last executing test programs: 5m4.913057061s ago: executing program 32 (id=347): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r1, 0x1, &(0x7f0000000640)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfff, r0, &(0x7f0000000080)="42f2", 0x2, 0x4}]) r2 = landlock_create_ruleset(&(0x7f0000000080)={0xc0da, 0x5, 0x3, 0x0, 0x1}, 0x30, 0x0) landlock_restrict_self(r2, 0xf) 4m31.315937906s ago: executing program 33 (id=539): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x2c, 0x80000000, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5f431bcc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffee4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000700850000002d"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 4m13.36920213s ago: executing program 34 (id=920): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x8, 0xc, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000d, 0x12, r1, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x23}, 0x38) 3m28.144981113s ago: executing program 2 (id=1448): r0 = syz_usb_connect$midi(0x5, 0x31, &(0x7f0000000200)=ANY=[@ANYBLOB="12010003000000089c24069040000102030109021f0001011410450904000001f702000909050202"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ecm(0x3, 0x4d, &(0x7f00000007c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0xa, 0x70, 0x4, "", [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0xfe, {{0x5}, {0x5, 0x24, 0x0, 0x6b}, {0xd, 0x24, 0xf, 0x1, 0x1ff, 0x1, 0x0, 0x1}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x1, 0x9, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x80, 0x7, 0x6}}}}}]}}]}}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000001300)={0x14, 0x0, &(0x7f00000012c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 3m25.306331689s ago: executing program 2 (id=1485): r0 = syz_open_dev$vim2m(&(0x7f0000001880), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000001c0)=@mmap={0x0, 0x1, 0x4, 0x20, 0x0, {0x77359400}, {0x4, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x291d}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000100)=0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 3m24.975602383s ago: executing program 2 (id=1492): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0xd4b, 0x1800005, 0x81, 0x7fffffff, 0xfff8, 0x0, 0x10000, 0x0, 0x4bfb, 0x4, 0x200000000042, 0x20000000000004, 0x3, 0x5, 0x9, 0x100000090], 0x0, 0x108e55}) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r0, 0x5, 0x4) 3m24.800676751s ago: executing program 2 (id=1493): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="410301b9"], 0x4) 3m24.42080036s ago: executing program 2 (id=1499): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./myconfig/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0xe8202, 0x1c3) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) 3m24.260455342s ago: executing program 2 (id=1501): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) sync() 3m22.667194915s ago: executing program 4 (id=1525): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000440)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/kernel/mm/transparent_hugepage/enabled\x00', 0x2, 0x0) write(r0, &(0x7f00000004c0)='always\n\x00', 0x7) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x19) 3m22.569430188s ago: executing program 4 (id=1526): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be", 0x9}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x34000}], 0x1}, 0x0) 3m22.491436376s ago: executing program 7 (id=1528): r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x6, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x0, 0x10001, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xba}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5c0, 0x0, 0x0}}, 0x0) write$uinput_user_dev(r6, &(0x7f0000000100)={'syz1\x00', {0xfff3, 0x3f8, 0x7, 0xf001}, 0x4e, [0x100, 0xffffff5a, 0x7, 0x4, 0x1ff, 0x8cf, 0x2, 0x8, 0x7701, 0xfffffff7, 0x3a, 0x0, 0x4, 0xffffffc0, 0x1000, 0xbaf, 0x10001, 0x4, 0x0, 0xff, 0x101, 0x8, 0x2, 0x47, 0x100, 0x100, 0x3, 0x5, 0x4, 0x80, 0x7fff, 0x3, 0x4, 0x4e, 0x16, 0x29, 0x10000, 0x4, 0x7fff, 0x8, 0x0, 0xd644, 0xfffffffe, 0x0, 0x0, 0x1, 0x7, 0xca86, 0x7, 0x9, 0x6, 0x5, 0x1, 0x7, 0x4, 0xfffffffd, 0x80000001, 0x8000, 0xf03b, 0x5, 0x3, 0xfffff001, 0x5000, 0x9], [0x1, 0x6, 0x3, 0xffffcb85, 0x3, 0x14178b7b, 0x6, 0x1, 0x3, 0x0, 0x9, 0x80, 0x7, 0x8, 0x8, 0x7, 0x8001, 0x1000, 0x7fffffff, 0xfffffff3, 0x31c, 0x5, 0x0, 0x4, 0x1, 0x2, 0xffff8001, 0x8, 0x9, 0xb2c, 0x3, 0x2, 0x3, 0x1, 0x1, 0xfffffff1, 0x3, 0x8, 0x8, 0x8, 0x6, 0x101, 0xffff, 0x0, 0x100, 0x10, 0x5, 0x9, 0xbf23, 0x10000000, 0x1, 0x1c000000, 0x7ff, 0x6, 0x8001, 0x6, 0x6, 0x1000, 0xe, 0x7, 0x8, 0x3, 0x9], [0x8, 0x5, 0x2, 0x8, 0x5, 0x8, 0x3, 0x1, 0x10, 0x2, 0xf, 0x2, 0x0, 0x3, 0x7f, 0x200, 0x9479, 0x7, 0x40, 0x3, 0xfffffff2, 0x6e, 0x9, 0x5, 0x7, 0x9e, 0x5, 0x5, 0x7, 0x7, 0xdda9, 0x4, 0x8, 0x4, 0x9, 0x0, 0x3, 0xfffffff9, 0x81, 0xffff7fff, 0x100, 0x40, 0x401, 0xd1e4, 0x9, 0x8, 0x8, 0x1, 0xc0000000, 0xfffffff9, 0x8, 0x80000001, 0x6, 0x0, 0xfffff000, 0x6, 0x5, 0x8, 0x175, 0x6, 0x2, 0x8, 0x1, 0x1000], [0xfb, 0x4, 0x3, 0x5, 0x7fffffff, 0xf0, 0x7, 0x9, 0xa1, 0x7f, 0xff, 0x2, 0x1, 0x6, 0x1, 0x100, 0xf42, 0x3, 0x8, 0x4, 0x7, 0x3, 0x1ff, 0x8, 0x5, 0xffff, 0x0, 0x5, 0x602, 0x9, 0x4, 0x101, 0x0, 0x4, 0x0, 0xda2, 0x7, 0xd2ce, 0x4, 0x3, 0x3, 0x8000, 0x8, 0x39, 0x8001, 0x4, 0x6, 0x9, 0xc01, 0xe, 0x1, 0x1, 0x3, 0x27, 0xe, 0x0, 0x7ff, 0x867, 0xfffffff8, 0x80000000, 0x5a, 0xdbdb, 0x9, 0x3]}, 0x45c) 3m22.490846346s ago: executing program 4 (id=1529): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x59, 0x88, 0xfe, 0x0, 0x2a}, 0xe) shutdown(r0, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x2e, &(0x7f0000000000)=0x21ea, 0x4) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}, 0x2100}], 0x414, 0x406, 0x0) 3m22.32295198s ago: executing program 4 (id=1531): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f0000000300)='./file0/../file0\x00') 3m22.265009604s ago: executing program 7 (id=1532): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r4 = getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x2c, r2, 0x411, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2040}, 0x40000) 3m22.16492027s ago: executing program 4 (id=1534): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) ptrace(0x10, r0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x241, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) ptrace$getregset(0x4205, r0, 0x200, &(0x7f0000000000)={0x0}) 3m21.885626172s ago: executing program 7 (id=1537): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44004) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000140)={@val={0x800e, 0x8848}, @void, @eth={@broadcast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}}, 0x2e) 3m21.756948779s ago: executing program 4 (id=1540): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='lp', 0x2) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 3m21.61865759s ago: executing program 35 (id=1540): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='lp', 0x2) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 3m21.612623894s ago: executing program 7 (id=1542): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x80000, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00') 3m21.480622698s ago: executing program 7 (id=1544): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x44) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="800000001000390400000000fbdbdf2500000000", @ANYRES32=r2, @ANYBLOB="01990000419a0400600012800b000100697036746e6c000050000280060010000200000014000300fe80"], 0x80}}, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f", 0x6, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14) 3m21.06050447s ago: executing program 7 (id=1545): r0 = fsopen(&(0x7f0000000100)='debugfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f00000000c0)='.\x00', 0x101000, 0x190) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 3m20.805639185s ago: executing program 36 (id=1545): r0 = fsopen(&(0x7f0000000100)='debugfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f00000000c0)='.\x00', 0x101000, 0x190) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 3m9.252167315s ago: executing program 37 (id=1501): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) sync() 2m56.252953953s ago: executing program 9 (id=1764): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0x2) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000840)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m55.946851755s ago: executing program 9 (id=1767): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 2m55.038370066s ago: executing program 9 (id=1780): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 2m54.791624561s ago: executing program 9 (id=1783): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) 2m54.552116664s ago: executing program 9 (id=1787): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) shutdown(0xffffffffffffffff, 0x1) mlockall(0x0) 2m54.066242873s ago: executing program 9 (id=1795): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mkdir(&(0x7f0000000000)='proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x81, 0xffffffff, 0x3ffc}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc/kallsyms\x00', 0x0, 0x0) lseek(r0, 0x186a0, 0x0) 2m53.670601142s ago: executing program 38 (id=1795): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mkdir(&(0x7f0000000000)='proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x81, 0xffffffff, 0x3ffc}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc/kallsyms\x00', 0x0, 0x0) lseek(r0, 0x186a0, 0x0) 2m1.66497698s ago: executing program 0 (id=2307): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x0, 0xe, 0x0, &(0x7f0000000600)='\x00'/14, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m0.672625998s ago: executing program 0 (id=2311): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000808, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback, 0xdbb}, 0x1c) r1 = syz_io_uring_setup(0xf03, &(0x7f0000000280)={0x0, 0x79fb, 0x40000, 0x0, 0x51}, &(0x7f0000000140)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000540)=@IORING_OP_SENDMSG_ZC={0x30, 0x0, 0x28, r0, 0x0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000480)='m', 0xa84e5475952f9a3}], 0x1}, 0x40001002, 0x40c1, 0x1, {0x1}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 2m0.088994951s ago: executing program 0 (id=2321): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000140)='cgroup.max.descendants\x00', 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0x12) sendfile(r3, r2, 0x0, 0x4) 2m0.002939927s ago: executing program 0 (id=2324): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./debug\x00') pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='./file0/../file0/../file0/../file0\x00') 1m59.929168297s ago: executing program 0 (id=2325): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, r0, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)) pread64(r1, &(0x7f0000000340)=""/155, 0x9b, 0x5) 1m59.633224719s ago: executing program 0 (id=2331): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x1, 0xffffffffffffffff, 0xfff}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f00000001c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8fffdffb702000008000000b7030000000000008500000008000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdbc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000008000000000000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000700850000002d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) 1m59.489508658s ago: executing program 39 (id=2331): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x1, 0xffffffffffffffff, 0xfff}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f00000001c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8fffdffb702000008000000b7030000000000008500000008000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdbc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000008000000000000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000700850000002d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) 12.483996564s ago: executing program 3 (id=3491): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10.835080221s ago: executing program 3 (id=3496): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x8, 0x10208, 0x83, 0xffff, 0x4, 0xabe6, 0x0, 0x0, 0x8, 0x8001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006340)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) creat(&(0x7f0000000140)='./file0\x00', 0x34) 7.642998865s ago: executing program 3 (id=3521): mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x11}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 7.388725715s ago: executing program 3 (id=3527): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 7.129379616s ago: executing program 3 (id=3530): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x2543, 0x0, 0x0, 0x255}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x27ffffe, 0x4000, 0x100, 0x802d8, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0xfffffffc, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x2, 0x2, 0x367, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0xe, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r4, '\x00', {0x3, 0xe0b, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e"], 0x48) 6.481417419s ago: executing program 3 (id=3539): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0x10}, {}, {0xd, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4041080) 5.907474968s ago: executing program 40 (id=3539): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0x10}, {}, {0xd, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4041080) 4.342747523s ago: executing program 1 (id=3550): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x4048884) ioprio_set$pid(0x2, 0x0, 0x4000) ioprio_get$pid(0x2, 0x0) 4.29653682s ago: executing program 8 (id=3551): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "2e2b5aa4"}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0x8}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) readv(r1, &(0x7f0000000480)=[{&(0x7f0000001580)=""/4091, 0x18}], 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x9) 4.296433547s ago: executing program 5 (id=3559): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc1}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.670144079s ago: executing program 5 (id=3552): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) recvmsg$unix(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="14678e7cfe43f1c263530400a45c3d5f640deb75013b32e70e9f2c826597b80720d420312839de825c89e02798b66e5d0dcbafbe7f8fda6786211ff24dce1793ac714f84e6db0b6fc3654bf67ac230209fdcac1d17acd91f7def2e0c8f261bc3741500b7e2affa5068", 0x69}, {&(0x7f0000002780)="21acaf08334a264ef994c92e7de95d40305bdfc3621e2fe6ff27e203fd7b457202dc0078c6f1", 0x26}], 0x2}, 0x200440c4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000780)=ANY=[], 0x0, 0x1, 0xcf, &(0x7f00000003c0)=""/207, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x4, 0x6, 0xff, 0x42}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r2}, 0x38) 3.669712522s ago: executing program 1 (id=3553): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000006, 0x31, 0xffffffffffffffff, 0x0) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x5) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f00000000c0)={0x1, 0x79e}, 0x8) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) 3.619203764s ago: executing program 6 (id=3554): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x3c, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4894}, 0x2) 3.618735192s ago: executing program 8 (id=3555): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3, 0x3}}, 0x2e) r3 = inotify_init1(0x800) r4 = fcntl$dupfd(r2, 0x406, r3) setsockopt$inet_mtu(r4, 0x111, 0xa, &(0x7f0000000000), 0x4) 2.890122113s ago: executing program 5 (id=3556): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8001}, {0xffff, 0xffff}, {0xb, 0x2}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)=@newtclass={0x38, 0x28, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x8001}, {0x0, 0x8001}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x3e8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f000000b140)=@newtfilter={0x24, 0x2c, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, r3, {0xa}, {0x1, 0x8001}, {0x3, 0x300}}}, 0x24}}, 0x0) 2.889175655s ago: executing program 1 (id=3557): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}], 0x1, 0x10) sendto$inet6(r0, &(0x7f0000000580)="fb6c", 0xc3ff, 0x4008804, 0x0, 0x0) 2.888122232s ago: executing program 6 (id=3558): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4}, &(0x7f00000001c0), &(0x7f0000000280)=r0}, 0x20) 2.88697414s ago: executing program 8 (id=3560): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x3f9) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, 0x0) 2.826473188s ago: executing program 6 (id=3561): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 2.006826459s ago: executing program 5 (id=3562): mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xd3283d036ae269b3, 0x8031, 0xffffffffffffffff, 0x99cf0000) unshare(0x22020600) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) unshare(0x22020600) 2.006213618s ago: executing program 1 (id=3563): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x2004c091) r0 = socket$kcm(0x2, 0x3, 0x2) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000000), 0x4) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8916, &(0x7f0000000040)={'wg2\x00', @random="0200ac7f7f00"}) ioctl$SIOCSIFHWADDR(r0, 0x8916, &(0x7f0000000040)={'veth0_to_bond\x00', @random="0200ac7f7f00"}) 2.004301312s ago: executing program 6 (id=3564): r0 = syz_create_resource$binfmt(&(0x7f00000000c0)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) fcntl$setlease(r1, 0x400, 0x1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x101400, 0x100) creat(&(0x7f0000000280)='./file0\x00', 0x10) open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x38) read$watch_queue(r2, &(0x7f00000001c0)=""/178, 0xb2) 2.00391036s ago: executing program 8 (id=3565): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000003900), 