3d9/0x530 [ 508.407600][T23744] should_fail+0xf/0x20 [ 508.407621][T23744] should_fail_usercopy+0x1e/0x30 [ 508.407646][T23744] _copy_from_user+0x22/0xb0 [ 508.407675][T23744] sk_setsockopt+0x277/0x2970 [ 508.407707][T23744] ? __cfi_sk_setsockopt+0x10/0x10 [ 508.407736][T23744] ? avc_has_perm_noaudit+0x286/0x360 [ 508.407770][T23744] ? avc_has_perm+0x144/0x220 [ 508.407802][T23744] ? __cfi_avc_has_perm+0x10/0x10 [ 508.407836][T23744] udp_lib_setsockopt+0xf5/0x960 [ 508.407870][T23744] ? __cfi_udp_lib_setsockopt+0x10/0x10 [ 508.407906][T23744] udpv6_setsockopt+0x7f/0xc0 [ 508.407928][T23744] ? __cfi_udp_v6_push_pending_frames+0x10/0x10 [ 508.407952][T23744] sock_common_setsockopt+0xb5/0xd0 [ 508.407977][T23744] ? __cfi_sock_common_setsockopt+0x10/0x10 [ 508.408004][T23744] do_sock_setsockopt+0x26d/0x400 [ 508.408037][T23744] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 508.408072][T23744] __x64_sys_setsockopt+0x1b8/0x250 [ 508.408106][T23744] x64_sys_call+0x2adc/0x2ee0 [ 508.408139][T23744] do_syscall_64+0x58/0xf0 [ 508.408168][T23744] ? clear_bhb_loop+0x50/0xa0 [ 508.408193][T23744] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 508.408218][T23744] RIP: 0033:0x7f1db958f6c9 [ 508.408238][T23744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 508.408258][T23744] RSP: 002b:00007f1dba378038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 508.408284][T23744] RAX: ffffffffffffffda RBX: 00007f1db97e5fa0 RCX: 00007f1db958f6c9 [ 508.408303][T23744] RDX: 000000000000003c RSI: 0000000000000001 RDI: 0000000000000005 [ 508.408318][T23744] RBP: 00007f1dba378090 R08: 0000000000000008 R09: 0000000000000000 [ 508.408334][T23744] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 508.408350][T23744] R13: 00007f1db97e6038 R14: 00007f1db97e5fa0 R15: 00007ffe67f81448 [ 508.408371][T23744] [ 508.797637][T23757] can0: slcan on ptm0. [ 508.858756][T23756] can0 (unregistered): slcan off ptm0. [ 508.927330][ T331] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 509.087388][ T331] usb 2-1: Using ep0 maxpacket: 32 [ 509.093661][ T331] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 509.102035][ T331] usb 2-1: config 0 has no interface number 0 [ 509.117320][ T331] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 509.148856][ T331] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 509.162155][ T331] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.177312][ T331] usb 2-1: Product: syz [ 509.187332][ T331] usb 2-1: Manufacturer: syz [ 509.197304][ T331] usb 2-1: SerialNumber: syz [ 509.213361][ T331] usb 2-1: config 0 descriptor?? [ 509.232866][T23755] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 509.444920][T23755] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 509.490361][T23800] can0: slcan on ptm0. [ 509.558701][T23799] can0 (unregistered): slcan off ptm0. [ 511.067010][T23912] FAULT_INJECTION: forcing a failure. [ 511.067010][T23912] name failslab, interval 1, probability 0, space 0, times 0 [ 511.084042][T23912] CPU: 0 UID: 0 PID: 23912 Comm: syz.3.10977 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 511.084079][T23912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 511.084092][T23912] Call Trace: [ 511.084099][T23912] [ 511.084109][T23912] __dump_stack+0x21/0x30 [ 511.084150][T23912] dump_stack_lvl+0x10c/0x190 [ 511.084180][T23912] ? __cfi_dump_stack_lvl+0x10/0x10 [ 511.084210][T23912] ? __kasan_check_write+0x18/0x20 [ 511.084245][T23912] ? proc_fail_nth_write+0x17e/0x210 [ 511.084276][T23912] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 511.084307][T23912] dump_stack+0x19/0x20 [ 511.084336][T23912] should_fail_ex+0x3d9/0x530 [ 511.084360][T23912] should_failslab+0xac/0x100 [ 511.084385][T23912] kmem_cache_alloc_noprof+0x42/0x430 [ 511.084407][T23912] ? getname_flags+0xc6/0x710 [ 511.084440][T23912] getname_flags+0xc6/0x710 [ 511.084462][T23912] ? build_open_flags+0x487/0x600 [ 511.084492][T23912] getname+0x1b/0x30 [ 511.084514][T23912] do_sys_openat2+0xcb/0x1c0 [ 511.084542][T23912] ? fput+0x1a5/0x240 [ 511.084567][T23912] ? do_sys_open+0x100/0x100 [ 511.084594][T23912] ? ksys_write+0x1ef/0x250 [ 511.084614][T23912] ? __cfi_ksys_write+0x10/0x10 [ 511.084636][T23912] __x64_sys_openat+0x13a/0x170 [ 511.084666][T23912] x64_sys_call+0xe69/0x2ee0 [ 511.084698][T23912] do_syscall_64+0x58/0xf0 [ 511.084727][T23912] ? clear_bhb_loop+0x50/0xa0 [ 511.084753][T23912] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 511.084778][T23912] RIP: 0033:0x7fdc01f8f6c9 [ 511.084798][T23912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 511.084819][T23912] RSP: 002b:00007fdc02d80038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 511.084844][T23912] RAX: ffffffffffffffda RBX: 00007fdc021e5fa0 RCX: 00007fdc01f8f6c9 [ 511.084862][T23912] RDX: 0000000000000000 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 511.084879][T23912] RBP: 00007fdc02d80090 R08: 0000000000000000 R09: 0000000000000000 [ 511.084895][T23912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 511.084910][T23912] R13: 00007fdc021e6038 R14: 00007fdc021e5fa0 R15: 00007ffe937fb598 [ 511.084930][T23912] [ 512.319643][ T331] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 512.335470][ T331] asix 2-1:0.188: probe with driver asix failed with error -71 [ 512.345920][ T331] usb 2-1: USB disconnect, device number 7 [ 512.994528][T24004] FAULT_INJECTION: forcing a failure. [ 512.994528][T24004] name failslab, interval 1, probability 0, space 0, times 0 [ 513.007188][T24004] CPU: 1 UID: 0 PID: 24004 Comm: syz.1.11018 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 513.007227][T24004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 513.007243][T24004] Call Trace: [ 513.007252][T24004] [ 513.007262][T24004] __dump_stack+0x21/0x30 [ 513.007300][T24004] dump_stack_lvl+0x10c/0x190 [ 513.007331][T24004] ? __cfi_dump_stack_lvl+0x10/0x10 [ 513.007361][T24004] ? do_pte_missing+0x2bdb/0x4240 [ 513.007391][T24004] dump_stack+0x19/0x20 [ 513.007420][T24004] should_fail_ex+0x3d9/0x530 [ 513.007445][T24004] should_failslab+0xac/0x100 [ 513.007472][T24004] kmem_cache_alloc_noprof+0x42/0x430 [ 513.007492][T24004] ? inc_rlimit_get_ucounts+0x3fb/0x470 [ 513.007527][T24004] ? __sigqueue_alloc+0x15e/0x2b0 [ 513.007558][T24004] __sigqueue_alloc+0x15e/0x2b0 [ 513.007587][T24004] __send_signal_locked+0x19d/0xb90 [ 513.007612][T24004] ? __kasan_check_write+0x18/0x20 [ 513.007646][T24004] ? handle_mm_fault+0x15aa/0x1b90 [ 513.007671][T24004] send_signal_locked+0x428/0x5a0 [ 513.007698][T24004] force_sig_info_to_task+0x2ec/0x4c0 [ 513.007726][T24004] force_sig_fault+0xdd/0x130 [ 513.007754][T24004] ? __cfi_force_sig_fault+0x10/0x10 [ 513.007782][T24004] ? fixup_vdso_exception+0x23f/0x340 [ 513.007806][T24004] do_sigbus+0x161/0x190 [ 513.007839][T24004] do_user_addr_fault+0xfe4/0x1200 [ 513.007871][T24004] ? __cfi_ksys_write+0x10/0x10 [ 513.007896][T24004] exc_page_fault+0x59/0xc0 [ 513.007920][T24004] asm_exc_page_fault+0x2b/0x30 [ 513.007944][T24004] RIP: 0033:0x7f6280d72c7e [ 513.007964][T24004] Code: fd d7 c9 0f bc d1 c5 fe 7f 27 c5 fe 7f 6f 20 c5 fe 7f 77 40 c5 fe 7f 7f 60 49 83 c0 1f 49 29 d0 48 8d 7c 17 61 e9 d2 04 00 00 fe 6f 1e c5 fe 6f 56 20 c5 fd 74 cb c5 fd d7 d1 49 83 f8 21 0f [ 513.007985][T24004] RSP: 002b:00007f6281c4abe8 EFLAGS: 00010287 [ 513.008015][T24004] RAX: 00007f6281c4ac10 RBX: 0000000000000008 RCX: 0000000000000000 [ 513.008032][T24004] RDX: 00000000000003ff RSI: 0000200000002c80 RDI: 00007f6281c4ac10 [ 513.008049][T24004] RBP: 00007f6281c4ac10 R08: 00000000000003ff R09: 0000000000000000 [ 513.008065][T24004] R10: 0000200000002c80 R11: 0000000000466500 R12: cccccccccccccccd [ 513.008083][T24004] R13: 00007f6280fe6038 R14: 00007f6280fe5fa0 R15: 00007ffccb023588 [ 513.008103][T24004] [ 513.275202][T24011] overlayfs: overlapping lowerdir path [ 513.694735][T24040] FAULT_INJECTION: forcing a failure. [ 513.694735][T24040] name failslab, interval 1, probability 0, space 0, times 0 [ 513.709295][T24040] CPU: 0 UID: 0 PID: 24040 Comm: syz.0.11034 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 513.709335][T24040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 513.709351][T24040] Call Trace: [ 513.709359][T24040] [ 513.709368][T24040] __dump_stack+0x21/0x30 [ 513.709407][T24040] dump_stack_lvl+0x10c/0x190 [ 513.709438][T24040] ? __cfi_dump_stack_lvl+0x10/0x10 [ 513.709471][T24040] ? vfs_write+0x93e/0xf30 [ 513.709494][T24040] dump_stack+0x19/0x20 [ 513.709523][T24040] should_fail_ex+0x3d9/0x530 [ 513.709549][T24040] should_failslab+0xac/0x100 [ 513.709576][T24040] kmem_cache_alloc_noprof+0x42/0x430 [ 513.709598][T24040] ? getname_flags+0xc6/0x710 [ 513.709623][T24040] getname_flags+0xc6/0x710 [ 513.709647][T24040] user_path_at+0x2b/0x60 [ 513.709673][T24040] __x64_sys_umount+0xf2/0x170 [ 513.709705][T24040] ? __cfi___x64_sys_umount+0x10/0x10 [ 513.709738][T24040] ? __kasan_check_read+0x15/0x20 [ 513.709773][T24040] x64_sys_call+0x2ab8/0x2ee0 [ 513.709808][T24040] do_syscall_64+0x58/0xf0 [ 513.709837][T24040] ? clear_bhb_loop+0x50/0xa0 [ 513.709864][T24040] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 513.709889][T24040] RIP: 0033:0x7f1db958f6c9 [ 513.709909][T24040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 513.709930][T24040] RSP: 002b:00007f1dba378038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 513.709957][T24040] RAX: ffffffffffffffda RBX: 00007f1db97e5fa0 RCX: 00007f1db958f6c9 [ 513.709975][T24040] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0 [ 513.709991][T24040] RBP: 00007f1dba378090 R08: 0000000000000000 R09: 0000000000000000 [ 513.710006][T24040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 513.710021][T24040] R13: 00007f1db97e6038 R14: 00007f1db97e5fa0 R15: 00007ffe67f81448 [ 513.710041][T24040] [ 513.907715][ T36] audit: type=1400 audit(1763050540.970:375): avc: denied { ioctl } for pid=24041 comm="syz.0.11035" path="socket:[184037]" dev="sockfs" ino=184037 ioctlcmd=0x6607 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 514.306128][T24104] FAULT_INJECTION: forcing a failure. [ 514.306128][T24104] name failslab, interval 1, probability 0, space 0, times 0 [ 514.321901][T24104] CPU: 0 UID: 0 PID: 24104 Comm: syz.0.11063 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 514.321951][T24104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 514.321967][T24104] Call Trace: [ 514.321976][T24104] [ 514.321986][T24104] __dump_stack+0x21/0x30 [ 514.322025][T24104] dump_stack_lvl+0x10c/0x190 [ 514.322057][T24104] ? __cfi_dump_stack_lvl+0x10/0x10 [ 514.322089][T24104] ? __kasan_check_write+0x18/0x20 [ 514.322126][T24104] dump_stack+0x19/0x20 [ 514.322155][T24104] should_fail_ex+0x3d9/0x530 [ 514.322187][T24104] should_failslab+0xac/0x100 [ 514.322213][T24104] kmem_cache_alloc_noprof+0x42/0x430 [ 514.322234][T24104] ? getname_flags+0xc6/0x710 [ 514.322258][T24104] ? __cfi_ksys_write+0x10/0x10 [ 514.322279][T24104] getname_flags+0xc6/0x710 [ 514.322302][T24104] __x64_sys_mkdirat+0x7e/0xa0 [ 514.322332][T24104] x64_sys_call+0x2ba8/0x2ee0 [ 514.322363][T24104] do_syscall_64+0x58/0xf0 [ 514.322401][T24104] ? clear_bhb_loop+0x50/0xa0 [ 514.322427][T24104] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 514.322451][T24104] RIP: 0033:0x7f1db958f6c9 [ 514.322470][T24104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 514.322490][T24104] RSP: 002b:00007f1dba378038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 514.322516][T24104] RAX: ffffffffffffffda RBX: 00007f1db97e5fa0 RCX: 00007f1db958f6c9 [ 514.322535][T24104] RDX: 00000000000001c0 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 514.322551][T24104] RBP: 00007f1dba378090 R08: 0000000000000000 R09: 0000000000000000 [ 514.322566][T24104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 514.322581][T24104] R13: 00007f1db97e6038 R14: 00007f1db97e5fa0 R15: 00007ffe67f81448 [ 514.322602][T24104] [ 514.532816][T24109] overlayfs: overlapping lowerdir path [ 514.570686][T24112] can0: slcan on ptm0. [ 514.651734][T24111] can0 (unregistered): slcan off ptm0. [ 515.021447][ T66] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 515.073590][T24153] can0: slcan on ptm0. [ 515.135218][T24152] can0 (unregistered): slcan off ptm0. [ 515.197303][ T66] usb 1-1: Using ep0 maxpacket: 32 [ 515.205974][ T66] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 515.217319][ T66] usb 1-1: config 0 has no interface number 0 [ 515.223473][ T66] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 515.244567][ T66] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 515.254040][ T66] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.262321][ T66] usb 1-1: Product: syz [ 515.268062][ T66] usb 1-1: Manufacturer: syz [ 515.272705][ T66] usb 1-1: SerialNumber: syz [ 515.284309][ T66] usb 1-1: config 0 descriptor?? [ 515.290259][T24132] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 515.507425][T24132] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 516.099253][ T36] audit: type=1400 audit(1763050543.340:376): avc: denied { unmount } for pid=20729 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 516.237137][T24203] can0: slcan on ptm0. [ 516.297732][T24202] can0 (unregistered): slcan off ptm0. [ 517.927517][ T66] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 517.947364][ T66] asix 1-1:0.188: probe with driver asix failed with error -71 [ 517.967647][ T66] usb 1-1: USB disconnect, device number 9 [ 518.388018][T24321] overlayfs: overlapping lowerdir path [ 518.454461][T24325] overlayfs: overlapping lowerdir path [ 518.696554][T24364] overlayfs: overlapping lowerdir path [ 518.911764][T24391] overlayfs: overlapping lowerdir path [ 519.277017][T24402] FAULT_INJECTION: forcing a failure. [ 519.277017][T24402] name failslab, interval 1, probability 0, space 0, times 0 [ 519.307303][T24402] CPU: 1 UID: 0 PID: 24402 Comm: syz.0.11177 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 519.307343][T24402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 519.307358][T24402] Call Trace: [ 519.307367][T24402] [ 