last executing test programs: 6m12.92151516s ago: executing program 32 (id=268): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file5\x00', 0x82c0, 0x101) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x105, 0x5000003a, r0, 0x0) fanotify_mark(r1, 0x451, 0x40000009, r0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0xa880, 0x97) 3m49.984596151s ago: executing program 33 (id=1591): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r0, &(0x7f0000001300)="12", 0x1, 0x10, &(0x7f0000000240)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1, 0x4b, @rand_addr=' \x01\x00', 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x0, 0x4}, 0x8) 2m33.091801717s ago: executing program 5 (id=2345): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x7fffffffffffffff]}, 0x8, 0x80000) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r1, 0x47f, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000003c0)="951aa14bd6f68579cac67c83bf8d4500e5cea1bb1596d4ee6645fa16fa7cacb9214070a622a2c57b89075f59b85c7b5b2c41edc9d2cd5a2c95ed1c2cf72425be9c1a2df1b60a309bc3228d7e85b300f0d7a042a40166b9208e9d2e423c32ad8e47adedf5dc425c6bcb031fb2230835d41afc23476eae602bad3246417e5ac757", 0x80}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) 2m31.917278596s ago: executing program 5 (id=2349): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8004, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0xf, 0x5, 0x4}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x17a, 0x0, 0x7fffffff}]}) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f00000002c0)={0xed80000000000000, 0xeeef0000, 0xfffffffffffffffd, 0x0, 0x2}) 2m31.502678323s ago: executing program 5 (id=2352): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newlink={0x50, 0x10, 0x437, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x50483}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast1}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x12}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x9005}, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 2m31.250791396s ago: executing program 5 (id=2355): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x6c, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000200)="f30fc7b60030000066baf80cb8dc1d8889ef66bafc0c66ed0f0648b87d000000000000000f23c00f21f83502000e000f23f866b830000f00d866baf80cb8a40a9d8fef66bafc0c66edc422a5385800c461f82e3506000000660f388083387c1594dacb", 0x63}], 0x1, 0x20, &(0x7f00000002c0)=[@cr4={0x1, 0x2200}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m30.77686258s ago: executing program 5 (id=2359): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1f7) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000001600)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10, 0x1, 0x80000ff}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) io_uring_enter(r0, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 2m30.482460111s ago: executing program 5 (id=2362): vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x2000000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000840)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @random="8ece681afb6b", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "038d08", 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x6, {[@generic={0x3, 0x2}]}}}}}}}}, 0x0) 2m29.287167112s ago: executing program 1 (id=2372): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) removexattr(&(0x7f00000190c0)='./file0\x00', &(0x7f0000019080)=@random={'user.', './binderfs/binder0\x00'}) syz_fuse_handle_req(r0, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000700)={&(0x7f0000000040)={0x50, 0xffffffffffffff8c, 0x0, {0x7, 0x28, 0x3e, 0x3230135, 0x2, 0x65c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000007c0)="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", 0x2000, &(0x7f0000003500)={&(0x7f00000003c0)={0x50, 0x0, 0x7fffffff, {0x7, 0x29, 0x82, 0x400000, 0x7, 0x80, 0x8, 0x9, 0x0, 0x0, 0x10, 0x247}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m28.878240479s ago: executing program 1 (id=2375): timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000001100)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r1 = openat$panthor(0xffffffffffffff9c, &(0x7f0000002bc0), 0x2, 0x0) readv(r1, &(0x7f0000004500)=[{&(0x7f0000003100)=""/141, 0x8d}], 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 2m27.660076208s ago: executing program 1 (id=2388): mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./lower\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./work\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000340)='lowerdir=lower,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00') 2m27.426835601s ago: executing program 1 (id=2391): setuid(0xee01) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) 2m26.833771084s ago: executing program 1 (id=2396): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x40015b19, &(0x7f0000000000)={0xffffffff, 0xfffffffe, 0x7, 0xff, 0x1}) write$char_usb(r1, &(0x7f0000002680)="e7", 0x1) 2m25.119847127s ago: executing program 1 (id=2407): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./nfsd\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000480)='tcp 2049\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000580)='1\n\x00', 0x2) 2m24.951703143s ago: executing program 6 (id=2409): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000)='7', 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x4, 0x7ffc0001}]}) 2m24.852934802s ago: executing program 6 (id=2411): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) clock_getres(0xfffffffffffffff4, 0x0) setreuid(0xee01, 0xee01) 2m24.535573078s ago: executing program 6 (id=2412): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 2m24.084337536s ago: executing program 6 (id=2414): r0 = msgget$private(0x0, 0x3ac) msgsnd(r0, &(0x7f0000000400)=ANY=[@ANYBLOB='\b'], 0x8, 0x800) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) msgrcv(r0, 0x0, 0x0, 0x1, 0x4800) 2m23.863117945s ago: executing program 6 (id=2415): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2m23.560449533s ago: executing program 6 (id=2417): ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x16, &(0x7f0000000340)="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"}) open(&(0x7f0000000080)='.\x00', 0x518282, 0x78e22799f4a46e8e) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000007c0), &(0x7f0000000400)=0x8) 2m15.372379007s ago: executing program 34 (id=2362): vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x2000000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000840)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @random="8ece681afb6b", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "038d08", 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x6, {[@generic={0x3, 0x2}]}}}}}}}}, 0x0) 2m10.004160734s ago: executing program 35 (id=2407): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./nfsd\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000480)='tcp 2049\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000580)='1\n\x00', 0x2) 2m8.376977102s ago: executing program 36 (id=2417): ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x16, &(0x7f0000000340)="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"}) open(&(0x7f0000000080)='.\x00', 0x518282, 0x78e22799f4a46e8e) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000007c0), &(0x7f0000000400)=0x8) 1m29.549494483s ago: executing program 4 (id=2749): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000002200), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x1000) fanotify_mark(r1, 0x105, 0x10000839, r0, 0x0) 1m29.373488135s ago: executing program 4 (id=2751): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000080), 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000280)=[{0x28, 0x8, 0x0, 0xbfefdffe}, {0x80000006, 0x5, 0x9, 0x5}]}, 0x10) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="09000300010000", 0x7) 1m29.11208335s ago: executing program 4 (id=2753): r0 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x0) ftruncate(r0, 0x51a9497) setrlimit(0x40000000000008, &(0x7f0000000000)) r1 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x800}], 0x18}, 0x4000000) 1m28.923854907s ago: executing program 4 (id=2756): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 1m28.719841437s ago: executing program 4 (id=2758): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) recvmmsg(r1, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001080)=""/4096, 0x54000}], 0x1}, 0x8}], 0x1, 0x40000142, 0x0) 1m28.566796549s ago: executing program 4 (id=2759): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl1\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x52, 0x1, 0x1c1f, 0x6, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x40, 0x40, 0x3, 0x5}}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x13, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400001}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x2, 0x1, 0x0, 0x0, 0x0, 0xd5e855c9ff29405c}) 1m28.206805577s ago: executing program 37 (id=2759): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl1\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x52, 0x1, 0x1c1f, 0x6, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x40, 0x40, 0x3, 0x5}}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x13, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400001}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x2, 0x1, 0x0, 0x0, 0x0, 0xd5e855c9ff29405c}) 55.07794619s ago: executing program 2 (id=3001): syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000080)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) waitid(0x2, 0x0, 0x0, 0x8, 0x0) 54.561602599s ago: executing program 2 (id=3009): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, &(0x7f0000000040)=0xfffffffd, 0x4) 54.371621646s ago: executing program 2 (id=3010): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="358742"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x20000080) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000047, 0x3f00) 54.252252464s ago: executing program 2 (id=3012): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x80000, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00') 54.145547758s ago: executing program 2 (id=3014): socket$inet6(0xa, 0x1, 0x7fff) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280), 0x106, 0x2}}, 0xfe5e) socket$inet_tcp(0x2, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000340)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x3, 0x5, {"6df62dfb97e6b143ab3aada63561b5c4"}, 0x7, 0x10000, 0x2}}}, 0x90) 53.65975408s ago: executing program 2 (id=3019): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) r2 = socket(0x2d, 0x2, 0x0) bind$xdp(r2, &(0x7f0000000080)={0x2d, 0x0, r1, 0xc}, 0x10) r3 = socket(0x2d, 0x2, 0x0) bind$xdp(r3, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) 53.024871608s ago: executing program 38 (id=3019): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) r2 = socket(0x2d, 0x2, 0x0) bind$xdp(r2, &(0x7f0000000080)={0x2d, 0x0, r1, 0xc}, 0x10) r3 = socket(0x2d, 0x2, 0x0) bind$xdp(r3, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) 4.080430723s ago: executing program 0 (id=3378): recvmsg$unix(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000004280)=[{&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f0000002fc0)=""/4096, 0x1000}], 0x2}, 0x10101) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e26, 0x8, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 3.903684036s ago: executing program 0 (id=3386): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x2) write(r0, &(0x7f0000000000)='3', 0x4e) syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x0) 3.559585488s ago: executing program 0 (id=3390): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407c2c25010000000000010902270001010080fa0904000003ffffff0007058102000200070502020002000705830340"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.060715759s ago: executing program 3 (id=3396): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) close(0x3) 2.931260367s ago: executing program 3 (id=3398): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x6b, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0xa, 0x1, 0x9e, 0xfc, 0x5, 0x0, 0x6, 0xf, 0x3, 0x3, 0x2e, 0x4, '\x00', 0x1, 0xffffffffffffff80}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.57835317s ago: executing program 3 (id=3402): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newlink={0x40, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, r2, 0x308c3, 0xc4a48b7f26be2e0b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast2}, @IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) sendmmsg$inet(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 2.180555917s ago: executing program 3 (id=3405): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net\x00') fchdir(r0) exit(0x3) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) 1.976960849s ago: executing program 9 (id=3407): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='sys\x00', 0x1ff) mount(0x0, &(0x7f00000007c0)='sys\x00', &(0x7f00000007e0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys/devices/platform/vhci_hcd.0/attach\x00', 0x1, 0x0) writev(r0, &(0x7f0000000900)=[{&(0x7f0000000980)='0 ', 0x2}, {&(0x7f00000009a0)='4 ', 0x2}, {&(0x7f00000009c0)='0 3', 0x3}], 0x3) 1.945910764s ago: executing program 8 (id=3408): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42902, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x54, 0x2c, 0xd27, 0x870b525, 0x8000, {0x0, 0x0, 0x0, r2, {0x8, 0xc}, {}, {0xa, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x54}}, 0x0) 1.875074664s ago: executing program 7 (id=3409): bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x20, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0xd}, @call={0x85, 0x0, 0x0, 0x6}, @ldst={0x2, 0x2, 0x6, 0x2, 0x0, 0x46, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r3, &(0x7f0000000080), 0x0}, 0x20) 1.746671357s ago: executing program 7 (id=3410): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd70b7b3458e637000fcdb", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272466467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x18004886) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.644436529s ago: executing program 9 (id=3411): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x1, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0x9, 0x7}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x4080) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x28, 0xd27, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {0xfff3, 0x9}, {0x0, 0x9}, {0xffff, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0xfe, 0x9}}]}, 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x40408c4) 1.643040834s ago: executing program 7 (id=3412): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x40, r2, 0x1, 0x1070bd28, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xffffffffffffffff}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 1.474311195s ago: executing program 8 (id=3413): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) read(r1, &(0x7f0000000080)=""/220, 0xdc) shutdown(r1, 0x1) 1.43747174s ago: executing program 0 (id=3415): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x88}}, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x31, &(0x7f0000002740)=[{0x0}, {&(0x7f0000000100)}, {0x0}, {&(0x7f0000000080)="09ebb34c6e6b9bcb890e8fc488c52697590da70578e206547182de9cd141c0012e4926791de3eea4aa103ad545198bf93c390bbdb6f1faf1c0924adb7ebc658f62f9f47ed5f8d851dea2d62af8d6aa9af055c1975558eef4", 0x58}, {&(0x7f0000001580)="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", 0xb35}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3fffffffffffe97, 0x2404c845) 1.437328251s ago: executing program 7 (id=3416): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0xa2d42, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x1, r1, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r1, 0x0, &(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000300)={0x28, 0x4, r1, 0x0, &(0x7f0000114000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r1}) 1.194781349s ago: executing program 7 (id=3417): r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)={0x4}) close_range(r0, 0xffffffffffffffff, 0x0) 1.175370872s ago: executing program 9 (id=3418): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x30, r2, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x30}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4000810) 1.172695269s ago: executing program 8 (id=3419): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="f7", 0x1}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed", 0x39}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482", 0x18}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)=""/81, 0x51}], 0x1}, 0x0) 1.098837159s ago: executing program 0 (id=3420): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x0, 0x0, 0x1000, 0x2000, &(0x7f0000010000/0x2000)=nil}) ioctl(r2, 0x4048aecb, &(0x7f0000000700)='\x00\x00\x00\x00\x00\x00\x00\x00\x00 ') mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) 1.014970335s ago: executing program 3 (id=3421): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012", @ANYRES32=0x0], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000000c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 991.180702ms ago: executing program 7 (id=3422): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000007740)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000000c0)="db1f00", 0x3}], 0x1}}], 0x1, 