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) close(0x3) openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) write$FUSE_STATX(r0, &(0x7f00000061c0)={0x130, 0xffffffffffffffda, 0x0, {0x4cf, 0xf, 0x0, '\x00', {0x20, 0x80000000, 0x4, 0x1, 0x0, 0x0, 0xa000, '\x00', 0x0, 0xffffffff, 0x3, 0x5, {0xff6c}, {0x3, 0x5}, {0xc, 0xd}, {0x8, 0x9}, 0x6, 0x4, 0x5, 0x2}}}, 0x130) 1.07509206s ago: executing program 5 (id=3566): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="c4e1fc292b64670f0010b9800000c00f3235000100000f300f0fa2faffffff96f2af0fc75abe0fae9e2900000066b832008ec865650f1639ea008800008a00", 0x3f}], 0x1, 0x3f, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.073891031s ago: executing program 1 (id=3567): socket$packet(0x11, 0x2, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'syzkaller0\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) write(r0, &(0x7f0000000700)="ffffffffffff0011223344554305000f32000000000100112233445500112233445500ff0000", 0x26) 1.073287602s ago: executing program 6 (id=3568): rt_sigprocmask(0x0, &(0x7f0000001480)={[0xffffffffffffffff]}, 0x0, 0x8) r0 = getpgrp(0x0) r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x1f, &(0x7f00000003c0)={0x26, 0x1, 0x10004}) r2 = socket$inet(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x40004) rt_tgsigqueueinfo(r0, r1, 0x36, &(0x7f0000000180)={0xa, 0x8, 0x29b}) ppoll(0x0, 0x0, &(0x7f0000002d00), &(0x7f0000002d40)={[0x100000001]}, 0x8) 1.029020555s ago: executing program 8 (id=3569): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1f1) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x0) 3.420133ms ago: executing program 5 (id=3570): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4080000}, 0x80) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000002060108000034e4000000000000000805000400000000000900020073797a3100000000050005000200000016000300686173683a6e65742c706f72742c6e65740000000500010007"], 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r2, &(0x7f000000c1c0)={0x0, 0x0, &(0x7f000000c080)=[{&(0x7f000000acc0)=""/4096, 0x1000}], 0x1}, 0x20) 691.634µs ago: executing program 1 (id=3571): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='0.0.0.0:0:/\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 429.551µs ago: executing program 6 (id=3572): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/arp\x00') preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000240)=""/127, 0x7f}], 0x1, 0x6, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05031614d3fc140000004788031c", 0xe, 0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x5, &(0x7f0000000400)=ANY=[], 0x0}, 0x94) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 0s ago: executing program 8 (id=3573): r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x89) fchdir(r1) r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): t_uevent_env+0x263/0x18b0 [ 329.710698][T14432] kobject_uevent_env+0x263/0x18b0 [ 329.710725][T14432] ? lockdep_init_map_type+0x5c/0x250 [ 329.710752][T14432] swnode_register+0x55d/0x750 [ 329.710778][T14432] fwnode_create_software_node+0x1c8/0x3f0 [ 329.710806][T14432] device_create_managed_software_node+0x103/0x270 [ 329.710831][T14432] iommufd_test+0x3007/0x6600 [ 329.710857][T14432] ? __lock_acquire+0x5c0/0x1f40 [ 329.710878][T14432] ? __lock_acquire+0x5c0/0x1f40 [ 329.710899][T14432] ? __pfx_iommufd_test+0x10/0x10 [ 329.710920][T14432] ? tomoyo_path_number_perm+0x188/0x580 [ 329.710945][T14432] ? lock_acquire+0x1d1/0x380 [ 329.710965][T14432] ? __might_fault+0xc5/0x140 [ 329.710994][T14432] ? find_held_lock+0x2b/0x80 [ 329.711018][T14432] ? __might_fault+0xc5/0x140 [ 329.711064][T14432] iommufd_fops_ioctl+0x358/0x520 [ 329.711090][T14432] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 329.711114][T14432] ? __fget_files+0x34/0x3d0 [ 329.711148][T14432] ? selinux_file_ioctl+0x13b/0x290 [ 329.711169][T14432] ? selinux_file_ioctl+0xb6/0x290 [ 329.711192][T14432] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 329.711218][T14432] __x64_sys_ioctl+0x18e/0x210 [ 329.711241][T14432] do_syscall_64+0x123/0x790 [ 329.711271][T14432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.711291][T14432] RIP: 0033:0x7fd63119e159 [ 329.711308][T14432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.711327][T14432] RSP: 002b:00007fd631fdc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 329.711346][T14432] RAX: ffffffffffffffda RBX: 00007fd631425fa0 RCX: 00007fd63119e159 [ 329.711358][T14432] RDX: 0000200000000600 RSI: 0000000000003ba0 RDI: 0000000000000004 [ 329.711370][T14432] RBP: 00007fd63123506b R08: 0000000000000000 R09: 0000000000000000 [ 329.711381][T14432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 329.711393][T14432] R13: 00007fd631426038 R14: 00007fd631425fa0 R15: 00007ffd52ee23a8 [ 329.711420][T14432] [ 329.792694][T14432] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 330.617387][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 330.617407][ T30] audit: type=1400 audit(1789526382.923:2456): avc: denied { mount } for pid=14443 comm="syz.3.2830" name="/" dev="autofs" ino=48097 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 330.706672][T14440] ftl_cs: FTL header not found. [ 330.866715][T14455] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2833'. [ 331.026415][T14440] block2mtd: mtd1: [/dev/ram0] erase_size = 128KiB [131072] [ 331.211124][T11328] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 331.362746][T11328] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 331.363777][T11328] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 331.376942][T11328] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.376967][T11328] usb 4-1: Product: syz [ 331.376980][T11328] usb 4-1: Manufacturer: syz [ 331.376993][T11328] usb 4-1: SerialNumber: syz [ 331.408520][T11328] usb 4-1: config 0 descriptor?? [ 331.434512][T11328] streamzap 4-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 331.512611][T11335] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 331.619591][T14467] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14467 comm=syz.5.2838 [ 331.725234][T11345] usb 4-1: USB disconnect, device number 20 [ 331.880291][T11335] usb 7-1: unable to get BOS descriptor or descriptor too short [ 331.880333][T11335] usb 7-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 331.881596][T11335] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 331.881629][T11335] usb 7-1: can't read configurations, error -71 [ 332.094143][T14478] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2842'. [ 332.119118][T14481] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2842'. [ 332.126254][ T5602] Bluetooth: hci2: unexpected event for opcode 0x0c6d [ 332.635144][T14493] xt_hashlimit: size too large, truncated to 1048576 [ 332.774164][T14497] FAULT_INJECTION: forcing a failure. [ 332.774164][T14497] name failslab, interval 1, probability 0, space 0, times 0 [ 332.774200][T14497] CPU: 0 UID: 0 PID: 14497 Comm: syz.1.2850 Tainted: G L syzkaller #0 PREEMPT(full) [ 332.774228][T14497] Tainted: [L]=SOFTLOCKUP [ 332.774237][T14497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 332.774249][T14497] Call Trace: [ 332.774256][T14497] [ 332.774264][T14497] dump_stack_lvl+0x100/0x190 [ 332.774297][T14497] should_fail_ex.cold+0x5/0xa [ 332.774326][T14497] should_failslab+0xc2/0x120 [ 332.774350][T14497] __kmalloc_cache_noprof+0x91/0x6d0 [ 332.774376][T14497] ? lockdep_init_map_type+0x5c/0x250 [ 332.774397][T14497] ? qdisc_get_rtab+0x14d/0x810 [ 332.774421][T14497] qdisc_get_rtab+0x14d/0x810 [ 332.774439][T14497] ? tcf_action_check_ctrlact+0x56/0x260 [ 332.774461][T14497] tcf_police_init+0xe5e/0x1690 [ 332.774496][T14497] ? __pfx_tcf_police_init+0x10/0x10 [ 332.774534][T14497] ? tcf_action_init_1+0x2d8/0x6c0 [ 332.774557][T14497] ? __asan_memcpy+0x3c/0x60 [ 332.774578][T14497] tcf_action_init_1+0x466/0x6c0 [ 332.774604][T14497] ? __pfx_tcf_action_init_1+0x10/0x10 [ 332.774626][T14497] ? tc_action_load_ops+0x1f5/0x3e0 [ 332.774671][T14497] ? __nla_parse+0x40/0x60 [ 332.774703][T14497] tcf_action_init+0x43f/0xa60 [ 332.774738][T14497] ? __pfx_tcf_action_init+0x10/0x10 [ 332.774784][T14497] ? __kernel_text_address+0xd/0x30 [ 332.774813][T14497] ? unwind_get_return_address+0x59/0xa0 [ 332.774841][T14497] ? arch_stack_walk+0xa6/0xf0 [ 332.774888][T14497] ? __lock_acquire+0x5c0/0x1f40 [ 332.774912][T14497] tcf_action_add+0xed/0x5c0 [ 332.774940][T14497] ? __pfx_tcf_action_add+0x10/0x10 [ 332.775000][T14497] ? __nla_parse+0x40/0x60 [ 332.775031][T14497] tc_ctl_action+0x2e3/0x470 [ 332.775055][T14497] ? __pfx_tc_ctl_action+0x10/0x10 [ 332.775089][T14497] ? __pfx_tc_ctl_action+0x10/0x10 [ 332.775113][T14497] rtnetlink_rcv_msg+0x3c9/0xe90 [ 332.775140][T14497] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 332.775172][T14497] ? ref_tracker_free+0x37e/0x6c0 [ 332.775200][T14497] netlink_rcv_skb+0x159/0x420 [ 332.775221][T14497] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 332.775247][T14497] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 332.775277][T14497] ? netlink_deliver_tap+0x1ae/0xcc0 [ 332.775302][T14497] netlink_unicast+0x585/0x850 [ 332.775326][T14497] ? __pfx_netlink_unicast+0x10/0x10 [ 332.775354][T14497] netlink_sendmsg+0x8b0/0xda0 [ 332.775378][T14497] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.775402][T14497] ? selinux_socket_sendmsg+0x198/0x2f0 [ 332.775427][T14497] ____sys_sendmsg+0xa4d/0xbe0 [ 332.775453][T14497] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.775476][T14497] ? __pfx_____sys_sendmsg+0x10/0x10 [ 332.775515][T14497] ___sys_sendmsg+0x190/0x1e0 [ 332.775546][T14497] ? __pfx____sys_sendmsg+0x10/0x10 [ 332.775575][T14497] ? futex_wait+0x11e/0x370 [ 332.775602][T14497] ? find_held_lock+0x2b/0x80 [ 332.775651][T14497] __sys_sendmsg+0x160/0x210 [ 332.775676][T14497] ? __pfx___sys_sendmsg+0x10/0x10 [ 332.775715][T14497] do_syscall_64+0x123/0x790 [ 332.775747][T14497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.775766][T14497] RIP: 0033:0x7fd63119e159 [ 332.775784][T14497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 332.775802][T14497] RSP: 002b:00007fd631fdc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 332.775821][T14497] RAX: ffffffffffffffda RBX: 00007fd631425fa0 RCX: 00007fd63119e159 [ 332.775834][T14497] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000005 [ 332.775845][T14497] RBP: 00007fd63123506b R08: 0000000000000000 R09: 0000000000000000 [ 332.775856][T14497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 332.775890][T14497] R13: 00007fd631426038 R14: 00007fd631425fa0 R15: 00007ffd52ee23a8 [ 332.775917][T14497] [ 333.610170][ T30] audit: type=1400 audit(1789526385.913:2457): avc: denied { name_bind } for pid=14525 comm="syz.1.2863" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 333.823970][T14540] FAULT_INJECTION: forcing a failure. [ 333.823970][T14540] name failslab, interval 1, probability 0, space 0, times 0 [ 333.824006][T14540] CPU: 0 UID: 0 PID: 14540 Comm: syz.1.2868 Tainted: G L syzkaller #0 PREEMPT(full) [ 333.824035][T14540] Tainted: [L]=SOFTLOCKUP [ 333.824043][T14540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 333.824055][T14540] Call Trace: [ 333.824062][T14540] [ 333.824070][T14540] dump_stack_lvl+0x100/0x190 [ 333.824103][T14540] should_fail_ex.cold+0x5/0xa [ 333.824131][T14540] should_failslab+0xc2/0x120 [ 333.824155][T14540] __kmalloc_cache_noprof+0x91/0x6d0 [ 333.824184][T14540] ? irqentry_exit+0x24d/0xa10 [ 333.824212][T14540] ? io_uring_alloc_task_context+0xa7/0x656 [ 333.824240][T14540] io_uring_alloc_task_context+0xa7/0x656 [ 333.824264][T14540] ? __pfx_io_uring_alloc_task_context+0x10/0x10 [ 333.824294][T14540] __io_uring_add_tctx_node.cold+0x15/0x20a [ 333.824319][T14540] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 333.824350][T14540] ? __fget_files+0x21f/0x3d0 [ 333.824378][T14540] __io_uring_add_tctx_node_from_submit+0x89/0x130 [ 333.824411][T14540] __do_sys_io_uring_enter+0x1626/0x1b10 [ 333.824438][T14540] ? irqentry_exit+0x24d/0xa10 [ 333.824465][T14540] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 333.824490][T14540] ? __x64_sys_futex+0x34f/0x4d0 [ 333.824516][T14540] ? __x64_sys_futex+0x358/0x4d0 [ 333.824543][T14540] ? xfd_validate_state+0x129/0x190 [ 333.824570][T14540] do_syscall_64+0x123/0x790 [ 333.824593][T14540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.824612][T14540] RIP: 0033:0x7fd63119e159 [ 333.824635][T14540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 333.824654][T14540] RSP: 002b:00007fd631fbb028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 333.824676][T14540] RAX: ffffffffffffffda RBX: 00007fd631426090 RCX: 00007fd63119e159 [ 333.824690][T14540] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000003 [ 333.824701][T14540] RBP: 00007fd63123506b R08: 0000000000000000 R09: 0000000000000000 [ 333.824712][T14540] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 333.824723][T14540] R13: 00007fd631426128 R14: 00007fd631426090 R15: 00007ffd52ee23a8 [ 333.824749][T14540] [ 334.787896][T14550] xt_hashlimit: size too large, truncated to 1048576 [ 334.816432][T14554] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2873'. [ 335.483505][T14586] fuse: fd is not a fuse device [ 335.591613][T11328] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 335.620646][T14594] fuse: fd is not a fuse device [ 335.743547][T11328] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 335.744618][T11328] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.749937][T11328] usb 4-1: config 0 descriptor?? [ 335.757136][T11328] cp210x 4-1:0.0: cp210x converter detected [ 335.994211][T14602] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2890'. [ 336.161788][T11328] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 336.178535][T11328] usb 4-1: cp210x converter now attached to ttyUSB0 [ 336.300642][ T30] audit: type=1400 audit(1789526388.603:2458): avc: denied { mounton } for pid=14611 comm="syz.1.2894" path="/548/dev/mapper/control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 336.368830][T11346] usb 4-1: USB disconnect, device number 21 [ 336.382169][T11346] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 336.412298][T11346] cp210x 4-1:0.0: device disconnected [ 336.702398][T14630] FAULT_INJECTION: forcing a failure. [ 336.702398][T14630] name fail_futex, interval 1, probability 0, space 0, times 0 [ 336.702425][T14630] CPU: 0 UID: 0 PID: 14630 Comm: syz.6.2901 Tainted: G L syzkaller #0 PREEMPT(full) [ 336.702451][T14630] Tainted: [L]=SOFTLOCKUP [ 336.702458][T14630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 336.702469][T14630] Call Trace: [ 336.702477][T14630] [ 336.702486][T14630] dump_stack_lvl+0x100/0x190 [ 336.702518][T14630] should_fail_ex.cold+0x5/0xa [ 336.702546][T14630] get_futex_key+0x1d0/0x14f0 [ 336.702574][T14630] ? __pfx_get_futex_key+0x10/0x10 [ 336.702608][T14630] futex_wake+0xf4/0x5e0 [ 336.702640][T14630] ? __pfx_futex_wake+0x10/0x10 [ 336.702669][T14630] ? __call_rcu_common.constprop.0+0x3f2/0x9b0 [ 336.702703][T14630] do_futex+0x2b2/0x440 [ 336.702731][T14630] ? __pfx_do_futex+0x10/0x10 [ 336.702755][T14630] ? __pfx___might_resched+0x10/0x10 [ 336.702774][T14630] ? blkcg_maybe_throttle_current+0x5e7/0xeb0 [ 336.702798][T14630] ? _raw_spin_unlock_irq+0x23/0x50 [ 336.702826][T14630] __x64_sys_futex+0x34f/0x4d0 [ 336.702856][T14630] ? __pfx___x64_sys_futex+0x10/0x10 [ 336.702891][T14630] do_syscall_64+0x123/0x790 [ 336.702920][T14630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.702944][T14630] RIP: 0033:0x7f65ab79e159 [ 336.702960][T14630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.702978][T14630] RSP: 002b:00007f65ac7380e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 336.702997][T14630] RAX: ffffffffffffffda RBX: 00007f65aba25fa8 RCX: 00007f65ab79e159 [ 336.703010][T14630] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f65aba25fac [ 336.703023][T14630] RBP: 00007f65aba25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 336.703035][T14630] R10: 0000000000001000 R11: 0000000000000246 R12: 0000000000000000 [ 336.703048][T14630] R13: 00007f65aba26038 R14: 00007ffe5c5cea60 R15: 00007ffe5c5ceb48 [ 336.703076][T14630] [ 337.383099][T14661] FAULT_INJECTION: forcing a failure. [ 337.383099][T14661] name failslab, interval 1, probability 0, space 0, times 0 [ 337.383141][T14661] CPU: 1 UID: 0 PID: 14661 Comm: syz.3.2909 Tainted: G L syzkaller #0 PREEMPT(full) [ 337.383167][T14661] Tainted: [L]=SOFTLOCKUP [ 337.383174][T14661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 337.383185][T14661] Call Trace: [ 337.383192][T14661] [ 337.383200][T14661] dump_stack_lvl+0x100/0x190 [ 337.383234][T14661] should_fail_ex.cold+0x5/0xa [ 337.383259][T14661] should_failslab+0xc2/0x120 [ 337.383285][T14661] kmem_cache_alloc_noprof+0x92/0x6a0 [ 337.383306][T14661] ? skb_clone+0x190/0x400 [ 337.383337][T14661] skb_clone+0x190/0x400 [ 337.383362][T14661] netlink_trim+0x1f1/0x2f0 [ 337.383391][T14661] netlink_broadcast_filtered+0x6d/0xf20 [ 337.383413][T14661] ? tcf_action_dump+0x202/0x2e0 [ 337.383441][T14661] nlmsg_notify+0x1b0/0x290 [ 337.383465][T14661] tcf_action_add+0x34f/0x5c0 [ 337.383489][T14661] ? __pfx_tcf_action_add+0x10/0x10 [ 337.383550][T14661] ? __nla_parse+0x40/0x60 [ 337.383581][T14661] tc_ctl_action+0x2e3/0x470 [ 337.383607][T14661] ? __pfx_tc_ctl_action+0x10/0x10 [ 337.383637][T14661] ? __pfx_tc_ctl_action+0x10/0x10 [ 337.383661][T14661] rtnetlink_rcv_msg+0x3c9/0xe90 [ 337.383688][T14661] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 337.383724][T14661] ? ref_tracker_free+0x37e/0x6c0 [ 337.383755][T14661] netlink_rcv_skb+0x159/0x420 [ 337.383777][T14661] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 337.383804][T14661] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 337.383835][T14661] ? netlink_deliver_tap+0x1ae/0xcc0 [ 337.383861][T14661] netlink_unicast+0x585/0x850 [ 337.383886][T14661] ? __pfx_netlink_unicast+0x10/0x10 [ 337.383934][T14661] netlink_sendmsg+0x8b0/0xda0 [ 337.383960][T14661] ? __pfx_netlink_sendmsg+0x10/0x10 [ 337.383987][T14661] ? selinux_socket_sendmsg+0x198/0x2f0 [ 337.384014][T14661] ____sys_sendmsg+0xa4d/0xbe0 [ 337.384043][T14661] ? __pfx_netlink_sendmsg+0x10/0x10 [ 337.384066][T14661] ? __pfx_____sys_sendmsg+0x10/0x10 [ 337.384103][T14661] ? plist_check_list+0x1b8/0x280 [ 337.384133][T14661] ? plist_del+0x308/0x510 [ 337.384158][T14661] ___sys_sendmsg+0x190/0x1e0 [ 337.384191][T14661] ? __pfx____sys_sendmsg+0x10/0x10 [ 337.384221][T14661] ? futex_wake+0x220/0x5e0 [ 337.384260][T14661] ? find_held_lock+0x2b/0x80 [ 337.384304][T14661] __sys_sendmsg+0x160/0x210 [ 337.384328][T14661] ? __pfx___sys_sendmsg+0x10/0x10 [ 337.384367][T14661] do_syscall_64+0x123/0x790 [ 337.384396][T14661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.384417][T14661] RIP: 0033:0x7fb72879e159 [ 337.384435][T14661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 337.384453][T14661] RSP: 002b:00007fb72971c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 337.384472][T14661] RAX: ffffffffffffffda RBX: 00007fb728a25fa0 RCX: 00007fb72879e159 [ 337.384486][T14661] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000005 [ 337.384499][T14661] RBP: 00007fb72883506b R08: 0000000000000000 R09: 0000000000000000 [ 337.384510][T14661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 337.384521][T14661] R13: 00007fb728a26038 R14: 00007fb728a25fa0 R15: 00007fff74f60ff8 [ 337.384548][T14661] [ 337.790620][ T30] audit: type=1400 audit(1789526390.093:2459): avc: denied { read } for pid=14676 comm="syz.8.2914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 337.940786][T14687] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2917'. [ 337.945095][ T30] audit: type=1400 audit(1789526390.253:2460): avc: denied { mount } for pid=14683 comm="syz.5.2919" name="/" dev="rpc_pipefs" ino=49521 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 337.957736][T14687] FAULT_INJECTION: forcing a failure. [ 337.957736][T14687] name failslab, interval 1, probability 0, space 0, times 0 [ 337.957764][T14687] CPU: 0 UID: 0 PID: 14687 Comm: syz.3.2917 Tainted: G L syzkaller #0 PREEMPT(full) [ 337.957787][T14687] Tainted: [L]=SOFTLOCKUP [ 337.957794][T14687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 337.957805][T14687] Call Trace: [ 337.957814][T14687] [ 337.957821][T14687] dump_stack_lvl+0x100/0x190 [ 337.957850][T14687] should_fail_ex.cold+0x5/0xa [ 337.957876][T14687] should_failslab+0xc2/0x120 [ 337.957899][T14687] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 337.957919][T14687] ? __alloc_skb+0x140/0x710 [ 337.957946][T14687] __alloc_skb+0x140/0x710 [ 337.957964][T14687] ? __alloc_skb+0x5b7/0x710 [ 337.957982][T14687] ? __pfx___alloc_skb+0x10/0x10 [ 337.958007][T14687] __neigh_notify+0xe6/0x350 [ 337.958031][T14687] neigh_cleanup_and_release+0x97/0x2d0 [ 337.958055][T14687] neigh_flush_dev.isra.0+0x146/0x1b0 [ 337.958080][T14687] neigh_changeaddr+0x54/0x70 [ 337.958104][T14687] ndisc_netdev_event+0xf4/0x560 [ 337.958129][T14687] notifier_call_chain+0x99/0x3f0 [ 337.958158][T14687] call_netdevice_notifiers_info+0xbe/0x110 [ 337.958183][T14687] netif_set_mac_address+0x370/0x4a0 [ 337.958205][T14687] ? __pfx_netif_set_mac_address+0x10/0x10 [ 337.958229][T14687] ? __pfx_down_write+0x10/0x10 [ 337.958254][T14687] ? tick_nohz_tick_stopped+0x6c/0xa0 [ 337.958279][T14687] do_setlink.isra.0+0x75f/0x3e60 [ 337.958306][T14687] ? __lock_acquire+0x5c0/0x1f40 [ 337.958324][T14687] ? __pfx_do_setlink.isra.0+0x10/0x10 [ 337.958349][T14687] ? __lock_acquire+0x5c0/0x1f40 [ 337.958370][T14687] ? lock_acquire+0x1d1/0x380 [ 337.958386][T14687] ? avc_has_perm_noaudit+0x56/0x3b0 [ 337.958414][T14687] ? lock_acquire+0x1d1/0x380 [ 337.958431][T14687] ? rtnl_setlink+0x4dd/0xac0 [ 337.958456][T14687] ? rcu_is_watching+0x13/0xc0 [ 337.958478][T14687] ? trace_contention_end+0x126/0x160 [ 337.958497][T14687] ? __mutex_lock+0x26c/0x1bd0 [ 337.958520][T14687] ? rtnl_setlink+0x4dd/0xac0 [ 337.958565][T14687] ? netlink_ns_capable+0xfa/0x130 [ 337.958586][T14687] rtnl_setlink+0x5fd/0xac0 [ 337.958610][T14687] ? __pfx_rtnl_setlink+0x10/0x10 [ 337.958630][T14687] ? __kasan_slab_free+0x5f/0x80 [ 337.958652][T14687] ? __dev_queue_xmit+0x1bbf/0x4970 [ 337.958670][T14687] ? netlink_deliver_tap+0xa4d/0xcc0 [ 337.958687][T14687] ? netlink_unicast+0x62b/0x850 [ 337.958705][T14687] ? netlink_sendmsg+0x8b0/0xda0 [ 337.958723][T14687] ? sock_write_iter+0x53a/0x5b0 [ 337.958790][T14687] ? __lock_acquire+0x5c0/0x1f40 [ 337.958817][T14687] ? lock_acquire+0x1d1/0x380 [ 337.958834][T14687] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 337.958856][T14687] ? find_held_lock+0x2b/0x80 [ 337.958878][T14687] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 337.958898][T14687] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 337.958920][T14687] ? __pfx_rtnl_setlink+0x10/0x10 [ 337.958942][T14687] rtnetlink_rcv_msg+0x95e/0xe90 [ 337.958965][T14687] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 337.958994][T14687] ? ref_tracker_free+0x37e/0x6c0 [ 337.959019][T14687] netlink_rcv_skb+0x159/0x420 [ 337.959038][T14687] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 337.959061][T14687] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 337.959088][T14687] ? netlink_deliver_tap+0x1ae/0xcc0 [ 337.959110][T14687] netlink_unicast+0x585/0x850 [ 337.959131][T14687] ? __pfx_netlink_unicast+0x10/0x10 [ 337.959157][T14687] netlink_sendmsg+0x8b0/0xda0 [ 337.959179][T14687] ? __pfx_netlink_sendmsg+0x10/0x10 [ 337.959200][T14687] ? selinux_socket_sendmsg+0x198/0x2f0 [ 337.959222][T14687] sock_write_iter+0x53a/0x5b0 [ 337.959245][T14687] ? __pfx_netlink_sendmsg+0x10/0x10 [ 337.959263][T14687] ? __pfx_sock_write_iter+0x10/0x10 [ 337.959295][T14687] ? __pfx___file_has_perm+0x10/0x10 [ 337.959316][T14687] do_iter_readv_writev+0x6f7/0x930 [ 337.959343][T14687] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 337.959368][T14687] ? selinux_file_permission+0x8f/0x6d0 [ 337.959390][T14687] ? bpf_lsm_file_permission+0x9/0x10 [ 337.959411][T14687] ? security_file_permission+0x76/0x210 [ 337.959432][T14687] ? rw_verify_area+0xce/0x6d0 [ 337.959458][T14687] vfs_writev+0x360/0xdd0 [ 337.959476][T14687] ? __lock_acquire+0x5c0/0x1f40 [ 337.959496][T14687] ? __pfx_vfs_writev+0x10/0x10 [ 337.959513][T14687] ? percpu_counter_add_batch+0xb9/0x230 [ 337.959535][T14687] ? lock_acquire+0x1d1/0x380 [ 337.959556][T14687] ? __fget_files+0x34/0x3d0 [ 337.959585][T14687] ? __fget_files+0x21f/0x3d0 [ 337.959612][T14687] ? do_writev+0x28a/0x340 [ 337.959626][T14687] do_writev+0x28a/0x340 [ 337.959644][T14687] ? __pfx_do_writev+0x10/0x10 [ 337.959668][T14687] do_syscall_64+0x123/0x790 [ 337.959696][T14687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.959714][T14687] RIP: 0033:0x7fb72879e159 [ 337.959730][T14687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 337.959745][T14687] RSP: 002b:00007fb72971c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 337.959763][T14687] RAX: ffffffffffffffda RBX: 00007fb728a25fa0 RCX: 00007fb72879e159 [ 337.959774][T14687] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000005 [ 337.959784][T14687] RBP: 00007fb72883506b R08: 0000000000000000 R09: 0000000000000000 [ 337.959794][T14687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 337.959803][T14687] R13: 00007fb728a26038 R14: 00007fb728a25fa0 R15: 00007fff74f60ff8 [ 337.959827][T14687] [ 338.191322][T11328] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 338.341048][T11328] usb 7-1: Using ep0 maxpacket: 8 [ 338.342237][T11328] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 338.343071][T11328] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 102, changing to 10 [ 338.343096][T11328] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 24624, setting to 1024 [ 338.343128][T11328] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.348915][T11328] usb 7-1: config 0 descriptor?? [ 338.562379][T11328] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 338.825450][T11328] usb 7-1: USB disconnect, device number 8 [ 338.825488][ C0] iowarrior 7-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 338.856775][T14716] fuse: fd is not a fuse device [ 338.984323][T14726] overlayfs: failed to clone upperpath [ 339.221111][ T5726] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 339.371524][ T5726] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 339.373342][ T5726] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.373372][ T5726] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.373393][ T5726] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.376264][ T5726] usb 4-1: config 0 descriptor?? [ 339.788761][ T5726] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 339.788794][ T5726] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 339.788814][ T5726] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 339.788827][ T5726] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 339.788839][ T5726] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 339.788850][ T5726] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 339.788862][ T5726] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 339.790264][ T5726] cp2112 0003:10C4:EA90.0014: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 339.854376][T11345] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 339.908718][T14744] fido_id[14744]: Failed to get parent HID device: No such file or directory [ 339.981100][T11345] usb 7-1: device descriptor read/64, error -71 [ 339.986943][ T5726] cp2112 0003:10C4:EA90.0014: Part Number: 0x00 Device Version: 0x00 [ 339.993350][T14748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2941'. [ 340.114236][T14751] fuse: fd is not a fuse device [ 340.230971][T11345] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 340.360907][T11345] usb 7-1: device descriptor read/64, error -71 [ 340.473441][T11345] usb usb7-port1: attempt power cycle [ 340.597764][ T5726] cp2112 0003:10C4:EA90.0014: error reading lock byte: -71 [ 340.609865][ T5726] usb 4-1: USB disconnect, device number 22 [ 340.689958][T14765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 340.709286][T14765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 340.810905][T11345] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 340.831370][T11345] usb 7-1: device descriptor read/8, error -71 [ 341.090979][T11345] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 341.123116][T11345] usb 7-1: device descriptor read/8, error -71 [ 341.231228][T11345] usb usb7-port1: unable to enumerate USB device [ 342.302614][T14817] FAULT_INJECTION: forcing a failure. [ 342.302614][T14817] name failslab, interval 1, probability 0, space 0, times 0 [ 342.302650][T14817] CPU: 0 UID: 0 PID: 14817 Comm: syz.3.2967 Tainted: G L syzkaller #0 PREEMPT(full) [ 342.302677][T14817] Tainted: [L]=SOFTLOCKUP [ 342.302684][T14817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 342.302695][T14817] Call Trace: [ 342.302702][T14817] [ 342.302710][T14817] dump_stack_lvl+0x100/0x190 [ 342.302743][T14817] should_fail_ex.cold+0x5/0xa [ 342.302772][T14817] should_failslab+0xc2/0x120 [ 342.302801][T14817] __kmalloc_noprof+0xfc/0x840 [ 342.302822][T14817] ? __might_fault+0xc5/0x140 [ 342.302850][T14817] ? lsm_blob_alloc+0x68/0x90 [ 342.302881][T14817] lsm_blob_alloc+0x68/0x90 [ 342.302906][T14817] security_msg_msg_alloc+0x22/0x240 [ 342.302934][T14817] load_msg+0x354/0x4a0 [ 342.302961][T14817] do_msgrcv+0x209/0x16f0 [ 342.302986][T14817] ? __pfx_do_msg_fill+0x10/0x10 [ 342.303013][T14817] ? __sys_connect+0xe4/0x170 [ 342.303037][T14817] ? __pfx_do_msgrcv+0x10/0x10 [ 342.303064][T14817] ? xfd_validate_state+0x129/0x190 [ 342.303095][T14817] ? do_syscall_64+0x123/0x790 [ 342.303119][T14817] do_syscall_64+0x123/0x790 [ 342.303147][T14817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.303168][T14817] RIP: 0033:0x7fb72879e159 [ 342.303186][T14817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.303206][T14817] RSP: 002b:00007fb72971c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000046 [ 342.303227][T14817] RAX: ffffffffffffffda RBX: 00007fb728a25fa0 RCX: 00007fb72879e159 [ 342.303241][T14817] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 342.303253][T14817] RBP: 00007fb72883506b R08: 0000000000004800 R09: 0000000000000000 [ 342.303266][T14817] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 342.303277][T14817] R13: 00007fb728a26038 R14: 00007fb728a25fa0 R15: 00007fff74f60ff8 [ 342.303304][T14817] [ 342.849498][T14841] x_tables: duplicate underflow at hook 1 [ 342.883190][T14840] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 342.937533][T14848] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2980'. [ 343.208951][T14854] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.253182][T14861] fuse: fd is not a fuse device [ 343.268541][T14854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.329606][T14854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.338966][T14854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.355105][T14854] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 343.355130][T14854] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 343.397910][T14854] veth1_vlan: left promiscuous mode [ 343.406514][T14854] veth0_vlan: left promiscuous mode [ 343.413525][T14854] veth0_vlan: entered promiscuous mode [ 343.416963][T14854] veth1_vlan: entered promiscuous mode [ 343.437511][T14854] veth1_macvtap: left promiscuous mode [ 343.444260][T14854] veth0_macvtap: left promiscuous mode [ 343.447787][T14854] veth0_macvtap: entered promiscuous mode [ 343.454143][T14854] veth1_macvtap: entered promiscuous mode [ 343.544504][T14854] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 343.550189][T14854] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 343.575408][T14854] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 343.581961][T14854] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 343.587715][T14854] mac80211_hwsim hwsim25 wlan1: left promiscuous mode [ 343.620045][T14854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.672936][T14854] 8021q: adding VLAN 0 to HW filter on device bond1 [ 343.742968][T10176] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.743096][T10176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.753506][T10176] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.753596][T10176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.909398][T10176] bridge0: port 3(team0) entered blocking state [ 343.909490][T10176] bridge0: port 3(team0) entered forwarding state [ 343.971146][T10176] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.978541][T10176] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.980343][T10176] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.980588][T10176] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.014125][ T2236] block nbd0: Possible stuck request ffff888027f57000: control (read@0,1024B). Runtime 270 seconds [ 345.014264][ T2236] block nbd0: Possible stuck request ffff888027f571c0: control (read@1024,3072B). Runtime 270 seconds [ 345.532420][T10168] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 346.205648][T14898] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2998'. [ 346.393858][T14904] FAULT_INJECTION: forcing a failure. [ 346.393858][T14904] name failslab, interval 1, probability 0, space 0, times 0 [ 346.393891][T14904] CPU: 0 UID: 0 PID: 14904 Comm: syz.1.3000 Tainted: G L syzkaller #0 PREEMPT(full) [ 346.393918][T14904] Tainted: [L]=SOFTLOCKUP [ 346.393925][T14904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 346.393937][T14904] Call Trace: [ 346.393944][T14904] [ 346.393952][T14904] dump_stack_lvl+0x100/0x190 [ 346.393984][T14904] should_fail_ex.cold+0x5/0xa [ 346.394010][T14904] should_failslab+0xc2/0x120 [ 346.394035][T14904] __kmalloc_cache_noprof+0x91/0x6d0 [ 346.394063][T14904] ? x509_cert_parse+0x162/0x910 [ 346.394086][T14904] x509_cert_parse+0x162/0x910 [ 346.394106][T14904] x509_key_preparse+0x65/0x9c0 [ 346.394129][T14904] asymmetric_key_preparse+0xce/0x1d0 [ 346.394154][T14904] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 346.394182][T14904] __key_create_or_update+0x463/0xe30 [ 346.394208][T14904] ? __pfx___key_create_or_update+0x10/0x10 [ 346.394232][T14904] ? lookup_user_key+0x3f3/0x1300 [ 346.394265][T14904] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 346.394293][T14904] key_create_or_update+0x42/0x60 [ 346.394320][T14904] __do_sys_add_key+0x2e8/0x460 [ 346.394350][T14904] ? __pfx___do_sys_add_key+0x10/0x10 [ 346.394387][T14904] do_syscall_64+0x123/0x790 [ 346.394416][T14904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.394437][T14904] RIP: 0033:0x7fd63119e159 [ 346.394454][T14904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.394472][T14904] RSP: 002b:00007fd631fdc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 346.394491][T14904] RAX: ffffffffffffffda RBX: 00007fd631425fa0 RCX: 00007fd63119e159 [ 346.394503][T14904] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 346.394515][T14904] RBP: 00007fd63123506b R08: ffffffffffffffff R09: 0000000000000000 [ 346.394528][T14904] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 346.394547][T14904] R13: 00007fd631426038 R14: 00007fd631425fa0 R15: 00007ffd52ee23a8 [ 346.394574][T14904] [ 346.686652][T14911] loop2: detected capacity change from 0 to 7 [ 346.715277][T14911] Dev loop2: unable to read RDB block 7 [ 346.715302][T14911] loop2: unable to read partition table [ 346.715403][T14911] loop2: partition table beyond EOD, truncated [ 346.715427][T14911] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 347.142754][T14930] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3010'. [ 347.151011][T14930] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3010'. [ 347.206739][T14932] kAFS: No cell specified [ 347.226399][T14913] device-mapper: table: 248:2: cache: Error opening origin device (-ENOENT) [ 347.226429][T14913] device-mapper: ioctl: error adding target to table [ 347.813500][ T5602] Bluetooth: hci1: unexpected event for opcode 0x080d [ 347.933510][T14962] netlink: zone id is out of range [ 348.356749][T14987] fuse: fd is not a fuse device [ 348.552505][T14990] uprobe: syz.3.3034:14990 failed to unregister, leaking uprobe [ 348.615325][T14990] uprobe: syz.3.3034:14990 failed to unregister, leaking uprobe [ 349.249134][ T30] audit: type=1400 audit(1789526401.553:2461): avc: denied { write } for pid=15019 comm="syz.1.3046" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 349.513433][T15031] FAULT_INJECTION: forcing a failure. [ 349.513433][T15031] name failslab, interval 1, probability 0, space 0, times 0 [ 