519.307377][T24402] __dump_stack+0x21/0x30 [ 519.307416][T24402] dump_stack_lvl+0x10c/0x190 [ 519.307447][T24402] ? __cfi_dump_stack_lvl+0x10/0x10 [ 519.307479][T24402] ? vfs_write+0x93e/0xf30 [ 519.307501][T24402] dump_stack+0x19/0x20 [ 519.307530][T24402] should_fail_ex+0x3d9/0x530 [ 519.307555][T24402] should_failslab+0xac/0x100 [ 519.307582][T24402] kmem_cache_alloc_noprof+0x42/0x430 [ 519.307604][T24402] ? getname_flags+0xc6/0x710 [ 519.307629][T24402] getname_flags+0xc6/0x710 [ 519.307652][T24402] user_path_at+0x2b/0x60 [ 519.307686][T24402] __x64_sys_umount+0xf2/0x170 [ 519.307719][T24402] ? __cfi___x64_sys_umount+0x10/0x10 [ 519.307752][T24402] ? __kasan_check_read+0x15/0x20 [ 519.307788][T24402] x64_sys_call+0x2ab8/0x2ee0 [ 519.307822][T24402] do_syscall_64+0x58/0xf0 [ 519.307853][T24402] ? clear_bhb_loop+0x50/0xa0 [ 519.307880][T24402] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 519.307906][T24402] RIP: 0033:0x7f1db958f6c9 [ 519.307925][T24402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 519.307946][T24402] RSP: 002b:00007f1dba378038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 519.307972][T24402] RAX: ffffffffffffffda RBX: 00007f1db97e5fa0 RCX: 00007f1db958f6c9 [ 519.307991][T24402] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0 [ 519.308007][T24402] RBP: 00007f1dba378090 R08: 0000000000000000 R09: 0000000000000000 [ 519.308023][T24402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 519.308038][T24402] R13: 00007f1db97e6038 R14: 00007f1db97e5fa0 R15: 00007ffe67f81448 [ 519.308059][T24402] [ 520.147168][T10717] veth1_macvtap: left promiscuous mode [ 520.169532][T10717] veth0_vlan: left promiscuous mode [ 520.177995][T24440] FAULT_INJECTION: forcing a failure. [ 520.177995][T24440] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 520.191521][T24440] CPU: 1 UID: 0 PID: 24440 Comm: syz.1.11195 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 520.191561][T24440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 520.191576][T24440] Call Trace: [ 520.191584][T24440] [ 520.191593][T24440] __dump_stack+0x21/0x30 [ 520.191632][T24440] dump_stack_lvl+0x10c/0x190 [ 520.191674][T24440] ? __cfi_dump_stack_lvl+0x10/0x10 [ 520.191705][T24440] ? vfs_write+0x93e/0xf30 [ 520.191727][T24440] ? check_stack_object+0x107/0x140 [ 520.191750][T24440] dump_stack+0x19/0x20 [ 520.191779][T24440] should_fail_ex+0x3d9/0x530 [ 520.191804][T24440] should_fail+0xf/0x20 [ 520.191826][T24440] should_fail_usercopy+0x1e/0x30 [ 520.191851][T24440] _copy_from_user+0x22/0xb0 [ 520.191880][T24440] __se_sys_capset+0x233/0x440 [ 520.191914][T24440] ? __kasan_check_write+0x18/0x20 [ 520.191946][T24440] ? __x64_sys_capset+0x80/0x80 [ 520.191977][T24440] ? ksys_write+0x1ef/0x250 [ 520.191996][T24440] ? __cfi_ksys_write+0x10/0x10 [ 520.192017][T24440] ? __kasan_check_write+0x18/0x20 [ 520.192050][T24440] __x64_sys_capset+0x5f/0x80 [ 520.192080][T24440] x64_sys_call+0x259c/0x2ee0 [ 520.192114][T24440] do_syscall_64+0x58/0xf0 [ 520.192145][T24440] ? clear_bhb_loop+0x50/0xa0 [ 520.192170][T24440] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 520.192194][T24440] RIP: 0033:0x7f6280d8f6c9 [ 520.192213][T24440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 520.192234][T24440] RSP: 002b:00007f6281c4b038 EFLAGS: 00000246 ORIG_RAX: 000000000000007e [ 520.192260][T24440] RAX: ffffffffffffffda RBX: 00007f6280fe5fa0 RCX: 00007f6280d8f6c9 [ 520.192279][T24440] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000200000000040 [ 520.192294][T24440] RBP: 00007f6281c4b090 R08: 0000000000000000 R09: 0000000000000000 [ 520.192308][T24440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 520.192321][T24440] R13: 00007f6280fe6038 R14: 00007f6280fe5fa0 R15: 00007ffccb023588 [ 520.192340][T24440] [ 520.606030][T24430] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.625497][T24430] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.648011][T24430] bridge_slave_0: entered allmulticast mode [ 520.654682][T24430] bridge_slave_0: entered promiscuous mode [ 520.685601][T24430] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.697324][T24430] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.725283][T24430] bridge_slave_1: entered allmulticast mode [ 520.747855][T24430] bridge_slave_1: entered promiscuous mode [ 520.952692][T10717] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.959809][T10717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 521.009061][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.016144][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 521.053535][T24469] FAULT_INJECTION: forcing a failure. [ 521.053535][T24469] name failslab, interval 1, probability 0, space 0, times 0 [ 521.066576][T24469] CPU: 0 UID: 0 PID: 24469 Comm: syz.3.11204 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 521.066614][T24469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 521.066629][T24469] Call Trace: [ 521.066638][T24469] [ 521.066648][T24469] __dump_stack+0x21/0x30 [ 521.066686][T24469] dump_stack_lvl+0x10c/0x190 [ 521.066717][T24469] ? __cfi_dump_stack_lvl+0x10/0x10 [ 521.066749][T24469] ? vfs_write+0x93e/0xf30 [ 521.066772][T24469] dump_stack+0x19/0x20 [ 521.066801][T24469] should_fail_ex+0x3d9/0x530 [ 521.066826][T24469] should_failslab+0xac/0x100 [ 521.066852][T24469] kmem_cache_alloc_noprof+0x42/0x430 [ 521.066875][T24469] ? getname_flags+0xc6/0x710 [ 521.066899][T24469] getname_flags+0xc6/0x710 [ 521.066923][T24469] user_path_at+0x2b/0x60 [ 521.066948][T24469] __x64_sys_umount+0xf2/0x170 [ 521.066980][T24469] ? __cfi___x64_sys_umount+0x10/0x10 [ 521.067012][T24469] ? __kasan_check_read+0x15/0x20 [ 521.067047][T24469] x64_sys_call+0x2ab8/0x2ee0 [ 521.067081][T24469] do_syscall_64+0x58/0xf0 [ 521.067112][T24469] ? clear_bhb_loop+0x50/0xa0 [ 521.067137][T24469] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 521.067162][T24469] RIP: 0033:0x7fdc01f8f6c9 [ 521.067181][T24469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 521.067202][T24469] RSP: 002b:00007fdc02d80038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 521.067228][T24469] RAX: ffffffffffffffda RBX: 00007fdc021e5fa0 RCX: 00007fdc01f8f6c9 [ 521.067251][T24469] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0 [ 521.067265][T24469] RBP: 00007fdc02d80090 R08: 0000000000000000 R09: 0000000000000000 [ 521.067291][T24469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 521.067307][T24469] R13: 00007fdc021e6038 R14: 00007fdc021e5fa0 R15: 00007ffe937fb598 [ 521.067327][T24469] [ 521.129924][T24430] veth0_vlan: entered promiscuous mode [ 521.297174][T24430] veth1_macvtap: entered promiscuous mode [ 521.341956][ T36] audit: type=1400 audit(1763050548.580:377): avc: denied { mount } for pid=24430 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 521.618688][T24493] overlayfs: overlapping lowerdir path [ 521.947946][ T63] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 522.108181][ T63] usb 1-1: too many configurations: 105, using maximum allowed: 8 [ 522.121471][ T63] usb 1-1: config index 0 descriptor too short (expected 23295, got 110) [ 522.134598][ T63] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 2 [ 522.150566][ T63] usb 1-1: can't read configurations, error -22 [ 522.287330][ T63] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 522.447691][ T63] usb 1-1: too many configurations: 105, using maximum allowed: 8 [ 522.457887][ T63] usb 1-1: config index 0 descriptor too short (expected 23295, got 110) [ 522.470275][ T63] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 2 [ 522.487374][ T63] usb 1-1: can't read configurations, error -22 [ 522.497607][ T63] usb usb1-port1: attempt power cycle [ 522.827376][ T66] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 522.857318][ T63] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 522.888424][ T63] usb 1-1: too many configurations: 105, using maximum allowed: 8 [ 522.897041][ T63] usb 1-1: config index 0 descriptor too short (expected 23295, got 110) [ 522.905612][ T63] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 2 [ 522.915397][ T63] usb 1-1: can't read configurations, error -22 [ 522.978447][ T66] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 522.989479][ T66] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 523.007899][ T66] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 523.027368][ T66] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 523.036470][ T66] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.048101][ T66] usb 3-1: config 0 descriptor?? [ 523.057325][ T63] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 523.088173][ T63] usb 1-1: too many configurations: 105, using maximum allowed: 8 [ 523.097047][ T63] usb 1-1: config index 0 descriptor too short (expected 23295, got 110) [ 523.107194][ T63] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 2 [ 523.115964][ T63] usb 1-1: can't read configurations, error -22 [ 523.123171][ T63] usb usb1-port1: unable to enumerate USB device [ 523.410228][T24543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11238'. [ 523.680749][ T66] usbhid 3-1:0.0: can't add hid device: -71 [ 523.687052][ T66] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 523.696385][ T66] usb 3-1: USB disconnect, device number 13 [ 523.715641][T24565] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11248'. [ 523.863459][T24593] FAULT_INJECTION: forcing a failure. [ 523.863459][T24593] name failslab, interval 1, probability 0, space 0, times 0 [ 523.876207][T24593] CPU: 0 UID: 0 PID: 24593 Comm: syz.1.11262 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 523.876252][T24593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 523.876267][T24593] Call Trace: [ 523.876276][T24593] [ 523.876286][T24593] __dump_stack+0x21/0x30 [ 523.876323][T24593] dump_stack_lvl+0x10c/0x190 [ 523.876353][T24593] ? __cfi_dump_stack_lvl+0x10/0x10 [ 523.876384][T24593] ? __kasan_check_write+0x18/0x20 [ 523.876418][T24593] ? proc_fail_nth_write+0x17e/0x210 [ 523.876449][T24593] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 523.876480][T24593] dump_stack+0x19/0x20 [ 523.876508][T24593] should_fail_ex+0x3d9/0x530 [ 523.876532][T24593] should_failslab+0xac/0x100 [ 523.876557][T24593] kmem_cache_alloc_noprof+0x42/0x430 [ 523.876579][T24593] ? getname_flags+0xc6/0x710 [ 523.876602][T24593] getname_flags+0xc6/0x710 [ 523.876623][T24593] ? build_open_flags+0x487/0x600 [ 523.876653][T24593] getname+0x1b/0x30 [ 523.876673][T24593] do_sys_openat2+0xcb/0x1c0 [ 523.876702][T24593] ? fput+0x1a5/0x240 [ 523.876728][T24593] ? do_sys_open+0x100/0x100 [ 523.876756][T24593] ? ksys_write+0x1ef/0x250 [ 523.876777][T24593] ? __cfi_ksys_write+0x10/0x10 [ 523.876799][T24593] __x64_sys_openat+0x13a/0x170 [ 523.876829][T24593] x64_sys_call+0xe69/0x2ee0 [ 523.876862][T24593] do_syscall_64+0x58/0xf0 [ 523.876892][T24593] ? clear_bhb_loop+0x50/0xa0 [ 523.876917][T24593] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 523.876942][T24593] RIP: 0033:0x7f6280d8f6c9 [ 523.876962][T24593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 523.876982][T24593] RSP: 002b:00007f6281c4b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 523.877008][T24593] RAX: ffffffffffffffda RBX: 00007f6280fe5fa0 RCX: 00007f6280d8f6c9 [ 523.877027][T24593] RDX: 0000000000000000 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 523.877044][T24593] RBP: 00007f6281c4b090 R08: 0000000000000000 R09: 0000000000000000 [ 523.877059][T24593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 523.877073][T24593] R13: 00007f6280fe6038 R14: 00007f6280fe5fa0 R15: 00007ffccb023588 [ 523.877093][T24593] [ 523.896793][T24597] can0: slcan on ptm0. [ 524.159293][T24596] can0 (unregistered): slcan off ptm0. [ 524.206069][T24629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11272'. [ 524.531236][ T36] audit: type=1400 audit(1763050551.770:378): avc: denied { create } for pid=24664 comm="syz.1.11283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 524.698684][T24675] FAULT_INJECTION: forcing a failure. [ 524.698684][T24675] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 524.731696][T24675] CPU: 1 UID: 0 PID: 24675 Comm: syz.1.11286 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 524.731736][T24675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 524.731752][T24675] Call Trace: [ 524.731760][T24675] [ 524.731770][T24675] __dump_stack+0x21/0x30 [ 524.731808][T24675] dump_stack_lvl+0x10c/0x190 [ 524.731839][T24675] ? __cfi_dump_stack_lvl+0x10/0x10 [ 524.731872][T24675] ? check_stack_object+0x12c/0x140 [ 524.731897][T24675] dump_stack+0x19/0x20 [ 524.731928][T24675] should_fail_ex+0x3d9/0x530 [ 524.731953][T24675] should_fail+0xf/0x20 [ 524.731974][T24675] should_fail_usercopy+0x1e/0x30 [ 524.731999][T24675] _copy_to_user+0x24/0xa0 [ 524.732028][T24675] simple_read_from_buffer+0xed/0x160 [ 524.732072][T24675] proc_fail_nth_read+0x19e/0x210 [ 524.732107][T24675] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 524.732136][T24675] ? bpf_lsm_file_permission+0xd/0x20 [ 524.732168][T24675] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 524.732198][T24675] vfs_read+0x27d/0xc70 [ 524.732217][T24675] ? __cfi_vfs_read+0x10/0x10 [ 524.732237][T24675] ? __kasan_check_write+0x18/0x20 [ 524.732270][T24675] ? mutex_lock+0x92/0x1c0 [ 524.732292][T24675] ? __cfi_mutex_lock+0x10/0x10 [ 524.732312][T24675] ? __fget_files+0x2c5/0x340 [ 524.732338][T24675] ksys_read+0x141/0x250 [ 524.732358][T24675] ? __cfi_ksys_read+0x10/0x10 [ 524.732379][T24675] ? __kasan_check_write+0x18/0x20 [ 524.732414][T24675] ? __kasan_check_read+0x15/0x20 [ 524.732447][T24675] __x64_sys_read+0x7f/0x90 [ 524.732468][T24675] x64_sys_call+0x2638/0x2ee0 [ 524.732499][T24675] do_syscall_64+0x58/0xf0 [ 524.732528][T24675] ? clear_bhb_loop+0x50/0xa0 [ 524.732555][T24675] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 524.732580][T24675] RIP: 0033:0x7f6280d8e0dc [ 524.732600][T24675] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 524.732623][T24675] RSP: 002b:00007f6281c4b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 