0x8800) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000000)=0x40) 833.920367ms ago: executing program 8 (id=3423): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000)='7', 0x1) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 790.220201ms ago: executing program 9 (id=3424): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) unshare(0x8040600) 495.966444ms ago: executing program 8 (id=3425): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c4603000702810000000000000003003e00f9ffffff040100000000000040000000000000008b00000000000000330d00000500380004"], 0x120) lsetxattr$security_capability(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0, 0x1) close(r0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 382.347776ms ago: executing program 9 (id=3426): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x40, 0x32, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40090}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@deltfilter={0x24, 0x2d, 0x100, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x4, 0xa}, {0x1, 0x10}, {0xfff2, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 258.748302ms ago: executing program 8 (id=3427): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x400, 0x7, 0x12c}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000002c0)={0x2e, 0x18, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0x0, 0x0, 0x27}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000500)={0x0, 0x5e5d, 0x10, 0x3}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5ffffe, 0x0, 0x3, 0x33e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf7ff, 0x400, 0xfffffffd, 0x146, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x40f910, 0x10, 0x2, 0xc0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x29a7, 0x40000, 0x3, 0x175}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x800000, 0x1, {}, 0x1f, r4, '\x00', {0x2, 0x0, 0x0, 0x0}}, 0x0) ioctl$UI_ABS_SETUP(r7, 0x401c5504, &(0x7f0000000340)={0x3b, {0x1, 0x0, 0x0, 0x4}}) 59.038609ms ago: executing program 0 (id=3428): bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7000001000000008500000006000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x10000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.494137ms ago: executing program 9 (id=3429): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/usb/devices/usb1/product\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/128, 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/usb/devices/usb1/manufacturer\x00', 0x0, 0x0) read(r1, &(0x7f0000000100)=""/128, 0x80) 0s ago: executing program 3 (id=3430): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x88}}, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x31, &(0x7f0000002740)=[{0x0}, {&(0x7f0000000100)}, {0x0}, {&(0x7f0000000080)="09ebb34c6e6b9bcb890e8fc488c52697590da70578e206547182de9cd141c0012e4926791de3eea4aa103ad545198bf93c390bbdb6f1faf1c0924adb7ebc658f62f9f47ed5f8d851dea2d62af8d6aa9af055c1975558eef4", 0x58}, {&(0x7f0000001580)="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", 0xb35}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3fffffffffffe97, 0x2404c845) kernel console output (not intermixed with test programs): : 00007f8a8f425fa0 R15: 00007ffc4f3d0ea8 [ 394.682007][T14293] [ 394.820665][T14229] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 395.002239][ T31] audit: type=1400 audit(1789673882.395:1100): avc: denied { listen } for pid=14296 comm="syz.8.2867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 395.002281][ T31] audit: type=1400 audit(1789673882.395:1101): avc: denied { accept } for pid=14296 comm="syz.8.2867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 395.422411][ T5719] wiimote 0005:057E:0306.0028: hidraw0: BLUETOOTH HID v0.00 Gamepad [syz0] on syz0 [ 395.460315][ T5719] wiimote 0005:057E:0306.0028: New device registered [ 395.641057][ T31] audit: type=1400 audit(1789673883.025:1102): avc: denied { write } for pid=14309 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 395.664933][ T5718] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 395.821279][ T5718] usb 3-1: Using ep0 maxpacket: 8 [ 395.822193][ T5718] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 395.822720][ T5718] usb 3-1: config 0 has no interfaces? [ 395.824413][ T5718] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.824434][ T5718] usb 3-1: Product: syz [ 395.824448][ T5718] usb 3-1: Manufacturer: syz [ 395.824462][ T5718] usb 3-1: SerialNumber: syz [ 395.829075][ T5718] usb 3-1: config 0 descriptor?? [ 396.054606][ T31] audit: type=1400 audit(1789673883.445:1103): avc: denied { write } for pid=14341 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 396.093007][ T5718] usb 3-1: USB disconnect, device number 34 [ 396.096613][T14326] wiimote 0005:057E:0306.0028: Device removed [ 396.501585][T13156] wiimote 0005:057E:0306.0028: detected device: Nintendo Wii Remote (Gen 1) [ 396.750041][ T31] audit: type=1400 audit(1789673884.135:1104): avc: denied { write } for pid=14353 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 396.913857][T14371] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2885'. [ 397.010334][ T31] audit: type=1400 audit(1789673884.395:1105): avc: denied { write } for pid=14375 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 397.036830][ T5709] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 397.118217][T13156] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0028/input/input49 [ 397.183209][ T5709] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 397.185519][ T5709] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.185548][ T5709] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.185564][ T5709] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 397.185592][ T5709] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.190033][ T5709] usb 9-1: config 0 descriptor?? [ 397.210729][T14381] xt_hashlimit: size too large, truncated to 1048576 [ 397.284055][T13156] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0028/input/input50 [ 397.375672][T13156] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0028/input/input48 [ 397.403497][T14385] netlink: 'syz.9.2889': attribute type 1 has an invalid length. [ 397.515216][T14385] 8021q: adding VLAN 0 to HW filter on device bond1 [ 397.581341][T14387] bond1: (slave geneve2): making interface the new active one [ 397.606502][T14387] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 397.676033][ T5709] input: HID 047f:ffff as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:047F:FFFF.0029/input/input51 [ 397.706620][ T31] audit: type=1400 audit(1789673885.095:1106): avc: denied { append } for pid=14388 comm="syz.7.2890" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 397.710986][ T5709] plantronics 0003:047F:FFFF.0029: input,hiddev0,hidraw1: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 397.919045][ T5709] usb 9-1: USB disconnect, device number 8 [ 397.967124][T14393] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 398.012829][T14390] fido_id[14390]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 398.065280][T14397] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 398.086218][T14397] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 398.117476][T14397] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 398.136021][T14397] bond0 (unregistering): Released all slaves [ 398.565845][ T5718] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 398.614852][ T5718] hid-generic 0000:0000:0000.002A: hidraw1: HID v0.00 Device [syz1] on syz0 [ 399.180840][T14425] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl816) [ 399.379511][T14432] FAULT_INJECTION: forcing a failure. [ 399.379511][T14432] name failslab, interval 1, probability 0, space 0, times 0 [ 399.379546][T14432] CPU: 0 UID: 0 PID: 14432 Comm: syz.9.2905 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 399.379574][T14432] Tainted: [L]=SOFTLOCKUP [ 399.379582][T14432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 399.379594][T14432] Call Trace: [ 399.379601][T14432] [ 399.379609][T14432] dump_stack_lvl+0x100/0x190 [ 399.379643][T14432] should_fail_ex.cold+0x5/0xa [ 399.379673][T14432] should_failslab+0xc2/0x120 [ 399.379707][T14432] __kmalloc_cache_noprof+0x91/0x6d0 [ 399.379736][T14432] ? copy_ipcs+0x10d/0x7e0 [ 399.379761][T14432] copy_ipcs+0x10d/0x7e0 [ 399.379783][T14432] create_new_namespaces+0x20a/0xac0 [ 399.379810][T14432] ? security_capable+0x80/0x260 [ 399.379844][T14432] unshare_nsproxy_namespaces+0xf2/0x220 [ 399.379870][T14432] ksys_unshare+0x4a2/0xa70 [ 399.379894][T14432] ? __pfx_ksys_unshare+0x10/0x10 [ 399.379928][T14432] __x64_sys_unshare+0x31/0x40 [ 399.379950][T14432] do_syscall_64+0x123/0x790 [ 399.379990][T14432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.380013][T14432] RIP: 0033:0x7fb28339e159 [ 399.380031][T14432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.380051][T14432] RSP: 002b:00007fb284295028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 399.380071][T14432] RAX: ffffffffffffffda RBX: 00007fb283625fa0 RCX: 00007fb28339e159 [ 399.380084][T14432] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 399.380097][T14432] RBP: 00007fb28343506b R08: 0000000000000000 R09: 0000000000000000 [ 399.380110][T14432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 399.380122][T14432] R13: 00007fb283626038 R14: 00007fb283625fa0 R15: 00007ffc3e03c388 [ 399.380148][T14432] [ 399.600451][ T31] audit: type=1400 audit(1789673886.985:1107): avc: denied { mounton } for pid=14433 comm="syz.7.2906" path="/70/file0" dev="tmpfs" ino=378 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 399.625195][ T31] audit: type=1326 audit(1789673886.995:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14424 comm="syz.3.2904" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8a8f19e159 code=0x0 [ 399.660043][ T31] audit: type=1400 audit(1789673887.045:1109): avc: denied { write } for pid=14433 comm="syz.7.2906" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 400.013836][T14453] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2911'. [ 400.013874][T14453] netlink: 'syz.7.2911': attribute type 30 has an invalid length. [ 400.013888][T14453] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2911'. [ 400.014454][T14453] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2911'. [ 400.014479][T14453] netlink: 'syz.7.2911': attribute type 30 has an invalid length. [ 400.014492][T14453] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2911'. [ 400.327864][ T31] audit: type=1400 audit(1789673887.715:1110): avc: denied { write } for pid=14467 comm="syz.7.2915" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 400.381530][T14468] binder: 14467:14468 ioctl c0306201 200000000080 returned -14 [ 400.383473][T14468] binder: 14467:14468 ioctl c0306201 2000000003c0 returned -14 [ 400.657613][ T31] audit: type=1400 audit(1789673888.045:1111): avc: denied { write } for pid=14454 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 400.717560][T14482] ptp ptp0: delete virtual clock ptp5 [ 400.869773][ T31] audit: type=1400 audit(1789673888.255:1112): avc: denied { write } for pid=14485 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 401.036485][T14489] FAULT_INJECTION: forcing a failure. [ 401.036485][T14489] name failslab, interval 1, probability 0, space 0, times 0 [ 401.036521][T14489] CPU: 1 UID: 0 PID: 14489 Comm: syz.8.2920 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 401.036551][T14489] Tainted: [L]=SOFTLOCKUP [ 401.036559][T14489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 401.036571][T14489] Call Trace: [ 401.036579][T14489] [ 401.036588][T14489] dump_stack_lvl+0x100/0x190 [ 401.036622][T14489] should_fail_ex.cold+0x5/0xa [ 401.036651][T14489] should_failslab+0xc2/0x120 [ 401.036682][T14489] __kmalloc_cache_noprof+0x91/0x6d0 [ 401.036712][T14489] ? x509_key_preparse+0x355/0x9c0 [ 401.036739][T14489] x509_key_preparse+0x355/0x9c0 [ 401.036765][T14489] asymmetric_key_preparse+0xce/0x1d0 [ 401.036792][T14489] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 401.036823][T14489] __key_create_or_update+0x463/0xe30 [ 401.036852][T14489] ? __pfx___key_create_or_update+0x10/0x10 [ 401.036877][T14489] ? lookup_user_key+0x3f3/0x1300 [ 401.036913][T14489] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 401.036940][T14489] key_create_or_update+0x42/0x60 [ 401.036968][T14489] __do_sys_add_key+0x2e8/0x460 [ 401.036998][T14489] ? __pfx___do_sys_add_key+0x10/0x10 [ 401.037036][T14489] do_syscall_64+0x123/0x790 [ 401.037066][T14489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.037086][T14489] RIP: 0033:0x7fc72d19e159 [ 401.037103][T14489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.037122][T14489] RSP: 002b:00007fc72df8e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 401.037143][T14489] RAX: ffffffffffffffda RBX: 00007fc72d425fa0 RCX: 00007fc72d19e159 [ 401.037156][T14489] RDX: 0000200000000200 RSI: 0000200000000100 RDI: 0000200000000000 [ 401.037167][T14489] RBP: 00007fc72d23506b R08: ffffffffffffffff R09: 0000000000000000 [ 401.037180][T14489] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 401.037193][T14489] R13: 00007fc72d426038 R14: 00007fc72d425fa0 R15: 00007ffef2a13e38 [ 401.037220][T14489] [ 401.265244][T14482] ptp ptp0: delete virtual clock ptp4 [ 401.308264][T14482] ptp ptp0: delete virtual clock ptp3 [ 401.492997][ T31] audit: type=1400 audit(1789673888.885:1113): avc: denied { write } for pid=14493 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 401.493116][T14482] ptp ptp0: delete virtual clock ptp2 [ 401.514184][T14482] ptp ptp0: guarantee physical clock free running [ 401.633430][ T31] audit: type=1400 audit(1789673889.025:1114): avc: denied { write } for pid=14511 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 401.656285][T14508] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 402.221855][ T30] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 402.375844][ T30] usb 9-1: Using ep0 maxpacket: 8 [ 402.378259][ T30] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 402.380556][ T30] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 402.380603][ T30] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.385098][ T30] usb 9-1: config 0 descriptor?? [ 402.441086][ T31] audit: type=1400 audit(1789673889.825:1115): avc: denied { write } for pid=14516 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 402.481651][T13158] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 402.603943][ T31] audit: type=1400 audit(1789673889.985:1116): avc: denied { write } for pid=14541 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 402.634409][ T30] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 402.648378][T13158] usb 4-1: New USB device found, idVendor=0b95, idProduct=1790, bcdDevice= 1.00 [ 402.650635][T13158] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 402.650673][T13158] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 402.650705][T13158] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.953455][ T970] usb 9-1: USB disconnect, device number 9 [ 403.245786][ T31] audit: type=1400 audit(1789673890.635:1117): avc: denied { write } for pid=14544 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 403.444342][ T31] audit: type=1400 audit(1789673890.835:1118): avc: denied { write } for pid=14558 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 403.638828][ T31] audit: type=1400 audit(1789673891.025:1119): avc: denied { ioctl } for pid=14561 comm="syz.8.2934" path="socket:[53051]" dev="sockfs" ino=53051 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 403.640569][T14562] netlink: 'syz.8.2934': attribute type 8 has an invalid length. [ 403.640593][T14562] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2934'. [ 403.880052][T14565] dummy0: entered promiscuous mode [ 403.904619][T14565] gretap0: entered promiscuous mode [ 403.924364][T14565] hsr1: entered allmulticast mode [ 403.924390][T14565] dummy0: entered allmulticast mode [ 403.924454][T14565] gretap0: entered allmulticast mode [ 404.093431][T14569] netlink: 'syz.8.2937': attribute type 10 has an invalid length. [ 404.104447][T14569] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.120436][T14569] bond0: (slave team0): Enslaving as an active interface with an up link [ 404.223689][T13158] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -71 [ 404.223722][T13158] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 404.225658][T13158] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71 [ 404.227041][T13158] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 404.228329][T13158] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 404.228805][T13158] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 404.229568][T13158] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 404.230292][T13158] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 404.233902][T13158] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 404.234731][T13158] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 404.235087][T13158] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 404.235410][T13158] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 404.235742][T13158] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 404.236060][T13158] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 404.236386][T13158] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 404.236701][T13158] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 404.237017][T13158] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 404.237417][T13158] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 