349.513474][T15031] CPU: 0 UID: 0 PID: 15031 Comm: syz.1.3051 Tainted: G L syzkaller #0 PREEMPT(full) [ 349.513504][T15031] Tainted: [L]=SOFTLOCKUP [ 349.513512][T15031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 349.513525][T15031] Call Trace: [ 349.513533][T15031] [ 349.513542][T15031] dump_stack_lvl+0x100/0x190 [ 349.513578][T15031] should_fail_ex.cold+0x5/0xa [ 349.513607][T15031] should_failslab+0xc2/0x120 [ 349.513634][T15031] __kmalloc_noprof+0xfc/0x840 [ 349.513655][T15031] ? aes_set_key_common+0x78/0xc0 [ 349.513679][T15031] ? init_skcipher_req.constprop.0+0x9c/0x180 [ 349.513710][T15031] init_skcipher_req.constprop.0+0x9c/0x180 [ 349.513735][T15031] derived_key_encrypt.constprop.0+0x10f/0x6b0 [ 349.513768][T15031] ? __pfx_derived_key_encrypt.constprop.0+0x10/0x10 [ 349.513801][T15031] ? kasan_quarantine_put+0x104/0x240 [ 349.513821][T15031] ? lockdep_hardirqs_on+0x7d/0x110 [ 349.513853][T15031] ? __kasan_check_byte+0x13/0x50 [ 349.513889][T15031] ? get_derived_key+0x11b/0x140 [ 349.513922][T15031] encrypted_read+0x389/0x850 [ 349.513953][T15031] ? lock_acquire+0x1d1/0x380 [ 349.513976][T15031] ? keyctl_read_key+0x227/0x510 [ 349.514009][T15031] ? __pfx_encrypted_read+0x10/0x10 [ 349.514034][T15031] ? __pfx___might_resched+0x10/0x10 [ 349.514058][T15031] ? down_read+0x13b/0x4c0 [ 349.514086][T15031] ? __pfx_down_read+0x10/0x10 [ 349.514111][T15031] ? keyctl_read_key+0x2ac/0x510 [ 349.514133][T15031] ? keyctl_read_key+0x2ac/0x510 [ 349.514157][T15031] ? keyctl_read_key+0x427/0x510 [ 349.514186][T15031] keyctl_read_key+0x29a/0x510 [ 349.514214][T15031] __do_sys_keyctl+0x36d/0x5a0 [ 349.514233][T15031] do_syscall_64+0x123/0x790 [ 349.514262][T15031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.514281][T15031] RIP: 0033:0x7fd63119e159 [ 349.514299][T15031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 349.514316][T15031] RSP: 002b:00007fd631fdc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 349.514336][T15031] RAX: ffffffffffffffda RBX: 00007fd631425fa0 RCX: 00007fd63119e159 [ 349.514348][T15031] RDX: 0000200000000240 RSI: 0000000009bcce13 RDI: 000000000000000b [ 349.514361][T15031] RBP: 00007fd63123506b R08: 0000000000000000 R09: 0000000000000000 [ 349.514372][T15031] R10: 00000000349b7f55 R11: 0000000000000246 R12: 0000000000000000 [ 349.514383][T15031] R13: 00007fd631426038 R14: 00007fd631425fa0 R15: 00007ffd52ee23a8 [ 349.514411][T15031] [ 349.515924][T15031] trusted_key: encrypted_key: failed to allocate request for cbc(aes) [ 349.590937][T11333] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 349.793737][T11333] usb 7-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 349.822453][T11333] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 349.822484][T11333] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 349.822515][T11333] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.056433][ T5602] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 350.120949][T11345] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 350.235110][ T30] audit: type=1400 audit(1789526402.543:2462): avc: denied { ioctl } for pid=15054 comm="syz.8.3060" path="socket:[51227]" dev="sockfs" ino=51227 ioctlcmd=0x8905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 350.291984][T11345] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 350.294695][T11345] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.294727][T11345] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.294763][T11345] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.324562][T11345] usb 2-1: config 0 descriptor?? [ 350.435666][T15058] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 350.561707][T11345] usbhid 2-1:0.0: can't add hid device: -71 [ 350.561813][T11345] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 350.575780][T11345] usb 2-1: USB disconnect, device number 36 [ 351.103422][T11345] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 351.251633][T11345] usb 2-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.40 [ 351.252676][T11345] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.252705][T11345] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.252740][T11345] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.257015][T11345] usb 2-1: config 0 descriptor?? [ 351.493473][T11333] pegasus 7-1:1.0: can't reset MAC [ 351.493692][T11333] pegasus 7-1:1.0: probe with driver pegasus failed with error -5 [ 351.506306][T11333] usb 7-1: USB disconnect, device number 13 [ 351.695660][T11345] kye 0003:0458:5013.0015: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 351.696991][T11345] kye 0003:0458:5013.0015: unknown main item tag 0x0 [ 351.703858][T11345] kye 0003:0458:5013.0015: hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.1-1/input0 [ 351.703888][T11345] kye 0003:0458:5013.0015: tablet-enabling feature report not found [ 351.703901][T11345] kye 0003:0458:5013.0015: tablet enabling failed [ 351.867061][ T5602] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 351.867227][ T5602] Bluetooth: hci1: Injecting HCI hardware error event [ 351.869876][ T5597] Bluetooth: hci1: hardware error 0x00 [ 351.932017][T15077] fido_id[15077]: Failed to get parent HID device: No such file or directory [ 351.975309][ T5726] usb 2-1: USB disconnect, device number 37 [ 352.103402][ T30] audit: type=1400 audit(1789526404.413:2463): avc: denied { getopt } for pid=15087 comm="syz.6.3076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 352.450925][ T5726] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 352.600952][ T5726] usb 7-1: Using ep0 maxpacket: 16 [ 352.604826][ T5726] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 352.616386][ T5726] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 352.637406][ T5726] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.637432][ T5726] usb 7-1: Product: syz [ 352.637445][ T5726] usb 7-1: Manufacturer: syz [ 352.637465][ T5726] usb 7-1: SerialNumber: syz [ 352.639860][ T5726] usb 7-1: config 0 descriptor?? [ 352.685257][ T5726] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 352.685290][ T5726] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 352.998103][T15110] sg_write: data in/out 461547/217 bytes for SCSI command 0x0-- guessing data in; [ 352.998103][T15110] program syz.1.3084 not setting count and/or reply_len properly [ 353.218814][T15121] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 353.225708][ T30] audit: type=1400 audit(1789526405.533:2464): avc: denied { mounton } for pid=15120 comm="syz.3.3088" path="/224/bus/bus" dev="overlay" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 353.256910][ T5726] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 353.434417][T15128] cgroup: Setting release_agent not allowed [ 353.461444][T11333] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 353.610990][T11333] usb 2-1: Using ep0 maxpacket: 16 [ 353.611762][T11333] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 353.612709][T11333] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 353.612734][T11333] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 353.614594][T11333] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.614619][T11333] usb 2-1: Product: syz [ 353.614632][T11333] usb 2-1: Manufacturer: syz [ 353.614647][T11333] usb 2-1: SerialNumber: syz [ 353.667534][T11333] usb 2-1: config 0 descriptor?? [ 353.700236][T11333] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 353.700273][T11333] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 353.914734][T15137] fuse: fd is not a fuse device [ 353.928919][ T5726] em28xx 7-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 353.928982][ T5726] em28xx 7-1:0.0: board has no eeprom [ 353.948147][ T5597] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 354.000898][ T5726] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 354.000926][ T5726] em28xx 7-1:0.0: dvb set to bulk mode. [ 354.001301][T11328] em28xx 7-1:0.0: Binding DVB extension [ 354.048391][ T5726] usb 7-1: USB disconnect, device number 14 [ 354.049801][ T5726] em28xx 7-1:0.0: Disconnecting em28xx [ 354.084498][T15139] input: syz0 as /devices/virtual/input/input32 [ 354.219482][T11328] em28xx 7-1:0.0: Registering input extension [ 354.228781][ T5726] em28xx 7-1:0.0: Closing input extension [ 354.314002][T11333] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 354.314587][T11333] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 354.317835][ T5726] em28xx: Freeing device [ 354.336035][T15146] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3100'. [ 354.382543][T15148] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3101'. [ 354.530927][T11333] em28xx 2-1:0.0: AC97 command still being executed: not handled properly! [ 354.530952][T11333] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 354.530965][T11333] em28xx 2-1:0.0: No AC97 audio processor [ 354.587680][T15150] netlink: 'syz.5.3102': attribute type 10 has an invalid length. [ 354.599604][T15150] team0: Port device dummy0 added [ 354.606410][T15150] netlink: 'syz.5.3102': attribute type 10 has an invalid length. [ 354.635213][T15150] team0: Port device dummy0 removed [ 354.691287][T15150] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 354.704166][T15150] overlayfs: cannot append lower layer [ 354.732162][T11345] usb 2-1: USB disconnect, device number 38 [ 354.733456][T11345] em28xx 2-1:0.0: Disconnecting em28xx [ 354.949108][T11345] em28xx: Freeing device [ 354.997741][T15167] fuse: fd is not a fuse device [ 355.645648][T15191] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3117'. [ 355.688314][T15191] hsr_slave_1 (unregistering): left promiscuous mode [ 356.498289][T15234] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3132'. [ 356.500356][T15234] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3132'. [ 356.764556][ T30] audit: type=1804 audit(1789526409.073:2465): pid=15250 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.8.3138" name="file0" dev="tmpfs" ino=1874 res=1 errno=0 [ 356.828077][T15254] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3142'. [ 356.904652][T15259] netlink: 'syz.8.3143': attribute type 4 has an invalid length. [ 356.943687][T15247] FAULT_INJECTION: forcing a failure. [ 356.943687][T15247] name failslab, interval 1, probability 0, space 0, times 0 [ 356.943725][T15247] CPU: 1 UID: 0 PID: 15247 Comm: syz.6.3137 Tainted: G L syzkaller #0 PREEMPT(full) [ 356.943753][T15247] Tainted: [L]=SOFTLOCKUP [ 356.943778][T15247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 356.943790][T15247] Call Trace: [ 356.943797][T15247] [ 356.943805][T15247] dump_stack_lvl+0x100/0x190 [ 356.943840][T15247] should_fail_ex.cold+0x5/0xa [ 356.943867][T15247] should_failslab+0xc2/0x120 [ 356.943894][T15247] kmem_cache_alloc_noprof+0x92/0x6a0 [ 356.943917][T15247] ? io_submit_one+0x124/0x1fb0 [ 356.943948][T15247] io_submit_one+0x124/0x1fb0 [ 356.943976][T15247] ? __lock_acquire+0x5c0/0x1f40 [ 356.944000][T15247] ? __pfx_io_submit_one+0x10/0x10 [ 356.944031][T15247] ? lock_acquire+0x1d1/0x380 [ 356.944056][T15247] ? __might_fault+0xc5/0x140 [ 356.944091][T15247] ? __x64_sys_io_submit+0x1b1/0x3a0 [ 356.944120][T15247] __x64_sys_io_submit+0x1b1/0x3a0 [ 356.944153][T15247] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 356.944196][T15247] do_syscall_64+0x123/0x790 [ 356.944226][T15247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.944247][T15247] RIP: 0033:0x7f65ab79e159 [ 356.944263][T15247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.944280][T15247] RSP: 002b:00007f65ac738028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 356.944300][T15247] RAX: ffffffffffffffda RBX: 00007f65aba25fa0 RCX: 00007f65ab79e159 [ 356.944313][T15247] RDX: 00002000000011c0 RSI: 0000000000000002 RDI: 00007f65ac717000 [ 356.944324][T15247] RBP: 00007f65ab83506b R08: 0000000000000000 R09: 0000000000000000 [ 356.944336][T15247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 356.944348][T15247] R13: 00007f65aba26038 R14: 00007f65aba25fa0 R15: 00007ffe5c5ceb48 [ 356.944374][T15247] [ 357.017157][T15268] overlayfs: failed to clone upperpath [ 357.596451][T15302] fuse: Bad value for 'fd' [ 358.002077][T15318] FAULT_INJECTION: forcing a failure. [ 358.002077][T15318] name failslab, interval 1, probability 0, space 0, times 0 [ 358.002109][T15318] CPU: 1 UID: 0 PID: 15318 Comm: syz.6.3167 Tainted: G L syzkaller #0 PREEMPT(full) [ 358.002138][T15318] Tainted: [L]=SOFTLOCKUP [ 358.002146][T15318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 358.002159][T15318] Call Trace: [ 358.002166][T15318] [ 358.002176][T15318] dump_stack_lvl+0x100/0x190 [ 358.002208][T15318] should_fail_ex.cold+0x5/0xa [ 358.002239][T15318] should_failslab+0xc2/0x120 [ 358.002264][T15318] __kmalloc_cache_noprof+0x91/0x6d0 [ 358.002294][T15318] ? raw_ioctl_init+0x1c0/0x850 [ 358.002319][T15318] raw_ioctl_init+0x1c0/0x850 [ 358.002339][T15318] ? __pfx_raw_ioctl_init+0x10/0x10 [ 358.002357][T15318] ? tomoyo_path_number_perm+0x188/0x580 [ 358.002398][T15318] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 358.002417][T15318] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 358.002442][T15318] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 358.002478][T15318] raw_ioctl+0x138a/0x2b80 [ 358.002503][T15318] ? __pfx_raw_ioctl+0x10/0x10 [ 358.002521][T15318] ? selinux_file_ioctl+0x13b/0x290 [ 358.002541][T15318] ? selinux_file_ioctl+0xb6/0x290 [ 358.002564][T15318] ? __pfx_raw_ioctl+0x10/0x10 [ 358.002584][T15318] __x64_sys_ioctl+0x18e/0x210 [ 358.002606][T15318] do_syscall_64+0x123/0x790 [ 358.002635][T15318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.002655][T15318] RIP: 0033:0x7f65ab79ddeb [ 358.002671][T15318] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 358.002689][T15318] RSP: 002b:00007f65ac735f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 358.002709][T15318] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f65ab79ddeb [ 358.002722][T15318] RDX: 00007f65ac736fd0 RSI: 0000000041015500 RDI: 0000000000000004 [ 358.002734][T15318] RBP: 00007f65ac736fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 358.002746][T15318] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f65ac735fa0 [ 358.002761][T15318] R13: 00002000000000c0 R14: 0000000000000000 R15: 0000000000000000 [ 358.002783][T15318] [ 358.398420][T15331] netlink: 'syz.1.3173': attribute type 1 has an invalid length. [ 358.415073][T15331] bond2: entered promiscuous mode [ 358.415411][T15331] 8021q: adding VLAN 0 to HW filter on device bond2 [ 358.455900][T15331] 8021q: adding VLAN 0 to HW filter on device bond2 [ 358.456243][T15331] bond2: (slave ipip0): The slave device specified does not support setting the MAC address [ 358.456262][T15331] bond2: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 358.498164][T15331] bond2: (slave ipip0): making interface the new active one [ 358.498191][T15331] ipip0: entered promiscuous mode [ 358.499482][T15331] bond2: (slave ipip0): Enslaving as an active interface with an up link [ 358.630401][T15338] tipc: Failed to obtain node identity [ 358.630433][T15338] tipc: Enabling of bearer rejected, failed to enable media [ 358.730388][T15342] @ÿ: renamed from veth0_vlan (while UP) [ 358.730552][T15342] FAULT_INJECTION: forcing a failure. [ 358.730552][T15342] name failslab, interval 1, probability 0, space 0, times 0 [ 358.730582][T15342] CPU: 1 UID: 0 PID: 15342 Comm: syz.6.3177 Tainted: G L syzkaller #0 PREEMPT(full) [ 358.730612][T15342] Tainted: [L]=SOFTLOCKUP [ 358.730620][T15342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 358.730632][T15342] Call Trace: [ 358.730639][T15342] [ 358.730647][T15342] dump_stack_lvl+0x100/0x190 [ 358.730682][T15342] should_fail_ex.cold+0x5/0xa [ 358.730708][T15342] should_failslab+0xc2/0x120 [ 358.730733][T15342] __kmalloc_noprof+0xfc/0x840 [ 358.730755][T15342] ? kobject_get_path+0xcf/0x2c0 [ 358.730791][T15342] kobject_get_path+0xcf/0x2c0 [ 358.730822][T15342] kobject_uevent_env+0x287/0x18b0 [ 358.730845][T15342] ? kernfs_put+0x3f/0x60 [ 358.730872][T15342] kobject_rename+0x209/0x260 [ 358.730891][T15342] ? __pfx_kobject_rename+0x10/0x10 [ 358.730913][T15342] ? kernfs_put+0x3f/0x60 [ 358.730943][T15342] device_rename+0x130/0x250 [ 358.730965][T15342] netif_change_name+0x284/0x830 [ 358.730994][T15342] ? __pfx_netif_change_name+0x10/0x10 [ 358.731022][T15342] ? rcu_is_watching+0x13/0xc0 [ 358.731048][T15342] ? full_name_hash+0xbc/0x100 [ 358.731078][T15342] dev_change_name+0xb2/0x260 [ 358.731107][T15342] dev_ifsioc+0x16f1/0x1fc0 [ 358.731133][T15342] ? __pfx_dev_ifsioc+0x10/0x10 [ 358.731155][T15342] ? __pfx___mutex_lock+0x10/0x10 [ 358.731195][T15342] ? bpf_lsm_capable+0x9/0x10 [ 358.731230][T15342] dev_ioctl+0x223/0x10e0 [ 358.731255][T15342] sock_do_ioctl+0x1a0/0x280 [ 358.731285][T15342] ? __pfx_sock_do_ioctl+0x10/0x10 [ 358.731313][T15342] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 358.731349][T15342] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 358.731369][T15342] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 358.731396][T15342] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 358.731426][T15342] sock_ioctl+0x599/0x6b0 [ 358.731446][T15342] ? __pfx_sock_ioctl+0x10/0x10 [ 358.731474][T15342] ? selinux_file_ioctl+0x13b/0x290 [ 358.731494][T15342] ? selinux_file_ioctl+0xb6/0x290 [ 358.731517][T15342] ? __pfx_sock_ioctl+0x10/0x10 [ 358.731537][T15342] __x64_sys_ioctl+0x18e/0x210 [ 358.731559][T15342] do_syscall_64+0x123/0x790 [ 358.731589][T15342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.731610][T15342] RIP: 0033:0x7f65ab79e159 [ 358.731628][T15342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.731656][T15342] RSP: 002b:00007f65ac738028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 358.731682][T15342] RAX: ffffffffffffffda RBX: 00007f65aba25fa0 RCX: 00007f65ab79e159 [ 358.731695][T15342] RDX: 00002000000000c0 RSI: 0000000000008923 RDI: 0000000000000005 [ 358.731708][T15342] RBP: 00007f65ab83506b R08: 0000000000000000 R09: 0000000000000000 [ 358.731720][T15342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 358.731734][T15342] R13: 00007f65aba26038 R14: 00007f65aba25fa0 R15: 00007ffe5c5ceb48 [ 358.731763][T15342] [ 359.056137][T15347] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3179'. [ 