524.732649][T24675] RAX: ffffffffffffffda RBX: 00007f6280fe5fa0 RCX: 00007f6280d8e0dc [ 524.732668][T24675] RDX: 000000000000000f RSI: 00007f6281c4b0a0 RDI: 0000000000000006 [ 524.732682][T24675] RBP: 00007f6281c4b090 R08: 0000000000000000 R09: 0000000000000000 [ 524.732696][T24675] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 524.732710][T24675] R13: 00007f6280fe6038 R14: 00007f6280fe5fa0 R15: 00007ffccb023588 [ 524.732730][T24675] [ 525.600858][T24721] FAULT_INJECTION: forcing a failure. [ 525.600858][T24721] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 525.647320][T24721] CPU: 0 UID: 0 PID: 24721 Comm: syz.2.11309 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 525.647357][T24721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 525.647373][T24721] Call Trace: [ 525.647381][T24721] [ 525.647390][T24721] __dump_stack+0x21/0x30 [ 525.647428][T24721] dump_stack_lvl+0x10c/0x190 [ 525.647459][T24721] ? __cfi_dump_stack_lvl+0x10/0x10 [ 525.647491][T24721] ? vfs_write+0x93e/0xf30 [ 525.647513][T24721] ? check_stack_object+0x107/0x140 [ 525.647536][T24721] dump_stack+0x19/0x20 [ 525.647565][T24721] should_fail_ex+0x3d9/0x530 [ 525.647590][T24721] should_fail+0xf/0x20 [ 525.647612][T24721] should_fail_usercopy+0x1e/0x30 [ 525.647637][T24721] _copy_from_user+0x22/0xb0 [ 525.647665][T24721] __se_sys_capset+0x233/0x440 [ 525.647699][T24721] ? __kasan_check_write+0x18/0x20 [ 525.647734][T24721] ? __x64_sys_capset+0x80/0x80 [ 525.647766][T24721] ? ksys_write+0x1ef/0x250 [ 525.647787][T24721] ? __cfi_ksys_write+0x10/0x10 [ 525.647809][T24721] ? __kasan_check_read+0x15/0x20 [ 525.647857][T24721] __x64_sys_capset+0x5f/0x80 [ 525.647889][T24721] x64_sys_call+0x259c/0x2ee0 [ 525.647923][T24721] do_syscall_64+0x58/0xf0 [ 525.647953][T24721] ? clear_bhb_loop+0x50/0xa0 [ 525.647979][T24721] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 525.648004][T24721] RIP: 0033:0x7f748918f6c9 [ 525.648023][T24721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 525.648045][T24721] RSP: 002b:00007f7489fc1038 EFLAGS: 00000246 ORIG_RAX: 000000000000007e [ 525.648072][T24721] RAX: ffffffffffffffda RBX: 00007f74893e5fa0 RCX: 00007f748918f6c9 [ 525.648090][T24721] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000200000000040 [ 525.648107][T24721] RBP: 00007f7489fc1090 R08: 0000000000000000 R09: 0000000000000000 [ 525.648124][T24721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 525.648139][T24721] R13: 00007f74893e6038 R14: 00007f74893e5fa0 R15: 00007ffec17d4718 [ 525.648160][T24721] [ 526.464178][T24762] 9pnet_fd: Insufficient options for proto=fd [ 527.229833][T24803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11349'. [ 530.085013][T24885] FAULT_INJECTION: forcing a failure. [ 530.085013][T24885] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 530.114170][T24885] CPU: 1 UID: 0 PID: 24885 Comm: syz.2.11389 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 530.114209][T24885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 530.114224][T24885] Call Trace: [ 530.114233][T24885] [ 530.114242][T24885] __dump_stack+0x21/0x30 [ 530.114280][T24885] dump_stack_lvl+0x10c/0x190 [ 530.114311][T24885] ? __cfi_dump_stack_lvl+0x10/0x10 [ 530.114342][T24885] ? check_stack_object+0x12c/0x140 [ 530.114366][T24885] dump_stack+0x19/0x20 [ 530.114395][T24885] should_fail_ex+0x3d9/0x530 [ 530.114421][T24885] should_fail+0xf/0x20 [ 530.114442][T24885] should_fail_usercopy+0x1e/0x30 [ 530.114468][T24885] _copy_from_user+0x22/0xb0 [ 530.114507][T24885] copy_from_sockptr+0x6f/0xa0 [ 530.114537][T24885] do_ipv6_getsockopt+0x11e1/0x1e90 [ 530.114567][T24885] ? __cfi_do_ipv6_getsockopt+0x10/0x10 [ 530.114597][T24885] ? _parse_integer_limit+0x195/0x1e0 [ 530.114633][T24885] ? _parse_integer+0x2e/0x40 [ 530.114667][T24885] ? avc_has_perm_noaudit+0x268/0x360 [ 530.114700][T24885] ? __asan_memcpy+0x5a/0x80 [ 530.114721][T24885] ? avc_has_perm_noaudit+0x286/0x360 [ 530.114755][T24885] ? avc_has_perm+0x144/0x220 [ 530.114786][T24885] ? __cfi_avc_has_perm+0x10/0x10 [ 530.114820][T24885] ipv6_getsockopt+0xbe/0x280 [ 530.114850][T24885] ? __cfi_ipv6_getsockopt+0x10/0x10 [ 530.114878][T24885] ? vfs_write+0x93e/0xf30 [ 530.114901][T24885] udpv6_getsockopt+0x7e/0x90 [ 530.114922][T24885] sock_common_getsockopt+0xaf/0xd0 [ 530.114949][T24885] ? __cfi_sock_common_getsockopt+0x10/0x10 [ 530.114976][T24885] do_sock_getsockopt+0x3a6/0x6d0 [ 530.115011][T24885] ? __cfi_do_sock_getsockopt+0x10/0x10 [ 530.115044][T24885] ? __fget_files+0x2c5/0x340 [ 530.115071][T24885] __x64_sys_getsockopt+0x1d5/0x280 [ 530.115106][T24885] x64_sys_call+0x10db/0x2ee0 [ 530.115140][T24885] do_syscall_64+0x58/0xf0 [ 530.115170][T24885] ? clear_bhb_loop+0x50/0xa0 [ 530.115196][T24885] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 530.115221][T24885] RIP: 0033:0x7f748918f6c9 [ 530.115240][T24885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 530.115261][T24885] RSP: 002b:00007f7489fc1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 530.115287][T24885] RAX: ffffffffffffffda RBX: 00007f74893e5fa0 RCX: 00007f748918f6c9 [ 530.115305][T24885] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000005 [ 530.115320][T24885] RBP: 00007f7489fc1090 R08: 0000200000000040 R09: 0000000000000000 [ 530.115336][T24885] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 530.115352][T24885] R13: 00007f74893e6038 R14: 00007f74893e5fa0 R15: 00007ffec17d4718 [ 530.115372][T24885] [ 531.127748][ T36] audit: type=1400 audit(1763050558.370:379): avc: denied { unmount } for pid=24430 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 531.222847][ T12] bridge_slave_1: left allmulticast mode [ 531.231485][ T12] bridge_slave_1: left promiscuous mode [ 531.237406][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.267574][ T12] bridge_slave_0: left allmulticast mode [ 531.273284][ T12] bridge_slave_0: left promiscuous mode [ 531.299410][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.500128][ T12] veth1_macvtap: left promiscuous mode [ 531.505819][ T12] veth0_vlan: left promiscuous mode [ 531.791337][T24906] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.800937][T24906] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.808376][T24906] bridge_slave_0: entered allmulticast mode [ 531.814871][T24906] bridge_slave_0: entered promiscuous mode [ 531.826016][T24919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11405'. [ 531.830680][T24906] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.845231][T24906] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.852892][T24906] bridge_slave_1: entered allmulticast mode [ 531.859873][T24906] bridge_slave_1: entered promiscuous mode [ 531.913028][T24927] can0: slcan on ptm0. [ 532.011004][T24925] can0 (unregistered): slcan off ptm0. [ 532.038051][T24906] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.045187][T24906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 532.052538][T24906] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.059637][T24906] bridge0: port 1(bridge_slave_0) entered forwarding state [ 532.124797][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.149357][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.179297][T10717] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.186393][T10717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 532.199023][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.206130][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 532.290092][T24906] veth0_vlan: entered promiscuous mode [ 532.309697][T24906] veth1_macvtap: entered promiscuous mode [ 532.355926][T24971] can0: slcan on ptm0. [ 532.429591][T24970] can0 (unregistered): slcan off ptm0. [ 532.659798][T25006] FAULT_INJECTION: forcing a failure. [ 532.659798][T25006] name failslab, interval 1, probability 0, space 0, times 0 [ 532.688083][T25006] CPU: 0 UID: 0 PID: 25006 Comm: syz.4.11431 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 532.688126][T25006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 532.688141][T25006] Call Trace: [ 532.688150][T25006] [ 532.688159][T25006] __dump_stack+0x21/0x30 [ 532.688199][T25006] dump_stack_lvl+0x10c/0x190 [ 532.688229][T25006] ? __cfi_dump_stack_lvl+0x10/0x10 [ 532.688261][T25006] ? vfs_write+0x93e/0xf30 [ 532.688284][T25006] dump_stack+0x19/0x20 [ 532.688313][T25006] should_fail_ex+0x3d9/0x530 [ 532.688338][T25006] should_failslab+0xac/0x100 [ 532.688364][T25006] kmem_cache_alloc_noprof+0x42/0x430 [ 532.688386][T25006] ? getname_flags+0xc6/0x710 [ 532.688410][T25006] getname_flags+0xc6/0x710 [ 532.688434][T25006] user_path_at+0x2b/0x60 [ 532.688468][T25006] __x64_sys_umount+0xf2/0x170 [ 532.688501][T25006] ? __cfi___x64_sys_umount+0x10/0x10 [ 532.688533][T25006] ? __kasan_check_read+0x15/0x20 [ 532.688569][T25006] x64_sys_call+0x2ab8/0x2ee0 [ 532.688604][T25006] do_syscall_64+0x58/0xf0 [ 532.688634][T25006] ? clear_bhb_loop+0x50/0xa0 [ 532.688660][T25006] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 532.688685][T25006] RIP: 0033:0x7f293458f6c9 [ 532.688705][T25006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 532.688726][T25006] RSP: 002b:00007f2935375038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 532.688752][T25006] RAX: ffffffffffffffda RBX: 00007f29347e5fa0 RCX: 00007f293458f6c9 [ 532.688770][T25006] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 532.688785][T25006] RBP: 00007f2935375090 R08: 0000000000000000 R09: 0000000000000000 [ 532.688800][T25006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 532.688815][T25006] R13: 00007f29347e6038 R14: 00007f29347e5fa0 R15: 00007fff55ca7268 [ 532.688835][T25006] [ 532.977305][ T36] audit: type=1400 audit(1763050560.210:380): avc: denied { append } for pid=25013 comm="syz.4.11436" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 536.225761][ T36] audit: type=1400 audit(1763050563.460:381): avc: denied { create } for pid=25106 comm="syz.1.11479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 536.276750][ T36] audit: type=1400 audit(1763050563.460:382): avc: denied { create } for pid=25108 comm="syz.4.11480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 537.666350][T25153] can0: slcan on ptm0. [ 537.737322][T25152] can0 (unregistered): slcan off ptm0. [ 538.850507][T25270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11548'. [ 539.045858][T25298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11560'. [ 540.120788][T25399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11611'. [ 544.557927][T25617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11721'. [ 544.868539][T25643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11734'. [ 548.818827][T25779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11801'. [ 549.604875][T25838] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11829'. [ 550.486528][T25937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11879'. [ 550.802017][T25947] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.817331][T25947] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.825198][T25947] bridge_slave_0: entered allmulticast mode [ 550.856502][T25947] bridge_slave_0: entered promiscuous mode [ 550.866113][T25947] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.887279][T25947] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.894414][T25947] bridge_slave_1: entered allmulticast mode [ 550.916037][T25947] bridge_slave_1: entered promiscuous mode [ 551.043240][T10717] bridge_slave_1: left allmulticast mode [ 551.049060][T10717] bridge_slave_1: left promiscuous mode [ 551.059088][T10717] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.076663][T10717] bridge_slave_0: left allmulticast mode [ 551.082453][T10717] bridge_slave_0: left promiscuous mode [ 551.088350][T10717] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.189790][T25971] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11894'. [ 551.205282][T10717] veth1_macvtap: left promiscuous mode [ 551.217613][T10717] veth0_vlan: left promiscuous mode [ 551.336597][T25947] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.343732][T25947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.351088][T25947] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.358230][T25947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.459723][T25947] veth0_vlan: entered promiscuous mode [ 551.492747][T25947] veth1_macvtap: entered promiscuous mode [ 551.829110][T26007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11909'. [ 552.557306][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 552.633629][T26035] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.643605][T26035] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.667365][T26035] bridge_slave_0: entered allmulticast mode [ 552.677801][T26035] bridge_slave_0: entered promiscuous mode [ 552.686360][T26035] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.693534][T26035] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.700806][T26035] bridge_slave_1: entered allmulticast mode [ 552.707799][T26035] bridge_slave_1: entered promiscuous mode [ 552.717309][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 552.723579][ T10] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 552.731998][ T10] usb 5-1: config 0 has no interface number 0 [ 552.742115][ T10] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 552.763867][ T10] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 552.773235][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.781382][ T10] usb 5-1: Product: syz [ 552.785833][ T10] usb 5-1: Manufacturer: syz [ 552.790748][ T10] usb 5-1: SerialNumber: syz [ 552.796873][ T10] usb 5-1: config 0 descriptor?? [ 552.802390][T26034] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 552.933907][ T332] veth1_macvtap: left promiscuous mode [ 552.942292][ T332] veth0_vlan: left promiscuous mode [ 553.028840][T26034] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 553.168485][T10717] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.175755][T10717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 