404.237738][T13158] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 404.238074][T13158] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 404.238703][T13158] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 404.239023][T13158] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 404.239411][T13158] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 404.239727][T13158] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 404.240049][T13158] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 404.272874][T13158] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 404.286148][T13158] ax88179_178a 4-1:1.0 eth21: register 'ax88179_178a' at usb-dummy_hcd.3-1, ASIX AX88179 USB 3.0 Gigabit Ethernet, 66:65:70:9e:b7:72 [ 404.291833][T13158] usb 4-1: USB disconnect, device number 6 [ 404.293547][T13158] ax88179_178a 4-1:1.0 eth21: unregister 'ax88179_178a' usb-dummy_hcd.3-1, ASIX AX88179 USB 3.0 Gigabit Ethernet [ 404.706736][T14576] FAULT_INJECTION: forcing a failure. [ 404.706736][T14576] name failslab, interval 1, probability 0, space 0, times 0 [ 404.706773][T14576] CPU: 1 UID: 0 PID: 14576 Comm: syz.8.2940 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 404.706800][T14576] Tainted: [L]=SOFTLOCKUP [ 404.706808][T14576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 404.706820][T14576] Call Trace: [ 404.706827][T14576] [ 404.706836][T14576] dump_stack_lvl+0x100/0x190 [ 404.706874][T14576] should_fail_ex.cold+0x5/0xa [ 404.706904][T14576] should_failslab+0xc2/0x120 [ 404.706929][T14576] __kmalloc_noprof+0xfc/0x840 [ 404.706953][T14576] ? lsm_blob_alloc+0x68/0x90 [ 404.706987][T14576] lsm_blob_alloc+0x68/0x90 [ 404.707016][T14576] security_prepare_creds+0x2d/0x290 [ 404.707046][T14576] prepare_creds+0x5d6/0x950 [ 404.707068][T14576] __do_sys_capset+0x270/0x460 [ 404.707089][T14576] ? __pfx___do_sys_capset+0x10/0x10 [ 404.707112][T14576] ? __x64_sys_futex+0x358/0x4d0 [ 404.707146][T14576] ? xfd_validate_state+0x129/0x190 [ 404.707178][T14576] do_syscall_64+0x123/0x790 [ 404.707208][T14576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.707229][T14576] RIP: 0033:0x7fc72d19e159 [ 404.707246][T14576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.707266][T14576] RSP: 002b:00007fc72df8e028 EFLAGS: 00000246 ORIG_RAX: 000000000000007e [ 404.707287][T14576] RAX: ffffffffffffffda RBX: 00007fc72d425fa0 RCX: 00007fc72d19e159 [ 404.707302][T14576] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000200000000080 [ 404.707317][T14576] RBP: 00007fc72d23506b R08: 0000000000000000 R09: 0000000000000000 [ 404.707330][T14576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 404.707342][T14576] R13: 00007fc72d426038 R14: 00007fc72d425fa0 R15: 00007ffef2a13e38 [ 404.707369][T14576] [ 405.058624][ T31] audit: type=1400 audit(1789673892.445:1120): avc: denied { shutdown } for pid=14579 comm="syz.3.2942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 405.213546][ T189] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 405.365987][ T189] usb 9-1: Using ep0 maxpacket: 32 [ 405.366558][ T189] usb 9-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 405.368141][ T189] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 405.368169][ T189] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 405.368194][ T189] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 405.368214][ T189] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 405.368236][ T189] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 405.370597][ T189] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.370619][ T189] usb 9-1: Product: syz [ 405.370634][ T189] usb 9-1: Manufacturer: syz [ 405.370649][ T189] usb 9-1: SerialNumber: syz [ 405.431693][ T189] usb 9-1: config 0 descriptor?? [ 405.865427][ T189] iforce 9-1:0.0: usb_submit_urb failed: -32 [ 405.865472][ T189] input input52: Device does not respond to id packet M [ 405.866015][ T189] iforce 9-1:0.0: usb_submit_urb failed: -32 [ 405.866057][ T189] input input52: Device does not respond to id packet P [ 405.868565][ T189] iforce 9-1:0.0: usb_submit_urb failed: -32 [ 405.868606][ T189] input input52: Device does not respond to id packet B [ 405.915666][ T189] input input52: Limiting number of effects to 32 (device reports 85) [ 406.119165][ T189] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 406.130611][ T189] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 406.131141][ T189] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 406.147643][ T189] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 406.171495][ T189] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input52 [ 406.226605][ T189] usb 9-1: USB disconnect, device number 10 [ 406.272269][ T189] iforce 9-1:0.0: usb_submit_urb failed -19 [ 406.575583][T14617] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 406.750601][T14622] input: syz0 as /devices/virtual/input/input53 [ 406.966694][T14629] rdma_rxe: rxe_newlink: failed to add lo [ 406.998579][T14624] syzkaller0: entered promiscuous mode [ 406.998605][T14624] syzkaller0: entered allmulticast mode [ 407.256798][ T31] audit: type=1400 audit(1789673894.645:1121): avc: denied { watch_mount } for pid=14635 comm="syz.3.2968" path="/24" dev="tmpfs" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 407.280236][ T5710] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 407.439858][ T5710] usb 9-1: Using ep0 maxpacket: 8 [ 407.595144][ T189] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 407.764294][ T189] usb 4-1: Using ep0 maxpacket: 32 [ 407.775851][ T189] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 407.792210][ T189] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 407.792258][ T189] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 407.792303][ T189] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 407.792328][ T189] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 407.794951][ T189] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.794973][ T189] usb 4-1: Product: syz [ 407.794987][ T189] usb 4-1: Manufacturer: syz [ 407.795001][ T189] usb 4-1: SerialNumber: syz [ 407.874299][ C0] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 407.915291][ T189] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input54 [ 408.061516][ T189] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 408.061535][ T189] (id 0x00) [ 408.143688][ T189] rc_core: IR keymap rc-imon-pad not found [ 408.143729][ T189] Registered IR keymap rc-empty [ 408.143805][ T189] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 408.143823][ T189] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 408.262505][ T189] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 408.293427][ T189] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input55 [ 408.297048][ T189] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:7> initialized [ 408.519298][T14638] imon:send_packet: packet tx failed (-71) [ 408.520040][T13158] usb 4-1: USB disconnect, device number 7 [ 408.549416][T14638] imon:vfd_write: send packet #0 failed [ 411.019460][T14667] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2812553464 (22500427712 ns) > initial count (17799498648 ns). Using initial count to start timer. [ 412.485974][ T5710] usb 9-1: unable to get BOS descriptor or descriptor too short [ 412.486018][ T5710] usb 9-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 412.489286][ T5710] usb 9-1: unable to read config index 0 descriptor/start: -32 [ 412.489313][ T5710] usb 9-1: chopping to 0 config(s) [ 412.489334][ T5710] usb 9-1: can't read configurations, error -32 [ 412.681722][ T5710] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 412.811640][ T5710] usb 9-1: device descriptor read/64, error -32 [ 412.923867][ T5710] usb usb9-port1: attempt power cycle [ 413.058387][T14632] gtp0: entered promiscuous mode [ 413.058408][T14632] gtp0: entered allmulticast mode [ 413.788892][T14703] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2993'. [ 413.800293][T14703] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.082859][ T31] audit: type=1400 audit(1789673901.475:1122): avc: denied { create } for pid=14716 comm="syz.8.2999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 414.117914][ T31] audit: type=1400 audit(1789673901.505:1123): avc: denied { ioctl } for pid=14716 comm="syz.8.2999" path="socket:[55667]" dev="sockfs" ino=55667 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 414.151293][ T31] audit: type=1400 audit(1789673901.545:1124): avc: denied { write } for pid=14716 comm="syz.8.2999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 414.292063][ T31] audit: type=1400 audit(1789673901.685:1125): avc: denied { append } for pid=14723 comm="syz.8.3004" name="event2" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 414.321859][T14729] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3003'. [ 414.321880][T14729] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3003'. [ 414.535282][T14732] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 414.965394][ T31] audit: type=1400 audit(1789673902.355:1126): avc: denied { map } for pid=14750 comm="syz.8.3013" path="/116/dev/sda" dev="devtmpfs" ino=890 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 415.695540][ T31] audit: type=1400 audit(1789673903.085:1127): avc: denied { write } for pid=14754 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 415.937530][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.937568][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.996774][ T31] audit: type=1400 audit(1789673903.385:1128): avc: denied { write } for pid=14778 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 416.153325][T14783] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 73736572676e69 [ 416.480002][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 416.480036][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.531606][T14801] random: crng reseeded on system resumption [ 416.545381][T14801] FAULT_INJECTION: forcing a failure. [ 416.545381][T14801] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 416.545416][T14801] CPU: 1 UID: 0 PID: 14801 Comm: syz.9.3028 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 416.545445][T14801] Tainted: [L]=SOFTLOCKUP [ 416.545454][T14801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 416.545469][T14801] Call Trace: [ 416.545477][T14801] [ 416.545486][T14801] dump_stack_lvl+0x100/0x190 [ 416.545520][T14801] should_fail_ex.cold+0x5/0xa [ 416.545545][T14801] ? prepare_alloc_pages+0x16d/0x5b0 [ 416.545573][T14801] should_fail_alloc_page+0xeb/0x140 [ 416.545600][T14801] prepare_alloc_pages+0x1f0/0x5b0 [ 416.545627][T14801] ? unwind_get_return_address+0x59/0xa0 [ 416.545661][T14801] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 416.545690][T14801] ? stack_trace_save+0x8e/0xc0 [ 416.545710][T14801] ? __pfx_stack_trace_save+0x10/0x10 [ 416.545728][T14801] ? stack_depot_save_flags+0x27/0x9f0 [ 416.545755][T14801] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 416.545778][T14801] ? kasan_save_stack+0x3f/0x50 [ 416.545801][T14801] ? kasan_save_track+0x14/0x30 [ 416.545823][T14801] ? __kasan_kmalloc+0xaa/0xb0 [ 416.545844][T14801] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 416.545874][T14801] ? memory_bm_create+0x12c/0xcf0 [ 416.545902][T14801] ? create_basic_memory_bitmaps+0xbd/0x350 [ 416.545930][T14801] ? snapshot_open+0x23b/0x2b0 [ 416.545955][T14801] ? misc_open+0x26d/0x450 [ 416.545973][T14801] ? chrdev_open+0x234/0x6a0 [ 416.545996][T14801] ? do_dentry_open+0x6ab/0x14d0 [ 416.546017][T14801] ? vfs_open+0x82/0x3f0 [ 416.546040][T14801] ? path_openat+0x19fa/0x2440 [ 416.546065][T14801] ? do_file_open+0x20e/0x430 [ 416.546089][T14801] ? do_sys_openat2+0x10f/0x1e0 [ 416.546115][T14801] ? __x64_sys_openat+0x12d/0x210 [ 416.546142][T14801] ? do_syscall_64+0x123/0x790 [ 416.546168][T14801] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.546204][T14801] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 416.546229][T14801] ? policy_nodemask+0xed/0x4f0 [ 416.546258][T14801] alloc_pages_mpol+0x201/0x550 [ 416.546286][T14801] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 416.546313][T14801] ? kasan_save_track+0x14/0x30 [ 416.546334][T14801] ? __kasan_kmalloc+0xaa/0xb0 [ 416.546359][T14801] alloc_pages_noprof+0x1a/0x160 [ 416.546389][T14801] get_zeroed_page_noprof+0x18/0xb0 [ 416.546412][T14801] get_image_page+0x18/0x1a0 [ 416.546438][T14801] memory_bm_create+0x66a/0xcf0 [ 416.546476][T14801] create_basic_memory_bitmaps+0xbd/0x350 [ 416.546508][T14801] snapshot_open+0x23b/0x2b0 [ 416.546527][T14801] ? __pfx_snapshot_open+0x10/0x10 [ 416.546546][T14801] misc_open+0x26d/0x450 [ 416.546566][T14801] ? __pfx_misc_open+0x10/0x10 [ 416.546584][T14801] chrdev_open+0x234/0x6a0 [ 416.546609][T14801] ? __pfx_chrdev_open+0x10/0x10 [ 416.546635][T14801] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 416.546670][T14801] do_dentry_open+0x6ab/0x14d0 [ 416.546690][T14801] ? __pfx_chrdev_open+0x10/0x10 [ 416.546720][T14801] vfs_open+0x82/0x3f0 [ 416.546750][T14801] path_openat+0x19fa/0x2440 [ 416.546778][T14801] ? __pfx_path_openat+0x10/0x10 [ 416.546811][T14801] do_file_open+0x20e/0x430 [ 416.546838][T14801] ? __pfx_do_file_open+0x10/0x10 [ 416.546882][T14801] ? _raw_spin_unlock+0x28/0x50 [ 416.546905][T14801] ? alloc_fd+0x471/0x7a0 [ 416.546943][T14801] do_sys_openat2+0x10f/0x1e0 [ 416.546970][T14801] ? __pfx_do_sys_openat2+0x10/0x10 [ 416.546998][T14801] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 416.547034][T14801] __x64_sys_openat+0x12d/0x210 [ 416.547062][T14801] ? __pfx___x64_sys_openat+0x10/0x10 [ 416.547101][T14801] do_syscall_64+0x123/0x790 [ 416.547132][T14801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.547154][T14801] RIP: 0033:0x7fb28339e159 [ 416.547173][T14801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 416.547193][T14801] RSP: 002b:00007fb284295028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 416.547214][T14801] RAX: ffffffffffffffda RBX: 00007fb283625fa0 RCX: 00007fb28339e159 [ 416.547228][T14801] RDX: 0000000000000081 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 416.547241][T14801] RBP: 00007fb28343506b R08: 0000000000000000 R09: 0000000000000000 [ 416.547254][T14801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 416.547265][T14801] R13: 00007fb283626038 R14: 00007fb283625fa0 R15: 00007ffc3e03c388 [ 416.547292][T14801] [ 416.581759][ T5615] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 416.586878][ T5615] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 416.587772][ T5615] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 416.588377][ T5615] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 416.588775][ T5615] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 417.005308][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.055332][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.275656][ T31] audit: type=1400 audit(1789673904.665:1129): avc: denied { write } for pid=14793 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 417.288809][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.288844][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.327778][ T31] audit: type=1400 audit(1789673904.715:1130): avc: denied { setopt } for pid=14819 comm="syz.9.3032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 417.418104][ T31] audit: type=1400 audit(1789673904.805:1131): avc: denied { write } for pid=14827 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 417.666095][T14831] FAULT_INJECTION: forcing a failure. [ 417.666095][T14831] name failslab, interval 1, probability 0, space 0, times 0 [ 417.666131][T14831] CPU: 0 UID: 0 PID: 14831 Comm: syz.7.3033 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 417.666159][T14831] Tainted: [L]=SOFTLOCKUP [ 417.666166][T14831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 417.666179][T14831] Call Trace: [ 417.666187][T14831] [ 417.666195][T14831] dump_stack_lvl+0x100/0x190 [ 417.666231][T14831] should_fail_ex.cold+0x5/0xa [ 417.666259][T14831] should_failslab+0xc2/0x120 [ 417.666286][T14831] kmem_cache_alloc_noprof+0x92/0x6a0 [ 417.666309][T14831] ? d_instantiate+0x8a/0xb0 [ 417.666337][T14831] ? alloc_empty_file+0x5b/0x1c0 [ 417.666369][T14831] alloc_empty_file+0x5b/0x1c0 [ 417.666396][T14831] alloc_file_pseudo+0x183/0x290 [ 417.666424][T14831] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 417.666458][T14831] __anon_inode_getfile+0xe8/0x280 [ 417.666483][T14831] bpf_link_prime+0x200/0x4c0 [ 417.666505][T14831] tcx_link_attach+0x1f4/0xbc0 [ 417.666536][T14831] ? __pfx_tcx_link_attach+0x10/0x10 [ 417.666569][T14831] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 417.666596][T14831] __sys_bpf+0x4583/0x4a30 [ 417.666623][T14831] ? __pfx___sys_bpf+0x10/0x10 [ 417.666641][T14831] ? find_held_lock+0x2b/0x80 [ 417.666666][T14831] ? futex_wake+0x4ea/0x5e0 [ 417.666714][T14831] ? rcu_read_lock_any_held+0x6a/0x90 [ 417.666742][T14831] ? find_held_lock+0x2b/0x80 [ 417.666768][T14831] ? ksys_write+0x190/0x250 [ 417.666787][T14831] ? ksys_write+0x190/0x250 [ 417.666823][T14831] ? __x64_sys_futex+0x34f/0x4d0 [ 417.666847][T14831] ? __x64_sys_futex+0x358/0x4d0 [ 417.666876][T14831] ? xfd_validate_state+0x129/0x190 [ 417.666902][T14831] ? __x64_sys_bpf+0xce/0x140 [ 417.666920][T14831] __x64_sys_bpf+0xce/0x140 [ 417.666962][T14831] ? do_syscall_64+0xae/0x790 [ 417.666989][T14831] do_syscall_64+0x123/0x790 [ 417.667016][T14831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.667036][T14831] RIP: 0033:0x7fb22699e159 [ 417.667052][T14831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 417.667070][T14831] RSP: 