359.581008][T11333] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 359.731458][T11333] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 359.732345][T11333] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.732382][T11333] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.739029][T11333] usb 7-1: config 0 descriptor?? [ 359.860925][ T5602] Bluetooth: hci4: command 0x0406 tx timeout [ 359.969282][T11333] usbhid 7-1:0.0: can't add hid device: -71 [ 359.969379][T11333] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 359.978523][T11333] usb 7-1: USB disconnect, device number 15 [ 360.192639][T15382] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 360.401533][T11340] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 360.551697][T11340] usb 7-1: Using ep0 maxpacket: 32 [ 360.553902][T11340] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 360.557711][T11340] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.557755][T11340] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.607215][T11340] usb 7-1: config 0 descriptor?? [ 360.616500][T11340] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 360.639953][T11340] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 361.055355][T15413] fuse: fd is not a fuse device [ 361.331171][ T30] audit: type=1400 audit(1789526413.593:2466): avc: denied { listen } for pid=15417 comm="syz.8.3205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 361.404302][T11335] usb 7-1: USB disconnect, device number 16 [ 361.408759][T11335] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 362.007645][T15433] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3211'. [ 362.007669][T15433] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3211'. [ 362.132808][T15439] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3214'. [ 362.297511][T15447] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3217'. [ 362.339876][ T30] audit: type=1400 audit(1789526414.643:2467): avc: denied { connect } for pid=15448 comm="syz.1.3216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 362.374745][ T30] audit: type=1400 audit(1789526414.683:2468): avc: denied { write } for pid=15450 comm="syz.6.3218" name="mjpeg" dev="configfs" ino=14871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 362.401863][ T30] audit: type=1400 audit(1789526414.713:2469): avc: denied { read write } for pid=15450 comm="syz.6.3218" name="bmaControls" dev="configfs" ino=53577 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 362.402615][ T30] audit: type=1400 audit(1789526414.713:2470): avc: denied { open } for pid=15450 comm="syz.6.3218" path="/134/config/usb_gadget/g1/functions/uvc.0/streaming/mjpeg/m1/bmaControls" dev="configfs" ino=53577 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 362.493335][ T30] audit: type=1400 audit(1789526414.803:2471): avc: denied { read } for pid=15455 comm="syz.5.3220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 362.777924][ T30] audit: type=1400 audit(1789526415.083:2472): avc: denied { ioctl } for pid=15470 comm="syz.8.3227" path="socket:[53598]" dev="sockfs" ino=53598 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 362.780675][T15472] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3227'. [ 362.780780][T15472] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.786541][T15473] netlink: 558 bytes leftover after parsing attributes in process `syz.3.3228'. [ 362.844412][T15472] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.102577][ T30] audit: type=1400 audit(1789526415.413:2473): avc: denied { setattr } for pid=15478 comm="syz.3.3240" name="task" dev="proc" ino=52106 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 363.469241][ T30] audit: type=1400 audit(1789526415.773:2474): avc: denied { getopt } for pid=15496 comm="syz.3.3235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 363.581110][T11340] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 363.743540][T11340] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 363.746963][T11340] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 363.747007][T11340] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 363.747028][T11340] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 363.747050][T11340] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 363.747087][T11340] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.183991][T15519] FAULT_INJECTION: forcing a failure. [ 364.183991][T15519] name failslab, interval 1, probability 0, space 0, times 0 [ 364.184027][T15519] CPU: 1 UID: 0 PID: 15519 Comm: syz.3.3246 Tainted: G L syzkaller #0 PREEMPT(full) [ 364.184056][T15519] Tainted: [L]=SOFTLOCKUP [ 364.184064][T15519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 364.184076][T15519] Call Trace: [ 364.184084][T15519] [ 364.184093][T15519] dump_stack_lvl+0x100/0x190 [ 364.184128][T15519] should_fail_ex.cold+0x5/0xa [ 364.184157][T15519] should_failslab+0xc2/0x120 [ 364.184182][T15519] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 364.184203][T15519] ? start_dirop+0x79/0xb0 [ 364.184227][T15519] ? alloc_inode+0x68/0x250 [ 364.184248][T15519] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 364.184282][T15519] alloc_inode+0x68/0x250 [ 364.184301][T15519] new_inode+0x22/0x1c0 [ 364.184324][T15519] debugfs_create_dir+0x9d/0x420 [ 364.184357][T15519] kvm_dev_ioctl+0x1286/0x1b50 [ 364.184391][T15519] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 364.184420][T15519] ? selinux_file_ioctl+0x13b/0x290 [ 364.184441][T15519] ? selinux_file_ioctl+0xb6/0x290 [ 364.184464][T15519] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 364.184488][T15519] __x64_sys_ioctl+0x18e/0x210 [ 364.184511][T15519] do_syscall_64+0x123/0x790 [ 364.184540][T15519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.184561][T15519] RIP: 0033:0x7fb72879e159 [ 364.184577][T15519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 364.184597][T15519] RSP: 002b:00007fb72971c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 364.184618][T15519] RAX: ffffffffffffffda RBX: 00007fb728a25fa0 RCX: 00007fb72879e159 [ 364.184631][T15519] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 364.184643][T15519] RBP: 00007fb72883506b R08: 0000000000000000 R09: 0000000000000000 [ 364.184654][T15519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 364.184666][T15519] R13: 00007fb728a26038 R14: 00007fb728a25fa0 R15: 00007fff74f60ff8 [ 364.184694][T15519] [ 364.184713][T15519] debugfs: out of free dentries, can not create directory '15519-5' [ 364.420959][ T5602] Bluetooth: hci5: command 0x0405 tx timeout [ 364.664615][T15529] overlayfs: failed to clone upperpath [ 364.731159][T11345] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 364.881985][T11345] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 364.883658][T11345] usb 4-1: config 0 has no interfaces? [ 364.883690][T11345] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.893967][T11345] usb 4-1: config 0 descriptor?? [ 365.113234][T11340] usb 4-1: USB disconnect, device number 23 [ 365.161260][ T30] audit: type=1400 audit(1789526417.463:2475): avc: denied { shutdown } for pid=15544 comm="syz.5.3257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 365.230945][T11345] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 365.242550][T15550] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3258'. [ 365.401773][T11345] usb 7-1: New USB device found, idVendor=046d, idProduct=0850, bcdDevice=61.47 [ 365.402522][T11345] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.403956][T11345] usb 7-1: config 0 descriptor?? [ 365.408427][T11345] gspca_main: STV06xx-2.14.0 probing 046d:0850 [ 365.980927][T11340] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 366.131620][T11340] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 366.132782][T11340] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.318876][T11342] usb 2-1: USB disconnect, device number 39 [ 366.370306][T11340] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 366.419687][T11345] gspca_stv06xx: HDCS-1000/1100 sensor detected [ 366.652794][T11342] usb 4-1: USB disconnect, device number 24 [ 366.872804][T11345] STV06xx 7-1:0.0: probe with driver STV06xx failed with error -71 [ 366.897336][T11345] usb 7-1: USB disconnect, device number 17 [ 367.260920][T11342] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 367.411893][T11342] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 367.412859][T11342] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 367.412889][T11342] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 367.412913][T11342] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 367.412934][T11342] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 367.412971][T11342] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.417098][T11342] usb 2-1: config 0 descriptor?? [ 367.800352][T15610] FAULT_INJECTION: forcing a failure. [ 367.800352][T15610] name failslab, interval 1, probability 0, space 0, times 0 [ 367.800390][T15610] CPU: 0 UID: 0 PID: 15610 Comm: syz.3.3284 Tainted: G L syzkaller #0 PREEMPT(full) [ 367.800428][T15610] Tainted: [L]=SOFTLOCKUP [ 367.800436][T15610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 367.800449][T15610] Call Trace: [ 367.800457][T15610] [ 367.800466][T15610] dump_stack_lvl+0x100/0x190 [ 367.800498][T15610] should_fail_ex.cold+0x5/0xa [ 367.800530][T15610] should_failslab+0xc2/0x120 [ 367.800556][T15610] __kvmalloc_node_noprof+0x113/0x9b0 [ 367.800579][T15610] ? lockdep_init_map_type+0x5c/0x250 [ 367.800604][T15610] ? lockdep_init_map_type+0x5c/0x250 [ 367.800627][T15610] ? alloc_netdev_mqs+0xb4e/0x15c0 [ 367.800656][T15610] ? __pfx_vti6_dev_setup+0x10/0x10 [ 367.800676][T15610] alloc_netdev_mqs+0xb4e/0x15c0 [ 367.800706][T15610] vti6_locate+0x3f2/0x6d0 [ 367.800728][T15610] ? __pfx_vti6_locate+0x10/0x10 [ 367.800755][T15610] vti6_siocdevprivate+0x581/0x760 [ 367.800778][T15610] ? __pfx_vti6_siocdevprivate+0x10/0x10 [ 367.800812][T15610] ? rcu_is_watching+0x13/0xc0 [ 367.800835][T15610] ? full_name_hash+0xbc/0x100 [ 367.800866][T15610] dev_ifsioc+0xc7a/0x1fc0 [ 367.800893][T15610] ? __pfx_dev_ifsioc+0x10/0x10 [ 367.800913][T15610] ? __pfx___mutex_lock+0x10/0x10 [ 367.800945][T15610] ? lock_acquire+0x1d1/0x380 [ 367.800966][T15610] ? dev_load+0x8e/0x240 [ 367.800983][T15610] ? dev_load+0x8e/0x240 [ 367.801006][T15610] dev_ioctl+0x70e/0x10e0 [ 367.801028][T15610] sock_ioctl+0x494/0x6b0 [ 367.801046][T15610] ? __pfx_sock_ioctl+0x10/0x10 [ 367.801071][T15610] ? selinux_file_ioctl+0x13b/0x290 [ 367.801093][T15610] ? selinux_file_ioctl+0xb6/0x290 [ 367.801116][T15610] ? __pfx_sock_ioctl+0x10/0x10 [ 367.801135][T15610] __x64_sys_ioctl+0x18e/0x210 [ 367.801156][T15610] do_syscall_64+0x123/0x790 [ 367.801185][T15610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.801205][T15610] RIP: 0033:0x7fb72879e159 [ 367.801222][T15610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 367.801241][T15610] RSP: 002b:00007fb72971c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 367.801260][T15610] RAX: ffffffffffffffda RBX: 00007fb728a25fa0 RCX: 00007fb72879e159 [ 367.801273][T15610] RDX: 0000200000000140 RSI: 00000000000089f1 RDI: 0000000000000004 [ 367.801285][T15610] RBP: 00007fb72883506b R08: 0000000000000000 R09: 0000000000000000 [ 367.801296][T15610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 367.801308][T15610] R13: 00007fb728a26038 R14: 00007fb728a25fa0 R15: 00007fff74f60ff8 [ 367.801334][T15610] [ 368.102322][T11342] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 368.127454][T11342] usb 2-1: USB disconnect, device number 40 [ 368.213321][T15613] fido_id[15613]: Failed to get parent HID device: No such file or directory [ 368.249795][T15617] fuse: fd is not a fuse device [ 368.374131][T15622] netlink: 104 bytes leftover after parsing attributes in process `syz.8.3290'. [ 368.536843][T15632] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3294'. [ 368.777488][T15647] syzkaller1: entered promiscuous mode [ 368.777510][T15647] syzkaller1: entered allmulticast mode [ 368.960919][T11342] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 369.111555][T11342] usb 2-1: Using ep0 maxpacket: 32 [ 369.112119][T11342] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 369.113373][T11342] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 369.113399][T11342] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 369.113423][T11342] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 369.113444][T11342] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 369.113469][T11342] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 369.115682][T11342] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.115702][T11342] usb 2-1: Product: syz [ 369.115716][T11342] usb 2-1: Manufacturer: syz [ 369.115731][T11342] usb 2-1: SerialNumber: syz [ 369.194906][T11342] usb 2-1: config 0 descriptor?? [ 369.387021][T15661] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15661 comm=syz.6.3305 [ 369.573944][T15669] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3307'. [ 369.659433][T11342] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 369.659478][T11342] input input35: Device does not respond to id packet M [ 369.690029][T15666] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15666 comm=syz.3.3317 [ 369.765832][T11342] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 369.765880][T11342] input input35: Device does not respond to id packet P [ 369.767389][T11342] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 369.767431][T11342] input input35: Device does not respond to id packet B [ 369.767727][T11342] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 369.767748][T11342] input input35: Device does not respond to id packet N [ 369.767985][T11342] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 369.768375][T11342] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 369.768614][T11342] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 369.829825][T11342] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 369.843173][T11342] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input35 [ 369.865483][T11342] usb 2-1: USB disconnect, device number 41 [ 370.333913][T15682] xt_connbytes: Forcing CT accounting to be enabled [ 370.486279][T15690] fuse: fd is not a fuse device [ 371.267038][T15706] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15706 comm=syz.8.3324 [ 371.451593][T15716] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3336'. [ 371.486072][T15719] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3326'. [ 371.504926][T15716] 8021q: adding VLAN 0 to HW filter on device bond8 [ 371.548029][T15722] FAULT_INJECTION: forcing a failure. [ 371.548029][T15722] name failslab, interval 1, probability 0, space 0, times 0 [ 371.548069][T15722] CPU: 0 UID: 0 PID: 15722 Comm: syz.3.3329 Tainted: G L syzkaller #0 PREEMPT(full) [ 371.548099][T15722] Tainted: [L]=SOFTLOCKUP [ 371.548107][T15722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 371.548122][T15722] Call Trace: [ 371.548130][T15722] [ 371.548140][T15722] dump_stack_lvl+0x100/0x190 [ 371.548174][T15722] should_fail_ex.cold+0x5/0xa [ 371.548204][T15722] should_failslab+0xc2/0x120 [ 371.548227][T15722] __kvmalloc_node_noprof+0x113/0x9b0 [ 371.548252][T15722] ? __pfx___mutex_lock+0x10/0x10 [ 371.548281][T15722] ? nf_hook_entries_grow+0x255/0x870 [ 371.548309][T15722] nf_hook_entries_grow+0x255/0x870 [ 371.548330][T15722] ? __pfx___mutex_lock+0x10/0x10 [ 371.548364][T15722] __nf_register_net_hook+0x112/0x780 [ 371.548389][T15722] nf_register_net_hook+0xdb/0x170 [ 371.548410][T15722] nf_register_net_hooks+0x5d/0xd0 [ 371.548434][T15722] nf_defrag_ipv6_enable+0xc1/0x130 [ 371.548462][T15722] nf_ct_netns_do_get+0x1f9/0x610 [ 371.548485][T15722] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 371.548510][T15722] ? xt_find_match+0x1dc/0x280 [ 371.548536][T15722] nf_ct_netns_get+0x3d/0x160 [ 371.548556][T15722] helper_mt_check+0x8b/0x150 [ 371.548581][T15722] ? __pfx_helper_mt_check+0x10/0x10 [ 371.548604][T15722] xt_check_match+0x117/0x1c0 [ 371.548629][T15722] find_check_entry.isra.0+0x356/0xa00 [ 371.548657][T15722] ? __pfx_find_check_entry.isra.0+0x10/0x10 [ 371.548688][T15722] ? kasan_quarantine_put+0x104/0x240 [ 371.548707][T15722] ? lockdep_hardirqs_on+0x7d/0x110 [ 371.548732][T15722] ? translate_table+0xb80/0x1770 [ 371.548751][T15722] ? translate_table+0xbd8/0x1770 [ 371.548773][T15722] ? kfree+0x22b/0x6d0 [ 371.548796][T15722] ? xt_check_table_hooks+0x206/0x330 [ 371.548820][T15722] translate_table+0xcb9/0x1770 [ 371.548852][T15722] ? __pfx_translate_table+0x10/0x10 [ 371.548879][T15722] do_ip6t_set_ctl+0x689/0xd00 [ 371.548899][T15722] ? nf_sockopt_find.isra.0+0x222/0x290 [ 371.548930][T15722] ? nf_sockopt_find.isra.0+0x222/0x290 [ 371.548961][T15722] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 371.548983][T15722] ? __mutex_unlock_slowpath+0x35d/0x930 [ 371.549011][T15722] ? futex_wait+0x11e/0x370 [ 371.549029][T15722] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 371.549065][T15722] ? nf_sockopt_find.isra.0+0x222/0x290 [ 371.549095][T15722] nf_setsockopt+0x8d/0xf0 [ 371.549123][T15722] ipv6_setsockopt+0x135/0x170 [ 371.549152][T15722] udpv6_setsockopt+0x64/0xb0 [ 371.549176][T15722] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 371.549204][T15722] do_sock_setsockopt+0xf3/0x1d0 [ 371.549230][T15722] __sys_setsockopt+0x195/0x220 [ 371.549257][T15722] __x64_sys_setsockopt+0xbd/0x160 [ 371.549276][T15722] ? do_syscall_64+0xae/0x790 [ 371.549298][T15722] ? lockdep_hardirqs_on+0x7d/0x110 [ 371.549322][T15722] do_syscall_64+0x123/0x790 [ 371.549346][T15722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.549364][T15722] RIP: 0033:0x7fb72879e159 [ 371.549380][T15722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 371.549398][T15722] RSP: 002b:00007fb72971c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 371.549416][T15722] RAX: ffffffffffffffda RBX: 00007fb728a25fa0 RCX: 00007fb72879e159 [ 371.549428][T15722] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000005 [ 371.549439][T15722] RBP: 00007fb72883506b R08: 00000000000003e0 R09: 0000000000000000 [ 371.549450][T15722] R10: 0000200000000a40 R11: 0000000000000246 R12: 0000000000000000 [ 371.549461][T15722] R13: 00007fb728a26038 R14: 00007fb728a25fa0 R15: 