553.200045][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.207234][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 553.268622][T26035] veth0_vlan: entered promiscuous mode [ 553.300105][T26035] veth1_macvtap: entered promiscuous mode [ 555.457499][ T10] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 555.475594][ T10] asix 5-1:0.188: probe with driver asix failed with error -71 [ 555.488304][ T10] usb 5-1: USB disconnect, device number 2 [ 556.437342][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 556.597305][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 556.607901][ T10] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 556.616128][ T10] usb 4-1: config 0 has no interface number 0 [ 556.627481][ T10] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 556.650662][ T10] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 556.668993][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.687330][ T10] usb 4-1: Product: syz [ 556.691553][ T10] usb 4-1: Manufacturer: syz [ 556.696174][ T10] usb 4-1: SerialNumber: syz [ 556.711989][ T10] usb 4-1: config 0 descriptor?? [ 556.717394][T26244] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 556.938615][T26244] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 557.280678][ T12] bridge_slave_1: left allmulticast mode [ 557.286390][ T12] bridge_slave_1: left promiscuous mode [ 557.293692][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.301469][ T12] bridge_slave_0: left allmulticast mode [ 557.308198][ T12] bridge_slave_0: left promiscuous mode [ 557.313878][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.433240][T26304] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.440486][T26304] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.448230][T26304] bridge_slave_0: entered allmulticast mode [ 557.454784][T26304] bridge_slave_0: entered promiscuous mode [ 557.464372][ T12] veth1_macvtap: left promiscuous mode [ 557.469991][ T12] veth0_vlan: left promiscuous mode [ 557.531619][T26335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12065'. [ 557.540873][T26304] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.552710][T26304] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.559956][T26304] bridge_slave_1: entered allmulticast mode [ 557.566469][T26304] bridge_slave_1: entered promiscuous mode [ 557.641003][T26304] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.648089][T26304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 557.655374][T26304] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.662443][T26304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 557.688732][T10717] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.702309][T10717] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.725076][T10717] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.732316][T10717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 557.749279][ T332] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.756405][ T332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 557.827146][T26304] veth0_vlan: entered promiscuous mode [ 557.854849][T26304] veth1_macvtap: entered promiscuous mode [ 558.550513][T26399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12090'. [ 559.385584][ T10] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 559.407335][ T10] asix 4-1:0.188: probe with driver asix failed with error -71 [ 559.417494][ T10] usb 4-1: USB disconnect, device number 11 [ 559.907735][T26465] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12127'. [ 561.633309][T26649] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12219'. [ 563.067358][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 563.237282][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 563.248013][ T10] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 563.256305][ T10] usb 4-1: config 0 has no interface number 0 [ 563.262772][ T10] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 563.280300][ T10] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 563.289807][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.307319][ T10] usb 4-1: Product: syz [ 563.311670][ T10] usb 4-1: Manufacturer: syz [ 563.316314][ T10] usb 4-1: SerialNumber: syz [ 563.338264][ T10] usb 4-1: config 0 descriptor?? [ 563.345631][T26683] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 563.556575][T26683] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 563.969675][T26707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12246'. [ 566.187931][ T10] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 566.202183][ T10] asix 4-1:0.188: probe with driver asix failed with error -71 [ 566.232047][ T10] usb 4-1: USB disconnect, device number 12 [ 567.104595][T26806] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12295'. [ 567.188600][T26808] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12296'. [ 568.247291][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 568.407292][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 568.413724][ T10] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 568.422158][ T10] usb 3-1: config 0 has no interface number 0 [ 568.432281][ T10] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 568.455072][ T10] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 568.467269][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.487270][ T10] usb 3-1: Product: syz [ 568.491499][ T10] usb 3-1: Manufacturer: syz [ 568.511165][ T10] usb 3-1: SerialNumber: syz [ 568.521680][ T10] usb 3-1: config 0 descriptor?? [ 568.537165][T26848] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 568.748804][T26848] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 569.724855][T26944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12364'. [ 569.768633][ T10] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 569.795064][ T10] asix 3-1:0.188: probe with driver asix failed with error -32 [ 570.284595][T26979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12381'. [ 571.028620][ T66] usb 3-1: USB disconnect, device number 14 [ 572.183351][T27082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12432'. [ 573.184902][T27123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12453'. [ 573.408499][T27143] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12463'. [ 574.839481][T27209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12496'. [ 577.322746][T27373] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12577'. [ 578.109585][T27387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12586'. [ 580.839335][T27541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12662'. [ 585.797294][ T66] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 585.957264][ T66] usb 4-1: Using ep0 maxpacket: 32 [ 585.969531][ T66] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 585.980170][ T66] usb 4-1: config 0 has no interface number 0 [ 585.996351][ T66] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 586.015771][ T66] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 586.026082][ T66] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.034804][ T66] usb 4-1: Product: syz [ 586.039796][ T66] usb 4-1: Manufacturer: syz [ 586.046333][ T66] usb 4-1: SerialNumber: syz [ 586.060679][ T66] usb 4-1: config 0 descriptor?? [ 586.070066][T27827] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 586.279691][T27827] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 587.101428][ T66] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 587.121749][ T66] asix 4-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 587.142364][ T66] asix 4-1:0.188: probe with driver asix failed with error -61 [ 587.314970][T27972] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12877'. [ 588.230938][T28056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12918'. [ 588.391433][T28075] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28075 comm=syz.1.12926 [ 588.567628][ T66] usb 4-1: USB disconnect, device number 13 [ 588.852350][T28116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12946'. [ 589.697807][T28226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13001'. [ 592.126267][T28334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13055'. [ 592.427278][ T63] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 592.597272][ T63] usb 4-1: Using ep0 maxpacket: 32 [ 592.608788][ T63] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 592.627286][ T63] usb 4-1: config 0 has no interface number 0 [ 592.633456][ T63] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 592.655068][ T63] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 592.667266][ T63] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.685504][ T63] usb 4-1: Product: syz [ 592.695606][ T63] usb 4-1: Manufacturer: syz [ 592.700466][ T63] usb 4-1: SerialNumber: syz [ 592.716326][ T63] usb 4-1: config 0 descriptor?? [ 592.721753][T28336] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 592.931019][T28336] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 593.557341][T28438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13106'. [ 593.750240][ T63] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 593.767278][ T63] asix 4-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 593.797328][ T63] asix 4-1:0.188: probe with driver asix failed with error -61 [ 594.405528][T28468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13115'. [ 594.407306][ T66] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 594.577354][ T66] usb 5-1: Using ep0 maxpacket: 32 [ 594.588023][ T66] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 594.606510][ T66] usb 5-1: config 0 has no interface number 0 [ 594.612729][ T66] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 594.634561][ T66] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 594.647271][ T66] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.668569][ T66] usb 5-1: Product: syz [ 594.672806][ T66] usb 5-1: Manufacturer: syz [ 594.687278][ T66] usb 5-1: SerialNumber: syz [ 594.698286][ T66] usb 5-1: config 0 descriptor?? [ 594.713817][T28452] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 594.927281][T28452] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 595.206994][ T63] usb 4-1: USB disconnect, device number 14 [ 595.741076][ T66] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 595.761498][ T66] asix 5-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 595.782224][ T66] asix 5-1:0.188: probe with driver asix failed with error -61 [ 597.181518][ T2585] usb 5-1: USB disconnect, device number 3 [ 597.367946][T28649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13208'. [ 598.507674][T28669] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13220'. [ 599.047320][ T2585] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 599.227302][ T2585] usb 4-1: Using ep0 maxpacket: 32 [ 599.238054][ T2585] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 599.246289][ T2585] usb 4-1: config 0 has no interface number 0 [ 599.267310][ T2585] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 599.288759][ T2585] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 599.298310][ T2585] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.306345][ T2585] usb 4-1: Product: syz [ 599.327277][ T2585] usb 4-1: Manufacturer: syz [ 599.331937][ T2585] usb 4-1: SerialNumber: syz [ 599.347742][ T2585] usb 4-1: config 0 descriptor?? [ 599.354904][T28699] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 599.564721][T28699] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 600.408747][ T2585] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 600.427319][ T2585] asix 4-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 600.457312][ T2585] asix 4-1:0.188: probe with driver asix failed with error -61 [ 601.821236][ T66] usb 4-1: USB disconnect, device number 15 [ 603.671922][T28930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13347'. [ 604.647271][ T63] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 604.807254][ T63] usb 3-1: Using ep0 maxpacket: 32 [ 604.815360][ T63] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 604.825068][ T63] usb 3-1: config 0 has no interface number 0 [ 604.836850][ T63] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 604.851806][ T63] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 604.861661][ T63] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.870068][ T63] usb 3-1: Product: syz [ 604.874474][ T63] usb 3-1: Manufacturer: syz [ 604.879532][ T63] usb 3-1: SerialNumber: syz [ 604.889853][ T63] usb 3-1: config 0 descriptor?? [ 604.903191][T28974] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 605.118011][T28974] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 605.933228][ T63] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 605.943583][ T63] asix 3-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 605.954265][ T63] asix 3-1:0.188: probe with driver asix failed with error -61 [ 607.429189][ T2585] usb 3-1: USB disconnect, device number 15 [ 609.328388][ T2585] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 609.487274][ T2585] usb 2-1: Using ep0 maxpacket: 32 [ 609.498350][ T2585] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 609.517116][ T2585] usb 2-1: config 0 has no interface number 0 [ 609.524034][ T2585] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 609.545684][ T2585] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 609.565003][ T2585] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.585196][ T2585] usb 2-1: Product: syz [ 609.589630][ T2585] usb 2-1: Manufacturer: syz [ 609.594265][ T2585] usb 2-1: SerialNumber: syz [ 609.608077][ T2585] usb 2-1: config 0 descriptor?? [ 609.617719][T29381] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 609.829783][T29381] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 610.651302][ T2585] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 610.687268][ T2585] asix 2-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 