002b:00007fb22792f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 417.667089][T14831] RAX: ffffffffffffffda RBX: 00007fb226c25fa0 RCX: 00007fb22699e159 [ 417.667102][T14831] RDX: 0000000000000020 RSI: 0000200000000040 RDI: 000000000000001c [ 417.667115][T14831] RBP: 00007fb226a3506b R08: 0000000000000000 R09: 0000000000000000 [ 417.667127][T14831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 417.667139][T14831] R13: 00007fb226c26038 R14: 00007fb226c25fa0 R15: 00007ffc58ce8d18 [ 417.667164][T14831] [ 417.931503][ T189] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 418.101860][ T189] usb 4-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 418.102882][ T189] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 418.102915][ T189] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 418.106583][ T189] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 418.106606][ T189] usb 4-1: Product: syz [ 418.106620][ T189] usb 4-1: Manufacturer: syz [ 418.202517][ T189] mos7840 4-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 418.599473][ T13] bond2: left allmulticast mode [ 418.617205][ T13] bond2: left promiscuous mode [ 418.638845][ T13] bridge0: port 3(bond2) entered disabled state [ 418.722486][ T5606] Bluetooth: hci1: command tx timeout [ 419.095048][ T31] audit: type=1400 audit(1789673906.485:1132): avc: denied { write } for pid=14851 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 419.249845][T14882] unsupported nlmsg_type 40 [ 419.445706][ T31] audit: type=1400 audit(1789673906.835:1133): avc: denied { write } for pid=14887 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 419.450067][ T189] mos7840 ttyUSB0: probe with driver mos7840 failed with error -71 [ 419.493772][ T189] usb 4-1: USB disconnect, device number 8 [ 419.516626][ T189] mos7840 4-1:1.0: device disconnected [ 419.588315][ T13] bond0 (unregistering): Released all slaves [ 419.609262][ T31] audit: type=1400 audit(1789673906.995:1134): avc: denied { unmount } for pid=12930 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 419.634253][ T13] bond1 (unregistering): Released all slaves [ 419.716262][ T13] bond2 (unregistering): Released all slaves [ 419.810504][ T5267] 8021q: adding VLAN 0 to HW filter on device eth21 [ 420.711115][ T31] audit: type=1400 audit(1789673908.095:1135): avc: denied { write } for pid=14900 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 420.811683][ T5606] Bluetooth: hci1: command tx timeout [ 421.011398][T14926] FAULT_INJECTION: forcing a failure. [ 421.011398][T14926] name failslab, interval 1, probability 0, space 0, times 0 [ 421.011434][T14926] CPU: 1 UID: 0 PID: 14926 Comm: syz.3.3059 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 421.011465][T14926] Tainted: [L]=SOFTLOCKUP [ 421.011473][T14926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 421.011486][T14926] Call Trace: [ 421.011494][T14926] [ 421.011503][T14926] dump_stack_lvl+0x100/0x190 [ 421.011538][T14926] should_fail_ex.cold+0x5/0xa [ 421.011567][T14926] should_failslab+0xc2/0x120 [ 421.011593][T14926] kmem_cache_alloc_noprof+0x92/0x6a0 [ 421.011616][T14926] ? alloc_empty_file+0x5b/0x1c0 [ 421.011647][T14926] alloc_empty_file+0x5b/0x1c0 [ 421.011674][T14926] dentry_open+0x46/0xd0 [ 421.011701][T14926] pidfs_alloc_file+0x18e/0x290 [ 421.011725][T14926] ? __pfx_pidfs_alloc_file+0x10/0x10 [ 421.011755][T14926] pidfd_prepare+0x107/0x1b0 [ 421.011776][T14926] __x64_sys_pidfd_open+0x105/0x1a0 [ 421.011804][T14926] ? __pfx___x64_sys_pidfd_open+0x10/0x10 [ 421.011837][T14926] do_syscall_64+0x123/0x790 [ 421.011864][T14926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.011884][T14926] RIP: 0033:0x7f8a8f19e159 [ 421.011907][T14926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 421.011927][T14926] RSP: 002b:00007f8a8d3f6018 EFLAGS: 00000246 ORIG_RAX: 00000000000001b2 [ 421.011949][T14926] RAX: ffffffffffffffda RBX: 00007f8a8f425fa0 RCX: 00007f8a8f19e159 [ 421.011962][T14926] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000006f [ 421.011973][T14926] RBP: 00007f8a8f23506b R08: 0000000000000000 R09: 0000000000000000 [ 421.011985][T14926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 421.011997][T14926] R13: 00007f8a8f426038 R14: 00007f8a8f425fa0 R15: 00007ffc4f3d0ea8 [ 421.012022][T14926] [ 421.019682][ T31] audit: type=1400 audit(1789673908.405:1136): avc: denied { write } for pid=14929 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 421.355568][ T5267] 8021q: adding VLAN 0 to HW filter on device eth22 [ 421.421795][T14939] netlink: 'syz.3.3062': attribute type 1 has an invalid length. [ 421.518635][T14939] 8021q: adding VLAN 0 to HW filter on device bond1 [ 421.611405][T14945] bond1: (slave geneve2): making interface the new active one [ 421.612451][T14945] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 421.689352][T14800] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.689413][T14800] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.689516][T14800] bridge_slave_0: entered allmulticast mode [ 421.698798][T14800] bridge_slave_0: entered promiscuous mode [ 421.721787][T14800] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.721861][T14800] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.721953][T14800] bridge_slave_1: entered allmulticast mode [ 421.763393][T14800] bridge_slave_1: entered promiscuous mode [ 421.986081][T14800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 422.041945][T14800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 422.368396][T14800] team0: Port device team_slave_0 added [ 422.475412][T14976] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 422.505726][T14800] team0: Port device team_slave_1 added [ 422.618528][ T31] audit: type=1400 audit(1789673910.005:1137): avc: denied { write } for pid=14953 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 422.748284][T14979] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 422.786455][T14979] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 422.815276][ T31] audit: type=1400 audit(1789673910.205:1138): avc: denied { write } for pid=14987 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 422.819882][T14979] bond0 (unregistering): (slave team0): Releasing backup interface [ 422.881448][ T5606] Bluetooth: hci1: command tx timeout [ 422.931642][T14979] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 422.947915][T14979] bond0 (unregistering): Released all slaves [ 423.071345][T14800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 423.071369][T14800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 423.071391][T14800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 423.203685][ T13] hsr_slave_0: left promiscuous mode [ 423.213343][ T13] hsr_slave_1: left promiscuous mode [ 423.245321][ T13] veth1_macvtap: left promiscuous mode [ 423.245363][ T13] veth0_macvtap: left promiscuous mode [ 423.245446][ T13] veth1_vlan: left promiscuous mode [ 423.245502][ T13] veth0_vlan: left promiscuous mode [ 423.861345][ T30] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 424.013453][ T30] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 424.016664][ T30] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 424.016699][ T30] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 424.016733][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.047475][T15007] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 424.050044][ T30] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 424.306068][ T5267] 8021q: adding VLAN 0 to HW filter on device eth23 [ 424.306779][T14800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.306790][T14800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.306809][T14800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 424.640559][T14800] hsr_slave_0: entered promiscuous mode [ 424.647478][T14800] hsr_slave_1: entered promiscuous mode [ 424.648132][T14800] debugfs: 'hsr0' already exists in 'hsr' [ 424.648149][T14800] Cannot create hsr debugfs directory [ 424.788643][ T5709] usb 4-1: USB disconnect, device number 9 [ 424.855389][T15029] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 424.962607][ T5606] Bluetooth: hci1: command tx timeout [ 425.075560][ T13] IPVS: stop unused estimator thread 0... [ 425.482668][ T31] audit: type=1400 audit(1789673912.865:1139): avc: denied { write } for pid=15034 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 425.690866][ T31] audit: type=1400 audit(1789673913.075:1140): avc: denied { write } for pid=15048 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 425.812295][T15053] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 425.919590][T15053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 425.946269][T15059] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2812553464 (22500427712 ns) > initial count (17799498648 ns). Using initial count to start timer. [ 425.974952][T15053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 425.997500][T15053] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 426.001143][T15053] bond0 (unregistering): Released all slaves [ 426.051823][T15062] xt_hashlimit: size too large, truncated to 1048576 [ 426.269629][ T5267] 8021q: adding VLAN 0 to HW filter on device eth24 [ 427.483877][ T31] audit: type=1400 audit(1789673914.875:1141): avc: denied { write } for pid=15085 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 427.543478][T15112] syzkaller1: entered promiscuous mode [ 427.543502][T15112] syzkaller1: entered allmulticast mode [ 427.682610][T15117] loop4: detected capacity change from 0 to 2640 [ 427.728540][ T31] audit: type=1400 audit(1789673915.115:1142): avc: denied { write } for pid=15115 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 427.758736][T15117] buffer_io_error: 323 callbacks suppressed [ 427.758756][T15117] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 427.758783][T15117] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 427.758804][T15117] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 427.758832][T15117] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 427.758852][T15117] Buffer I/O error on dev loop4, logical block 4, lost async page write [ 427.758872][T15117] Buffer I/O error on dev loop4, logical block 5, lost async page write [ 427.758893][T15117] Buffer I/O error on dev loop4, logical block 6, lost async page write [ 427.758913][T15117] Buffer I/O error on dev loop4, logical block 7, lost async page write [ 427.758931][T15117] Buffer I/O error on dev loop4, logical block 8, lost async page write [ 427.758951][T15117] Buffer I/O error on dev loop4, logical block 9, lost async page write [ 427.942027][T13158] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 428.004492][T14800] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 428.034417][T14800] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 428.038420][T14800] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 428.044353][T14800] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 428.049349][T14800] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 428.080067][T14800] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 428.086196][T14800] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 428.091127][T14800] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 428.095889][T15128] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3113'. [ 428.103850][T13158] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 428.107704][T13158] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 428.112225][ T31] audit: type=1400 audit(1789673915.495:1143): avc: denied { create } for pid=15127 comm="syz.7.3113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 428.112264][ T31] audit: type=1400 audit(1789673915.495:1144): avc: denied { ioctl } for pid=15127 comm="syz.7.3113" path="socket:[56995]" dev="sockfs" ino=56995 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 428.118301][T13158] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 428.118325][T13158] usb 4-1: Product: syz [ 428.118339][T13158] usb 4-1: Manufacturer: syz [ 428.118353][T13158] usb 4-1: SerialNumber: syz [ 428.121312][T13158] usb 4-1: config 0 descriptor?? [ 428.129593][T13158] keyspan 4-1:0.0: Keyspan 4 port adapter converter detected [ 428.129797][T13158] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 428.129850][T13158] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 88 [ 428.136783][T13158] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 428.150278][T13158] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 428.154108][ T31] audit: type=1400 audit(1789673915.545:1145): avc: denied { write } for pid=15127 comm="syz.7.3113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 428.163505][T13158] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 428.169426][T13158] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 428.190320][T13158] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 4 [ 428.205725][T13158] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 428.229404][T13158] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 6 [ 428.245972][T13158] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 428.529999][ T31] audit: type=1400 audit(1789673915.915:1146): avc: denied { write } for pid=15125 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 428.642634][T14800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.664446][ T31] audit: type=1400 audit(1789673916.055:1147): avc: denied { write } for pid=15147 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 428.681952][T14800] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.756548][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.756634][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.760122][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.760198][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.879461][T13156] usb 4-1: USB disconnect, device number 10 [ 428.899655][T13156] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 428.948671][T13156] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 428.962525][T13156] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 428.967859][T13156] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 428.968489][T13156] keyspan 4-1:0.0: device disconnected [ 429.273906][ T31] audit: type=1400 audit(1789673916.665:1148): avc: denied { write } for pid=15149 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 429.633215][T14800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 429.786827][T14800] veth0_vlan: entered promiscuous mode [ 429.825011][T14800] veth1_vlan: entered promiscuous mode [ 429.923293][T14800] veth0_macvtap: entered promiscuous mode [ 429.950404][T14800] veth1_macvtap: entered promiscuous mode [ 430.056148][T14800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.080166][T14800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.201843][ T60] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.202145][ T60] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.202208][ T60] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.202238][ T60] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.362687][T13141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.362709][T13141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.523194][T13141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.523216][T13141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.532243][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 430.532261][ T31] audit: type=1400 audit(1789673917.925:1150): avc: denied { write } for pid=15183 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 430.796531][ T31] audit: type=1400 audit(1789673918.185:1151): avc: denied { write } for pid=15210 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 431.041904][ T5974] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 431.194584][ T5974] usb 9-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 431.197391][ T5974] usb 9-1: config 1 has an invalid interface number: 3 but max is 0 [ 431.197417][ T5974] usb 9-1: config 1 has no interface number 0 [ 431.199135][ T5974] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.199157][ T5974] usb 9-1: Product: syz [ 431.199171][ T5974] usb 9-1: Manufacturer: syz [ 431.199186][ T5974] usb 9-1: SerialNumber: syz [ 431.221317][ T5974] usb 9-1: 3:1 : does not exist [ 431.221339][ T5974] usb 9-1: 3:2 : does not exist [ 431.530781][ T5974] usb 9-1: USB disconnect, device number 14 [ 431.590014][ T5622] udevd[5622]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 431.770330][ T31] audit: type=1400 audit(1789673919.155:1152): avc: denied { write } for pid=15213 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 431.999612][ T31] audit: type=1400 audit(1789673919.385:1153): avc: denied { write } for pid=15250 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 432.201993][ T31] audit: type=1400 audit(1789673919.585:1154): avc: denied { getopt } for pid=15262 comm="syz.9.3137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 432.676717][T15280] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 432.930755][T15288] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2927064404 (2927064404 ns) > initial count (2702739069 ns). Using initial count to start timer. [ 433.101647][ T31] audit: type=1400 audit(1789673920.485:1155): avc: denied { write } for pid=15266 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 433.313975][T15305] syzkaller1: entered promiscuous mode [ 433.313998][T15305] syzkaller1: entered allmulticast mode [ 433.373008][ T31] audit: type=1400 audit(1789673920.765:1156): avc: denied { write } for pid=15307 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 