00007fff74f60ff8 [ 371.549487][T15722] [ 371.559367][T15722] xt_helper: cannot load conntrack support for proto=10 [ 371.565151][T15716] bond8 (unregistering): Released all slaves [ 371.678858][T15728] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3330'. [ 372.147615][T15730] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 372.147656][T15730] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 372.156138][T15730] bridge0: port 1(macsec1) entered blocking state [ 372.156226][T15730] bridge0: port 1(macsec1) entered forwarding state [ 372.156400][T15730] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 372.220927][T15730] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 372.873037][T15768] netlink: 9 bytes leftover after parsing attributes in process `syz.5.3355'. [ 372.874035][T15768] gretap0: entered promiscuous mode [ 372.920485][T15771] FAULT_INJECTION: forcing a failure. [ 372.920485][T15771] name failslab, interval 1, probability 0, space 0, times 0 [ 372.920524][T15771] CPU: 0 UID: 0 PID: 15771 Comm: syz.6.3342 Tainted: G L syzkaller #0 PREEMPT(full) [ 372.920551][T15771] Tainted: [L]=SOFTLOCKUP [ 372.920559][T15771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 372.920571][T15771] Call Trace: [ 372.920579][T15771] [ 372.920588][T15771] dump_stack_lvl+0x100/0x190 [ 372.920622][T15771] should_fail_ex.cold+0x5/0xa [ 372.920651][T15771] should_failslab+0xc2/0x120 [ 372.920678][T15771] __kvmalloc_node_noprof+0x113/0x9b0 [ 372.920700][T15771] ? __pfx___mutex_lock+0x10/0x10 [ 372.920726][T15771] ? nf_hook_entries_grow+0x255/0x870 [ 372.920749][T15771] nf_hook_entries_grow+0x255/0x870 [ 372.920770][T15771] ? __call_rcu_common.constprop.0+0x3f2/0x9b0 [ 372.920805][T15771] __nf_register_net_hook+0x112/0x780 [ 372.920828][T15771] nf_register_net_hook+0xdb/0x170 [ 372.920849][T15771] nf_register_net_hooks+0x5d/0xd0 [ 372.920872][T15771] nf_defrag_ipv6_enable+0xc1/0x130 [ 372.920897][T15771] nf_ct_netns_do_get+0x1f9/0x610 [ 372.920919][T15771] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 372.920946][T15771] ? xt_find_match+0x1dc/0x280 [ 372.920974][T15771] nf_ct_netns_get+0x3d/0x160 [ 372.920997][T15771] helper_mt_check+0x8b/0x150 [ 372.921025][T15771] ? __pfx_helper_mt_check+0x10/0x10 [ 372.921052][T15771] xt_check_match+0x117/0x1c0 [ 372.921079][T15771] find_check_entry.isra.0+0x356/0xa00 [ 372.921109][T15771] ? __pfx_find_check_entry.isra.0+0x10/0x10 [ 372.921141][T15771] ? kasan_quarantine_put+0x104/0x240 [ 372.921161][T15771] ? lockdep_hardirqs_on+0x7d/0x110 [ 372.921195][T15771] ? translate_table+0xb80/0x1770 [ 372.921216][T15771] ? translate_table+0xbd8/0x1770 [ 372.921237][T15771] ? kfree+0x22b/0x6d0 [ 372.921265][T15771] ? xt_check_table_hooks+0x206/0x330 [ 372.921295][T15771] translate_table+0xcb9/0x1770 [ 372.921332][T15771] ? __pfx_translate_table+0x10/0x10 [ 372.921363][T15771] do_ip6t_set_ctl+0x689/0xd00 [ 372.921385][T15771] ? nf_sockopt_find.isra.0+0x222/0x290 [ 372.921409][T15771] ? nf_sockopt_find.isra.0+0x222/0x290 [ 372.921436][T15771] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 372.921459][T15771] ? __mutex_unlock_slowpath+0x35d/0x930 [ 372.921488][T15771] ? futex_wait+0x11e/0x370 [ 372.921506][T15771] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 372.921545][T15771] ? nf_sockopt_find.isra.0+0x222/0x290 [ 372.921572][T15771] nf_setsockopt+0x8d/0xf0 [ 372.921599][T15771] ipv6_setsockopt+0x135/0x170 [ 372.921625][T15771] udpv6_setsockopt+0x64/0xb0 [ 372.921652][T15771] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 372.921683][T15771] do_sock_setsockopt+0xf3/0x1d0 [ 372.921712][T15771] __sys_setsockopt+0x195/0x220 [ 372.921740][T15771] __x64_sys_setsockopt+0xbd/0x160 [ 372.921762][T15771] ? do_syscall_64+0xae/0x790 [ 372.921787][T15771] ? lockdep_hardirqs_on+0x7d/0x110 [ 372.921812][T15771] do_syscall_64+0x123/0x790 [ 372.921840][T15771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.921861][T15771] RIP: 0033:0x7f65ab79e159 [ 372.921878][T15771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.921896][T15771] RSP: 002b:00007f65ac738028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 372.921916][T15771] RAX: ffffffffffffffda RBX: 00007f65aba25fa0 RCX: 00007f65ab79e159 [ 372.921929][T15771] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000005 [ 372.921940][T15771] RBP: 00007f65ab83506b R08: 00000000000003e0 R09: 0000000000000000 [ 372.921952][T15771] R10: 0000200000000a40 R11: 0000000000000246 R12: 0000000000000000 [ 372.921963][T15771] R13: 00007f65aba26038 R14: 00007f65aba25fa0 R15: 00007ffe5c5ceb48 [ 372.921991][T15771] [ 372.929848][T15771] xt_helper: cannot load conntrack support for proto=10 [ 373.092909][T15773] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3357'. [ 373.145951][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 373.276592][T15778] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3345'. [ 373.457284][T15778] 8021q: adding VLAN 0 to HW filter on device bond2 [ 373.481614][ T30] audit: type=1400 audit(1789526425.793:2476): avc: denied { mount } for pid=15790 comm="syz.5.3352" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 373.511569][T15779] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 373.553910][T15785] bond2 (unregistering): (slave dummy0): Releasing backup interface [ 373.563210][T15785] bond2 (unregistering): Released all slaves [ 373.732913][T11333] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 373.888739][T11333] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 373.911984][T11333] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.912011][T11333] usb 2-1: Product: syz [ 373.912027][T11333] usb 2-1: Manufacturer: syz [ 373.912041][T11333] usb 2-1: SerialNumber: syz [ 373.924611][T11333] usb 2-1: config 0 descriptor?? [ 374.165375][T11333] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 374.469614][T15815] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3361'. [ 374.493231][T15815] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 374.493262][T15815] IPv6: NLM_F_CREATE should be set when creating new route [ 374.493525][T15815] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3361'. [ 374.906869][T15823] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3364'. [ 375.061574][ T2236] block nbd0: Possible stuck request ffff888027f57000: control (read@0,1024B). Runtime 300 seconds [ 375.061614][ T2236] block nbd0: Possible stuck request ffff888027f571c0: control (read@1024,3072B). Runtime 300 seconds [ 375.104312][T15830] netlink: 'syz.8.3366': attribute type 10 has an invalid length. [ 375.162880][T15831] netlink: 'syz.8.3366': attribute type 10 has an invalid length. [ 375.205310][T11333] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 375.251479][T11333] usb 2-1: USB disconnect, device number 42 [ 375.298086][T15835] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 375.306317][T15832] overlayfs: cannot append lower layer [ 375.355126][T15830] dummy0: entered promiscuous mode [ 375.355385][T15830] dummy0: entered allmulticast mode [ 375.356364][T15830] team0: Port device dummy0 added [ 375.379022][T15831] dummy0 (unregistering): left promiscuous mode [ 375.379049][T15831] dummy0 (unregistering): left allmulticast mode [ 375.403011][T15831] team0: Port device dummy0 removed [ 375.710416][T15843] @ÿ: renamed from veth0_vlan (while UP) [ 375.710586][T15843] FAULT_INJECTION: forcing a failure. [ 375.710586][T15843] name failslab, interval 1, probability 0, space 0, times 0 [ 375.710613][T15843] CPU: 1 UID: 0 PID: 15843 Comm: syz.3.3369 Tainted: G L syzkaller #0 PREEMPT(full) [ 375.710650][T15843] Tainted: [L]=SOFTLOCKUP [ 375.710658][T15843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 375.710669][T15843] Call Trace: [ 375.710675][T15843] [ 375.710683][T15843] dump_stack_lvl+0x100/0x190 [ 375.710715][T15843] should_fail_ex.cold+0x5/0xa [ 375.710744][T15843] should_failslab+0xc2/0x120 [ 375.710769][T15843] __kmalloc_noprof+0xfc/0x840 [ 375.710792][T15843] ? kobject_get_path+0xcf/0x2c0 [ 375.710822][T15843] kobject_get_path+0xcf/0x2c0 [ 375.710862][T15843] kobject_uevent_env+0x287/0x18b0 [ 375.710889][T15843] ? kernfs_put+0x3f/0x60 [ 375.710922][T15843] kobject_rename+0x209/0x260 [ 375.710939][T15843] ? __pfx_kobject_rename+0x10/0x10 [ 375.710959][T15843] ? kernfs_put+0x3f/0x60 [ 375.710987][T15843] device_rename+0x130/0x250 [ 375.711009][T15843] netif_change_name+0x284/0x830 [ 375.711037][T15843] ? __pfx_netif_change_name+0x10/0x10 [ 375.711063][T15843] ? rcu_is_watching+0x13/0xc0 [ 375.711090][T15843] ? full_name_hash+0xbc/0x100 [ 375.711118][T15843] dev_change_name+0xb2/0x260 [ 375.711143][T15843] dev_ifsioc+0x16f1/0x1fc0 [ 375.711169][T15843] ? __pfx_dev_ifsioc+0x10/0x10 [ 375.711191][T15843] ? __pfx___mutex_lock+0x10/0x10 [ 375.711230][T15843] ? bpf_lsm_capable+0x9/0x10 [ 375.711263][T15843] dev_ioctl+0x223/0x10e0 [ 375.711288][T15843] sock_do_ioctl+0x1a0/0x280 [ 375.711315][T15843] ? __pfx_sock_do_ioctl+0x10/0x10 [ 375.711340][T15843] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 375.711366][T15843] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 375.711384][T15843] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 375.711409][T15843] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 375.711436][T15843] sock_ioctl+0x599/0x6b0 [ 375.711455][T15843] ? __pfx_sock_ioctl+0x10/0x10 [ 375.711476][T15843] ? selinux_file_ioctl+0x13b/0x290 [ 375.711494][T15843] ? selinux_file_ioctl+0xb6/0x290 [ 375.711517][T15843] ? __pfx_sock_ioctl+0x10/0x10 [ 375.711536][T15843] __x64_sys_ioctl+0x18e/0x210 [ 375.711558][T15843] do_syscall_64+0x123/0x790 [ 375.711585][T15843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.711606][T15843] RIP: 0033:0x7fb72879e159 [ 375.711622][T15843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 375.711650][T15843] RSP: 002b:00007fb72971c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 375.711671][T15843] RAX: ffffffffffffffda RBX: 00007fb728a25fa0 RCX: 00007fb72879e159 [ 375.711684][T15843] RDX: 00002000000000c0 RSI: 0000000000008923 RDI: 0000000000000005 [ 375.711696][T15843] RBP: 00007fb72883506b R08: 0000000000000000 R09: 0000000000000000 [ 375.711707][T15843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 375.711718][T15843] R13: 00007fb728a26038 R14: 00007fb728a25fa0 R15: 00007fff74f60ff8 [ 375.711745][T15843] [ 375.890347][T15845] netlink: 'syz.6.3370': attribute type 1 has an invalid length. [ 376.049866][T15845] 8021q: adding VLAN 0 to HW filter on device bond1 [ 376.133570][T15848] 8021q: adding VLAN 0 to HW filter on device bond1 [ 376.150420][T15848] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 376.175565][T15848] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 376.296430][T15854] mac80211_hwsim hwsim34 wlan1: entered promiscuous mode [ 376.314943][T15854] bond1: (slave wlan1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 376.557275][ T9449] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 376.629293][T15864] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3373'. [ 376.640067][T15864] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 376.640086][T15864] IPv6: NLM_F_CREATE should be set when creating new route [ 376.640460][T15864] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3373'. [ 376.745398][T15869] FAULT_INJECTION: forcing a failure. [ 376.745398][T15869] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 376.745435][T15869] CPU: 1 UID: 0 PID: 15869 Comm: syz.1.3390 Tainted: G L syzkaller #0 PREEMPT(full) [ 376.745464][T15869] Tainted: [L]=SOFTLOCKUP [ 376.745472][T15869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 376.745484][T15869] Call Trace: [ 376.745491][T15869] [ 376.745500][T15869] dump_stack_lvl+0x100/0x190 [ 376.745533][T15869] should_fail_ex.cold+0x5/0xa [ 376.745554][T15869] ? prepare_alloc_pages+0x16d/0x5b0 [ 376.745580][T15869] should_fail_alloc_page+0xeb/0x140 [ 376.745605][T15869] prepare_alloc_pages+0x1f0/0x5b0 [ 376.745634][T15869] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 376.745655][T15869] ? stack_trace_save+0x8e/0xc0 [ 376.745673][T15869] ? __pfx_stack_trace_save+0x10/0x10 [ 376.745691][T15869] ? stack_depot_save_flags+0x27/0x9f0 [ 376.745724][T15869] ? lock_acquire+0x1d1/0x380 [ 376.745745][T15869] ? validate_mm+0x1f1/0x4e0 [ 376.745777][T15869] ? kasan_save_stack+0x3f/0x50 [ 376.745799][T15869] ? kasan_save_stack+0x30/0x50 [ 376.745820][T15869] ? kasan_save_track+0x14/0x30 [ 376.745840][T15869] ? __kasan_slab_alloc+0x89/0x90 [ 376.745861][T15869] ? kmem_cache_alloc_noprof+0x269/0x6a0 [ 376.745883][T15869] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 376.745901][T15869] ? move_page_tables+0x2fac/0x4930 [ 376.745929][T15869] ? move_vma+0x57c/0x12e0 [ 376.745955][T15869] ? __do_sys_mremap+0x99f/0x1780 [ 376.745983][T15869] ? do_syscall_64+0x123/0x790 [ 376.746008][T15869] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.746045][T15869] ? look_up_lock_class+0x64/0x120 [ 376.746071][T15869] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 376.746096][T15869] ? policy_nodemask+0xed/0x4f0 [ 376.746122][T15869] alloc_pages_mpol+0x201/0x550 [ 376.746149][T15869] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 376.746172][T15869] ? do_raw_spin_lock+0x128/0x260 [ 376.746204][T15869] alloc_pages_noprof+0x1a/0x160 [ 376.746231][T15869] pte_alloc_one+0x1c/0x3d0 [ 376.746260][T15869] __pte_alloc+0x6d/0x380 [ 376.746278][T15869] ? __pfx___pte_alloc+0x10/0x10 [ 376.746298][T15869] ? __pfx___might_resched+0x10/0x10 [ 376.746316][T15869] ? move_page_tables+0x1936/0x4930 [ 376.746348][T15869] ? alloc_new_pud+0x217/0x320 [ 376.746378][T15869] move_page_tables+0x2fac/0x4930 [ 376.746421][T15869] ? __pfx_move_page_tables+0x10/0x10 [ 376.746464][T15869] ? lock_acquire+0x1d1/0x380 [ 376.746483][T15869] ? avc_has_perm_noaudit+0x56/0x3b0 [ 376.746515][T15869] copy_vma_and_data+0x2bf/0x780 [ 376.746548][T15869] ? __pfx_copy_vma_and_data+0x10/0x10 [ 376.746584][T15869] ? rcu_is_watching+0x13/0xc0 [ 376.746607][T15869] ? percpu_counter_add_batch+0xb9/0x230 [ 376.746633][T15869] ? __vm_enough_memory+0x184/0x390 [ 376.746661][T15869] move_vma+0x57c/0x12e0 [ 376.746692][T15869] ? __pfx_move_vma+0x10/0x10 [ 376.746728][T15869] ? selinux_mmap_addr+0x2b/0x110 [ 376.746748][T15869] ? security_mmap_addr+0x71/0x1e0 [ 376.746772][T15869] ? __get_unmapped_area+0x255/0x3e0 [ 376.746799][T15869] ? vrm_set_new_addr+0x1f5/0x2a0 [ 376.746828][T15869] mremap_to+0x234/0x4c0 [ 376.746857][T15869] ? __pfx_mremap_to+0x10/0x10 [ 376.746883][T15869] ? mas_walk+0x260/0x310 [ 376.746911][T15869] __do_sys_mremap+0x99f/0x1780 [ 376.746938][T15869] ? futex_wait+0xf0/0x370 [ 376.746960][T15869] ? __pfx___do_sys_mremap+0x10/0x10 [ 376.746991][T15869] ? percpu_counter_add_batch+0xb9/0x230 [ 376.747024][T15869] ? __pfx_do_futex+0x10/0x10 [ 376.747056][T15869] ? __sys_socket+0xac/0x260 [ 376.747075][T15869] ? xfd_validate_state+0x129/0x190 [ 376.747106][T15869] do_syscall_64+0x123/0x790 [ 376.747136][T15869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.747154][T15869] RIP: 0033:0x7fd63119e159 [ 376.747170][T15869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.747187][T15869] RSP: 002b:00007fd631fdc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 376.747207][T15869] RAX: ffffffffffffffda RBX: 00007fd631425fa0 RCX: 00007fd63119e159 [ 376.747220][T15869] RDX: 0000000000003021 RSI: 0000000000004000 RDI: 0000200000001000 [ 376.747232][T15869] RBP: 00007fd63123506b R08: 0000200000ffd000 R09: 0000000000000000 [ 376.747244][T15869] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 376.747255][T15869] R13: 00007fd631426038 R14: 00007fd631425fa0 R15: 00007ffd52ee23a8 [ 376.747281][T15869] [ 376.885239][T15872] FAULT_INJECTION: forcing a failure. [ 376.885239][T15872] name failslab, interval 1, probability 0, space 0, times 0 [ 376.885271][T15872] CPU: 0 UID: 0 PID: 15872 Comm: syz.3.3376 Tainted: G L syzkaller #0 PREEMPT(full) [ 376.885296][T15872] Tainted: [L]=SOFTLOCKUP [ 376.885302][T15872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 376.885314][T15872] Call Trace: [ 376.885321][T15872] [ 376.885329][T15872] dump_stack_lvl+0x100/0x190 [ 376.885358][T15872] should_fail_ex.cold+0x5/0xa [ 376.885380][T15872] ? keyctl_read_key+0x29a/0x510 [ 376.885410][T15872] should_failslab+0xc2/0x120 [ 376.885433][T15872] __kmalloc_noprof+0xfc/0x840 [ 376.885452][T15872] ? skcipher_walk_next+0xb50/0xe50 [ 376.885473][T15872] skcipher_walk_next+0xb50/0xe50 [ 376.885494][T15872] skcipher_walk_done+0x415/0x8c0 [ 376.885515][T15872] cbc_encrypt+0xf3/0x170 [ 376.885536][T15872] ? __pfx_cbc_encrypt+0x10/0x10 [ 376.885564][T15872] ? __virt_addr_valid+0x22a/0x430 [ 376.885581][T15872] ? __virt_addr_valid+0x22a/0x430 [ 376.885601][T15872] crypto_skcipher_encrypt+0xf2/0x160 [ 376.885627][T15872] derived_key_encrypt.constprop.0+0x509/0x6b0 [ 376.885654][T15872] ? __pfx_derived_key_encrypt.constprop.0+0x10/0x10 [ 376.885681][T15872] ? kasan_quarantine_put+0x104/0x240 [ 376.885699][T15872] ? lockdep_hardirqs_on+0x7d/0x110 [ 376.885726][T15872] ? __kasan_check_byte+0x13/0x50 [ 376.885750][T15872] ? get_derived_key+0x11b/0x140 [ 376.885775][T15872] encrypted_read+0x389/0x850 [ 376.885800][T15872] ? lock_acquire+0x1d1/0x380 [ 376.885817][T15872] ? keyctl_read_key+0x227/0x510 [ 376.885841][T15872] ? __pfx_encrypted_read+0x10/0x10 [ 376.885864][T15872] ? __pfx___might_resched+0x10/0x10 [ 376.885886][T15872] ? down_read+0x13b/0x4c0 [ 376.885910][T15872] ? __pfx_down_read+0x10/0x10 [ 376.885932][T15872] ? keyctl_read_key+0x2ac/0x510 [ 376.885955][T15872] ? keyctl_read_key+0x2ac/0x510 [ 376.885978][T15872] ? keyctl_read_key+0x427/0x510 [ 376.886007][T15872] keyctl_read_key+0x29a/0x510 [ 376.886033][T15872] __do_sys_keyctl+0x36d/0x5a0 [ 376.886051][T15872] do_syscall_64+0x123/0x790 [ 376.886076][T15872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.886093][T15872] RIP: 0033:0x7fb72879e159 [ 376.886107][T15872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.886123][T15872] RSP: 002b:00007fb72971c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 376.886140][T15872] RAX: ffffffffffffffda RBX: 00007fb728a25fa0 RCX: 00007fb72879e159 [ 376.886151][T15872] RDX: 0000200000000240 RSI: 0000000003ad0be5 RDI: 000000000000000b [ 376.886161][T15872] RBP: 00007fb72883506b R08: 0000000000000000 R09: 