610.717335][ T2585] asix 2-1:0.188: probe with driver asix failed with error -61 [ 611.395572][T29470] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29470 comm=syz.2.13616 [ 611.695622][T29501] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29501 comm=syz.3.13630 [ 612.115960][ T2585] usb 2-1: USB disconnect, device number 8 [ 614.832230][T29624] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.847253][T29624] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.854404][T29624] bridge_slave_0: entered allmulticast mode [ 614.861168][T29624] bridge_slave_0: entered promiscuous mode [ 614.870153][T29624] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.877995][T29624] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.885306][T29624] bridge_slave_1: entered allmulticast mode [ 614.897780][T29624] bridge_slave_1: entered promiscuous mode [ 614.978744][ T332] bridge_slave_1: left allmulticast mode [ 614.984459][ T332] bridge_slave_1: left promiscuous mode [ 614.990568][ T332] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.008216][ T332] bridge_slave_0: left allmulticast mode [ 615.013919][ T332] bridge_slave_0: left promiscuous mode [ 615.027346][ T332] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.178296][ T332] veth1_macvtap: left promiscuous mode [ 615.183892][ T332] veth0_vlan: left promiscuous mode [ 615.388749][T29624] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.395866][T29624] bridge0: port 2(bridge_slave_1) entered forwarding state [ 615.403340][T29624] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.410429][T29624] bridge0: port 1(bridge_slave_0) entered forwarding state [ 615.488211][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.508754][T10717] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.515840][T10717] bridge0: port 2(bridge_slave_1) entered forwarding state [ 615.581384][T29624] veth0_vlan: entered promiscuous mode [ 615.595379][T29624] veth1_macvtap: entered promiscuous mode [ 636.687283][ T66] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 636.837274][ T66] usb 2-1: Using ep0 maxpacket: 32 [ 636.845066][ T66] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 636.853346][ T66] usb 2-1: config 0 has no interface number 0 [ 636.864458][ T66] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 636.873872][ T66] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.892312][ T66] usb 2-1: Product: syz [ 636.902529][ T66] usb 2-1: Manufacturer: syz [ 636.919443][ T66] usb 2-1: SerialNumber: syz [ 636.927532][ T66] usb 2-1: config 0 descriptor?? [ 637.136437][ T66] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 637.156879][ T66] asix 2-1:0.188: probe with driver asix failed with error -32 [ 638.508652][T10717] bridge_slave_1: left allmulticast mode [ 638.514360][T10717] bridge_slave_1: left promiscuous mode [ 638.520372][T10717] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.535549][T10717] bridge_slave_0: left allmulticast mode [ 638.543201][T10717] bridge_slave_0: left promiscuous mode [ 638.549282][T10717] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.670118][T10717] veth1_macvtap: left promiscuous mode [ 638.675705][T10717] veth0_vlan: left promiscuous mode [ 638.823861][T30826] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.837256][T30826] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.854904][T30826] bridge_slave_0: entered allmulticast mode [ 638.861960][T30826] bridge_slave_0: entered promiscuous mode [ 638.878038][T30826] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.885126][T30826] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.900137][T30826] bridge_slave_1: entered allmulticast mode [ 638.906592][T30826] bridge_slave_1: entered promiscuous mode [ 639.046659][T30826] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.053798][T30826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 639.061169][T30826] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.068252][T30826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 639.095370][T10717] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.103662][T10717] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.121050][T10717] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.128239][T10717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 639.136063][T10717] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.143183][T10717] bridge0: port 2(bridge_slave_1) entered forwarding state [ 639.177843][T30826] veth0_vlan: entered promiscuous mode [ 639.202609][T30826] veth1_macvtap: entered promiscuous mode [ 639.480268][ T66] usb 2-1: USB disconnect, device number 9 [ 644.649232][T10717] bridge_slave_1: left allmulticast mode [ 644.655831][T10717] bridge_slave_1: left promiscuous mode [ 644.661889][T10717] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.677553][T10717] bridge_slave_0: left allmulticast mode [ 644.683367][T10717] bridge_slave_0: left promiscuous mode [ 644.693565][T10717] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.889685][T10717] veth1_macvtap: left promiscuous mode [ 644.895273][T10717] veth0_vlan: left promiscuous mode [ 645.113026][T31140] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.142752][T31140] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.162757][T31140] bridge_slave_0: entered allmulticast mode [ 645.173438][T31140] bridge_slave_0: entered promiscuous mode [ 645.187612][T31140] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.194718][T31140] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.202508][T31140] bridge_slave_1: entered allmulticast mode [ 645.209344][T31140] bridge_slave_1: entered promiscuous mode [ 645.382202][T31140] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.389337][T31140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 645.396651][T31140] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.403764][T31140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 645.431970][T10717] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.439780][T10717] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.466731][T10717] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.473862][T10717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 645.498449][T10717] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.505556][T10717] bridge0: port 2(bridge_slave_1) entered forwarding state [ 645.551095][T31140] veth0_vlan: entered promiscuous mode [ 645.578369][T31140] veth1_macvtap: entered promiscuous mode [ 654.583064][T10717] bridge_slave_1: left allmulticast mode [ 654.592566][T10717] bridge_slave_1: left promiscuous mode [ 654.607331][T10717] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.625307][T10717] bridge_slave_0: left allmulticast mode [ 654.631337][T10717] bridge_slave_0: left promiscuous mode [ 654.647234][T10717] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.751650][T31495] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.759100][T31495] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.766306][T31495] bridge_slave_0: entered allmulticast mode [ 654.773046][T31495] bridge_slave_0: entered promiscuous mode [ 654.780335][T10717] veth1_macvtap: left promiscuous mode [ 654.785993][T10717] veth0_vlan: left promiscuous mode [ 654.851148][T31495] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.858395][T31495] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.865669][T31495] bridge_slave_1: entered allmulticast mode [ 654.872299][T31495] bridge_slave_1: entered promiscuous mode [ 654.957060][T31495] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.964212][T31495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 654.971551][T31495] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.978640][T31495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 655.008271][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.024058][ T332] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.031204][ T332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 655.081725][T31495] veth0_vlan: entered promiscuous mode [ 655.095145][T31495] veth1_macvtap: entered promiscuous mode [ 660.337256][ T2585] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 660.507259][ T2585] usb 2-1: Using ep0 maxpacket: 32 [ 660.519439][ T2585] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 660.528335][ T2585] usb 2-1: config 0 has no interface number 0 [ 660.534570][ T2585] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 660.549425][ T2585] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 660.561892][ T2585] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.579427][ T2585] usb 2-1: Product: syz [ 660.589457][ T2585] usb 2-1: Manufacturer: syz [ 660.598569][ T2585] usb 2-1: SerialNumber: syz [ 660.609575][ T2585] usb 2-1: config 0 descriptor?? [ 660.620832][T31809] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 660.832326][T31809] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 661.044585][ T2585] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 661.064376][ T2585] asix 2-1:0.188: probe with driver asix failed with error -32 [ 663.128258][ T63] usb 2-1: USB disconnect, device number 10 [ 663.647248][ T63] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 663.797249][ T63] usb 2-1: Using ep0 maxpacket: 32 [ 663.803816][ T63] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 663.812213][ T63] usb 2-1: config 0 has no interface number 0 [ 663.818568][ T63] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 663.830410][ T63] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 663.839724][ T63] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.847963][ T63] usb 2-1: Product: syz [ 663.852366][ T63] usb 2-1: Manufacturer: syz [ 663.857124][ T63] usb 2-1: SerialNumber: syz [ 663.866697][ T63] usb 2-1: config 0 descriptor?? [ 663.872623][T31997] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 664.081822][T31997] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 664.290132][ T63] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 664.300660][ T63] asix 2-1:0.188: probe with driver asix failed with error -32 [ 666.444114][ T331] usb 2-1: USB disconnect, device number 11 [ 667.087246][ T31] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 667.257251][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 667.267633][ T31] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 667.275891][ T31] usb 5-1: config 0 has no interface number 0 [ 667.282364][ T31] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 667.294253][ T31] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 667.303693][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.312185][ T31] usb 5-1: Product: syz [ 667.316682][ T31] usb 5-1: Manufacturer: syz [ 667.321627][ T31] usb 5-1: SerialNumber: syz [ 667.327544][ T31] usb 5-1: config 0 descriptor?? [ 667.333138][T32145] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 667.543075][T32145] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 667.757585][ T31] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 667.777324][ T31] asix 5-1:0.188: probe with driver asix failed with error -32 [ 669.872620][ T31] usb 5-1: USB disconnect, device number 4 [ 675.167273][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 675.337752][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 675.359542][ T10] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 675.368023][ T10] usb 4-1: config 0 has no interface number 0 [ 675.378994][ T10] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 675.390755][ T10] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 675.400105][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.417229][ T10] usb 4-1: Product: syz [ 675.421554][ T10] usb 4-1: Manufacturer: syz [ 675.426185][ T10] usb 4-1: SerialNumber: syz [ 675.444359][ T10] usb 4-1: config 0 descriptor?? [ 675.453164][T32395] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 675.668972][T32395] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 675.887401][ T10] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 675.907836][ T10] asix 4-1:0.188: probe with driver asix failed with error -61 [ 677.307259][ T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 677.457270][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 677.463674][ T10] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 677.472074][ T10] usb 3-1: config 0 has no interface number 0 [ 677.478242][ T10] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 677.489695][ T10] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 677.498829][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.506854][ T10] usb 3-1: Product: syz [ 677.511104][ T10] usb 3-1: Manufacturer: syz [ 677.515901][ T10] usb 3-1: SerialNumber: syz [ 677.521534][ T10] usb 3-1: config 0 descriptor?? [ 677.526914][T32480] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 677.735651][T32480] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 677.943385][ T331] usb 4-1: USB disconnect, device number 16 [ 677.956821][ T10] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 677.976104][ T10] asix 3-1:0.188: probe with driver asix failed with error -61 [ 680.082848][T32158] usb 3-1: USB disconnect, device number 16 [ 681.837246][ T63] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 681.997234][ T63] usb 4-1: Using ep0 maxpacket: 32 [ 682.008340][ T63] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 682.026969][ T63] usb 4-1: config 0 has no interface number 0 [ 682.036931][ T63] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 682.058612][ T63] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 682.077221][ T63] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.095516][ T63] usb 4-1: Product: syz [ 682.100087][ T63] usb 4-1: Manufacturer: syz [ 682.104726][ T63] usb 4-1: SerialNumber: syz [ 682.118007][ T63] usb 4-1: config 0 descriptor?? [ 682.123461][T32710] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 682.334088][T32710] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 