433.500029][T15313] ip_tables: iptables: counters copy to user failed while replacing table [ 434.161475][ T31] audit: type=1326 audit(1789673921.545:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15336 comm="syz.8.3160" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc72d19e159 code=0x7ffc0000 [ 434.162037][ T31] audit: type=1326 audit(1789673921.555:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15336 comm="syz.8.3160" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc72d19e159 code=0x7ffc0000 [ 434.162079][ T31] audit: type=1326 audit(1789673921.555:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15336 comm="syz.8.3160" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc72d19e159 code=0x7ffc0000 [ 434.309511][T15342] xt_hashlimit: size too large, truncated to 1048576 [ 434.562877][ T1260] ieee802154 phy1 wpan1: encryption failed: -22 [ 434.629947][ T5718] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm kworker/0:9: No space for directory leaf checksum. Please run e2fsck -D. [ 434.629976][ T5718] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm kworker/0:9: checksumming directory block 0 [ 434.630125][ T5718] usb 10-1: loading /lib/firmware/updates/syzkaller/htc_9271.fw failed with error -74 [ 434.630215][ T5718] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm kworker/0:9: No space for directory leaf checksum. Please run e2fsck -D. [ 434.630237][ T5718] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm kworker/0:9: checksumming directory block 0 [ 434.630349][ T5718] usb 10-1: loading /lib/firmware/updates/htc_9271.fw failed with error -74 [ 434.630417][ T5718] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm kworker/0:9: No space for directory leaf checksum. Please run e2fsck -D. [ 434.630437][ T5718] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm kworker/0:9: checksumming directory block 0 [ 434.630547][ T5718] usb 10-1: loading /lib/firmware/syzkaller/htc_9271.fw failed with error -74 [ 434.630617][ T5718] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm kworker/0:9: No space for directory leaf checksum. Please run e2fsck -D. [ 434.630637][ T5718] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm kworker/0:9: checksumming directory block 0 [ 434.773679][ T5718] usb 10-1: loading /lib/firmware/htc_9271.fw failed with error -74 [ 434.773711][ T5718] usb 10-1: Direct firmware load for htc_9271.fw failed with error -74 [ 434.773730][ T5718] usb 10-1: Falling back to sysfs fallback for: htc_9271.fw [ 435.175810][T15371] loop4: detected capacity change from 0 to 2640 [ 435.225438][T15371] buffer_io_error: 477 callbacks suppressed [ 435.225457][T15371] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 435.225484][T15371] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 435.225506][T15371] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 435.237949][T15371] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 435.237976][T15371] Buffer I/O error on dev loop4, logical block 4, lost async page write [ 435.237996][T15371] Buffer I/O error on dev loop4, logical block 5, lost async page write [ 435.238015][T15371] Buffer I/O error on dev loop4, logical block 6, lost async page write [ 435.238034][T15371] Buffer I/O error on dev loop4, logical block 7, lost async page write [ 435.238053][T15371] Buffer I/O error on dev loop4, logical block 8, lost async page write [ 435.238072][T15371] Buffer I/O error on dev loop4, logical block 9, lost async page write [ 435.745350][T13158] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 435.772275][T13158] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 435.946216][ T31] kauditd_printk_skb: 52 callbacks suppressed [ 435.946233][ T31] audit: type=1400 audit(1789673923.335:1212): avc: denied { write } for pid=15373 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 436.032983][T13158] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 436.082302][ T31] audit: type=1400 audit(1789673923.475:1213): avc: denied { write } for pid=15405 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 436.311454][ T5709] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 436.353050][T15417] FAULT_INJECTION: forcing a failure. [ 436.353050][T15417] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 436.353087][T15417] CPU: 1 UID: 0 PID: 15417 Comm: syz.9.3175 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 436.353117][T15417] Tainted: [L]=SOFTLOCKUP [ 436.353126][T15417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 436.353139][T15417] Call Trace: [ 436.353146][T15417] [ 436.353155][T15417] dump_stack_lvl+0x100/0x190 [ 436.353190][T15417] should_fail_ex.cold+0x5/0xa [ 436.353215][T15417] ? prepare_alloc_pages+0x16d/0x5b0 [ 436.353244][T15417] should_fail_alloc_page+0xeb/0x140 [ 436.353273][T15417] prepare_alloc_pages+0x1f0/0x5b0 [ 436.353303][T15417] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 436.353327][T15417] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 436.353352][T15417] ? kasan_save_stack+0x3f/0x50 [ 436.353372][T15417] ? kasan_save_stack+0x30/0x50 [ 436.353394][T15417] ? kasan_save_track+0x14/0x30 [ 436.353416][T15417] ? __kasan_slab_alloc+0x89/0x90 [ 436.353439][T15417] ? kmem_cache_alloc_noprof+0x269/0x6a0 [ 436.353460][T15417] ? __khugepaged_enter+0x92/0x3a0 [ 436.353489][T15417] ? khugepaged_enter_vma+0x13a/0x2c0 [ 436.353518][T15417] ? do_huge_pmd_anonymous_page+0x221/0x15b0 [ 436.353541][T15417] ? __handle_mm_fault+0x2134/0x2f60 [ 436.353569][T15417] ? handle_mm_fault+0x363/0xa20 [ 436.353595][T15417] ? __get_user_pages+0x8ae/0x2c30 [ 436.353618][T15417] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 436.353644][T15417] ? __lock_acquire+0x5c0/0x1f40 [ 436.353682][T15417] ? find_held_lock+0x2b/0x80 [ 436.353709][T15417] ? xa_load+0x149/0x2c0 [ 436.353726][T15417] ? xa_load+0x149/0x2c0 [ 436.353744][T15417] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 436.353771][T15417] ? policy_nodemask+0xed/0x4f0 [ 436.353802][T15417] alloc_pages_mpol+0x201/0x550 [ 436.353831][T15417] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 436.353865][T15417] ? folio_memcg_list_lru_alloc+0x2ea/0x7d0 [ 436.353905][T15417] alloc_pages_noprof+0x1a/0x160 [ 436.353936][T15417] pte_alloc_one+0x1c/0x3d0 [ 436.353963][T15417] do_huge_pmd_anonymous_page+0x323/0x15b0 [ 436.353986][T15417] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 436.354016][T15417] ? __pfx_do_huge_pmd_anonymous_page+0x10/0x10 [ 436.354040][T15417] ? pgd_none+0x9f/0xe0 [ 436.354066][T15417] ? __pfx_pgd_none+0x10/0x10 [ 436.354093][T15417] ? find_held_lock+0x2b/0x80 [ 436.354123][T15417] __handle_mm_fault+0x2134/0x2f60 [ 436.354156][T15417] ? __pfx___handle_mm_fault+0x10/0x10 [ 436.354180][T15417] ? __pfx_mt_find+0x10/0x10 [ 436.354226][T15417] handle_mm_fault+0x363/0xa20 [ 436.354260][T15417] __get_user_pages+0x8ae/0x2c30 [ 436.354291][T15417] ? __pfx_mt_find+0x10/0x10 [ 436.354320][T15417] ? __pfx___get_user_pages+0x10/0x10 [ 436.354354][T15417] populate_vma_page_range+0x267/0x3f0 [ 436.354379][T15417] ? __pfx_populate_vma_page_range+0x10/0x10 [ 436.354403][T15417] ? __pfx_find_vma_intersection+0x10/0x10 [ 436.354434][T15417] __mm_populate+0x107/0x3a0 [ 436.354459][T15417] ? __pfx___mm_populate+0x10/0x10 [ 436.354486][T15417] ? up_write+0x2dc/0x5b0 [ 436.354512][T15417] do_mlock+0x3f0/0x800 [ 436.354542][T15417] ? do_futex+0x190/0x440 [ 436.354569][T15417] ? __pfx_do_mlock+0x10/0x10 [ 436.354596][T15417] ? __pfx_do_futex+0x10/0x10 [ 436.354624][T15417] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 436.354657][T15417] ? __x64_sys_futex+0x34f/0x4d0 [ 436.354683][T15417] ? __x64_sys_futex+0x358/0x4d0 [ 436.354714][T15417] __x64_sys_mlock+0xce/0x120 [ 436.354732][T15417] ? __pfx___x64_sys_mlock+0x10/0x10 [ 436.354759][T15417] do_syscall_64+0x123/0x790 [ 436.354789][T15417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.354810][T15417] RIP: 0033:0x7fb28339e159 [ 436.354827][T15417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 436.354847][T15417] RSP: 002b:00007fb284295028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 436.354874][T15417] RAX: ffffffffffffffda RBX: 00007fb283625fa0 RCX: 00007fb28339e159 [ 436.354889][T15417] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000200000c00000 [ 436.354902][T15417] RBP: 00007fb28343506b R08: 0000000000000000 R09: 0000000000000000 [ 436.354915][T15417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 436.354927][T15417] R13: 00007fb283626038 R14: 00007fb283625fa0 R15: 00007ffc3e03c388 [ 436.354957][T15417] [ 436.464563][ T5709] usb 1-1: Using ep0 maxpacket: 8 [ 436.466505][ T5709] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 436.468249][ T5709] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.505004][ T5709] pvrusb2: Hardware description: Terratec Grabster AV400 [ 436.505021][ T5709] pvrusb2: ********** [ 436.505026][ T5709] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 436.505037][ T5709] pvrusb2: Important functionality might not be entirely working. [ 436.505044][ T5709] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 436.505053][ T5709] pvrusb2: ********** [ 436.545676][ T30] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 436.710046][ T2358] pvrusb2: Invalid write control endpoint [ 436.839172][T15391] ceph: No mds server is up or the cluster is laggy [ 436.884948][ T2358] pvrusb2: Invalid write control endpoint [ 436.884961][ T2358] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 436.884968][ T2358] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 436.884975][ T2358] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 436.884983][ T2358] pvrusb2: Device being rendered inoperable [ 436.885009][ T2358] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 436.885038][ T2358] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 436.925401][ T2358] pvrusb2: Attached sub-driver cx25840 [ 436.925416][ T2358] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 436.925424][ T2358] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 436.973272][T15406] pvrusb2: Attempted to execute control transfer when device not ok [ 436.978987][ T5709] usb 1-1: USB disconnect, device number 28 [ 437.009035][ T31] audit: type=1326 audit(1789673924.395:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15422 comm="syz.9.3178" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb28339e159 code=0x0 [ 437.048500][ T31] audit: type=1400 audit(1789673924.435:1215): avc: denied { write } for pid=15413 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 437.086461][ T31] audit: type=1326 audit(1789673924.465:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15422 comm="syz.9.3178" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb28339e159 code=0x7ffc0000 [ 437.086511][ T31] audit: type=1326 audit(1789673924.465:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15422 comm="syz.9.3178" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb28339e159 code=0x7ffc0000 [ 437.117873][ T31] audit: type=1326 audit(1789673924.505:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15422 comm="syz.9.3178" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fb28339e159 code=0x7ffc0000 [ 437.117924][ T31] audit: type=1326 audit(1789673924.505:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15422 comm="syz.9.3178" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb28333f4d9 code=0x7ffc0000 [ 437.117964][ T31] audit: type=1326 audit(1789673924.505:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15422 comm="syz.9.3178" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb28339e159 code=0x7ffc0000 [ 437.118002][ T31] audit: type=1326 audit(1789673924.505:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15422 comm="syz.9.3178" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb28339e159 code=0x7ffc0000 [ 437.716033][T15447] loop4: detected capacity change from 0 to 2640 [ 438.046963][T15460] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2927064404 (2927064404 ns) > initial count (2702739069 ns). Using initial count to start timer. [ 438.246780][T15468] input: syz0 as /devices/virtual/input/input56 [ 438.446564][T15477] FAULT_INJECTION: forcing a failure. [ 438.446564][T15477] name failslab, interval 1, probability 0, space 0, times 0 [ 438.446599][T15477] CPU: 1 UID: 0 PID: 15477 Comm: syz.3.3189 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 438.446628][T15477] Tainted: [L]=SOFTLOCKUP [ 438.446636][T15477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 438.446649][T15477] Call Trace: [ 438.446657][T15477] [ 438.446665][T15477] dump_stack_lvl+0x100/0x190 [ 438.446700][T15477] should_fail_ex.cold+0x5/0xa [ 438.446729][T15477] should_failslab+0xc2/0x120 [ 438.446755][T15477] __kmalloc_cache_noprof+0x91/0x6d0 [ 438.446786][T15477] ? x509_key_preparse+0x355/0x9c0 [ 438.446814][T15477] x509_key_preparse+0x355/0x9c0 [ 438.446840][T15477] asymmetric_key_preparse+0xce/0x1d0 [ 438.446867][T15477] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 438.446894][T15477] __key_create_or_update+0x463/0xe30 [ 438.446921][T15477] ? __pfx___key_create_or_update+0x10/0x10 [ 438.446948][T15477] ? lookup_user_key+0x3f3/0x1300 [ 438.446981][T15477] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 438.447009][T15477] key_create_or_update+0x42/0x60 [ 438.447037][T15477] __do_sys_add_key+0x2e8/0x460 [ 438.447066][T15477] ? __pfx___do_sys_add_key+0x10/0x10 [ 438.447105][T15477] do_syscall_64+0x123/0x790 [ 438.447137][T15477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.447158][T15477] RIP: 0033:0x7f8a8f19e159 [ 438.447175][T15477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 438.447192][T15477] RSP: 002b:00007f8a8d3f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 438.447217][T15477] RAX: ffffffffffffffda RBX: 00007f8a8f425fa0 RCX: 00007f8a8f19e159 [ 438.447230][T15477] RDX: 0000200000000200 RSI: 0000200000000100 RDI: 0000200000000000 [ 438.447241][T15477] RBP: 00007f8a8f23506b R08: ffffffffffffffff R09: 0000000000000000 [ 438.447253][T15477] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 438.447263][T15477] R13: 00007f8a8f426038 R14: 00007f8a8f425fa0 R15: 00007ffc4f3d0ea8 [ 438.447288][T15477] [ 438.692960][T15485] FAULT_INJECTION: forcing a failure. [ 438.692960][T15485] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 438.692995][T15485] CPU: 1 UID: 0 PID: 15485 Comm: syz.3.3191 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 438.693022][T15485] Tainted: [L]=SOFTLOCKUP [ 438.693029][T15485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 438.693041][T15485] Call Trace: [ 438.693048][T15485] [ 438.693058][T15485] dump_stack_lvl+0x100/0x190 [ 438.693095][T15485] should_fail_ex.cold+0x5/0xa [ 438.693119][T15485] ? prepare_alloc_pages+0x16d/0x5b0 [ 438.693147][T15485] should_fail_alloc_page+0xeb/0x140 [ 438.693175][T15485] prepare_alloc_pages+0x1f0/0x5b0 [ 438.693201][T15485] ? __memcg_kmem_charge_page+0x373/0x4d0 [ 438.693234][T15485] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 438.693258][T15485] ? do_raw_spin_unlock+0x145/0x1e0 [ 438.693285][T15485] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 438.693312][T15485] ? rcu_is_watching+0x13/0xc0 [ 438.693338][T15485] ? trace_hrtimer_start+0x77/0x220 [ 438.693370][T15485] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 438.693397][T15485] ? find_held_lock+0x2b/0x80 [ 438.693423][T15485] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 438.693444][T15485] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 438.693466][T15485] ? rcu_is_watching+0x13/0xc0 [ 438.693491][T15485] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 438.693519][T15485] ? trace_sched_exit_tp+0x120/0x160 [ 438.693548][T15485] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 438.693572][T15485] ? policy_nodemask+0xed/0x4f0 [ 438.693598][T15485] alloc_pages_mpol+0x201/0x550 [ 438.693625][T15485] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 438.693653][T15485] ? avc_has_perm_noaudit+0x145/0x3b0 [ 438.693682][T15485] alloc_pages_noprof+0x1a/0x160 [ 438.693708][T15485] anon_pipe_prefill_and_lock+0x102/0x580 [ 438.693738][T15485] ? __pfx_avc_has_perm+0x10/0x10 [ 438.693772][T15485] ? __pfx_anon_pipe_prefill_and_lock+0x10/0x10 [ 438.693803][T15485] ? inode_has_perm+0x16d/0x1d0 [ 438.693833][T15485] anon_pipe_write+0x164/0x1b50 [ 438.693865][T15485] ? __pfx_anon_pipe_write+0x10/0x10 [ 438.693887][T15485] ? selinux_file_permission+0x8f/0x6d0 [ 438.693911][T15485] ? bpf_lsm_file_permission+0x9/0x10 [ 438.693937][T15485] ? security_file_permission+0x76/0x210 [ 438.693962][T15485] ? rw_verify_area+0xce/0x6d0 [ 438.693994][T15485] vfs_write+0x6af/0x1050 [ 438.694012][T15485] ? __pfx_anon_pipe_write+0x10/0x10 [ 438.694037][T15485] ? __pfx_vfs_write+0x10/0x10 [ 438.694053][T15485] ? find_held_lock+0x2b/0x80 [ 438.694093][T15485] ksys_write+0x1f8/0x250 [ 438.694113][T15485] ? __pfx_ksys_write+0x10/0x10 [ 438.694138][T15485] do_syscall_64+0x123/0x790 [ 438.694165][T15485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.694186][T15485] RIP: 0033:0x7f8a8f19e159 [ 438.694204][T15485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 438.694224][T15485] RSP: 002b:00007f8a8d3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 438.694243][T15485] RAX: ffffffffffffffda RBX: 00007f8a8f425fa0 RCX: 00007f8a8f19e159 [ 438.694254][T15485] RDX: 00000000ffffff9a RSI: 0000200000000000 RDI: 0000000000000004 [ 438.694265][T15485] RBP: 00007f8a8f23506b R08: 0000000000000000 R09: 0000000000000000 [ 438.694277][T15485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 438.694288][T15485] R13: 00007f8a8f426038 