0000000000000000 [ 376.886171][T15872] R10: 00000000349b7f55 R11: 0000000000000246 R12: 0000000000000000 [ 376.886182][T15872] R13: 00007fb728a26038 R14: 00007fb728a25fa0 R15: 00007fff74f60ff8 [ 376.886211][T15872] [ 376.886244][T15872] trusted_key: encrypted_key: failed to encrypt (-12) [ 377.412526][T15886] netlink: 'syz.1.3381': attribute type 10 has an invalid length. [ 377.489750][T15886] netlink: 'syz.1.3381': attribute type 10 has an invalid length. [ 377.568536][T15886] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 377.572353][T15886] overlayfs: cannot append lower layer [ 378.175690][T15891] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3386'. [ 378.177159][T15891] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 378.186716][T15894] FAULT_INJECTION: forcing a failure. [ 378.186716][T15894] name failslab, interval 1, probability 0, space 0, times 0 [ 378.186748][T15894] CPU: 0 UID: 0 PID: 15894 Comm: syz.1.3398 Tainted: G L syzkaller #0 PREEMPT(full) [ 378.186793][T15894] Tainted: [L]=SOFTLOCKUP [ 378.186800][T15894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 378.186811][T15894] Call Trace: [ 378.186819][T15894] [ 378.186826][T15894] dump_stack_lvl+0x100/0x190 [ 378.186857][T15894] should_fail_ex.cold+0x5/0xa [ 378.186882][T15894] should_failslab+0xc2/0x120 [ 378.186905][T15894] __kmalloc_cache_noprof+0x91/0x6d0 [ 378.186932][T15894] ? sctp_add_bind_addr+0xae/0x3e0 [ 378.186959][T15894] sctp_add_bind_addr+0xae/0x3e0 [ 378.186984][T15894] sctp_copy_local_addr_list+0x349/0x550 [ 378.187013][T15894] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 378.187040][T15894] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 378.187067][T15894] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 378.187089][T15894] sctp_bind_addr_copy+0x331/0x530 [ 378.187117][T15894] sctp_connect_new_asoc+0x1c9/0x770 [ 378.187138][T15894] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 378.187167][T15894] sctp_sendmsg+0x1743/0x22e0 [ 378.187192][T15894] ? __pfx_sctp_sendmsg+0x10/0x10 [ 378.187209][T15894] ? sock_has_perm+0x25a/0x2f0 [ 378.187235][T15894] ? __pfx_sock_has_perm+0x10/0x10 [ 378.187275][T15894] ? __pfx_sctp_sendmsg+0x10/0x10 [ 378.187295][T15894] inet_sendmsg+0x11c/0x140 [ 378.187320][T15894] ____sys_sendmsg+0x9c9/0xbe0 [ 378.187343][T15894] ? __pfx_inet_sendmsg+0x10/0x10 [ 378.187368][T15894] ? __pfx_____sys_sendmsg+0x10/0x10 [ 378.187396][T15894] ? futex_unqueue+0x133/0x2c0 [ 378.187422][T15894] ___sys_sendmsg+0x190/0x1e0 [ 378.187448][T15894] ? __pfx____sys_sendmsg+0x10/0x10 [ 378.187472][T15894] ? __pfx___futex_wait+0x10/0x10 [ 378.187487][T15894] ? __pfx_try_to_wake_up+0x10/0x10 [ 378.187506][T15894] ? futex_hash+0x311/0x400 [ 378.187532][T15894] ? __fget_files+0x34/0x3d0 [ 378.187571][T15894] __sys_sendmmsg+0x20c/0x440 [ 378.187593][T15894] ? __pfx___sys_sendmmsg+0x10/0x10 [ 378.187612][T15894] ? file_init_path+0x48e/0x670 [ 378.187640][T15894] ? __pfx_do_futex+0x10/0x10 [ 378.187672][T15894] ? __sys_socket+0xac/0x260 [ 378.187688][T15894] ? xfd_validate_state+0x129/0x190 [ 378.187713][T15894] __x64_sys_sendmmsg+0x9c/0x100 [ 378.187733][T15894] ? lockdep_hardirqs_on+0x7d/0x110 [ 378.187756][T15894] do_syscall_64+0x123/0x790 [ 378.187786][T15894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.187805][T15894] RIP: 0033:0x7fd63119e159 [ 378.187820][T15894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 378.187835][T15894] RSP: 002b:00007fd631fdc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 378.187853][T15894] RAX: ffffffffffffffda RBX: 00007fd631425fa0 RCX: 00007fd63119e159 [ 378.187864][T15894] RDX: 0000000000000001 RSI: 0000200000002f00 RDI: 0000000000000004 [ 378.187874][T15894] RBP: 00007fd63123506b R08: 0000000000000000 R09: 0000000000000000 [ 378.187884][T15894] R10: 0000000010004040 R11: 0000000000000246 R12: 0000000000000000 [ 378.187894][T15894] R13: 00007fd631426038 R14: 00007fd631425fa0 R15: 00007ffd52ee23a8 [ 378.187917][T15894] [ 378.463234][T15899] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 379.047282][T15910] kAFS: No cell specified [ 379.555638][T15930] netlink: 'syz.3.3401': attribute type 10 has an invalid length. [ 379.600762][T15930] team0: Port device dummy0 added [ 379.637082][T15930] netlink: 'syz.3.3401': attribute type 10 has an invalid length. [ 379.689283][T15933] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 379.744468][T15935] overlayfs: cannot append lower layer [ 380.006055][T15930] team0: Port device dummy0 removed [ 380.334944][T15943] FAULT_INJECTION: forcing a failure. [ 380.334944][T15943] name failslab, interval 1, probability 0, space 0, times 0 [ 380.334981][T15943] CPU: 1 UID: 0 PID: 15943 Comm: syz.3.3406 Tainted: G L syzkaller #0 PREEMPT(full) [ 380.335010][T15943] Tainted: [L]=SOFTLOCKUP [ 380.335018][T15943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 380.335031][T15943] Call Trace: [ 380.335038][T15943] [ 380.335046][T15943] dump_stack_lvl+0x100/0x190 [ 380.335080][T15943] should_fail_ex.cold+0x5/0xa [ 380.335107][T15943] should_failslab+0xc2/0x120 [ 380.335134][T15943] __kmalloc_cache_noprof+0x91/0x6d0 [ 380.335167][T15943] ? selinux_netlbl_sk_security_free+0x12c/0x3f0 [ 380.335191][T15943] ? selinux_netlbl_sock_genattr+0xe7/0x4e0 [ 380.335226][T15943] selinux_netlbl_sock_genattr+0xe7/0x4e0 [ 380.335250][T15943] selinux_netlbl_socket_post_create+0xb0/0x1c0 [ 380.335276][T15943] security_mptcp_add_subflow+0x91/0x210 [ 380.335298][T15943] mptcp_subflow_create_socket+0x1a9/0xa30 [ 380.335326][T15943] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 380.335348][T15943] ? avc_has_perm_noaudit+0x145/0x3b0 [ 380.335377][T15943] ? look_up_lock_class+0x64/0x120 [ 380.335409][T15943] __mptcp_nmpc_sk+0x17f/0x880 [ 380.335432][T15943] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 380.335453][T15943] ? __lock_acquire+0x5c0/0x1f40 [ 380.335483][T15943] mptcp_connect+0x7e/0xa20 [ 380.335514][T15943] __inet_stream_connect+0x208/0xf90 [ 380.335546][T15943] ? lock_acquire+0x1d1/0x380 [ 380.335569][T15943] ? __pfx___inet_stream_connect+0x10/0x10 [ 380.335598][T15943] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 380.335630][T15943] ? __local_bh_enable_ip+0xa5/0x120 [ 380.335656][T15943] inet_stream_connect+0x57/0xa0 [ 380.335686][T15943] __sys_connect_file+0x146/0x1a0 [ 380.335711][T15943] __sys_connect+0x141/0x170 [ 380.335732][T15943] ? __pfx___sys_connect+0x10/0x10 [ 380.335774][T15943] __x64_sys_connect+0x72/0xb0 [ 380.335794][T15943] ? lockdep_hardirqs_on+0x7d/0x110 [ 380.335821][T15943] do_syscall_64+0x123/0x790 [ 380.335854][T15943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.335874][T15943] RIP: 0033:0x7fb72879e159 [ 380.335891][T15943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 380.335910][T15943] RSP: 002b:00007fb72971c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 380.335929][T15943] RAX: ffffffffffffffda RBX: 00007fb728a25fa0 RCX: 00007fb72879e159 [ 380.335942][T15943] RDX: 000000000000001c RSI: 0000200000000180 RDI: 0000000000000005 [ 380.335954][T15943] RBP: 00007fb72883506b R08: 0000000000000000 R09: 0000000000000000 [ 380.335966][T15943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 380.335977][T15943] R13: 00007fb728a26038 R14: 00007fb728a25fa0 R15: 00007fff74f60ff8 [ 380.336005][T15943] [ 380.625164][T15950] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3408'. [ 380.625184][T15950] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3408'. [ 380.915842][T15957] netlink: 'syz.3.3413': attribute type 1 has an invalid length. [ 380.940741][T15957] 8021q: adding VLAN 0 to HW filter on device bond2 [ 380.973111][T15957] 8021q: adding VLAN 0 to HW filter on device bond2 [ 380.973410][T15957] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 380.974262][T15957] bond2: (slave wireguard0): Error -95 calling set_mac_address [ 381.030919][T15962] mac80211_hwsim hwsim31 wlan1: entered promiscuous mode [ 381.051687][T15962] bond2: (slave wlan1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 381.507169][T15972] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3427'. [ 383.355998][T16022] netlink: 'syz.1.3426': attribute type 1 has an invalid length. [ 383.437215][T16015] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3428'. [ 383.437241][T16015] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3428'. [ 383.440961][T16022] 8021q: adding VLAN 0 to HW filter on device bond3 [ 383.727681][T16035] fuse: fd is not a fuse device [ 383.933864][T16027] 8021q: adding VLAN 0 to HW filter on device bond3 [ 383.936330][T16027] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 383.937224][T16027] bond3: (slave wireguard0): Error -95 calling set_mac_address [ 384.199088][T16028] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 384.214579][T16028] bond3: (slave wlan1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 386.075698][T16081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.079122][T16081] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.082666][T16081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 386.137303][T16081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 386.146879][T16081] veth1_vlan: left promiscuous mode [ 386.147693][T16081] veth0_vlan: left promiscuous mode [ 386.150408][T16081] veth0_vlan: entered promiscuous mode [ 386.152585][T16081] veth1_vlan: entered promiscuous mode [ 386.158039][T16081] veth1_macvtap: left promiscuous mode [ 386.158927][T16081] veth0_macvtap: left promiscuous mode [ 386.159655][T16081] veth0_macvtap: entered promiscuous mode [ 386.160484][T16081] veth1_macvtap: entered promiscuous mode [ 386.167730][T16081] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 386.168433][T16081] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 386.169191][T16081] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 386.169938][T16081] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 386.173348][T16081] 8021q: adding VLAN 0 to HW filter on device bond1 [ 386.174843][T16081] 8021q: adding VLAN 0 to HW filter on device bond2 [ 386.199499][T16081] 8021q: adding VLAN 0 to HW filter on device bond3 [ 386.202291][T16081] 8021q: adding VLAN 0 to HW filter on device bond4 [ 386.205126][T16081] 8021q: adding VLAN 0 to HW filter on device bond5 [ 386.206387][T16081] 8021q: adding VLAN 0 to HW filter on device bond6 [ 386.224779][T16008] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.224857][T16008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.228364][T16008] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.228437][T16008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.474401][T16020] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 386.474434][T16020] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.474755][T10164] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 386.474780][T10164] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.474809][T10164] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 386.474849][T10164] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.474878][T10164] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 386.474900][T10164] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.775029][T16125] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3456'. [ 387.887045][T16120] mac80211_hwsim hwsim34 wlan1: left promiscuous mode [ 387.912581][T16120] 8021q: adding VLAN 0 to HW filter on device bond1 [ 388.002047][T16125] 8021q: adding VLAN 0 to HW filter on device bond4 [ 388.020314][T16129] bond4 (unregistering): Released all slaves [ 388.221658][T11328] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 388.371559][T11328] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 388.372673][T11328] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 388.372721][T11328] usb 4-1: config 1 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 388.372740][T11328] usb 4-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 388.372775][T11328] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.822980][T11328] dvb_ttusb_budget: cmd xter failed, receive error -22 [ 388.822994][T11328] dvb_ttusb_budget: ttusb_init_controller: error [ 388.823001][T11328] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 389.031221][T11328] DVB: Unable to find symbol stv0299_attach() [ 389.198612][T11328] DVB: Unable to find symbol tda8083_attach() [ 389.198631][T11328] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 390.982500][T11343] usb 4-1: USB disconnect, device number 25 [ 392.644450][T16197] fuse: fd is not a fuse device [ 392.819999][T16198] 8021q: adding VLAN 0 to HW filter on device bond1 [ 392.857226][T16198] 8021q: adding VLAN 0 to HW filter on device bond2 [ 392.859773][T16008] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.859844][T16008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.459234][T16218] jffs2: notice: (16218) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 1 orphan) and 2 of xref (0 dead, 1 orphan) found. [ 393.485085][ T30] audit: type=1400 audit(1789526445.793:2477): avc: denied { write } for pid=16217 comm="syz.3.3485" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 393.960916][T11343] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 394.112207][T11343] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 394.113658][T11343] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 394.113704][T11343] usb 2-1: config 1 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 394.113723][T11343] usb 2-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 394.113757][T11343] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.174711][T11328] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 394.321791][T11328] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 394.322671][T11328] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 394.322707][T11328] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.325842][T11328] usb 4-1: config 0 descriptor?? [ 394.363701][T11328] pwc: Askey VC010 type 2 USB webcam detected. [ 394.565626][T11343] dvb_ttusb_budget: cmd xter failed, receive error -22 [ 394.565647][T11343] dvb_ttusb_budget: ttusb_init_controller: error [ 394.565658][T11343] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 394.710498][T11343] DVB: Unable to find symbol stv0299_attach() [ 394.737347][T11328] pwc: recv_control_msg error -32 req 02 val 2b00 [ 394.751080][T11328] pwc: recv_control_msg error -32 req 02 val 2700 [ 394.751882][T11328] pwc: recv_control_msg error -32 req 02 val 2c00 [ 394.753146][T11328] pwc: recv_control_msg error -32 req 04 val 1000 [ 394.758453][T11328] pwc: recv_control_msg error -32 req 04 val 1300 [ 394.874895][T11343] DVB: Unable to find symbol tda8083_attach() [ 394.874911][T11343] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 394.964137][T11328] pwc: recv_control_msg error -71 req 02 val 2000 [ 394.964510][T11328] pwc: recv_control_msg error -71 req 02 val 2100 [ 394.966192][T11328] pwc: recv_control_msg error -71 req 04 val 1500 [ 394.966612][T11328] pwc: recv_control_msg error -71 req 02 val 2500 [ 394.966954][T11328] pwc: recv_control_msg error -71 req 02 val 2400 [ 394.967423][T11328] pwc: recv_control_msg error -71 req 02 val 2600 [ 394.967755][T11328] pwc: recv_control_msg error -71 req 02 val 2900 [ 394.968103][T11328] pwc: recv_control_msg error -71 req 02 val 2800 [ 394.968641][T11328] pwc: recv_control_msg error -71 req 04 val 1100 [ 394.968966][T11328] pwc: recv_control_msg error -71 req 04 val 1200 [ 395.064347][T11328] pwc: Registered as video103. [ 395.066609][T11328] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input36 [ 395.094648][T11328] usb 4-1: USB disconnect, device number 26 [ 395.396498][T16148] syz.6.3462 (16148) used greatest stack depth: 17152 bytes left [ 395.546913][T16008] wlan1: Trigger new scan to find an IBSS to join [ 395.770935][T11345] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 395.930952][T11345] usb 7-1: Using ep0 maxpacket: 16 [ 395.931456][T11345] usb 7-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 395.932377][T11345] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.932395][T11345] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.932414][T11345] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.936458][T11345] usb 7-1: config 0 descriptor?? [ 396.345820][T11345] apple 0003:05AC:024B.0017: unknown global tag 0xe [ 396.345843][T11345] apple 0003:05AC:024B.0017: item 0 1 1 14 parsing failed [ 396.346343][T11345] apple 0003:05AC:024B.0017: parse failed [ 396.346423][T11345] apple 0003:05AC:024B.0017: probe with driver apple failed with error -22 [ 396.551416][T11345] usb 7-1: USB disconnect, device number 18 [ 396.652540][T11343] usb 2-1: USB disconnect, device number 43 [ 396.807337][T16269] overlayfs: failed to clone upperpath [ 397.453054][T16285] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3519'. [ 398.409633][T16306] jffs2: notice: (16306) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (0 unchecked, 1 orphan) and 3 of xref (0 dead, 1 orphan) found. [ 398.437084][ T30] audit: type=1400 audit(1789526450.743:2478): avc: denied { write } for pid=16305 comm="syz.6.3517" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 398.585418][ T149] wlan1: Trigger new scan to find an IBSS to join [ 398.836074][T16321] FAULT_INJECTION: forcing a failure. [ 398.836074][T16321] name failslab, interval 1, probability 0, space 0, times 0 [ 398.836109][T16321] CPU: 0 UID: 0 PID: 16321 Comm: syz.1.3523 Tainted: G L syzkaller #0 PREEMPT(full) [ 398.836136][T16321] Tainted: [L]=SOFTLOCKUP [ 398.836142][T16321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 398.836154][T16321] Call Trace: [ 398.836161][T16321] [ 398.836169][T16321] dump_stack_lvl+0x100/0x190 [ 398.836200][T16321] should_fail_ex.cold+0x5/0xa [ 398.836226][T16321] should_failslab+0xc2/0x120 [ 398.836250][T16321] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 398.836273][T16321] ? proc_alloc_inode+0x25/0x200 [ 398.836300][T16321] ? __pfx_proc_alloc_inode+0x10/0x10 [ 398.836328][T16321] proc_alloc_inode+0x25/0x200 [ 398.836351][T16321] alloc_inode+0x68/0x250 [ 398.836369][T16321] new_inode+0x22/0x1c0 [ 398.836390][T16321] proc_pid_make_inode+0x22/0x160 [ 398.836414][T16321] ? d_lookup+0xe7/0x190 [ 398.836433][T16321] proc_fd_instantiate+0x57/0x230 [ 