682.542821][ T63] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 682.553349][ T63] asix 4-1:0.188: probe with driver asix failed with error -61 [ 683.842395][ T344] FAULT_INJECTION: forcing a failure. [ 683.842395][ T344] name failslab, interval 1, probability 0, space 0, times 0 [ 683.855360][ T344] CPU: 0 UID: 0 PID: 344 Comm: syz.4.15238 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 683.855399][ T344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 683.855415][ T344] Call Trace: [ 683.855424][ T344] [ 683.855435][ T344] __dump_stack+0x21/0x30 [ 683.855479][ T344] dump_stack_lvl+0x10c/0x190 [ 683.855511][ T344] ? __cfi_dump_stack_lvl+0x10/0x10 [ 683.855543][ T344] ? __cfi___xa_alloc+0x10/0x10 [ 683.855569][ T344] dump_stack+0x19/0x20 [ 683.855597][ T344] should_fail_ex+0x3d9/0x530 [ 683.855625][ T344] should_failslab+0xac/0x100 [ 683.855654][ T344] __kmalloc_cache_node_noprof+0x46/0x450 [ 683.855680][ T344] ? page_pool_create_percpu+0x85/0xee0 [ 683.855718][ T344] page_pool_create_percpu+0x85/0xee0 [ 683.855752][ T344] page_pool_create+0x1e/0x30 [ 683.855785][ T344] __veth_napi_enable_range+0x17b/0xa80 [ 683.855899][ T344] ? __kfree_skb+0x18f/0x210 [ 683.855932][ T344] ? get_page+0x90/0x90 [ 683.855963][ T344] ? netif_napi_add_weight+0x9cf/0xcb0 [ 683.856005][ T344] veth_napi_enable_range+0xc9/0x160 [ 683.856038][ T344] veth_set_features+0x155/0x230 [ 683.856069][ T344] __netdev_update_features+0x6eb/0x1710 [ 683.856095][ T344] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 683.856123][ T344] ? __asan_memcpy+0x5a/0x80 [ 683.856145][ T344] ? __cfi___netdev_update_features+0x10/0x10 [ 683.856170][ T344] ? avc_has_perm_noaudit+0x286/0x360 [ 683.856207][ T344] ? cred_has_capability+0x281/0x380 [ 683.856235][ T344] ? selinux_perf_event_alloc+0x110/0x110 [ 683.856265][ T344] ? __kasan_check_write+0x18/0x20 [ 683.856300][ T344] ethtool_set_one_feature+0x2b5/0x310 [ 683.856325][ T344] ? ethtool_get_one_feature+0x290/0x290 [ 683.856349][ T344] dev_ethtool+0xf68/0x1850 [ 683.856383][ T344] ? __cfi_dev_ethtool+0x10/0x10 [ 683.856416][ T344] ? ioctl_has_perm+0x384/0x4d0 [ 683.856444][ T344] ? has_cap_mac_admin+0xd0/0xd0 [ 683.856470][ T344] ? full_name_hash+0xa1/0xf0 [ 683.856496][ T344] ? dev_get_by_name_rcu+0xe9/0x140 [ 683.856537][ T344] dev_ioctl+0x4e0/0x1030 [ 683.856567][ T344] sock_do_ioctl+0x244/0x330 [ 683.856608][ T344] ? sock_show_fdinfo+0xd0/0xd0 [ 683.856639][ T344] ? __cfi_vfs_write+0x10/0x10 [ 683.856670][ T344] ? __kasan_check_write+0x18/0x20 [ 683.856705][ T344] ? mutex_unlock+0x8b/0x240 [ 683.856727][ T344] sock_ioctl+0x634/0x7b0 [ 683.856751][ T344] ? __cfi_sock_ioctl+0x10/0x10 [ 683.856775][ T344] ? __fget_files+0x2c5/0x340 [ 683.856801][ T344] ? bpf_lsm_file_ioctl+0xd/0x20 [ 683.856839][ T344] ? security_file_ioctl+0x34/0xd0 [ 683.856866][ T344] ? __cfi_sock_ioctl+0x10/0x10 [ 683.856890][ T344] __se_sys_ioctl+0x135/0x1b0 [ 683.856916][ T344] __x64_sys_ioctl+0x7f/0xa0 [ 683.856942][ T344] x64_sys_call+0x1878/0x2ee0 [ 683.856977][ T344] do_syscall_64+0x58/0xf0 [ 683.857013][ T344] ? clear_bhb_loop+0x50/0xa0 [ 683.857045][ T344] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 683.857069][ T344] RIP: 0033:0x7feb13f8f6c9 [ 683.857104][ T344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 683.857132][ T344] RSP: 002b:00007feb14ef1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 683.857159][ T344] RAX: ffffffffffffffda RBX: 00007feb141e5fa0 RCX: 00007feb13f8f6c9 [ 683.857183][ T344] RDX: 00002000000002c0 RSI: 0000000000008946 RDI: 0000000000000005 [ 683.857197][ T344] RBP: 00007feb14ef1090 R08: 0000000000000000 R09: 0000000000000000 [ 683.857217][ T344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 683.857230][ T344] R13: 00007feb141e6038 R14: 00007feb141e5fa0 R15: 00007fff5e85c108 [ 683.857251][ T344] [ 684.117520][ T2585] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 684.223839][ T344] veth0_to_team: set_features() failed (-12); wanted 0x000061164fdd49e9, left 0x000061164fdd09e9 [ 684.387291][ T2585] usb 2-1: Using ep0 maxpacket: 32 [ 684.398523][ T2585] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 684.417233][ T2585] usb 2-1: config 0 has no interface number 0 [ 684.423479][ T2585] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 684.438662][ T2585] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 684.448128][ T2585] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.456168][ T2585] usb 2-1: Product: syz [ 684.463708][ T2585] usb 2-1: Manufacturer: syz [ 684.469225][ T2585] usb 2-1: SerialNumber: syz [ 684.477503][ T2585] usb 2-1: config 0 descriptor?? [ 684.482972][ T326] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 684.612303][ T331] usb 4-1: USB disconnect, device number 17 [ 684.699023][ T326] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 684.919438][ T2585] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 684.937284][ T2585] asix 2-1:0.188: probe with driver asix failed with error -61 [ 685.342413][ T408] FAULT_INJECTION: forcing a failure. [ 685.342413][ T408] name failslab, interval 1, probability 0, space 0, times 0 [ 685.355348][ T408] CPU: 1 UID: 0 PID: 408 Comm: syz.2.15267 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 685.355386][ T408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 685.355402][ T408] Call Trace: [ 685.355410][ T408] [ 685.355420][ T408] __dump_stack+0x21/0x30 [ 685.355459][ T408] dump_stack_lvl+0x10c/0x190 [ 685.355490][ T408] ? __cfi_dump_stack_lvl+0x10/0x10 [ 685.355523][ T408] dump_stack+0x19/0x20 [ 685.355552][ T408] should_fail_ex+0x3d9/0x530 [ 685.355576][ T408] ? genl_family_rcv_msg_attrs_parse+0xc6/0x390 [ 685.355604][ T408] should_failslab+0xac/0x100 [ 685.355631][ T408] __kmalloc_noprof+0x69/0x530 [ 685.355653][ T408] ? genl_family_rcv_msg_attrs_parse+0xc6/0x390 [ 685.355679][ T408] ? cred_has_capability+0x281/0x380 [ 685.355708][ T408] genl_family_rcv_msg_attrs_parse+0xc6/0x390 [ 685.355735][ T408] genl_family_rcv_msg_doit+0xcd/0x330 [ 685.355760][ T408] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 685.355786][ T408] ? selinux_capable+0x38/0x50 [ 685.355820][ T408] ? bpf_lsm_capable+0xd/0x20 [ 685.355855][ T408] ? ns_capable+0x91/0xf0 [ 685.355890][ T408] genl_rcv_msg+0x609/0x7a0 [ 685.355915][ T408] ? __cfi_genl_rcv_msg+0x10/0x10 [ 685.355938][ T408] ? __cfi_ieee802154_llsec_setparams+0x10/0x10 [ 685.355969][ T408] netlink_rcv_skb+0x22b/0x4a0 [ 685.356001][ T408] ? __cfi_genl_rcv_msg+0x10/0x10 [ 685.356025][ T408] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 685.356057][ T408] ? rwsem_read_trylock+0x2b1/0x660 [ 685.356091][ T408] ? down_read+0x79/0xe0 [ 685.356114][ T408] ? __cfi_down_read+0x10/0x10 [ 685.356138][ T408] ? is_vmalloc_addr+0x11/0x40 [ 685.356166][ T408] genl_rcv+0x2c/0x40 [ 685.356186][ T408] netlink_unicast+0x8c0/0xa60 [ 685.356215][ T408] netlink_sendmsg+0x7f0/0xaf0 [ 685.356249][ T408] ? __cfi_netlink_sendmsg+0x10/0x10 [ 685.356283][ T408] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 685.356311][ T408] ? security_socket_sendmsg+0x33/0xd0 [ 685.356333][ T408] ? __cfi_netlink_sendmsg+0x10/0x10 [ 685.356365][ T408] ____sys_sendmsg+0xa15/0xa70 [ 685.356401][ T408] ? __sys_sendmsg_sock+0x50/0x50 [ 685.356437][ T408] ? import_iovec+0x81/0xb0 [ 685.356469][ T408] ___sys_sendmsg+0x220/0x2a0 [ 685.356503][ T408] ? __sys_sendmsg+0x280/0x280 [ 685.356546][ T408] ? proc_fail_nth_write+0x17e/0x210 [ 685.356580][ T408] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 685.356619][ T408] __x64_sys_sendmsg+0x1eb/0x2c0 [ 685.356653][ T408] ? fput+0x1a5/0x240 [ 685.356681][ T408] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 685.356714][ T408] ? ksys_write+0x1ef/0x250 [ 685.356737][ T408] ? __kasan_check_read+0x15/0x20 [ 685.356773][ T408] x64_sys_call+0x2a4c/0x2ee0 [ 685.356808][ T408] do_syscall_64+0x58/0xf0 [ 685.356845][ T408] ? clear_bhb_loop+0x50/0xa0 [ 685.356871][ T408] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 685.356905][ T408] RIP: 0033:0x7fed0678f6c9 [ 685.356925][ T408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 685.356954][ T408] RSP: 002b:00007fed075a6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 685.356980][ T408] RAX: ffffffffffffffda RBX: 00007fed069e5fa0 RCX: 00007fed0678f6c9 [ 685.356998][ T408] RDX: 0000000020004010 RSI: 0000200000000600 RDI: 0000000000000006 [ 685.357014][ T408] RBP: 00007fed075a6090 R08: 0000000000000000 R09: 0000000000000000 [ 685.357030][ T408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 685.357045][ T408] R13: 00007fed069e6038 R14: 00007fed069e5fa0 R15: 00007ffe9124f7a8 [ 685.357065][ T408] [ 686.343530][ T447] netlink: 76 bytes leftover after parsing attributes in process `syz.2.15285'. [ 686.394453][ T450] syz.2.15286 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 686.791354][ T10] usb 2-1: USB disconnect, device number 12 [ 686.874016][ T471] raw_sendmsg: syz.3.15296 forgot to set AF_INET. Fix it! [ 686.913185][ T36] audit: type=1400 audit(1763050714.140:383): avc: denied { accept } for pid=470 comm="syz.3.15296" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 687.017862][ T482] netlink: 'syz.3.15301': attribute type 15 has an invalid length. [ 687.049029][ T482] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15301'. [ 687.068995][ T485] FAULT_INJECTION: forcing a failure. [ 687.068995][ T485] name failslab, interval 1, probability 0, space 0, times 0 [ 687.117277][ T485] CPU: 1 UID: 0 PID: 485 Comm: syz.3.15301 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 687.117317][ T485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 687.117333][ T485] Call Trace: [ 687.117341][ T485] [ 687.117351][ T485] __dump_stack+0x21/0x30 [ 687.117400][ T485] dump_stack_lvl+0x10c/0x190 [ 687.117431][ T485] ? __cfi_dump_stack_lvl+0x10/0x10 [ 687.117463][ T485] ? release_sock+0x171/0x1f0 [ 687.117493][ T485] dump_stack+0x19/0x20 [ 687.117522][ T485] should_fail_ex+0x3d9/0x530 [ 687.117547][ T485] should_failslab+0xac/0x100 [ 687.117575][ T485] kmem_cache_alloc_node_noprof+0x45/0x440 [ 687.117599][ T485] ? netlink_data_ready+0x20/0x20 [ 687.117629][ T485] ? __alloc_skb+0x10c/0x370 [ 687.117659][ T485] __alloc_skb+0x10c/0x370 [ 687.117686][ T485] netlink_alloc_large_skb+0xf7/0x1b0 [ 687.117717][ T485] netlink_sendmsg+0x586/0xaf0 [ 687.117752][ T485] ? __cfi_netlink_sendmsg+0x10/0x10 [ 687.117787][ T485] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 687.117816][ T485] ? security_socket_sendmsg+0x33/0xd0 [ 687.117839][ T485] ? __cfi_netlink_sendmsg+0x10/0x10 [ 687.117872][ T485] ____sys_sendmsg+0xa15/0xa70 [ 687.117908][ T485] ? __sys_sendmsg_sock+0x50/0x50 [ 687.117944][ T485] ? import_iovec+0x81/0xb0 [ 687.117976][ T485] ___sys_sendmsg+0x220/0x2a0 [ 687.118009][ T485] ? __sys_sendmsg+0x280/0x280 [ 687.118044][ T485] ? proc_fail_nth_write+0x17e/0x210 [ 687.118075][ T485] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 687.118114][ T485] __x64_sys_sendmsg+0x1eb/0x2c0 [ 687.118148][ T485] ? fput+0x1a5/0x240 [ 687.118176][ T485] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 687.118209][ T485] ? ksys_write+0x1ef/0x250 [ 687.118233][ T485] ? __kasan_check_read+0x15/0x20 [ 687.118269][ T485] x64_sys_call+0x2a4c/0x2ee0 [ 687.118303][ T485] do_syscall_64+0x58/0xf0 [ 687.118333][ T485] ? clear_bhb_loop+0x50/0xa0 [ 687.118359][ T485] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 687.118392][ T485] RIP: 0033:0x7f09e6b8f6c9 [ 687.118412][ T485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 687.118433][ T485] RSP: 002b:00007f09e7ae7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 687.118458][ T485] RAX: ffffffffffffffda RBX: 00007f09e6de6090 RCX: 00007f09e6b8f6c9 [ 687.118476][ T485] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000006 [ 687.118492][ T485] RBP: 00007f09e7ae7090 R08: 0000000000000000 R09: 0000000000000000 [ 687.118506][ T485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 687.118521][ T485] R13: 00007f09e6de6128 R14: 00007f09e6de6090 R15: 00007ffcf7c19c18 [ 687.118541][ T485] [ 687.515803][ T36] audit: type=1400 audit(1763050714.750:384): avc: denied { write } for pid=494 comm="syz.3.15305" path="socket:[237419]" dev="sockfs" ino=237419 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 688.630000][ T518] FAULT_INJECTION: forcing a failure. [ 688.630000][ T518] name failslab, interval 1, probability 0, space 0, times 0 [ 688.664300][ T518] CPU: 1 UID: 0 PID: 518 Comm: syz.3.15316 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 688.664341][ T518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 688.664358][ T518] Call Trace: [ 688.664366][ T518] [ 688.664376][ T518] __dump_stack+0x21/0x30 [ 688.664414][ T518] dump_stack_lvl+0x10c/0x190 [ 688.664446][ T518] ? __cfi_dump_stack_lvl+0x10/0x10 [ 688.664477][ T518] ? cred_has_capability+0x281/0x380 [ 688.664507][ T518] dump_stack+0x19/0x20 [ 688.664537][ T518] should_fail_ex+0x3d9/0x530 [ 688.664568][ T518] ? sock_kmalloc+0xde/0x1e0 [ 688.664603][ T518] should_failslab+0xac/0x100 [ 688.664630][ T518] __kmalloc_noprof+0x69/0x530 [ 688.664653][ T518] ? sock_kmalloc+0xde/0x1e0 [ 688.664687][ T518] sock_kmalloc+0xde/0x1e0 [ 688.664719][ T518] ? ipv6_chk_addr_and_flags+0x42/0x70 [ 688.664750][ T518] ipv6_sock_ac_join+0x25b/0x610 [ 688.664784][ T518] ? __kasan_check_write+0x18/0x20 [ 688.664821][ T518] do_ipv6_setsockopt+0x1e15/0x2ec0 [ 688.664852][ T518] ? __cfi_do_ipv6_setsockopt+0x10/0x10 [ 688.664880][ T518] ? kstrtoull+0x13b/0x1e0 [ 688.664901][ T518] ? avc_has_perm_noaudit+0x268/0x360 [ 688.664934][ T518] ? __asan_memcpy+0x5a/0x80 [ 688.664954][ T518] ? avc_has_perm_noaudit+0x286/0x360 [ 688.664988][ T518] ? avc_has_perm+0x144/0x220 [ 688.665020][ T518] ? __cfi_avc_has_perm+0x10/0x10 [ 688.665053][ T518] ? selinux_socket_setsockopt+0x2ea/0x390 [ 688.665090][ T518] ? __cfi_selinux_socket_setsockopt+0x10/0x10 [ 688.665127][ T518] ipv6_setsockopt+0x5d/0x170 [ 688.665156][ T518] tcp_setsockopt+0xf2/0x110 [ 688.665178][ T518] sock_common_setsockopt+0xb5/0xd0 [ 688.665203][ T518] ? __cfi_sock_common_setsockopt+0x10/0x10 [ 688.665230][ T518] do_sock_setsockopt+0x26d/0x400 [ 688.665264][ T518] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 688.665301][ T518] __x64_sys_setsockopt+0x1b8/0x250 [ 688.665340][ T518] x64_sys_call+0x2adc/0x2ee0 [ 688.665374][ T518] do_syscall_64+0x58/0xf0 [ 688.665414][ T518] ? clear_bhb_loop+0x50/0xa0 [ 688.665440][ T518] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 688.665466][ T518] RIP: 0033:0x7f09e6b8f6c9 [ 688.665486][ T518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 688.665507][ T518] RSP: 002b:00007f09e7b08038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 688.665532][ T518] RAX: ffffffffffffffda RBX: 00007f09e6de5fa0 RCX: 00007f09e6b8f6c9 [ 688.665556][ T518] RDX: 000000000000001b RSI: 0000000000000029 RDI: 0000000000000006 [ 688.665572][ T518] RBP: 00007f09e7b08090 R08: 0000000000000020 R09: 0000000000000000 [ 688.665588][ T518] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 688.665604][ T518] R13: 00007f09e6de6038 R14: 00007f09e6de5fa0 R15: 00007ffcf7c19c18 [ 688.665625][ T518] [ 689.243282][ T36] audit: type=1400 audit(1763050716.480:385): avc: denied { ioctl } for pid=549 comm="syz.2.15327" path="socket:[238665]" dev="sockfs" ino=238665 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 691.499497][ T36] audit: type=1400 audit(1763050718.740:386): avc: denied { mounton } for pid=692 comm="syz.4.15402" path="/474/file0" dev="ramfs" ino=239133 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 691.547429][ T36] audit: type=1400 audit(1763050718.760:387): avc: denied { unmount } for pid=29624 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 692.207238][ T31] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 692.377234][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 692.383699][ T31] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 692.394057][ T31] usb 3-1: config 0 has no interface number 0 [ 692.400415][ T31] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 692.412553][ T31] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 692.421965][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.439551][ T31] usb 3-1: Product: syz [ 692.453614][ T31] usb 3-1: Manufacturer: syz [ 692.470673][ T31] usb 3-1: SerialNumber: syz [ 692.483848][ T31] usb 3-1: config 0 descriptor?? [ 692.497580][ T740] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 692.708654][ T740] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 692.926909][ T31] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 692.947297][ T31] asix 3-1:0.188: probe with driver asix failed with error -61 [ 694.532099][ T872] rust_binder: Write failure EFAULT in pid:579 [ 694.980542][ T2585] usb 3-1: USB disconnect, device number 17 [ 695.662704][ T924] usb usb9: check_ctrlrecip: process 924 (syz.3.15512) requesting ep 01 but needs 81 [ 695.672502][ T924] usb usb9: usbfs: process 924 (syz.3.15512) did not claim interface 0 before use [ 695.681890][ T2585] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 695.847222][ T2585] usb 2-1: Using ep0 maxpacket: 32 [ 695.858397][ T2585] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 695.870019][ T2585] usb 2-1: config 0 has no interface number 0 [ 695.894686][ T2585] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 695.919685][ T2585] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 695.929206][ T938] FAULT_INJECTION: forcing a failure. [ 695.929206][ T938] name failslab, interval 1, probability 0, space 0, times 0 [ 695.937292][ T2585] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.956886][ T2585] usb 2-1: Product: syz [ 695.957245][ T938] CPU: 0 UID: 0 PID: 938 Comm: syz.2.15519 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 695.957283][ T938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 695.957301][ T938] Call Trace: [ 695.957310][ T938] [ 695.957321][ T938] __dump_stack+0x21/0x30 [ 695.957364][ T938] dump_stack_lvl+0x10c/0x190 [ 695.957399][ T938] ? __cfi_dump_stack_lvl+0x10/0x10 [ 695.957435][ T938] ? vfs_write+0x93e/0xf30 [ 695.957461][ T938] dump_stack+0x19/0x20 [ 695.957493][ T938] should_fail_ex+0x3d9/0x530 [ 695.957521][ T938] should_failslab+0xac/0x100 [ 695.957552][ T938] kmem_cache_alloc_noprof+0x42/0x430 [ 695.957577][ T938] ? getname_flags+0xc6/0x710 [ 695.957603][ T938] getname_flags+0xc6/0x710 [ 695.957628][ T938] user_path_at+0x2b/0x60 [ 695.957658][ T938] __x64_sys_umount+0xf2/0x170 [ 695.957695][ T938] ? __cfi___x64_sys_umount+0x10/0x10 [ 695.957731][ T938] ? __kasan_check_read+0x15/0x20 [ 695.957770][ T938] x64_sys_call+0x2ab8/0x2ee0 [ 695.957808][ T938] do_syscall_64+0x58/0xf0 [ 695.957843][ T938] ? clear_bhb_loop+0x50/0xa0 [ 695.957887][ T938] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 695.957915][ T938] RIP: 0033:0x7fed0678f6c9 [ 695.957936][ T938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 695.957960][ T938] RSP: 002b:00007fed075a6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 695.957989][ T938] RAX: ffffffffffffffda RBX: 00007fed069e5fa0 RCX: 00007fed0678f6c9 [ 695.958010][ T938] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0 [ 695.958028][ T938] RBP: 00007fed075a6090 R08: 0000000000000000 R09: 0000000000000000 [ 695.958046][ T938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 695.958063][ T938] R13: 00007fed069e6038 R14: 00007fed069e5fa0 R15: 00007ffe9124f7a8 [ 695.958087][ T938] [ 696.197226][ T2585] usb 2-1: Manufacturer: syz [ 696.201902][ T2585] usb 2-1: SerialNumber: syz [ 696.207474][ T2585] usb 2-1: config 0 descriptor?? [ 696.212821][ T906] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 696.426181][ T906] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 696.439989][ T949] FAULT_INJECTION: forcing a failure. [ 696.439989][ T949] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 696.453550][ T949] CPU: 0 UID: 0 PID: 949 Comm: syz.2.15524 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 696.453588][ T949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 696.453602][ T949] Call Trace: [ 696.453609][ T949] [ 696.453617][ T949] __dump_stack+0x21/0x30 [ 696.453657][ T949] dump_stack_lvl+0x10c/0x190 [ 696.453688][ T949] ? __cfi_dump_stack_lvl+0x10/0x10 [ 696.453719][ T949] ? check_stack_object+0x12c/0x140 [ 696.453744][ T949] dump_stack+0x19/0x20 [ 696.453774][ T949] should_fail_ex+0x3d9/0x530 [ 696.453814][ T949] should_fail+0xf/0x20 [ 696.453836][ T949] should_fail_usercopy+0x1e/0x30 [ 696.453862][ T949] _copy_to_user+0x24/0xa0 [ 696.453891][ T949] simple_read_from_buffer+0xed/0x160 [ 696.453924][ T949] proc_fail_nth_read+0x19e/0x210 [ 696.453955][ T949] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 696.453985][ T949] ? bpf_lsm_file_permission+0xd/0x20 [ 696.454017][ T949] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 696.454049][ T949] vfs_read+0x27d/0xc70 [ 696.454071][ T949] ? __cfi_vfs_read+0x10/0x10 [ 696.454091][ T949] ? __kasan_check_write+0x18/0x20 [ 696.454125][ T949] ? mutex_lock+0x92/0x1c0 [ 696.454147][ T949] ? __cfi_mutex_lock+0x10/0x10 [ 696.454170][ T949] ? __fget_files+0x2c5/0x340 [ 696.454197][ T949] ksys_read+0x141/0x250 [ 696.454218][ T949] ? __cfi_ksys_read+0x10/0x10 [ 696.454240][ T949] ? __kasan_check_read+0x15/0x20 [ 696.454273][ T949] __x64_sys_read+0x7f/0x90 [ 696.454294][ T949] x64_sys_call+0x2638/0x2ee0 [ 696.454328][ T949] do_syscall_64+0x58/0xf0 [ 696.454358][ T949] ? clear_bhb_loop+0x50/0xa0 [ 696.454384][ T949] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 696.454409][ T949] RIP: 0033:0x7fed0678e0dc [ 696.454429][ T949] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 696.454449][ T949] RSP: 002b:00007fed075a6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 696.454475][ T949] RAX: ffffffffffffffda RBX: 00007fed069e5fa0 RCX: 00007fed0678e0dc [ 696.454493][ T949] RDX: 000000000000000f RSI: 00007fed075a60a0 RDI: 0000000000000006 [ 696.454509][ T949] RBP: 00007fed075a6090 R08: 0000000000000000 R09: 0000000000000000 [ 696.454524][ T949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 696.454539][ T949] R13: 00007fed069e6038 R14: 00007fed069e5fa0 R15: 00007ffe9124f7a8 [ 696.454560][ T949] [ 696.840903][ T2585] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 696.856977][ T2585] asix 2-1:0.188: probe with driver asix failed with error -32 [ 697.007231][ T31] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 697.157244][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 697.163740][ T31] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 697.172046][ T31] usb 3-1: config 0 has no interface number 0 [ 697.178415][ T31] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 697.190075][ T31] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 697.199663][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.207747][ T31] usb 3-1: Product: syz [ 697.211969][ T31] usb 3-1: Manufacturer: syz [ 697.216598][ T31] usb 3-1: SerialNumber: syz [ 697.226148][ T31] usb 3-1: config 0 descriptor?? [ 697.231641][ T961] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 697.440538][ T961] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 697.829944][ T1020] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15557'. [ 697.849389][ T31] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 697.860790][ T31] asix 3-1:0.188: probe with driver asix failed with error -32 [ 698.472177][ T31] usb 2-1: USB disconnect, device number 13 [ 699.748760][ T31] usb 3-1: USB disconnect, device number 18 [ 700.257236][ T63] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 700.437232][ T63] usb 2-1: Using ep0 maxpacket: 32 [ 700.448325][ T63] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 700.456639][ T63] usb 2-1: config 0 has no interface number 0 [ 700.486970][ T63] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 700.508676][ T63] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 700.518000][ T63] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.526025][ T63] usb 2-1: Product: syz [ 700.540427][ T63] usb 2-1: Manufacturer: syz [ 700.545092][ T63] usb 2-1: SerialNumber: syz [ 700.568122][ T63] usb 2-1: config 0 descriptor?? [ 700.573719][ T1132] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 700.631224][ T1146] FAULT_INJECTION: forcing a failure. [ 700.631224][ T1146] name failslab, interval 1, probability 0, space 0, times 0 [ 700.670607][ T1146] CPU: 1 UID: 0 PID: 1146 Comm: syz.4.15612 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 700.670649][ T1146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 700.670665][ T1146] Call Trace: [ 700.670674][ T1146] [ 700.670683][ T1146] __dump_stack+0x21/0x30 [ 700.670722][ T1146] dump_stack_lvl+0x10c/0x190 [ 700.670753][ T1146] ? __cfi_dump_stack_lvl+0x10/0x10 [ 700.670786][ T1146] ? vfs_write+0x93e/0xf30 [ 700.670809][ T1146] dump_stack+0x19/0x20 [ 700.670838][ T1146] should_fail_ex+0x3d9/0x530 [ 700.670863][ T1146] should_failslab+0xac/0x100 [ 700.670889][ T1146] kmem_cache_alloc_noprof+0x42/0x430 [ 700.670912][ T1146] ? getname_flags+0xc6/0x710 [ 700.670937][ T1146] getname_flags+0xc6/0x710 [ 700.670961][ T1146] user_path_at+0x2b/0x60 [ 700.670986][ T1146] __x64_sys_umount+0xf2/0x170 [ 700.671019][ T1146] ? __cfi___x64_sys_umount+0x10/0x10 [ 700.671052][ T1146] ? __kasan_check_read+0x15/0x20 [ 700.671088][ T1146] x64_sys_call+0x2ab8/0x2ee0 [ 700.671121][ T1146] do_syscall_64+0x58/0xf0 [ 700.671152][ T1146] ? clear_bhb_loop+0x50/0xa0 [ 700.671178][ T1146] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 700.671203][ T1146] RIP: 0033:0x7feb13f8f6c9 [ 700.671223][ T1146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 700.671244][ T1146] RSP: 002b:00007feb14ef1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 700.671270][ T1146] RAX: ffffffffffffffda RBX: 00007feb141e5fa0 RCX: 00007feb13f8f6c9 [ 700.671288][ T1146] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0 [ 700.671303][ T1146] RBP: 00007feb14ef1090 R08: 0000000000000000 R09: 0000000000000000 [ 700.671319][ T1146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 700.671335][ T1146] R13: 00007feb141e6038 R14: 00007feb141e5fa0 R15: 00007fff5e85c108 [ 700.671357][ T1146] [ 700.873109][ T1132] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 701.213544][ T1192] loop5: detected capacity change from 0 to 7 [ 701.297776][ T63] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 701.327385][ T63] asix 2-1:0.188: probe with driver asix failed with error -32 [ 703.030442][ T331] usb 2-1: USB disconnect, device number 14 [ 703.144848][ T1279] capability: warning: `syz.2.15677' uses 32-bit capabilities (legacy support in use) [ 703.796808][ T1331] IPv6: NLM_F_CREATE should be specified when creating new route [ 704.666894][ T1384] IPv6: NLM_F_CREATE should be specified when creating new route [ 704.768597][ T1390] IPv6: NLM_F_CREATE should be specified when creating new route [ 704.833431][ T1396] FAULT_INJECTION: forcing a failure. [ 704.833431][ T1396] name failslab, interval 1, probability 0, space 0, times 0 [ 704.866632][ T1396] CPU: 0 UID: 0 PID: 1396 Comm: syz.4.15733 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 704.866674][ T1396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 704.866689][ T1396] Call Trace: [ 704.866698][ T1396] [ 704.866709][ T1396] __dump_stack+0x21/0x30 [ 704.866749][ T1396] dump_stack_lvl+0x10c/0x190 [ 704.866780][ T1396] ? __cfi_dump_stack_lvl+0x10/0x10 [ 704.866811][ T1396] ? __schedule+0x132a/0x1df0 [ 704.866854][ T1396] dump_stack+0x19/0x20 [ 704.866883][ T1396] should_fail_ex+0x3d9/0x530 [ 704.866907][ T1396] ? genl_family_rcv_msg_attrs_parse+0xc6/0x390 [ 704.866934][ T1396] should_failslab+0xac/0x100 [ 704.866960][ T1396] __kmalloc_noprof+0x69/0x530 [ 704.866981][ T1396] ? genl_family_rcv_msg_attrs_parse+0xc6/0x390 [ 704.867006][ T1396] ? cred_has_capability+0x281/0x380 [ 704.867033][ T1396] genl_family_rcv_msg_attrs_parse+0xc6/0x390 [ 704.867061][ T1396] genl_family_rcv_msg_doit+0xcd/0x330 [ 704.867092][ T1396] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 704.867117][ T1396] ? selinux_capable+0x38/0x50 [ 