R14: 00007f8a8f425fa0 R15: 00007ffc4f3d0ea8 [ 438.694313][T15485] [ 439.219357][T15409] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 439.389470][T15497] netlink: 1335 bytes leftover after parsing attributes in process `syz.7.3194'. [ 439.701535][ T5709] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 439.855186][ T5709] usb 1-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 439.858199][ T5709] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 439.858245][ T5709] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.113316][ T5709] qmi_wwan 1-1:1.0: cdc-wdm0: USB WDM device [ 440.196980][ T5709] wwan wwan0: port wwan0qmi0 attached [ 440.398897][ T5709] qmi_wwan 1-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.0-1, WWAN/QMI device, ba:26:13:96:65:11 [ 440.419521][T15540] netlink: 'syz.9.3217': attribute type 1 has an invalid length. [ 440.576670][ T5696] usb 1-1: USB disconnect, device number 29 [ 440.587195][ T5696] qmi_wwan 1-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.0-1, WWAN/QMI device [ 440.667077][ T5696] wwan wwan0: port wwan0qmi0 disconnected [ 440.866832][T15555] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3210'. [ 440.866928][T15555] bridge_slave_1: left allmulticast mode [ 440.866949][T15555] bridge_slave_1: left promiscuous mode [ 440.867135][T15555] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.875688][T15555] bridge_slave_0: left allmulticast mode [ 440.875713][T15555] bridge_slave_0: left promiscuous mode [ 440.875888][T15555] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.337386][T15562] loop4: detected capacity change from 0 to 2640 [ 441.359390][ T5622] buffer_io_error: 964 callbacks suppressed [ 441.359410][ T5622] Buffer I/O error on dev loop4, logical block 0, async page read [ 441.367405][T15562] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 441.373194][T15562] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 441.373236][T15562] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 441.373255][T15562] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 441.373284][T15562] Buffer I/O error on dev loop4, logical block 4, lost async page write [ 441.373304][T15562] Buffer I/O error on dev loop4, logical block 5, lost async page write [ 441.373322][T15562] Buffer I/O error on dev loop4, logical block 6, lost async page write [ 441.373340][T15562] Buffer I/O error on dev loop4, logical block 7, lost async page write [ 441.373370][T15562] Buffer I/O error on dev loop4, logical block 8, lost async page write [ 441.581302][ T30] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 441.752674][ T30] usb 1-1: Using ep0 maxpacket: 8 [ 441.753267][ T30] usb 1-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 441.754067][ T30] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 441.754092][ T30] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 441.754122][ T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.806706][ T30] kobil_sct 1-1:1.0: KOBIL USB smart card terminal converter detected [ 441.810232][ T30] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 442.823877][ T189] usb 1-1: USB disconnect, device number 30 [ 442.830206][ T189] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 442.830681][ T189] kobil_sct 1-1:1.0: device disconnected [ 443.355654][T15541] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 444.017306][ T31] kauditd_printk_skb: 10 callbacks suppressed [ 444.017324][ T31] audit: type=1400 audit(1789673931.405:1232): avc: denied { write } for pid=15573 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 444.190424][ T31] audit: type=1400 audit(1789673931.575:1233): avc: denied { write } for pid=15591 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 444.771739][ T31] audit: type=1400 audit(1789673932.165:1234): avc: denied { write } for pid=15594 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 444.942683][ T31] audit: type=1400 audit(1789673932.335:1235): avc: denied { write } for pid=15605 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 445.741514][ T189] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 445.892956][ T189] usb 9-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 445.895250][ T189] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 445.895291][ T189] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.188522][ T189] qmi_wwan 9-1:1.0: cdc-wdm0: USB WDM device [ 446.206008][ T189] wwan wwan0: port wwan0qmi0 attached [ 446.396157][ T189] qmi_wwan 9-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.8-1, WWAN/QMI device, 66:c9:12:46:38:30 [ 446.423154][T13158] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 446.582324][T13158] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 446.583167][T13158] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 446.583208][T13158] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 446.583235][T13158] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 446.583270][T13158] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.669371][ T10] usb 9-1: USB disconnect, device number 15 [ 446.685201][ T10] qmi_wwan 9-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.8-1, WWAN/QMI device [ 446.753708][ T10] wwan wwan0: port wwan0qmi0 disconnected [ 446.790792][ T31] audit: type=1400 audit(1789673934.175:1236): avc: denied { write } for pid=15649 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 446.920042][ T31] audit: type=1400 audit(1789673934.305:1237): avc: denied { write } for pid=15669 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 447.022250][T13158] cxacru 1-1:1.0: send of cm 0x91 failed (-71) [ 447.022280][T13158] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 447.022293][T13158] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 447.077231][T13158] cxacru 1-1:1.0: probe with driver cxacru failed with error -71 [ 447.097972][T13158] usb 1-1: USB disconnect, device number 31 [ 447.271333][ T31] audit: type=1400 audit(1789673934.665:1238): avc: denied { write } for pid=15672 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 447.402272][ T31] audit: type=1400 audit(1789673934.795:1239): avc: denied { write } for pid=15683 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 447.686482][T15692] netlink: 'syz.0.3240': attribute type 11 has an invalid length. [ 447.686506][T15692] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3240'. [ 447.713622][T15692] netlink: 'syz.0.3240': attribute type 11 has an invalid length. [ 447.713649][T15692] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3240'. [ 447.732039][ T59] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 447.732078][ T59] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 447.732106][ T59] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 447.732133][ T59] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 448.185747][T15704] FAULT_INJECTION: forcing a failure. [ 448.185747][T15704] name failslab, interval 1, probability 0, space 0, times 0 [ 448.185783][T15704] CPU: 0 UID: 0 PID: 15704 Comm: syz.0.3246 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 448.185811][T15704] Tainted: [L]=SOFTLOCKUP [ 448.185818][T15704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 448.185830][T15704] Call Trace: [ 448.185837][T15704] [ 448.185845][T15704] dump_stack_lvl+0x100/0x190 [ 448.185882][T15704] should_fail_ex.cold+0x5/0xa [ 448.185912][T15704] should_failslab+0xc2/0x120 [ 448.185940][T15704] __kmalloc_noprof+0xfc/0x840 [ 448.185963][T15704] ? lsm_blob_alloc+0x68/0x90 [ 448.185994][T15704] lsm_blob_alloc+0x68/0x90 [ 448.186021][T15704] security_prepare_creds+0x2d/0x290 [ 448.186048][T15704] prepare_creds+0x5d6/0x950 [ 448.186070][T15704] set_current_groups+0x15/0xd0 [ 448.186099][T15704] __do_sys_setgroups+0x3e2/0x4f0 [ 448.186134][T15704] do_syscall_64+0x123/0x790 [ 448.186163][T15704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.186184][T15704] RIP: 0033:0x7fe4f439e159 [ 448.186201][T15704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 448.186219][T15704] RSP: 002b:00007fe4f25f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000074 [ 448.186239][T15704] RAX: ffffffffffffffda RBX: 00007fe4f4625fa0 RCX: 00007fe4f439e159 [ 448.186252][T15704] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 448.186264][T15704] RBP: 00007fe4f443506b R08: 0000000000000000 R09: 0000000000000000 [ 448.186277][T15704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 448.186289][T15704] R13: 00007fe4f4626038 R14: 00007fe4f4625fa0 R15: 00007ffed8fdab68 [ 448.186316][T15704] [ 449.169612][T15641] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 449.341052][T15717] netlink: 'syz.8.3252': attribute type 1 has an invalid length. [ 449.404967][T15719] input: syz0 as /devices/virtual/input/input57 [ 449.493076][T15717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.635430][T15721] bond0: (slave geneve2): making interface the new active one [ 449.651040][T15721] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 449.928393][T15728] syzkaller0: entered promiscuous mode [ 449.928418][T15728] syzkaller0: entered allmulticast mode [ 449.932943][T13156] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 449.937192][T13156] hid-generic 0000:0000:0000.002B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 450.061755][ T5974] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 450.213880][ T5974] usb 9-1: Using ep0 maxpacket: 8 [ 450.214923][ T5974] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 450.236220][ T5974] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.249930][ T5974] pvrusb2: Hardware description: Terratec Grabster AV400 [ 450.249946][ T5974] pvrusb2: ********** [ 450.249951][ T5974] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 450.249960][ T5974] pvrusb2: Important functionality might not be entirely working. [ 450.249967][ T5974] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 450.249975][ T5974] pvrusb2: ********** [ 450.460921][ T2358] pvrusb2: Invalid write control endpoint [ 450.534370][ T2358] pvrusb2: Invalid write control endpoint [ 450.534385][ T2358] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 450.534392][ T2358] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 450.534398][ T2358] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 450.534405][ T2358] pvrusb2: Device being rendered inoperable [ 450.534433][ T2358] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 450.534464][ T2358] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 450.539572][ T2358] pvrusb2: Attached sub-driver cx25840 [ 450.539586][ T2358] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 450.539594][ T2358] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 450.690840][T15735] pvrusb2: Attempted to execute control transfer when device not ok [ 450.702347][ T5710] usb 9-1: USB disconnect, device number 16 [ 451.762229][ T7345] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 451.762254][ T7345] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 451.763703][ T5606] Bluetooth: hci5: command 0x0c1a tx timeout [ 454.006282][ T7345] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 454.006308][ T7345] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 454.028177][ T5606] Bluetooth: hci3: command 0x0c1a tx timeout [ 455.461575][T15795] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 455.817517][ T31] audit: type=1400 audit(1789673943.205:1240): avc: denied { write } for pid=15792 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 455.937621][ T31] audit: type=1400 audit(1789673943.325:1241): avc: denied { write } for pid=15829 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 456.009685][ T5974] libceph: connect (1)[c::]:6789 error -101 [ 456.009883][ T5974] libceph: mon0 (1)[c::]:6789 connect error [ 456.054327][T15831] ceph: No mds server is up or the cluster is laggy [ 456.058393][T15837] xt_hashlimit: size too large, truncated to 1048576 [ 456.241889][ T5606] Bluetooth: hci6: command 0x0c1a tx timeout [ 456.271473][ T5974] libceph: connect (1)[c::]:6789 error -101 [ 456.271640][ T5974] libceph: mon0 (1)[c::]:6789 connect error [ 456.273883][ T7345] Bluetooth: hci6: Opcode 0x0c1a failed: -110 [ 456.273902][ T7345] Bluetooth: hci6: Error when powering off device on rfkill (-110) [ 456.435851][ T31] audit: type=1400 audit(1789673943.825:1242): avc: denied { write } for pid=15842 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 456.763357][T15868] netlink: 'syz.8.3292': attribute type 7 has an invalid length. [ 456.766834][ T31] audit: type=1400 audit(1789673944.155:1243): avc: denied { write } for pid=15862 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 456.805475][T15868] netlink: 'syz.8.3292': attribute type 7 has an invalid length. [ 457.616480][T15908] netlink: 'syz.9.3305': attribute type 39 has an invalid length. [ 457.770167][T15912] FAULT_INJECTION: forcing a failure. [ 457.770167][T15912] name failslab, interval 1, probability 0, space 0, times 0 [ 457.770201][T15912] CPU: 1 UID: 0 PID: 15912 Comm: syz.3.3307 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 457.770229][T15912] Tainted: [L]=SOFTLOCKUP [ 457.770237][T15912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 457.770250][T15912] Call Trace: [ 457.770257][T15912] [ 457.770266][T15912] dump_stack_lvl+0x100/0x190 [ 457.770303][T15912] should_fail_ex.cold+0x5/0xa [ 457.770333][T15912] should_failslab+0xc2/0x120 [ 457.770360][T15912] __kmalloc_cache_noprof+0x91/0x6d0 [ 457.770394][T15912] ? selinux_netlbl_sock_genattr+0xe7/0x4e0 [ 457.770422][T15912] selinux_netlbl_sock_genattr+0xe7/0x4e0 [ 457.770450][T15912] selinux_netlbl_socket_post_create+0xb0/0x1c0 [ 457.770477][T15912] selinux_socket_post_create+0x368/0x7e0 [ 457.770511][T15912] ? __pfx_selinux_socket_post_create+0x10/0x10 [ 457.770551][T15912] ? tcp_v4_init_sock+0x15/0xb0 [ 457.770576][T15912] ? __pfx_tcp_v4_init_sock+0x10/0x10 [ 457.770602][T15912] ? inet_create+0x962/0x1060 [ 457.770636][T15912] security_socket_post_create+0xaf/0x270 [ 457.770671][T15912] __sock_create+0x70b/0x860 [ 457.770707][T15912] mptcp_subflow_create_socket+0xec/0xa30 [ 457.770733][T15912] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 457.770757][T15912] ? lock_acquire+0x1d1/0x380 [ 457.770782][T15912] __mptcp_nmpc_sk+0x17f/0x880 [ 457.770804][T15912] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 457.770828][T15912] ? __local_bh_enable_ip+0xa5/0x120 [ 457.770850][T15912] mptcp_listen+0x135/0x4e0 [ 457.770874][T15912] ? __pfx_mptcp_listen+0x10/0x10 [ 457.770907][T15912] __sys_listen_socket+0x108/0x150 [ 457.770928][T15912] __sys_listen+0xa7/0x130 [ 457.770949][T15912] __x64_sys_listen+0x53/0x80 [ 457.770969][T15912] do_syscall_64+0x123/0x790 [ 457.770997][T15912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.771017][T15912] RIP: 0033:0x7f8a8f19e159 [ 457.771035][T15912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 457.771053][T15912] RSP: 002b:00007f8a8d3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 457.771074][T15912] RAX: ffffffffffffffda RBX: 00007f8a8f425fa0 RCX: 00007f8a8f19e159 [ 457.771087][T15912] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000003 [ 457.771098][T15912] RBP: 00007f8a8f23506b R08: 0000000000000000 R09: 0000000000000000 [ 457.771110][T15912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 457.771122][T15912] R13: 00007f8a8f426038 R14: 00007f8a8f425fa0 R15: 00007ffc4f3d0ea8 [ 457.771149][T15912] [ 458.294869][T15929] netlink: 'syz.3.3314': attribute type 1 has an invalid length. [ 458.294894][T15929] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3314'. [ 458.798593][T15945] FAULT_INJECTION: forcing a failure. [ 458.798593][T15945] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 458.798629][T15945] CPU: 0 UID: 0 PID: 15945 Comm: syz.3.3320 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 458.798657][T15945] Tainted: [L]=SOFTLOCKUP [ 458.798664][T15945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 458.798676][T15945] Call Trace: [ 458.798683][T15945] [ 458.798692][T15945] dump_stack_lvl+0x100/0x190 [ 458.798730][T15945] should_fail_ex.cold+0x5/0xa [ 458.798758][T15945] _copy_to_user+0x32/0xd0 [ 458.798781][T15945] bpf_vlog_reverse_ubuf+0x2c3/0x470 [ 458.798820][T15945] bpf_vlog_finalize+0x271/0x360 [ 458.798852][T15945] bpf_log_attr_finalize+0x86/0x1a0 [ 458.798872][T15945] ? __pfx_bpf_log_attr_finalize+0x10/0x10 [ 458.798899][T15945] btf_new_fd+0x9c7/0x5bc0 [ 458.798926][T15945] ? avc_has_perm_noaudit+0x145/0x3b0 [ 458.798959][T15945] ? __pfx_btf_new_fd+0x10/0x10 [ 458.798985][T15945] ? rcu_is_watching+0x13/0xc0 [ 458.799009][T15945] ? cap_capable+0x107/0x430 [ 458.799038][T15945] ? security_capable+0x80/0x260 [ 458.799065][T15945] ? ns_capable+0xd2/0xf0 [ 458.799085][T15945] __sys_bpf+0x13ef/0x4a30 [ 458.799103][T15945] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 458.799134][T15945] ? __pfx___sys_bpf+0x10/0x10 [ 458.799153][T15945] ? hrtimer_start_range_ns_common+0x778/0x16f0 [ 458.799188][T15945] ? find_held_lock+0x2b/0x80 [ 458.799217][T15945] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 458.799243][T15945] ? rcu_is_watching+0x13/0xc0 [ 458.799269][T15945] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 458.799298][T15945] ? rcu_is_watching+0x13/0xc0 [ 458.799325][T15945] ? trace_sched_exit_tp+0x120/0x160 [ 458.799352][T15945] ? __schedule+0x126b/0x6920 [ 458.799391][T15945] ? __pfx___schedule+0x10/0x10 [ 458.799413][T15945] ? __x64_sys_futex+0x358/0x4d0 [ 458.799454][T15945] ? xfd_validate_state+0x129/0x190 [ 458.799481][T15945] ? __x64_sys_bpf+0xce/0x140 [ 458.799502][T15945] __x64_sys_bpf+0xce/0x140 [ 458.799524][T15945] ? do_syscall_64+0xae/0x790 [ 458.799553][T15945] do_syscall_64+0x123/0x790 [ 458.799584][T15945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.799605][T15945] RIP: 0033:0x7f8a8f19e159 [ 458.799623][T15945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 458.799643][T15945] RSP: 002b:00007f8a8d3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 458.799664][T15945] RAX: ffffffffffffffda RBX: 00007f8a8f425fa0 RCX: 00007f8a8f19e159 [ 458.799678][T15945] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 458.799691][T15945] RBP: 00007f8a8f23506b R08: 0000000000000000 R09: 0000000000000000 [ 458.799703][T15945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 458.799716][T15945] R13: 00007f8a8f426038 R14: 00007f8a8f425fa0 R15: 00007ffc4f3d0ea8 [ 458.799743][T15945] [ 458.883140][ T5606] Bluetooth: hci0: command 0x0c1a tx timeout [ 458.889802][ T7345] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 458.889825][ T7345] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 459.289734][T15956] netlink: 'syz.9.3324': attribute type 1 has an invalid length. [ 459.439231][T15956] 8021q: adding VLAN 0 to HW filter on device bond2 [ 459.475037][T15964] FAULT_INJECTION: forcing a failure. [ 459.475037][T15964] name failslab, interval 1, probability 0, space 0, times 0 [ 459.475073][T15964] CPU: 0 UID: 0 PID: 15964 Comm: syz.3.3328 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 459.475101][T15964] Tainted: [L]=SOFTLOCKUP [ 459.475108][T15964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 459.475120][T15964] Call Trace: [ 459.475128][T15964] [ 459.475136][T15964] dump_stack_lvl+0x100/0x190 [ 459.475173][T15964] should_fail_ex.cold+0x5/0xa [ 459.475203][T15964] should_failslab+0xc2/0x120 [ 459.475230][T15964] kmem_cache_alloc_noprof+0x92/0x6a0 [ 459.475254][T15964] ? do_timer_create+0x209/0x1460 [ 459.475288][T15964] do_timer_create+0x209/0x1460 [ 459.475319][T15964] ? do_futex+0x190/0x440 [ 459.475346][T15964] ? __pfx_do_timer_create+0x10/0x10 [ 459.475373][T15964] ? __pfx_do_futex+0x10/0x10 [ 459.475402][T15964] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 459.475437][T15964] __x64_sys_timer_create+0x199/0x1d0 [ 459.475473][T15964] ? __pfx___x64_sys_timer_create+0x10/0x10 [ 459.475503][T15964] ? xfd_validate_state+0x129/0x190 [ 459.475531][T15964] do_syscall_64+0x123/0x790 [ 459.475561][T15964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.475582][T15964] RIP: 0033:0x7f8a8f19e159 [ 459.475598][T15964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 459.475617][T15964] RSP: 002b:00007f8a8d3f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000de [ 459.475638][T15964] RAX: ffffffffffffffda RBX: 00007f8a8f425fa0 RCX: 00007f8a8f19e159 [ 459.475652][T15964] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffff600005 [ 459.475665][T15964] RBP: 00007f8a8f23506b R08: 0000000000000000 R09: 0000000000000000 [ 459.475677][T15964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 459.475689][T15964] R13: 00007f8a8f426038 R14: 00007f8a8f425fa0 R15: 00007ffc4f3d0ea8 [ 459.475711][T15964] ? _end+0x63791005/0x0 [ 459.475735][T15964] [ 460.311315][ T5696] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 460.462155][ T5696] usb 9-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 460.463899][ T5696] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 460.463941][ T5696] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.626851][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880567e9000: rx timeout, send abort [ 460.627046][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880567e9000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 460.735404][ T5696] qmi_wwan 9-1:1.0: cdc-wdm0: USB WDM device [ 460.749197][ T5696] wwan wwan0: port wwan0qmi0 attached [ 460.965132][ T5696] qmi_wwan 9-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.8-1, WWAN/QMI device, 42:e7:47:24:cb:cb [ 461.226225][ T5602] usb 9-1: USB disconnect, device number 17 [ 461.241547][ T5602] qmi_wwan 9-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.8-1, WWAN/QMI device [ 461.318420][T13141] IPVS: starting estimator thread 0... [ 461.401338][T16025] IPVS: using max 48 ests per chain, 115200 per kthread [ 461.438642][ T5602] wwan wwan0: port wwan0qmi0 disconnected [ 461.616214][T16035] bridge0: port 3(macsec1) entered blocking state [ 461.616294][T16035] bridge0: port 3(macsec1) entered disabled state [ 461.616396][T16035] macsec1: entered allmulticast mode [ 461.685536][T16035] macsec1: entered promiscuous mode [ 461.762424][ T5615] Bluetooth: hci1: command 0x0c1a tx timeout [ 461.762531][ T7345] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 461.762545][ T7345] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 461.934962][ T31] audit: type=1400 audit(1789673949.325:1244): avc: denied { write } for pid=16026 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 462.249442][ T31] audit: type=1804 audit(1789673949.635:1245): pid=16050 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.9.3348" name="/newroot/188/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=276 res=1 errno=0 [ 462.326644][ T31] audit: type=1400 audit(1789673949.715:1246): avc: denied { write } for pid=16051 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 462.927812][ T31] audit: type=1804 audit(1789673950.315:1247): pid=16096 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.7.3355" name="/newroot/160/file1" dev="tmpfs" ino=853 res=1 errno=0 [ 463.231025][ T31] audit: type=1400 audit(1789673950.615:1248): avc: denied { write } for pid=16055 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 463.385566][T16113] ip_tables: iptables: counters copy to user failed while replacing table [ 463.414147][T16108] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3357'. [ 463.657814][ T31] audit: type=1400 audit(1789673951.045:1249): avc: denied { write } for pid=16118 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 464.365313][T16146] FAULT_INJECTION: forcing a failure. [ 464.365313][T16146] name failslab, interval 1, probability 0, space 0, times 0 [ 464.365350][T16146] CPU: 0 UID: 0 PID: 16146 Comm: syz.0.3371 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 464.365379][T16146] Tainted: [L]=SOFTLOCKUP [ 464.365394][T16146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 464.365406][T16146] Call Trace: [ 464.365414][T16146] [ 464.365423][T16146] dump_stack_lvl+0x100/0x190 [ 464.365459][T16146] should_fail_ex.cold+0x5/0xa [ 464.365487][T16146] should_failslab+0xc2/0x120 [ 464.365513][T16146] __kmalloc_noprof+0xfc/0x840 [ 464.365534][T16146] ? __register_sysctl_table+0xac/0x1650 [ 464.365571][T16146] __register_sysctl_table+0xac/0x1650 [ 464.365600][T16146] ? trace_kmalloc+0xeb/0x110 [ 464.365625][T16146] ? __kasan_kmalloc+0xaa/0xb0 [ 464.365648][T16146] ? __kmalloc_node_track_caller_noprof+0x35b/0x870 [ 464.365672][T16146] ? __pfx___register_sysctl_table+0x10/0x10 [ 464.365702][T16146] ? setup_ipc_sysctls+0x5e/0x300 [ 464.365732][T16146] ? __asan_memcpy+0x3c/0x60 [ 464.365754][T16146] setup_ipc_sysctls+0x1aa/0x300 [ 464.365785][T16146] copy_ipcs+0x57a/0x7e0 [ 464.365807][T16146] create_new_namespaces+0x20a/0xac0 [ 464.365831][T16146] ? security_capable+0x80/0x260 [ 464.365865][T16146] unshare_nsproxy_namespaces+0xf2/0x220 [ 464.365889][T16146] ksys_unshare+0x4a2/0xa70 [ 464.365914][T16146] ? __pfx_ksys_unshare+0x10/0x10 [ 464.365938][T16146] ? exit_to_user_mode_loop+0x166/0x700 [ 464.365972][T16146] __x64_sys_unshare+0x31/0x40 [ 464.365994][T16146] do_syscall_64+0x123/0x790 [ 464.366028][T16146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.366048][T16146] RIP: 0033:0x7fe4f439e159 [ 464.366066][T16146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 464.366085][T16146] RSP: 002b:00007fe4f25f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 464.366104][T16146] RAX: ffffffffffffffda RBX: 00007fe4f4625fa0 RCX: 00007fe4f439e159 [ 464.366117][T16146] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008040600 [ 464.366130][T16146] RBP: 00007fe4f443506b R08: 0000000000000000 R09: 0000000000000000 [ 464.366142][T16146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 464.366153][T16146] R13: 00007fe4f4626038 R14: 00007fe4f4625fa0 R15: 00007ffed8fdab68 [ 464.366180][T16146] [ 465.084642][ T31] audit: type=1400 audit(1789673952.475:1250): avc: denied { watch_sb } for pid=16166 comm="syz.8.3379" path="/183" dev="tmpfs" ino=971 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 465.260221][T16182] FAULT_INJECTION: forcing a failure. [ 465.260221][T16182] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 465.260256][T16182] CPU: 1 UID: 0 PID: 16182 Comm: syz.0.3386 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 465.260287][T16182] Tainted: [L]=SOFTLOCKUP [ 465.260295][T16182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 465.260307][T16182] Call Trace: [ 465.260315][T16182] [ 465.260325][T16182] dump_stack_lvl+0x100/0x190 [ 465.260360][T16182] should_fail_ex.cold+0x5/0xa [ 465.260383][T16182] ? prepare_alloc_pages+0x16d/0x5b0 [ 465.260409][T16182] should_fail_alloc_page+0xeb/0x140 [ 465.260435][T16182] prepare_alloc_pages+0x1f0/0x5b0 [ 465.260464][T16182] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 465.260498][T16182] ? stack_trace_save+0x8e/0xc0 [ 465.260518][T16182] ? __pfx_stack_trace_save+0x10/0x10 [ 465.260538][T16182] ? stack_depot_save_flags+0x27/0x9f0 [ 465.260564][T16182] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 465.260587][T16182] ? kasan_save_stack+0x3f/0x50 [ 465.260610][T16182] ? kasan_save_stack+0x30/0x50 [ 465.260632][T16182] ? kasan_save_track+0x14/0x30 [ 465.260655][T16182] ? __kasan_kmalloc+0xaa/0xb0 [ 465.260675][T16182] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 465.260703][T16182] ? mon_bin_open+0x1a8/0x470 [ 465.260723][T16182] ? chrdev_open+0x234/0x6a0 [ 465.260747][T16182] ? do_dentry_open+0x6ab/0x14d0 [ 465.260766][T16182] ? vfs_open+0x82/0x3f0 [ 465.260789][T16182] ? path_openat+0x19fa/0x2440 [ 465.260812][T16182] ? do_file_open+0x20e/0x430 [ 465.260835][T16182] ? do_sys_openat2+0x10f/0x1e0 [ 465.260859][T16182] ? __x64_sys_openat+0x12d/0x210 [ 465.260884][T16182] ? do_syscall_64+0x123/0x790 [ 465.260910][T16182] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.260953][T16182] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 465.260979][T16182] ? policy_nodemask+0xed/0x4f0 [ 465.261008][T16182] alloc_pages_mpol+0x201/0x550 [ 465.261038][T16182] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 465.261074][T16182] alloc_pages_noprof+0x1a/0x160 [ 465.261106][T16182] get_zeroed_page_noprof+0x18/0xb0 [ 465.261131][T16182] mon_alloc_buff+0xce/0x1b0 [ 465.261156][T16182] mon_bin_open+0x207/0x470 [ 465.261178][T16182] ? __pfx_mon_bin_open+0x10/0x10 [ 465.261196][T16182] chrdev_open+0x234/0x6a0 [ 465.261217][T16182] ? __pfx_chrdev_open+0x10/0x10 [ 465.261240][T16182] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 465.261273][T16182] do_dentry_open+0x6ab/0x14d0 [ 465.261291][T16182] ? __pfx_chrdev_open+0x10/0x10 [ 465.261318][T16182] vfs_open+0x82/0x3f0 [ 465.261344][T16182] path_openat+0x19fa/0x2440 [ 465.261373][T16182] ? __pfx_path_openat+0x10/0x10 [ 465.261404][T16182] do_file_open+0x20e/0x430 [ 465.261428][T16182] ? __pfx_do_file_open+0x10/0x10 [ 465.261469][T16182] ? _raw_spin_unlock+0x28/0x50 [ 465.261492][T16182] ? alloc_fd+0x471/0x7a0 [ 465.261524][T16182] do_sys_openat2+0x10f/0x1e0 [ 465.261549][T16182] ? __pfx_do_sys_openat2+0x10/0x10 [ 465.261572][T16182] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 465.261603][T16182] __x64_sys_openat+0x12d/0x210 [ 465.261631][T16182] ? __pfx___x64_sys_openat+0x10/0x10 [ 465.261669][T16182] do_syscall_64+0x123/0x790 [ 465.261699][T16182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.261718][T16182] RIP: 0033:0x7fe4f435e98e [ 465.261735][T16182] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 465.261753][T16182] RSP: 002b:00007fe4f25f5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 465.261773][T16182] RAX: ffffffffffffffda RBX: 00007fe4f25f66c0 RCX: 00007fe4f435e98e [ 465.261786][T16182] RDX: 0000000000000000 RSI: 00007fe4f25f5c00 RDI: ffffffffffffff9c [ 465.261798][T16182] RBP: 00007fe4f25f5c00 R08: 0000000000000000 R09: 0000000000000000 [ 465.261810][T16182] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 465.261821][T16182] R13: 00007fe4f4626038 R14: 00007fe4f4625fa0 R15: 00007ffed8fdab68 [ 465.261847][T16182] [ 465.902733][ T189] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 466.067938][ T189] usb 1-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 466.083793][ T189] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 466.083837][ T189] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.316566][ T189] qmi_wwan 1-1:1.0: cdc-wdm0: USB WDM device [ 466.374093][ T189] wwan wwan0: port wwan0qmi0 attached [ 466.555523][ T189] qmi_wwan 1-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.0-1, WWAN/QMI device, 3e:fb:75:4c:26:f1 [ 466.774950][ T5696] usb 1-1: USB disconnect, device number 32 [ 466.780913][ T5696] qmi_wwan 1-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.0-1, WWAN/QMI device [ 466.798930][ T31] audit: type=1800 audit(1789673954.175:1251): pid=16218 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.8.3401" name="/0//deleted" dev="devpts" ino=3 res=0 errno=0 [ 466.865449][ T5696] wwan wwan0: port wwan0qmi0 disconnected [ 467.024785][T16228] netlink: 6 bytes leftover after parsing attributes in process `syz.9.3414'. [ 467.072626][T16232] FAULT_INJECTION: forcing a failure. [ 467.072626][T16232] name failslab, interval 1, probability 0, space 0, times 0 [ 467.072662][T16232] CPU: 0 UID: 0 PID: 16232 Comm: syz.7.3406 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 467.072692][T16232] Tainted: [L]=SOFTLOCKUP [ 467.072700][T16232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 467.072712][T16232] Call Trace: [ 467.072720][T16232] [ 467.072729][T16232] dump_stack_lvl+0x100/0x190 [ 467.072765][T16232] should_fail_ex.cold+0x5/0xa [ 467.072793][T16232] should_failslab+0xc2/0x120 [ 467.072821][T16232] __kmalloc_cache_noprof+0x91/0x6d0 [ 467.072850][T16232] ? __might_fault+0xc5/0x140 [ 467.072878][T16232] ? do_signalfd4+0x14e/0x480 [ 467.072902][T16232] do_signalfd4+0x14e/0x480 [ 467.072923][T16232] __x64_sys_signalfd+0x120/0x1a0 [ 467.072944][T16232] ? __pfx___x64_sys_signalfd+0x10/0x10 [ 467.072974][T16232] do_syscall_64+0x123/0x790 [ 467.073005][T16232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.073027][T16232] RIP: 0033:0x7fb22699e159 [ 467.073044][T16232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 467.073064][T16232] RSP: 002b:00007fb22792f028 EFLAGS: 00000246 ORIG_RAX: 000000000000011a [ 467.073086][T16232] RAX: ffffffffffffffda RBX: 00007fb226c25fa0 RCX: 00007fb22699e159 [ 467.073099][T16232] RDX: 0000000000000008 RSI: 00002000000002c0 RDI: ffffffffffffffff [ 467.073112][T16232] RBP: 00007fb226a3506b R08: 0000000000000000 R09: 0000000000000000 [ 467.073124][T16232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 467.073136][T16232] R13: 00007fb226c26038 R14: 00007fb226c25fa0 R15: 00007ffc58ce8d18 [ 467.073163][T16232] [ 467.343119][T16248] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3410'. [ 467.343154][T16248] netlink: 'syz.7.3410': attribute type 19 has an invalid length. [ 467.343167][T16248] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3410'. [ 467.350169][T16248] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3410'. [ 467.350200][T16248] netlink: 'syz.7.3410': attribute type 19 has an invalid length. [ 467.350214][T16248] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3410'. [ 467.501424][ T43] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.502088][ T43] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.502121][ T43] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.502152][ T43] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.655234][ T31] audit: type=1400 audit(1789673955.045:1252): avc: denied { write } for pid=16226 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 467.756775][T16255] dummy0: Caught tx_queue_len zero misconfig [ 467.776936][ T31] audit: type=1400 audit(1789673955.165:1253): avc: denied { write } for pid=16263 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 467.796428][T16265] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 468.090732][T16278] nbd2: detected capacity change from 0 to 63 [ 468.124140][ T5615] block nbd2: Receive control failed (result -32) [ 468.132431][ T2771] block nbd2: Dead connection, failed to find a fallback [ 468.132451][ T2771] block nbd2: shutting down sockets [ 468.132464][ T2771] blk_print_req_error: 271 callbacks suppressed [ 468.132474][ T2771] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 468.132496][ T2771] buffer_io_error: 478 callbacks suppressed [ 468.132505][ T2771] Buffer I/O error on dev nbd2, logical block 0, async page read [ 468.132520][ T2771] Buffer I/O error on dev nbd2, logical block 1, async page read [ 468.132532][ T2771] Buffer I/O error on dev nbd2, logical block 2, async page read [ 468.132544][ T2771] Buffer I/O error on dev nbd2, logical block 3, async page read [ 468.147962][ T2771] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 468.147991][ T2771] Buffer I/O error on dev nbd2, logical block 0, async page read [ 468.148005][ T2771] Buffer I/O error on dev nbd2, logical block 1, async page read [ 468.148028][ T2771] Buffer I/O error on dev nbd2, logical block 2, async page read [ 468.148041][ T2771] Buffer I/O error on dev nbd2, logical block 3, async page read [ 468.148156][ T2771] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 468.148175][ T2771] Buffer I/O error on dev nbd2, logical block 0, async page read [ 468.148187][ T2771] Buffer I/O error on dev nbd2, logical block 1, async page read [ 468.148283][ T2771] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 468.148393][ T2771] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 468.148903][ T2771] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 468.150580][ T2771] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 468.150694][ T2771] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 468.152128][ T5622] ldm_validate_partition_table(): Disk read failed. [ 468.152242][ T2771] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 468.153730][ T2771] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 468.153965][ T5622] Dev nbd2: unable to read RDB block 0 [ 468.155903][ T5622] nbd2: unable to read partition table [ 468.183122][ T5622] ldm_validate_partition_table(): Disk read failed. [ 468.185878][ T5622] Dev nbd2: unable to read RDB block 0 [ 468.189804][ T5622] nbd2: unable to read partition table [ 468.419429][T16292] FAULT_INJECTION: forcing a failure. [ 468.419429][T16292] name failslab, interval 1, probability 0, space 0, times 0 [ 468.419465][T16292] CPU: 0 UID: 0 PID: 16292 Comm: syz.8.3423 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 468.419494][T16292] Tainted: [L]=SOFTLOCKUP [ 468.419502][T16292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 468.419514][T16292] Call Trace: [ 468.419520][T16292] [ 468.419528][T16292] dump_stack_lvl+0x100/0x190 [ 468.419561][T16292] should_fail_ex.cold+0x5/0xa [ 468.419589][T16292] should_failslab+0xc2/0x120 [ 468.419614][T16292] __kvmalloc_node_noprof+0x113/0x9b0 [ 468.419636][T16292] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 468.419665][T16292] ? do_raw_spin_lock+0x128/0x260 [ 468.419690][T16292] ? alloc_fdtable+0x110/0x2d0 [ 468.419717][T16292] alloc_fdtable+0x110/0x2d0 [ 468.419742][T16292] dup_fd+0x995/0xd10 [ 468.419779][T16292] __x64_sys_close_range+0x405/0x5d0 [ 468.419808][T16292] ? __pfx___x64_sys_close_range+0x10/0x10 [ 468.419843][T16292] do_syscall_64+0x123/0x790 [ 468.419872][T16292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.419892][T16292] RIP: 0033:0x7fc72d19e159 [ 468.419908][T16292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 468.419929][T16292] RSP: 002b:00007fc72df8e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 468.419950][T16292] RAX: ffffffffffffffda RBX: 00007fc72d425fa0 RCX: 00007fc72d19e159 [ 468.419964][T16292] RDX: 0000000000000002 RSI: ffffffffffffffff RDI: ffffffffffffffff [ 468.419977][T16292] RBP: 00007fc72d23506b R08: 0000000000000000 R09: 0000000000000000 [ 468.419990][T16292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 468.420002][T16292] R13: 00007fc72d426038 R14: 00007fc72d425fa0 R15: 00007ffef2a13e38 [ 468.420029][T16292] [ 468.436779][T16293] FAULT_INJECTION: forcing a failure. [ 468.436779][T16293] name failslab, interval 1, probability 0, space 0, times 0 [ 468.436812][T16293] CPU: 0 UID: 0 PID: 16293 Comm: syz.9.3424 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 468.436838][T16293] Tainted: [L]=SOFTLOCKUP [ 468.436845][T16293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 468.436857][T16293] Call Trace: [ 468.436865][T16293] [ 468.436872][T16293] dump_stack_lvl+0x100/0x190 [ 468.436901][T16293] should_fail_ex.cold+0x5/0xa [ 468.436926][T16293] should_failslab+0xc2/0x120 [ 468.436951][T16293] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 468.436975][T16293] ? setup_ipc_sysctls+0x5e/0x300 [ 468.437003][T16293] kmemdup_noprof+0x29/0x60 [ 468.437033][T16293] setup_ipc_sysctls+0x5e/0x300 [ 468.437061][T16293] copy_ipcs+0x57a/0x7e0 [ 468.437080][T16293] create_new_namespaces+0x20a/0xac0 [ 468.437101][T16293] ? security_capable+0x80/0x260 [ 468.437129][T16293] unshare_nsproxy_namespaces+0xf2/0x220 [ 468.437151][T16293] ksys_unshare+0x4a2/0xa70 [ 468.437173][T16293] ? __pfx_ksys_unshare+0x10/0x10 [ 468.437202][T16293] __x64_sys_unshare+0x31/0x40 [ 468.437222][T16293] do_syscall_64+0x123/0x790 [ 468.437248][T16293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.437266][T16293] RIP: 0033:0x7fb28339e159 [ 468.437281][T16293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 468.437297][T16293] RSP: 002b:00007fb284295028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 468.437316][T16293] RAX: ffffffffffffffda RBX: 00007fb283625fa0 RCX: 00007fb28339e159 [ 468.437328][T16293] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008040600 [ 468.437339][T16293] RBP: 00007fb28343506b R08: 0000000000000000 R09: 0000000000000000 [ 468.437350][T16293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 468.437360][T16293] R13: 00007fb283626038 R14: 00007fb283625fa0 R15: 00007ffc3e03c388 [ 468.437390][T16293] [ 468.720178][T16300] Invalid argument reading file caps for ./file0 [ 468.879106][ T31] audit: type=1400 audit(1789673956.265:1254): avc: denied { write } for pid=16272 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 468.897763][T16302] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3426'. [ 468.897795][T16302] netlink: 'syz.9.3426': attribute type 22 has an invalid length. [ 468.897808][T16302] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3426'. [ 468.926113][T16302] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3426'. [ 468.926143][T16302] netlink: 'syz.9.3426': attribute type 22 has an invalid length. [ 468.926155][T16302] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3426'. [ 468.941354][T16078] netdevsim netdevsim9 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 468.941992][T16078] netdevsim netdevsim9 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 468.942021][T16078] netdevsim netdevsim9 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 468.942048][T16078] netdevsim netdevsim9 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 469.134275][ T32] INFO: task syz.1.2407:12639 blocked for more than 143 seconds. [ 469.134300][ T32] Tainted: G L syzkaller #0 [ 469.134311][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 469.134318][ T32] task:syz.1.2407 state:D stack:27944 pid:12639 tgid:1 ** replaying previous printk message ** [ 469.134318][ T32] task:syz.1.2407 state:D stack:27944 pid:12639 tgid:12634 ppid:5610 task_flags:0x400040 flags:0x00080002 [ 469.134378][ T32] Call Trace: [ 469.134386][ T32] [ 469.134397][ T32] __schedule+0x1259/0x6920 [ 469.134424][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 469.134451][ T32] ? do_raw_spin_lock+0x128/0x260 [ 469.134478][ T32] ? lock_acquire+0x1d1/0x380 [ 469.134499][ T32] ? __pfx___schedule+0x10/0x10 [ 469.134520][ T32] ? find_held_lock+0x2b/0x80 [ 469.134545][ T32] ? schedule+0x225/0x2c0 [ 469.134572][ T32] schedule+0xdd/0x2c0 [ 469.134595][ T32] schedule_preempt_disabled+0x13/0x30 [ 469.134618][ T32] __mutex_lock+0xccb/0x1bd0 [ 469.134643][ T32] ? write_threads+0x288/0x600 [ 469.134674][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 469.134701][ T32] ? simple_strntoull+0xdf/0x170 [ 469.134723][ T32] ? net_generic+0x25/0x2a0 [ 469.134747][ T32] ? net_generic+0xea/0x2a0 [ 469.134769][ T32] ? net_generic+0xea/0x2a0 [ 469.134798][ T32] ? write_threads+0x288/0x600 [ 469.134827][ T32] write_threads+0x288/0x600 [ 469.134853][ T32] ? __pfx_write_threads+0x10/0x10 [ 469.134877][ T32] ? __might_fault+0xc5/0x140 [ 469.134907][ T32] ? __might_fault+0xc5/0x140 [ 469.134942][ T32] ? _copy_from_user+0x59/0xd0 [ 469.134964][ T32] ? __pfx_write_threads+0x10/0x10 [ 469.134997][ T32] nfsctl_transaction_write+0x106/0x1a0 [ 469.135022][ T32] vfs_write+0x2aa/0x1050 [ 469.135043][ T32] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 469.135066][ T32] ? lock_acquire+0x1d1/0x380 [ 469.135085][ T32] ? __fget_files+0x34/0x3d0 [ 469.135108][ T32] ? __pfx_vfs_write+0x10/0x10 [ 469.135131][ T32] ? find_held_lock+0x2b/0x80 [ 469.135157][ T32] ? __fget_files+0x215/0x3d0 [ 469.135184][ T32] ? __fget_files+0x21f/0x3d0 [ 469.135233][ T32] ksys_write+0x12a/0x250 [ 469.135253][ T32] ? __pfx_ksys_write+0x10/0x10 [ 469.135281][ T32] do_syscall_64+0x123/0x790 [ 469.135309][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.135325][ T32] RIP: 0033:0x7f470839e159 [ 469.135338][ T32] RSP: 002b:00007f4709265028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 469.135362][ T32] RAX: ffffffffffffffda RBX: 00007f4708626090 RCX: 00007f470839e159 [ 469.135375][ T32] RDX: 0000000000000002 RSI: 0000200000000580 RDI: 0000000000000004 [ 469.135386][ T32] RBP: 00007f470843506b R08: 0000000000000000 R09: 0000000000000000 [ 469.135398][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 469.135410][ T32] R13: 00007f4708626128 R14: 00007f4708626090 R15: 00007ffc696c57a8 [ 469.135443][ T32] [ 469.135507][ T32] [ 469.135507][ T32] Showing all locks held in the system: [ 469.135518][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 469.135531][ T32] #0: ffffffff8edec4a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 469.135614][ T32] locks held by kworker/0:9/5718: 3, on CPU#0: [ 469.135627][ T32] #0: ffff88801c05b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 469.135680][ T32] #1: ffffc90004a57d08 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 469.147008][ T32] #2: ffffffff8ec8fda8 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_lock_wait+0xc6/0x1a0 [ 469.147057][ T32] locks held by syz.1.2407/12636: 3, on CPU#0: [ 469.147069][ T32] #0: ffff88807d2d6630 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 469.147113][ T32] #1: ffff88807c9a0460 (sb_writers#24){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 469.147166][ T32] #2: ffffffff8f289500 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 469.147210][ T32] locks held by syz.1.2407/12639: 3, on CPU#1: [ 469.147222][ T32] #0: ffff888086d3c630 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 469.147264][ T32] #1: ffff88807c9a0460 (sb_writers#24){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 469.147305][ T32] #2: ffffffff8f289500 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x288/0x600 [ 469.147349][ T32] locks held by syz-executor/12930: 4, last CPU#0: [ 469.147361][ T32] #0: ffffffff8ef3d970 (dup_mmap_sem){++++}-{0:0}, at: copy_process+0x4806/0x8370 [ 469.147402][ T32] #1: ffff88807ca8c378 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x127/0x2370 [ 469.147443][ T32] #2: ffff88802dcfd038 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x1c9/0x2370 [ 469.147487][ T32] #3: ffffffff8edec4a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 469.147539][ T32] locks held by kworker/1:6/13155: 5, on CPU#1: [ 469.147551][ T32] #0: ffff8880212bdd40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 469.147597][ T32] #1: ffffc900053cfd08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 469.147643][ T32] #2: ffff88802ae881d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420 [ 469.147687][ T32] #3: ffff888035f401d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0x10a/0x9a0 [ 469.147751][ T32] #4: ffff8880357811a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620 [ 469.147797][ T32] locks held by syz-executor/13948: 3, last CPU#0: [ 469.147808][ T32] #0: ffffffff8ef3d970 (dup_mmap_sem){++++}-{0:0}, at: copy_process+0x4806/0x8370 [ 469.147853][ T32] #1: ffff888074ca1078 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x127/0x2370 [ 469.147893][ T32] #2: ffff8880756a5cf8 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x1c9/0x2370 [ 469.147949][ T32] locks held by rm/16308: 1, last CPU#0: [ 469.147960][ T32] #0: ffff88803fedf678 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1f5/0x470 [ 469.148000][ T32] locks held by syz-executor/16310: 1, last CPU#0: [ 469.148012][ T32] #0: ffffffff8edec4a0 (rcu_read_lock){....}-{1:3}, at: path_init+0xac1/0x1ab0 [ 469.148050][ T32] [ 469.148055][ T32] ============================================= [ 469.148055][ T32] [ 469.148062][ T32] NMI backtrace for cpu 0 [ 469.148075][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(lazy) [ 469.148097][ T32] Tainted: [L]=SOFTLOCKUP [ 469.148103][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 469.148113][ T32] Call Trace: [ 469.148119][ T32] [ 469.148125][ T32] dump_stack_lvl+0x100/0x190 [ 469.148151][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 469.148176][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 469.148196][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 469.148218][ T32] sys_info+0x141/0x190 [ 469.148234][ T32] watchdog+0xcb1/0x1030 [ 469.148258][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 469.148279][ T32] ? __pfx_watchdog+0x10/0x10 [ 469.148299][ T32] ? __kthread_parkme+0x18f/0x230 [ 469.148321][ T32] ? kthread+0x13a/0x450 [ 469.148342][ T32] ? __pfx_watchdog+0x10/0x10 [ 469.148360][ T32] kthread+0x373/0x450 [ 469.148381][ T32] ? __pfx_kthread+0x10/0x10 [ 469.148405][ T32] ret_from_fork+0x730/0xd60 [ 469.148425][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 469.148444][ T32] ? __switch_to+0x800/0x10f0 [ 469.148471][ T32] ? __pfx_kthread+0x10/0x10 [ 469.148494][ T32] ret_from_fork_asm+0x1a/0x30 [ 469.148522][ T32] [ 469.148538][ T32] Sending NMI from CPU 0 to CPUs 1: [ 469.148560][ C1] NMI backtrace for cpu 1 [ 469.148573][ C1] CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 469.148593][ C1] Tainted: [L]=SOFTLOCKUP [ 469.148599][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 469.148608][ C1] RIP: 0010:io_serial_in+0x87/0xb0 [ 469.148626][ C1] Code: 48 5b fc 48 8d 7d 40 44 89 e1 48 b8 00 00 00 00 00 fc ff df 48 89 fa d3 e3 48 c1 ea 03 80 3c 02 00 75 1a 66 03 5d 40 89 da ec <5b> 0f b6 c0 5d 41 5c c3 cc cc cc cc e8 48 8b ce fc eb a2 e8 d1 8b [ 469.148639][ C1] RSP: 0018:ffffc90000157958 EFLAGS: 00000002 [ 469.148651][ C1] RAX: dffffc0000000000 RBX: 00000000000003fd RCX: 0000000000000000 [ 469.148660][ C1] RDX: 00000000000003fd RSI: ffffffff85b0d710 RDI: ffffffff9bc6bca0 [ 469.148670][ C1] RBP: ffffffff9bc6bc60 R08: 0000000000000001 R09: 000000000000001f [ 469.148679][ C1] R10: 0000000000000000 R11: 205d323354202020 R12: 0000000000000000 [ 469.148689][ C1] R13: 0000000000000020 R14: fffffbfff378d7e9 R15: dffffc0000000000 [ 469.148699][ C1] FS: 0000000000000000(0000) GS:ffff888123c59000(0000) knlGS:0000000000000000 [ 469.148715][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 469.148725][ C1] CR2: 00007ff27e370eb8 CR3: 0000000037e52000 CR4: 00000000003526f0 [ 469.148734][ C1] DR0: 0000000000005000 DR1: 0000000000000000 DR2: 0000000000000000 [ 469.148744][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 469.148753][ C1] Call Trace: [ 469.148758][ C1] [ 469.148765][ C1] wait_for_lsr+0x13a/0x210 [ 469.148784][ C1] serial8250_fifo_wait_for_lsr_thre+0x5f/0xd0 [ 469.148802][ C1] __serial8250_console_fifo_write+0xa5/0x290 [ 469.148819][ C1] ? __pfx_io_serial_out+0x10/0x10 [ 469.148836][ C1] serial8250_console_write+0xf46/0x1330 [ 469.148857][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 469.148877][ C1] ? __nbcon_context_update_unsafe+0x1b6/0x220 [ 469.148900][ C1] ? __pfx___nbcon_context_update_unsafe+0x10/0x10 [ 469.148924][ C1] nbcon_emit_next_record+0x8f7/0xa70 [ 469.148940][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 469.148955][ C1] ? nbcon_context_try_acquire+0x3a6/0xc60 [ 469.148975][ C1] ? do_raw_spin_lock+0x70/0x260 [ 469.148997][ C1] ? __pfx___cant_migrate+0x10/0x10 [ 469.149015][ C1] ? _raw_spin_lock_irqsave+0x42/0x60 [ 469.149033][ C1] nbcon_emit_one+0x1a8/0x2b0 [ 469.149046][ C1] ? __pfx_nbcon_emit_one+0x10/0x10 [ 469.149062][ C1] nbcon_kthread_func+0x613/0x7d0 [ 469.149078][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 469.149094][ C1] ? __kthread_parkme+0x18f/0x230 [ 469.149111][ C1] ? kthread+0x13a/0x450 [ 469.149128][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 469.149142][ C1] kthread+0x373/0x450 [ 469.149160][ C1] ? __pfx_kthread+0x10/0x10 [ 469.149178][ C1] ret_from_fork+0x730/0xd60 [ 469.149193][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 469.149209][ C1] ? __switch_to+0x800/0x10f0 [ 469.149227][ C1] ? __pfx_kthread+0x10/0x10 [ 469.149246][ C1] ret_from_fork_asm+0x1a/0x30 [ 469.149266][ C1] [ 469.168335][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 470.151595][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(lazy) [ 470.162265][ T32] Tainted: [L]=SOFTLOCKUP [ 470.166582][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 470.176629][ T32] Call Trace: [ 470.179900][ T32] [ 470.182821][ T32] dump_stack_lvl+0x100/0x190 [ 470.187508][ T32] vpanic+0x553/0x970 [ 470.191483][ T32] ? __pfx_vpanic+0x10/0x10 [ 470.195985][ T32] panic+0xd1/0xe0 [ 470.199695][ T32] ? __pfx_panic+0x10/0x10 [ 470.204107][ T32] ? nmi_trigger_cpumask_backtrace+0x263/0x2a0 [ 470.210254][ T32] ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0 [ 470.216401][ T32] ? watchdog.cold+0x1ec/0x234 [ 470.221160][ T32] watchdog.cold+0x1fd/0x234 [ 470.225753][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 470.231564][ T32] ? __pfx_watchdog+0x10/0x10 [ 470.236238][ T32] ? __kthread_parkme+0x18f/0x230 [ 470.241260][ T32] ? kthread+0x13a/0x450 [ 470.245502][ T32] ? __pfx_watchdog+0x10/0x10 [ 470.250170][ T32] kthread+0x373/0x450 [ 470.254236][ T32] ? __pfx_kthread+0x10/0x10 [ 470.258823][ T32] ret_from_fork+0x730/0xd60 [ 470.263415][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 470.268522][ T32] ? __switch_to+0x800/0x10f0 [ 470.273197][ T32] ? __pfx_kthread+0x10/0x10 [ 470.277787][ T32] ret_from_fork_asm+0x1a/0x30 [ 470.282555][ T32] [ 470.285764][ T32] Kernel Offset: disabled [ 470.290064][ T32] Rebooting in 86400 seconds..