398.836458][T16321] proc_fill_cache+0x2a3/0x3a0 [ 398.836484][T16321] ? __pfx_proc_fd_instantiate+0x10/0x10 [ 398.836506][T16321] ? __pfx_proc_fill_cache+0x10/0x10 [ 398.836532][T16321] ? _raw_spin_unlock+0x28/0x50 [ 398.836562][T16321] proc_readfd_common+0x1ef/0x5f0 [ 398.836593][T16321] ? __pfx_proc_fd_instantiate+0x10/0x10 [ 398.836620][T16321] ? __pfx_proc_readfd_common+0x10/0x10 [ 398.836644][T16321] ? down_read_killable+0x35d/0x520 [ 398.836676][T16321] ? __pfx_down_read_killable+0x10/0x10 [ 398.836705][T16321] ? avc_policy_seqno+0x9/0x20 [ 398.836738][T16321] iterate_dir+0x296/0xae0 [ 398.836764][T16321] __x64_sys_getdents64+0x13b/0x2c0 [ 398.836784][T16321] ? __x64_sys_futex+0x358/0x4d0 [ 398.836811][T16321] ? __pfx___x64_sys_getdents64+0x10/0x10 [ 398.836833][T16321] ? __pfx_filldir64+0x10/0x10 [ 398.836863][T16321] do_syscall_64+0x123/0x790 [ 398.836892][T16321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.836913][T16321] RIP: 0033:0x7fd63119e159 [ 398.836931][T16321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.836949][T16321] RSP: 002b:00007fd631fdc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 398.836968][T16321] RAX: ffffffffffffffda RBX: 00007fd631425fa0 RCX: 00007fd63119e159 [ 398.836981][T16321] RDX: 00000000000000fe RSI: 0000200000000380 RDI: 0000000000000004 [ 398.836993][T16321] RBP: 00007fd63123506b R08: 0000000000000000 R09: 0000000000000000 [ 398.837005][T16321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 398.837016][T16321] R13: 00007fd631426038 R14: 00007fd631425fa0 R15: 00007ffd52ee23a8 [ 398.837044][T16321] [ 399.206420][ T30] audit: type=1400 audit(1789526451.513:2479): avc: denied { unlink } for pid=11202 comm="syz-executor" name="ublkc0" dev="devtmpfs" ino=2993 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 399.367038][T16337] MTD: Couldn't look up './dev/mtdblock0': -2 [ 400.739719][T16012] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.739756][T16012] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.950498][T16374] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3544'. [ 400.974666][T16012] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.974700][T16012] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.548210][ T149] wlan1: Creating new IBSS network, BSSID ce:5f:ac:0a:ba:9d [ 401.743441][T16012] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.743495][T16012] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.849030][T16012] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.849063][T16012] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.115819][T16012] bridge_slave_1: left allmulticast mode [ 402.115849][T16012] bridge_slave_1: left promiscuous mode [ 402.119378][T16012] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.143635][T16012] bridge_slave_0: left allmulticast mode [ 402.143665][T16012] bridge_slave_0: left promiscuous mode [ 402.143839][T16012] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.330552][T16012] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 402.332057][T16012] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 402.350754][T16012] bond0 (unregistering): Released all slaves [ 402.361370][T16012] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 402.367141][T16012] bond1 (unregistering): Released all slaves [ 402.376647][T16012] bond2 (unregistering): Released all slaves [ 402.770216][T16012] hsr_slave_0: left promiscuous mode [ 402.779218][T16012] hsr_slave_1: left promiscuous mode [ 402.779734][T16012] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 402.779748][T16012] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 402.780107][T16012] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 402.780121][T16012] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 402.789260][T16012] veth1_vlan: left promiscuous mode [ 402.789318][T16012] @ÿ: left promiscuous mode [ 403.070155][T16012] team0 (unregistering): Port device team_slave_1 removed [ 403.084023][T16012] team0 (unregistering): Port device team_slave_0 removed [ 403.586303][T16421] FAULT_INJECTION: forcing a failure. [ 403.586303][T16421] name failslab, interval 1, probability 0, space 0, times 0 [ 403.586346][T16421] CPU: 1 UID: 0 PID: 16421 Comm: syz.6.3561 Tainted: G L syzkaller #0 PREEMPT(full) [ 403.586375][T16421] Tainted: [L]=SOFTLOCKUP [ 403.586383][T16421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 403.586395][T16421] Call Trace: [ 403.586403][T16421] [ 403.586410][T16421] dump_stack_lvl+0x100/0x190 [ 403.586444][T16421] should_fail_ex.cold+0x5/0xa [ 403.586468][T16421] should_failslab+0xc2/0x120 [ 403.586489][T16421] __kmalloc_noprof+0xfc/0x840 [ 403.586506][T16421] ? sk_prot_alloc+0x10b/0x2a0 [ 403.586536][T16421] sk_prot_alloc+0x10b/0x2a0 [ 403.586567][T16421] sk_alloc+0x36/0xe80 [ 403.586591][T16421] can_create+0x1e5/0x630 [ 403.586619][T16421] __sock_create+0x339/0x860 [ 403.586652][T16421] __sys_socket+0x14d/0x260 [ 403.586670][T16421] ? fdget_pos+0x2c0/0x380 [ 403.586695][T16421] ? __pfx___sys_socket+0x10/0x10 [ 403.586712][T16421] ? ksys_write+0x1ac/0x250 [ 403.586731][T16421] ? __pfx_ksys_write+0x10/0x10 [ 403.586756][T16421] __x64_sys_socket+0x72/0xb0 [ 403.586773][T16421] ? lockdep_hardirqs_on+0x7d/0x110 [ 403.586796][T16421] do_syscall_64+0x123/0x790 [ 403.586820][T16421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.586839][T16421] RIP: 0033:0x7f65ab79e159 [ 403.586857][T16421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 403.586877][T16421] RSP: 002b:00007f65ac738028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 403.586899][T16421] RAX: ffffffffffffffda RBX: 00007f65aba25fa0 RCX: 00007f65ab79e159 [ 403.586912][T16421] RDX: 0000000000000002 RSI: 0000000000000002 RDI: 000000000000001d [ 403.586923][T16421] RBP: 00007f65ab83506b R08: 0000000000000000 R09: 0000000000000000 [ 403.586935][T16421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 403.586947][T16421] R13: 00007f65aba26038 R14: 00007f65aba25fa0 R15: 00007ffe5c5ceb48 [ 403.586988][T16421] [ 405.144199][ T2236] block nbd0: Possible stuck request ffff888027f57000: control (read@0,1024B). Runtime 330 seconds [ 405.144224][ T2236] block nbd0: Possible stuck request ffff888027f571c0: control (read@1024,3072B). Runtime 330 seconds [ 406.369210][T16448] FAULT_INJECTION: forcing a failure. [ 406.369210][T16448] name failslab, interval 1, probability 0, space 0, times 0 [ 406.369246][T16448] CPU: 1 UID: 0 PID: 16448 Comm: syz.1.3571 Tainted: G L syzkaller #0 PREEMPT(full) [ 406.369272][T16448] Tainted: [L]=SOFTLOCKUP [ 406.369280][T16448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 406.369291][T16448] Call Trace: [ 406.369298][T16448] [ 406.369307][T16448] dump_stack_lvl+0x100/0x190 [ 406.369342][T16448] should_fail_ex.cold+0x5/0xa [ 406.369370][T16448] should_failslab+0xc2/0x120 [ 406.369393][T16448] kmem_cache_alloc_noprof+0x92/0x6a0 [ 406.369417][T16448] ? ceph_msg_new2+0x3e/0x4f0 [ 406.369444][T16448] ceph_msg_new2+0x3e/0x4f0 [ 406.369469][T16448] msgpool_alloc+0xa8/0x200 [ 406.369493][T16448] ? __pfx_msgpool_alloc+0x10/0x10 [ 406.369516][T16448] ? __pfx_msgpool_alloc+0x10/0x10 [ 406.369540][T16448] mempool_init_node+0x2f7/0x6f0 [ 406.369573][T16448] ? __pfx_msgpool_free+0x10/0x10 [ 406.369597][T16448] mempool_create_node_noprof+0xe9/0x1b0 ** replaying previous printk message ** [ 406.369597][T16448] mempool_create_node_noprof+0xe9/0x1b0 [ 406.369627][T16448] ? __pfx_msgpool_alloc+0x10/0x10 [ 406.369653][T16448] ceph_msgpool_init+0xdc/0x1d0 [ 406.369679][T16448] ceph_osdc_init+0x4f1/0xa00 [ 406.369702][T16448] ceph_create_client+0x281/0x370 [ 406.369723][T16448] ceph_get_tree+0x1a4/0x1fd0 [ 406.369749][T16448] ? bpf_lsm_capable+0x9/0x10 [ 406.369778][T16448] ? security_capable+0x80/0x260 [ 406.369814][T16448] vfs_get_tree+0x92/0x320 [ 406.369845][T16448] vfs_cmd_create+0xd7/0x2a0 [ 406.369867][T16448] __do_sys_fsconfig+0x55a/0xcb0 [ 406.369889][T16448] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 406.369922][T16448] do_syscall_64+0x123/0x790 [ 406.369950][T16448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.369971][T16448] RIP: 0033:0x7fd63119e159 [ 406.369988][T16448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 406.370014][T16448] RSP: 002b:00007fd631fdc028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 406.370034][T16448] RAX: ffffffffffffffda RBX: 00007fd631425fa0 RCX: 00007fd63119e159 [ 406.370045][T16448] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 406.370055][T16448] RBP: 00007fd63123506b R08: 0000000000000000 R09: 0000000000000000 [ 406.370065][T16448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 406.370074][T16448] R13: 00007fd631426038 R14: 00007fd631425fa0 R15: 00007ffd52ee23a8 [ 406.370098][T16448] [ 406.425613][ T31] INFO: task syz.2.1501:10034 blocked for more than 143 seconds. [ 406.425638][ T31] Tainted: G L syzkaller #0 [ 406.425647][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 406.425656][ T31] task:syz.2.1501 state:D stack:27296 pid:10034 tgid:10032 ppid:5604 task_flags:0x400040 flags:0x00080002 [ 406.425710][ T31] Call Trace: [ 406.425716][ T31] [ 406.425725][ T31] __schedule+0x1259/0x6920 [ 406.425750][ T31] ? __lock_acquire+0x5c0/0x1f40 [ 406.425776][ T31] ? do_raw_spin_lock+0x128/0x260 [ 406.425803][ T31] ? lock_acquire+0x1d1/0x380 [ 406.425821][ T31] ? __pfx___schedule+0x10/0x10 [ 406.425840][ T31] ? find_held_lock+0x2b/0x80 [ 406.425865][ T31] ? schedule+0x225/0x2c0 [ 406.425887][ T31] schedule+0xdd/0x2c0 [ 406.425907][ T31] schedule_preempt_disabled+0x13/0x30 [ 406.425926][ T31] __mutex_lock+0xccb/0x1bd0 [ 406.425958][ T31] ? sync_bdevs+0x153/0x480 [ 406.425979][ T31] ? sync_bdevs+0x1ff/0x480 [ 406.426000][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 406.426526][ T31] ? iput.part.0+0x1a0/0x1050 [ 406.426556][ T31] ? sync_bdevs+0x117/0x480 [ 406.426580][ T31] ? sync_bdevs+0x153/0x480 [ 406.426596][ T31] sync_bdevs+0x153/0x480 [ 406.426619][ T31] ksys_sync+0xb0/0xf0 [ 406.426646][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 406.426676][ T31] ? do_syscall_64+0xb4/0x790 [ 406.426699][ T31] __do_sys_sync+0xe/0x20 [ 406.426723][ T31] do_syscall_64+0x123/0x790 [ 406.426751][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.426771][ T31] RIP: 0033:0x7f999cb9e159 [ 406.426787][ T31] RSP: 002b:00007f999da1b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 406.426805][ T31] RAX: ffffffffffffffda RBX: 00007f999ce25fa0 RCX: 00007f999cb9e159 [ 406.426816][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 406.426825][ T31] RBP: 00007f999ce25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 406.426836][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 406.426846][ T31] R13: 00007f999ce26038 R14: 00007f999ce25fa0 R15: 00007fffde948558 [ 406.426870][ T31] [ 406.474362][ T31] [ 406.474362][ T31] Showing all locks held in the system: [ 406.474377][ T31] locks held by pr/ttyS0/16: 2, last CPU#1: [ 406.474390][ T31] #0: ffffffff8edd87b8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x49/0x60 [ 406.474440][ T31] #1: ffffffff9bc6bc78 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x64/0xc0 [ 406.474496][ T31] locks held by khungtaskd/31: 1, last CPU#0: [ 406.474507][ T31] #0: ffffffff8edec4a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 406.474578][ T31] locks held by getty/5359: 2, on CPU#1: [ 406.474589][ T31] #0: ffff8880342540a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 406.474626][ T31] #1: ffffc9000321e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 406.474672][ T31] locks held by udevd/5588: 1, on CPU#0: [ 406.474683][ T31] #0: ffff888027f01350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 406.474729][ T31] locks held by syz-executor/6672: 4, last CPU#0: [ 406.474740][ T31] #0: ffff88807e7bc460 (sb_writers#6){.+.+}-{0:0}, at: filename_unlinkat+0x1ad/0x730 [ 406.474787][ T31] #1: ffff8880473c7520 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: filename_unlinkat+0x262/0x730 [ 406.474836][ T31] #2: ffffffff8f909538 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x262/0x460 [ 406.474879][ T31] #3: ffffffff8edec4a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 406.474930][ T31] locks held by syz.2.1501/10034: 1, on CPU#0: [ 406.474941][ T31] #0: ffff888027f01350 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 406.474994][ T31] locks held by syz.6.3572/16451: 1, last CPU#0: [ 406.475006][ T31] #0: ffff88807a3cc378 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x22c/0xa00 [ 406.475047][ T31] [ 406.475051][ T31] ============================================= [ 406.475051][ T31] [ 406.475059][ T31] NMI backtrace for cpu 0 [ 406.475071][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 406.475093][ T31] Tainted: [L]=SOFTLOCKUP [ 406.475099][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 406.475108][ T31] Call Trace: [ 406.475115][ T31] [ 406.475121][ T31] dump_stack_lvl+0x100/0x190 [ 406.475146][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 406.475171][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 406.475193][ T31] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 406.475215][ T31] sys_info+0x141/0x190 [ 406.475231][ T31] watchdog+0xcb1/0x1030 [ 406.475254][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 406.475274][ T31] ? __pfx_watchdog+0x10/0x10 [ 406.475293][ T31] ? __kthread_parkme+0x18f/0x230 [ 406.475315][ T31] ? kthread+0x13a/0x450 [ 406.475335][ T31] ? __pfx_watchdog+0x10/0x10 [ 406.475351][ T31] kthread+0x373/0x450 [ 406.475372][ T31] ? __pfx_kthread+0x10/0x10 [ 406.475395][ T31] ret_from_fork+0x730/0xd60 [ 406.475414][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 406.475434][ T31] ? __switch_to+0x800/0x10f0 [ 406.475461][ T31] ? __pfx_kthread+0x10/0x10 [ 406.475484][ T31] ret_from_fork_asm+0x1a/0x30 [ 406.475512][ T31] [ 406.475530][ T31] Sending NMI from CPU 0 to CPUs 1: [ 406.475551][ C1] NMI backtrace for cpu 1 [ 406.475564][ C1] CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(full) [ 406.475583][ C1] Tainted: [L]=SOFTLOCKUP [ 406.475589][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 406.475597][ C1] RIP: 0010:delay_tsc+0x32/0xc0 [ 406.475614][ C1] Code: fd bf 01 00 00 00 41 54 55 53 e8 b9 86 07 f6 e8 74 7e 01 00 41 89 c4 0f 01 f9 66 90 48 c1 e2 20 48 09 c2 48 89 d5 eb 16 f3 90 01 00 00 00 e8 94 86 07 f6 e8 4f 7e 01 00 44 39 e0 75 36 0f 01 [ 406.475627][ C1] RSP: 0000:ffffc90000157950 EFLAGS: 00000082 [ 406.475639][ C1] RAX: 8000000000000002 RBX: 0000011035d0869e RCX: 0000000000000000 [ 406.475649][ C1] RDX: 0000000000000004 RSI: ffffffff8c622e00 RDI: 0000000000000001 [ 406.475658][ C1] RBP: 0000011035d07d5d R08: 0000000000000005 R09: 0000000000000000 [ 406.475667][ C1] R10: 00000000000007df R11: 205d383434363154 R12: 0000000000000001 [ 406.475676][ C1] R13: 0000000000000af1 R14: fffffbfff378d7e9 R15: dffffc0000000000 [ 406.475686][ C1] FS: 0000000000000000(0000) GS:ffff888123c59000(0000) knlGS:0000000000000000 [ 406.475700][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 406.475710][ C1] CR2: 0000001b32815ff8 CR3: 0000000072626000 CR4: 00000000003526f0 [ 406.475719][ C1] DR0: 0000000000010000 DR1: 00000000000001fa DR2: 0000000000000002 [ 406.475728][ C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 406.475738][ C1] Call Trace: [ 406.475743][ C1] [ 406.475750][ C1] wait_for_lsr+0xf3/0x210 [ 406.475769][ C1] serial8250_fifo_wait_for_lsr_thre+0x5f/0xd0 [ 406.475787][ C1] __serial8250_console_fifo_write+0xa5/0x290 [ 406.475804][ C1] ? __pfx_io_serial_out+0x10/0x10 [ 406.475820][ C1] serial8250_console_write+0xf46/0x1330 [ 406.475842][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 406.475861][ C1] ? __nbcon_context_update_unsafe+0x1b6/0x220 [ 406.475884][ C1] ? __pfx___nbcon_context_update_unsafe+0x10/0x10 [ 406.475908][ C1] nbcon_emit_next_record+0x8f7/0xa70 [ 406.475924][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 406.475938][ C1] ? nbcon_context_try_acquire+0x3a6/0xc60 [ 406.475964][ C1] ? do_raw_spin_lock+0x70/0x260 [ 406.475984][ C1] ? __pfx___cant_migrate+0x10/0x10 [ 406.476003][ C1] ? _raw_spin_lock_irqsave+0x42/0x60 [ 406.476020][ C1] nbcon_emit_one+0x1a8/0x2b0 [ 406.476033][ C1] ? __pfx_nbcon_emit_one+0x10/0x10 [ 406.476049][ C1] nbcon_kthread_func+0x613/0x7d0 [ 406.476064][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 406.476080][ C1] ? __kthread_parkme+0x18f/0x230 [ 406.476097][ C1] ? kthread+0x13a/0x450 [ 406.476114][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 406.476127][ C1] kthread+0x373/0x450 [ 406.476144][ C1] ? __pfx_kthread+0x10/0x10 [ 406.476163][ C1] ret_from_fork+0x730/0xd60 [ 406.476178][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 406.476195][ C1] ? __switch_to+0x800/0x10f0 [ 406.476213][ C1] ? __pfx_kthread+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 406.476232][ C1] ret_from_fork_asm+0x1a/0x30 [ 406.476251][ C1] [ 406.482270][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 407.443493][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 407.454169][ T31] Tainted: [L]=SOFTLOCKUP [ 407.458578][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 407.468636][ T31] Call Trace: [ 407.471943][ T31] [ 407.474873][ T31] dump_stack_lvl+0x100/0x190 [ 407.479568][ T31] vpanic+0x553/0x970 [ 407.483555][ T31] ? __pfx_vpanic+0x10/0x10 [ 407.488061][ T31] panic+0xd1/0xe0 [ 407.491771][ T31] ? __pfx_panic+0x10/0x10 [ 407.496170][ T31] ? nmi_trigger_cpumask_backtrace+0x263/0x2a0 [ 407.502312][ T31] ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0 [ 407.508622][ T31] ? watchdog.cold+0x1ec/0x234 [ 407.513371][ T31] watchdog.cold+0x1fd/0x234 [ 407.517949][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 407.523741][ T31] ? __pfx_watchdog+0x10/0x10 [ 407.528401][ T31] ? __kthread_parkme+0x18f/0x230 [ 407.533412][ T31] ? kthread+0x13a/0x450 [ 407.537654][ T31] ? __pfx_watchdog+0x10/0x10 [ 407.542315][ T31] kthread+0x373/0x450 [ 407.546387][ T31] ? __pfx_kthread+0x10/0x10 [ 407.550969][ T31] ret_from_fork+0x730/0xd60 [ 407.555565][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 407.560773][ T31] ? __switch_to+0x800/0x10f0 [ 407.565561][ T31] ? __pfx_kthread+0x10/0x10 [ 407.570152][ T31] ret_from_fork_asm+0x1a/0x30 [ 407.574910][ T31] [ 407.578029][ T31] Kernel Offset: disabled [ 407.582416][ T31] Rebooting in 86400 seconds..