704.867150][ T1396] ? bpf_lsm_capable+0xd/0x20 [ 704.867173][ T1396] ? ns_capable+0x91/0xf0 [ 704.867205][ T1396] genl_rcv_msg+0x609/0x7a0 [ 704.867235][ T1396] ? __cfi_genl_rcv_msg+0x10/0x10 [ 704.867260][ T1396] ? __cfi_ieee802154_start_req+0x10/0x10 [ 704.867287][ T1396] netlink_rcv_skb+0x22b/0x4a0 [ 704.867319][ T1396] ? __cfi_genl_rcv_msg+0x10/0x10 [ 704.867344][ T1396] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 704.867375][ T1396] ? rwsem_read_trylock+0x2b1/0x660 [ 704.867409][ T1396] ? down_read+0x79/0xe0 [ 704.867432][ T1396] ? __cfi_down_read+0x10/0x10 [ 704.867455][ T1396] ? is_vmalloc_addr+0x11/0x40 [ 704.867483][ T1396] genl_rcv+0x2c/0x40 [ 704.867504][ T1396] netlink_unicast+0x8c0/0xa60 [ 704.867536][ T1396] netlink_sendmsg+0x7f0/0xaf0 [ 704.867570][ T1396] ? __cfi_netlink_sendmsg+0x10/0x10 [ 704.867605][ T1396] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 704.867633][ T1396] ? security_socket_sendmsg+0x33/0xd0 [ 704.867655][ T1396] ? __cfi_netlink_sendmsg+0x10/0x10 [ 704.867688][ T1396] ____sys_sendmsg+0xa15/0xa70 [ 704.867724][ T1396] ? __sys_sendmsg_sock+0x50/0x50 [ 704.867760][ T1396] ? import_iovec+0x81/0xb0 [ 704.867791][ T1396] ___sys_sendmsg+0x220/0x2a0 [ 704.867826][ T1396] ? __sys_sendmsg+0x280/0x280 [ 704.867868][ T1396] ? proc_fail_nth_write+0x17e/0x210 [ 704.867899][ T1396] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 704.867938][ T1396] __x64_sys_sendmsg+0x1eb/0x2c0 [ 704.867972][ T1396] ? fput+0x1a5/0x240 [ 704.867999][ T1396] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 704.868032][ T1396] ? ksys_write+0x1ef/0x250 [ 704.868055][ T1396] ? __kasan_check_read+0x15/0x20 [ 704.868091][ T1396] x64_sys_call+0x2a4c/0x2ee0 [ 704.868125][ T1396] do_syscall_64+0x58/0xf0 [ 704.868154][ T1396] ? clear_bhb_loop+0x50/0xa0 [ 704.868180][ T1396] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 704.868204][ T1396] RIP: 0033:0x7feb13f8f6c9 [ 704.868224][ T1396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 704.868245][ T1396] RSP: 002b:00007feb14ef1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 704.868269][ T1396] RAX: ffffffffffffffda RBX: 00007feb141e5fa0 RCX: 00007feb13f8f6c9 [ 704.868288][ T1396] RDX: 0000000020000044 RSI: 0000200000000340 RDI: 0000000000000006 [ 704.868304][ T1396] RBP: 00007feb14ef1090 R08: 0000000000000000 R09: 0000000000000000 [ 704.868319][ T1396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 704.868334][ T1396] R13: 00007feb141e6038 R14: 00007feb141e5fa0 R15: 00007fff5e85c108 [ 704.868355][ T1396] [ 706.813618][ T1442] IPv6: NLM_F_CREATE should be specified when creating new route [ 707.544202][ T1479] FAULT_INJECTION: forcing a failure. [ 707.544202][ T1479] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 707.557420][ T1479] CPU: 0 UID: 0 PID: 1479 Comm: syz.1.15772 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 707.557457][ T1479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 707.557472][ T1479] Call Trace: [ 707.557480][ T1479] [ 707.557490][ T1479] __dump_stack+0x21/0x30 [ 707.557529][ T1479] dump_stack_lvl+0x10c/0x190 [ 707.557567][ T1479] ? __cfi_dump_stack_lvl+0x10/0x10 [ 707.557597][ T1479] ? check_stack_object+0x12c/0x140 [ 707.557620][ T1479] dump_stack+0x19/0x20 [ 707.557649][ T1479] should_fail_ex+0x3d9/0x530 [ 707.557672][ T1479] should_fail+0xf/0x20 [ 707.557693][ T1479] should_fail_usercopy+0x1e/0x30 [ 707.557718][ T1479] _copy_to_user+0x24/0xa0 [ 707.557747][ T1479] simple_read_from_buffer+0xed/0x160 [ 707.557776][ T1479] proc_fail_nth_read+0x19e/0x210 [ 707.557807][ T1479] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 707.557837][ T1479] ? __sys_recvmsg+0x280/0x280 [ 707.557859][ T1479] ? bpf_lsm_file_permission+0xd/0x20 [ 707.557889][ T1479] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 707.557919][ T1479] vfs_read+0x27d/0xc70 [ 707.557940][ T1479] ? __cfi_vfs_read+0x10/0x10 [ 707.557959][ T1479] ? __kasan_check_write+0x18/0x20 [ 707.557992][ T1479] ? mutex_lock+0x92/0x1c0 [ 707.558012][ T1479] ? __cfi_mutex_lock+0x10/0x10 [ 707.558032][ T1479] ? __fget_files+0x2c5/0x340 [ 707.558058][ T1479] ksys_read+0x141/0x250 [ 707.558078][ T1479] ? __cfi_ksys_read+0x10/0x10 [ 707.558100][ T1479] ? __kasan_check_read+0x15/0x20 [ 707.558134][ T1479] __x64_sys_read+0x7f/0x90 [ 707.558156][ T1479] x64_sys_call+0x2638/0x2ee0 [ 707.558190][ T1479] do_syscall_64+0x58/0xf0 [ 707.558218][ T1479] ? clear_bhb_loop+0x50/0xa0 [ 707.558244][ T1479] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 707.558268][ T1479] RIP: 0033:0x7f7b2bf8e0dc [ 707.558287][ T1479] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 707.558308][ T1479] RSP: 002b:00007f7b2cec8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 707.558333][ T1479] RAX: ffffffffffffffda RBX: 00007f7b2c1e5fa0 RCX: 00007f7b2bf8e0dc [ 707.558351][ T1479] RDX: 000000000000000f RSI: 00007f7b2cec80a0 RDI: 0000000000000007 [ 707.558367][ T1479] RBP: 00007f7b2cec8090 R08: 0000000000000000 R09: 0000000000000000 [ 707.558382][ T1479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 707.558397][ T1479] R13: 00007f7b2c1e6038 R14: 00007f7b2c1e5fa0 R15: 00007ffc72a5da88 [ 707.558417][ T1479] [ 708.387267][ T2585] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 708.547540][ T2585] usb 2-1: Using ep0 maxpacket: 8 [ 708.554387][ T2585] usb 2-1: config 128 has an invalid interface number: 89 but max is 0 [ 708.562995][ T2585] usb 2-1: config 128 contains an unexpected descriptor of type 0x2, skipping [ 708.573988][ T2585] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 708.584644][ T2585] usb 2-1: config 128 has no interface number 0 [ 708.591177][ T2585] usb 2-1: config 128 interface 89 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 708.604706][ T2585] usb 2-1: config 128 interface 89 has no altsetting 0 [ 708.614257][ T2585] usb 2-1: string descriptor 0 read error: -22 [ 708.620894][ T2585] usb 2-1: New USB device found, idVendor=0499, idProduct=500c, bcdDevice=99.4d [ 708.630223][ T2585] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.647470][ T2585] snd-usb-audio 2-1:128.89: probe with driver snd-usb-audio failed with error -2 [ 708.662904][ T742] udevd[742]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:128.89/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 708.907772][ T1577] overlayfs: workdir and upperdir must reside under the same mount [ 709.796374][ T1597] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.803645][ T1597] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.810838][ T1597] bridge_slave_0: entered allmulticast mode [ 709.818637][ T1597] bridge_slave_0: entered promiscuous mode [ 709.825584][ T1597] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.832873][ T1597] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.840050][ T1597] bridge_slave_1: entered allmulticast mode [ 709.846320][ T1597] bridge_slave_1: entered promiscuous mode [ 709.853185][ T12] bridge_slave_1: left allmulticast mode [ 709.859122][ T12] bridge_slave_1: left promiscuous mode [ 709.864787][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.872568][ T12] bridge_slave_0: left allmulticast mode [ 709.878456][ T12] bridge_slave_0: left promiscuous mode [ 709.884111][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.994780][ T12] veth1_macvtap: left promiscuous mode [ 710.000522][ T12] veth0_vlan: left promiscuous mode [ 711.155125][ T331] usb 2-1: USB disconnect, device number 15 [ 833.347286][ T37] INFO: task syz-executor:1597 blocked for more than 122 seconds. [ 833.355186][ T37] Not tainted syzkaller #0 [ 833.360344][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 833.369100][ T37] task:syz-executor state:D stack:0 pid:1597 tgid:1597 ppid:1 flags:0x00000004 [ 833.379486][ T37] Call Trace: [ 833.382910][ T37] [ 833.386041][ T37] __schedule+0x1322/0x1df0 [ 833.390663][ T37] ? __sched_text_start+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 833.395741][ T37] ? __kasan_check_write+0x18/0x20 [ 833.400884][ T36] audit: type=1400 audit(1763050860.640:388): avc: denied { write } for pid=283 comm="syz-executor" path="pipe:[434]" dev="pipefs" ino=434 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 833.423746][ T37] ? __mutex_add_waiter+0x17f/0x290 [ 833.443825][ T37] ? __kasan_check_write+0x18/0x20 [ 833.449281][ T37] ? trace_contention_begin+0xc0/0xc0 [ 833.454724][ T37] schedule+0xc6/0x240 [ 833.459125][ T37] schedule_preempt_disabled+0x14/0x30 [ 833.464659][ T37] __mutex_lock+0x81e/0x1b50 [ 833.469998][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 833.476798][ T37] ? avc_has_perm_noaudit+0x286/0x360 [ 833.482281][ T37] ? cred_has_capability+0x281/0x380 [ 833.487639][ T37] ? selinux_perf_event_alloc+0x110/0x110 [ 833.493805][ T37] ? stack_trace_save+0x9d/0xe0 [ 833.498777][ T37] __mutex_lock_slowpath+0xe/0x20 [ 833.503844][ T37] mutex_lock+0x102/0x1c0 [ 833.508384][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 833.513272][ T37] ? ns_capable+0x91/0xf0 [ 833.517713][ T37] ? netlink_net_capable+0x129/0x160 [ 833.523049][ T37] rtnetlink_rcv_msg+0x75f/0xa00 [ 833.528052][ T37] ? avc_has_perm_noaudit+0x268/0x360 [ 833.533475][ T37] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 833.539030][ T37] ? avc_has_perm_noaudit+0x286/0x360 [ 833.544442][ T37] ? avc_has_perm+0x144/0x220 [ 833.549194][ T37] netlink_rcv_skb+0x22b/0x4a0 [ 833.554008][ T37] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 833.559546][ T37] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 833.564891][ T37] ? netlink_autobind+0x1c0/0x1c0 [ 833.569973][ T37] ? is_vmalloc_addr+0x11/0x40 [ 833.574816][ T37] rtnetlink_rcv+0x20/0x30 [ 833.579296][ T37] netlink_unicast+0x8c0/0xa60 [ 833.584180][ T37] netlink_sendmsg+0x7f0/0xaf0 [ 833.589068][ T37] ? __cfi_netlink_sendmsg+0x10/0x10 [ 833.594766][ T37] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 833.600150][ T37] ? security_socket_sendmsg+0x33/0xd0 [ 833.605749][ T37] __sys_sendto+0x66d/0x6f0 [ 833.610343][ T37] ? __cfi___sys_sendto+0x10/0x10 [ 833.615498][ T37] ? __fput+0x6ea/0xa00 [ 833.619824][ T37] __x64_sys_sendto+0xe9/0x100 [ 833.624647][ T37] x64_sys_call+0x2c2c/0x2ee0 [ 833.629399][ T37] do_syscall_64+0x58/0xf0 [ 833.633851][ T37] ? clear_bhb_loop+0x50/0xa0 [ 833.638578][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 833.644525][ T37] RIP: 0033:0x7f6acd991503 [ 833.648989][ T37] RSP: 002b:00007ffd004b2688 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 833.657481][ T37] RAX: ffffffffffffffda RBX: 00007f6ace714620 RCX: 00007f6acd991503 [ 833.665490][ T37] RDX: 000000000000006c RSI: 00007f6ace714670 RDI: 0000000000000003 [ 833.673693][ T37] RBP: 0000000000000001 R08: 00007ffd004b26a4 R09: 000000000000000c [ 833.681728][ T37] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 833.689739][ T37] R13: 0000000000000000 R14: 00007f6ace714670 R15: 0000000000000000 [ 833.697880][ T37] [ 833.701074][ T37] NMI backtrace for cpu 0 [ 833.701117][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 833.701138][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 833.701149][ T37] Call Trace: [ 833.701156][ T37] [ 833.701163][ T37] __dump_stack+0x21/0x30 [ 833.701191][ T37] dump_stack_lvl+0x10c/0x190 [ 833.701212][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 833.701292][ T37] dump_stack+0x19/0x20 [ 833.701320][ T37] nmi_cpu_backtrace+0x2bf/0x2d0 [ 833.701342][ T37] ? rcu_read_unlock_special+0xab/0x410 [ 833.701363][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 833.701384][ T37] ? sched_show_task+0x379/0x560 [ 833.701437][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 833.701457][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 833.701531][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 833.701553][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 833.701575][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 833.701596][ T37] watchdog+0xd8f/0xed0 [ 833.701622][ T37] ? __cfi_watchdog+0x10/0x10 [ 833.701643][ T37] ? __kasan_check_read+0x15/0x20 [ 833.701668][ T37] ? __kthread_parkme+0x138/0x180 [ 833.701700][ T37] ? schedule+0xc6/0x240 [ 833.701731][ T37] kthread+0x2ca/0x370 [ 833.701756][ T37] ? __cfi_watchdog+0x10/0x10 [ 833.701786][ T37] ? __cfi_kthread+0x10/0x10 [ 833.701803][ T37] ret_from_fork+0x67/0xa0 [ 833.701840][ T37] ? __cfi_kthread+0x10/0x10 [ 833.701857][ T37] ret_from_fork_asm+0x1a/0x30 [ 833.701883][ T37] [ 833.701890][ T37] Sending NMI from CPU 0 to CPUs 1: [ 833.861742][ C1] NMI backtrace for cpu 1 [ 833.861761][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 833.861793][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 833.861805][ C1] RIP: 0010:pv_native_safe_halt+0x17/0x20 [ 833.861835][ C1] Code: cc cc cc b8 74 7c 37 9c 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 e2 39 00 f3 0f 1e fa 55 48 89 e5 fb f4 <5d> e9 d3 54 02 00 cc cc cc b8 00 00 00 00 90 90 90 90 90 90 90 90 [ 833.861852][ C1] RSP: 0018:ffffc900001a7e00 EFLAGS: 000002c2 [ 833.861869][ C1] RAX: ffff8881f6f00000 RBX: ffff88810366a600 RCX: ffffffff858d70be [ 833.861883][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 00000000005cdb0c [ 833.861895][ C1] RBP: ffffc900001a7e00 R08: ffff8881f6f39733 R09: 1ffff1103ede72e6 [ 833.861909][ C1] R10: dffffc0000000000 R11: ffffed103ede72e7 R12: 1ffff110206cd4c0 [ 833.861923][ C1] R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff87cb2128 [ 833.861936][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 833.861950][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 833.861962][ C1] CR2: 00005636ca1c9b98 CR3: 000000010bbc2000 CR4: 00000000003526b0 [ 833.861978][ C1] Call Trace: [ 833.861984][ C1] [ 833.861994][ C1] default_idle+0x17/0x30 [ 833.862015][ C1] arch_cpu_idle+0xd/0x20 [ 833.862034][ C1] default_idle_call+0x3f/0x80 [ 833.862054][ C1] do_idle+0x1a0/0x470 [ 833.862128][ C1] ? idle_inject_timer_fn+0x80/0x80 [ 833.862148][ C1] ? do_idle+0x44c/0x470 [ 833.862165][ C1] cpu_startup_entry+0x48/0x70 [ 833.862182][ C1] start_secondary+0x12e/0x140 [ 833.862205][ C1] common_startup_64+0x13b/0x157 [ 833.862296][ C1]